Dell Force10 S4810P Command Reference Guide FTOS 8.3.12.1 For The S4810 System

: Dell Dell-Force10-S4810P-Command-Reference-Guide-136515 dell-force10-s4810p-command-reference-guide-136515 dell pdf

Open the PDF directly: View PDF .
Page Count: 1580

Download
Open PDF In Browser	View PDF

FTOS Command Line Reference
Guide for the S4810 System
FTOS 8.3.12.1
Publication Date: November 2012

Notes, Cautions, and Warnings
NOTE: A NOTE indicates important information that helps you make better use of your computer.
CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to
avoid the problem.
WARNING: A WARNING indicates a potential for property damage, personal injury, or death.

Information in this publication is subject to change without notice.
© 2012 Dell Force10. All rights reserved.
Reproduction of these materials in any manner whatsoever without the written permission of Dell Inc. is strictly forbidden.
Trademarks used in this text: Dell™, the DELL logo, Dell Precision™, OptiPlex™, Latitude™, PowerEdge™, PowerVault™,
PowerConnect™, OpenManage™, EqualLogic™, KACE™, FlexAddress™ and Vostro™ are trademarks of Dell Inc. Intel®, Pentium®, Xeon®,
Core™ and Celeron® are registered trademarks of Intel Corporation in the U.S. and other countries. AMD® is a registered trademark and AMD
Opteron™, AMD Phenom™, and AMD Sempron™ are trademarks of Advanced Micro Devices, Inc. Microsoft®, Windows®, Windows
Server®, MS-DOS® and Windows Vista® are either trademarks or registered trademarks of Microsoft Corporation in the United States and/or
other countries. Red Hat Enterprise Linux® and Enterprise Linux® are registered trademarks of Red Hat, Inc. in the United States and/or other
countries. Novell® is a registered trademark and SUSE ™ is a trademark of Novell Inc. in the United States and other countries. Oracle® is a
registered trademark of Oracle Corporation and/or its affiliates. Citrix®, Xen®, XenServer® and XenMotion® are either registered trademarks
or trademarks of Citrix Systems, Inc. in the United States and/or other countries. VMware®, Virtual SMP®, vMotion®, vCenter®, and vSphere®
are registered trademarks or trademarks of VMWare, Inc. in the United States or other countries.
Other trademarks and trade names may be used in this publication to refer to either the entities claiming the marks and names or their products.
Dell Inc. disclaims any proprietary interest in trademarks and trade names other than its own.
November 2012

1 About this Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13
Objectives . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Audience . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Information Symbols . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14
Related Documents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14

2 CLI Basics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15
Accessing the Command Line . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15
Multiple Configuration Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .16
Navigating the Command Line Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .16
Obtaining Help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Using the Keyword No . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .19
Filtering show Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .19
Displaying All Output . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20
Filtering Command Output Multiple Times . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20
Command Modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
EXEC Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
EXEC Privilege Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .21
CONFIGURATION Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .21
INTERFACE Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .21
LINE Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
TRACE-LIST Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .22
MAC ACCESS LIST Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .23
IP ACCESS LIST Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .23
ROUTE-MAP Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .23
PREFIX-LIST Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .24
AS-PATH ACL Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .24
IP COMMUNITY LIST Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .24
REDIRECT-LIST Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .24
SPANNING TREE Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .25
Per-VLAN SPANNING TREE Plus Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .25
RAPID SPANNING TREE Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .25
MULTIPLE SPANNING TREE Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .26
PROTOCOL GVRP Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .26
ROUTER OSPF Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .26
ROUTER RIP Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .26
ROUTER ISIS Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .27
ROUTER BGP Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .27
VLT DOMAIN Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .27
Determining the Chassis Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .28

3 File Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .29
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Basic File Management Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .29

| 3

www.dell.com | support.dell.com

Upgrading the C-Series FPGA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .61

4 Control and Monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .65
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .65

5 802.1ag . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .153
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153

6 802.1X. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .165
Important Points to Remember . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .166

7 Access Control Lists (ACL) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .181
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 181
Commands Common to all ACL Types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .181
Common IP ACL Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .184
Standard IP ACL Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .188
Extended IP ACL Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .196
Common MAC Access List Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .231
Standard MAC ACL Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .234
Extended MAC ACL Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .238
IP Prefix List Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .244
Route Map Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .250
AS-Path Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .269
IP Community List Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .272

8 Bidirectional Forwarding Detection (BFD). . . . . . . . . . . . . . . . . . . . . . . .277
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 277
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 277

9 Border Gateway Protocol IPv4 (BGPv4) . . . . . . . . . . . . . . . . . . . . . . . . .293
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 293
BGPv4 Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .293
MBGP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .378
BGP Extended Communities (RFC 4360) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .403

10 Bare Metal Provisioning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .413
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 413
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 413

4

|

11 Content Addressable Memory (CAM) . . . . . . . . . . . . . . . . . . . . . . . . . . .417
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 417
CAM Profile Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .417
Important Points to Remember . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .418
CAM IPv4flow Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .431
CAM Layer 2 ACL Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .434

12 Control Plane Policing (CoPP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .439
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 439
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 439

13 Data Center Bridging. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .445
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 445
DCB Command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .445
PFC Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .445
ETS Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .446
DCBX Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .446

14 Dynamic Host Configuration Protocol (DHCP) . . . . . . . . . . . . . . . . . . . .479
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 479
Commands to Configure the System to be a DHCP Server . . . . . . . . . . . . . . . . . . . . .479
Commands to Configure Secure DHCP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .486

15 Equal Cost Multi-Path . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .495
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 495
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 495

16 FIP Snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .505
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 505
FIP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .505

17 Force10 Resilient Ring Protocol (FRRP) . . . . . . . . . . . . . . . . . . . . . . . .517
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 517
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 517
Important Points to Remember . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .517

18 GARP VLAN Registration (GVRP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . .525
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 525
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 525
Important Points to Remember . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .526

| 5

www.dell.com | support.dell.com

19 High Availability (HA). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .535
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 535
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 535

20 ICMP Message Types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .547
21 Internet Group Management Protocol (IGMP) . . . . . . . . . . . . . . . . . . . .549
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 549
IGMP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .549
Important Points to Remember . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .549
IGMP Snooping Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .561
Important Points to Remember for IGMP Snooping . . . . . . . . . . . . . . . . . . . . . . . .561
Important Points to Remember for IGMP Querier . . . . . . . . . . . . . . . . . . . . . . . . . .562

22 Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .567
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 567
Basic Interface Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .567
Port Channel Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .629
Time Domain Reflectometer (TDR) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .640
Important Points to Remember . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .640
UDP Broadcast . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 642
Important Points to Remember . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .642

23 IPv4 Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .647
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 647
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 647

24 IPv6 Access Control Lists (IPv6 ACLs) . . . . . . . . . . . . . . . . . . . . . . . . .707
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 707
Important Points to Remember . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .707
IPv6 ACL Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .708
IPv6 Route Map Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .734

25 IPv6 Basics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .739
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 739
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 739

26 IPv6 Border Gateway Protocol (IPv6 BGP). . . . . . . . . . . . . . . . . . . . . . .761
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 761
IPv6 BGP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .761
IPv6 MBGP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .827

6

|

27 iSCSI Optimization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .853
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 853

28 Intermediate System to Intermediate System (IS-IS) . . . . . . . . . . . . . . .861
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 861
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 861

29 Link Aggregation Control Protocol (LACP) . . . . . . . . . . . . . . . . . . . . . . .907
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 907
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 907

30 Layer 2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .915
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 915
MAC Addressing Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .915
Virtual LAN (VLAN) Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .936
Far-End Failure Detection (FEFD) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .947
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 947
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 947

31 Link Layer Discovery Protocol (LLDP) . . . . . . . . . . . . . . . . . . . . . . . . . .955
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 955
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 955
LLDP-MED Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .965

32 Multicast Source Discovery Protocol (MSDP). . . . . . . . . . . . . . . . . . . . .975
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 975
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 975

33 Multiple Spanning Tree Protocol (MSTP) . . . . . . . . . . . . . . . . . . . . . . . .987
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 987
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 987

34 Multicast . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1003
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1003
IPv4 Multicast Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1003
IPv6 Multicast Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1013

35 Neighbor Discovery Protocol (NDP) . . . . . . . . . . . . . . . . . . . . . . . . . . .1019
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1019
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1019

| 7

www.dell.com | support.dell.com

36 Object Tracking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1027
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1027
IPv4 Object Tracking Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1027
IPv6 Object Tracking Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1039

37 Open Shortest Path First (OSPFv2) . . . . . . . . . . . . . . . . . . . . . . . . . . .1045
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1045
OSPFv2 Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1045

38 PIM-Sparse Mode (PIM-SM). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1107
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1107
IPv4 PIM-Sparse Mode Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1107
IPv6 PIM-Sparse Mode Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1130

39 Port Monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1143
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1143
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1143
Important Points to Remember . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1143

40 Private VLAN (PVLAN) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1149
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1149
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1149
Private VLAN Concepts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1149

41 Per-VLAN Spanning Tree Plus (PVST+). . . . . . . . . . . . . . . . . . . . . . . . 1159
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1159
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1159

42 Quality of Service (QoS) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1173
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1173
Global Configuration Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1173
Per-Port QoS Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1174
Policy-Based QoS Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1184
Important Points to Remember — multicast-bandwidth option . . . . . . . . . . . . . . . 1199
Queue-Level Debugging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1223

43 Routing Information Protocol (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . .1233
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1233
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1233

8

|

44 Remote Monitoring (RMON) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1253
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1253
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1253

45 Rapid Spanning Tree Protocol (RSTP) . . . . . . . . . . . . . . . . . . . . . . . . .1267
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1267
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1267

46 Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1279
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1279
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1279
AAA Accounting Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1279
Authorization and Privilege Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1283
Authentication and Password Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1287
RADIUS Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1300
TACACS+ Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1306
Port Authentication (802.1X) Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1309
Important Points to Remember . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1310
SSH Server and SCP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1319
Trace List Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1334
Secure DHCP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1344

47 Service Provider Bridging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1349
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1349
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1349
Important Points to Remember . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1349

48 sFlow. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1355
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1355
Important Points to Remember . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1355
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1356

49 Simple Network Management Protocol and Syslog . . . . . . . . . . . . . . .1367
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1367
SNMP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1367
Important Points to Remember . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1368
Syslog Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1385

50 S-Series Stacking Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1399
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1399
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1399

| 9

www.dell.com | support.dell.com

51 Storm Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1409
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1409
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1409
Important Points to Remember . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1409

52 Spanning Tree Protocol (STP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1419
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1419
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1419

53 System Time and Date . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1431
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1431
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1431

54 VLAN Stacking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1449
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1449
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1449
Important Points to Remember . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1449

55 S4810 u-Boot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1461
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1461
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1461

56 Uplink Failure Detection (UFD) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1465
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1465
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1465

57 Virtual Link Trunking (VLT) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1475
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1475
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1475

58 Virtual Router Redundancy Protocol (VRRP) . . . . . . . . . . . . . . . . . . . .1487
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1487
IPv4 VRRP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1487
IPv6 VRRP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1500

59 S-Series Debugging and Diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . .1505
Offline Diagnostic Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1505
Important Points to Remember . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1505
Buffer Tuning Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1508
Hardware Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1513

10

|

60 SNMP Traps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1525
61 Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1529
62 Command Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1565

| 11

12

|

www.dell.com | support.dell.com

1
About this Guide
This book provides information on the FTOS Command Line Interface (CLI). It includes
some information on the protocols and features found in FTOS and on the Dell Force10
systems supported by FTOS (C-Series c, E-Series e, and S-Series s).
This chapter includes:
•
•
•
•

Objectives
Audience
Conventions
Related Documents

Objectives
This document is intended as a reference guide for the FTOS command line interface (CLI)
commands, with detailed syntax statements, along with usage information and sample output.
For details on when to use the commands, refer to the FTOS Configuration Guide. That guide
contains a chapter with a list of the RFCs and MIBs (management information base files)
supported.

Audience
This document is intended for system administrators who are responsible for configuring or
maintaining networks. This guide assumes you are knowledgeable in Layer 2 and Layer 3
networking technologies.

About this Guide | 13

www.dell.com | support.dell.com

Conventions
This document uses the following conventions to describe command syntax:
Convention

Description

keyword

Keywords are in bold and should be entered in the CLI as listed.

parameter

Parameters are in italics and require a number or word to be entered in the CLI.

{X}

Keywords and parameters within braces must be entered in the CLI.

[X]

Keywords and parameters within brackets are optional.

x|y

Keywords and parameters separated by bar require you to choose one.

x||y

Keywords and parameters separated by a double bar enables you to choose any or all of them.

Information Symbols
Table 1-1 describes symbols contained in this guide.
Table 1-1.

Information Symbols

Symbol

Brief

Description

c

C-Series

This symbol indicates that the selected feature is supported on the C-Series.

e

E-Series

This symbol indicates that the selected feature is supported on the E-Series TeraScale AND
E-Series ExaScale.

et

E-Series
TeraScale

This symbol indicates that the selected feature is supported on the E-Series TeraScale platform
only.

ex

E-Series
ExaScale

This symbol indicates that the selected feature is supported on the E-Series ExaScale platform
only.

s

S-Series

This symbol indicates that the selected feature is supported on the S-Series.

Related Documents
For more information about the system, refer to the following documents:
•
•
•

14

|

About this Guide

FTOS Configuration Guide

Installation and maintenance guides for your system
Release Notes for your system and FTOS version

2
CLI Basics
This chapter describes the command structure and command modes. FTOS commands are in
a text-based interface that allows you to use launch commands, change the command modes,
and configure interfaces and protocols.
This chapter covers the following topics:
•
•
•
•
•
•
•

Accessing the Command Line
Multiple Configuration Users
Navigating the Command Line Interface
Obtaining Help
Using the Keyword No
Filtering show Commands
Command Modes

Accessing the Command Line
When the system boots successfully, you are positioned on the command line in the EXEC
mode and not prompted to log in. You can access the commands through a serial console port
or a Telnet session. When you Telnet into the switch, you are prompted to enter a login name
and password.
The following text is an example of a successful Telnet login session.
telnet 172.31.1.53
Trying 172.31.1.53...
Connected to 172.31.1.53.
Escape character is '^]'.
Login: username
Password: FTOS>

Once you log into the switch, the prompt provides you with current command-level
information (refer to Table 2-1).

CLI Basics | 15

www.dell.com | support.dell.com

Multiple Configuration Users
When a user enters the CONFIGURATION mode and another user(s) is already in that
configuration mode, FTOS generates an alert warning message similar to the following:
FTOS#conf
% Warning: The following users are currently configuring the system:
User "" on line
User "admin" on
User "admin" on
User "Irene" on
FTOS#conf

console0
line vty0 ( 123.12.1.123 )
line vty1 ( 123.12.1.123 )
line vty3 ( 123.12.1.321 )

When another user enters the CONFIGURATION mode, FTOS sends a message similar to
the following, where the user in this case is “admin” on vty2:
% Warning: User "admin" on line vty2 "172.16.1.210" is in configuration

Navigating the Command Line Interface
The Command Line Interface (CLI) prompt displayed by FTOS is comprised of:
•
•

“hostname”— the initial part of the prompt, “FTOS” by default. You can change
it with the hostname command, as described in hostname.
The second part of the prompt, reflecting the current CLI mode, as shown in
Table 2-1.

The CLI prompt changes as you move up and down the levels of the command structure.
Table 2-1 lists the prompts and their corresponding command levels, called modes. Starting
with the CONFIGURATION mode, the command prompt adds modifiers to further identify
the mode. The command modes are explained in Command Modes.
Note: Some of the following modes are not available on C-Series or S-Series.

Table 2-1.

16

|

CLI Basics

Command Prompt and Corresponding Command Mode

Prompt

CLI Command Mode

FTOS>

EXEC

FTOS#

EXEC Privilege

FTOS(conf)#

CONFIGURATION

Table 2-1.

Command Prompt and Corresponding Command Mode

Prompt

CLI Command Mode

FTOS(conf-if)#
FTOS(conf-if-gi-0/0)#
FTOS(conf-if-te-0/0)#
FTOS(conf-if-fo-0/0)#
FTOS(conf-if-lo-0)#
FTOS(conf-if-nu-0)#
FTOS(conf-if-po-0)#
FTOS(conf-if-vl-0)#
FTOS(conf-if-so-0/0)#
FTOS(conf-if-ma-0/0)#
FTOS(conf-if-range)#

INTERFACE

FTOS(config-ext-nacl)#
FTOS(config-std-nacl)#

IP ACCESS LIST

FTOS(config-line-aux)#
FTOS(config-line-console)#
FTOS(config-line-vty)#

LINE

FTOS(config-ext-macl)#
FTOS(config-std-macl)#

MAC ACCESS LIST

FTOS(config-mon-sess)#

MONITOR SESSION

FTOS(config-span)#

STP

FTOS(config-mstp)#

MULTIPLE SPANNING TREE

FTOS(config-pvst)#

Per-VLAN SPANNING TREE Plus

FTOS(config-rstp)#

RAPID SPANNING TREE

FTOS(config-gvrp)#

PROTOCOL GVRP

FTOS(config-route-map)#

ROUTE-MAP

FTOS(conf-nprefixl)#

PREFIX-LIST

FTOS(conf-router_rip)#

ROUTER RIP

FTOS(conf-redirect-list)#

REDIRECT

FTOS(conf-router_bgp)#

ROUTER BGP

FTOS(conf-router_ospf)#

ROUTER OSPF

FTOS(conf-router_isis)#

ROUTER ISIS

FTOS(conf-trace-acl)#

TRACE-LIST

FTOS(config-vlt-domain)

VLT DOMAIN

Obtaining Help
As soon as you are in a command mode there are several ways to access help.
•

To obtain a list of keywords at any command mode, do the following:

CLI Basics | 17

www.dell.com | support.dell.com

•

•
•
•

Enter a ? at the prompt or after a keyword. There must always be a space
before the ?.
To obtain a list of keywords with a brief functional description, do the following:
• Enter help at the prompt.
To obtain a list of available options, do the following:
• Type a keyword followed by a space and a ?
Type a partial keyword followed by a ?
• A display of keywords beginning with the partial keyword is listed.

The following text illustrates the results of entering ip ? at the prompt.
FTOS(conf)#ip ?
access-list
as-path
community-list
domain-list
domain-lookup
domain-name
fib
ftp
host
max-frag-count
multicast-routing
name-server
pim
prefix-list
radius
redirect-list
route
scp
source-route
ssh
tacacs
telnet
tftp
trace-group
trace-list
FTOS(conf)#ip

Named access-list
BGP autonomous system path filter
Add a community list entry
Domain name to complete unqualified host name
Enable IP Domain Name System hostname translation
Define the default domain name
FIB configuration commands
FTP configuration commands
Add an entry to the ip hostname table
Max. fragmented packets allowed in IP re-assembly
Enable IP multicast forwarding
Specify address of name server to use
Protocol Independent Multicast
Build a prefix list
Interface configuration for RADIUS
Named redirect-list
Establish static routes
SCP configuration commands
Process packets with source routing header options
SSH configuration commands
Interface configuration for TACACS+
Specify telnet options
TFTP configuration commands
Named trace-list
Named trace-list

When entering commands, you can take advantage of the following timesaving features:
•
•

•
•
•

18

|

CLI Basics

The commands are not case sensitive.
You can enter partial (truncated) command keywords. For example, you can enter
int gig int interface for the interface gigabitethernet interface
command.
Use the TAB key to complete keywords in commands.
Use the up arrow key to display the last enabled command.
Use either the Backspace key or the Delete key to erase the previous character.

Use the left and right arrow keys to navigate left or right in the FTOS command line.
Table 2-2 defines the key combinations valid at the FTOS command line.
Table 2-2.

Short-cut Keys and their Actions

Key
Combination

Action

CNTL-A

Moves the cursor to the beginning of the command line.

CNTL-B

Moves the cursor back one character.

CNTL-D

Deletes character at cursor.

CNTL-E

Moves the cursor to the end of the line.

CNTL-F

Moves the cursor forward one character.

CNTL-I

Completes a keyword.

CNTL-K

Deletes all characters from the cursor to the end of the command line.

CNTL-L

Re-enters the previous command.

CNTL-N

Return to more recent commands in the history buffer after recalling commands
with Ctrl-P or the up arrow key

CNTL-P

Recalls commands, beginning with the last command

CNTL-R

Re-enters the previous command.

CNTL-U

Deletes the line.

CNTL-W

Deletes the previous word.

CNTL-X

Deletes the line.

CNTL-Z

Ends continuous scrolling of command outputs.

Esc B

Moves the cursor back one word.

Esc F

Moves the cursor forward one word.

Esc D

Deletes all characters from the cursor to the end of the word.

Using the Keyword No
To disable, delete, or return to default values, use the no form of the commands. For most
commands, if you type the keyword no in front of the command, you will disable that
command or delete it from the running configuration. In this document, the no form of the
command is discussed in the Command Syntax portion of the command description.

Filtering show Commands
You can filter the display output of a show command to find specific information, to display
certain information only, or to begin the command output at the first instance of a regular
expression or phrase.

CLI Basics | 19

www.dell.com | support.dell.com

When you execute a show command, followed by a pipe ( | ) and one of the parameters listed
below and a regular expression, the resulting output either excludes or includes those
parameters, as defined by the parameter:
•
•
•
•
•
•

— display additional configuration information
except— display only text that does not match the pattern (or regular expression)
find — search for the first occurrence of a pattern
grep — display text that matches a pattern
no-more — do not paginate the display output
save — copy output to a file for future use
display

Note: FTOS accepts a space before or after the pipe, no space before or after the
pipe, or any combination. For example:
FTOS#command | grep gigabit |except regular-expression | find
regular-expression

The grep command option has an ignore-case sub-option that makes the search
case-insensitive. For example, the commands:
•
•

show run | grep Ethernet would return a search result with instances containing a
capitalized “Ethernet,” such as interface GigabitEthernet 0/0.
show run | grep ethernet would not return the search result, above, because it only
searches for instances containing a non-capitalized “ethernet.”

Executing the command show run | grep Ethernet ignore-case would return instances containing
both “Ethernet” and “ethernet.”

Displaying All Output
To display the output all at once (not one screen at a time), use the no-more after the pipe. This
is similar to the terminal length screen-length command except that the no-more option affects
the output of just the specified command.For example:
FTOS#show running-config|no-more

Filtering Command Output Multiple Times
You can filter a single command output multiple times. Place the save option as the last filter.
For example:
FTOS# command | grep regular-expression | except regular-expression | grep
other-regular-expression | find regular-expression | no-more | save

20

|

CLI Basics

Command Modes
To navigate to various CLI modes, you need to use specific commands to launch each mode.
Navigation to these modes is discussed in the following sections.
Note: Some of the following modes are not available on C-Series or S-Series.

EXEC Mode
When you initially log in to the switch, by default, you are logged into the EXEC mode. This
mode allows you to view settings and to enter the EXEC Privilege mode to configure the
device. While you are in the EXEC mode, the > prompt is displayed following the
“hostname” prompt, as described above, which is “FTOS” by default. You can change it with
the hostname command. Refer to the command hostname. Each mode prompt is preceded by
the hostname.

EXEC Privilege Mode
The enable command accesses the EXEC Privilege mode. If an administrator has configured
an “Enable” password, you will be prompted to enter it here.
The EXEC Privilege mode allows you to access all commands accessible in EXEC mode,
plus other commands, such as to clear ARP entries and IP addresses. In addition, you can
access the CONFIGURATION mode to configure interfaces, routes, and protocols on the
switch. While you are logged in to the EXEC Privilege mode, the # prompt is displayed.

CONFIGURATION Mode
In the EXEC Privilege mode, use the configure command to enter the CONFIGURATION
mode and configure routing protocols and access interfaces.
To enter the CONFIGURATION mode:
1. Verify that you are logged in to the EXEC Privilege mode.
2. Enter the configure command. The prompt changes to include (conf).

From this mode, you can enter INTERFACE by using the interface command.

INTERFACE Mode
Use the INTERFACE mode to configure interfaces or IP services on those interfaces. An
interface can be physical (for example, a Gigabit Ethernet port) or virtual (for example, the
Null interface).

CLI Basics | 21

www.dell.com | support.dell.com

To enter INTERFACE mode:
1. Verify that you are logged into the CONFIGURATION mode.
2. Enter the interface command followed by an interface type and interface number that is
available on the switch.
3. The prompt changes to include the designated interface and slot/port number, as outlined
in Table 2-3.
Table 2-3.

Interface prompts

Prompt

Interface Type

FTOS(conf-if)#

INTERFACE mode

FTOS(conf-if-gi-0/0)#

Gigabit Ethernet interface followed by slot/port information

FTOS(conf-if-te-0/0)#

Ten Gigabit Ethernet interface followed by slot/port information

FTOS(conf-if-fo-0/0)#

Forty Gigabit Ethernet interface followed by slot/port information

FTOS(conf-if-lo-0)#

Loopback interface number.

FTOS(conf-if-nu-0)#

Null Interface followed by zero

FTOS(conf-if-po-0)#

Port-channel interface number

FTOS(conf-if-vl-0)#

VLAN Interface followed by VLAN number (range 1 to 4094)

FTOS(conf-if-so-0/0)#

SONET interface followed by slot/port information.

FTOS(conf-if-ma-0/0)#

Management Ethernet interface followed by slot/port information

FTOS(conf-if-range)#

Designated interface range (used for bulk configuration; refer to
interface range).

LINE Mode
Use the LINE mode to configure console or virtual terminal parameters.
To enter LINE mode:
1. Verify that you are logged in to the CONFIGURATION mode.
2. Enter the line command. You must include the keywords console or vty and their line number available on the switch.The prompt changes to include (config-line-console) or (config-line-vty).

You can exit this mode by using the exit command.

TRACE-LIST Mode
When in the CONFIGURATION mode, use the trace-list command to enter the TRACE-LIST
mode and configure a Trace list.
1. Verify that you are logged in to the CONFIGURATION mode.
2. Enter the ip trace-list command. You must include the name of the Trace list. The prompt
change to include (conf-trace-acl).

22

|

CLI Basics

You can exit this mode by using the exit command.

MAC ACCESS LIST Mode
While in the CONFIGURATION mode, use the mac access-list standard or mac access-list
extended command to enter the MAC ACCESS LIST mode and configure either standard or
extended access control lists (ACL).
To enter MAC ACCESS LIST mode:
1. Verify that you are logged in to the CONFIGURATION mode.
2. Use the mac access-list standard or mac access-list extended command. You must include
a name for the ACL.The prompt changes to include (conf-std-macl) or (conf-ext-macl).

You can return to the CONFIGURATION mode by entering the exit command.

IP ACCESS LIST Mode
While in the CONFIGURATION mode, use the ip access-list standard or ip access-list extended
command to enter the IP ACCESS LIST mode and configure either standard or extended
access control lists (ACL).
To enter IP ACCESS LIST mode:
1. Verify that you are logged in to the CONFIGURATION mode.
2. Use the ip access-list standard or ip access-list extended command. You must include a
name for the ACL.The prompt changes to include (conf-std-nacl) or (conf-ext-nacl).

You can return to the CONFIGURATION mode by entering the exit command.

ROUTE-MAP Mode
While in the CONFIGURATION mode, use the route-map command to enter the
ROUTE-MAP mode and configure a route map.
To enter ROUTE-MAP mode:
1. Verify that you are logged in to the CONFIGURATION mode.
2. Use the route-map map-name [permit | deny] [sequence-number] command. The prompt
changes to include (route-map).

You can return to the CONFIGURATION mode by entering the exit command.

CLI Basics | 23

www.dell.com | support.dell.com

PREFIX-LIST Mode
While in the CONFIGURATION mode, use the ip prefix-list command to enter the
PREFIX-LIST mode and configure a prefix list.
To enter PREFIX-LIST mode:
1. Verify that you are logged in to the CONFIGURATION mode.
2. Enter the ip prefix-list command. You must include a name for the prefix list.The prompt
changes to include (conf-nprefixl).

You can return to the CONFIGURATION mode by entering the exit command.

AS-PATH ACL Mode
Use the AS-PATH ACL mode to configure an AS-PATH Access Control List (ACL) on the
E-Series. Refer to Chapter 7, Access Control Lists (ACL).
To enter AS-PATH ACL mode:
1. Verify that you are logged in to the CONFIGURATION mode.
2. Enter the ip as-path access-list command. You must include a name for the AS-PATH
ACL.The prompt changes to include (config-as-path).

You can return to the CONFIGURATION mode by entering the exit command.

IP COMMUNITY LIST Mode
Use the IP COMMUNITY LIST mode to configure an IP Community ACL on the E-Series.
Refer to Chapter 7, Access Control Lists (ACL).
To enter IP COMMUNITY LIST mode:
1. Verify that you are logged in to the CONFIGURATION mode.
2. Enter the ip community-list command. You must include a name for the Community
list.The prompt changes to include (config-community-list).

You can return to the CONFIGURATION mode by entering the exit command.

REDIRECT-LIST Mode
Use the REDIRECT-LIST mode to configure a Redirect list on the E-Series, as described in
the E-Series FTOS Command Line Reference Guide Chapter 39, Policy-based Routing (PBR).
To enter REDIRECT-LIST mode:

24

|

CLI Basics

1. Verify that you are logged in to the CONFIGURATION mode.
2. Use the ip redirect-list command. You must include a name for the Redirect-list.The
prompt changes to include (conf-redirect-list).

You can return to the CONFIGURATION mode by entering the exit command.

SPANNING TREE Mode
Use the STP mode to enable and configure the Spanning Tree protocol, as described in
Chapter 52, Spanning Tree Protocol (STP).
To enter STP mode:
1. Verify that you are logged into the CONFIGURATION mode.
2. Enter the protocol spanning-tree stp-id command.

You can return to the CONFIGURATION mode by entering the exit command.

Per-VLAN SPANNING TREE Plus Mode
Use PVST+ mode to enable and configure the Per-VLAN Spanning Tree (PVST+) protocol,
as described in Chapter 41, Per-VLAN Spanning Tree Plus (PVST+).
Note: The protocol is PVST+, but the plus sign is dropped at the CLI prompt

To enter PVST+ mode:
1. Verify that you are logged into the CONFIGURATION mode.
2. Enter the protocol spanning-tree pvst command.

You can return to the CONFIGURATION mode by entering the exit command.

RAPID SPANNING TREE Mode
Use PVST+ mode to enable and configure the RSTP protocol, as described in Chapter 45,
Rapid Spanning Tree Protocol (RSTP).
To enter RSTP mode:
1. Verify that you are logged into the CONFIGURATION mode.
2. Enter the protocol spanning-tree rstp command.

You can return to the CONFIGURATION mode by entering the exit command.

CLI Basics | 25

www.dell.com | support.dell.com

MULTIPLE SPANNING TREE Mode
Use MULTIPLE SPANNING TREE mode to enable and configure the Multiple Spanning
Tree protocol, as described in Chapter 33, Multiple Spanning Tree Protocol (MSTP).
To enter MULTIPLE SPANNING TREE mode:
1. Verify that you are logged into the CONFIGURATION mode.
2. Enter the protocol spanning-tree mstp command.

You can return to the CONFIGURATION mode by entering the exit command.

PROTOCOL GVRP Mode
Use the PROTOCOL GVRP mode to enable and configure GARP VLAN Registration
Protocol (GVRP), as described in Chapter 18, GARP VLAN Registration (GVRP).
To enter PROTOCOL GVRP mode:
1. Verify that you are logged into the CONFIGURATION mode.
2. Enter the protocol gvrp command syntax.

You can return to the CONFIGURATION mode by entering the exit command.

ROUTER OSPF Mode
Use the ROUTER OSPF mode to configure OSPF, as described in Chapter 37, Open Shortest
Path First (OSPFv2).
To enter ROUTER OSPF mode:
1. Verify that you are logged into the CONFIGURATION mode.
2. Use the router ospf {process-id} command.The prompt changes to include
(conf-router_ospf-id).

You can switch to the INTERFACE mode by using the interface command or you can switch
to the ROUTER RIP mode by using the router rip command.

ROUTER RIP Mode
Use the ROUTER RIP mode to configure RIP on the C-Series or E-Series, as described in
Chapter 43, Routing Information Protocol (RIP).
To enter ROUTER RIP mode:
1. Verify that you are logged into the CONFIGURATION mode.

26

|

CLI Basics

2. Enter the router rip command.The prompt changes to include (conf-router_rip).

You can switch to the INTERFACE mode by using the interface command or you can switch
to the ROUTER OSPF mode by using the router ospf command.

ROUTER ISIS Mode
Use the ROUTER ISIS mode to configure ISIS on the E-Series, as described in the E-Series
E-Series FTOS Command Line Reference Guide chapter Intermediate System to Intermediate
System (IS-IS).
To enter ROUTER ISIS mode:
1. Verify that you are logged into the CONFIGURATION mode.
2. Enter the router isis [tag] command.The prompt changes to include (conf-router_isis).

You can switch to the INTERFACE mode by using the interface command or you can switch
to the ROUTER RIP mode by using the router rip command.

ROUTER BGP Mode
Use the ROUTER BGP mode to configure BGP on the C-Series or E-Series, as described in
Chapter 9, Border Gateway Protocol IPv4 (BGPv4).
To enter ROUTER BGP mode:
1. Verify that you are logged into the CONFIGURATION mode.
2. Enter the router bgp as-number command.The prompt changes to include
(conf-router_bgp).

You can return to the CONFIGURATION mode by entering the exit command.

VLT DOMAIN Mode
Use VLT DOMAIN mode to enable and configure the VLT domain protocol, as described in
Chapter 57, Virtual Link Trunking (VLT).
To enter VLT DOMAIN mode:
1. Verify that you are logged into the CONFIGURATION mode.
2. Enter the config-vlt-domain command.

You can return to the CONFIGURATION mode by entering the exit command.

CLI Basics | 27

www.dell.com | support.dell.com

Determining the Chassis Mode

28

The chassis mode in FTOS determines which hardware is being supported in an E-Series
chassis. The chassis mode is programmed into an EEPROM on the backplane of the chassis
and the change takes place only after the chassis is rebooted. Configuring the appropriate
chassis mode enables the system to use all the ports on the card and recognize all software
features.

|

CLI Basics

3
File Management
Overview
This chapter contains commands needed to manage the configuration files and includes other
file management commands found in FTOS. The commands in this chapter are supported by
FTOS on Dell Force10 platforms, as indicated by the characters that appear under each of the
command headings: e E-Series, c C-Series, s S-Series,
S4810.
This chapter contains these sections:
•
•

Basic File Management Commands
Upgrading the C-Series FPGA

Basic File Management Commands
The commands included in this chapter are:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

boot config
boot host
boot network
boot system
boot system gateway
cd
change bootflash-image
copy
copy (Streamline Upgrade)
copy running-config startup-config
delete
dir
download alt-boot-image
download alt-full-image
download alt-system-image
format (C-Series and E-Series)
format flash (S-Series)

File Management | 29

www.dell.com | support.dell.com

•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

format flash (Z9000)
logging coredump
logging coredump server
pwd
rename
boot system
show bootvar
show file
show file-systems
show linecard
show os-version
show running-config
show startup-config
show version
upgrade (E-Series version)
upgrade (C-Series version)
upgrade (S-Series management unit and Z9000)
upgrade fpga-image

boot config
ce
Syntax
Parameters

Defaults
Command Modes
Command
History

Set the location and name of the configuration file that is loaded at system start-up (or reload)
instead of the default startup-configuration.
boot config {remote-first | rpm0 file-url | rpm1 file-url}
remote-first

Enter the keywords remote-first to attempt to load the boot configuration files
from a remote location.

rpm0

Enter the keywords rpm0 first to specify the local boot configuration file for RPM 0.

rpm1

Enter the keywords rpm1 first to specify the local boot configuration file for RPM 1.

file-url

Enter the location information:
• For a file on the internal Flash, enter flash:// followed by the filename.
• For a file on the external Flash, enter slot0:// followed by the filename.

Not configured.
CONFIGURATION
Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Usage
Information

30

|

File Management

To display these changes in the show bootvar command output, you must save the running
configuration to the startup configuration (copy running-config startup-config or write)......

Dell Force10 strongly recommends using local files for configuration (RPM0 or RPM1 flash
or slot0).
When you specify a file as the boot config file, it is listed in the boot variables (bootvar) as
LOCAL CONFIG FILE. If you do not specify a boot config file, then the startup-configuration is
used, although the bootvar shows LOCAL CONFIG FILE = variable does not exist. When
you specify a boot config file, the switch reloads with that config file, rather than the
startup-config. Note that if you specify a local config file which is not present in the specified
location, then the startup-configuration is loaded.
The write memory command always saves the running-configuration to the file labeled
startup-configuration. When using a LOCAL CONFIG FILE other than the startup-config, use
the copy command to save any running-configuration changes to that local file.
The following text is an example of output for show bootvar with no boot configuration:
FTOS#show bootvar
PRIMARY IMAGE FILE = flash://FTOS-EF-8.2.1.0.bin
SECONDARY IMAGE FILE = flash://FTOS-EF-7.6.1.0.bin
DEFAULT IMAGE FILE = flash://FTOS-EF-7.5.1.0.bin
LOCAL CONFIG FILE = variable does not exist
PRIMARY HOST CONFIG FILE = variable does not exist
SECONDARY HOST CONFIG FILE = variable does not exist
PRIMARY NETWORK CONFIG FILE = variable does not exist
SECONDARY NETWORK CONFIG FILE = variable does not exist
CURRENT IMAGE FILE = flash://FTOS-EF-8.2.1.0.bin
CURRENT CONFIG FILE 1 = flash://startup-config
CURRENT CONFIG FILE 2 = variable does not exist
CONFIG LOAD PREFERENCE = local first
BOOT INTERFACE GATEWAY IP ADDRESS = variable does not exist

The following text is an example of output for show bootvar with a boot configuration:
FTOS#show bootvar
PRIMARY IMAGE FILE = flash://FTOS-EF-8.2.1.0.bin
SECONDARY IMAGE FILE = flash://FTOS-EF-7.6.1.0.bin
DEFAULT IMAGE FILE = flash://FTOS-EF-7.5.1.0.bin
LOCAL CONFIG FILE = variable does not exist
PRIMARY HOST CONFIG FILE = variable does not exist
SECONDARY HOST CONFIG FILE = variable does not exist
PRIMARY NETWORK CONFIG FILE = variable does not exist
SECONDARY NETWORK CONFIG FILE = variable does not exist
CURRENT IMAGE FILE = flash://FTOS-EF-8.2.1.0.bin
CURRENT CONFIG FILE 1 = flash://CustomerA.cfg
CURRENT CONFIG FILE 2 = variable does not exist
CONFIG LOAD PREFERENCE = local first
BOOT INTERFACE GATEWAY IP ADDRESS = variable does not exist

Related
Commands

show bootvar

Display the variable settings for the E-Series boot parameters.

boot host
ce
Syntax

Set the location of the configuration file from a remote host.
boot host {primary | secondary} remote-url

File Management | 31

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes
Command
History

primary

Enter the keywords primary to attempt to load the primary host configuration
files.

secondary

Enter the keywords secondary to attempt to load the secondary host
configuration files.

remote-url

Enter the following location keywords and information:
• For a file on an FTP server, enter ftp://user:password@hostip/filepath
• For a file on a TFTP server, enter tftp://hostip/filepath

Not configured.
CONFIGURATION
Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Usage
Information
Related
Commands

To display these changes in the show bootvar command output, you must save the running
configuration to the startup configuration (using the copy command).
show bootvar

Display the variable settings for the E-Series boot parameters.

boot network
ce
Syntax
Parameters

Defaults
Command Modes
Command
History

Set the location of the configuration file in a remote network.
boot network {primary | secondary} remote-url
primary

Enter the keywords primary to attempt to load the primary network configuration
files.

secondary

Enter the keywords secondary to attempt to load the secondary network
configuration files.

remote-url

Enter the following location keywords and information:
• For a file on an FTP server, enter ftp://user:password@hostip/filepath
• For a file on a TFTP server, enter tftp://hostip/filepath

None
CONFIGURATION
Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Usage
Information

32

|

File Management

To display these changes in the show bootvar command output, you must save the running
configuration to the startup configuration (using the copy command).

Related
Commands

show bootvar

Display the variable settings for the E-Series boot parameters.

boot system
ce
Syntax
Parameters

Defaults
Command Modes
Command
History

Tell the system where to access the FTOS image used to boot the system.
boot system {rpm0 | rpm1} (default | primary | secondary} file-url
rpm0

Enter the keyword rpm0 to configure boot parameters for RPM0.

rpm1

Enter the keyword rpm1 to configure boot parameters for RPM1.

default

After entering rpm0 or rpm1, enter the keyword default to specify the parameters
to be used if those specified by primary or secondary fail. The default location
should always be the internal flash device (flash:), so that you can be sure that a
verified image is available there.

primary

After entering rpm0 or rpm1, enter the keyword primary to configure the boot
parameters used in the first attempt to boot FTOS.

secondary

After entering rpm0 or rpm1, enter the keyword secondary to configure boot
parameters used if the primary operating system boot selection is not available.

file-url

To boot from a file:
• on the internal Flash, enter flash:// followed by the filename.
• on an FTP server, enter ftp://user:password@hostip/filepath
• on the external Flash, enter slot0:// followed by the filename.
• on a TFTP server, enter tftp://hostip/filepath

Not configured.
CONFIGURATION
Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Usage
Information
Related
Commands

To display these changes in the show bootvar command output, you must save the running
configuration to the startup configuration (using the copy command) and reload system.
change bootflash-image

Change the primary, secondary, or default boot image configuration.

boot system gateway

Specify the IP address of the default next-hop gateway for the
management subnet.

boot system gateway
ce
Syntax

Specify the IP address of the default next-hop gateway for the management subnet.
boot system gateway ip-address

File Management | 33

www.dell.com | support.dell.com

Parameters

Command Modes
Usage
Information
Command
History

ip-address

Enter an IP address in dotted decimal format.

CONFIGURATION
Saving the address to the startup configuration file preserves the address in NVRAM in case
the startup configuration file is deleted.
Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Related
Commands

change bootflash-image

Change the primary, secondary, or default boot image configuration.

cd
ces
Syntax
Parameters

Command Modes
Command
History

Change to a different working directory.
cd directory
directory

(OPTONAL) Enter one of the following:
• flash: (internal Flash) or any sub-directory
• slot0: (external Flash) or any sub-directory (C-Series and E-Series only)

EXEC Privilege
Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command

change bootflash-image
ce
Syntax
Parameters

34

|

File Management

Change boot flash image from which to boot.
change bootflash-image {cp | linecard linecard-slot | rp}
cp

Enter the keyword cp to change the bootflash image on the Control
Processor on the RPM.

linecard linecard-slot

Enter the keyword linecard followed by the slot number to change the
bootflash image on a specific line card.
C-Series Range: 0-7
E-Series Range: 0 to 13 on the E1200; 0 on 6 on the E600, and 0 to 5
on the E300.

rp

Enter the keyword rp to change the bootflash image on the RPM
Route Processor.

Defaults

Not configured.

Command Modes

EXEC Privilege

Command
History

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Usage
Information

A system message appears stating that the bootflash image has been changed. You must
reload the system before the system can switch to the new bootflash image.

copy
ces
Syntax
Parameters

Command Modes
Command
History

Copy one file to another location. FTOS supports IPv4 and IPv6 addressing for FTP, TFTP,
and SCP (in the hostip field).
copy source-file-url destination-file-url
file-url

Enter the following location keywords and information:
• To copy a file from the internal FLASH, enter flash:// followed by the filename.
• To copy a file on an FTP server, enter ftp://user:password@hostip/filepath
• To copy a file from the internal FLASH on RPM0, enter rpm0flash://filepath
• To copy a file from the external FLASH on RPM0, enter rpm0slot0://filepath
• To copy a file from the internal FLASH on RPM1, enter rpm1flash://filepath
• To copy a file from the external FLASH on RPM1, enter rpm1slot0://filepath
• To copy the running configuration, enter the keyword running-config.
• To copy the startup configuration, enter the keyword startup-config.
• To copy using Secure Copy (SCP), enter the keyword scp: (If scp: is entered in
the source position, then enter the target URL;
If scp: is entered in the target position, first enter the source URL; refer to the
examples below.)
• To copy a file on the external FLASH, enter slot0:// followed by the filename.
• To copy a file on a TFTP server, enter tftp://hostip/filepath
ExaScale only
• To copy a file from a USB drive on RPM0, enter rpm0usbflash://filepath
• To copy a file from an external USB drive, enter usbflash://filepath

EXEC Privilege
Version 8.4.1.0

Added IPv6 addressing support for FTP, TFTP, and SCP.

Version 8.2.1.0

Added usbflash and rpm0usbflash commands on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series and added SSH port number to SCP prompt sequence
on all systems.

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Usage
Information

FTOS supports a maximum of 100 files, at the root directory level, on both the internal and
external Flash.

File Management | 35

www.dell.com | support.dell.com

The usbflash and rpm0usbflash commands are supported on E-Series ExaScale platform only.
Refer to the FTOS Release Notes for a list of approved USB vendors.
When copying a file to a remote location (for example, using Secure Copy (SCP)), enter only
the keywords and FTOS prompts you for the rest of the information.
For example, when using SCP, you can enter copy running-config scp:
The running-config is the source, and the target is specified in the ensuing prompts. FTOS
prompts you to enter any required information, as needed for the named destination—remote
destination, destination filename, user ID and password, etc.
When you use the copy running-config startup-config command to copy the running
configuration (the startup configuration file amended by any configuration changes made
since the system was started) to the startup configuration file, FTOS creates a backup file on
the internal flash of the startup configuration.
FTOS supports copying the running-configuration to a TFTP server or to an FTP server:
copy running-config tftp:
copy running-config ftp:

The following text is an example of the output when the running-configuration is copied:
FTOS#copy running-config scp:/
Address or name of remote host []: 10.10.10.1
Destination file name [startup-config]? old_running
User name to login remote host? ******
Password to login remote host? ******

In this example — copy scp: flash: — specifying SCP in the first position indicates that the
target is to be specified in the ensuing prompts. Entering flash: in the second position means
that the target is the internal Flash. In the following example, the source is on a secure server
running SSH, so the user is prompted for the UDP port of the SSH server on the remote host.
FTOS#copy scp: flash:
Address or name of remote host []: 10.11.199.134
Port number of the server [22]: 99
Source file name []: test.cfg
User name to login remote host: admin
Password to login remote host:
Destination file name [test.cfg]: test1.cfg

Related
Commands

cd

Change working directory.

copy (Streamline Upgrade)
ce
Syntax

36

|

File Management

Copy a system image to a local file and update the boot profile.
copy source-url target-url [boot-image [synchronize-rpm [external]]]

Parameters
source-url

Enter the source file in url format. The source file is a valid Dell Force10
release image. Image validation is automatic.

target-url

Enter the local target file in url format.

boot-image

Enter the keyword boot-image to designate this copy command as a
streamline update.

synchronize-rpm

Enter the keyword synchronize-rpm to copy the new image file to the peer
RPM.

external

Enter the keyword external to designate the target device on the peer RPM
as external flash (instead of the default internal flash).
Default: Internal Flash

Defaults

No default behavior

Command Modes

CONFIGURATION

Command
History

Usage
Information

Version 8.4.1.0

Added IPv6 addressing support for FTP, TFTP, and SCP.

Version 7.5.1.0

Introduced on C-Series

Version 6.1.1.0

Introduced

In this streamline copy command, the source image is copied to the primary RPM and then, if
specified, to the standby RPM. After the copy is complete, the new image file path on each
RPM is automatically configured as the primary image path for the next boot. The current
system image (the one from which the RPM booted) is automatically configured as the
secondary image path.
FTOS supports IPv4 and IPv6 addressing for FTP, TFTP, and SCP.
Note: The keywords boot-image, synchronize-rpm, and external can be used on the
Primary RPM only.

copy running-config startup-config
ce
Syntax
Command Modes
Command
History

Usage
Information

Copy running configuration to the startup configuration.
copy running-config startup-config {duplicate}

EXEC Privilege
Version 7.5.1.0

Introduced on C-Series

Version 6.3.1.0

Introduced

This command is useful for quickly making a changed configuration on one chassis available
on external flash in order to move it to another chassis.

File Management | 37

www.dell.com | support.dell.com

When you use the copy running-config startup-config duplicate command to copy the running
configuration to the startup configuration, FTOS creates a backup file on the internal flash of
the startup configuration.

delete
ces
Syntax
Parameters

Command Modes
Command
History

Delete a file from the flash. Once deleted, files cannot be restored.
delete flash-url [no-confirm]
flash-url

Enter the following location and keywords:
• For a file or directory on the internal Flash, enter flash:// followed by the
filename or directory name.
• For a file or directory on the external Flash, enter slot0:// followed by the
filename or directory name.

no-confirm

(OPTIONAL) Enter the keyword no-confirm to specify that FTOS does not
require user input for each file prior to deletion.

EXEC Privilege
Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command

dir
ces
Syntax
Parameters

Command Modes
Command
History

Display the files in a file system. The default is the current directory.
dir [filename | directory name:]
filename | directory name:

(OPTIONAL) Enter one of the following:
• For a file or directory on the internal Flash, enter flash://
followed by the filename or directory name.
• For a file or directory on the external Flash, enter slot0://
followed by the filename or directory name:

EXEC Privilege
Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Example

FTOS#dir
Directory of flash:
1

38

|

File Management

-rwx

6478482

May 13

101 16:54:34

E1200.BIN

flash: 64077824 bytes total (57454592 bytes free)
FTOS#

Related
Commands

cd

Change working directory.

download alt-boot-image
ce
Syntax
Command Modes
Command
History

Download an alternate boot image to the chassis.
download alt-boot-image file-url

EXEC Privilege
Version 7.7.1.0

Removed from E-Series and C-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Usage
Information

Starting with FTOS 7.7.1.0, the functions of this command are incorporated into the upgrade
command.
For software upgrade details, refer to the FTOS Release Notes.

Related
Commands

upgrade (E-Series version)

Upgrade the bootflash or boot selector versions.

upgrade (C-Series version)

Upgrade the bootflash or boot selector versions.

download alt-full-image
e
Syntax
Command Modes
Command
History

Usage
Information

Download an alternate FTOS image to the chassis.
download alt-full-image file-url

EXEC Privilege
Version 7.7.1.0

Removed form E-Series

Version 6.5.1.0

Introduced

Starting with FTOS 7.7.1.0, the functions of this command are incorporated into the upgrade
command.
For software upgrade details, refer to the FTOS Release Notes.

Related
Commands

upgrade (E-Series version)

Upgrade the bootflash or boot selector versions

File Management | 39

www.dell.com | support.dell.com

download alt-system-image
e
Syntax
Command Modes
Command
History

Usage
Information

Download an alternate system image (not the boot flash or boot selector image) to the chassis.
download alt-system-image file-url

EXEC Privilege
Version 7.7.1.0

Removed from E-Series

Version 6.5.1.0

Introduced

Starting with FTOS 7.7.1.0, the functions of this command are incorporated into the upgrade
command.
For software upgrade details, refer to the FTOS Release Notes.

Related
Commands

upgrade (E-Series version)

Upgrade the bootflash or boot selector versions

format (C-Series and E-Series)
ce
Syntax
Parameters

Default
Command Modes
Command
History

Erase all existing files and reformat a file system. Once the file system is formatted, files
cannot be restored.
format filesystem: [dosFs1.0 | dosFs2.0]
filesystem:

Enter one of the following:
• To reformat the internal Flash, enter flash:
• To reformat the external Flash, enter slot0:

dosFs1.0

Enter the keyword dosFs1.0 to format in DOS 1.0 (the default)

dosFs2.0

Enter the keyword dosFs2.0 to format in DOS 2.0

DOS 1.0 (dosFs1.0)
EXEC Privilege
Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Usage
Information

When you format flash:
1. The startup-config is erased.
2. All cacheboot data files are erased and you must reconfigure cacheboot to regain
it.
3. All generated SSH keys are erased and you must recreate them.
4. All archived configuration files are erased.

40

|

File Management

5. All trace logs, crash logs, core dumps, and call-home logs are erased.
6. In-service Process patches are erased.
After reformatting is complete, three empty directories are automatically created on flash:
CRASH_LOG_DIR, TRACE_LOG_DIR and NVTRACE_LOG_DIR.
Note: Version option is available on LC-ED-RPM only. LC-EE3-RPM, LC-EF-RPM, and
LC-EF3-RPM supports DOS 2.0 only.
Related
Commands

show file

Display contents of a text file in the local filesystem.

show file-systems

Display information about the file systems on the system.

format flash (S-Series)
s

Erase all existing files and reformat the filesystem in the internal flash memory. Once the
filesystem is formatted, files cannot be restored.

Syntax

format flash:

Default

flash memory

Command Modes
Command
History
Usage
Information

EXEC Privilege
Version 7.8.1.0

Introduced on S-Series

You must include the colon (:) when entering this command.
Caution: This command deletes all files, including the startup configuration file. After executing this
command, consider saving the running config as the startup config (use the write memory command or
copy run start).

Related
Commands

copy

Copy the current configuration to either the startup-configuration file or the
terminal.

show file

Display contents of a text file in the local filesystem.

show file-systems

Display information about the file systems on the system.

format flash (Z9000)
z
Syntax

Erase all existing files and reformat the file system in the internal flash memory or the USB
drive. Once the file system is formatted, files cannot be restored.
format [flash: | slot0: | usbflash: ]

File Management | 41

www.dell.com | support.dell.com

Parameters

Default
Command Modes
Command
History
Usage
Information

flash: | slot0: |
usbflash:

flash: Reformat the file system in the internal flash memory.
slot0: Reformat the file system in the external flash memory, i.e., SSD.
usbflash: Reformat the file system in the usbflash.

flash memory
EXEC Privilege
Version 8.3.11.1

Introduced on the Z9000

You must include the colon (:) when entering this command.
Caution: This command deletes all files, including the startup configuration file. So, after executing
this command, consider saving the running config as the startup config (use the write memory
command or copy run start).

logging coredump
ces
z
Syntax
Parameters

Defaults

Command Modes
Command
History

Usage
Information

42

|

File Management

Enable coredump.

logging coredump {cp | linecard {number | all} | rps}
cp

Enable coredump for the CP.

linecard

Enable coredump for a linecard.

rps

Enable coredump for RP 1 and 2.

The kernel coredump is enabled by default for RP 1 and 2 on E-Series. The kernel coredump
for CP and application coredump are disabled on all systems by default.
CONFIGURATION
Version 8.3.11.1

Introduced on Z9000

Version 7.7.1.0

Restructured command to accommodate core dumps for CP. Introduced on
C-Series and S-Series

Version 6.5.1.0

Application coredump naming convention enhanced to include application.

Version 6.1.1.0

Introduced

The Kernel core dump can be large and may take up to 5 to 30 minutes to upload. FTOS does
not overwrite application core dumps so you should delete them as necessary to conserve
space on the flash; if the flash is out of memory, the coredump is aborted. On the S-Series, if
the FTP server is not reachable, the application coredump is aborted. FTOS completes the
coredump process and wait until the upload is complete before rebooting the system.

Related
Commands

logging coredump server

Designate a sever to upload kernel core-dumps.

logging coredump server
ces
Syntax
Parameters

Defaults
Command Modes
Command
History

Usage
Information

Designate a server to upload core dumps.
logging coredump server {ipv4-address | ipv6-address} username name password [type] password

{ipv4-address |
ipv6-address}

Enter the server IPv4 address (A.B.C.D) or IPv6 address
(X:X:X:X::X).

name

Enter a username to access the target server.

type

Enter the password type:
• Enter 0 to enter an unencrypted password.
• Enter 7 to enter a password that has already been encrypted using
a Type 7 hashing algorithm.

password

Enter a password to access the target server.

Crash kernel files are uploaded to flash by default.
CONFIGURATION
Version 8.4.1.0

Added support for IPv6.

Version 7.7.1.0

Restructured command to accommodate core dumps for CP. Introduced on
C-Series and S-Series.

Version 6.1.1.0

Introduced

Since flash space may be limited, using this command ensures your entire crash kernel files
are uploaded successfully and completely. Only a single coredump server can be configured.
Configuration of a new coredump server will over-write any previously configured server.
Note: You must disable logging coredump before you designate a new server
destination for your core dumps.

Related
Commands

logging coredump

Disable the kernel coredump

pwd
ce
Syntax
Command Modes

Display the current working directory.
pwd

EXEC Privilege

File Management | 43

www.dell.com | support.dell.com

Command
History

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Example

Related
Commands

FTOS#pwd
flash:
FTOS#

cd

Change directory.

rename
ces
Syntax
Parameters

Command Modes
Command
History

Rename a file in the local file system.
rename url url
url

Enter the following keywords and a filename:
• For a file on the internal Flash, enter flash:// followed by the filename.
• For a file on the external Flash, enter slot0:// followed by the filename.

EXEC Privilege
Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command

show boot system
ce

Displays information about boot images currently configured on the system.

Syntax

show boot system {all | linecard [slot | all] | rpm}

Parameters

Defaults
Command Modes

all

Enter this keyword to display boot image information for all
linecards and RPMs.

linecard

Enter this keyword to display boot image information for the
specified line card(s) on the system.

rpm

Enter this keyword to display boot image information for all RPMs
on the system.

No default values or behavior
EXEC
EXEC Privilege

Command
History

44

|

File Management

Version 7.7.1.0

Introduced on C-Series and E-Series

Example

FTOS#show bootvar
PRIMARY IMAGE FILE = ftp://box:password@10.31.1.205//home/5.3.1/5.3.1.0/
FTOS-ED-RPM1-5.3.1.0.bin
SECONDARY IMAGE FILE = variable does not exist
DEFAULT IMAGE FILE = flash://FTOS-ED-5.3.1.0.bin
LOCAL CONFIG FILE = variable does not exist
PRIMARY HOST CONFIG FILE = variable does not exist
SECONDARY HOST CONFIG FILE = variable does not exist
PRIMARY NETWORK CONFIG FILE = variable does not exist
SECONDARY NETWORK CONFIG FILE = variable does not exist
CURRENT IMAGE FILE = ftp://box:password@10.31.1.205//home/5.3.1/5.3.1.0/
FTOS-ED-RPM1-5.3.1.0.bin
CURRENT CONFIG FILE 1 = flash://startup-config
CURRENT CONFIG FILE 2 = variable does not exist
CONFIG LOAD PREFERENCE = local first
BOOT INTERFACE GATEWAY IP ADDRESS = variable does not exist
RELOAD MODE = normal-reload
FTOS#

show bootvar
ce
Syntax
Command Modes
Command
History

Display the variable settings for the E-Series boot parameters.
show bootvar

EXEC Privilege
Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Example

Related
Commands

FTOS#show bootvar
PRIMARY IMAGE FILE = ftp://box:password@10.31.1.205//home/5.3.1/5.3.1.0/
FTOS-ED-RPM1-5.3.1.0.bin
SECONDARY IMAGE FILE = variable does not exist
DEFAULT IMAGE FILE = flash://FTOS-ED-5.3.1.0.bin
LOCAL CONFIG FILE = variable does not exist
PRIMARY HOST CONFIG FILE = variable does not exist
SECONDARY HOST CONFIG FILE = variable does not exist
PRIMARY NETWORK CONFIG FILE = variable does not exist
SECONDARY NETWORK CONFIG FILE = variable does not exist
CURRENT IMAGE FILE = ftp://box:password@10.31.1.205//home/5.3.1/5.3.1.0/
FTOS-ED-RPM1-5.3.1.0.bin
CURRENT CONFIG FILE 1 = flash://startup-config
CURRENT CONFIG FILE 2 = variable does not exist
CONFIG LOAD PREFERENCE = local first
BOOT INTERFACE GATEWAY IP ADDRESS = variable does not exist
FTOS#

boot config

Set the location of configuration files on local devices.

boot host

Set the location of configuration files from the remote host.

boot network

Set the location of configuration files from a remote network.

boot system

Set the location of FTOS image files.

boot system gateway

Specify the IP address of the default next-hop gateway for the management
subnet.

File Management | 45

www.dell.com | support.dell.com

show file
ces
Syntax
Parameters

Command Modes
Command
History

Display contents of a text file in the local filesystem.
show file filesystem
filesystem

Enter one of the following:
• flash: for the internal Flash
• slot0: for the external Flash

EXEC Privilege
Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Example

Related
Commands

FTOS#show file flash://startup-config
!
boot system rpm0 primary ftp://test:server@10.16.1.144//home/images/E1200_405-3.1.2b1.86.bin
boot system rpm0 secondary flash://FTOS-ED-6.1.1.0.bin
boot system rpm0 default ftp://:@/\
!
redundancy auto-synchronize persistent-data
redundancy primary rpm0
!
hostname E1200-20
!
enable password 7 94849d8482d5c3
!
username test password 7 93e1e7e2ef
!
enable restricted 7 948a9d848cd5c3
!
protocol spanning-tree 0
bridge-priority 8192
rapid-root-failover enable
!
interface GigabitEthernet 0/0
no ip address
shutdown

format (C-Series and E-Series)

Erase all existing files and reformat a filesystem on the
E-Series or C-Series platform.

format flash (S-Series)

Erase all existing files and reformat the filesystem in the
internal flash memory on and S-Series.

show file-systems

Display information about the file systems on the system.

show file-systems
ces
Syntax

46

|

File Management

Display information about the file systems on the system.
show file-systems

Command Modes
Command
History

EXEC Privilege
Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Example

FTOS#show file-systems
Size(b)
Free(b)
63938560
51646464
63938560
18092032
FTOS#

Table 3-1.

Related
Commands

Feature
dosFs2.0
dosFs1.0
-

Type
MMC
MMC
network
network
network

Flags
rw
rw
rw
rw
rw

Prefixes
flash:
slot0:
ftp:
tftp:
scp:

show file-systems Command Output Fields

Field

Description

size(b)

Lists the size in bytes of the storage location. If the location is
remote, no size is listed.

Free(b)

Lists the available size in bytes of the storage location. If the
location is remote, no size is listed.

Feature

Displays the formatted DOS version of the device.

Type

Displays the type of storage. If the location is remote, the word
network is listed.

Flags

Displays the access available to the storage location. The following
letters indicate the level of access:
• r = read access
• w = write access

Prefixes

Displays the name of the storage location.

format (C-Series and E-Series)

Erase all existing files and reformat a filesystem.

format flash (S-Series)

Erase all existing files and reformat the filesystem in the
internal flash memory.

show file

Display contents of a text file in the local filesystem.

show sfm

Display the current SFM status.

show linecard
ce

View the current linecard status.

Syntax

show linecard [number | all | boot-information]

Parameters

number

Enter a number to view information on that linecard.
Range: 0 to 6.

File Management | 47

www.dell.com | support.dell.com

Command Modes
Command
History

all

(OPTIONAL) Enter the keyword all to view a table with information on
all present linecards.

boot-information

(OPTIONAL) Enter the keyword boot-information to view cache boot
information of all line cards in table format.

EXEC Privilege
Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Example

FTOS#show linecard boot-information
--

Line cards

-Serial
Booted
Next
Cache
Boot
# Status CurType number
from
boot
boot
flash
--------------------------------------------------------------------------------------------------0
1
2
3 online E48TF FX000032632 4.7.7.171 4.7.7.171 A: invalid B: invalid
A: 2.3.2.1 [b] B: 2.3.2.1
4
5
6
FTOS#

show os-version
ces
Syntax
Parameters

Display the release and software image version information of the image file specified or,
optionally, the image loaded on the RPM (C-Series and E-Series only).
show os-version [file-url]
file-url

(OPTIONAL) Enter the following location keywords and information:
• For a file on the internal Flash, enter flash:// followed by the filename.
• For a file on an FTP server, enter ftp://user:password@hostip/filepath
• For a file on the external Flash, enter slot0:// followed by the filename.
• For a file on a TFTP server, enter tftp://hostip/filepath
Note: ftp and tftp are the only S-Series options.

Defaults
Command Modes
Command
History

No default values or behavior
EXEC Privilege
Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Usage
Information

48

|

File Management

Note: A filepath that contains a dot ( . ) is not supported.

Example
(E-Series)

FTOS#show os-version
RELEASE IMAGE INFORMATION :
--------------------------------------------------------------------Platform
Version
Size
ReleaseTime
E-series: EF
7.5.1.0
27676168
Aug 15 2007 10:06:21
TARGET IMAGE INFORMATION :
--------------------------------------------------------------------Type
Version
Target
checksum
runtime
7.5.1.0
control processor
passed
runtime
7.5.1.0
route processor
passed
runtime
7.5.1.0
terascale linecard
passed
boot flash
2.4.1.1
control processor
passed
boot flash
2.4.1.1
route processor
passed
boot flash
2.3.1.3
terascale linecard
passed
boot selector
2.4.1.1
control processor
passed
boot selector
2.4.1.1
route processor
passed
boot selector
2.3.1.3
terascale linecard
passed
FTOS#

Example
(C-Series)

FTOS#show os-version
RELEASE IMAGE INFORMATION :
--------------------------------------------------------------------Platform
Version
Size
ReleaseTime
C-series: CB
7.5.1.0
23734363
Aug 18 2007 11:49:51
TARGET IMAGE INFORMATION :
--------------------------------------------------------------------Type
Version
Target
checksum
runtime
7.5.1.0
control processor
passed
runtime
7.5.1.0
linecard
passed
boot flash
2.7.0.1
control processor
passed
boot flash
1.0.0.40
linecard
passed
boot selector
2.7.0.1
control processor
passed
boot selector
1.0.0.40
linecard
passed
FPGA IMAGE INFORMATION :
--------------------------------------------------------------------Card
Version
Release Date
Primary RPM
4.1
May 02 2007
Secondary RPM
4.1
May 02 2007
LC0
3.2
May 02 2007
LC5
3.2
May 02 2007
LC6
2.2
May 02 2007
FTOS#

show running-config
ces
Syntax

Display the current configuration and display changes from the default values.
show running-config [entity] [configured] [status]

File Management | 49

www.dell.com | support.dell.com

Parameters

50

entity

(OPTIONAL) Enter one of the keywords listed below to display that entity’s current
(non-default) configuration. Note that, if nothing is configured for that entity, nothing is
displayed and the prompt returns:
• aaa for the current AAA configuration
• acl for the current ACL configuration
• arp for the current static ARP configuration
• as-path for the current AS-path configuration
• bfd for the current BFD configuration
• bgp for the current BGP configuration
• boot for the current boot configuration
• cam-profile for the current CAM profile in the configuration.
• class-map for the current class-map configuration
• community-list for the current community-list configuration
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

|

File Management

ecmp-group for the current ECMP group configuration
ethernet for the current Ethernet CFM configuration
fefd for the current FEFD configuration
ftp for the current FTP configuration
frrp for the current FRRP configuration
fvrp for the current FVRP configuration
gvrp for the current GVRP configuration
hardware-monitor for hardware-monitor action-on-error settings
host for the current host configuration
hypervisor for the current hypervisor configuration
igmp for the current IGMP configuration
interface for the current interface configuration
ip for the current IP configuration
isis for the current ISIS configuration
line for the current line configuration
lldp for the current LLDP configuration
load-balance for the current port-channel load-balance configuration
logging for the current logging configuration

Command Modes
Command
History

•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

mac for the current MAC ACL configuration
mac-address-table for the current MAC configuration
management-route for the current Management port forwarding configuration
mld for the current MLD configuration
monitor for the current Monitor configuration
mroute for the current Mroutes configuration
msdp for the current MSDP configuration
ntp for the current NTP configuration
ospf for the current OSPF configuration
pim for the current PIM configuration
policy-map-input for the current input policy map configuration
policy-map-output for the current output policy map configuration
po-failover-group for the current Port-channel failover-group configuration
prefix-list for the current prefix-list configuration
privilege for the current privilege configuration
qos-policy-input for the current input qos policy configuration
qos-policy-output for the current output qos policy configuration
radius for the current RADIUS configuration
redirect-list for the current redirect-list configuration
redundancy for the current RPM redundancy configuration
resolve for the current DNS configuration
rip for the current RIP configuration
rmon for the current RMON configuration
route-map for the current route map configuration

•
•
•
•
•
•
•
•
•
•
•
•
•

sflow for the current sFlow configuration
snmp for the current SNMP configuration
spanning-tree for the current spanning tree configuration
static for the current static route configuration
status for the file status information
tacacs+ for the current TACACS+ configuration
tftp for the current TFTP configuration
trace-group for the current trace-group configuration
trace-list for the current trace-list configuration
uplink-state-group for the uplink state group configuration
users for the current users configuration
vlt for the current VLT configuration
wred-profile for the current wred-profile configuration

config
ured

(OPTIONAL) Enter the keyword configuration to display line card interfaces with
non-default configurations only.

status

(OPTIONAL) Enter the keyword status to display the checksum for the running
configuration and the start-up configuration.

EXEC Privilege
Version 7.8.1.0

Added hardware-monitor option

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 7.4.1.0

Expanded to include last configuration change and start-up last updated (date
and time) and who made the change

Version 6.5.4.0

Added status option

File Management | 51

www.dell.com | support.dell.com

Example (partial)

FTOS#show running-config
Current Configuration ...
! Version 7.4.1.0
! Last configuration change at Tue Apr 10 17:43:38 2007 by admin
! Startup-config last updated at Thu Mar 29 02:35:08 2007 by default
!
boot system rpm0 primary flash://FTOS-EF-7.4.1.0.bin
boot system rpm0 secondary flash://FTOS-EF-6.3.1.2.bin
boot system rpm0 default flash://FTOS-EF-6.5.1.8.bin
!
...

Example

FTOS#show running-config status
running-config checksum 0xB4B9BF03
startup-config checksum 0x8803620F
FTOS#

Usage
Information

The status option enables you to display the size and checksum of the running configuration
and the startup configuration.

show sfm
ce

View the current SFM status.

Syntax

show sfm [number [brief] | all]

Parameters

Command Modes

number

Enter a number to view information on that SFM.
Range: 0 to 8.

all

(OPTIONAL) Enter the keyword all to view a table with information on all present
SFMs.

brief

(OPTIONAL) Enter the keyword brief to view a list with SFM status.
Note: The brief option is not available on C-Series.

EXEC
EXEC Privilege

Command
History

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Example
(E-Series)

FTOS#show sfm
Switch Fabric State:
-- SFM card 0
Status
Card Type
Up Time
Temperature
Power Status
Serial Number
Part Number
Vendor Id
Date Code
Country Code

52

|

File Management

up

-: active
: SFM - Switch Fabric Module
: 37 min, 24 sec
: 49C
: PEM0: absent or down
PEM1: up
: 0018102
: 7520012900 Rev 02
: 02
: 06182004
: 01

Example
(show sfm all)

FTOS#show sfm all
Switch Fabric State:

up

-- Switch Fabric Modules -Slot Status
--------------------------------------------------------------------------0
active
1
active
2
active
3
active
4
active
5
active
6
active
7
active
8
active
FTOS#

Table 3-2.

show sfm Command Output Fields

Field

Description

Switch Fabric State:

States that the Switch Fabric is up (8 SFMs are online and operating).

Status

Displays the SFM’s active status.

Card Type

States the type of SFM.

Up Time

Displays the number of hours and minutes since the RPM’s last reboot.

Temperature

Displays the temperature of the RPM.
Minor alarm status if temperature is over 65° C.

Power Status

Displays power status: absent, down, or up

Serial Num

Displays the line card serial number.

Part Num

Displays the line card part number.

Vendor ID

Displays an internal code, which specifies the manufacturing vendor.

Date Code

Displays the line card’s manufacturing date.

Country Code

Displays the country of origin.
01 = USA

show startup-config
ces
Syntax
Command Modes
Command
History

Example

Display the startup configuration.
show startup-config

EXEC Privilege
Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 7.4.1.0

Expanded to include last configuration change and start-up last updated (date
and time) and who made the change.

FTOS#show startup-config

File Management | 53

www.dell.com | support.dell.com

! Version 7.4.1.0
! Last configuration change at Thu Mar 29 02:16:07 2007 by default
! Startup-config last updated at Thu Mar 29 02:35:08 2007 by default
!
boot system rpm0 primary flash://FTOS-EF-7.4.1.0.bin
boot system rpm0 secondary flash://FTOS-EF-6.3.1.2.bin
boot system rpm0 default flash://FTOS-EF-6.5.1.8.bin
!
...

Related
Commands

show running-config

Display current (running) configuration.

show version
ces
Syntax

Display the current FTOS version information on the system.

show version

Command Modes

EXEC Privilege

Command
History

Version 8.3.12.0

Introduced on S4810.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Example
(E-Series)

FTOS#show version
Dell Force10 Networks Real Time Operating System SoftwareDe
Dell Force10 Operating System Version: 1.0
Dell Force10 Application Software Version: 5.3.1.0
Copyright (c) 1999-2004 by Dell Force10 Networks, Inc.
Build Time: Sun May 9 00:57:03 PT 2004
Build Path: /local/local0/Release/5-4-1/SW/Bsp/Diag
Dell Force10 uptime is 1 days, 3 hours, 16 minutes
System image file is "/home/5.3.1/5.3.1.0/FTOS-ED-RPM1-5.3.1.0.bin"
Chassis Type: E1200
Control Processor: IBM PowerPC 405GP (Rev D) with 268435456 bytes of memory.
Route Processor 1: IBM PowerPC 405GP (Rev D) with 536870912 bytes of memory.
Route Processor 2: IBM PowerPC 405GP (Rev D) with 536870912 bytes of memory.
128K bytes of non-volatile configuration memory.
1
9
1
1
1
2
1
1
1
1
1

54

|

File Management

Route Processor Module
Switch Fabric Module
24-port GE line card with SFP optics (EE)
12-port GE Flex line card with SFP optics (EE)
2-port OC48c line card with SR optics (EC)
24-port GE line card with SX optics (EB)
2-port 10GE WAN PHY line card with 10Km (1310nm) optics (EE)
12-port GE Flex line card with SFP optics (EC)
2-port 10GE LAN PHY line card with 10Km (1310nm) optics (ED)
12-port OC12c/3c PoS line card with IR optics (EC)
24-port GE line card with SFP optics (ED)

1 FastEthernet/IEEE 802.3 interface(s)
120 GigabitEthernet/IEEE 802.3 interface(s)
14 SONET network interface(s)
4 Ten GigabitEthernet/IEEE 802.3 interface(s)
FTOS#

Example
(S-Series)

FTOS#show version
Dell Force10 Networks Real Time Operating System Software
Dell Force10 Operating System Version: 1.0
Dell Force10 Application Software Version: E7-8-1-13
Copyright (c) 1999-2008 by Dell Force10 Networks, Inc.
Build Time: Mon Nov 24 18:59:27 2008
Build Path: /local/local/sw/build/build2/Release/7-8-1/SW/SRC
Dell Force10 uptime is 1 minute(s)
System Type: S50V
Control Processor: MPC8451E with 252739584 bytes of memory.
32M bytes of boot flash memory.
1 48-port E/FE/GE with POE (SB)
48 GigabitEthernet/IEEE 802.3 interface(s)
4 Ten GigabitEthernet/IEEE 802.3 interface(s)
FTOS#

Example
(S4810)

FTOS#
FTOS#show version
Dell Force10 Real Time Operating System Software
Dell Force10 Operating System Version: 1.0
Dell Force10 Application Software Version: Z9K-ICC-PRIM-SYNC-8-3-11-173
Copyright (c) 1999-2012 by Dell Inc. All Rights Reserved.
Build Time: Mon Jul 16 22:19:01 PDT 2012
Build Path: /local/local/build/build15/8.3.12.0/SW/SRC/Radius
FTOS uptime is 1 minute(s)
System image file is "s4810-14"
System Type: S4810
Control Processor: Freescale QorIQ P2020 with 2147483648 bytes of memory.
128M bytes of boot flash memory.
1 52-port GE/TE/FG (SE)
52 Ten GigabitEthernet/IEEE 802.3 interface(s)
FTOS#
FTOS#
FTOS#
FTOS#config t
FTOS(conf)#int te 0/5
FTOS(conf-if-te-0/5)#no shut
FTOS(conf-if-te-0/5)#
FTOS(conf-if-te-0/5)#
FTOS(conf-if-te-0/5)#
FTOS(conf-if-te-0/5)#ipv6 nd prefix FEC0::/10
FTOS(conf-if-te-0/5)#
FTOS(conf-if-te-0/5)#show conf
!
interface TenGigabitEthernet 0/5
ip address 78.21.1.3/24
ipv6 nd prefix fec0::/10
flowcontrol rx on tx on
no shutdown
FTOS(conf-if-te-0/5)#
FTOS#

File Management | 55

www.dell.com | support.dell.com

Table 3-3.

show version Command Fields

Lines beginning with

Description

Dell Force10 Network...

Name of the operating system

Dell Force10 Operating...

OS version number

Dell Force10 Application...

Software version

Copyright (c)...

Copyright information

Build Time...

Software build’s date stamp

Build Path...

Location of the software build files loaded on the system

Dell Force10 uptime is...

Amount of time the system has been up

System image...

Image file name

Chassis Type:

Chassis type (E1200, E600, E600i, E300, C300, C150)

Control Processor:...

Control processor information and amount of memory on processor.

Route Processor 1:...

E-Series route processor 1 information and the amount of memory
on that processor.

Route Processor 2:...

E-Series route processor 2 information and the amount of memory
on that processor.

128K bytes...

Amount and type of memory on system.

1 Route Processor...

Hardware configuration of the system, including the number and
type of physical interfaces available.

upgrade (E-Series version)
e
Syntax

Parameters

56

|

File Management

Upgrade the bootflash, boot selector, or system image on a processor.
upgrade {bootflash-image | bootselector-image | system-image} {all | linecard linecard-slot |
rpm} {booted | file-url}
bootflash-image

Enter the keyword bootflash-image to upgrade the bootflash
image.

bootselector-image

Enter the keyword bootselector-image to upgrade the boot
selector image.
Use with TAC supervision only.

system-image

Enter the keyword system-image to upgrade the cache boot image.

all

Enter the keyword all to upgrade the bootflash/boot selector image
on all processors in the E-Series. This keyword does not upgrade
the bootflash on the standby RPM.

linecard linecard-slot

Enter the keyword linecard followed by the slot number to change
the bootflash image on a specific line card.
E-Series Range: 0 to 13 on the E1200; 0 to 6 for the E600; 0 to 5 on
the E300

rpm

Enter the keyword rpm to upgrade the bootflash/boot selector
image on all processors on the RPM.

booted

Enter this keyword to upgrade using the image packed with the
currently running FTOS image.

file-url

Enter the following location keywords and information to upgrade
using an FTOS image other than the one currently running:
Enter the transfer method and file location:
flash://filename
ftp://userid:password@hostip/filepath
slot0://filename
tftp://hostip/filepath

Defaults
Command Modes
Command
History

No configuration or default values
EXEC Privilege
Version 7.7.1.0

Removed alt-bootflash-image, alt-bootselector-image, alt-system-image
options, rp1, rp2, and cp options.

E-Series original Command
Usage
Information

A system message appears stating the Bootflash upgrade status. Reload the system to boot
from the upgraded boot images.
Once the URL is specified, the same downloaded image can be used for upgrading an
individual RPM, line cards, SFM FPGA, and system-image for cache-boot without specifying
the file-url again using the command upgrade {bootflash-image | bootselector-image |
system-image} {all | linecard linecard-slot | rpm}. After 20 minutes, the cached memory is
released and returned for general use, but the URL is maintained and you do not have to
specify it for subsequent upgrades.

Related
Commands

upgrade fpga-image

Upgrade the FPGA version in the specified E-Series SFM.

boot system

Display configured boot image information

upgrade (C-Series version)
c
Syntax

Parameters

Upgrade the bootflash or boot selector image on a processor.
upgrade {bootflash-image | bootselector-image | system-image}
{all | linecard {number | all} | rpm} [booted | file-url | repair]
bootflash-image

Enter the keyword bootflash-image to upgrade the bootflash
image.

bootselector-image

Enter the keyword bootselector-image to upgrade the boot
selector image. Use with TAC supervision only.

system-image

Enter the keyword system-image to upgrade the system image.
Use with TAC supervision only.

File Management | 57

www.dell.com | support.dell.com

all

Enter the keyword all to upgrade the bootflash or boot selector
image on all processors. This keyword does not upgrade the
bootflash on the standby RPM.
Enter the keyword all after the keyword linecard to upgrade the
bootflash or boot selector image on all linecards.

linecard number

Enter the keyword linecard followed by the line card slot number.
Range:
E1200 and E1200i AC/DC: 0-13
E600 and E600i: 0-6
E300: 0-5
C300: 0-7
C150: 0-3
S-Series: 0-0

rpm

Enter the keyword rpm to upgrade the system image of a selector
image on all processors on the RPM.

repair

Enter this keyword to upgrade a line card newly inserted into an
already upgraded chassis. This option is only available with the
system-image keyword.

booted

Upgrade the bootflash or bootselector image using the currently
running FTOS image.

file-url

Enter the following location keywords and information to upgrade
using an FTOS image other than the one currently running:
• To specify an FTOS image on the internal flash, enter flash://
file-path/filename.
• To specify an FTOS image on an FTP server, enter ftp://
user:password@hostip/filepath
• To specify an FTOS image on the external flash on the primary
RPM, slot0://file-path/filename
• To copy a file on a TFTP server, enter tftp://hostip/filepath/
filename

Defaults
Command Modes
Command
History

FTOS uses the boot flash image that was packed with it if no URL is specified.
EXEC Privilege
Version 7.7.1.0

Introduced system-image option

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Usage
Information

A system message appears stating the Bootflash upgrade status. Reload the system to boot
from the upgraded boot images.
Once the URL is specified, the same downloaded image can be used for upgrading an
individual RPM, line cards, SFM FPGA, and system-image for cache-boot without specifying
the file-url again using the command upgrade {bootflash-image | bootselector-image |
system-image} {all | linecard linecard-slot | rpm}. After 20 minutes, the cached memory is
released and returned for general use, but the URL is maintained and you do not have to
specify it for subsequent upgrades.

58

|

File Management

Related
Commands

upgrade fpga-image

Upgrade the FPGA version in the specified E-Series SFM.

boot system

Display configured boot image information

upgrade (S-Series management unit and Z9000)
sz

Upgrade the bootflash image or system image of the S-Series or Z-Series management unit.

Syntax

upgrade {boot | system} {ftp: | scp: | tftp: | flash: {A: |B:} | stack-unit | usbflash | slot0:}
file-url

Parameters

Defaults
Command Modes
Command
History

boot

Enter this keyword to change the boot image.

system

Enter this keyword to change the system image.

ftp:

After entering this keyword you can either follow it with the location of the source file in
this form: //userid:password@hostip/filepath, or press Enter to launch a prompt
sequence.

scp:

After entering this keyword you can either follow it with the location of the source file in
this form: //userid:password@hostip/filepath, or press Enter to launch a prompt
sequence.

slot0:

After entering this keyword you can either follow it with the location of the source file in
this form: //hostlocation/filepath, or press Enter to launch a prompt sequence.

tftp:

After entering this keyword you can either follow it with the location of the source file in
this form: //hostlocation/filepath, or press Enter to launch a prompt sequence.

flash:

After entering this keyword you can either follow it with the location of the source file in
this form: flash//filepath, or press Enter to launch a prompt sequence.

A: | B:

Enter the partition to upgrade from the flash.
S4810 and Z9000 only

stack-unit:

After entering this keyword to synch the image to the stack-unit.

usbflash:

After entering this keyword you can either follow it with the location of the source file in
this form: usbflash://filepath, or press Enter to launch a prompt sequence.
S55 only

No configuration or default values
EXEC Privilege
Version 8.3.11.1

Introduced on the Z9000, adding support for the SSD on the Z9000 only

Version 7.7.1.0

Added support for TFTP and SCP.

Version 7.6.1.0

Introduced on S-Series

Usage
Information

You must reload FTOS after executing this command. Use the command upgrade system
stack-unit (S-Series stack member) to copy FTOS from the management unit to one or more
stack members.

Example

FTOS#upgrade system ?
ftp:
Copy from remote file system (ftp://userid:password@hostip/filepath)
scp:
Copy from remote file system (scp://userid:password@hostip/filepath)
tftp:
Copy from remote file system (tftp://hostip/filepath)

File Management | 59

www.dell.com | support.dell.com

FTOS#$pgrade system ftp://username:password@10.11.1.1/FTOS-SB-7.7.1.0.bin
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Erasing Sseries ImageUpgrade Table of Contents, please wait
.!...........................................................................................
......................................................................................................
......................................................................................................
......................................................................................................
......................................................................................................
......................................................................................................
......................................................................................................
......................................................................................................
......................................................................................................
...........................!
12946259 bytes successfully copied
FTOS#reload

upgrade fpga-image
e

Syntax
Parameters

This command only be used on systems with SFM3 modules (and only when required by the
upgrade procedure in the release notes). Upgrade the FPGA version in the specified E-Series
SFM3 and automatically initiate an automatic reset to complete the version upgrade.
upgrade fpga-image {sfm} {all | id} [booted | flash:// | ftp: |slot0: | tftp]
sfm

Enter the keyword sfm to upgrade the FPGA on the SFMs.

rpm

Enter the keyword rpm to upgrade all processors on the RPM.

all

Enter the keyword all to upgrade the FPGA on all the SFMs.

id

Enter the keyword id to upgrade the FPGA on all a specific SFM.
Enter the path to the upgrade source. Entering  updates the FPGA from the
flash.

Defaults
Command Modes
Command
History

Example

Related
Commands

Usage
Information
0

60

|

File Management

No default values or behavior
EXEC Privilege
Version 8.3.1.0

Added rpm option

Version 7.5.1.0

Introduced on E-Series

FTOS#upgrade sfm 1 autoreset
SFM1: upgrade in progress
!!! !!! !!!
SFM1: upgrade complete
SFM1 is active. Resetting it might temporarily impact traffic.
Proceed with reset [confirm yes/no]: yes
FTOS#

show sfm

Display the SFM status.

upgrade (E-Series version)

Upgrade the E-Series.

On E-Series ExaScale, you cannot upgrade SFMs using this command when Cache Boot is
configured. If you attempt an upgrade, you must reload the chassis to recover.

Upgrading the C-Series FPGA
These commands are for upgrading the FPGA for C-Series RPMs and line cards.
•
•

restore fpga-imagee
upgrade fpga-image

restore fpga-image
c
Syntax
Parameters

Defaults
Command Mode
Command
History

Example

Copy the backup C-Series FPGA image to the primary FPGA image.
restore fpga-image {rpm | linecard} number
rpm

Enter rpm to upgrade an RPM FPGA.

linecard

Enter linecard to upgrade a line card FPGA.

number

Enter the line card or RPM slot number.
C-Series Line Card Range: 0-7, RPM Range: 0-1

None.
EXEC Privilege
Version 7.7.1.0

Renamed keyword primary-fpga-flash to fpga-image.

Version 7.5.1.0

Introduced on C-Series

FTOS#restore fpga-image linecard 4
Current FPGA information in the system:
=======================================
Card
FPGA Name
Current Version
New Version
-----------------------------------------------------------------------LC4
48 Port 1G LCM FPGA
A: 3.6
restore
***********************************************************************
* Warning - Upgrading FPGA is inherently risky and should
*
* only be attempted when necessary. A failure at this upgrade may
*
* cause a board RMA. Proceed with caution !
*
***********************************************************************
Restore fpga image for linecard 4 [yes/no]: yes
FPGA restore in progress. Please do NOT power off the card.
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Upgrade result :
================
Linecard 4 FPGA restore successful.

Usage
Information

Reset the card using the power-cycle option after restoring the FPGA command.

File Management | 61

www.dell.com | support.dell.com

Related
Commands

reset

Reset a card.

upgrade fpga-image
c
Syntax

Upgrade the primary FPGA image.
upgrade fpga-image {rpm {number | all}| linecard {number | all} [system-fpga | link-fpga] | all}

{booted | file-url}
Parameters

rpm number

Enter rpm followed by the RPM slot number to upgrade an RPM
FPGA
Range: 0-1

linecard number

Enter linecard followed by the line card slot number to upgrade a
linecard FPGA.
Range: 0-7 on the C300, 0-3 on the C150

all

Enter the keyword all to upgrade all RPM and linecard FPGAs.
Enter the keyword all after the keyword rpm to upgrade all FPGAs
on all RPMs.
Enter the keyword all after the keyword linecard to upgrade all
FPGAs on all linecards.

system-fpga

(OPTIONAL) Enter system-fpga to upgrade only the system
FPGA on a fiber linecard. Contact the Dell Force10 TAC before
using this keyword.

link-fpga

(OPTIONAL) Enter link-fpga to upgrade only the link FPGA on a
fiber linecard. Contact the Dell Force10 TAC before using this
keyword.

booted

Upgrade the FPGA image using the currently running FTOS image.

file-url

Enter the following location keywords and information to upgrade
the FPGA using an FTOS image other than the one currently
running:
• To specify an FTOS image on the internal flash, enter flash://
file-path/filename.
• To specify an FTOS image on an FTP server, enter ftp://
user:password@hostip/filepath
• To specify an FTOS image on the external flash on the primary
RPM, slot0://file-path/filename
• To copy a file on a TFTP server, enter tftp://hostip/filepath/
filename

Defaults
Command Mode
Command
History

62

|

File Management

None.
EXEC Privilege
Version 7.7.1.0

Renamed the primary-fpga-flash keyword to fpga-image. Added support for
upgrading using a remote FTOS image.

Version 7.6.1.0

Added support for the all keyword

Version 7.5.1.0

Introduced on C-Series

Example

Usage
Information
Related
Commands

FTOS#conf
FTOS(conf)# upgrade primary-fpga-flash rpm
Proceed to upgrade primary fpga flash for rpm 0 [confirm yes/no]: yes
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
FTOS#

Reset the card using the power-cycle option after restoring the FPGA command.

reset

Reset a line card or RPM.

restore fpga-image

This command copies the backup FPGA image to the primary FPGA image.

File Management | 63

64

|

File Management

www.dell.com | support.dell.com

4
Control and Monitoring
Overview
This chapter contains the following commands to configure and monitor the system,
including Telnet, FTP, and TFTP as they apply to the following Dell Force10 platforms e
E-Series, c C-Series, s S-Series, or
.
Note: Beginning in release 8.3.10.0, the enable xfp-power-updates command was
deprecated for the S4810 only. It was replaced by the enable optic-info-update interval
command to update information on temperature and power monitoring in the SNMP
MIB.

Commands
asf-mode

rpm  location-led

audible cut-off

send

banner exec

service timestamps

banner login

show alarms

banner motd

show chassis

cam-audit linecard

show command-history

cam-audit stack-unit

show command-tree

clear alarms

show console lp

clear command history

show cpu-traffic-stats

clear line

show debugging

configure

show environment (C-Series and E-Series)

debug cpu-traffic-stats

show environment (S-Series)

debug ftpserver

show inventory (C-Series and E-Series)

disable

show inventory (S-Series)

do

show linecard

enable

show linecard boot-information

enable optic-info-update interval

show memory (C-Series and E-Series)

enable xfp-power-updates

show memory (S-Series)

Control and Monitoring | 65

www.dell.com | support.dell.com

end

show processes cpu (C-Series and E-Series)

epoch

show processes cpu (S-Series)

exec-banner

show processes ipc flow-control

exec-timeout

show processes memory (C-Series and E-Series)

exit

ftp-server username

ftp-server topdir

show processes memory (S-Series)

hostname

show rpm

ip ftp password

show software ifm

ip ftp source-interface

show switch links

ip ftp username

show system (S-Series and S4810)

ip telnet server enable

show tech-support (C-Series and E-Series)

ip telnet source-interface

show tech-support (S-Series)

ip tftp source-interface

ssh-peer-rpm

line

telnet

linecard

telnet-peer-rpm

module power-off

terminal length

motd-banner

terminal xml

ping

traceroute

power-off

undebug all

power-on

upload trace-log

reload

virtual-ip

reset

write

asf-mode
z

Enable Alternate Store and Forward (ASF) mode and forward packets as soon as a threshold
is reached.
Syntax

asf-mode stack-unit {unit-id | all} queue size

To return to standard Store and Forward mode, enter no asf-mode stack unit.
Parameters

unit-id

Enter the stack member unit identifier of the stack member to reset.
S4810 range: 0 - 11
Z9000 range: 0 - 7
all
Note: The S4810 commands accept Unit ID numbers 0-11, though S4810
supports stacking up to 6 units with FTOS version 8.3.12.0.

queue size

Defaults

66

|

Not configured.

Control and Monitoring

Enter the queue size of the stack member.
Range: 0 - 15

Command Modes

CONFIGURATION

Command
History

Usage
Information

Version 8.3.11.0

Introduced on the Z9000

Version 8.3.7.0

Introduced on the S4810.

You must save the configuration and reload the system to implement ASF. When you enter the
command, the system sends a message stating that the new mode is enabled when the system
reloads.

audible cut-off
e
Syntax

Turn off an audible alarm.
audible cut-off

Defaults

Not configured.

Command Modes

EXEC Privilege

banner exec
ces
Syntax
Parameters

Defaults
Command Modes
Command
History

Configure a message that is displayed when a user enters the EXEC mode.
banner exec c line c

c

Enter the keywords banner exec, and then enter a character delineator,
represented here by the letter c, and press ENTER.

line

Enter a text string for your banner message ending the message with your
delineator.
In the example below, the delineator is a percent character (%); the banner
message is “testing, testing”.

No banner is displayed.
CONFIGURATION
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Usage
Information
Example

Optionally, use the banner exec command to create a text string that is displayed when the
user accesses the EXEC mode. The exec-banner command toggles that display.
FTOS(conf)#banner exec ?
LINE
c banner-text c, where 'c' is a delimiting character
FTOS(conf)#banner exec %

Control and Monitoring | 67

www.dell.com | support.dell.com

Enter TEXT message. End with the character '%'.
This is the banner%
FTOS(conf)#end
FTOS#exit
4d21h5m: %RPM0-P:CP %SEC-5-LOGOUT: Exec session is terminated for user on line console
This is the banner
FTOS con0 now available
Press RETURN to get started.
4d21h6m: %RPM0-P:CP %SEC-5-LOGIN_SUCCESS: Login successful for user on line console
This is the banner
FTOS>

Related
Commands

banner login

Sets a banner for login connections to the system.

banner motd

Sets a Message of the Day banner.

exec-banner

Enable the display of a text string when the user enters the EXEC mode.

line

Enable and configure console and virtual terminal lines to the system.

banner login
ces
Syntax
Parameters

Defaults
Command Modes
Command
History

Set a banner to be displayed when logging on to the system.
banner login {keyboard-interactive | no keyboard-interactive} [c line c]

keyboard-interactive

Enter this keyword to require a carriage return (CR) to get the message
banner prompt.

c

Enter a delineator character to specify the limits of the text banner. In the
example below, the % character is the delineator character.

line

Enter a text string for your text banner message ending the message with
your delineator.
In the example below, the delineator is a percent character (%).
Ranges:
• maximum of 50 lines
• up to 255 characters per line

No banner is configured and the CR is required when creating a banner.
CONFIGURATION
Version 8.2.1.0

Introduced keyboard-interactive keyword

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command

68

|

Control and Monitoring

Usage
Information

Related
Commands

A login banner message is displayed only in EXEC Privilege mode after entering the enable
command followed by the password. These banners are not displayed to users in EXEC
mode.
banner exec

Sets a banner to be displayed when you enter EXEC Privilege mode.

banner motd

Sets a Message of the Day banner.

Example

FTOS(conf)#banner login ?
keyboard-interactive
Press enter key to get prompt
LINE
c banner-text c, where 'c' is a delimiting character
FTOS(conf)#no banner login ?
keyboard-interactive
Prompt will be displayed by default

FTOS(conf)#banner login keyboard-interactive
Enter TEXT message.
This is the banner%
FTOS(conf)#end
FTOS#exit

End with the character '%'.

13d21h9m: %RPM0-P:CP %SEC-5-LOGOUT: Exec session is terminated for user on line console
This is the banner
FTOS con0 now available
Press RETURN to get started.
13d21h10m: %RPM0-P:CP %SEC-5-LOGIN_SUCCESS: Login successful for user on line console
This is the banner

banner motd
ces
Syntax
Parameters

Defaults
Command Modes
Command
History

Set a Message of the Day (MOTD) banner.
banner motd c line c

c

Enter a delineator character to specify the limits of the text banner. In the above
figures, the % character is the delineator character.

line

Enter a text string for your message of the day banner message ending the message
with your delineator.
In the example figures above, the delineator is a percent character (%).

No banner is configured.
CONFIGURATION
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Usage
Information

A MOTD banner message is displayed only in EXEC Privilege mode after entering the
enable command followed by the password. These banners are not displayed to users in
EXEC (non-privilege) mode.

Control and Monitoring | 69

www.dell.com | support.dell.com

Related
Commands

banner exec

Sets a banner to be displayed when you enter the EXEC Privilege mode.

banner login

Sets a banner to be displayed after successful login to the system.

cam-audit linecard
e
Syntax
Parameters

Defaults
Command Modes
Command
History
Usage
Information

Enable audit of the IPv4 forwarding table on all line cards.
cam-audit linecard all ipv4-fib interval time-in-minutes
all

Enter the keyword all to enable CAM audit on all line cards.

ipv4-fib

Enter the keyword ipv4-fib to designate the CAM audit on the
IPv4 forwarding entries.

interval time-in-minutes

Enter the keyword interval followed by the frequency in minutes
of the CAM audit.
Range: 5 to 1440 minutes (24 hours)
Default: 60 minutes

Disabled
CONFIGURATION
Version 7.4.1.0

Introduced on E-Series

Enables periodic audits of software and hardware copies of the IPv4 forwarding table.

cam-audit stack-unit
Enable audit of the IPv4 and IPv6 forwarding table on all line cards.
Syntax
Parameters

Defaults
Command Modes

70

|

cam-audit stack-unit [all | ipv4-fib | ipv6-fib] interval time-in-minutes
all

Enter the keyword all to enable CAM audit on all line cards.

ipv4-fib

Enter the keyword ipv4-fib to designate the CAM audit on the
IPv4 forwarding entries.

ipv6-fib

Enter the keyword ipv6-fib to designate the CAM audit on the
IPv6 forwarding entries.

interval time-in-minutes

Enter the keyword interval followed by the frequency in minutes
of the CAM audit.
Range: 5 to 1440 minutes (24 hours)
Default: 60 minutes

Disabled
CONFIGURATION

Control and Monitoring

Command
History
Usage
Information

Version 8.3.10.0

Introduced on S4810

Enables periodic audits of software and hardware copies of the IPv4 and IPv6 forwarding
table.

clear alarms
ces
Syntax
Command Modes
Command
History

Clear alarms on the system.
clear alarms

EXEC Privilege
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Usage
Information

This command clear alarms that are no longer active. If an alarm situation is still active, it is n
in the system output.

clear command history
ces
Syntax
Command Modes
Command
History

Clear the command history log.
clear command history

EXEC Privilege
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Related
Commands

show
command-history

Display a buffered log of all commands entered by all users along with a
time stamp.

clear line
ces
Syntax

Reset a terminal line.
clear line {line-number | aux 0 | console 0 | vty number}

Control and Monitoring | 71

www.dell.com | support.dell.com

Parameters

line-number

Enter a number for one of the 12 terminal lines on the system.
Range: 0 to 11.

aux 0

Enter the keywords aux 0 to reset the Auxiliary port.
Note: This option is supported on E-Series only.

Command Modes
Command
History

console 0

Enter the keyword console 0 to reset the Console port.

vty number

Enter the keyword vty followed by a number to clear a Terminal line.
Range: 0 to 9

EXEC Privilege
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command

configure
ces
Syntax
Parameters

Command Modes
Command
History

Enter the CONFIGURATION mode from the EXEC Privilege mode.
configure [terminal]
terminal

(OPTIONAL) Enter the keyword terminal to specify that you are configuring
from the terminal.

EXEC Privilege
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Example

FTOS#configure
FTOS(conf)#

debug cpu-traffic-stats
ces
Syntax
Defaults
Command Modes

72

|

Enable the collection of CPU traffic statistics.
debug cpu-traffic-stats

Disabled
EXEC Privilege

Control and Monitoring

Command
History

Usage
Information

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 6.2.1.1

Introduced on E-Series

This command enables (and disables) the collection of CPU traffic statistics from the time
this command is executed (not from system boot). However, excessive traffic received by a
CPU will automatically trigger (turn on) the collection of CPU traffic statics. The following
message is an indication that collection of CPU traffic is automatically turned on. Use the
show cpu-traffic-stats to view the traffic statistics.
Excessive traffic is received by CPU and traffic will be rate controlled
Note: This command must be enabled before the show cpu-traffic-stats command
will display traffic statistics. Dell Force10 recommends that you disable debugging
(no debug cpu-traffic-stats) once troubleshooting is complete.

Related
Commands

show cpu-traffic-stats

Display cpu traffic statistics

debug ftpserver
ces
Syntax
Command Modes

View transactions during an FTP session when a user is logged into the FTP server.
debug ftpserver

EXEC Privilege

Command
History

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command

disable
cesz
Syntax

Return to the EXEC mode.
disable [level]

Parameters

Defaults
Command Modes

level

(OPTIONAL) Enter a number for a privilege level of the FTOS.
Range: 0 to 15.
Default: 1

1
EXEC Privilege

Control and Monitoring | 73

www.dell.com | support.dell.com

Command
History

Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command

do
ces
Syntax
Parameters

Allows the execution of most EXEC-level commands from all CONFIGURATION levels
without returning to the EXEC level.
do command

command

Enter an EXEC-level command.

Defaults

No default behavior

Command Modes

CONFIGURATION
INTERFACE

Command
History

Usage
Information

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 6.1.1.0

Introduced on E-Series

The following commands are not supported by the do command:
•
•
•
•

Example

74

|

Control and Monitoring

enable
disable
exit
config

FTOS(conf-if-te-5/0)#do clear counters
Clear counters on all interfaces [confirm]
FTOS(conf-if-te-5/0)#
FTOS(conf-if-te-5/0)#do clear logging
Clear logging buffer [confirm]
FTOS(conf-if-te-5/0)#
FTOS(conf-if-te-5/0)#do reload
System configuration has been modified. Save? [yes/no]: n
Proceed with reload [confirm yes/no]: n
FTOS(conf-if-te-5/0)#

enable
ces
Syntax
Parameters

Defaults
Command Modes
Command
History

Enter the EXEC Privilege mode or any other privilege level configured. After entering this
command, you may need to enter a password.
enable [level]

level

(OPTIONAL) Enter a number for a privilege level of FTOS.
Range: 0 to 15.
Default: 15

15
EXEC
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Usage
Information

Related
Commands

Users entering the EXEC Privilege mode or any other configured privilege level can access
configuration commands. To protect against unauthorized access, use the enable password
command to configure a password for the enable command at a specific privilege level. If no
privilege level is specified, the default is privilege level 15.
enable password

Configure a password for the enable command and to access a privilege level.

enable optic-info-update interval
Enable polling intervals of optical information updates for SNMP.
Syntax

enable optical-info-update interval seconds

To disable optical power information updates, use the no enable optical-info-update interval
command.
Parameters

Defaults
Command Modes
Command
History

interval seconds

Enter the keyword interval followed by the polling interval in seconds.
Range: 120 to 6000 seconds
Default: 300 seconds (5 minutes)

Disabled
CONFIGURATION
Version 8.3.10.0

Replacement command for S4810 only. Replaces the enable
xfp-power-updates command.

Control and Monitoring | 75

www.dell.com | support.dell.com

Usage
Information

The default interval for the polling is 300 seconds (5 minutes). Use this command to enable
the polling and to configure the polling frequency.

enable xfp-power-updates
ces
Syntax

Enable XFP power updates for SNMP.
enable xfp-power-updates interval seconds

To disable XFP power updates, use the no enable xfp-power-updates command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

interval seconds

Enter the keyword interval followed by the polling interval in seconds.
Range: 120 to 6000 seconds
Default: 300 seconds (5 minutes)

Disabled
CONFIGURATION
Version 8.3.10.0

Deprecated command for S4810 only. Replaced by the enable
optic-info-update interval command to update information on
temperature and power monitoring in the SNMP MIB.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series and E-Series

The chassis MIB contain the entry chSysXfpRecvPower in the chSysPortTable table.
Periodically, IFA polls the XFP power for each of the ports, and sends the values to IFM
where it is cached. The default interval for the polling is 300 seconds (5 minutes). Use this
command to enable the polling and to configure the polling frequency.

end
ces
Syntax
Command Modes

Command
History

76

|

Return to the EXEC Privilege mode from other command modes (for example, the
CONFIGURATION or ROUTER OSPF modes).
end

CONFIGURATION, SPANNING TREE, MULTIPLE SPANNING TREE, LINE,
INTERFACE, TRACE-LIST, VRRP, ACCESS-LIST, PREFIX-LIST, AS-PATH ACL,
COMMUNITY-LIST, ROUTER OSPF, ROUTER RIP, ROUTER ISIS, ROUTER BGP
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Control and Monitoring

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Related
Commands

exit

Return to the lower command mode.

epoch
e
Syntax
Parameters

Defaults
Command Modes
Command
History

Usage
Information

Set the epoch scheduling time for the chassis.
epoch {2.4 |3.2 | 10.4}
2.4

Enter the keyword 2.4 to set the epoch to 2.4 micro-seconds and lower the latency.
This option is available on the E600i and E1200i E-Series ExaScale systems only.

3.2

Enter the keyword 3.2 to set the epoch to 3.2 micro-seconds and lower the latency.
This option is available on the E600/E600i and E1200/E1200i only. ExaScale does not
supports this setting with FTOS 8.3.1.0 and later.

10.4

Enter the keyword 10.4 to set the epoch to 10.4 micro-seconds.
This is the default setting and is available on the E300, E600/E600i, and E1200.

10.4
CONFIGURATION
Version 8.3.1.0

Added 2.4 micro-seconds option. ExaScale supports only 10.4 microseconds
and 2.4 microseconds with FTOS 8.3.1.0 and later.

Version 8.1.1.2

Introduced on E-Series ExaScale E600i

Version 8.1.1.0

Introduced on E-Series ExaScale E1200i

Version 6.2.1.1

Support for E300 introduced (10.4 only)

Version 6.1.1.0

Values changed as described above

You save the configuration and reload the chassis for the changes to the epoch command
setting to take affect.
When using 10 SFMs in an ExaScale chassis, the 10.4 and 2.4 settings are both line rate.
Additionally, the 2.4 setting has a lower latency.
When using 9 SFMs in an ExaScale chassis, the 10.4 setting is line rate; the 2.4 setting
reduces throughput. Dell Force10 recommends using the 10.4 setting when the system has 9
SFMs.
Using 8 SFMs in an ExaScale chassis reduces throughput at any epoch setting.
Note: The E300 supports only the 10.4 epoch setting. The E-Series TeraScale E600/
E600i and the E1200/E1200i systems support the 10.4 and the 3.2 epoch settings.

Control and Monitoring | 77

www.dell.com | support.dell.com

Note: For E-Series ExaScale, the 2.4 setting is supported on FTOS version 8.3.1.0
and later. The 10.4 setting is supported on all ExaScale FTOS versions. The 3.2
setting is only supported on FTOS versions 8.2.1.0 and earlier.

exec-banner
ces
Syntax
Defaults
Command Modes
Command
History

Enable the display of a text string when the user enters the EXEC mode.
exec-banner

Enabled on all lines (if configured, the banner appears).
LINE
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Usage

Related
Commands

Optionally, use the banner exec command to create a text string that is displayed when the
user accesses the EXEC mode. This command toggles that display.
banner exec

Configure a banner to display when entering the EXEC mode.

line

Enable and configure console and virtual terminal lines to the system.

exec-timeout
ce s
Syntax

Set a time interval the system will wait for input on a line before disconnecting the session.
exec-timeout minutes [seconds]

To return to default settings, enter no exec-timeout.
Parameters

Defaults
Command Modes

78

|

minutes

Enter the number of minutes of inactivity on the system before disconnecting the
current session.
Range: 0 to 35791
Default: 10 minutes for console line; 30 minutes for VTY line.

seconds

(OPTIONAL) Enter the number of seconds
Range: 0 to 2147483
Default: 0 seconds

10 minutes for console line; 30 minutes for VTY lines; 0 seconds
LINE

Control and Monitoring

Command
History

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Usage
Information

To remove the time interval, enter exec-timeout 0 0.

Example

FTOS con0 is now available
Press RETURN to get started.
FTOS>

exit
ce s
Syntax
Command Modes

Command
History

Return to the lower command mode.
exit

EXEC Privilege, CONFIGURATION, LINE, INTERFACE, TRACE-LIST, PROTOCOL
GVRP, SPANNING TREE, MULTIPLE SPANNING TREE, MAC ACCESS LIST,
ACCESS-LIST, AS-PATH ACL, COMMUNITY-LIST, PREFIX-LIST, ROUTER OSPF,
ROUTER RIP, ROUTER ISIS, ROUTER BGP
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Related
Commands

end

Return to the EXEC Privilege command mode.

ftp-server enable
ces
Syntax
Defaults
Command Modes
Command
History

Enable FTP server functions on the system.
ftp-server enable

Disabled.
CONFIGURATION
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Example

morpheus% ftp 10.31.1.111

Control and Monitoring | 79

www.dell.com | support.dell.com

Connected to 10.31.1.111.
220 FTOS (1.0) FTP server ready
Name (10.31.1.111:dch): dch
331 Password required
Password:
230 User logged in
ftp> pwd
257 Current directory is "flash:"
ftp> dir
200 Port set okay
150 Opening ASCII mode data connection
size
date
time
name
------------------------512
Jul-20-2004 18:15:00
tgtimg
512
Jul-20-2004 18:15:00
diagnostic
512
Jul-20-2004 18:15:00
other
512
Jul-20-2004 18:15:00
tgt
226 Transfer complete
329 bytes received in 0.018 seconds (17.95 Kbytes/s)
ftp>

Related
Commands

ftp-server topdir

Set the directory to be used for incoming FTP connections to the E-Series.

ftp-server username

Set a username and password for incoming FTP connections to the
E-Series.

ftp-server topdir
ces
Syntax
Parameters

Defaults
Command Modes
Command
History

Specify the top-level directory to be accessed when an incoming FTP connection request is
made.
ftp-server topdir directory

directory

Enter the directory path.

The internal flash is the default directory.
CONFIGURATION
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Usage
Information

Related
Commands

80

|

After you enable FTP server functions with the ftp-server enable command, Dell Force10
recommends that you specify a top-level directory path. Without a top-level directory path
specified, the FTOS directs users to the flash directory when they log in to the FTP server.
ftp-server enable

Enables FTP server functions on the E-Series.

ftp-server username

Set a username and password for incoming FTP connections to the
E-Series.

Control and Monitoring

ftp-server username
ces
Syntax
Parameters

Defaults
Command Modes
Command
History

Create a user name and associated password for incoming FTP server sessions.
ftp-server username username password [encryption-type] password

username

Enter a text string up to 40 characters long as the user name.

password password

Enter the keyword password followed by a string up to 40 characters
long as the password.
Without specifying an encryption type, the password is unencrypted.

encryption-type

(OPTIONAL) After the keyword password enter one of the following
numbers:
• 0 (zero) for an unecrypted (clear text) password
• 7 (seven) for hidden text password.

Not enabled.
CONFIGURATION
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command

hostname
ces
Syntax
Parameters

Defaults
Command Modes
Command
History

Set the host name of the system.
hostname name

name

Enter a text string, up to 32 characters long.

FTOS
CONFIGURATION
Version 8.3.12.0

Changed default from “Force10” to “FTOS”

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Usage
Information

The hostname is used in the prompt.

Control and Monitoring | 81

www.dell.com | support.dell.com

ip ftp password
ces
Syntax
Parameters

Defaults
Command Modes
Command
History

Specify a password for outgoing FTP connections.
ip ftp password [encryption-type] password

encryption-type

(OPTIONAL) Enter one of the following numbers:
• 0 (zero) for an unecrypted (clear text) password
• 7 (seven) for hidden text password

password

Enter a string up to 40 characters as the password.

Not configured.
CONFIGURATION
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Usage
Information

The password is listed in the configuration file; you can view the password by entering the
show running-config ftp command.
The password configured by the ip ftp password command is used when you use the ftp:
parameter in the copy command.

Related
Commands

copy

Copy files.

ip ftp username

Set the user name for FTP sessions.

ip ftp source-interface
ces
Syntax

82

|

Specify an interface’s IP address as the source IP address for FTP connections.
ip ftp source-interface interface

Control and Monitoring

Parameters

Defaults

Command Modes
Command
History

interface

Enter the following keywords and slot/port or number information:
• For an 100/1000 Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For Loopback interfaces, enter the keyword loopback followed by a number
from zero (0) to 16383.
• For a Port Channel interface, enter the keyword port-channel followed by a
number:
C-Series and S-Series: 1-128
E-Series: 1 to 255 for TeraScale and 1 to 512 for ExaScale
• For SONET interface types, enter the keyword sonet followed by the slot/
port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by
the slot/port information.
• For a VLAN interface, enter the keyword vlan followed by a number from 1
to 4094.

The IP address on the system that is closest to the Telnet address is used in the outgoing
packets.
CONFIGURATION
Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.2.1.0

Increased number of VLANs on ExaScale to 4094 (was 2094)

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Related
Commands

copy

Copy files from and to the switch.

ip ftp username
ces
Syntax
Parameters

Defaults
Command Modes

Assign a user name for outgoing FTP connection requests.
ip ftp username username
username

Enter a text string as the user name up to 40 characters long.

No user name is configured.
CONFIGURATION

Control and Monitoring | 83

www.dell.com | support.dell.com

Command
History

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Usage
Information
Related
Commands

You must also configure a password with the ip ftp password command.

ip ftp password

Set the password for FTP connections.

ip telnet server enable
ces
Syntax

Enable the Telnet server on the switch.
ip telnet server enable

To disable the Telnet server, execute the no ip telnet server enable command.
Defaults
Command Modes
Command
History

Related
Commands

Enabled
CONFIGURATION
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Introduced on C-Series

Version 6.1.1.0

Introduced on E-Series

ip ssh server

Enable SSH server on the system.

ip telnet source-interface
ces
Syntax

84

|

Set an interface’s IP address as the source address in outgoing packets for Telnet sessions.
ip telnet source-interface interface

Control and Monitoring

Parameters

Defaults

Command Modes
Command
History

interface

Enter the following keywords and slot/port or number information:
• For an 100/1000 Ethernet interface, enter the keyword GigabitEthernet followed
by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed
by the slot/port information.
• For Loopback interfaces, enter the keyword loopback followed by a number from
zero (0) to 16383.
• For the SONET interfaces, enter the keyword sonet followed by slot/port
information.
• For a Port Channel, enter the keyword port-channel followed by a number:
C-Series and S-Series: 1-128
E-Series: 1 to 255 for TeraScale and 1 to 512 for ExaScale
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by the
slot/port information.
• For VLAN interface, enter the keyword vlan followed by a number from 1 to
4094.

The IP address on the system that is closest to the Telnet address is used in the outgoing
packets.
CONFIGURATION
Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.2.1.0

Increased number of VLANs on ExaScale to 4094 (was 2094)

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Related
Commands

telnet

Telnet to another device.

ip tftp source-interface
ces
Syntax

Assign an interface’s IP address in outgoing packets for TFTP traffic.
ip tftp source-interface interface

Control and Monitoring | 85

www.dell.com | support.dell.com

Parameters

Defaults

Command Modes
Command
History

interface

Enter the following keywords and slot/port or number information:
• For an 100/1000 Ethernet interface, enter the keyword GigabitEthernet followed
by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed
by the slot/port information.
• For Loopback interfaces, enter the keyword loopback followed by a number from
zero (0) to 16383.
• For a Port Channel, enter the keyword port-channel followed by a number:
C-Series and S-Series: 1-128
E-Series: 1 to 255 for TeraScale and 1 to 512 for ExaScale
• For the SONET interfaces, enter the keyword sonet followed by slot/port
information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by the
slot/port information.
• For a VLAN interface, enter the keyword vlan followed by a number from 1 to
4094.

The IP address on the system that is closest to the Telnet address is used in the outgoing
packets.
CONFIGURATION
Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.2.1.0

Increased number of VLANs on ExaScale to 4094 (was 2094)

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command

line
ces
Syntax
Parameters

86

|

Enable and configure console and virtual terminal lines to the system. This command
accesses LINE mode, where you can set the access conditions for the designated line.
line {aux 0 | console 0 | vty number [end-number]}
aux 0

Enter the keyword aux 0 to configure the auxiliary terminal connection.
Note: This option is supported on E-Series only.

console 0

Enter the keyword console 0 to configure the console port.
The console option for the S-Series is <0-0>.

vty number

Enter the keyword vty followed by a number from 0 to 9 to configure a virtual
terminal line for Telnet sessions.
The system supports 10 Telnet sessions.

end-number

(OPTIONAL) Enter a number from 1 to 9 as the last virtual terminal line to
configure. You can configure multiple lines at one time.

Control and Monitoring

Defaults
Command Modes
Command
History

Not configured
CONFIGURATION
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Usage
Information
Related
Commands

You cannot delete a terminal connection.

access-class

Restrict incoming connections to a particular IP address in an IP access control
list (ACL).

password

Specify a password for users on terminal lines.

show linecard

Display the line card(s) status.

linecard
ce

Pre-configure a line card in a currently empty slot of the system or a different line card type
for the slot. To pre-configure a 4-port 40G line card, refer to the linecard command.

Syntax

linecard number card-type

Parameters

Defaults
Command Modes
Command
History

number

Enter the number of the slot.
C-Series Range: 0-7
E-Series Range: 0 to 13 on a E1200/E1200i, 0 to 6 on a E600/E6001, and 0 to 5
on a E300.

card-type

Enter the line card ID ( the Supported Hardware section in the Release Notes).

Not configured
CONFIGURATION
Version 8.1.1.2

Introduced on E-Series ExaScale E600i

Version 8.1.1.0

Introduced on E-Series ExaScale E1200i

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Usage
Information

Example
(C-Series)

Use this command only for empty slots or a slot where you have hot-swapped a different line
card type. Before inserting a card of a different type into the pre-configured slot, execute the
no linecard number command. The following screenshot shows the current supported
C-Series line cards, along with their “card types” (card-type IDs).
FTOS#show linecard 3

Control and Monitoring | 87

www.dell.com | support.dell.com

-- Line card 11 -Status
: not present
FTOS#linecard 3 ?
E46TB 36-port GE 10/100/1000Base-T with RJ45 - 8-port FE/GE with SFP - 2-port 10GE with SFP+
E46VB 36-port GE 10/100/1000Base-T with RJ45 and PoE - 8-port FE/GE with SFP - 2-port 10GE with SFP+
E48PB 48-port FE/GE line card with SFP optics (CB)
E48TB 48-port GE 10/100/1000Base-T line card with RJ45 interfaces (CB)
E48VB 48-port GE 10/100/1000Base-T line card with RJ45 interfaces and PoE (CB)
EX4PB 4-port 10GE LAN PHY line card with XFP optics (CB)
EX8PB 8-port 10GE LAN PHY line card with XFP optics (CB)
FTOS#linecard 3 EX4PB
FTOS#show linecard 3
-- Line card 11 -Status
: not present
Required Type : EX4PB - 4-port 10GE LAN PHY line card with XFP optics (CB)

Note: It is advisable to shut down interfaces on a line card that you are hot-swapping.
Related
Commands

show linecard

Display the line card(s) status.

linecard (4-port 40G line card)
ex
Syntax

Parameters

88

|

Pre-configure an empty slot in an E-Series ExaScale switch for a 4-port 40 GigabitEthernet
line card or reconfigure a slot in which you have hot-swapped a 4-port 40G line card.
linecard slot-number card-type {linerate | oversubscribed} active-ports
port-set0 port-number [port-number] port-set1 port-number [port-number]

slot-number

Enter the slot number in which you will use the line card.
Range: 0 - 13 on an E1200i; 0 - 5 on an E600i.

card-type

Enter the line card ID. Valid values are:
EX04PH: Configures the slot for a 6-port 40GE line card with 10M CAM
(LC-EH-40GE-4P).
EX04PJ: Configures the slot for a 6-port 40GE line card with 40M CAM
(LC-EJ-40GE-4P).

linerate

Configure two ports on the line card to transmit data at full line rate (40 Gbps).

oversubscribed

Configure four ports on the line card for oversubscribed data transmission.

active-ports

Enable the active ports for the specified mode (linerate or oversubscribed).

Control and Monitoring

Defaults

Command Modes
Command
History
Usage
Information

port-set0
port-number
[port-number]

Enter the port number(s) used to specify the active ports on port pipe 0.
Port-number range: 0 - 2. On port pipe 0, 0 - 2 corresponds to ports 0, 1, and 2
on the line card.
If you configure linerate mode, enter one port number for port pipe 0.
If you configure oversubscribed mode, enter two port numbers (separated by a
space).

port-set1
port-number
[port-number]

Enter the port number(s) used to specify the active ports on port pipe 1.
Port-number range: 0 - 2. On port pipe 1, 0 - 2 corresponds to ports 3, 4, and 5
on the line card.
If you configure linerate mode, enter one port number for port pipe 1.
If you configure oversubscribed mode, enter two port numbers (separated by a
space).

When you insert a 4-port 40Gline card in an ExaScale slot, the line card is set to operate in
oversubscribed mode with active ports 1 and 2 on port pipe 0 (portset0 1 2) and active ports 0
and 1 on port pipe 1 (portset1 0 1).
CONFIGURATION
Version 8.5.1.0

Introduced on E-Series ExaScale E600i and E1200i.

Use this command only to configure an empty slot or a slot in which you have hot-swapped a
4-port 40G line card. Before you insert a different line-card type into a slot pre-configured for
a 4-port 40G line card, be sure to enter the no linecard number command.

Warning: After you enter the linecard command to reconfigure a 4-port 40G line card installed in an
ExaScale switch, you are prompted to reboot the line card to activate the settings. Traffic on the line card is
interrupted when you reset the card.

On a 4-port 40G line card, there are six ports and two port pipes: 0 and 1. Each port pipe
consists of three ports, one CFP port and two QSFP ports:
•
•

Ports 0, 1, and 2 use pipe 0.
Ports 3, 4, and 5 use pipe 1.

To configure linerate mode, you specify one port on each pipe. To configure oversubscribed
mode, you specify two ports on each pipe.
Example

FTOS(conf)# linecard 5 EX04PJ oversubscribed active-ports port-set0 1 2 port-set1 0 1
FTOS(conf)# linecard 13 EX04PH linerate active-ports port-set0 2 port-set1 0
FTOS(conf)# linecard 5 EX04PJ linerate active-ports port-set0 1 port-set1 1
Updating the linecard mode or active-ports will require a linecard reboot.
Proceed with reset of linecard? [confirm yes/no]:

Related
Commands

show linecard

Display the line card(s) status.

Control and Monitoring | 89

www.dell.com | support.dell.com

module power-off
ce

Turn off power to a line card at next reboot.

Syntax

module power-off linecard number

Parameters

Defaults
Command Modes
Command
History

linecard number

Enter the keyword line card followed by the line card slot number
C-Series Range: 0-7
E-Series Range: 0 to 13 on a E1200/1200i, 0 to 6 on a E600/E600i, and 0
to 5 on a E300.

Not configured.
CONFIGURATION
Version 8.1.1.2

Introduced on E-Series ExaScale E600i

Version 8.1.1.0

Introduced on E-Series ExaScale E1200i

Version 7.5.1.0

Introduced on C-Series

E-Series original Command

motd-banner
ces
Syntax
Defaults
Command Modes
Command
History

Enable a Message of the Day (MOTD) banner to appear when you log in to the system.
motd-banner

Enabled on all lines.
LINE
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command

ping
ces

Syntax

90

|

Test connectivity between the system and another device by sending echo requests and
waiting for replies.
ping [vrf ] [host | ip-address | ipv6-address] [count {number | continuous}] [datagram-size]
[timeout] [source (ip src-ipv4-address) | interface] [tos] [df-bit (y|n)] [validate-reply(y|n)]
[outgoing-interface] [pattern pattern] [sweep-min-size] [sweep-max-size] [sweep-interval]
[ointerface (ip src-ipv4-address) | interface]

Control and Monitoring

Parameter

vrf

(OPTIONAL) E-Series Only: Enter the VRF Instance name of the device
to which you are testing connectivity.

host

(OPTIONAL) Enter the host name of the devices to which you are testing
connectivity.

ip-address

(OPTIONAL) Enter the IPv4 address of the device to which you are
testing connectivity. The address must be in the dotted decimal format.

ipv6-address

(OPTIONAL) E-Series only Enter the IPv6 address, in the x:x:x:x::x
format, to which you are testing connectivity.
Note: The :: notation specifies successive hexadecimal fields of zeros

count

Enter the number of echo packets to be sent.
number: 1- 2147483647
Continuous: transmit echo request continuously
Default: 5

datagram size

Enter the ICMP datagram size.
Range: 36 - 15360 bytes
Default: 100

timeout

Enter the interval to wait for an echo reply before timing out.
Range: 0 -3600 seconds
Default: 2 seconds

source

The IPv4 or IPv6 source address or source interface. For IPv6 addresses,
this may be an address in the Global or link-local address zones.

tos

(IPv4 only) Type of service required.

df-bit

(IPv4 only) Enter “Y” or “N” for the “don’t fragment bit” in IPv4 header

outgoing-interface

(IPv6 link-local address) Enter outgoing interface for ping packets to a
destination link-local address.

validate-reply

(IPv4 only) Enter “Y” or “N” for reply validation.

pattern pattern

(IPv4 only) Enter the IPv4 data pattern.
Range: 0 - FFFF
Default: 0xABCD

sweep-min-size

The minimum size of datagram in sweep range.
Range: 52 - 15359 bytes

swim-max-size

The maximum size of datagram in sweep range.
Range: 52 - 15359 bytes

sweep-interval

Incremental value for sweep size.
Range: 1 - 15308 seconds.

ointerface

(IPv4 only) The outgoing interface for multicast packets.

Defaults

None

Command Modes

EXEC
EXEC Privilege

Command
History

Version 8.3.12.0

Added support for outgoing-interface option for link-local IPv6 addressing on
the S4810.

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Control and Monitoring | 91

www.dell.com | support.dell.com

Usage
Information

Version 8.4.1.0

IPv6 pinging available on management interface.

Version 8.3.1.0

Introduced extended ping options.

Version 8.2.1.0

Introduced on E-Series ExaScale (IPv6)

Version 8.1.1.0

Introduced on E-Series ExaScale (IPv4)

Version 7.9.1.0

Introduced VRF

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced support for C-Series

Version 7.4.1.0

Added support for IPv6 address on E-Series

When you enter the ping command without specifying an IP/IPv6 address (Extended Ping),
you are prompted for a target IP/IPv6 address, a repeat count, a datagram size (up to 1500
bytes), a timeout in seconds, and for Extended Commands. Chapter 20, ICMP Message Types
for information on the ICMP message codes that return from a ping command.

Example (IPv4)

FTOS#ping 172.31.1.255
Type Ctrl-C to abort.
Sending 5, 100-byte ICMP Echos to 172.31.1.255, timeout is 2 seconds:
Reply to request 1 from 172.31.1.208
0 ms
Reply to request 1 from 172.31.1.216
0 ms
Reply to request 1 from 172.31.1.205
16 ms
:
:
Reply to request 5 from 172.31.1.209
0 ms
Reply to request 5 from 172.31.1.66
0 ms
Reply to request 5 from 172.31.1.87
0 ms
FTOS#

Example (IPv6)

FTOS#ping 100::1
Type Ctrl-C to abort.
Sending 5, 100-byte ICMP Echos to 100::1, timeout is 2 seconds:
!!!!!
Success rate is 100.0 percent (5/5), round-trip min/avg/max = 0/0/0 (ms)
FTOS#

The following table provides descriptions for the status response symbols displayed in output.
Table 1 ping command Status Response Symbols and Descriptions
Symbol

92

|

Control and Monitoring

Description

!

Each exclamation point indicates receipt of a reply

.

Each period indicates the network server timed out while waiting for a reply

U

A destination unreachable error PDU was received

Q

Source quench (destination too busy)

M

Could not fragment

?

Unknown packet type

&

Packet lifetime exceeded

power-off
ce

Turn off power to a selected line card or the standby (extra) Switch Fabric Module (SFM).

Syntax

power-off {linecard number | sfm sfm-slot-id}

Parameters

linecard number

Enter the keyword linecard and a number for the line card slot number.
C-Series Range: 0-7
E-Series Range: 0 to 13 on a E1200/E1200i, 0 to 6 on a E600/E600i, and 0
to 5 on a E300.

sfm sfm-slot-id

Enter the keyword sfm by the slot number of the SFM to which you want to
turn off power.
Note: This option is supported on E-Series only.

Defaults
Command Modes
Command
History

Disabled
EXEC Privilege
Version 8.1.1.2

Introduced on E-Series ExaScale E600i

Version 8.1.1.0

Introduced on E-Series ExaScale E1200i

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Related
Commands

power-on

Power on a line card or standby SFM.

power-on
ce

Turn on power to a line card or the standby (extra) Switch Fabric Module (SFM).

Syntax

power-on {linecard number | sfm sfm-slot-id}

Parameters

linecard number

Enter the keyword linecard and a number for the line card slot number.
C-Series Range: 0-7
E-Series Range: 0 to 13 on a E1200/E1200i, 0 to 6 on a E600/E600i, and 0
to 5 on a E300.

sfm standby

Enter the keyword sfm followed by the slot number of the SFM to power on.
Note: This option is supported on E-Series only.

Defaults
Command Modes
Command
History

Disabled
EXEC Privilege
Version 8.1.1.2

Introduced on E-Series ExaScale E600i

Version 8.1.1.0

Introduced on E-Series ExaScale E1200i

Version 7.5.1.0

Introduced on C-Series

E-Series original Command

Control and Monitoring | 93

www.dell.com | support.dell.com

Related
Commands

power-off

Power off a line card or standby SFM.

reload
ces
Syntax
Command Modes
Command
History

Reboot FTOS.
reload

EXEC Privilege
Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Usage
Information
Related
Commands

If there is a change in the configuration, FTOS will prompt you to save the new configuration.
Or you can save your running configuration with the copy running-config command.
reset

Reset a line card, RPM, or a failed SFM (TeraScale and ExaScale).

reset stack-unit

Reset any designated stack member except the management unit

reset
ce

Reset a line card, RPM, or a failed SFM (TeraScale only).

Syntax

reset {linecard number [hard | power-cycle] | rpm number [hard | power-cycle] | standby}

Parameters

linecard number

Enter the keyword linecard and a number for the line card slot number.
(Optional) Add the keyword hard or power-cycle (power-cycle is C-Series
only) to power cycle the line card.
C-Series Range: 0-7
E-Series Range: 0 to 13 on E1200/E1200i, 0 to 6 on E600/E600i, and 0 to 5
on E300

hard

Enter the keyword hard to power cycle the line card.

power-cycle

Enter the keyword power-cycle after upgrading a C-Series FPGA to cause
the FPGA to be reprogrammed based on the contents of the FPGA PROM.
Note: This option is supported on C-Series only.

rpm number

Enter the keyword rpm followed by a number for the RPM slot number.
(Optional) Add the keyword hard or power-cycle (C-Series only) to power
cycle the RPM.
Range: 0 to 1

sfm slot number

Enter the keyword sfm followed by the failed or powered-off SFM slot
number.
Note: Supported on E-Series only

Defaults

94

|

Disabled.

Control and Monitoring

Command Modes
Command
History

EXEC Privilege
Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Usage
Information

The command reset without any options is a soft reset, which means FTOS boots the line card
from its runtime image. The hard option reloads the FTOS image on the line card. Use the
power-cycle after upgrading an FPGA.
When a soft reset is issued on a line card (reset linecard number), FTOS boots the line card
from its runtime image. Only when you enter reset linecard number hard is the software
image reloaded on the line card.

Related
Commands

reload

Reboots the system.

restore fpga-image

Copy the backup C-Series FPGA image to the primary FPGA image.

rpm  location-led
ex
Syntax
Parameters

Defaults
Command Modes
Command
History
Usage
Information

Toggle the location LED on/off on the E-Series ExaScale RPM (LC-EH-RPM).
rpm slot number location-led [on | off]
rpm slot number

Enter the slot number
E1200i: 0-13
E600i: 0-6

on |off

Toggles the LED on the RPM on or off.

OFF
EXEC
Version 8.2.1.0

Introduced on the E-Series ExaScale

The LED setting is not saved through power cycles.

send
ces
Syntax
Parameters

Send messages to one or all terminal line users.
send [*] | [line ] | [aux] | [console] | [vty]
*

Enter the asterisk character * to send a message to all tty lines.

line

Send a message to a specific line.
Range: 0 to 11

Control and Monitoring | 95

www.dell.com | support.dell.com

Defaults
Command Modes
Command
History

Usage
Information

aux

Enter the keyword aux to send a message to an Auxiliary line.
Note: This option is supported on E-Series only.

console

Enter the keyword console to send a message to the Primary
terminal line.

vty

Enter the keyword vty to send a message to the Virtual terminal

No default behavior or values
EXEC
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 6.5.1.0

Introduced on E-Series

Messages can contain an unlimited number of lines, however each line is limited to 255
characters. To move to the next line, use the . To send the message use CTR-Z, to abort
a message use CTR-C.

service timestamps
ces
Syntax
Parameters

Defaults
Command Modes

96

|

Add time stamps to debug and log messages. This command adds either the uptime or the
current time and date.
service timestamps [debug | log] [datetime [localtime] [msec] [show-timezone] | uptime]
debug

(OPTIONAL) Enter the keyword debug to add timestamps to debug
messages.

log

(OPTIONAL) Enter the keyword log to add timestamps to log messages
with severity 0 to 6.

datetime

(OPTIONAL) Enter the keyword datetime to have the current time and date
added to the message.

localtime

(OPTIONAL) Enter the keyword localtime to include the localtime in the
timestamp.

msec

(OPTIONAL) Enter the keyword msec to include milliseconds in the
timestamp.

show-timezone

(OPTIONAL) Enter the keyword show-timezone to include the time zone
information in the timestamp.

uptime

(OPTIONAL) Enter the keyword uptime to have the timestamp based on
time elapsed since system reboot.

Not configured.
CONFIGURATION

Control and Monitoring

Command
History

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Usage
Information

If you do not specify parameters and enter service timestamps, it appears as service
timestamps debug uptime in the running-configuration.
Use the show running-config command to view the current options set for the service
timestamps command.

show alarms
ces
Syntax
Parameters

Command Modes

View alarms for the RPM, SFMs, line cards and fan trays.
show alarms [threshold]
threshold

(OPTIONAL) Enter the keyword threshold to display the temperature thresholds
set for the line cards, RPM, and SFMs.

EXEC
EXEC Privilege

Command
History

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Example
(E-Series)

FTOS# show alarms
-- Minor Alarms -Alarm Type
Duration
---------------------------------------------------RPM 0 PEM A failed or rmvd
7 hr, 37 min
SFM 0 PEM A failed or rmvd
7 hr, 37 min
SFM 1 PEM A failed or rmvd
7 hr, 37 min
SFM 2 PEM A failed or rmvd
7 hr, 37 min
SFM 3 PEM A failed or rmvd
7 hr, 37 min
SFM 4 PEM A failed or rmvd
7 hr, 37 min
SFM 5 PEM A failed or rmvd
7 hr, 37 min
SFM 6 PEM A failed or rmvd
7 hr, 37 min
SFM 7 PEM A failed or rmvd
7 hr, 36 min
line card 1 PEM A failed or rmvd
7 hr, 36 min
line card 4 PEM A failed or rmvd
7 hr, 36 min
only 8 SFMs in chassis
7 hr, 35 min
-- Major Alarms -Alarm Type
Duration
---------------------------------------------------No major alarms

Control and Monitoring | 97

www.dell.com | support.dell.com

FTOS#

show chassis
ce

View the configuration and status of modules in the system. Use this command to determine
the chassis mode.

Syntax

show chassis [brief]

Parameters

brief
Command Modes

(OPTIONAL) Enter the keyword brief to view a summary of the show chassis output.

EXEC
EXEC Privilege

Command
History

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Example
(E-Series)

FTOS#show chassis brief
Chassis Type : E1200
Chassis Mode : TeraScale
Chassis Epoch : 3.2 micro-seconds
-- Line cards -Slot Status
NxtBoot
ReqTyp
CurTyp
Version
Ports
--------------------------------------------------------------------------0
not present
1
not present
2
not present
3
not present
4
not present
5
not present
6
not present
7
not present
8
not present
9
not present
10
not present
11
online
online
E48PF
E48PF
6.1.1.0
48
12
not present
E48PF
13
not present
E48PF
-- Route Processor Modules -Slot Status
NxtBoot
Version
--------------------------------------------------------------------------0
active
online
6.1.1.0
1
not present
Switch Fabric State:

up

-- Switch Fabric Modules -Slot Status
--------------------------------------------------------------------------0
active
1
active
2
active

98

|

Control and Monitoring

3
4
5
6
7
8

active
active
active
active
active
active

-- Power Entry Modules -Bay
Status
--------------------------------------------------------------------------0
up
1
up
-- Fan Status -Tray Status Temp
Volt
Speed
PEM0 PEM1
Fan1 Fan2 Fan3
-----------------------------------------------------------------------------0
up
< 50C
12-16V low/2100-2700 RPM
up
up
up
up
up
1
up
< 50C
12-16V low/2100-2700 RPM
up
up
up
up
up
2
up
< 50C
12-16V low/2100-2700 RPM
up
up
up
up
up
3
up
< 50C
12-16V low/2100-2700 RPM
up
up
up
up
up
4
up
< 50C
16-20V med/2700-3200 RPM
up
up
up
up
up
5
up
< 50C
12-16V low/2100-2700 RPM
up
up
up
up
up

Related
Commands

show linecard

View line card status

show rpm

View Route Processor Module status.

show sfm

View Switch Fabric Module status.

show command-history
ces
Syntax

Display a buffered log of all commands entered by all users along with a time stamp.
show command-history

Defaults

None.

Command Mode

EXEC
EXEC Privilege

Command
History

H

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series and E-Series

Usage
Information

One trace log message is generated for each command. No password information is saved to
this file. A command-history trace log is saved to a file upon an RPM failover. This file can
be analyzed by the Dell Force10 TAC to help identify the root cause of an RPM failover.

Example

FTOS#show command-history
[11/20 15:47:22]: CMD-(CLI):[service password-encryption]by default from console
[11/20 15:47:22]: CMD-(CLI):[service password-encryption hostname Force10]by default from console
- Repeated 3 times.
[11/20 15:47:23]: CMD-(CLI):[service timestamps log datetime]by default from console
[11/20 15:47:23]: CMD-(CLI):[hostname Force10]by default from console
[11/20 15:47:23]: CMD-(CLI):[enable password 7 ******]by default from console

Control and Monitoring | 99

www.dell.com | support.dell.com

[11/20 15:47:23]: CMD-(CLI):[username admin password 7 ******]by default from console
[11/20 15:47:23]: CMD-(CLI):[enable restricted 7 ******]by default from console
[11/20 15:47:23]: CMD-(CLI):[protocol spanning-tree rstp]by default from console
[11/20 15:47:23]: CMD-(CLI):[protocol spanning-tree pvst]by default from console
[11/20 15:47:23]: CMD-(CLI):[no disable]by default from console
[11/20 15:47:23]: CMD-(CLI):[interface gigabitethernet 0/1]by default from console
[11/20 15:47:23]: CMD-(CLI):[ip address 1.1.1.1 /24]by default from console
[11/20 15:47:23]: CMD-(CLI):[ip access-group abc in]by default from console
[11/20 15:47:23]: CMD-(CLI):[no shutdown]by default from console
[11/20 15:47:23]: CMD-(CLI):[interface gigabitethernet 0/2]by default from console
[11/20 15:47:23]: CMD-(CLI):[no ip address]by default from console
[11/20 15:47:23]: CMD-(CLI):[shutdown]by default from console
[11/20 15:47:23]: CMD-(CLI):[interface gigabitethernet 0/3]by default from console
[11/20 15:47:23]: CMD-(CLI):[ip address 5.5.5.1 /24]by default from console
[11/20 15:47:23]: CMD-(CLI):[no shutdown]by default from console
[11/20 15:47:23]: CMD-(CLI):[interface gigabitethernet 0/4]by default from console
[11/20 15:47:23]: CMD-(CLI):[no ip address]by default from console
[11/20 15:47:23]: CMD-(CLI):[shutdown]by default from console
[11/20 15:47:23]: CMD-(CLI):[interface gigabitethernet 0/5]by default from console
[11/20 15:47:23]: CMD-(CLI):[no ip address]by default from console
[11/20 15:47:23]: CMD-(CLI):[shutdown]by default from console
[11/20 21:17:35]: CMD-(CLI):[line console 0]by default from console
[11/20 21:17:36]: CMD-(CLI):[exec-timeout 0]by default from console
[11/20 21:17:36]: CMD-(CLI):[exit]by default from console
[11/20 21:19:25]: CMD-(CLI):[show command-history]by default from console
FTOS#

Related
Commands

clear command
history

Clear the command history log.

show command-tree
ces
Syntax

Display the entire CLI command tree, and optionally, display the utilization count for each
commands and its options.
show command-tree [count | no]

Parameters

Defaults
Command Mode

count

Display the command tree with a usage counter for each command.

no

Display all of the commands that may be preceded by the keyword no, which is
the keyword used to remove a command from the running-configuration.

None
EXEC
EXEC Privilege

Command
History
Usage
Information

H

Version 8.2.1.0

Reload the system to reset the command-tree counters.

Example

100

|

Introduced

Control and Monitoring

FTOS#show command-tree count
!

Enable privilege mode:
enable
<0-15>

command usage:3
option usage:

exit

command usage:1

show command-tree
count

command usage:9
option usage:

show version
!
Global configuration mode:

command usage:1

aaa authentication enable
WORD
default
enable
line
none
radius
tacacs+

command usage:1
option usage:
option usage:
option usage:
option usage:
option usage:
option usage:
option usage:

0

3

1
0
0
0
0
1
0

show console lp
ce

View the buffered boot-up log of a line card.

Syntax

show console lp number

Parameters

Defaults
Command Mode

number

Enter the line card slot number.
Range: 0–7 for the C300
Range: 0–13 for the E1200
Range: 0–6 for the E600
Range: 0–5 for the E300

None
EXEC
EXEC Privilege

Command
History

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Usage
Information

Caution: Use this command only when you are working directly with a technical
support representative to troubleshoot a problem. Do not use this command unless a
technical support representative instructs you to do so.

show cpu-traffic-stats
ces

View the CPU traffic statistics.

Control and Monitoring | 101

www.dell.com | support.dell.com

Syntax
Parameters

Defaults
Command Modes
Command
History

show cpu-traffic-stats [port number | all | cp | linecard {all | slot# } | rp1 | rp2 ]

port number

(OPTIONAL) Enter the port number to display traffic statistics on that port
only.
Range: 1 to 1568

all

(OPTIONAL) Enter the keyword all to display traffic statistics on all the
interfaces receiving traffic, sorted based on traffic.

cp

(OPTIONAL) Enter the keyword cp to display traffic statistics on the
specified CPU.
Note: This option is supported on E-Series only.

linecard

(OPTIONAL) Enter the keyword linecard followed by either all or the slot
number to display traffic statistics on the designated line card.
Note: This option is supported on C-Series only.

rp1

(OPTIONAL) Enter the keyword rp1 to display traffic statistics on the RP1.
Note: This option is supported on E-Series only.

rp2

(OPTIONAL) Enter the keyword rp2 to display traffic statistics on the RP2.
Note: This option is supported on E-Series only.

all

EXEC
Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 6.2.1.1

Introduced on E-Series

Example
(E-Series)

FTOS#show cpu-traffic-stats
Processor : CP
-------------Received 100% traffic on GigabitEthernet 8/2
LLC:0, SNAP:0, IP:100, ARP:0, other:0
Unicast:100, Multicast:0, Broadcast:0
Processor : RP1
--------------Received 62% traffic on GigabitEthernet 8/2
LLC:0, SNAP:0, IP:500, ARP:0, other:0
Unicast:500, Multicast:0, Broadcast:0
Received 37% traffic on GigabitEthernet 8/1
LLC:0, SNAP:0, IP:300, ARP:0, other:0
Unicast:300, Multicast:0, Broadcast:0
Processor : RP2
--------------No CPU traffic statistics.
FTOS#

102

|

Control and Monitoring

Total packets:100

Total packets:500

Total packets:300

Usage
Information

Traffic statistics are sorted on a per-interface basis; the interface receiving the most traffic is
displayed first. All CPU and port information is displayed unless a specific port or CPU is
specified. Traffic information is displayed for router ports only; not for management
interfaces. The traffic statistics are collected only after the debug cpu-traffic-stats command is
executed; not from the system bootup.
Note: After debugging is complete, use the no debug cpu-traffic-stats command to
shut off traffic statistics collection.

Related
Commands

debug cpu-traffic-stats

Enable CPU traffic statistics for debugging

show debugging
ces

View a list of all enabled debugging processes.

Syntax

show debugging

Command Mode

EXEC Privilege

Command
History

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Example

FTOS#show debug
Generic IP:
IP packet debugging is on for
ManagementEthernet 0/0
Port-channel 1-2
Port-channel 5
GigabitEthernet 4/0-3,5-6,10-11,20
GigabitEthernet 5/0-1,5-6,10-11,15,17,19,21
ICMP packet debugging is on for
GigabitEthernet 5/0,2,4,6,8,10,12,14,16
FTOS#

show environment (C-Series and E-Series)
ce

View the system component status (for example, temperature, voltage).

Syntax

show environment [all | fan | linecard | linecard-voltage | PEM | RPM | SFM]

Parameters

all

Enter the keyword all to view all components.

fan

Enter the keyword fan to view information on the fans. The output of this
command is chassis dependent. Refer to the examples for show chassis,
show command-history, and show cpu-traffic-stats and for a comparison
of output.

Control and Monitoring | 103

www.dell.com | support.dell.com

linecard

Enter the keyword linecard to view only information on line cards

linecard-voltage

Enter the keyword linecard-voltage to view line card voltage
information.

PEM

Enter the keyword pem to view only information on power entry
modules.

RPM

Enter the keyword rpm to view only information on RPMs.

SFM

Enter the keyword sfm to view only information on SFMs.
Note: This option is supported on E-Series only.

Command Modes

EXEC
EXEC Privilege

Command
History

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Added temperature information for C-Series fans (refer to the last example)

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Usage
Information

Fan speed is controlled by temperatures measured at the sensor located on the fan itself. The
fan temperatures shown with this command may not accurately reflect the temperature and
fan speed. Refer to your hardware installation guide for fan speed and temperature
information.

Example (E1200)

FTOS#show environment
-- Fan Status -Tray Status Temp
Volt
Speed
PEM0 PEM1
Fan1 Fan2 Fan3
----------------------------------------------------------------------------0
up
< 50C
12-16V low/2100-2700 RPM
up
up
up
up
up
1
up
< 50C
12-16V low/2100-2700 RPM
up
up
up
up
up
2
up
< 50C
12-16V low/2100-2700 RPM
up
up
up
up
up
3
up
< 50C
12-16V low/2100-2700 RPM
up
up
up
up
up
4
up
< 50C
16-20V med/2700-3200 RPM
up
up
up
up
up
5
up
< 50C
12-16V low/2100-2700 RPM
up
up
up
up
up
-- Power Entry Modules -Bay
Status
--------------------------------------------------------------------------0
absent or down
1
up
-- Line Card Environment Status -Slot Status
Temp
PEM0 PEM1
Voltage
--------------------------------------------------------------------------0
not present
1
not present
2
not present
3
not present
4
not present
5
not present
6
not present
7
not present
8
not present
9
not present
10
not present
11
booting
53C
down up
ok

104

|

Control and Monitoring

12
13

not present
not present

-- RPM Environment Status -Slot Status
Temp
PEM0 PEM1
Voltage
--------------------------------------------------------------------------0
active
48C
down up
ok
1
not present
-- SFM Environment Status -Slot Status
Temp
PEM0 PEM1
--------------------------------------------------------------------------0
active
49C
up
up
1
active
47C
up
up
2
active
46C
up
up
3
active
48C
up
up
4
active
52C
up
up
5
active
50C
up
up
6
active
47C
up
up
7
active
48C
up
up
8
active
47C
up
up

Example (E600)

FTOS#show environment fan
-- Fan Status -Status Temp
Fan1
Fan2
Fan3
Serial Num
Version
-----------------------------------------------------------------up
29C
6000 RPM 7500 RPM 7500 RPM
0.0
FTOS#

Example (C300)

FTOS#show env fan
-- Fan Status -------------------------------------------------------------------Tray
0
------------------------------------------------------------------FanNumber
Speed
Status
0
4170
up
1
4140
up
2
3870
up
3
4140
up
4
3870
up
5
3810
up
FTOS#

show environment (S-Series)
s
Syntax
Parameters

View S-Series system component status (for example, temperature, voltage).
show environment [all | fan | stack-unit unit-id | pem]
all

Enter the keyword all to view all components.

fan

Enter the keyword fan to view information on the fans. The output of this
command is chassis dependent.

Control and Monitoring | 105

www.dell.com | support.dell.com

Command Modes

stack-unit unit-id

Enter the keyword stack-unit followed by the unit-id to display
information on a specific stack member. Range: 0 to 1.

pem

Enter the keyword pem to view only information on power entry
modules.

EXEC
EXEC Privilege

Command
History

Usage
Information

Version 7.8.1.0

The output of the show environment fan command for S-Series is changed to
display fan speeds instead of just showing the fan status as up or down.

Version 7.6.1.0

Introduced for S-Series. S-Series options and output differ from the
C-Series/E-Series version.

The second example shows the output of the show environment fan command as it appears
prior to FTOS 7.8.1.0.

Example
(show environment
all)

FTOS#show environment all
-- Fan Status ------------------------------------------------------------------------------Unit
TrayStatus Fan0
Fan1
Fan2
Fan3
Fan4
Fan5
0

up

up

up

up

up

up

up

-- Power Supplies -Unit
Bay
Status
Type
--------------------------------------------------------------------------0
0
up
AC
0
1
absent
-- Unit Environment Status -Unit Status
Temp
Voltage
--------------------------------------------------------------------------0*
online
50C
ok
* Management Unit
-- Fan Status -Unit Status
Speed Fan1

Fan2

Fan3 Fan4 Fan5 Fan6

Serial Num

Version

------------------------------------------------------------------------------1
up
high up up up up up up
1234 1

Example
(show environment
fan)

FTOS#show environment fan
-- Fan Status ------------------------------------------------------------------------------Unit
TrayStatus Fan0
Fan1
Fan2
Fan3
Fan4
Fan5
0

Example
(show environment
pem)

106

|

Control and Monitoring

up

up

up

up

up

up

up

FTOS#show environment pem
-- Power Supplies -Unit
Bay
Status
Type
---------------------------------------------------------------------------

0
0

Example
(show environment
stack-unit)

0
1

up
absent

AC

FTOS#show environment stack-unit 0
-- Unit Environment Status -Unit Status
Temp
Voltage
--------------------------------------------------------------------------0*
online
49C
ok
* Management Unit

show inventory (C-Series and E-Series)
ce

Display the chassis type, components (including media), FTOS version including hardware
identification numbers and configured protocols.

Syntax

show inventory [media slot]

Parameters

Defaults
Command Modes
Command
History

Usage
Information

media slot

(OPTIONAL) Enter the keyword media followed by the slot number.
C-Series Range: 0-7
E-Series Range: 0 to 13 on a E1200, 0 to 6 on a E600/E600i, and 0 to 5 on a E300

No default behavior or values
CONFIGURATION
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Output expanded to include SFP+ media in C-Series.

Version 7.7.1.0

Vendor field removed from output of show inventory media.

Version 7.5.1.0

Introduced on C-Series and expanded to include transceiver media

Version 6.2.1.0

Expanded to include Software Protocol Configured field on E-Series

Version 5.3.1.0

Introduced on E-Series

The show inventory media command provides some details about installed pluggable media
(SFP, XFP), as shown in the Example (show inventory media). Use the show interfaces
command to get more details about installed pluggable media.
The display output might include a double asterisk (**) next to the SFMs, for example:
...
0
1
...

CC-E-SFM **
CC-E-SFM **

0004875
0004889

7490007411
7490007411

A
A

The double asterisk generally indicates the SFM’s frequency capabilities, indicating either
that they are operating at 125 MHz or that the frequency capability, which is stored in an
EPROM, cannot be determined.

Control and Monitoring | 107

www.dell.com | support.dell.com

If there are no fiber ports in the line card, then just the header under show inventory media
will be displayed. If there are fiber ports but no optics inserted, then the output will display
"Media not present or accessible".
Example
(C300)

FTOS# show inventory
Chassis Type
: C300
Chassis Mode
: 1.0
Software Version : FTOS-EF-7.6.1.0
Slot Item
Serial Number Part Number Revision
-------------------------------------------------------------C300
TY000001400
7520029999
04
3 LC-CB-GE-48T
FX000020075
7520036700
01
0 LC-CB-RPM
0060361
7520029300
02
0 CC-C-1200W-AC
N/A
N/A
N/A
1 CC-C-1200W-AC
N/A
N/A
N/A
0 CC-C300-FAN
* - standby

Software Protocol Configured
-------------------------------------------------------------OSPF
FTOS#

Example
(E-Series)

FTOS# show inventory
Chassis Type
: E300
Chassis Mode
: TeraScale
Software Version : FTOS-EF-7.5.1.0
Slot Item
Serial Number Part Number Revision
-------------------------------------------------------------E300
0015259
7520009601
02
1 LC-EF3-10GE-2P
0017259
7520012501
01
2 LC-EF3-GE-48T
0017269
7520009702
01
3 LC-EF3-1GE-24P
0031151
7520014206
04
4 LC-EF3-1GE-24P
0017291
7520014202
02
0 LC-EF3-RPM
0031177
7520013808
05
0 CC-E-SFM
0019071
7520003706
A
1 CC-E-SFM
0019120
7520003706
A
1 CC-E300-PWR-DC
TDX0524-00031 7520015400
A
0 CC-E300-FAN
N/A
N/A
N/A
* - standby

Software Protocol Configured
-------------------------------------------------------------BFD
BGP
ISIS
OSPF
RIP
OSPFV3
FTOS#

Example
(show inventory
media slot)

108

|

Control and Monitoring

FTOS#show inventory media 3
Slot Port Type Media Serial Number
F10Qualified
---------------------------------------------------------------------------...

3
...

Example
(show inventory
media)

Related
Commands

11 SFP

1000BASE-SX U9600L0

Yes

FTOS#show inventory media
Slot Port Type Media Serial Number
F10Qualified
---------------------------------------------------------------------------1
0 SFP 1000BASE-SX P11BWXZ
Yes
1
1 SFP 1000BASE-LX H833612
Yes
1
2 SFP 1000BASE-SX B342232075
Yes
1
3 SFP 1000BASE-SX P6F02U2
Yes
1
4 SFP 1000BASE-SX AMGX367
Yes
1
5 SFP 1000BASE-SX B320210155
Yes
1
6 SFP 1000BASE-SX B342232168
Yes
1
7 SFP 1000BASE-SX H11VJ8F
Yes
1
8 SFP 1000BASE-SX AJUR367
Yes
1
9 SFP 1000BASE-SX AJLH367
Yes
1
10
Media not present or accessible
1
11
Media not present or accessible
1
12 SFP 1000BASE-SX
P11DCP3
Yes
!----------------- output truncated -----------------!

show interfaces

Display a specific interface configuration.

show interfaces
transceiver

Display the physical status and operational status of an installed transceiver.
The output also displays the transceiver’s serial number.

show inventory (S-Series)
s
Syntax
Parameters

Defaults
Command Modes
Command
History
Usage

Example
(show inventory)

Display the S-Series switch type, components (including media), FTOS version including
hardware identification numbers and configured protocols.
show inventory [media slot]
media slot

(OPTIONAL) Enter the keyword media followed by the stack ID of the stack
member for which you want to display pluggable media inventory.

No default behavior or values
CONFIGURATION
Version 7.6.1.0

Introduced this version of the command for S-Series. S-Series output differs
from E-Series.

If there are no fiber ports in the unit, then just the header under show inventory media will be
displayed. If there are fiber ports but no optics inserted, then the output will display “Media
not present or accessible”.
FTOS #show inventory
System Type
System Mode
Software Version

: S4810
: 1.0
: E8-3-12-2

Unit Type
Serial Number Part Number Rev Piece Part ID
------------------------------------------------------------------------------* 2 S4810-01-64F
HADL123J20113 7590009602 A
N/A

Rev Svc Tag Exprs Svc Code
-----------------------------N/A N/A
N/A

Control and Monitoring | 109

www.dell.com | support.dell.com

2 S4810-PWR-AC
2 S4810-FAN
2 S4810-FAN

H6DL123J20113 7590008502
N/A
N/A
N/A
N/A

A
N/A
N/A N/A
N/A N/A

N/A N/A
N/A N/A
N/A N/A

N/A
N/A
N/A

* - Management Unit

Software Protocol Configured
-------------------------------------------------------------FTOS#

Example
(show inventory
media)

Related
Commands

FTOS #show inventory media
Slot
Port
Type
Media
Serial Number
F10Qualified
-----------------------------------------------------------------------------2
0
UNKNOWN
UNKNOWN
ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
No
2
1
SFP+
10GBASE-CU1M
DM63910000000008
Yes
2
2
SFP
1000BASE-SX
PLE71M5
Yes
2
3
SFP
1000BASE-SX
U9E00M1
Yes
2
4
Media not present or accessible
2
5
Media not present or accessible
2
6
Media not present or accessible
2
7
Media not present or accessible
2
8
Media not present or accessible
2
9
Media not present or accessible
2
10
Media not present or accessible
2
11
Media not present or accessible
2
12
SFP+
10GBASE-CU1M
APF11030021261
Yes
2
13
SFP+
10GBASE-CU1M
APF11030021230
Yes
2
14
SFP+
10GBASE-CU3M
129830840
No
2
15
SFP+
10GBASE-CU3M
TED1417B065
No
2
16
Media not present or accessible
2
17
Media not present or accessible
FTOS #

show interfaces

interface configuration.

show interfaces
transceiver

Display the physical status and operational status of an installed transceiver.
The output also displays the transceiver’s serial number.

show linecard
ce

Display the line card(s) status.

Syntax

show linecard [number [brief] | all]

Parameters

110

|

number

(OPTIONAL) Enter a slot number to view information on the line card in that
slot.
C-Series Range: 0-7
E-Series Range: 0 to 13 on a E1200, 0 to 6 on a E600, and 0 to 5 on a E300.

all

(OPTIONAL) Enter the keyword all to view a table with information on all
present line cards.

brief

(OPTIONAL) Enter the keyword brief to view an abbreviated list of line card
information.

Control and Monitoring

Command Modes

EXEC
EXEC Privilege

Command
History

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Example
(E-Series)

FTOS#show linecard 11
-- Line card
Status
Next Boot
Required Type
Current Type
Hardware Rev
Num Ports
Up Time
FTOS Version
Jumbo Capable
Boot Flash
Memory Size
Temperature
Power Status
Voltage
Serial Number
Part Number
Vendor Id
Date Code
Country Code
FTOS#

Example
(C-Series)

FTOS#show linecard 11
-- Line card
Status
Next Boot
Required Type
Current Type
Hardware Rev
Num Ports
Up Time
FTOS Version
Jumbo Capable
Boot Flash
Memory Size
Temperature
Power Status
Voltage
Serial Number
Part Number
Vendor Id
Date Code
Country Code
FTOS#

Example
(show linecard
brief)

11 -: online
: online
: E48PF - 48-port GE line card with SFP optics (EF)
: E48PF - 48-port GE line card with SFP optics (EF)
: Base - 1.0 PP0 - n/a PP1 - n/a
: 48
: 12 hr, 37 min
: 6.2.1.x
: yes
: A: 2.0.3.4 B: 2.0.3.4 [booted]
: 268435456 bytes
: 49C
: PEM0: absent or down
PEM1: up
: ok
:
:
Rev
:
:
:

11 -: online
: online
: E48PF - 48-port GE line card with SFP optics (EF)
: E48PF - 48-port GE line card with SFP optics (EF)
: Base - 1.0 PP0 - n/a PP1 - n/a
: 48
: 12 hr, 37 min
: 6.2.1.x
: yes
: A: 2.0.3.4 B: 2.0.3.4 [booted]
: 268435456 bytes
: 49C
: PEM0: absent or down
PEM1: up
: ok
:
:
Rev
:
:
:

FTOS#show linecard 11 brief
-- Line card 11 -Status
: online
Next Boot
: online

Control and Monitoring | 111

www.dell.com | support.dell.com

Required Type
Current Type
Hardware Rev
Num Ports
Up Time
FTOS Version
Jumbo Capable
FTOS#

112

:
:
:
:
:
:
:

E48PF - 48-port GE line card with SFP optics (EF)
E48PF - 48-port GE line card with SFP optics (EF)
Base - 1.0 PP0 - n/a PP1 - n/a
48
11 hr, 24 min
6.1.1.0
yes

Table 4-1 list the definitions of the fields shown in the examples.
Table 4-1.

|

Descriptions for show linecard output

Field

Description

Line card

Displays the line card slot number (only listed in show linecard all
command output).

Status

Displays the line card’s status.

Next Boot

Displays whether the line card is to be brought online at the next
system reload.

Required Type

Displays the line card type configured for the slot.
The Required Type and Current Type must match. Use the
linecard command to reconfigure the line card type if they do not
match.

Current Type

Displays the line card type installed in the slot.
The Required Type and Current Type must match. Use the
linecard command to reconfigure the line card type if they do not
match.

Hardware Rev

Displays the chip set revision.

Num Ports

Displays the number of ports in the line card.

Up Time

Displays the number of hours and minutes the card is online.

FTOS Version

Displays the operating software version.

Jumbo Capable

Displays Yes or No indicating if the line card can support Jumbo
frames.

Boot Flash Ver

Displays the two possible Bootflash versions. The [Booted]
keyword next to the version states which version was used at
system boot.

Memory Size

List the memory of the line card processor.

Temperature

Displays the temperature of the line card.
Minor alarm status if temperature is over 65° C.

Power Status

Lists the type of power modules used in the chassis:
• AC = AC power supply
• DC = DC Power Entry Module (PEM)

Voltage

Displays OK if the line voltage is within range.

Serial Number

Displays the line card serial number.

Part Num

Displays the line card part number.

Control and Monitoring

Table 4-1.

Related
Commands

Descriptions for show linecard output

Field

Description

Vendor ID

Displays an internal code, which specifies the manufacturing
vendor.

Date Code

Displays the line card’s manufacturing date.

linecard

Pre-configure a line card in a currently empty slot of the system or a different
line card type for the slot.

show interfaces
linecard

Display information on all interfaces on a specific line card.

show chassis

View information on all elements of the system.

show rpm

View information on the RPM.

show sfm

View information on the SFM.

show linecard boot-information
e
Syntax
Command Modes

View the line card status and boot information.
show linecard boot-information

EXEC
EXEC Privilege

Command
History

Example

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 6.5.1.4

Introduced on E-Series

FTOS#show linecard boot-information
-- Line cards -Serial
Booted
Next
Cache
Boot
# Status CurType number
from
boot
boot
flash
--------------------------------------------------------------------------------------------------0 online EXW4PF 012345 B: 6.5.1.4 6.5.1.4
A: invalid B: 6.5.1.4 A: 2.3.0.8 [b] B: invalid
1

-

2 online E48TF
0031318
2.3.0.6 B: 2.3.0.8 [b]
3

-

4

-

5

-

6.5.1.4

6.5.1.4

A: invalid

B: 6.5.1.4

A:

6
FTOS#

Control and Monitoring | 113

www.dell.com | support.dell.com

Table 4-2 defines the fields in the example.
Table 4-2.

Usage
Information
Related
Commands

Descriptions for show linecard boot-information output

Field

Description

#

Displays the line card slot numbers, beginning with slot 0. The number of slots
listed is dependent on your chassis:
E-Series: 0 to 13 on a E1200, 0 to 6 on a E600/E600i, and 0 to 5 on a E300.

Status

Indicates if a line card is online, offline, or booting. If a line card is not detected
in the slot, a hyphen ( - ) is displayed.

CurType

Displays the line card identification number, for example EXW4PF.

Serial number

Displays the line card serial number.

Booted from

Indicates whether the line card cache booted or system booted. In addition, the
image with which the line card booted is also displayed. If the line card cache
booted, then the output is A: or B: followed by the image in the flash partition (A:
6.5.1.4 or B: 6.5.1.4).
If the line card system booted, then display is the current FTOS version number
(6.5.1.4).

Next boot

Indicates if the next line card boot is a cache boot or system boot and which
image will be used in the boot.

Cache boot

Displays the system image in cache boot flash partition A: and B: for the line
card. If the cache boot does not contain a valid image, “invalid” is displayed.

Boot flash

Displays the two possible Boot flash versions. The [b] next to the version number
is the current boot flash, that is the image used in the last boot.

The display area of this command uses the maximum 80 character length. If your display area
is not set to 80 characters, the display will wrap.
show linecard

View the line card status

upgrade (E-Series version)

Upgrade the boot flash, boot selector, or system image

download alt-boot-image

Download an alternate boot image to the chassis

download alt-full-image

Download an alternate FTOS image to the chassis

download alt-system-image

Download an alternate system image to the chassis

show memory (C-Series and E-Series)

114

|

ce

View current memory usage on the system.

Syntax

show memory [cp | lp slot-number | rp1 | rp2]

Control and Monitoring

Parameters

Command Modes

cp

(OPTIONAL) Enter the keyword cp to view information on the Control
Processor on the RPM.

lp slot-number

(OPTIONAL) Enter the keyword lp and the slot number to view information
on the line-card processor in that slot.
C-Series Range: 0-7
E-Series Range: 0 to 13 on a E1200/E1200i, 0 to 6 on a E600/E600i, and 0 to
5 on a E300.

rp1

(OPTIONAL) Enter the keyword rp1 to view information on Route
Processor 1 on the RPM.
Note: This option is supported on the E-Series only.

rp2

(OPTIONAL) Enter the keyword rp2 to view information on Route Processor
2 on the RPM.
Note: This option is supported on the E-Series only.

EXEC
EXEC Privilege

Command
History

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Usage
Information

The output for show memory displays the memory usage of LP part (sysdlp) of the system.
The Sysdlp is an aggregate task that handles all the tasks running on C-Series’ and E-Series'
LP.
In FTOS Release 7.4.1.0 and higher, the total counter size (for all 3 CPUs) in show memory
(C-Series and E-Series) and show processes memory (C-Series and E-Series) will differ based
on which FTOS processes are counted.
•
•

Example
(E-Series)

In the show memory (C-Series and E-Series) display output, the memory size is
equal to the size of the application processes.
In the show processes memory (C-Series and E-Series) display output, the
memory size is equal to the size of the application processes plus the size of the
system processes.

FTOS#show memory
Statistics On CP Processor
===========================
Total(b)
Used(b)
Free(b)
452689184
64837834
387851350
Statistics On RP1 Processor
===========================
Total(b)
Used(b)
Free(b)
629145600
4079544
625066056
Statistics On RP2 Processor
===========================
Total(b)
Used(b)
Free(b)
510209568
47294716
462914852
FTOS#

Lowest(b)
387805590

Largest(b)
371426976

Lowest(b)
625066056

Largest(b)
0

Lowest(b)
462617968

Largest(b)
446275376

Control and Monitoring | 115

www.dell.com | support.dell.com

Table 4-3 defines the fields displayed in the example.
Table 4-3.

Descriptions for show memory output

Field

Description

Lowest

Displays the memory usage the system went to in the lifetime of the system.
Indirectly, it indicates the maximum usage in the lifetime of the system: Total minus
Lowest.

Largest

The current largest available. This relates to block size and is not related to the
amount of memory on the system.

show memory (S-Series)
s
Syntax
Parameters

Command Modes

View current memory usage on the S-Series switch.
show memory [stack-unit 0-7]
stack-unit 0-7

(OPTIONAL) Enter the keyword stack-unit followed by the stack unit ID of
the S-Series stack member to display memory information on the designated
stack member.

EXEC
EXEC Privilege

Command
History
Usage
Information

Version 7.6.1.0

Introduced this version of the command for the S-Series

The output for show memory displays the memory usage of LP part (sysdlp) of the system.
The Sysdlp is an aggregate task that handles all the tasks running on the S-Series’ CPU.

Example

FTOS#show memory stack-unit 0
Statistics On Unit 0 Processor
===========================
Total(b)
Used(b)
Free(b)
268435456
4010354
264425102

Lowest(b)
264375410

Largest(b)
264425102

show processes cpu (C-Series and E-Series)
ce

View CPU usage information based on processes running in the system.

Syntax

show processes cpu [cp | rp1 | rp2] [lp [linecard-number [1-99] | all | summary]

Parameters

116

|

cp

(OPTIONAL) Enter the keyword cp to view CPU usage of the
Control Processor.

rp1

(OPTIONAL) Enter the keyword rp1 to view CPU usage of the
Route Processor 1.
Note: This option is supported on the E-Series only.

Control and Monitoring

Command Modes

rp2

(OPTIONAL) Enter the keyword rp2 to view CPU usage of the
Route Processor 2.
Note: This option is supported on the E-Series only.

lp linecard [1-99]

(OPTIONAL) Enter the keyword lp followed by the line card
number to display the CPU usage of that line card.
The optional 1-99 variable sets the number of tasks to display in
order of the highest CPU usage in the past five (5) seconds.

lp all

(OPTIONAL) Enter the keyword lp all to view CPU utilization on
all active line cards.

lp summary

(OPTIONAL) Enter the keyword lp summary to view a summary
of the line card CPU utilization.

EXEC
EXEC Privilege

Command
History

Example
(show processes
cpu)

Version 7.5.1.0

Introduced on C-Series

Version 7.4.1.0

Modified: Added the lp all option

Version 6.5.1.0

Modified: The granularity of the output for rp1 and rp2 is changed. The the
output is now at the process level, so process-specific statistics are displayed.

FTOS#show processes cpu
CPU Statistics On CP Processor
===============================
CPU utilization for five seconds: 4%/2%; one minute: 2%; five minutes: 2%
PID
Runtime(ms)
Invoked
uSecs
5Sec
1Min
5Min TTY
Process
0xd02e4e8
1498633
89918
16666
3.00%
2.67%
2.67%
0
KP
0xd9d4c70
0
0
0
0.00%
0.00%
0.00%
0
tLogTask
0xd9cd200
0
0
0
0.00%
0.00%
0.00%
0
soc_dpc
0xd9bf588
0
0
0
0.00%
0.00%
0.00%
0
tARL
0xd9bd2f8
0
0
0
0.00%
0.00%
0.00%
0
tBCMlink
0xd9bb0e0
700
42
16666
0.00%
0.00%
0.00%
0
tBcmTask
0xd9798d0
106683
6401
16666
0.00%
0.00%
0.00%
0
tNetTask
0xd3368a0
0
0
0
0.00%
0.00%
0.00%
0
tWdbTask
0xd3329b0
166
10
16600
0.00%
0.00%
0.00%
0
tWdtTask
0xd32a8c8
102500
6150
16666
0.00%
0.00%
0.00%
0
tme
0xd16b1d8
12050
723
16666
0.00%
0.00%
0.00%
0
ipc
0xd1680c8
33
2
16500
0.00%
0.00%
0.00%
0
irc
0xd156008
116
7
16571
0.00%
0.00%
0.00%
0
RpmAvailMgr
0xd153ab0
216
13
16615
0.00%
0.00%
0.00%
0
ev
-more-

Control and Monitoring | 117

www.dell.com | support.dell.com

Example
(show processes
cpu rp1)

FTOS#show processes cpu rp1
CPU utilization for five seconds: 0%/0%; one minute: 0%; five minutes: 0%
PID
Runtime(ms)
Invoked
uSecs
5Sec
1Min
5Min TTY
Process
0x0000007c
ospf
0x00000077
dsm
0x00000074
ipm1
0x0000006e
rtm
0x0000006b
rip
0x00000068
acl
0x00000064
sysd1
0x00000062
sysmon
0x00000024
sshd
0x00000022
inetd
0x00000020
mount_mfs
0x00000013
mount_mfs
0x00000006
sh
0x00000005
aiodoned
0x00000004
ioflush
0x00000003
reaper
0x00000002
pagedaemon
0x00000001
init
0x00000000
swapper
0x00000088
bgp

Example
(show processes
cpu rp2)

Control and Monitoring

10000

0.00%

0.00%

0.00%

0

460

46

10000

0.00%

0.00%

0.00%

100

10

10000

0.00%

0.00%

180

18

10000

0.00%

0.00%

0.00%

0

100

10

10000

0.00%

0.00%

0.00%

0

120

12

10000

0.00%

0.00%

0.00%

0

0

0.00%

0

690

69

10000

0.00%

0.00%

20

2

10000

0.00%

0.00%

880

88

10000

0.00%

0.00%

0.00%

0

0

0

0

0.00%

0.00%

0.00%

0

2580

258

10000

0.00%

0.00%

0.00%

0

0

0

0

0.00%

0.00%

0.00%

0

80

8

10000

0.00%

30

3

10000

0.00%

840

84

10000

0.00%

250

25

10000

0.00%

0

0

160

16

700

70

260

26

0
10000
10000
10000

0.00%

0.00%
0.00%

0.00%

0
0

0.00%

0.00%

0.00%

0

0.00%

0.00%

0.00%

0

0.00%

0.00%

0.00%

0

0.00%

0.00%

0.00%
0.00%

0.00%

0

0.00%

0.00%

0

0.00%
0.00%

0

0
0

CPU utilization for five seconds: 0%/0%; one minute: 0%; five minutes: 0%

0x00000090
vrrp
0x0000008d
fvrp
0x00000088
xstp
0x00000084
span
0x00000083
pim

|

6

FTOS#show processes cpu rp2

PID
Process

118

60

Runtime(ms)

Invoked

uSecs

5Sec

1Min

5Min TTY

140

14

10000

0.00%

0.00%

0.00%

0

120

12

10000

0.00%

0.00%

0.00%

0

360

36

10000

0.00%

0.00%

0.00%

0

60

6

10000

0.00%

0.00%

0.00%

0

180

18

10000

0.00%

0.00%

0.00%

0

0x00000080
igmp
0x0000007b
ipm2
0x00000078
mrtm
0x00000074
l2mgr
0x00000070
l2pm
0x0000006c
arpm
0x00000068
acl2
0x00000064
sysd2
0x00000062
sysmon
0x00000024
sshd
0x00000022
inetd
0x00000020
mount_mfs
0x00000013
mount_mfs
0x00000006
sh
0x00000005
aiodoned
0x00000004
ioflush
0x00000003
reaper
0x00000002
pagedaemon
0x00000001
init
0x00000000
swapper
0x00000098
msdp

Usage
Information

80

8

10000

0.00%

0.00%

0.00%

0

130

13

10000

0.00%

0.00%

0.00%

0

700

70

10000

0.00%

0.00%

0.00%

0

100

10

10000

0.00%

80

8

10000

0.00%

0.00%

0.00%

0

80

8

10000

0.00%

0.00%

0.00%

0

60

6

10000

0.00%

0.00%

0.00%

0

750

75

10000

0.00%

0.00%

0.00%

0

0

0

0

0.00%

0.00%

0.00%

0

0.00%

0.00%

0

880

88

10000

0.00%

0.00%

0.00%

0

0

0

0

0.00%

0.00%

0.00%

0

2250

225

10000

0.00%

0.00%

0.00%

0

0

0

0

0.00%

0.00%

0.00%

0

100

10

10000

0.00%

0.00%

0.00%

0

0

0

0

0.00%

0.00%

0.00%

960

96

10000

0.00%

0.00%

0.00%

140

14

10000

0.00%

0
160
700
140

0
16
70
14

0
10000
10000
10000

0.00%
0.00%
0.00%
0.00%

0.00%

0

0.00%

0.00%
0.00%

0

0.00%

0.00%

0.00%
0.00%

0

0

0.00%
0.00%

0

0
0

The CPU utilization for the last five seconds as shown in the first example is 4%/2%. The first
number (4%) is the CPU utilization for the last five seconds. The second number (2%)
indicates the percent of CPU time spent at the interrupt level.

show processes cpu (S-Series)
s
Syntax

Display CPU usage information based on processes running in an S-Series.
show processes cpu [management-unit 1-99 [details] | stack-unit 0-7 | summary | ipc | memory
[stack-unit 0-7]]

Control and Monitoring | 119

www.dell.com | support.dell.com

Parameters

Command Modes

management-unit1-99
[details]

(OPTIONAL) Display processes running in the control processor.
The 1-99 variable sets the number of tasks to display in order of the
highest CPU usage in the past five (5) seconds. Add the details
keyword to display all running processes (except sysdlp). Example
3.

stack-unit 0-7

(OPTIONAL) Enter the keyword stack-unit followed by the stack
member ID (Range 0 to 7).
As an option of show processes cpu, this option displays CPU
usage for the designated stack member. Example 2.
Or, as an option of memory, this option limits the output of memory
statistics to the designated stack member. Example 5.

summary

(OPTIONAL) Enter the keyword summary to view a summary
view of CPU usage for all members of the stack. Example 1.

ipc

(OPTIONAL) Enter the keyword ipc to display inter-process
communication statistics.

memory

(OPTIONAL) Enter the keyword memory to display memory
statistics. Example 4.

EXEC
EXEC Privilege

Command
History

Version 7.7.1.0

Modified: Added management-unit [details] keywords.

Version 7.6.1.0

Introduced for S-Series

Example
(show processes
cpu summary)

FTOS#show processes cpu summary
CPU utilization 5Sec 1Min 5Min
------------------------------------------Unit0 0%
0%
0%
CPU utilization
5Sec
1Min
5Min
------------------------------------------Unit1* 1% 0% 0%
Unit2 0%
0% 0%
Unit3 0%
0% 0%
* Mgmt Unit

Example
(show processes cpu
management-unit)

120

|

Control and Monitoring

FTOS#show processes cpu management-unit 0
CPU utilization for five seconds: 1%/0%; one minute: 10%; five minutes: 2%
PID
Runtime(ms)
Invoked
uSecs
5Sec
1Min
5Min TTY
Process
272
20
2
10000
0.00%
0.00%
0.00%
0
topoDPC
271
0
0
0
0.00%
0.00%
0.00%
0
bcmNHOP
270
0
0
0
0.00%
0.00%
0.00%
0
bcmDISC
269
0
0
0
0.00%
0.00%
0.00%
0
bcmATP-RX
268
0
0
0
0.00%
0.00%
0.00%
0
bcmATP-TX
267
30
3
10000
0.00%
0.00%
0.00%
0
bcmSTACK

266
380
38
10000
0.00%
0.00%
0.08%
0
bcmRX
265
30
3
10000
0.00%
0.00%
0.00%
bcmLINK.0
264
0
0
0
0.00%
0.00%
0.00%
bcmXGS3AsyncTX
263
0
0
0
0.00%
0.00%
0.00%
0
bcmTX
262
160
16
10000
0.00%
0.00%
0.00%
bcmCNTR.0
260
0
0
0
0.00%
0.00%
0.00%
0
bcmDPC
253
10690
1069
10000
0.00% 10.00%
2.97%
0
sysd
251
2380
238
10000
0.00%
0.00%
0.50%
kfldintr
58
30
3
10000
0.00%
0.00%
0.00%
0
sh
36
50
5
10000
0.00%
0.00%
0.00%
!-------- output truncated -------------!

Example
(show processes
cpu stack-unit)

0
0

0

0

0 13 5 3 1

FTOS#show processes cpu stack-unit 0
CPU Statistics On Unit0 Processor
===============================
CPU utilization for five seconds: 0%/0%; one minute: 0%; five
PID
Runtime(ms)
Invoked
uSecs
5Sec
1Min
52
8260
826
10000
0.00%
0.00%
124
1160
116
10000
0.00%
0.00%
116
70
7
10000
0.00%
0.00%
109
50
5
10000
0.00%
0.00%
108
60
6
10000
0.00%
0.00%
103
70
7
10000
0.00%
0.00%
100
70
7
10000
0.00%
0.00%
96
70
7
10000
0.00%
0.00%
92
100
10
10000
0.00%
0.00%
86
30
3
10000
0.00%
0.00%
83
40
4
10000
0.00%
0.00%
80
100
10
10000
0.00%
0.00%
74
60
6
10000
0.00%
0.00%
70
30
3
10000
0.00%
0.00%
68
120
12
10000
0.00%
0.00%
64
70
7
10000
0.00%
0.00%
63
30
3
10000
0.00%
0.00%
62
290
29
10000
0.00%
0.00%
61
50
5
10000
0.00%
0.00%
60
40
4
10000
0.00%
0.00%
59
0
0
0
0.00%
0.00%
58
0
0
0
0.00%
0.00%
57
340
34
10000
0.00%
0.00%
55
0
0
0
0.00%
0.00%
117
60
6
10000
0.00%
0.00%
28
0
0
0
0.00%
0.00%
21
450
45
10000
0.00%
0.00%
18
130
13
10000
0.00%
0.00%
11
0
0
0
0.00%
0.00%
6
30
3
10000
0.00%
0.00%
5
10
1
10000
0.00%
0.00%
4
0
0
0
0.00%
0.00%
3
20
2
10000
0.00%
0.00%
2
0
0
0
0.00%
0.00%
1
0
0
0
0.00%
0.00%
0
10
1
10000
0.00%
0.00%

minutes: 0%
5Min TTY
0.22%
0
0.12%
0
0.00%
0
0.00%
0
0.00%
0
0.00%
0
0.00%
0
0.00%
0
0.00%
0
0.00%
0
0.00%
0
0.00%
0
0.00%
0
0.00%
0
0.00%
0
0.00%
0
0.00%
0
0.00%
0
0.00%
0
0.00%
0
0.00%
0
0.00%
0
0.00%
0
0.00%
0
0.00%
0
0.00%
0
0.00%
0
0.00%
0
0.00%
0
0.00%
0
0.00%
0
0.00%
0
0.00%
0
0.00%
0
0.00%
0
0.00%
0

Process
sysd
KernLrnAgMv
xstp
span
pim
igmp
mrtm
l2mgr
l2pm
arpm
ospf
dsm
rtm
rip
ipm1
acl
bcmLINK.1
bcmCNTR.1
bcmRX
bcmLINK.0
bcmXGS3AsyncTX
bcmTX
bcmCNTR.0
bcmDPC
frrp
inetd
mount_mfs
mount_mfs
syslogd
sh
aiodoned
ioflush
reaper
pagedaemon
init
swapper

Control and Monitoring | 121

www.dell.com | support.dell.com

Example
(show processes
memory)

Example
(show processes
memory stack-unit)

FTOS#show processes memory
Memory Statistics On Unit 0 Processor (bytes)
==========================================
start
Total
:
160231424, MaxUsed
:
130596864 [09/19/2007 03:11:17]
CurrentUsed:
130596864, CurrentFree:
29634560
SharedUsed :
14261872, SharedFree :
6709672
PID
Process
ResSize
Size
Allocs
Frees
Max
124 KernLrnAgMv
140410880
0
0
0
0
117 frrp
5677056
217088
87650
0
87650
116 xstp
7585792
1536000
551812
49692
518684
109 span
5709824
221184
55386
0
55386
108 pim
5869568
720896
12300
0
12300
103 igmp
5513216
327680
18236
16564
18236
100 mrtm
6905856
516096
72846
0
72846
96 l2mgr
6107136
491520
254858
115948
172038
92 l2pm
5607424
221184
667578
579740
120966
86 arpm
5353472
208896
54528
16564
54528
83 ospf
4210688
475136
0
0
0
80 dsm
6057984
552960
22838
0
22838
74 rtm
6311936
577536
574792
298152
376024
70 rip
5001216
249856
528
0
528
68 ipm1
5292032
339968
67224
0
67224
64 acl
5607424
544768
140086
66256
123522
63 bcmLINK.1 40410880
0
0
0
0
62 bcmCNTR.1 140410880
0
0
0
0
61 bcmRX
140410880
0
0
0
0
60 bcmLINK.0
140410880
0
0
0
0
59 bcmXGS3AsyncTX
140410880
0
0
0
0
58 bcmTX
140410880
0
0
0
0
57 bcmCNTR.0
140410880
0
0
0
0
55 bcmDPC
140410880
0
0
0
0
52 sysd
44650496
22876160
3930856
1358248
2589172
28 inetd
876544
69632
0
0
0
21 mount_mfs
22642688
1953792
0
0
0
!----output truncated ------------------!
FTOS#show processes memory stack-unit 0
Memory Statistics On Unit 0 Processor (bytes)
==========================================
start
Total
:
160231424, MaxUsed
:
130596864 [09/19/2007 03:11:17]
CurrentUsed:
130560000, CurrentFree:
29671424
SharedUsed :
14261872, SharedFree :
6709672
PID
Process
ResSize
Size
124 KernLrnAgMv
140410880
0
117 frrp
5677056
217088
116 xstp
7585792
1536000
109 span
5709824
221184
108 pim
5869568
720896
103 igmp
5513216
327680
100 mrtm
6905856
516096
96 l2mgr
6107136
491520
92 l2pm
5607424
221184
86 arpm
5353472
208896
83 ospf
4210688
475136
80 dsm
6057984
552960
74 rtm
6311936
577536
70 rip
5001216
249856
68 ipm1
5292032
339968
!----output truncated ------------------!

122

|

Control and Monitoring

Current
0
87650
502120
55386
12300
1672
72846
138910
87838
37964
0
22838
276640
528
67224
73830
0
0
0
0
0
0
0
0
2572608
0
0

Allocs
0
87650
551812
55386
12300
18236
72846
254858
667578
54528
0
22838
574792
528
67224

Frees
0
0
49692
0
0
16564
0
115948
579740
16564
0
0
298152
0
0

Max
0
87650
518684
55386
12300
18236
72846
172038
120966
54528
0
22838
376024
528
67224

Current
0
87650
502120
55386
12300
1672
72846
138910
87838
37964
0
22838
276640
528
67224

Related
Commands

show hardware layer2 acl

Display Layer 2 ACL data for the selected stack member and stack
member port-pipe.

show hardware layer3

Display Layer 3 ACL or QoS data for the selected stack member
and stack member port-pipe.

show hardware stack-unit

Display the data plane or management plane input and output
statistics of the designated component of the designated stack
member.

show hardware system-flow

Display Layer 3 ACL or QoS data for the selected stack member
and stack member port-pipe.

show interfaces stack-unit

Display information on all interfaces on a specific S-Series stack
member.

show processes memory
(S-Series)

Display CPU usage information based on processes running in an
S-Series

show processes ipc flow-control
ces
Syntax
Parameters

Display the Single Window Protocol Queue (SWPQ) statistics.
show processes ipc flow-control [cp | rp1 | rp2 | lp linecard-number]
cp

(OPTIONAL) Enter the keyword cp to view the Control Processor’s SWPQ
statistics.

rp1

(OPTIONAL) Enter the keyword rp1 to view the Control Processor’s SWPQ
statistics on Route Processor 1.*

rp2

(OPTIONAL) Enter the keyword rp2 to view the Control Processor’s SWPQ
statistics on Route Processor 2.*

lp linecard-number

(OPTIONAL) Enter the keyword lp followed by the line card number to
view the Control Processor’s SWPQ statistics on the specified line card.*

* In the S-Series, this command supports only the cp keyword, not the rp1, rp2, and lp
options.
Defaults
Command Modes

No default values or behavior
EXEC
EXEC Privilege

Command
History

Example
(C-Series)

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series and E-Series

FTOS# show processes ipc flow-control cp

Control and Monitoring | 123

www.dell.com | support.dell.com

Q Statistics on CP Processor
TxProcess
RxProcess

High Time Retr
Msg
Ack Aval Max
Mark Out
ies
Sent
Rcvd Retra Retra
ACL0
RTM0
0
0
0
0
0
0
10
10
ACL0
DIFFSERV0
0
0
0
0
0
0
10
10
ACL0
IGMP0
0
0
0
0
0
0
10
10
ACL0
PIM0
0
0
0
0
0
0
10
10
ACL0
ACL20
0
1
0
0
2
2
50
50
CFG0 CFGDATASYNC0
0
2
0
0
7
7 255 255
DHCP0
ACL0
0
1
0
0
9
9
25
25
DHCP0
IFMGR0
0
0
0
0
0
0
25
25
RTM0
ARPMGR0
0
1
0
0
1
1 136 136
ACL20
IGMP0
0
0
0
0
0
0
50
50
LACP0
IFMGR0
0
2
0
0
4
4
25
25
ARPMGR0
MRTM0
0
0
0
0
0
0 100 100
ACL20
PIM0
0
0
0
0
0
0
50
50
MACMGR0
ACL0
0
1
0
0
1
1
25
25
TCLASSMGR0
ARPMGR0
0
0
0
0
0
0 100 100
IFMGR0
IPMGR2
0
6
0
0
44
44
8
8
!--------------------------output truncated ---------------------------------!

Example
(E-Series)

Cur
Len

FTOS# show processes ipc flow-control cp
Q Statistics on CP Processor
TxProcess
RxProcess
Cur
High Time Retr
Msg
Ack Aval Max
Len
Mark Out
ies
Sent
Rcvd Retra Retra
DHCP0
ACL0
0
1
0
0
6
6
25
25
DHCP0
IFMGR0
0
0
0
0
0
0
25
25
IFMGR0
FEFD0
0
3
0
0
27
27
8
8
IFMGR0
IPMGR0
0
6
0
0
44
44
8
8
IFMGR0
SNMP0
0
1
0
0
16
16
8
8
IFMGR0
SFL_CP0
0
4
0
0
31
31
8
8
IFMGR0 EVENTTERMLOG0
0
1
0
0
6
6
8
8
IFMGR0
PORTMIRR0
0
0
0
0
0
0
8
8
IFMGR0
DHCP0
0
1
0
0
6
6
8
8
IFMGR0
TCLASSMGR0
0
2
0
0
13
13
8
8
IFMGR0
VRRP0
0
3
0
0
25
25
8
8
IFMGR0
MRTM0
0
2
0
0
21
21
8
8
TCLASSMGR0
ARPMGR0
0
0
0
0
0
0 100 100
IFMGR0
IPMGR2
0
6
0
0
44
44
8
8
!--------------------------output truncated ---------------------------------!

Table 4-4 list the definitions of the fields shown in the examples above.
Table 4-4.

124

|

Description of show processes ipc flow-control cp output

Field

Description

Source QID /Tx Process

Source Service Identifier

Destination QID/Rx Process

Destination Service Identifier

Cur Len

Current number of messages enqueued

High Mark

Highest number of packets in the queue at any point of time

#of to / Timeout

Timeout count

#of Retr /Retries

Number of retransmissions

#msg Sent/Msg Sent/

Number of messages sent

#msg Ackd/Ack Rcvd

Number of messages acknowledged

Control and Monitoring

Table 4-4.

Description of show processes ipc flow-control cp output

Field

Description

Retr /Available Retra

Number of retries left

Total/ Max Retra

Number of retries allowed

Example
(show processes
ipc flow-control
rp1)

FTOS# show processes ipc flow-control rp2

Example
(show processes
ipc flow-control
lp1)

FTOS#show processes ipc flow-control lp 10
Q Statistics on LP 10
TxProcess RxProcess
Cur
High Time Retries Msg
Ack
Aval
Max
Len
Mark Out
Sent
Rcvd Retra Retra
-----------------------------------------------------------------------------------------ACL_AGENT10
PIM0
0
0
0
0
0
0
20
20
ACL_AGENT10
PIM0
0
0
0
0
0
0
20
20
FRRPAGT10
FRRP0
0
0
0
0
0
0
30
30
IFAGT10
IFMGR0
0
1
0
0
1
1
8
8
LPDMACAGENT10
MACMGR0
0
0
0
0
0
0
25
25
FTOS#

Example
(S-Series)

[qid] Source->Dest

Cur High #of #of #msg
#msg Retr total
Len Mark to Retr Sent
Ackd
-------------------------------------------------------------------[1] unknown2->unknown2
0
0
0
0
0
0
3
3
[2] l2pm0->spanMgr0
0
2
0
0
2298
2298 25
25
[3] fvrp0->macMgr0
0
0
0
0
0
0
25
25
[4] l2pm0->fvrp0
0
2
0
0
1905
1905 25
25
[5] fvrp0->l2pm0
0
0
0
0
0
0
25
25
[6] stp0->l2pm0
0
0
0
0
0
0
25
25
[7] spanMgr0->macMgr0
0
0
0
0
0
0
25
25
[8] spanMgr0->ipMgr0
0
0
0
0
0
0
25
25
FTOS#

Force10#show processes ipc flow-control
Q Statistics on CP Processor
TxProcess
RxProcess
Cur
High Time
Len
Mark Out
ACL0
RTM0
0
0
0
ACL0
DIFFSERV0
0
0
0
ACL0
IGMP0
0
0
0
ACL0
PIM0
0
0
0
LACP0
IFMGR0
0
0
0
RTM0
ARPMGR0
0
0
0
MACMGR0
ACL0
0
0
0
ARPMGR0
MRTM0
0
0
0
DHCP0
ACL0
0
1
0
DHCP0
IFMGR0
0
0
0
L2PM0
SPANMGR0
0
2
0
ARPMGR0
FIBAGT0
0
1
0
SPANMGR0
MACMGR0
0
0
0
SPANMGR0
IPMGR0
0
0
0
SPANMGR0
L2PM0
0
0
0
STP0
L2PM0
0
0
0
RTM0
FIBAGT0
0
2
0
L2PM0
STP0
0
5
0
ACL_AGENT0
PIM0
0
0
0
ACL_AGENT0
PIM0
0
0
0
FRRP0
L2PM0
0
0
0
L2PM0
FRRP0
0
1
0
ACL0
ACL_AGENT0
0
4
0
ACL0
MACAGENT0
0
0
0

Retr
ies
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

Msg
Sent
0
0
0
0
0
0
0
0
1
0
14
1
0
0
0
0
4
5
0
0
0
13
7
0

Ack Aval Max
Rcvd Retra Retra
0
10
10
0
10
10
0
10
10
0
10
10
0
25
25
0 136 136
0
25
25
0 100 100
1
25
25
0
25
25
14
25
25
1 100 100
0
25
25
0
25
25
0
25
25
0
25
25
4 255 255
5
25
25
0
20
20
0
20
20
0
25
25
13
25
25
7
90
90
0
90
90

Control and Monitoring | 125

www.dell.com | support.dell.com

IFMGR0 EVENTTERMLOG0
0
1
0
0
1
IFMGR0
SNMP0
0
1
0
0
1
IFMGR0
IPMGR0
0
7
0
0
9
IFMGR0
DIFFSERV0
0
2
0
0
3
DIFFSERV0
ACL_AGENT0
0
0
0
0
0
!---------------output truncated --------------------------!

Usage
Information

1
1
9
3
0

8
8
8
8
100

8
8
8
8
100

The Single Window Protocol (SWP) provides flow control-based reliable communication
between the sending and receiving software tasks.

Important Points to Remember
•
•
•

A sending task enqueues messages into the SWP queue3 for a receiving task and
waits for an acknowledgement.
If no response is received within a defined period of time, the SWP timeout
mechanism resubmits the message at the head of the FIFO queue.
After retrying a defined number of times, the following timeout message is
generated:

SWP-2-NOMORETIMEOUT
•

In the display output in the example above, a retry (Retries) value of zero
indicates that the SWP mechanism reached the maximum number of
retransmissions without an acknowledgement.

show processes memory (C-Series and E-Series)
ce

View memory usage information based on processes running in the system.

Syntax

show processes memory [cp | lp slot-number {lp all | lp summary} | rp1 | rp2]

Parameters

Command Modes

126

|

cp

(OPTIONAL) Enter the keyword cp to view memory usage of the Control
Processor.

lp slot-number

(OPTIONAL) Enter the keyword lp and the slot number to view information
on the line-card processor in that slot.
C-Series Range: 0-7
E-Series Range: 0 to 13 on a E1200/E1200i, 0 to 6 on a E600/E600i, and 0 to
5 on a E300.

lp all

(OPTIONAL) Enter the keyword lp all to view CP memory usage on all
active line cards.

lp summary

(OPTIONAL) Enter the keyword lp summary to view a summary of the line
card CP memory usage.

rp1

(OPTIONAL) Enter the keyword rp1 to view memory usage of the Route
Processor 1.
Note: This option is supported on the E-Series only.

rp2

(OPTIONAL) Enter the keyword rp2 to view memory usage of the Route
Processor 2.
Note: This option is supported on the E-Series only.

EXEC

Control and Monitoring

EXEC Privilege
Command
History

Usage
Information

Version 8.1.1.2

Introduced on E-Series ExaScale E600i

Version 8.1.1.0

Introduced on E-Series ExaScale E1200i

Version 7.5.1.0

Introduced on C-Series

Version 7.4.1.0

Added lp all and lp summary options

Version 6.5.1.0

For rp1 and rp2 only, the output displays memory consumption of all the
processes including a summary, as shown in the second and third examples.

The output for show process memory displays the memory usage statistics running on CP part
(sysd) of the system. The Sysd is an aggregate task that handles all the tasks running on
C-Series’ and E-Series' CP.
In FTOS Release 7.4.1.0 and higher, the total counter size (for all 3 CPUs) in show memory
and show processes memory will differ based on which FTOS processes are counted.
•

In the show memory (C-Series and E-Series) display output, the memory size is
equal to the size of the application processes.
In the show processes memory (C-Series and E-Series) display output, the
memory size is equal to the size of the application processes plus the size of the
system processes.

•

Example

Example
(show processes
memory rp1)

FTOS#show processes memory
Memory Statistics On CP Processor (bytes)
==========================================
Total:
452689184, MaxUsed:
64886986, CurrentUsed:
64873866, Current
TaskName TotalAllocated
TotalFreed
MaxHeld CurrentHolding
tRootTask
39083408
1395840
38143920
37687568
tARL
64
0
64
64
tBcmTask
256
0
256
256
tPortmapd
18560
0
18560
18560
tShell
3440
0
3440
3440
tPingTmo0
0
1088
0
0
tExcTask
0
592864
0
0
tme
4002494
192
4002302
4002302
ipc
34060
192
34060
33868
irc
943436
0
943436
943436
RpmAvailMgr
9376
32
9344
9344
ev
133188
0
133188
133188
evterm
26752
0
26752
26752
evhdlr
2528
8064
2528
0
dlm
7556256
7366960
1239104
189296
dla
416
0
416
416
tsm
15136
0
15136
15136
fmg
766560
0
766560
766560
fileProc
416
0
416
416
sysAdmTsk
42028
0
42028
42028

FTOS#show processes memory rp1
Total
:
CurrentUsed:
SharedUsed :
PID

Process

954650624, MaxUsed
:
114135040, CurrentFree:
7849096, SharedFree :
ResSize

Size

114135040 [3/8/2006 15:1:42]
840515584
13122448
Allocs

Frees

Max

Current

Control and Monitoring | 127

www.dell.com | support.dell.com

124
119
114
112
107
104
100
98
36
34
32
19
6
5
4
3
2
1
0

Example
(show processes
memory rp2)

ospf
dsm
ipm1
rtm
rip
acl
sysd1
sysmon
sshd
inetd
mount_mfs
mount_mfs
sh
aiodoned
ioflush
reaper
pagedaemon
init
swapper

Total
:
CurrentUsed:
SharedUsed :
Process

145 vrrp
141 fvrp
138 xstp
133 span
132 pim
128 igmp
124 ipm2
120 mrtm
116 l2mgr
112 l2pm
108 arpm
104 acl2
100 sysd2
98 sysmon
36 sshd
34 inetd
32 mount_mfs
19 mount_mfs
6 sh
5 aiodoned
4 ioflush
3 reaper
2 pagedaemon
1 init
0 swapper
FTOS#

|

Control and Monitoring

425984
1859584
229376
421888
253952
430080
2019328
94208
430080
98304
2514944
2449408
737280
0
0
0
0
2375680
0

0
797026
297324
925008
198216
1127524
965798
0
0
0
0
0
0
0
0
0
0
0
0

0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

0
797026
297324
925008
198216
1127524
965798
0
0
0
0
0
0
0
0
0
0
0
0

0
797026
297324
925008
198216
1127524
965798
0
0
0
0
0
0
0
0
0
0
0
0

FTOS#show processes memory rp2

PID

128

3215360
7749632
3821568
4722688
3731456
4734976
11636736
528384
1286144
663552
42397696
364544
446464
76529664
76529664
76529664
76529664
139264
76529664

953700352, MaxUsed
:
149417984, CurrentFree:
7847200, SharedFree :

149417984 [3/8/2006 12:33:6]
804282368
13124344

ResSize

Size

Allocs

Frees

3870720
4472832
10764288
4136960
6664192
4112384
3923968
25567232
4579328
3874816
3702784
3485696
11657216
528384
1286144
663552
41791488
364544
446464
76967936
76967936
76967936
76967936
139264
76967936

266240
204800
7155712
167936
516096
344064
237568
593920
520192
225280
208896
94208
1679360
94208
430080
98304
2514944
2449408
737280
0
0
0
0
2375680
0

297324
797010
367534
565810
2812528
627684
363396
697790
830098
367446
268420
132144
998834
0
0
0
0
0
0
0
0
0
0
0
0

0
0
0
0
0
0
0
0
0
32948
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

Max
297324
797010
367534
565810
2812528
627684
363396
697790
830098
367446
268420
132144
998834
0
0
0
0
0
0
0
0
0
0
0
0

Current
297324
797010
367534
565810
2812528
627684
363396
697790
830098
334498
268420
132144
998834
0
0
0
0
0
0
0
0
0
0
0
0

Table 4-5 defines the fields that appear in the show processes memory output.
Table 4-5.

Descriptions of show processes memory rp1/rp2 output

Field

Description

Total:

Total system memory available

MaxUsed:

Total maximum memory used ever (history indicated with time stamp)

CurrentUsed:

Total memory currently in use

CurrentFree:

Total system memory available

SharedUsed:

Total used shared memory

SharedFree:

Total free shared memory

PID

Process ID

Process

Process Name

ResSize

Actual resident size of the process in memory

Size

Process test, stack, and data size

Allocs

Total dynamic memory allocated

Frees

Total dynamic memory freed

Max

Maximum dynamic memory allocated

Current

Current dynamic memory in use

show processes memory (S-Series)
s
Syntax
Parameters

Command Modes

Display memory usage information based on processes running in the S-Series system.
show processes memory {management-unit | stack unit {0–7 | all | summary}}
management-unit

Enter the keyword management-unit for CPU memory usage of the
stack management unit.

stack unit 0–7

Enter the keyword stack unit followed by a stack unit ID of the member
unit for which to display memory usage on the forwarding processor.

all

Enter the keyword all for detailed memory usage on all stack members.

summary

Enter the keyword summary for a brief summary of memory availability
and usage on all stack members.

EXEC
EXEC Privilege

Command
History

Version 7.7.1.0

Modified: Added management-unit option

Version 7.6.1.0

Introduced on S-Series

Control and Monitoring | 129

www.dell.com | support.dell.com

Usage
Information

The output for show process memory displays the memory usage statistics running on CP part
(sysd) of the system. The Sysd is an aggregate task that handles all the tasks running on
S-Series’ CP.
For S-Series, the output of show memory and this command will differ based on which FTOS
processes are counted.
•
•

Example
(S-Series)

Example
(show processes
memory
management-unit)

In the show memory display output, the memory size is equal to the size of the
application processes.
In the output of this command, the memory size is equal to the size of the
application processes plus the size of the system processes.

FTOS#show processes memory stack-unit 0
Total: 268435456, MaxUsed:
2420244, CurrentUsed:
2420244, CurrentFree: 266015212
TaskName TotalAllocated
TotalFreed
MaxHeld
CurrentHolding
tme
435406
397536
54434
37870
ipc
16652
0
16652
16652
timerMgr
33304
0
33304
33304
sysAdmTsk
33216
0
33216
33216
tFib4
1943960
0
1943960
1943960
aclAgent
90770
16564
74206
74206
ifagt_1
21318
16564
21318
4754
dsagt
6504
0
6504
6504
MacAgent
269778
0
269778
269778

FTOS#show processes management-unit
Total
:
CurrentUsed:
SharedUsed :

151937024, MaxUsed
:
98848768, CurrentFree:
13007848, SharedFree :

111800320 [2/25/2008 4:18:53]
53088256
7963696

PID Process
ResSize
Size
Allocs
Frees
337 KernLrnAgMv
117927936
0
0
0
331 vrrp
5189632
249856
50572
0
323 frrp
5206016
241664
369238
0
322 xstp
7430144
2928640
38328
0
321 pim
5267456
823296
62168
0
314 igmp
4960256
380928
18588
16564
313 mrtm
6742016
1130496
72758
0
308 l2mgr
5607424
552960
735214
380972
301 l2pm
5001216
167936
1429522
1176044
298 arpm
4628480
217088
71092
33128
294 ospf
5468160
503808
724204
662560
288 dsm
6778880
1159168
39490
16564
287 rtm
5713920
602112
442280
198768
284 rip
4562944
258048
528
0
281 lacp
4673536
266240
221060
0
277 ipm1
4837376
380928
83788
0
273 acl
5005312
512000
239564
149076
272 topoDPC
117927936
0
0
0
271 bcmNHOP
117927936
0
0
0
270 bcmDISC
117927936
0
0
0
269 bcmATP-RX
117927936
0
0
0
268 bcmATP-TX
117927936
0
0
0
267 bcmSTACK
117927936
0
0
0
266 bcmRX
117927936
0
0
0
265 bcmLINK.0
117927936
0
0
0
!----------- output truncated --------------!

130

|

Control and Monitoring

Max
0
50572
369238
38328
62168
18588
72758
619266
286606
71092
78208
39490
376024
528
221060
83788
123616
0
0
0
0
0
0
0
0

Current
0
50572
369238
38328
62168
2024
72758
354242
253478
37964
61644
22926
243512
528
221060
83788
90488
0
0
0
0
0
0
0
0

Table 4-6 defines the fields that appear in the show processes memory output.
Table 4-6.

.:

Descriptions of show processes memory output

Field

Description

Total:

Total system memory available

MaxUsed:

Total maximum memory used ever (history indicated with time stamp)

CurrentUsed:

Total memory currently in use

CurrentFree:

Total system memory available

SharedUsed:

Total used shared memory

SharedFree:

Total free shared memory

PID

Process ID

Process

Process Name

ResSize

Actual resident size of the process in memory

Size

Process test, stack, and data size

Allocs

Total dynamic memory allocated

Frees

Total dynamic memory freed

Max

Maximum dynamic memory allocated

Current

Current dynamic memory in use

show processes switch-utilization
e
Syntax
Command Mode

Show switch fabric utilization.
show processes switch-utilization

EXEC
EXEC Privilege

Command
History

Version 8.1.1.0

Introduced on E-Series ExaScale

E-Series original Command
Example

FTOS#show processes switch-utilization
Switch fabric utilization
5Sec
1Min
5Min
-----------------------------------------------------3%
3%
3%

Usage
Information

An asterisk ( * ) in the output indicates a legacy card that is not support by the show
processes switch-utilization command.

Control and Monitoring | 131

www.dell.com | support.dell.com

show rpm
ce

Show the current RPM status.

Syntax

show rpm [number [brief] | all]

Parameters

Command Modes

number

(OPTIONAL) Enter either zero (0) or 1 for the RPM.

all

(OPTIONAL) Enter the keyword all to view a table with information on all present
RPMs.

brief

(OPTIONAL) Enter the keyword brief to view an abbreviated list of RPM
information.

EXEC
EXEC Privilege

Command
History

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Example
(E-Series)

FTOS#show RPM 0
-- RPM card 0 -Status
: active
Next Boot
: online
Card Type
: RPM - Route Processor Module (LC-EF-RPM)
Hardware Rev : 2.0
Num Ports
: 1
Up Time
: 36 min, 51 sec
Last Restart : reset
FTOS Version : 6.2.1.0
Jumbo Capable : yes
CP Boot Flash : A: 2.4.0.6
B: 2.4.0.7 [booted]
RP1 Boot Flash: A: 2.4.0.7 [booted]
B: 2.4.0.5
RP2 Boot Flash: A: 2.4.0.7 [booted]
B: 2.4.0.5
CP Mem Size
: 536870912 bytes
RP1 Mem Size : 0 bytes
RP2 Mem Size : 0 bytes
Temperature
: 49C
Power Status : PEM0: absent or down
PEM1: up
Voltage
: ok
Serial Number : 0016788
Part Number
: 7520013800 Rev 01
Vendor Id
: 01
Date Code
: 06182004
Country Code : 01
FTOS#

132

|

Control and Monitoring

Table 4-7 defines the fields displayed in the previous example.
Table 4-7.

Descriptions of show rpm output

Field

Description

Status

Displays the RPM’s status.

Next Boot

Displays whether the RPM is to be brought online at the next system reload.

Card Type

Displays the RPM catalog number.

Hardware Rev

Displays theE-Series chipset hardware revision level: 1.0 (non-Jumbo); 1.5
(Jumbo-enabled); 2.0 (or above is TeraScale).

Num Ports

Displays the number of active ports.

Up Time

Displays the number of hours and minutes since the RPM’s last reboot.

Last Restart

States the reason for the last RPM reboot.
C-Series possible values:
• “normal power-cycle” (reset power-cycle command)
• “reset by master” (peer RPM reset by master RPM)
• “over temperature shutdown”
• “power supply failed”
E-Series possible values:
• “normal power-cycle” (insufficient power, normal power cycle)
• “reset by user” (automatic failover, software reload of both RPMs, or master
RPM resetting peer)
• “force-failover” (redundancy force-failover command)

FTOS Version

Displays the operating software version.

Jumbo Capable

Displays a Yes or No indicating if the RPM is capable of sending and receiving
Jumbo frames.
This field does not indicate if the chassis is in Jumbo mode; for that
determination, use the show chassis brief command.

CP Boot Flash

Displays the two possible Boot Flash versions for the Control Processor. The
[Booted] keyword next to the version states which version was used at system
boot.

RP1 Boot Flash

Displays the two possible Boot Flash versions for the Routing Processor 1. The
[Booted] keyword next to the version states which version was used at system
boot.

RP2 Boot Flash

Displays the two possible Boot Flash versions for the Routing Processor 2. The
[Booted] keyword next to the version states which version was used at system
boot.

CP Mem Size

Displays the memory of the Control Processor.

RP1 Mem Size

Displays the memory of the Routing Processor 1.

PR2 Mem Size

Displays the memory of the Routing Processor 2.

Temperature

Displays the temperature of the RPM.
Minor alarm status if temperature is over 65° C.

Power Status

Lists the status of the power modules in the chassis.

Voltage

Displays the power rails for the line card.

Serial Num

Displays the line card serial number.

Control and Monitoring | 133

www.dell.com | support.dell.com

Table 4-7.

Related
Commands

Descriptions of show rpm output

Field

Description

Part Num

Displays the line card part number.

Vendor ID

Displays an internal code, which specifies the manufacturing vendor.

Date Code

Displays the line card’s manufacturing date.

Country Code

Displays the country of origin.
01 = USA

show chassis

View information on all elements of the system.

show linecard

View information on a line card.

show sfm

View information on the SFM.

show software ifm
cs

Display interface management (IFM) data.

Syntax

show software ifm {clients [summary] | ifagt number | ifcb interface | stack-unit unit-ID |
trace-flags}

Parameters

134

|

clients

Enter the keyword clients to display IFM client information.

summary

(OPTIONAL) Enter the keyword summary to display brief information about
IFM clients.

ifagt number

Enter the keyword ifagt followed by the number of an interface agent to display
software pipe and IPC statistics.

ifcb interface

Enter the keyword ifcb followed by one of the following interface IDs followed
by the slot/port information to display interface control block information for that
interface:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet.
• For a Port Channel interface, enter the keyword port-channel followed by a
number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a 10G Ethernet interface, enter the keyword TenGigabitEthernet.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE.
C-Series options also include:
• fastethernet for a Fast Ethernet interface
• loopback for a Loopback interface
• managementethernet for a Management Ethernet interface
• null for a Null interface
• vlan for a VLAN interface (Range: 1–4094, 1-2094 for ExaScale)

stack-unit
unit-ID

Enter the keyword stack-unit followed by the stack member number to display
IFM information for that unit.
Range: 0-1
Note: This option is only available on S-Series.

Control and Monitoring

trace-flags

Defaults
Command Mode

Enter the keyword trace-flags to display IFM information for internal trace
flags.

None
EXEC
EXEC Privilege

Command
History

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 7.6.1.0

Introduced for C-Series and S-Series.

Example
(S-Series)

FTOS#show software ifm clients summary
ClntType Inst
svcMask
subSvcMask
tlvSvcMask
tlvSubSvc swp
IPM
0
0x00000000 0x00000000 0x90ff71f3 0x021e0e81 31
RTM
0
0x00000000 0x00000000 0x800010ff 0x01930000 43
VRRP
0
0x00000000 0x00000000 0x803330f3 0x00400000 39
L2PM
0
0x00000000 0x00000000 0x87ff79ff 0x0e032200 45
ACL
0
0x00000000 0x00000000 0x867f50c3 0x000f0218 44
OSPF
0
0x00000dfa 0x00400098 0x00000000 0x00000000 0
PIM
0
0x000000f3 0x00030000 0x00000000 0x00000000 0
IGMP
0
0x000e027f 0x00000000 0x00000000 0x00000000 0
SNMP
0
0x00000000 0x00000000 0x800302c0 0x00000002 30
EVTTERM
0
0x00000000 0x00000000 0x800002c0 0x00000000 29
MRTM
0
0x00000000 0x00000200 0x81f7103f 0x00000000 38
DSM
0
0x00000000 0x00000000 0x80771003 0x00000000 32
LACP
0
0x00000000 0x00000000 0x8000383f 0x00000000 35
DHCP
0
0x00000000 0x00000000 0x800000c2 0x0000c000 37
V6RAD
0
0x00000433 0x00030000 0x00000000 0x00000000 0
Unidentified Client0
0x006e0002 0x00000000 0x00000000 0x00000000 0
FTOS#

show switch links
c
Syntax
Parameters

Defaults
Command Modes
Command
History
Example

View the switch fabric backplane or internal status.
show switch links {backplane | internal}
backplane

Enter the keyword backplane to view a table with information on
the link status of the switch fabric backplane for both SFMs.

internal

Enter the keyword internal to view a table with information on the
internal status of the switch fabric modules.

None
EXEC
Version 7.5.1.0

Introduced on C-Series

FTOS# show switch links backplane

Control and Monitoring | 135

www.dell.com | support.dell.com

Switch fabric backplane link status:

LC SlotID
0
1
2
3
4
5
6
7

SFM0 Links Status
SFM1 Links Status
Port0 | Port1 | Port2 | Port3 | Port4 | Port5 | Port6 | Port7
up
not
not
not
not
not
up
not

up
present
present
present
present
present
up
present

up

up

down

down

down

down

up

up

down

down

down

down

up - Both ends of the link are up
down - Both ends of the link are down
up / down - SFM side up and LC side down
down / up - SFM side down and LC side up
FTOS#

show system (S-Series and S4810)
Display the current status of all units in the system.

s
Syntax
Parameters

Command Modes

show system [brief | stack-unit unit-id]
brief

(OPTIONAL) Enter the keyword brief to view an abbreviated list of
system information.

stack-unit unit-id

(OPTIONAL) Enter the keyword stack-unit followed by the stack
member ID for information on that stack member.
Range: 0 to 7.

EXEC
EXEC Privilege

Command
History

Usage

Version 7.8.1.0

Modified output: Boot Flash field will display code level for boot code 2.8.1.1
and newer, while older boot codes are displayed as “Present”

Version 7.7.1.0

Modified output: Added Master Priority field.

Version 7.6.1.0

Introduced for S-Series switches

The second example shows the output from the show system brief command.
The last example shows the output from the show system stack-unit command.

Example
(show system)

FTOS#show system
Stack MAC : 00:01:e8:8b:3e:42
Reload-Type
:
normal-reload [Next boot : normal-reload]
-- Unit 0 -Unit Type
Status
Next Boot
Required Type

136

|

Control and Monitoring

:
:
:
:

Management Unit
online
online
S4810 - 52-port GE/TE/FG (SE)

Current Type
: S4810 - 52-port GE/TE/FG (SE)
Master priority : 0
Hardware Rev
: 3.0
Num Ports
: 64
Up Time
: 3 hr, 7 min
FTOS Version
: 4810-8-3-7-1667
Jumbo Capable
: yes
POE Capable
: no
FIPS Mode
: disabled
Stack MAC : 00:01:e8:8b:3e:42
Reload-Type
:
normal-reload [Next boot : normal-reload]
-- Unit 0 -Unit Type
Status
Next Boot
Required Type
Current Type
Master priority
Hardware Rev
Num Ports
Up Time
FTOS Version
Jumbo Capable
POE Capable
FIPS Mode
Burned In MAC
No Of MACs

:
:
:
:
:
:
:
:
:
:
:
:
:
:
:

Management Unit
online
online
S4810 - 52-port GE/TE/FG (SE)
S4810 - 52-port GE/TE/FG (SE)
0
3.0
64
3 hr, 7 min
4810-8-3-7-1667
yes
no
disabled
00:01:e8:8b:3e:42
3

-- Power Supplies -Unit
Bay
Status
Type
FanStatus
---------------------------------------------------------------------------0
0
up
AC
up
0
1
absent
absent
-- Fan Status -Unit Bay
TrayStatus Fan0
Speed
Fan1
Speed
---------------------------------------------------------------------------0
0
up
up
6720
up
6960
0
1
up
up
6720
up
6960
Speed in RPM
Burned In MAC
No Of MACs

: 00:01:e8:8b:3e:42
: 3

-- Power Supplies -Unit
Bay
Status
Type
FanStatus
---------------------------------------------------------------------------0
0
up
AC
up
0
1
absent
absent
-- Fan Status -Unit Bay
TrayStatus Fan0
Speed
Fan1
Speed
---------------------------------------------------------------------------0
0
up
up
6720
up
6960
0
1
up
up
6720
up
6960
Speed in RPM
FTOS #

Control and Monitoring | 137

www.dell.com | support.dell.com

Example
(show system
brief)

FTOS#show system brief
Stack MAC : 0:1:e8:d6:4:70
-- Stack Info -Unit UnitType
Status
ReqTyp
CurTyp
Version
Ports
--------------------------------------------------------------------------0
Member
not present
1
Standby
online
S50V
S50V
7.7.1.0
52
2
Mgmt
online
S50V
S50V
7.7.1.0
52
3
Member
not present
4
Member
not present
5
Member
not present
6
Member
not present
7
Member
not present
-- Module Info -Unit Module No
Status
Module Type
Ports
--------------------------------------------------------------------------1
0
online
S50-01-10GE-2P
2
1
1
online
S50-01-24G-2S
1
2
0
online
S50-01-10GE-2P
2
2
1
online
S50-01-24G-2S
1
-- Power Supplies -Unit
Bay
Status
Type
--------------------------------------------------------------------------1
0
up
AC
1
1
absent
2
0
up
AC
2
1
absent
-- Fan Status -Unit
TrayStatus Fan0
Fan1
Fan2
Fan3
Fan4
Fan5
-----------------------------------------------------------------------------1
up
up
up
up
up
up
up
2
up
up
up
up
up
up
up
FTOS#

Example
(show system
stack-unit)

138

|

Control and Monitoring

FTOS#show system stack-unit 0
-- Unit 0 -Unit Type
Status
Next Boot
Required Type
Current Type
Master Priority
Hardware Rev
Num Ports
Up Time
FTOS Version
Jumbo Capable
POE Capable
Boot Flash
Memory Size
Temperature
Voltage
Serial Number
Part Number
Vendor Id
Date Code
Country Code

:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:

Management Unit
online
online
S50V - 48-port E/FE/GE with POE (SB)
S50V - 48-port E/FE/GE with POE (SB)
4
2.0
52
3 hr, 17 min
7.6.1.0a
yes
no
Present
254701568 bytes
43C
ok
DZ267160000
7590003600 Rev B
07
12172007
01

Burned In MAC
No Of MACs
--Module 0-Status
Module Type
Num Ports
Hot Pluggable

: 00:01:e8:cc:cc:cc
: 3

:
:
:
:

online
S50-01-10GE-2P
2
no

-- Module 1 Status
:
Module Type
:
Num Ports
:
Hot Pluggable :

online
S50-01-10GE-2C
2
no

- 2-port 10GE XFP (SB)

- 2-port 10GE CX4 (SB)

- Power Supplies -Unit
Bay
Status
Type
--------------------------------------------------------------------------0
0
up
AC
0
1
absent
-- Fan Status ------------------------------------------------------------------------------Unit
TrayStatus Fan0
Fan1
Fan2
Fan3
Fan4
Fan5
0
FTOS#

Related
Commands

up

up

up

up

up

up

up

show version

Display the FTOS version.

show processes memory
(S-Series)

Display memory usage based on running processes.

show system stack-ports

Display information about the stack ports on all switches in the
S-Series stack.

show hardware stack-unit

Display the data plane and management plane input and output
statistics of a particular stack member.

stack-unit priority

Configure the ability of an S-Series switch to become the
management unit of a stack.

show tech-support (C-Series and E-Series)
ce

Display, or save to a file, a collection of data from other show commands, the information
necessary for Force10 Networks technical support to perform troubleshooting.

Syntax

show tech-support [linecard 0-6 | page] | {display | except | find | grep | no-more | save}

Parameters

linecard 0-6

(OPTIONAL) Enter the keyword linecard followed by the linecard number to
view information relating to a specific linecard.

page

(OPTIONAL) Enter the keyword page to view 24 lines of text at a time.
Press the SPACE BAR to view the next 24 lines.
Press the ENTER key to view the next line of text.

Control and Monitoring | 139

www.dell.com | support.dell.com

Command Modes
Command
History

display, except,
find, grep,
no-more

If you use the pipe command ( | ), then enter one of these keywords to filter
command output. Refer to Filtering show Commands in the CLI Basics
chapter for details on filtering commands.

save

Enter the save keyword (following the pipe) to save the command output.
flash: Save to local flash drive (flash://filename (max 20 chars) )
slot0: Save to local file system (slot0://filename (max 20 chars) )

EXEC Privilege
Version 7.8.1.0

Introduced save to file options

Version 7.5.1.0

Introduced on C-Series

Version 6.5.4.0

Show clock included in display on E-Series

Example
(C-Series)

FTOS#show tech-support page
----------------------------------- show version ------------------------------Dell Force10 Networks Real Time Operating System Software
Dell Force10 Operating System Version: 1.0
Dell Force10 Application Software Version: FTOS 7.5.1.0
Copyright (c) 1999-2007 by Force10 Networks, Inc.
Build Time: Tue Sep 12 15:39:17 IST 2006
Build Path: /sites/maa/work/sw//C-SERIES/SW/SRC
Dell Force10 uptime is 18 minutes
System image file is "/work/sw/IMAGES/Chassis/C300-ODC-2/FTOS-CS.bin"
Chassis Type: C300
Control Processor: IBM PowerPC 750FX (Rev D2.2) with 1073741824 bytes of memory.
128K bytes of non-volatile configuration memory.
1
2
1
96

Route Processor/Switch Fabric Module
48-port GE 10/100/1000Base-T line card with RJ45 interface (CB)
FastEthernet/IEEE 802.3 interface(s)
GigabitEthernet/IEEE 802.3 interface(s)

----------------------------------- show HA information -------------------- RPM Status ------------------------------------------------RPM Slot ID:
0
RPM Redundancy Role:
Primary
RPM State:
Active
RPM SW Version:
CS-1-1-317
Link to Peer:
Down
Peer RPM:
not present
-- RPM Redundancy Configuration ------------------------------------------------Primary RPM:
rpm0
Auto Data Sync:
Full
Failover Type:
Hot Failover
Auto reboot RPM:
Disabled
Auto failover limit:
3 times in 60 minutes
...more----

Example
(E-Series)

140

|

Control and Monitoring

FTOS#show tech-support ?
linecard
Line card
page
Page through output

|


Pipe through a command

FTOS#show tech-support linecard 3 | ?
display
Display additional information
except
Show only text that does not match a pattern
find
Search for the first occurrence of a pattern
grep
Show only text that matches a pattern
no-more
Don't paginate output
save
Save output to a file
FTOS#show tech-support linecard 3 | save ?
flash:
Save to local file system (flash://filename (max 20 chars) )
slot0:
Save to local file system (slot0://filename (max 20 chars) )
FTOS#show tech-support linecard 3 | save flash://LauraSave
Start saving show command report .......
FTOS#dir
Directory of flash:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17

drwx
drwx
drwx
drwx
drwx
drwx
d---rwx
drwx
-rwx
-rwx
-rwx
-rwx
-rwx
-rwx
-rwx
-rwx

32768
512
8192
8192
8192
8192
8192
33059550
8192
29555751
27959813
4693
29922288
6497
5832
29947358
10375

Jan
Aug
Mar
Mar
Mar
Mar
Mar
Jul
Jan
May
Apr
May
Jan
Aug
Jul
Jul
Aug

01
22
30
30
30
30
30
11
01
12
04
12
11
22
25
25
25

1980
2008
1919
1919
1919
1919
1919
2007
1980
2008
2008
2008
2008
2008
2008
2008
2008

00:00:00
14:21:13
10:31:04
10:31:04
10:31:04
10:31:04
10:31:04
17:49:46
00:18:28
17:29:42
15:05:12
17:24:36
14:58:36
14:18:56
11:13:36
11:04:26
10:55:18

+00:00
+00:00
+00:00
+00:00
+00:00
+00:00
+00:00
+00:00
+00:00
+00:00
+00:00
+00:00
+00:00
+00:00
+00:00
+00:00
+00:00

.
..
TRACE_LOG_DIR
CRASH_LOG_DIR
NVTRACE_LOG_DIR
CORE_DUMP_DIR
ADMIN_DIR
FTOS-EF-7.4.2.0.bin
diag
FTOS-EF-4.7.6.0.bin
FTOS-EF-7.5.1.0.bin
config051508
FTOS-EF-7.6.1.0.bin
startup-config
startup-config.bak
FTOS-EF-7.6.1.2.bin
LauraSave

flash: 520962048 bytes total (40189952 bytes free)
FTOS#

Usage
Information

Without the linecard or page option, the command output is continuous, use CNTL-z to
interrupt the command output.
The save option works with other filtering commands. This allows you to save specific
information of a show command. The save entry should always be the last option.
For example: Force10#show tech-support |grep regular-expression |except regular-expression | find
regular-expression | save flash://result

This display output is an accumulation of the same information that is displayed when you
execute one of the following show commands:
•
•
•
•
•

show cam-profile
show cam-ipv4flow
show chassis
show clock
show environment

Control and Monitoring | 141

www.dell.com | support.dell.com

•
•
•
•
•
•
•
•
•
•
•
•
•
Related
Commands

show file-system
show interface
show inventory
show ip management-route
show ip protocols
show ip route summary
show processes cpu
show processes memory
show redundancy
show rpm
show running-conf
show sfm
show version

show version

Display the FTOS version.

show linecard

Display the line card(s) status.

show environment (C-Series
and E-Series)

Display system component status.

show processes memory
(C-Series and E-Series)

Display memory usage based on running processes.

show tech-support (S-Series)
s
Syntax
Parameters

Display a collection of data from other show commands, necessary for Dell Force10 technical
support to perform troubleshooting on S-Series switches.
show tech-support [stack-unit unit-id | page]
stack-unit

(OPTIONAL) Enter the keyword stack-unit to view CPU memory usage for the
stack member designated by unit-id. Range: 0 to 7

page

(OPTIONAL) Enter the keyword page to view 24 lines of text at a time.
Press the SPACE BAR to view the next 24 lines.
Press the ENTER key to view the next line of text.
When using the pipe command ( | ), enter one of these keywords to filter
command output. Refer to Filtering show Commands in the CLI Basics chapter
for details on filtering commands.

save

Command Modes
Command
History

EXEC Privilege
Version 7.8.1.0

Introduced save to file options

Version 7.6.1.0

Expanded to support S-Series switches

Example
(show
tech-support
save)

142

|

Enter the save keyword to save the command output.
flash: Save to local flash drive (flash://filename (max 20 chars) )

Control and Monitoring

FTOS#show tech-support ?
page
Page through output
stack-unit
Unit Number
|
Pipe through a command


FTOS#show tech-support stack-unit 1 ?
|
Pipe through a command

FTOS#show tech-support stack-unit 1 | ?
except
Show only text that does not match a pattern
find
Search for the first occurrence of a pattern
grep
Show only text that matches a pattern
no-more
Don't paginate output
save
Save output to a file
FTOS#show tech-support stack-unit 1 | save ?
flash:
Save to local file system (flash://filename (max 20 chars) )
FTOS#show tech-support stack-unit 1 | save flash://LauraSave
Start saving show command report .......
FTOS#
FTOS#dir
Directory of flash:
1
2
3
4
5
6
7
8

drwdrwx
d---rw-rw-rw-rw-rw-

16384
1536
512
7124
3303
6561
6539
276

Jan
Jul
Nov
Jul
Feb
May
May
Jul

01
13
20
13
14
17
29
15

1980
1996
2007
1996
2008
1996
1996
1996

00:00:00
02:38:06
15:46:44
02:33:04
22:01:16
04:10:54
10:35:42
23:11:14

+00:00
+00:00
+00:00
+00:00
+00:00
+00:00
+00:00
+00:00

.
..
ADMIN_DIR
startup-config
startup-config.oldChassis
startup-config.bak
test.cfg
LauraSave

flash: 3104256 bytes total (3072512 bytes free)
FTOS#

Example
(show
tech-support)

FTOS#show tech-support stack-unit 0
----------------------------------- show version ------------------------------Dell Force10 Networks Real Time Operating System Software
Dell Force10 Operating System Version: 1.0
Dell Force10 Application Software Version: FTOS 7.6.1.0
Copyright (c) 1999-2007 by Dell Force10 Networks, Inc.
Build Time: Tue Sep 12 15:39:17 IST 2006
Build Path: /sites/maa/work/sw/purushothaman/cser-latest/depot/main/Dev/
Cyclone/Force10 uptime is 18 minutes
System Type: S50N
Control Processor: MPC8451E with 255545344 bytes of memory.
32M bytes of Boot-Flash memory.
1 48-port E/FE/GE (SB)
48 GigabitEthernet/IEEE 802.3 interface(s)
4 Ten GigabitEthernet/IEEE 802.3 interface(s)
------------------------------------ show clock ------------------------------12:03:01.695 UTC Wed Nov 21 2007
----------------------------------- show running-config -----------------------Current Configuration ...
! Version E_MAIN4.7.5.414
! Last configuration change at Wed Nov 21 11:42:19 2007 by default
!
service timestamps log datetime
!
hostname Force10

Control and Monitoring | 143

www.dell.com | support.dell.com

!
enable password 7 xxxxxxxx
!
username admin password 7 xxxxxxxx
!
enable restricted 7 xxxxxxxx
!
interface GigabitEthernet 0/1
no ip address
shutdown
!
interface GigabitEthernet 0/2
no ip address
shutdown
!
!------------- output truncated -----------------!

Usage
Information

Without the page or stack-unit option, the command output is continuous, use Ctrl-z to
interrupt the command output.
The save option works with other filtering commands. This allows you to save specific
information of a show command. The save entry should always be the last option.
For example: FTOS#show tech-support |grep regular-expression |except regular-expression | find
regular-expression | save flash://result
This display output is an accumulation of the same information that is displayed when you
execute one of the following show commands:
•
•
•
•
•
•
•
•
•
•
•
•
•

Related
Commands

144

|

show cam
show clock
show environment
show file
show interfaces
show inventory
show ip protocols
show ip route summary
show processes cpu
show processes memory
show redundancy
show running-conf
show version

show version

Display the FTOS version.

show system (S-Series and
S4810)

Display the current switch status.

show environment (S-Series)

Display system component status.

show processes memory
(S-Series)

Display memory usage based on running processes.

Control and Monitoring

ssh-peer-rpm
ce

Open an SSH connection to the peer RPM.

Syntax

ssh-peer-rpm [-l username]

Parameters

Defaults
Command Modes

-l username

(OPTIONAL) Enter the keyword -l followed by your user name.
Default: The user name associated with the terminal

Not configured.
EXEC
EXEC Privilege

Command
History

Usage
Information

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.5.1.0

Introduced on C-Series

Version 6.3.1.0

Introduced on E-Series

This command is not available when the peer RPMs are running different FTOS releases.

telnet
ces

Syntax

Connect through Telnet to a server. The Telnet client and server in FTOS support IPv4 and
IPv6 connections. You can establish a Telnet session directly to the router, or a connection can
be initiated from the router.
telnet {host | ip-address | ipv6-address | vrf vrf instance name} [source-interface]

Parameters

host

(OPTIONAL) Enter the name of a server.

ip-address

(OPTIONAL) E-Series only. Enter the IPv4 address to which you are
testing connectivity in dotted decimal format of the server.

ipv6-address
prefix-length

(OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format.
Range: /0 to /128
Note: The :: notation specifies successive hexadecimal fields of zeros

Control and Monitoring | 145

www.dell.com | support.dell.com

Defaults
Command Modes

vrf instance

(OPTIONAL) E-Series Only: Enter the keyword vrf followed by the VRF
Instance name.

source-interface

(Mandatory for IPv6 link-local addresses; Optional otherwise) Enter the
keywords source-interface followed by the interface information to
include the source interface.
Enter the following keywords and slot/port or number information:
• For a 100/1000 Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Loopback interface, enter the keyword loopback followed by a
number from zero (0) to 16383.
• For the Null interface, enter the keyword null followed by 0.
• For a Port Channel interface, enter the keyword port-channel
followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For SONET interface types, enter the keyword sonet followed by the
slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.
• For a VLAN interface, enter the keyword vlan followed by a number
from 1 to 4094.

Not configured.
EXEC
EXEC Privilege

Command
History

Usage
Information

Version 8.3.12.0

Added support for source-interface requirements for link-local IPv6 addressing
on the S4810.

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.2.1.0

Introduced on E-Series ExaScale (IPv6)
Increased number of VLANs on ExaScale to 4094 (was 2094)

Version 8.1.1.0

Introduced on E-Series ExaScale (IPv4)

Version 7.9.1.0

Introduced VRF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series and added support for IPv6 address on E-Series only

Telnet to link-local addresses is not supported.

telnet-peer-rpm
ce

146

|

Open a Telnet connection to the peer RPM.

Control and Monitoring

Syntax
Defaults
Command Modes

telnet-peer-rpm

Not configured.
EXEC
EXEC Privilege

Command
History

Usage
Information

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.5.1.0

Introduced on C-Series

Version 6.2.1.1

Introduced on E-Series

Opening a telnet connection from the Standby RPM to an Active RPM follows the
authentication procedure configured in the chassis. However, opening a telnet connection
from the Active RPM into the Standby RPM requires local authentication.
Configuring an ACL on a VTY line will block a Telnet session using the telnet-peer-rpm
command in the standby to active RPM direction only. Such an ACL will not block an
internal Telnet session in the active RPM to standby RPM direction.

terminal length
ces
Syntax

Configure the number of lines displayed on the terminal screen.
terminal length screen-length

To return to the default values, enter terminal no length.
Parameters

screen-length

Defaults
Command Modes

Enter a number of lines. Entering zero will cause the terminal to display
without pausing.
Range: 0 to 512.
Default: 24 lines.

24 lines
EXEC
EXEC Privilege

Command
History

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command

Control and Monitoring | 147

www.dell.com | support.dell.com

terminal xml
ce

Enable XML mode in Telnet and SSH client sessions.

Syntax

terminal xml

To exit the XML mode, enter terminal no xml.
Defaults
Command Modes

Disabled
EXEC
EXEC Privilege

Command
History

Usage
Information

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.7.1.0

Introduced on C-Series

Version 6.5.1.0

Introduced for E-Series

This command enables the XML input mode where you can either cut and paste XML
requests or enter the XML requests line-by-line. For more information on using the XML
feature, refer to the XML chapter in the FTOS Configuration Guide.

traceroute
ces

Syntax

View a packet’s path to a specific device.

traceroute {host | vrf instance | ip-address | ipv6-address | outgoing-interface}

Parameters

148

|

host

Enter the name of device.

vrf instance

(Optional) E-Series Only: Enter the keyword vrf followed by the VRF
Instance name.

ip-address

Enter the IP address of the device in dotted decimal format.

ipv6-address

Enter the IPv6 address, in the x:x:x:x::x format, to which you are testing
connectivity.
Note: The :: notation specifies successive hexadecimal fields of zeros

Control and Monitoring

outgoing-interfa
ce

Defaults
Command Modes

(IPv6 link-local address) Enter one of the following types of outgoing interface
for traceroute packets to a destination link-local address.
• For an 100/1000 Ethernet interface, enter the keyword gigabitethernet
followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword gigabitethernet
followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword tengigabitethernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed
by the slot/port information.
• For a VLAN interface, enter the keyword vlan followed by a number from
1 to 4094.followed by the slot/port information.
• For a Management Ethernet interface, enter the keyword management
ethernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by
the slot/port information.

Timeout = 5 seconds; Probe count = 3; 30 hops max; 40 byte packet size; UDP port = 33434
EXEC
EXEC Privilege

Command
History

Version 8.3.12.0

Added support in the outgoing-interface parameter for link-local IPv6
addressing on the S4810.

Version 8.4.1.0

IPv6 tracerouting available on management interface.

Version 8.2.1.0

Introduced on E-Series ExaScale with IPv6

Version 8.1.1.0

Introduced on E-Series ExaScale (IPv4 only)

Version 7.9.1.0

Introduced VRF.

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Introduced on C-Series

Version 7.4.1.0

Added support for IPv6 address on E-Series

E-Series original Command
Usage
Information

When you enter the traceroute command without specifying an IP address (Extended
Traceroute), you are prompted for a target and source IP address, timeout in seconds (default
is 5), a probe count (default is 3), minimum TTL (default is 1), maximum TTL (default is 30),
and port number (default is 33434). To keep the default setting for those parameters, press the
ENTER key.
For the source IP address option, you may enter IPv6 global addresses only (link-local
addresses are not supported).
For IPv6, you are prompted for a minimum hop count (default is 1) and a maximum hop
count (default is 64).

Example (IPv4)

FTOS#traceroute www.force10networks.com
Translating "www.force10networks.com"...domain server (10.11.0.1) [OK]
Type Ctrl-C to abort.

Control and Monitoring | 149

www.dell.com | support.dell.com

-----------------------------------------------------------------------------------------Tracing the route to www.force10networks.com (10.11.84.18), 30 hops max, 40 byte packets
-----------------------------------------------------------------------------------------TTL Hostname
Probe1
Probe2
Probe3
1 10.11.199.190
001.000 ms 001.000 ms 002.000 ms
2 gwegress-sjc-02.force10networks.com (10.11.30.126) 005.000 ms 001.000 ms 001.000 ms
3 fw-sjc-01.force10networks.com (10.11.127.254) 000.000 ms 000.000 ms 000.000 ms
4 www.force10networks.com (10.11.84.18) 000.000 ms 000.000 ms 000.000 ms
FTOS#

The following section contains examples of the IPv6 traceroute command with both a
compressed IPv6 address and uncompressed address.
Example (IPv6)

FTOS#traceroute 100::1
Type Ctrl-C to abort.
----------------------------------------------------------Tracing the route to 100::1, 64 hops max, 60 byte packets
----------------------------------------------------------Hops Hostname
Probe1
Probe2
Probe3
1 100::1
000.000 ms 000.000 ms 000.000 ms
FTOS#traceroute 3ffe:501:ffff:100:201:e8ff:fe00:4c8b
Type Ctrl-C to abort.
----------------------------------------------------------------------------------------Tracing the route to 3ffe:501:ffff:100:201:e8ff:fe00:4c8b, 64 hops max, 60 byte packets
----------------------------------------------------------------------------------------Hops Hostname
Probe1
Probe2
Probe3
1 3ffe:501:ffff:100:201:e8ff:fe00:4c8b
000.000 ms 000.000 ms 000.000 ms
FTOS#

Related
Commands

ping

Test connectivity to a device.

undebug all
ces
Syntax
Defaults
Command Modes
Command
History

Disable all debug operations on the system.
undebug all

No default behavior or values
EXEC Privilege
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command

150

|

Control and Monitoring

upload trace-log
ce

Upload trace log files from the three CPUs (cp, rp1, and rp2)

Syntax

upload trace-log {cp {cmd-history | hw-trace | sw-trace}| rp1 {cmd-history | hw-trace |
sw-trace}| rp2 {cmd-history | hw-trace | sw-trace}}

Parameters

Defaults
Command Modes

cp | rp1 | rp2

Enter the keyword cp | rp1 | rp2 to upload the trace log from that
CPU.

cmd-history

(OPTIONAL) Enter the keyword cmd-history to upload the CPU’s
command history.

hw-trace

(OPTIONAL) Enter the keyword hw-trace to upload the CPU’s
hardware trace.

sw-trace

(OPTIONAL) Enter the keyword sw-trace to upload the CPU’s
software trace.

No default behavior or values
EXEC
EXEC Privilege

Command
History

Usage
Information

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.5.1.0

Introduced on C-Series and expanded to support command history, hardware
trace, and software trace logs

Version 6.1.1.0

Introduced on E-Series

The log information is uploaded to flash:/TRACE_LOG_DIR

virtual-ip
ce

Configure a virtual IP address for the active management interface. Virtual addresses can be
configured both for IPv4 and IPv6 independently.

Syntax

virtual-ip {ipv4-address | ipv6-address}

Parameters

Defaults
Command Modes
Command
History

{ipv4-address |
ipv6-address}

Enter the IPv4 address (A.B.C.D) or IPv6 address (X:X:X:X::) of the
active management interface.

No default behavior or values
CONFIGURATION
Version 8.4.1.0

Added support for IPv6 addressing.

Version 8.1.1.0

Introduced on E-Series ExaScale

Control and Monitoring | 151

www.dell.com | support.dell.com

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Usage
Information

Both IPv4 and IPv6 virtual address can be configured simultaneously, but only one of each.
Each time this command is issued it will replace the previously configured address of the
same family, IPv4 or IPv6. The no virtual-ip command now takes an address/prefix-length
argument, so that the desired address only is removed. If no virtual-ip is entered without any
specified address, then both IPv4 and IPv6 virtual addresses are removed.

Example

FTOS#virtual-ip 10.11.197.99/16
FTOS#virtual-ip fdaa:bbbb:cccc:1004::60/64

write
ces
Syntax
Parameters

Command Modes
Command
History

Copy the current configuration to either the startup-configuration file or the terminal.
write {memory | terminal}
memory

Enter the keyword memory to copy the current running configuration to the startup
configuration file. This command is similar to the copy running-config
startup-config command.

terminal

Enter the keyword terminal to copy the current running configuration to the
terminal. This command is similar to the show running-config command.

EXEC Privilege
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series original Command
Related
Commands
Usage
Information

152

|

save

Save configurations created in BOOT_USER mode (BLI).

The write memory command saves the running-configuration to the file labeled
startup-configuration. When using a LOCAL CONFIG FILE other than the startup-config not
named “startup-configuration” (for example, you used a specific file during the boot config
command) the running-config is not saved to that file; use the copy command to save any
running-configuration changes to that local file.

Control and Monitoring

5
802.1ag
Overview
802.1ag is available only on the following Dell Force10 platforms: s S-Series and.

Commands
This chapter contains the following commands:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

ccm disable
ccm transmit-interval
clear ethernet cfm traceroute-cache
database hold-time
disable
domain
ethernet cfm
ethernet cfm mep
ethernet cfm mip
mep cross-check
mep cross-check enable
mep cross-check start-delay
ping ethernet
show ethernet cfm domain
show ethernet cfm maintenance-points local
show ethernet cfm maintenance-points remote
show ethernet cfm mipbd
show ethernet cfm statistics
show ethernet cfm port-statistics
show ethernet cfm traceroute-cache
service
traceroute cache hold-time
traceroute cache size
traceroute ethernet

802.1ag | 153

www.dell.com | support.dell.com

ccm disable
Disable CCM.

s
Syntax

ccm disable

Enter no ccm disable to enable CCM.
Defaults
Command Modes
Command
History

Disabled
ECFM DOMAIN
Version 8.3.7.0

Introduced on the S4810.

Version 8.3.1.0

Introduced on S-Series

ccm transmit-interval
Configure the transmit interval (mandatory). The interval specified applies to all MEPs in the
domain.

s
Syntax
Parameters

Defaults
Command Modes
Command
History

ccm transmit-interval seconds
seconds

Enter a transmit interval.
Range: 1,10,60,600

10 seconds
ECFM DOMAIN
Version 8.3.7.0

Introduced on the S4810.

Version 8.3.1.0

Introduced on S-Series

clear ethernet cfm traceroute-cache
Delete all Link Trace Cache entries.

s
Syntax
Defaults
Command Modes
Command
History

154

|

802.1ag

clear ethernet cfm traceroute-cache

None
EXEC Privilege
Version 8.3.7.0

Introduced on the S4810.

Version 8.3.1.0

Introduced on S-Series

database hold-time
Set the amount of time that data from a missing MEP is kept in the Continuity Check
Database.

s
Syntax
Parameters

Defaults
Command Modes
Command
History

database hold-time minutes
minutes

Enter a hold-time.
Range: 100-65535 minutes

100 minutes
ECFM DOMAIN
Version 8.3.7.0

Introduced on the S4810.

Version 8.3.1.0

Introduced on S-Series

disable
Disable Ethernet CFM without stopping the CFM process.

s
Syntax
Defaults
Command Modes
Command
History

disable

Disabled
ETHERNET CFM
Version 8.3.7.0

Introduced on the S4810.

Version 8.3.1.0

Introduced on S-Series

domain
Create a maintenance domain.

s
Syntax
Parameters

Defaults
Command Modes

domain name md-level number
name

Name the maintenance domain.

md-level number

Enter a maintenance domain level.
Range: 0-7

None
ETHERNET CFM

802.1ag | 155

www.dell.com | support.dell.com

Command
History

Version 8.3.7.0

Introduced on the S4810.

Version 8.3.1.0

Introduced on S-Series

ethernet cfm
Spawn the CFM process. No CFM configuration is allowed until the CFM process is
spawned.

s
Syntax
Defaults
Command Modes
Command
History

ethernet cfm

Disabled
CONFIGURATION
Version 8.3.7.0

Introduced on the S4810.

Version 8.3.1.0

Introduced on S-Series

ethernet cfm mep
Create a MEP.

s
Syntax
Parameters

Defaults
Command Modes
Command
History

156

|

802.1ag

ethernet cfm mep {up-mep | down-mep} domain {name | level} ma-name name mepid mep-id

[up-mep | down-mep]

Specify whether the MEP is up or down facing.
Up-MEP: monitors the forwarding path internal to an bridge on the
customer or provider edge; on Dell Force10 systems the internal
forwarding path is effectively the switch fabric and forwarding
engine.
Down-MEP: monitors the forwarding path external another bridge.

domain [name | level]

Enter this keyword followed by the domain name or domain level.

ma-name name

Enter this keyword followed by the name of the maintenance
association.

mepid mep-id

Enter an MEP ID.
Range: 1-8191

None
INTERFACE
Version 8.3.7.0

Introduced on the S4810.

Version 8.3.1.0

Introduced on S-Series

ethernet cfm mip
Create a MIP.

s
Syntax
Parameters

Defaults
Command Modes
Command
History

ethernet cfm mip domain {name | level} ma-name name
domain [name | level]

Enter this keyword followed by the domain name or domain level.

ma-name name

Enter this keyword followed by the name of the maintenance
association.

None
INTERFACE
Version 8.3.7.0

Introduced on the S4810.

Version 8.3.1.0

Introduced on S-Series

mep cross-check
Enable cross-checking for a MEP.

s
Syntax
Parameters

Defaults
Command Modes
Command
History

mep cross-check mep-id
mep-id

Enter the MEP ID
Range: 1-8191

None
ECFM DOMAIN
Version 8.3.7.0

Introduced on the S4810.

Version 8.3.1.0

Introduced on S-Series

mep cross-check enable
Enable cross-checking.

s
Syntax
Parameters

Defaults
Command Modes

mep cross-check enable {port | vlan-id}
port

Down service with no VLAN association.

vlan-id

Enter the VLAN to apply the cross-check.

None
ECFM DOMAIN

802.1ag | 157

www.dell.com | support.dell.com

Command
History

Version 8.3.7.0

Introduced on the S4810.

Version 8.3.1.0

Introduced on S-Series

mep cross-check start-delay
Configure the amount of time the system waits for a remote MEP to come up before the
cross-check operation is started.

s
Syntax
Parameters

Defaults
Command Modes
Command
History

mep cross-check start-delay number
start-delay number

Enter a start-delay in seconds.
Range: 3-100 seconds

3 ccms
ETHERNET CFM
Version 8.3.7.0

Introduced on the S4810.

Version 8.3.1.0

Introduced on S-Series

ping ethernet
Send a Loopback message.

s
Syntax

Parameters

Defaults
Command Modes
Command
History

158

|

802.1ag

ping ethernet domain [name l level] ma-name m a-name remote {dest-mep-id | mac-addr
mac-address} source {src-mep-id | port interface}
name | level

Enter the domain name or level.

ma-name ma-name

Enter the keyword followed by the maintenance association
name.

dest-mep-id

Enter the MEP ID that will be the target of the ping.

mac-addr mac-address

Enter the keyword followed by the MAC address that will be
the target of the ping.

src-mep-id

Enter the MEP ID that will originate the ping.

port interface

Enter the keyword followed by the interface that will
originate the ping.

None
EXEC Privilege
Version 8.3.7.0

Introduced on the S4810.

Version 8.3.1.0

Introduced on S-Series

show ethernet cfm domain
Display maintenance domain information.

s
Syntax
Parameters

Defaults
Command Modes
Command
History

Example

show ethernet cfm domain [name | level | brief]
name | level

Enter the maintenance domain name or level.

brief

Enter this keyword to display a summary output.

None
EXEC Privilege
Version 8.3.7.0

Introduced on the S4810.

Version 8.3.1.0

Introduced on S-Series

FTOS# show ethernet cfm domain
Domain Name: customer
Level: 7
Total Service: 1
Services
MA-Name
My_MA

VLAN
200

Domain Name: My_Domain
Level: 6
Total Service: 1
Services
MA-Name
Your_MA

VLAN
100

CC-Int

X-CHK Status

10s

CC-Int

enabled

X-CHK Status

10s

enabled

show ethernet cfm maintenance-points local
Display configured MEPs and MIPs.

s
Syntax
Parameters

Defaults
Command Modes
Command
History

show ethernet cfm maintenance-points local [mep | mip]
mep

Enter this keyword to display configured MEPs.

mip

Enter this keyword to display configured MIPs.

None
EXEC Privilege
Version 8.3.7.0

Introduced on the S4810.

Version 8.3.1.0

Introduced on S-Series

802.1ag | 159

www.dell.com | support.dell.com

Example

FTOS#show ethernet cfm maintenance-points local mip
------------------------------------------------------------------------------MPID
Domain Name
Level
Type
Port
CCM-Status
MA Name
VLAN
Dir
MAC
------------------------------------------------------------------------------0

service1
My_MA

4
3333

MIP
DOWN

Gi 0/5
00:01:e8:0b:c6:36

Disabled

0

service1
Your_MA

4
3333

MIP
UP

Gi 0/5
00:01:e8:0b:c6:36

Disabled

show ethernet cfm maintenance-points remote
Display the MEP database.

s
Syntax

Parameters

Defaults
Command Modes
Command
History

Example

show ethernet cfm maintenance-points remote detail [active | domain {level | name} | expired
waiting]
active

Enter this keyword to display only the MEPs in active state.

domain [name | level]

Enter this keyword followed by the domain name or domain level.

expired

Enter this keyword to view MEP entries that have expired due to
connectivity failure.

waiting

Enter this keyword to display MEP entries waiting for response.

None
EXEC Privilege
Version 8.3.7.0

Introduced on the S4810.

Version 8.3.1.0

Introduced on S-Series

FTOS#show ethernet cfm maintenance-points remote detail
MAC Address: 00:01:e8:58:68:78
Domain Name: cfm0
MA Name: test0
Level: 7
VLAN: 10
MP ID: 900
Sender Chassis ID: Force10
MEP Interface status: Up
MEP Port status: Forwarding
Receive RDI: FALSE
MP Status: Active

show ethernet cfm mipbd
Display the MIP database.

s
Syntax

160

|

802.1ag

show ethernet cfm mipdb

|

Defaults
Command Modes
Command
History

None
EXEC Privilege
Version 8.3.7.0

Introduced on the S4810.

Version 8.3.1.0

Introduced on S-Series

show ethernet cfm statistics
Display MEP statistics.

s
Syntax
Parameters

Defaults
Command Modes
Command
History

Example

show ethernet cfm statistics [domain {name | level} vlan-id vlan-id mpid mpid]
domain

Enter this keyword to display statistics for a particular domain.

name | level

Enter the domain name or level.

vlan-id vlan-id

Enter this keyword followed by a VLAN ID.

mpid mpid

Enter this keyword followed by a maintenance point ID.

None
EXEC Privilege
Version 8.3.7.0

Introduced on the S4810.

Version 8.3.1.0

Introduced on S-Series

FTOS#

show ethernet cfm statistics

Domain Name: Customer
Domain Level: 7
MA Name: My_MA
MPID: 300
CCMs:
Transmitted:
LTRs:
Unexpected Rcvd:
LBRs:
Received:
Received Bad MSDU:
Transmitted:

1503

RcvdSeqErrors:

0

0
0
0
0

Rcvd Out Of Order:

0

show ethernet cfm port-statistics
Display CFM statistics by port.

s
Syntax

show ethernet cfm port-statistics [interface type slot/port]

802.1ag | 161

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes
Command
History

Example

interface type

Enter this keyword followed by the interface type.

slot/port

Enter the slot and port numbers for the port.

None
EXEC Privilege
Version 8.3.7.0

Introduced on the S4810.

Version 8.3.1.0

Introduced on S-Series

FTOS#show ethernet cfm port-statistics interface gigabitethernet 0/5
Port statistics for port: Gi 0/5
==================================
RX Statistics
=============
Total CFM Pkts 75394 CCM Pkts 75394
LBM Pkts 0 LTM Pkts 0
LBR Pkts 0 LTR Pkts 0
Bad CFM Pkts 0 CFM Pkts Discarded 0
CFM Pkts forwarded 102417
TX Statistics
=============
Total CFM Pkts 10303 CCM Pkts 0
LBM Pkts 0 LTM Pkts 3
LBR Pkts 0 LTR Pkts 0

show ethernet cfm traceroute-cache
Display the Link Trace Cache.

s
Syntax
Defaults
Command Modes
Command
History

Example

show ethernet cfm traceroute-cache

None
EXEC Privilege
Version 8.3.7.0

Introduced on the S4810.

Version 8.3.1.0

Introduced on S-Series

FTOS#show ethernet cfm traceroute-cache
Traceroute to 00:01:e8:52:4a:f8 on Domain Customer2, Level 7, MA name Test2 with VLAN 2
-----------------------------------------------------------------------------Hops
Host
IngressMAC
Ingr Action
Relay Action
Next Host
Egress MAC
Egress Action FWD Status
-----------------------------------------------------------------------------4

162

|

802.1ag

00:00:00:01:e8:53:4a:f8
00:00:00:01:e8:52:4a:f8

00:01:e8:52:4a:f8

IngOK

RlyHit
Terminal MEP

service
Create a maintenance association.

s
Syntax
Parameters

Defaults
Command Modes
Command
History

service name vlan vlan-id
name

Enter a maintenance association name.

vlan vlan-id

Enter this keyword followed by the VLAN ID.
Range: 1-4094

None
ECFM DOMAIN
Version 8.3.7.0

Introduced on the S4810.

Version 8.3.1.0

Introduced on S-Series

traceroute cache hold-time
Set the amount of time a trace result is cached.

s
Syntax
Parameters

Defaults
Command Modes
Command
History

traceroute cache hold-time minutes
minutes

Enter a hold-time.
Range: 10-65535 minutes

100 minutes
ETHERNET CFM
Version 8.3.7.0

Introduced on the S4810.

Version 8.3.1.0

Introduced on S-Series

traceroute cache size
Set the size of the Link Trace Cache.

s
Syntax
Parameters

Defaults
Command Modes

traceroute cache size entries
entries

Enter the number of entries the Link Trace Cache can hold.
Range: 1 - 4095 entries

100 entries
ETHERNET CFM

802.1ag | 163

www.dell.com | support.dell.com

Command
History

Introduced on the S4810.

Version 8.3.1.0

Introduced on S-Series

traceroute ethernet
Send a Linktrace message to a MEP.

s
Syntax

Parameters

Defaults
Command Modes
Command
History

164

Version 8.3.7.0

|

802.1ag

traceroute ethernet domain [name | level] ma-name ma-name remote {mep-id mep-id | mac-addr
mac-address}
domain name | level

Enter the keyword followed by the domain name or level.

ma-name ma-name

Enter the keyword followed by the maintenance association name.

mepid mep-id

Enter the MEP ID that will be the trace target.

mac-addr
mac-address

Enter the MAC address of the trace target.

None
EXEC Privilege
Version 8.3.7.0

Introduced on the S4810.

Version 8.3.1.0

Introduced on S-Series

6
802.1X
The 802.1X Port Authentication commands are:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

debug dot1x
dot1x auth-fail-vlan
dot1x auth-server
dot1x auth-type mab-only
dot1x authentication (Configuration)
dot1x authentication (Interface)
dot1x guest-vlan
dot1x host-mode
dot1x mac-auth-bypass
dot1x max-eap-req
dot1x max-supplicants
dot1x port-control
dot1x quiet-period
dot1x reauthentication
dot1x reauth-max
dot1x server-timeout
dot1x supplicant-timeout
dot1x tx-period
show dot1x cos-mapping interface
show dot1x interface

An authentication server must authenticate a client connected to an 802.1X switch port. Until
the authentication, only EAPOL (Extensible Authentication Protocol over LAN) traffic is
allowed through the port to which a client is connected. Once authentication is successful,
normal traffic passes through the port.
FTOS supports RADIUS and Active Directory environments using 802.1X Port
Authentication.

802.1X | 165

www.dell.com | support.dell.com

Important Points to Remember
FTOS limits network access for certain users by using VLAN assignments. 802.1X with
VLAN assignment has these characteristics when configured on the switch and the RADIUS
server.
•
•
•

•

•
•
•
•
•
•

802.1X is supported on c C-Series, e E-Series, s S-Series (S25/S50),
and E-Series Terascale e t.
802.1X is not supported on the LAG or the channel members of a LAG.
If no VLAN is supplied by the RADIUS server or if 802.1X authorization is
disabled, the port is configured in its access VLAN after successful
authentication.
If 802.1X authorization is enabled but the VLAN information from the RADIUS
server is not valid, the port returns to the unauthorized state and remains in the
configured access VLAN. This prevents ports from appearing unexpectedly in an
inappropriate VLAN due to a configuration error. Configuration errors create an
entry in Syslog.
If 802.1X authorization is enabled and all information from the RADIUS server
is valid, the port is placed in the specified VLAN after authentication.
If port security is enabled on an 802.1X port with VLAN assignment, the port is
placed in the RADIUS server assigned VLAN.
If 802.1X is disabled on the port, it is returned to the configured access VLAN.
When the port is in the force authorized, force unauthorized, or shutdown state, it
is placed in the configured access VLAN.
If an 802.1X port is authenticated and put in the RADIUS server assigned
VLAN, any change to the port access VLAN configuration will not take effect.
The 802.1X with VLAN assignment feature is not supported on trunk ports,
dynamic ports, or with dynamic-access port assignment through a VLAN
membership.

debug dot1x
ecs

Syntax
Parameters

Defaults

166

|

802.1X

Display 802.1X debugging information.

debug dot1x [all | auth-pae-fsm | backend-fsm | eapol-pdu] [interface interface]
all

Enable all 802.1X debug messages.

auth-pae-fsm

Enable authentication PAE FSM debug messages.

backend-fsm

Enable Backend FSM debug messages.

eapol-pdu

Enable EAPOL frame trace and related debug messages

interface interface

Restricts the debugging information to an interface.

Disabled

Command Modes

EXEC Privilege

Command
History

Version 8.3.12.0

Introduced on the S4810.

Version 8.4.1.0

Introduced on C-Series and S-Series

dot1x auth-fail-vlan
ces

Syntax

Configure an authentication failure VLAN for users and devices that fail 802.1X
authentication.
dot1x auth-fail-vlan vlan-id [max-attempts number]
To delete the authentication failure VLAN, use the no dot1x auth-fail-vlan vlan-id
[max-attempts number] command.

Parameters

Defaults
Command Modes
Command
History

Usage
Information

vlan-id

Enter the VLAN Identifier.
Range: 1 to 4094

max-attempts number

(OPTIONAL) Enter the keyword max-attempts followed number of
attempts desired before authentication fails.
Range: 1 to 5
Default: 3

3 attempts
CONFIGURATION (conf-if-interface-slot/port)
Version 8.3.12.0

Introduced on the S4810.

Version 7.6.1.0

Introduced on C-Series, E-Series and S-Series

If the host responds to 802.1X with an incorrect login/password, the login fails. The switch
will attempt to authenticate again until the maximum attempts configured is reached. If the
authentication fails after all allowed attempts, the interface is moved to the authentication
failed VLAN.
Once the authentication VLAN is assigned, the port-state must be toggled to restart
authentication. Authentication will occur at the next re-authentication interval (dot1x
reauthentication).

Related
Commands

dot1x port-control

Enable port control on an interface.

dot1x guest-vlan

Configure a guest VLAN for limited access users or for devices that are
not 802.1X capable.

show dot1x interface

Display the 802.1X configuration of an interface.

802.1X | 167

www.dell.com | support.dell.com

dot1x auth-server
ces

Configure the authentication server to RADIUS.

Syntax

dot1x auth-server radius

Defaults

No default behavior or values

Command Modes
Command
History

CONFIGURATION
Version 8.3.12.0

Introduced on the S4810.

Version 7.6.1.0

Introduced on C-Series and S-Series

Version 7.4.1.0

Introduced on E-Series

dot1x auth-type mab-only
Use only the host MAC address to authenticate a device with MAC authentication bypass
(MAB).

cs
Syntax
Defaults
Command Modes
Command
History

Usage
Information

dot1x auth-type mab-only
Disabled
INTERFACE
Version 8.3.12.0

Introduced on the S4810.

Version 8.4.2.1

Introduced on the C-Series and S-Series

The prerequisites for enabling MAB-only authentication on a port are:
•
•

802.1X authentication must be enabled globally on the switch and on the port
(dot1x authentication command).
MAC authentication bypass must be enabled on the port (dot1x
mac-auth-bypass command).

In MAB-only authentication mode, a port authenticates using the host MAC address even
though 802.1xauthentication is enabled. If the MAB-only authentication fails, the host is
placed in the guest VLAN (if configured).
To disable MAB-only authentication on a port, enter the no dot1x auth-type mab-only
command.
Related
Commands

168

|

802.1X

dot1x mac-auth-bypass

Enable MAC authentication bypass.

dot1x authentication (Configuration)
cets

Syntax

Enable dot1x globally; dot1x must be enabled both globally and at the interface level.

dot1x authentication

To disable dot1x on an globally, use the no dot1x authentication command.
Defaults
Command Modes
Command
History

Related
Commands

Disabled
CONFIGURATION
Version 8.3.12.0

Introduced on the S4810.

Version 7.6.1.0

Introduced on C-Series and S-Series

Version 7.4.1.0

Introduced on E-Series TeraScale

dot1x authentication (Interface)

Enable dot1x on an interface.

dot1x authentication (Interface)
cets

Syntax

Enable dot1x on an interface; dot1x must be enabled both globally and at the interface level.

dot1x authentication

To disable dot1x on an interface, use the no dot1x authentication command.
Defaults
Command Modes
Command
History

Related
Commands

Disabled
INTERFACE
Version 8.3.12.0

Introduced on the S4810.

Version 7.6.1.0

Introduced on C-Series and S-Series

Version 7.4.1.0

Introduced on E-Series

dot1x authentication (Configuration)

Enable dot1x globally.

dot1x guest-vlan
ces

Syntax

Configure a guest VLAN for limited access users or for devices that are not 802.1X capable.

dot1x guest-vlan vlan-id

802.1X | 169

www.dell.com | support.dell.com

To disable the guest VLAN, use the no dot1x guest-vlan vlan-id command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

vlan-id

Enter the VLAN Identifier.
Range: 1 to 4094

Not configured
CONFIGURATION (conf-if-interface-slot/port)
Version 8.3.12.0

Introduced on the S4810.

Version 7.6.1.0

Introduced on C-Series, E-Series, and S-Series

802.1X authentication is enabled when an interface is connected to the switch. If the host fails
to respond within a designated amount of time, the authenticator places the port in the guest
VLAN.
If a device does not respond within 30 seconds, it is assumed that the device is not 802.1X
capable. Therefore, a guest VLAN is allocated to the interface and authentication, for the
device, will occur at the next re-authentication interval (dot1x reauthentication).
If the host fails authentication for the designated amount of times, the authenticator places the
port in authentication failed VLAN (dot1x auth-fail-vlan).
Note: Layer 3 portion of guest VLAN and authentication fail VLANs can be created
regardless if the VLAN is assigned to an interface or not. Once an interface is
assigned a guest VLAN (which has an IP address), then routing through the guest
VLAN is the same as any other traffic. However, interface may join/leave a VLAN
dynamically.

Related
Commands

dot1x auth-fail-vlan

Configure an authentication failure VLAN.

dot1x reauthentication

Enable periodic re-authentication of the client.

dot1x reauth-max

Configure the maximum number of times to re-authenticate a port before
it becomes unauthorized.

dot1x host-mode
ces

Syntax
Parameters

Defaults

170

|

802.1X

Enable single-host or multi-host authentication.

dot1x host-mode {single-host | multi-host | multi-auth}
single-host

Enable single-host authentication.

multi-host

Enable multi-host authentication.

multi-auth

Enable multi-supplicant authentication.

single-host

Command Modes
Command
History

Usage
Information

INTERFACE
Version 8.3.12.0

Introduced on the S4810.

Version 8.4.1.0

The multi-auth option was introduced on the C-Series and S-Series.

Version 8.3.2.0

The single-host and multi-host options were introduced on the
C-Series, E-Series, and S-Series

•
•
•

Single-host mode authenticates only one host per authenticator port, and drops all
other traffic on the port.
Multi-host mode authenticates the first host to respond to an Identity Request,
and then permits all other traffic on the port.
Multi-supplicant mode authenticates every device attempting to connect to the
network on through the authenticator port.

dot1x mac-auth-bypass
Enable MAC authentication bypass. If 802.1X times out because the host did not respond to
the Identity Request frame, FTOS attempts to authenticate the host based on its MAC address.

cs
Syntax
Defaults
Command Modes
Command
History

Usage
Information

dot1x mac-auth-bypass
Disabled
INTERFACE
Version 8.3.12.0

Introduced on the S4810.

Version 8.4.1.0

Introduced on C-Series and S-Series

To disable MAC authentication bypass on a port, enter the no dot1x mac-auth-bypass
command.

dot1x max-eap-req
ces

Syntax

Configure the maximum number of times an EAP (Extensive Authentication Protocol)
request is transmitted before the session times out.
dot1x max-eap-req number
To return to the default, use the no dot1x max-eap-req command.

Parameters

number

Enter the number of times an EAP request is transmitted before a session
time-out.
Range: 1 to 10
Default: 2

802.1X | 171

www.dell.com | support.dell.com

Defaults
Command Modes
Command
History

2
INTERFACE
Version 8.3.12.0

Introduced on the S4810.

Version 7.6.1.0

Introduced on C-Series and S-Series

Version 7.4.1.0

Introduced on E-Series

dot1x max-supplicants
c e ts

Syntax
Parameters

Defaults
Command Modes
Command
History

Related
Commands

Restrict the number of supplicants that can be authenticated and permitted to access the
network through the port. This configuration is only takes effect in multi-auth mode.
dot1x max-supplicants number
number

Enter the number of supplicants that can be authenticated on a single port
in multi-auth mode.
Range: 1-128
Default: 128

128 hosts can be authenticated on a single authenticator port.
INTERFACE
Version 8.3.12.0

Introduced on the S4810.

Version 8.4.1.0

Introduced on C-Series and S-Series

dot1x host-mode

Enable single-host or multi-host authentication

dot1x port-control
ces

Syntax
Parameters

Defaults
Command Modes

172

|

802.1X

Enable port control on an interface.

dot1x port-control {force-authorized | auto | force-unauthorized}
force-authorized

Enter the keyword force-authorized to forcibly authorize a port.

auto

Enter the keyword auto to authorize a port based on the 802.1X
operation result.

force-unauthorized

Enter the keyword force-unauthorized to forcibly de-authorize a port.

No default behavior or values
Auto

Command
History

Usage
Information

Version 8.3.12.0

Introduced on the S4810.

Version 7.6.1.0

Introduced on C-Series and S-Series

Version 7.4.1.0

Introduced on E-Series

The authenticator performs authentication only when port-control is set to auto.

dot1x quiet-period
ces

Syntax

Set the number of seconds that the authenticator remains quiet after a failed authentication
with a client.
dot1x quiet-period seconds
To disable quiet time, use the no dot1x quiet-time command.

Parameters

Defaults
Command Modes
Command
History

seconds

Enter the number of seconds.
Range: 1 to 65535
Default: 60

60 seconds
INTERFACE
Version 8.3.12.0

Introduced on the S4810.

Version 7.6.1.0

Introduced on C-Series and S-Series

Version 7.4.1.0

Introduced on E-Series

dot1x reauthentication
ces

Syntax

Enable periodic re-authentication of the client.

dot1x reauthentication [interval seconds]
To disable periodic re-authentication, use the no dot1x reauthentication command.

Parameters

Defaults
Command Modes

interval seconds

(Optional) Enter the keyword interval followed by the interval time, in
seconds, after which re-authentication will be initiated.
Range: 1 to 31536000 (1 year)
Default: 3600 (1 hour)

3600 seconds (1 hour)
INTERFACE

802.1X | 173

www.dell.com | support.dell.com

Command
History

Version 8.3.12.0

Introduced on the S4810.

Version 7.6.1.0

Introduced on C-Series and S-Series

Version 7.4.1.0

Introduced on E-Series

dot1x reauth-max
ces

Syntax

Configure the maximum number of times a port can re-authenticate before the port becomes
unauthorized.
dot1x reauth-max number
To return to the default, use the no dot1x reauth-max command.

Parameters

Defaults
Command Modes
Command
History

number

Enter the permitted number of re-authentications.
Range: 1 - 10
Default: 2

2
INTERFACE
Version 8.3.12.0

Introduced on the S4810.

Version 7.6.1.0

Introduced on C-Series and S-Series

Version 7.4.1.0

Introduced on E-Series

dot1x server-timeout
ces

Syntax

Configure the amount of time after which exchanges with the server time out.

dot1x server-timeout seconds
To return to the default, use the no dot1x server-timeout command.

Parameters

Defaults
Command Modes
Command
History

174

|

802.1X

seconds

Enter a time-out value in seconds.
Range: 1 to 300, where 300 is implementation dependant. Default: 30

30 seconds
INTERFACE
Version 8.3.12.0

Introduced on the S4810.

Version 7.6.1.0

Introduced on C-Series and S-Series

Version 7.4.1.0

Introduced on E-Series

Usage
Information

When you configure the dot1x server-timeout value, you must take into account the
communication medium used to communicate with an authentication server and the number
of RADIUS servers configured. Ideally, the dot1x server-timeout value (in seconds) is based
on the configured RADIUS-server timeout and retransmit values and calculated according to
the following formula:
dot1x server-timeout seconds > (radius-server retransmit seconds + 1) * radius-server timeout seconds
Where the default values are as follows: dot1x server-timeout (30 seconds), radius-server
retransmit (3 seconds), and radius-server timeout (5 seconds).
For example:
FTOS(conf)#radius-server host 10.11.197.105 timeout 6
FTOS(conf)#radius-server host 10.11.197.105 retransmit 4
FTOS(conf)#interface gigabitethernet 2/23
FTOS(conf-if-gi-2/23)#dot1x server-timeout 40

dot1x supplicant-timeout
ces

Syntax

Configure the amount of time after which exchanges with the supplicant time out.

dot1x supplicant-timeout seconds

To return to the default, use the no dot1x supplicant-timeout command.
Parameters

Defaults
Command Modes
Command
History

seconds

Enter a time-out value in seconds.
Range: 1 to 300, where 300 is implementation dependant.
Default: 30

30 seconds
INTERFACE
Version 8.3.12.0

Introduced on the S4810.

Version 7.6.1.0

Introduced on C-Series and S-Series

Version 7.4.1.0

Introduced on E-Series

dot1x tx-period
ces

Syntax

Configure the intervals at which EAPOL PDUs are transmitted by the Authenticator PAE.

dot1x tx-period seconds

To return to the default, use the no dot1x tx-period command.

802.1X | 175

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes
Command
History

seconds

Enter the interval time, in seconds, that EAPOL PDUs are transmitted.
Range: 1 to 65535
Default: 30

30 seconds
INTERFACE
Version 8.3.12.0

Introduced on the S4810.

Version 7.6.1.0

Introduced on C-Series and S-Series

Version 7.4.1.0

Introduced on E-Series

show dot1x cos-mapping interface
Display the CoS priority-mapping table provided by the RADIUS server and applied to
authenticated supplicants on an 802.1X-enabled port.

cs
Syntax
Parameters

Defaults
Command Modes

show dot1x cos-mapping interface interface [mac-address mac-address]
interface

Enter one of the following keywords and slot/port or number information:
• For a Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by
the slot/port information.
• For a Ten Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.

mac-address

(Optional) MAC address of an 802.1X-authenticated supplicant.

No default values or behavior
EXEC
EXEC privilege

Command
History

Usage
Information

Version 8.3.12.0

Introduced on the S4810.

Version 8.4.2.1

Introduced on the C-Series and S-Series

Enter a supplicant’s MAC address using the mac-address option to display CoS mapping
information only for the specified supplicant.
You can display the CoS mapping information applied to traffic from authenticated
supplicants on 802.1X-enabled ports that are in single-host, multi-host, and multi-supplicant
authentication modes.

Example

FTOS#show dot1x cos-mapping interface gigabitethernet 2/21
802.1p CoS re-map table on Gi 2/21:
---------------------------------Dot1p
Remapped Dot1p

176

|

802.1X

0
1
2
3
4
5
6
7

7
6
5
4
3
2
1
0

FTOS#show dot1x cos-mapping int g 2/21 mac-address 00:00:01:00:07:00
802.1p CoS re-map table on Gi 2/21:
---------------------------------802.1p CoS re-map table for Supplicant: 00:00:01:00:07:00
Dot1p
0
1
2
3
4
5
6
7

Remapped Dot1p
7
6
5
4
3
2
1
0

show dot1x interface
ces

Syntax
Parameters

Defaults
Command Modes

Display the 802.1X configuration of an interface.

show dot1x interface interface [mac-address mac-address]
interface

Enter one of the following keywords and slot/port or number information:
• For a Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by
the slot/port information.
• For a Ten Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.

mac-address

(Optional) MAC address of a supplicant.

No default values or behavior
EXEC
EXEC privilege

Command
History

Version 8.3.12.0

Introduced on the S4810.

Version 8.4.2.1

Introduced mac-address option on the C-Series and S-Series

Version 7.6.1.0

Introduced on C-Series, E-Series, and S-Series

802.1X | 177

www.dell.com | support.dell.com

Usage
Information

C-Series and S-Series only: Enter a supplicant’s MAC address using the mac-address option
to display information only on the 802.1X-enabled port to which the supplicant is connected.
If 802.1X multi-supplicant authentication is enabled on a port, additional 802.1X
configuration details (port authentication status, untagged VLAN ID, authentication PAE
state, and backend state) are displayed for each supplicant as shown in the last example.

Example

FTOS#show dot1x int Gi 2/32
802.1x information on Gi 2/32:
----------------------------Dot1x Status:
Enable
Port Control:
AUTO
Port Auth Status:
UNAUTHORIZED
Re-Authentication:
Disable
Untagged VLAN id:
None
Guest VLAN:
Enable
Guest VLAN id:
10
Auth-Fail VLAN:
Enable
Auth-Fail VLAN id:
11
Auth-Fail Max-Attempts: 3
Tx Period:
30 seconds
Quiet Period:
60 seconds
ReAuth Max:
2
Supplicant Timeout: 30 seconds
Server Timeout:
30 seconds
Re-Auth Interval:
3600 seconds
Max-EAP-Req:
2
Auth Type:
SINGLE_HOST
Auth PAE State:
Backend State:

Initialize
Initialize

FTOS#

Example
(show dot1x
interface
mac-address)

FTOS#show dot1x interface gig 2/21 mac-address 00:00:01:00:07:00
802.1x information on Gi 2/21:
----------------------------Dot1x Status:
Enable
Port Control:
AUTO
Re-Authentication:
Disable
Guest VLAN:
Disable
Guest VLAN id:
NONE
Auth-Fail VLAN:
Disable
Auth-Fail VLAN id:
NONE
Auth-Fail Max-Attempts:
NONE
Mac-Auth-Bypass:
Enable
Mac-Auth-Bypass Only:
Disable
Tx Period:
5 seconds
Quiet Period:
60 seconds
ReAuth Max:
1
Supplicant Timeout:
30 seconds
Server Timeout:
30 seconds
Re-Auth Interval:
60 seconds
Max-EAP-Req:
2
Host Mode:
MULTI_AUTH
Max-Supplicants:
128
Port status and State info for Supplicant: 00:00:01:00:07:00
Port Auth Status:
Untagged VLAN id:

178

|

802.1X

AUTHORIZED(MAC-AUTH-BYPASS)
4094

Auth PAE State:
Backend State:
FTOS#

Example
(Multi-Supplicant
Authentication
enabled)

Authenticated
Idle

FTOS#show dot1x interface g 0/21
802.1x information on Gi 0/21:
----------------------------Dot1x Status:
Enable
Port Control:
AUTO
Re-Authentication:
Disable
Guest VLAN:
Enable
Guest VLAN id:
100
Auth-Fail VLAN:
Disable
Auth-Fail VLAN id:
NONE
Auth-Fail Max-Attempts:
NONE
Mac-Auth-Bypass:
Disable
Mac-Auth-Bypass Only:
Disable
Tx Period:
30 seconds
Quiet Period:
60 seconds
ReAuth Max:
3
Supplicant Timeout:
30 seconds
Server Timeout:
30 seconds
Re-Auth Interval:
60 seconds
Max-EAP-Req:
2
Host Mode:
MULTI_AUTH
Max-Supplicants:
128
Port status and State info for Supplicant: 00:00:00:00:00:10
Port Auth Status:
Untagged VLAN id:
Auth PAE State:
Backend State:

AUTHORIZED
400
Authenticated
Idle

Port status and State info for Supplicant: 00:00:00:00:00:11
Port Auth Status:
Untagged VLAN id:
Auth PAE State:
Backend State:

AUTHORIZED
300
Authenticated
Idle

Port status and State info for Supplicant: 00:00:00:00:00:15
Port Auth Status:
Untagged VLAN id:
Auth PAE State:
Backend State:

AUTHORIZED(GUEST-VLAN)
100
Authenticated
Idle

802.1X | 179

180

|

802.1X

www.dell.com | support.dell.com

7
Access Control Lists (ACL)
Overview
Access Control Lists (ACLs) are supported by FTOS on all Dell Force10 platforms, as
indicated by the characters that appear under each of the command headings: e E-Series,
c C-Series, s S-Series, or
.
FTOS supports the following types of Access Control List (ACL), IP prefix list, and route
map:
•
•
•
•
•
•
•
•
•
•
•

Commands Common to all ACL Types
Common IP ACL Commands
Standard IP ACL Commands
Extended IP ACL Commands
Common MAC Access List Commands
Standard MAC ACL Commands
Extended MAC ACL Commands
IP Prefix List Commands
Route Map Commands
AS-Path Commands
IP Community List Commands

Note: For ACL commands used in the Trace function, refer to the section Trace List
Commands in the chapter Security.
Note: For IPv6 ACL commands, refer to Access Control Lists (ACL).

Commands Common to all ACL Types
The following commands are available within each ACL mode and do not have
mode-specific options. Some commands may use similar names, but require different options
to support the different ACL types (for example, deny).
•
•

description
remark

Access Control Lists (ACL) | 181

www.dell.com | support.dell.com

•

show config

description
ces

Syntax
Parameters

Defaults
Command Modes

Configure a short text string describing the ACL.

description text
text

Enter a text string up to 80 characters long.

Not enabled.
CONFIGURATION-STANDARD-ACCESS-LIST
CONFIGURATION-EXTENDED-ACCESS-LIST
CONFIGURATION-MAC ACCESS LIST-STANDARD
CONFIGURATION-MAC ACCESS LIST-EXTENDED

Command
History

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

remark
ces

Syntax
Parameters

Defaults
Command Modes

Enter a description for an ACL entry.

remark [remark-number] [description]
remark-number

Enter the remark number. Note that the same sequence number can
be used for the remark and an ACL rule.
Range: 0 to 4294967290

description

Enter a description of up to 80 characters.

Not configured
CONFIGURATION-STANDARD-ACCESS-LIST
CONFIGURATION-EXTENDED-ACCESS-LIST

182

|

Access Control Lists (ACL)

CONFIGURATION-MAC ACCESS LIST-STANDARD
CONFIGURATION-MAC ACCESS LIST-EXTENDED
Command
History

Usage
Information

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

pre-Version 6.4.1.0

Introduced for E-Series

The remark command is available in each ACL mode. You can configure up to 4294967290
remarks in a given ACL.
The following example shows the use of the remark command twice within the
CONFIGURATION-STANDARD-ACCESS-LIST mode. Here, the same sequence number
was used for the remark and for an associated ACL rule. The remark will precede the rule in
the running-config because it is assumed that the remark is for the rule with the same
sequence number, or the group of rules that follow the remark.

Example

FTOS(config-std-nacl)#remark 10 Deny rest of the traffic
FTOS(config-std-nacl)#remark 5 Permit traffic from XYZ Inc.
FTOS(config-std-nacl)#show config
!
ip access-list standard test
remark 5 Permit traffic from XYZ Inc.
seq 5 permit 1.1.1.0/24
remark 10 Deny rest of the traffic
seq 10 Deny any
FTOS(config-std-nacl)#

Related
Commands

show config

Display the current ACL configuration.

show config
ces

Syntax
Command Modes

Display

the current ACL configuration.

show config

CONFIGURATION-STANDARD-ACCESS-LIST
CONFIGURATION-EXTENDED-ACCESS-LIST
CONFIGURATION-MAC ACCESS LIST-STANDARD
CONFIGURATION-MAC ACCESS LIST-EXTENDED

Access Control Lists (ACL) | 183

www.dell.com | support.dell.com

Command
History

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 6.2.1.1

Introduced

Example

FTOS(config-ext-nacl)#show conf
!
ip access-list extended patches
FTOS(config-ext-nacl)#

Common IP ACL Commands
The following commands are available within both IP ACL modes (Standard and Extended)
and do not have mode-specific options. When an access-list (ACL) is created without any rule
and then applied to an interface, ACL behavior reflects an implicit permit.

c and s platforms support Ingress IP ACLs only.
The following commands allow you to clear, display, and assign IP ACL configurations.
•
•
•
•
•

access-class
clear counters ip access-group
ip access-group
show ip access-lists
show ip accounting access-list

Note: Refer also to Commands Common to all ACL Types.

access-class
ces

Syntax
Parameters

Defaults
Command Modes
Command
History

184

|

Apply a standard ACL to a terminal line.

access-class access-list-name
access-list-name

Enter the name of a configured Standard ACL, up to 140 characters.

Not configured.
LINE
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Access Control Lists (ACL)

Version 7.8.1.0

Increased name string to accept up to 140 characters. Prior to 7.8.1.0,
names are up to 16 characters long.

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.2.1.1

Introduced

clear counters ip access-group
ces
Erase all counters maintained for access lists.
Syntax
Parameters

Command Modes
Command
History

clear counters ip access-group [access-list-name]
access-list-name

(OPTIONAL) Enter the name of a configured access-list, up to 140
characters.

EXEC Privilege
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Increased name string to accept up to 140 characters. Prior to 7.8.1.0,
names are up to 16 characters long.

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.2.1.1

Introduced

ip access-group
ces
Syntax
Parameters

Assign an IP access list (IP ACL) to an interface.
ip access-group access-list-name {in | out} [implicit-permit] [vlan vlan-id]
access-list-name

Enter the name of a configured access list, up to 140 characters.

in

Enter the keyword in to apply the ACL to incoming traffic.

out

Enter the keyword out to apply the ACL to outgoing traffic.
Note: Available only on 12-port 1-Gigabit Ethernet FLEX line card. Refer
to your line card documentation for specifications. Not available on
S-Series.

implicit-permit

(OPTIONAL) Enter the keyword implicit-permit to change the default
action of the ACL from implicit-deny to implicit-permit (that is, if the
traffic does not match the filters in the ACL, the traffic is permitted
instead of dropped).

vlan vlan-id

(OPTIONAL) Enter the keyword vlan followed by the ID numbers of the
VLANs.
Range: 1 to 4094, 1-2094 for ExaScale (can used IDs 1-4094)

Access Control Lists (ACL) | 185

www.dell.com | support.dell.com

Defaults
Command Modes
Command
History

Usage
Information

Not enabled.
INTERFACE
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Increased name string to accept up to 140 characters. Prior to 7.8.1.0,
names are up to 16 characters long.

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.2.1.1

Introduced

You can assign one ACL (standard or extended ACL) to an interface.
Note: This command is supported on the loopback interfaces of EE3, and EF series
RPMs. It is not supported on loopback interfaces ED series RPM, or on C-Series or
S-Series loopback interfaces.

When you apply an ACL that filters IGMP traffic, all IGMP traffic is redirected to the CPUs
and soft-forwarded, if required, in the following scenarios:
•
•
Related
Commands

on a Layer 2 interface - if a Layer 3 ACL is applied to the interface.
on a Layer 3 port or on a Layer 2/Layer 3 port

ip access-list standard

Configure a standard ACL.

ip access-list extended

Configure an extended ACL.

show ip access-lists
ces

Syntax

186

|

Display all of the IP ACLs configured in the system, whether or not they are applied to an
interface, and the count of matches/mismatches against each ACL entry displayed.
show ip access-lists [access-list-name] [interface interface] [in | out]

Access Control Lists (ACL)

Parameters

Command Modes
Command
History

access-list-name

Enter the name of a configured MAC ACL, up to 140 characters.

interface interface

Enter the keyword interface followed by the one of the following keywords
and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed
by a number:
C-Series and S-Series Range: 1 to 128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for
ExaScale.
• For a SONET interface, enter the keyword sonet followed by the slot/
port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.
• For a VLAN interface,

in | out

Identify whether ACL is applied on ingress or egress side.

EXEC Privilege
\

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.4.1.0

Introduced

Version 8.3.10.0

Added support for VLAN interface on S4810

Version 8.3.7.0

Introduced on S4810

show ip accounting access-list
ces
Syntax
Parameters

Display

the IP access-lists created on the switch and the sequence of filters.

show ip accounting {access-list access-list-name | cam_count} interface interface
access-list-name

Enter the name of the ACL to be displayed.

cam_count

List the count of the CAM rules for this ACL.

interface interface

Enter the keyword interface followed by the interface type and slot/port
or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel
followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a SONET interface, enter the keyword sonet followed by the
slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.

Access Control Lists (ACL) | 187

www.dell.com | support.dell.com

Command Modes

EXEC
EXEC Privilege

Command
History

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.2.1.1

Introduced

Example

FTOS#show ip accounting access FILTER1 interface gig 1/6
Extended IP access list FILTER1
seq 5 deny ip any 191.1.0.0 /16 count (0x00 packets)
seq 10 deny ip any 191.2.0.0 /16 order 4
seq 15 deny ip any 191.3.0.0 /16
seq 20 deny ip any 191.4.0.0 /16
seq 25 deny ip any 191.5.0.0 /16

Table 7-1 defines the information in the example above.
Table 7-1.

show ip accounting access-lists Command Example Field

Field

Description

“Extended IP...”

Displays the name of the IP ACL.

“seq 5...”

Displays the filter. If the keywords count or byte were configured
in the filter, the number of packets or bytes processed by the filter
is displayed at the end of the line.

“order 4”

Displays the QoS order of priority for the ACL entry.

Standard IP ACL Commands
When an ACL is created without any rule and then applied to an interface, ACL behavior
reflects an implicit permit.

c and s platforms support Ingress IP ACLs only.
The commands needed to configure a Standard IP ACL are:
•
•
•
•
•
•

deny
ip access-list standard
permit
resequence access-list
resequence prefix-list ipv4
seq

Note: Refer also to Commands Common to all ACL Types and Common IP ACL
Commands.

188

|

Access Control Lists (ACL)

deny
ces

Syntax

Configure a filter to drop packets with a certain IP address.

deny {source [mask] | any | host ip-address} [count [byte] | log] [dscp value] [order] [monitor]
[fragments]

To remove this filter, you have two choices:
•
•
Parameters

Defaults
Command Modes

Use the no seq sequence-number command syntax if you know the filter’s
sequence number or
Use the no deny {source [mask] | any | host ip-address} command.

source

Enter the IP address in dotted decimal format of the network from which
the packet was sent.

mask

(OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D.
The mask, when specified in A.B.C.D format, may be either contiguous or
non-contiguous (discontiguous).

any

Enter the keyword any to specify that all routes are subject to the filter.

host ip-address

Enter the keyword host followed by the IP address to specify a host IP
address only.

count

(OPTIONAL) Enter the keyword count to count packets processed by the
filter.

byte

(OPTIONAL) Enter the keyword byte to count bytes processed by the
filter.

log

(OPTIONAL, E-Series only) Enter the keyword log to enter ACL matches
in the log.

dscp

(OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP values.

order

(OPTIONAL) Enter the keyword order to specify the QoS order of
priority for the ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest;
lower order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest
order by default(255).

monitor

(OPTIONAL) Enter the keyword monitor when the rule is describing the
traffic that you want to monitor and the ACL in which you are creating the
rule will be applied to the monitored interface. For details, refer to the
section “Flow-based Monitoring” in the Port Monitoring chapter of the
FTOS Configuration Guide.

fragments

Enter the keyword fragments to use ACLs to control packet fragments.

Not configured.
CONFIGURATION-STANDARD-ACCESS-LIST

Access Control Lists (ACL) | 189

www.dell.com | support.dell.com

Command
History

Usage
Information

Version 8.3.7.0

Introduced on S4810

Version 8.3.1.0

Add DSCP value for ACL matching.

Version 8.2.1.0

Allows ACL control of fragmented packets for IP (Layer 3) ACLs.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

Version 7.4.1.0

Added support for non-contiguous mask and added the monitor option.

Version 6.5.1.0

Expanded to include the optional QoS order priority for the ACL entry.

The order option is relevant in the context of the Policy QoS feature only. refer to the “Quality
of Service” chapter of the FTOS Configuration Guide for more information.
When you use the log option, CP processor logs details about the packets that match.
Depending on how many packets match the log entry and at what rate, the CP may become
busy as it has to log these packets’ details.
The monitor option is relevant in the context of flow-based monitoring only. Refer to the Port
Monitoring chapter.
The C-Series and S-Series cannot count both packets and bytes, so when you enter the count
byte options, only bytes are incremented.
Note: When ACL logging and byte counters are configured simultaneously, byte
counters may display an incorrect value. Configure packet counters with logging
instead.

Related
Commands

ip access-list standard

Configure a standard ACL.

permit

Configure a permit filter.

ip access-list standard
ces
Create a standard IP access list (IP ACL) to filter based on IP address.
Syntax
Parameters

Defaults

Command Modes

190

|

ip access-list standard access-list-name
access-list-name

Enter a string up to 140 characters long as the ACL name.

All IP access lists contain an implicit “deny any,” that is, if no match occurs, the packet is
dropped.
CONFIGURATION

Access Control Lists (ACL)

Command
History

Usage
Information

Version 8.3.10.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are
up to 16 characters long.

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

Version 7.4.1.0

Added support for non-contiguous mask and added the monitor option.

Version 6.5.1.0

Expanded to include the optional QoS order priority for the ACL entry.

FTOS supports one ingress and one egress IP ACL per interface.
Prior to 7.8.1.0, names are up to 16 characters long.
The number of entries allowed per ACL is hardware-dependent. Refer to your line card
documentation for detailed specification on entries allowed per ACL.

Example
Related
Commands

FTOS(conf)#ip access-list standard TestList
FTOS(config-std-nacl)#

ip access-list extended

Create an extended access list.

show config

Display the current configuration.

permit
ces

Syntax

Configure a filter to permit packets from a specific source IP address to leave the switch.

permit {source [mask] | any | host ip-address} [count [byte] | log] [dscp value] [order] [monitor]

To remove this filter, you have two choices:
•
•
Parameters

Use the no seq sequence-number command syntax if you know the filter’s
sequence number or
Use the no permit {source [mask] | any | host ip-address} command.

source

Enter the IP address in dotted decimal format of the network from which
the packet was sent.

mask

(OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D.
The mask, when specified in A.B.C.D format, may be either contiguous
or non-contiguous.

any

Enter the keyword any to specify that all routes are subject to the filter.

host ip-address

Enter the keyword host followed by the IP address to specify a host IP
address or hostname.

count

(OPTIONAL) Enter the keyword count to count packets processed by
the filter.

dscp

(OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP values.

Access Control Lists (ACL) | 191

www.dell.com | support.dell.com

Defaults
Command Modes
Command
History

Usage
Information

byte

(OPTIONAL) Enter the keyword byte to count bytes processed by the
filter.

log

(OPTIONAL, E-Series only) Enter the keyword log to enter ACL
matches in the log.

order

(OPTIONAL) Enter the keyword order to specify the QoS priority for
the ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest;
lower order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest
order by default (255).

monitor

(OPTIONAL) Enter the keyword monitor when the rule is describing the
traffic that you want to monitor and the ACL in which you are creating
the rule will be applied to the monitored interface. For details, refer to the
section “Flow-based Monitoring” in the Port Monitoring chapter of the
FTOS Configuration Guide.

Not configured.
CONFIGURATION-STANDARD-ACCESS-LIST
Version 8.3.7.0

Introduced on S4810

Version 8.3.1.0

Add DSCP value for ACL matching.

Version 8.2.1.0

Allows ACL control of fragmented packets for IP (Layer 3) ACLs.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

Version 7.4.1.0

Added support for non-contiguous mask and added the monitor option.

Version 6.5.10

Expanded to include the optional QoS order priority for the ACL entry.

The order option is relevant in the context of the Policy QoS feature only. Refer to the
“Quality of Service” chapter of the FTOS Configuration Guide for more information.
When you use the log option, CP processor logs details about the packets that match.
Depending on how many packets match the log entry and at what rate, the CP may become
busy as it has to log these packets’ details.
The monitor option is relevant in the context of flow-based monitoring only. Refer to the Port
Monitoring chapter..
The C-Series and S-Series cannot count both packets and bytes, so when you enter the count
byte options, only bytes are incremented.
Note: When ACL logging and byte counters are configured simultaneously, byte
counters may display an incorrect value. Configure packet counters with logging
instead.

192

|

Access Control Lists (ACL)

Related
Commands

deny

Assign a IP ACL filter to deny IP packets.

ip access-list standard

Create a standard ACL.

resequence access-list
ces
Syntax
Parameters

Defaults
Command Modes

Re-assign sequence numbers to entries of an existing access-list.
resequence access-list {ipv4 | ipv6 | mac} {access-list-name StartingSeqNum Step-to-Increment}
ipv4 | ipv6 | mac

Enter the keyword ipv4, or mac to identify the access list type to
resequence.

access-list-name

Enter the name of a configured IP access list.

StartingSeqNum

Enter the starting sequence number to resequence.
Range: 0 to 4294967290

Step-to-Increment

Enter the step to increment the sequence number.
Range: 1 to 4294967290

No default values or behavior
EXEC
EXEC Privilege

Command
History

Usage
Information
Related
Commands

Version 8.2.1.0

Introduced on E-Series ExaScale (IPv6)

Version 8.1.1.0

Introduced on E-Series ExaScale (IPv4)

Version 7.8.1.0

Increased name string to accept up to 140 characters. Prior to
7.8.1.0, names are up to 16 characters long.

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 7.4.1.0

Introduced

When all sequence numbers have been exhausted, this feature permits re-assigning new
sequence number to entries of an existing access-list.
resequence prefix-list ipv4

Resequence a prefix list

resequence prefix-list ipv4
ces
Syntax

Re-assign sequence numbers to entries of an existing prefix list.
resequence prefix-list ipv4 {prefix-list-name StartingSeqNum Step-to-increment}

Access Control Lists (ACL) | 193

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes

prefix-list-name

Enter the name of configured prefix list, up to 140 characters long.

StartingSeqNum

Enter the starting sequence number to resequence.
Range: 0 to 65535

Step-to-Increment

Enter the step to increment the sequence number.
Range: 1 to 65535

No default values or behavior
EXEC
EXEC Privilege

Command
History

Usage
Information

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Increased name string to accept up to 140 characters. Prior to 7.8.1.0,
names are up to 16 characters long.

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

Version 7.4.1.0

Introduced

When all sequence numbers have been exhausted, this feature permits re-assigning new
sequence number to entries of an existing prefix list.
Prior to 7.8.1.0, names are up to 16 characters long.

Related
Commands

resequence access-list

Resequence an access-list

seq
ces

Syntax

Parameters

194

|

Assign a sequence number to a deny or permit filter in an IP access list while creating the
filter.
seq sequence-number {deny | permit} {source [mask] | any | host ip-address}} [count [byte] | log]
[dscp value] [order] [monitor] [fragments]
sequence-number

Enter a number from 0 to 4294967290.
S4810 Range: 0 to 65534

deny

Enter the keyword deny to configure a filter to drop packets meeting
this condition.

permit

Enter the keyword permit to configure a filter to forward packets
meeting this criteria.

source

Enter a IP address in dotted decimal format of the network from which
the packet was received.

mask

(OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D.
The mask, when specified in A.B.C.D format, may be either contiguous
or non-contiguous.

Access Control Lists (ACL)

Defaults
Command Modes
Command
History

Usage
Information

any

Enter the keyword any to specify that all routes are subject to the filter.

host ip-address

Enter the keyword host followed by the IP address to specify a host IP
address or hostname.

count

(OPTIONAL) Enter the keyword count to count packets processed by
the filter.

byte

(OPTIONAL) Enter the keyword byte to count bytes processed by the
filter.

log

(OPTIONAL, E-Series only) Enter the keyword log to enter ACL
matches in the log.

dscp

(OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP
values.

order

(OPTIONAL) Enter the keyword order to specify the QoS order for the
ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest;
lower order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest
order by default (255).

monitor

(OPTIONAL) Enter the keyword monitor when the rule is describing
the traffic that you want to monitor and the ACL in which you are
creating the rule will be applied to the monitored interface. For details,
refer to the section “Flow-based Monitoring” in the Port Monitoring
chapter of the FTOS Configuration Guide.

fragments

Enter the keyword fragments to use ACLs to control packet fragments.

Not configured
CONFIGURATION-STANDARD-ACCESS-LIST
Version 8.3.7.0

Introduced on S4810

Version 8.3.1.0

Add DSCP value for ACL matching.

Version 8.2.1.0

Allows ACL control of fragmented packets for IP (Layer 3) ACLs.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

Version 7.4.1.0

Added support for non-contiguous mask and added the monitor option.

Version 6.5.10

Expanded to include the optional QoS order priority for the ACL entry.

The monitor option is relevant in the context of flow-based monitoring only. Refer to the Port
Monitoring chapter.
The order option is relevant in the context of the Policy QoS feature only. The following
applies:
•
•

The seq sequence-number is applicable only in an ACL group.
The order option works across ACL groups that have been applied on an interface
via QoS policy framework.

Access Control Lists (ACL) | 195

www.dell.com | support.dell.com

•
•
•

The order option takes precedence over the seq sequence-number.
If sequence-number is not configured, then rules with the same order value are
ordered according to their configuration order.
If the sequence-number is configured, then the sequence-number is used as a tie
breaker for rules with the same order.

When you use the log option, CP processor logs details about the packets that match.
Depending on how many packets match the log entry and at what rate, the CP may become
busy as it has to log these packets’ details.
Note: When ACL logging and byte counters are configured simultaneously, byte
counters may display an incorrect value. Configure packet counters with logging
instead.
Related
Commands

deny

Configure a filter to drop packets.

permit

Configure a filter to forward packets.

seq

Assign a sequence number to a deny or permit filter in an IP access list while
creating the filter.

Extended IP ACL Commands
When an ACL is created without any rule and then applied to an interface, ACL behavior
reflects an implicit permit.
The following commands configure extended IP ACLs, which in addition to the IP address
also examine the packet’s protocol type.

c platforms support Ingress IP ACLs only.
e and s platforms support Ingress and Egress IP ACLs.
•
•
•
•
•
•
•
•
•
•
•
•

196

|

Access Control Lists (ACL)

deny
deny arp
deny ether-type
deny icmp
deny tcp
deny udp
ip access-list extended
permit
permit arp
permit ether-type
permit icmp
permit tcp

•
•
•
•
•
•

permit udp
resequence access-list
resequence prefix-list ipv4
seq arp
seq ether-type
seq

Note: Refer also to Commands Common to all ACL Types and Common IP ACL
Commands.

deny
ces

Syntax

Configure a filter that drops IP packets meeting the filter criteria.

deny {ip | ip-protocol-number} {source mask | any | host ip-address} {destination mask | any | host
ip-address} [count [byte] | log] [dscp value] [order] [monitor] [fragments]

To remove this filter, you have two choices:
•
•
Parameters

Use the no seq sequence-number command syntax if you know the filter’s
sequence number or
Use the no deny {ip | ip-protocol-number} {source mask | any | host ip-address}
{destination mask | any | host ip-address} command.

ip

Enter the keyword ip to configure a generic IP access list. The keyword
ip specifies that the access list will deny all IP protocols.

ip-protocol-number

Enter a number from 0 to 255 to deny based on the protocol identified
in the IP protocol header.

source

Enter the IP address of the network or host from which the packets were
sent.

mask

Enter a network mask in /prefix format (/x) or A.B.C.D. The mask,
when specified in A.B.C.D format, may be either contiguous or
non-contiguous.

any

Enter the keyword any to specify that all routes are subject to the filter.

host ip-address

Enter the keyword host followed by the IP address to specify a host IP
address.

destination

Enter the IP address of the network or host to which the packets are
sent.

count

(OPTIONAL) Enter the keyword count to count packets processed by
the filter.

byte

(OPTIONAL) Enter the keyword byte to count bytes processed by the
filter.

log

(OPTIONAL, E-Series only) Enter the keyword log to enter ACL
matches in the log.

Access Control Lists (ACL) | 197

www.dell.com | support.dell.com

Defaults
Command Modes
Command
History

Usage
Information

dscp

(OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP
values.

order

(OPTIONAL) Enter the keyword order to specify the QoS priority for
the ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest;
lower order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest
order by default (255).

monitor

(OPTIONAL) Enter the keyword monitor when the rule is describing
the traffic that you want to monitor and the ACL in which you are
creating the rule will be applied to the monitored interface. For details,
refer to the section “Flow-based Monitoring” in the Port Monitoring
chapter of the FTOS Configuration Guide.

fragments

Enter the keyword fragments to use ACLs to control packet fragments.

Not configured.
CONFIGURATION-EXTENDED-ACCESS-LIST
Version 8.3.7.0

Introduced on S4810

Version 8.3.1.0

Add DSCP value for ACL matching.

Version 8.2.1.0

Allows ACL control of fragmented packets for IP (Layer 3) ACLs.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

Version 7.4.1.0

Added support for non-contiguous mask and added the monitor option.

Version 6.5.10

Expanded to include the optional QoS order priority for the ACL entry.

The order option is relevant in the context of the Policy QoS feature only. Refer to the
“Quality of Service” chapter of the FTOS Configuration Guide for more information.
When you use the log option, CP processor logs details about the packets that match.
Depending on how many packets match the log entry and at what rate, the CP may become
busy as it has to log these packets’ details.
The C-Series and S-Series cannot count both packets and bytes, so when you enter the count
byte options, only bytes are incremented.
The monitor option is relevant in the context of flow-based monitoring only. Refer to the Port
Monitoring chapter.
Note: When ACL logging and byte counters are configured simultaneously, byte
counters may display an incorrect value. Configure packet counters with logging
instead.

198

|

Access Control Lists (ACL)

Related
Commands

deny tcp

Assign a filter to deny TCP packets.

deny udp

Assign a filter to deny UDP packets.

ip access-list extended

Create an extended ACL.

deny arp
e
Syntax

Configure an egress filter that drops ARP packets on egress ACL supported line cards (refer
to your line card documentation).
deny arp {destination-mac-address mac-address-mask | any} vlan vlan-id {ip-address | any |
opcode code-number} [count [byte] | log] [order] [monitor]

To remove this filter, use one of the following:
•
•
Parameters

Use the no seq sequence-number command syntax if you know the filter’s
sequence number or
Use the no deny arp {destination-mac-address mac-address-mask | any} vlan vlan-id
{ip-address | any | opcode code-number} command.

destination-mac-addres
s mac-address-mask

Enter a MAC address and mask in the nn:nn:nn:nn:nn format.
For the MAC address mask, specify which bits in the MAC address must
match.
The MAC ACL supports an inverse mask, therefore, a mask of
ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of
00:00:00:00:00:00 only allows entries that match exactly.

any

Enter the keyword any to match and drop any ARP traffic on the
interface.

vlan vlan-id

Enter the keyword vlan followed by the VLAN ID to filter traffic
associated with a specific VLAN.
Range: 1 to 4094, 1-2094 for ExaScale (can used IDs 1-4094)
To filter all VLAN traffic specify VLAN 1.

ip-address

Enter an IP address in dotted decimal format (A.B.C.D) as the target IP
address of the ARP.

opcode code-number

Enter the keyword opcode followed by the number of the ARP opcode.
Range: 1 to 23.

count

(OPTIONAL) Enter the keyword count to count packets processed by
the filter.

byte

(OPTIONAL) Enter the keyword byte to count bytes processed by the
filter.

log

(OPTIONAL, E-Series only) Enter the keyword log to have the
information kept in an ACL log file.

Access Control Lists (ACL) | 199

www.dell.com | support.dell.com

Defaults
Command Modes
Command
History

Usage
Information

order

(OPTIONAL) Enter the keyword order to specify the QoS priority for
the ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest;
lower order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest
order by default (255).

monitor

(OPTIONAL) Enter the keyword monitor when the rule is describing
the traffic that you want to monitor and the ACL in which you are
creating the rule will be applied to the monitored interface. For details,
refer to the section “Flow-based Monitoring” in the Port Monitoring
chapter of the FTOS Configuration Guide.

Not configured.
CONFIGURATION-EXTENDED-ACCESS-LIST
Version 8.2.1.0

Allows ACL control of fragmented packets for IP (Layer 3) ACLs.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Added monitor option

Version 6.5.10

Expanded to include the optional QoS order priority for the ACL entry.

The order option is relevant in the context of the Policy QoS feature only. Refer to the
“Quality of Service” chapter of the FTOS Configuration Guide for more information.
The monitor option is relevant in the context of flow-based monitoring only. Refer to the Port
Monitoring chapter.
When you use the log option, CP processor logs details about the packets that match.
Depending on how many packets match the log entry and at what rate, the CP may become
busy as it has to log these packets’ details.
You cannot include IP, TCP or UDP (Layer 3) filters in an ACL configured with ARP or
Ether-type (Layer 2) filters. Apply Layer 2 ACLs (ARP and Ether-type) to Layer 2 interfaces
only.
Note: When ACL logging and byte counters are configured simultaneously, byte
counters may display an incorrect value. Configure packet counters with logging
instead.

deny ether-type
e
Syntax

Configure an egress filter that drops specified types of Ethernet packets on egress ACL
supported line cards (refer to your line card documentation).
deny ether-type protocol-type-number {destination-mac-address mac-address-mask | any} vlan
vlan-id {source-mac-address mac-address-mask | any} [count [byte] | log] [order] [monitor]

To remove this filter, use one of the following:

200

|

Access Control Lists (ACL)

•
•

Parameters

Defaults
Command Modes

Use the no seq sequence-number command syntax if you know the filter’s
sequence number or
Use the no deny ether-type protocol-type-number {destination-mac-address
mac-address-mask | any} vlan vlan-id {source-mac-address mac-address-mask | any}
command.

protocol-type-number

Enter a number from 600 to FFFF as the specific Ethernet type
traffic to drop.

destination-mac-address
mac-address-mask

Enter a MAC address and mask in the nn:nn:nn:nn:nn format.
For the MAC address mask, specify which bits in the MAC address
must match.
The MAC ACL supports an inverse mask, therefore, a mask of
ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of
00:00:00:00:00:00 only allows entries that match exactly.

any

Enter the keyword any to match and drop specific Ethernet traffic
on the interface.

vlan vlan-id

Enter the keyword vlan followed by the VLAN ID to filter traffic
associated with a specific VLAN.
Range: 1 to 4094, 1-2094 for ExaScale (can used IDs 1-4094)
To filter all VLAN traffic specify VLAN 1.

source-mac-address
mac-address-mask

Enter a MAC address and mask in the nn:nn:nn:nn:nn format.
For the MAC address mask, specify which bits in the MAC address
must match.
The MAC ACL supports an inverse mask, therefore, a mask of
ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of
00:00:00:00:00:00 only allows entries that match exactly.

count

(OPTIONAL) Enter the keyword count to count packets processed
by the filter.

byte

(OPTIONAL) Enter the keyword byte to count bytes processed by
the filter.

log

(OPTIONAL, E-Series only) Enter the keyword log to have the
information kept in an ACL log file.

order

(OPTIONAL) Enter the keyword order to specify the QoS priority
for the ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the
lowest; lower order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the
lowest order by default (255).

monitor

(OPTIONAL) Enter the keyword monitor when the rule is
describing the traffic that you want to monitor and the ACL in
which you are creating the rule will be applied to the monitored
interface. For details, refer to the section “Flow-based Monitoring”
in the Port Monitoring chapter of the FTOS Configuration Guide.

Not configured.
CONFIGURATION-EXTENDED-ACCESS-LIST

Access Control Lists (ACL) | 201

www.dell.com | support.dell.com

Command
History

Usage
Information

Version 8.2.1.0

Allows ACL control of fragmented packets for IP (Layer 3) ACLs.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Added monitor option

Version 6.5.10

Expanded to include the optional QoS order priority for the ACL entry.

The order option is relevant in the context of the Policy QoS feature only. Refer to the
“Quality of Service” chapter of the FTOS Configuration Guide for more information.
When you use the log option, CP processor logs details about the packets that match.
Depending on how many packets match the log entry and at what rate, the CP may become
busy as it has to log these packets’ details.
The monitor option is relevant in the context of flow-based monitoring only. Refer to the Port
Monitoring chapter.
You cannot include IP, TCP or UDP (Layer 3) filters in an ACL configured with ARP or
Ether-type (Layer 2) filters. Apply Layer 2 ACLs (ARP and Ether-type) to Layer 2 interfaces
only.
Note: When ACL logging and byte counters are configured simultaneously, byte
counters may display an incorrect value. Configure packet counters with logging
instead.

deny icmp
e
Syntax

Configure a filter to drop all or specific ICMP messages.
deny icmp {source mask | any | host ip-address} {destination mask | any | host ip-address} [dscp]
[message-type] [count [byte] | log] [order] [monitor] [fragments]

To remove this filter, you have two choices:
•
•

Parameters

202

|

Use the no seq sequence-number command syntax if you know the filter’s
sequence number or
Use the no deny icmp {source mask | any | host ip-address} {destination mask | any |
host ip-address} command.

source

Enter the IP address of the network or host from which the packets were sent.

mask

Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when
specified in A.B.C.D format, may be either contiguous or non-contiguous.

any

Enter the keyword any to specify that all routes are subject to the filter.

host ip-address

Enter the keyword host followed by the IP address to specify a host IP
address.

destination

Enter the IP address of the network or host to which the packets are sent.

dscp

Enter this keyword to deny a packet based on DSCP value.
Range: 0-63

Access Control Lists (ACL)

Defaults
Command Modes
Command
History

Usage
Information

message-type

(OPTIONAL) Enter an ICMP message type, either with the type (and code, if
necessary) numbers or with the name of the message type (ICMP message
types are listed in Table 7-2).
Range: 0 to 255 for ICMP type; 0 to 255 for ICMP code

count

(OPTIONAL) Enter the keyword count to count packets processed by the
filter.

byte

(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.

log

(OPTIONAL, E-Series only) Enter the keyword log to have the information
kept in an ACL log file.

order

(OPTIONAL) Enter the keyword order to specify the QoS priority for the
ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower
order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest order by
default (255).

monitor

(OPTIONAL) Enter the keyword monitor when the rule is describing the
traffic that you want to monitor and the ACL in which you are creating the
rule will be applied to the monitored interface. For details, refer to the section
“Flow-based Monitoring” in the Port Monitoring chapter of the FTOS
Configuration Guide.

fragments

Enter the keyword fragments to use ACLs to control packet fragments.

Not configured
CONFIGURATION-EXTENDED-ACCESS-LIST
Version 8.3.1.0

Added dscp keyword.

Version 8.2.1.0

Allows ACL control of fragmented packets for IP (Layer 3) ACLs.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Added support for non-contiguous mask and added the monitor option.

Version 6.5.10

Expanded to include the optional QoS order priority for the ACL entry.

The order option is relevant in the context of the Policy QoS feature only. Refer to the
“Quality of Service” chapter of the FTOS Configuration Guide for more information.
When you use the log option, CP processor logs details about the packets that match.
Depending on how many packets match the log entry and at what rate, the CP may become
busy as it has to log these packets’ details.
The monitor option is relevant in the context of flow-based monitoring only. Refer to the Port
Monitoring chapter.
Note: When ACL logging and byte counters are configured simultaneously, byte
counters may display an incorrect value. Configure packet counters with logging
instead.

Access Control Lists (ACL) | 203

www.dell.com | support.dell.com

Table 7-2 lists the keywords displayed in the CLI help and their corresponding ICMP
Message Type Name.

204

Table 7-2.

|

ICMP Message Type Keywords

Keyword

ICMP Message Type Name

administratively-prohibited

Administratively prohibited

alternate-address

Alternate host address

conversion-error

Datagram conversion error

dod-host-prohibited

Host prohibited

dod-net-prohibited

Net prohibited

echo

Echo

echo-reply

Echo reply

general-parameter-problem

Parameter problem

host-isolated

Host isolated

host-precedence-unreachable

Host unreachable for precedence

host-redirect

Host redirect

host-tos-redirect

Host redirect for TOS

host-tos-unreachable

Host unreachable for TOS

host-unknown

Host unknown

host-unreachable

Host unreachable

information-reply

Information replies

information-request

Information requests

mask-reply

Mask replies

mask-request

Mask requests

mobile-redirect

Mobile host redirect

net-redirect

Network redirect

net-tos-redirect

Network redirect for TOS

net-tos-unreachable

Network unreachable for TOS

net-unreachable

Network unreachable

network-unknown

Network unknown

no-room-for-option

Parameter required but no room

option-missing

Parameter required but not present

packet-too-big

Fragmentation needed and DF set

parameter-problem

All parameter problems

port-unreachable

Port unreachable

precedence-unreachable

Precedence cutoff

protocol-unreachable

Protocol unreachable

reassembly-timeout

Reassembly timeout

Access Control Lists (ACL)

Table 7-2.

ICMP Message Type Keywords

Keyword

ICMP Message Type Name

redirect

All redirects

router-advertisement

Router discovery advertisements

router-solicitation

Router discovery solicitations

source-quench

Source quenches

source-route-failed

Source route failed

time-exceeded

All time exceeded

timestamp-reply

Timestamp replies

timestamp-request

Timestamp requests

traceroute

Traceroute

ttl-exceeded

TTL exceeded

unreachable

All unreachables

deny tcp
ces
Syntax

Configure a filter that drops TCP packets meeting the filter criteria.
deny tcp {source mask | any | host ip-address} [bit] [operator port [port]] {destination mask | any |
host ip-address} [dscp] [bit] [operator port [port]] [count [byte] | log] [order] [monitor]
[fragments]

To remove this filter, you have two choices:
•
•

Parameters

Use the no seq sequence-number command syntax if you know the filter’s
sequence number or
Use the no deny tcp {source mask | any | host ip-address} {destination mask | any |
host ip-address} command.

source

Enter the IP address of the network or host from which the packets were
sent.

mask

Enter a network mask in /prefix format (/x) or A.B.C.D. The mask,
when specified in A.B.C.D format, may be either contiguous or
non-contiguous.

any

Enter the keyword any to specify that all routes are subject to the filter.

host ip-address

Enter the keyword host followed by the IP address to specify a host IP
address.

dscp

Enter this keyword to deny a packet based on DSCP value.
Range: 0-63

Access Control Lists (ACL) | 205

www.dell.com | support.dell.com

Defaults
Command Modes

206

|

bit

Enter a flag or combination of bits:
ack: acknowledgement field
fin: finish (no more data from the user)
psh: push function
rst: reset the connection
syn: synchronize sequence numbers
urg: urgent field

operator

(OPTIONAL) Enter one of the following logical operand:
• eq = equal to
• neq = not equal to
• gt = greater than
• lt = less than
• range = inclusive range of ports (you must specify two ports for the
port command parameter.

port port

Enter the application layer port number. Enter two port numbers if using
the range logical operand.
Range: 0 to 65535.
The following list includes some common TCP port numbers:
• 23 = Telnet
• 20 and 21 = FTP
• 25 = SMTP
• 169 = SNMP

destination

Enter the IP address of the network or host to which the packets are
sent.

mask

Enter a network mask in /prefix format (/x) or A.B.C.D. The mask,
when specified in A.B.C.D format, may be either contiguous or
non-contiguous.

count

(OPTIONAL) Enter the keyword count to count packets processed by
the filter.

byte

(OPTIONAL) Enter the keyword byte to count bytes processed by the
filter.

log

(OPTIONAL, E-Series only) Enter the keyword log to enter ACL
matches in the log. Supported on Jumbo-enabled line cards only.

order

(OPTIONAL) Enter the keyword order to specify the QoS priority for
the ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest;
lower order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest
order by default (255).

monitor

(OPTIONAL) Enter the keyword monitor when the rule is describing
the traffic that you want to monitor and the ACL in which you are
creating the rule will be applied to the monitored interface. For details,
refer to the section “Flow-based Monitoring” in the Port Monitoring
chapter of the FTOS Configuration Guide.

fragments

Enter the keyword fragments to use ACLs to control packet fragments.

Not configured.
CONFIGURATION-EXTENDED-ACCESS-LIST

Access Control Lists (ACL)

Command
History

Usage
Information

Version 8.3.1.0

Added dscp keyword.

Version 8.2.1.0

Allows ACL control of fragmented packets for IP (Layer 3) ACLs.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

Version 7.4.1.0

Added support for non-contiguous mask and added the monitor option.
Deprecated established keyword.

Version 6.5.10

Expanded to include the optional QoS order priority for the ACL entry.

The order option is relevant in the context of the Policy QoS feature only. Refer to the
“Quality of Service” chapter of the FTOS Configuration Guide for more information.
When you use the log option, CP processor logs details about the packets that match.
Depending on how many packets match the log entry and at what rate, the CP may become
busy as it has to log these packets’ details.
The C-Series and S-Series cannot count both packets and bytes, so when you enter the count
byte options, only bytes are incremented.
The monitor option is relevant in the context of flow-based monitoring only. Refer to the Port
Monitoring chapter.
Note: When ACL logging and byte counters are configured simultaneously, byte
counters may display an incorrect value. Configure packet counters with logging
instead.

Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port
operators (gt, lt, range) may require more than one entry. The range of ports is configured in
the CAM based on bit mask boundaries; the space required depends on exactly what ports are
included in the range.
For example, an ACL rule with TCP port range 4000 - 8000 uses 8 entries in the CAM:
Rule#
1
2
3
4
5
6
7
8

Data

Mask

From

To

#Covered

0000111110100000
0000111111000000
0001000000000000
0001100000000000
0001110000000000
0001111000000000
0001111100000000
0001111101000000

1111111111100000
1111111111000000
1111100000000000
1111110000000000
1111111000000000
1111111100000000
1111111111000000
1111111111111111

4000
4032
4096
6144
7168
7680
7936
8000

4031
4095
6143
7167
7679
7935
7999
8000

32
64
2048
1024
512
256
64
1

Total Ports: 4001

Access Control Lists (ACL) | 207

www.dell.com | support.dell.com

But an ACL rule with TCP port lt 1023 takes only one entry in the CAM:
Rule#
1

Data

Mask

From

0000000000000000 1111110000000000 0

To

#Covered

1023

1024

Total Ports: 1024

Related
Commands

deny

Assign a filter to deny IP traffic.

deny udp

Assign a filter to deny UDP traffic.

deny udp
ces
Syntax

Configure a filter to drop UDP packets meeting the filter criteria.
deny udp {source mask | any | host ip-address} [operator port [port]] {destination mask | any | host
ip-address} [dscp] [operator port [port]] [count [byte] | log] [order] [monitor] [fragments]

To remove this filter, you have two choices:
•
•
Parameters

208

|

Use the no seq sequence-number command syntax if you know the filter’s
sequence number or
Use the no deny udp {source mask | any | host ip-address} {destination mask | any |
host ip-address} command.

source

Enter the IP address of the network or host from which the packets were sent.

mask

Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when
specified in A.B.C.D format, may be either contiguous or non-contiguous.

any

Enter the keyword any to specify that all routes are subject to the filter.

host ip-address

Enter the keyword host followed by the IP address to specify a host IP
address.

dscp

Enter this keyword to deny a packet based on DSCP value.
Range: 0-63

operator

(OPTIONAL) Enter one of the following logical operand:
• eq = equal to
• neq = not equal to
• gt = greater than
• lt = less than
• range = inclusive range of ports

port port

(OPTIONAL) Enter the application layer port number. Enter two port
numbers if using the range logical operand.
Range: 0 to 65535

destination

Enter the IP address of the network or host to which the packets are sent.

mask

Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when
specified in A.B.C.D format, may be either contiguous or non-contiguous.

count

(OPTIONAL) Enter the keyword count to count packets processed by the
filter.

Access Control Lists (ACL)

Defaults
Command Modes
Command
History

Usage
Information

byte

(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.

log

(OPTIONAL, E-Series only) Enter the keyword log to enter ACL matches in
the log. Supported on Jumbo-enabled line cards only.

order

(OPTIONAL) Enter the keyword order to specify the QoS priority for the
ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower
order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest order
by default (255).

monitor

(OPTIONAL) Enter the keyword monitor when the rule is describing the
traffic that you want to monitor and the ACL in which you are creating the
rule will be applied to the monitored interface. For details, refer to the section
“Flow-based Monitoring” in the Port Monitoring chapter of the FTOS
Configuration Guide.

fragments

Enter the keyword fragments to use ACLs to control packet fragments.

Not configured
CONFIGURATION-EXTENDED-ACCESS-LIST
Version 8.3.1.0

Added dscp keyword.

Version 8.2.1.0

Allows ACL control of fragmented packets for IP (Layer 3) ACLs.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

Version 7.4.1.0

Added support for non-contiguous mask and added the monitor option.

Version 6.5.10

Expanded to include the optional QoS order priority for the ACL entry.

The order option is relevant in the context of the Policy QoS feature only. Refer to the
“Quality of Service” chapter of the FTOS Configuration Guide for more information.
When you use the log option, CP processor logs details about the packets that match.
Depending on how many packets match the log entry and at what rate, the CP may become
busy as it has to log these packets’ details.
The C-Series and S-Series cannot count both packets and bytes, so when you enter the count
byte options, only bytes are incremented.
The monitor option is relevant in the context of flow-based monitoring only. Refer to the Port
Monitoring chapter.
Note: When ACL logging and byte counters are configured simultaneously, byte
counters may display an incorrect value. Configure packet counters with logging
instead.

Access Control Lists (ACL) | 209

www.dell.com | support.dell.com

Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port
operators (gt, lt, range) may require more than one entry. The range of ports is configured in
the CAM based on bit mask boundaries; the space required depends on exactly what ports are
included in the range.
For example, an ACL rule with TCP port range 4000 - 8000 will use 8 entries in the CAM:
Rule#
1
2
3
4
5
6
7
8

Data

Mask

From

To

#Covered

0000111110100000
0000111111000000
0001000000000000
0001100000000000
0001110000000000
0001111000000000
0001111100000000
0001111101000000

1111111111100000
1111111111000000
1111100000000000
1111110000000000
1111111000000000
1111111100000000
1111111111000000
1111111111111111

4000
4032
4096
6144
7168
7680
7936
8000

4031
4095
6143
7167
7679
7935
7999
8000

32
64
2048
1024
512
256
64
1

Total Ports: 4001

But an ACL rule with TCP port lt 1023 takes only one entry in the CAM:
Rule#
1

Data

Mask

From

0000000000000000 1111110000000000 0

To

#Covered

1023

1024

Total Ports: 1024

Related
Commands

deny

Assign a deny filter for IP traffic.

deny tcp

Assign a deny filter for TCP traffic.

ip access-list extended
ces

Syntax

Name (or select) an extended IP access list (IP ACL) based on IP addresses or protocols.

ip access-list extended access-list-name

To delete an access list, use the no ip access-list extended access-list-name command.
Parameters

Defaults

Command Modes
Command
History

210

|

access-list-name

Enter a string up to 140 characters long as the access list name.

All access lists contain an implicit “deny any”; that is, if no match occurs, the packet is
dropped.
CONFIGURATION
Version 8.3.10.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Access Control Lists (ACL)

Usage
Information

Version 7.8.1.0

Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names
are up to 16 characters long.

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.2.1.1

Introduced on E-Series

The number of entries allowed per ACL is hardware-dependent. Refer to your line card
documentation for detailed specification on entries allowed per ACL.
Prior to 7.8.1.0, names are up to 16 characters long.

Example
Related
Commands

FTOS(conf)#ip access-list extended TESTListEXTEND
FTOS(config-ext-nacl)#

ip access-list standard

Configure a standard IP access list.

show config

Display the current configuration.

permit
ces

Syntax

Configure a filter to pass IP packets meeting the filter criteria.

permit {ip | ip-protocol-number} {source mask | any | host ip-address} {destination mask | any |
host ip-address} [count [byte] | log] [dscp value] [order] [monitor] [fragments]

To remove this filter, you have two choices:
•
•
Parameters

Use the no seq sequence-number command syntax if you know the filter’s
sequence number or
Use the no deny {ip | ip-protocol-number} {source mask | any | host ip-address}
{destination mask | any | host ip-address} command.

ip

Enter the keyword ip to configure a generic IP access list. The keyword
ip specifies that the access list will permit all IP protocols.

ip-protocol-number

Enter a number from 0 to 255 to permit based on the protocol identified
in the IP protocol header.
S4810 Range: 0 to 128

source

Enter the IP address of the network or host from which the packets
were sent.

mask

Enter a network mask in /prefix format (/x) or A.B.C.D. The mask,
when specified in A.B.C.D format, may be either contiguous or
non-contiguous.

any

Enter the keyword any to specify that all routes are subject to the filter.

host ip-address

Enter the keyword host followed by the IP address to specify a host IP
address.

Access Control Lists (ACL) | 211

www.dell.com | support.dell.com

Defaults
Command Modes
Command
History

Usage
Information

destination

Enter the IP address of the network or host to which the packets are
sent.

count

(OPTIONAL) Enter the keyword count to count packets processed by
the filter.

byte

(OPTIONAL) Enter the keyword byte to count bytes processed by the
filter.

log

(OPTIONAL, E-Series only) Enter the keyword log to enter ACL
matches in the log.

dscp

(OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP
values.

order

(OPTIONAL) Enter the keyword order to specify the QoS order of
priority for the ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest;
lower order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest
order by default (255).

monitor

(OPTIONAL) Enter the keyword monitor when the rule is describing
the traffic that you want to monitor and the ACL in which you are
creating the rule will be applied to the monitored interface. For details,
refer to the section “Flow-based Monitoring” in the Port Monitoring
chapter of the FTOS Configuration Guide.

fragments

Enter the keyword fragments to use ACLs to control packet fragments.

Not configured.
CONFIGURATION-EXTENDED-ACCESS-LIST
Version 8.3.7.0

Introduced on S4810

Version 8.3.1.0

Add DSCP value for ACL matching.

Version 8.2.1.0

Allows ACL control of fragmented packets for IP (Layer 3) ACLs.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 7.4.1.0

Added support for non-contiguous mask and added the monitor option.

Version 6.5.10

Expanded to include the optional QoS order priority for the ACL entry.

The order option is relevant in the context of the Policy QoS feature only. Refer to the
“Quality of Service” chapter of the FTOS Configuration Guide for more information.
When you use the log option, CP processor logs details about the packets that match.
Depending on how many packets match the log entry and at what rate, the CP may become
busy as it has to log these packets’ details.
The C-Series and S-Series cannot count both packets and bytes, so when you enter the count
byte options, only bytes are incremented.

212

|

Access Control Lists (ACL)

The monitor option is relevant in the context of flow-based monitoring only. Refer to the Port
Monitoring chapter.
Note: When ACL logging and byte counters are configured simultaneously, byte
counters may display an incorrect value. Configure packet counters with logging
instead.
Related
Commands

ip access-list extended

Create an extended ACL.

permit tcp

Assign a permit filter for TCP packets.

permit udp

Assign a permit filter for UDP packets.

permit arp
e

Syntax

Configure a filter that forwards ARP packets meeting this criteria.This command is supported
only on 12-port GE line cards with SFP optics; refer to your line card documentation for
specifications. \
permit arp {destination-mac-address mac-address-mask | any} vlan vlan-id {ip-address | any |
opcode code-number} [count [byte] | log] [order] [monitor] [fragments]

To remove this filter, use one of the following:
•
•
Parameters

Use the no seq sequence-number command syntax if you know the filter’s
sequence number or
Use the no permit arp {destination-mac-address mac-address-mask | any} vlan vlan-id
{ip-address | any | opcode code-number} command.

destination-mac-address
mac-address-mask

Enter a MAC address and mask in the nn:nn:nn:nn:nn format.
For the MAC address mask, specify which bits in the MAC address
must match.
The MAC ACL supports an inverse mask, therefore, a mask of
ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of
00:00:00:00:00:00 only allows entries that match exactly.

any

Enter the keyword any to match and drop any ARP traffic on the
interface.

vlan vlan-id

Enter the keyword vlan followed by the VLAN ID to filter traffic
associated with a specific VLAN.
Range: 1 to 4094, 1-2094 for ExaScale (can used IDs 1-4094)
To filter all VLAN traffic specify VLAN 1.

ip-address

Enter an IP address in dotted decimal format (A.B.C.D) as the target
IP address of the ARP.

opcode code-number

Enter the keyword opcode followed by the number of the ARP
opcode.
Range: 1 to 16.

count

(OPTIONAL) Enter the keyword count to count packets processed
by the filter.

Access Control Lists (ACL) | 213

www.dell.com | support.dell.com

Defaults
Command Modes
Command
History

Usage
Information

byte

(OPTIONAL) Enter the keyword byte to count bytes processed by
the filter.

log

(OPTIONAL, E-Series only) Enter the keyword log to have the
information kept in an ACL log file.

order

(OPTIONAL) Enter the keyword order to specify the QoS priority
for the ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the
lowest; lower order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest
order by default (255).

monitor

(OPTIONAL) Enter the keyword monitor when the rule is
describing the traffic that you want to monitor and the ACL in which
you are creating the rule will be applied to the monitored interface.
For details, refer to the section “Flow-based Monitoring” in the Port
Monitoring chapter of the FTOS Configuration Guide.

fragments

Enter the keyword fragments to use ACLs to control packet
fragments.

Not configured.
CONFIGURATION-EXTENDED-ACCESS-LIST
Version 8.2.1.0

Allows ACL control of fragmented packets for IP (Layer 3) ACLs.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Added support for non-contiguous mask and added the monitor option.

Version 6.5.10

Expanded to include the optional QoS order priority for the ACL entry.

The order option is relevant in the context of the Policy QoS feature only. Refer to the Quality
of Service chapter of the FTOS Configuration Guide for more information.
When you use the log option, CP processor logs details about the packets that match.
Depending on how many packets match the log entry and at what rate, the CP may become
busy as it has to log these packets’ details.
The monitor option is relevant in the context of flow-based monitoring only. Refer to the Port
Monitoring chapter.
You cannot include IP, TCP or UDP filters in an ACL configured with ARP filters.
Note: When ACL logging and byte counters are configured simultaneously, byte
counters may display an incorrect value. Configure packet counters with logging
instead.

214

|

Access Control Lists (ACL)

permit ether-type
e

Syntax

Configure a filter that allows traffic with specified types of Ethernet packets. This command
is supported only on 12-port GE line cards with SFP optics; refer to your line card
documentation for specifications.
permit ether-type protocol-type-number {destination-mac-address mac-address-mask | any} vlan
vlan-id {source-mac-address mac-address-mask | any} [count [byte] | log] [order] [monitor]

To remove this filter, use one of the following:
•
•

Parameters

Use the no seq sequence-number command syntax if you know the filter’s
sequence number or
Use the no permit ether-type protocol-type-number {destination-mac-address
mac-address-mask | any} vlan vlan-id {source-mac-address mac-address-mask | any}
command.

protocol-type-number

Enter a number from 600 to FFF as the specific Ethernet type traffic to
drop.

destination-mac-address
mac-address-mask

Enter a MAC address and mask in the nn:nn:nn:nn:nn format.
For the MAC address mask, specify which bits in the MAC address
must match.
The MAC ACL supports an inverse mask, therefore, a mask of
ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of
00:00:00:00:00:00 only allows entries that match exactly.

any

Enter the keyword any to match and drop specific Ethernet traffic on
the interface.

vlan vlan-id

Enter the keyword vlan followed by the VLAN ID to filter traffic
associated with a specific VLAN.
Range: 1 to 4094, 1-2094 for ExaScale (can used IDs 1-4094)
To filter all VLAN traffic specify VLAN 1.

source-mac-address
mac-address-mask

Enter a MAC address and mask in the nn:nn:nn:nn:nn format.
For the MAC address mask, specify which bits in the MAC address
must match.
The MAC ACL supports an inverse mask, therefore, a mask of
ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of
00:00:00:00:00:00 only allows entries that match exactly.

count

(OPTIONAL) Enter the keyword count to count packets processed by
the filter.

byte

(OPTIONAL) Enter the keyword byte to count bytes processed by the
filter.

log

(OPTIONAL, E-Series only) Enter the keyword log to have the
information kept in an ACL log file.

Access Control Lists (ACL) | 215

www.dell.com | support.dell.com

Defaults
Command Modes
Command
History

Usage
Information

order

(OPTIONAL) Enter the keyword order to specify the QoS priority for
the ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest;
lower order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest
order by default (255).

monitor

(OPTIONAL) Enter the keyword monitor when the rule is describing
the traffic that you want to monitor and the ACL in which you are
creating the rule will be applied to the monitored interface. For details,
refer to the section “Flow-based Monitoring” in the Port Monitoring
chapter of the FTOS Configuration Guide.

Not configured.
CONFIGURATION-EXTENDED-ACCESS-LIST
Version 8.2.1.0

Allows ACL control of fragmented packets for IP (Layer 3) ACLs.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Added monitor option

Version 6.5.10

Expanded to include the optional QoS order priority for the ACL entry.

The order option is relevant in the context of the Policy QoS feature only. Refer to the Quality
of Service chapter of the FTOS Configuration Guide for more information.
When you use the log option, CP processor logs details about the packets that match.
Depending on how many packets match the log entry and at what rate, the CP may become
busy as it has to log these packets’ details.
The monitor option is relevant in the context of the flow-based monitoring feature only. Refer
to the Port Monitoring chapter.
You cannot include IP, TCP or UDP filters in an ACL configured with ARP filters.
Note: When ACL logging and byte counters are configured simultaneously, byte
counters may display an incorrect value. Configure packet counters with logging
instead.

permit icmp
e
Syntax

Configure a filter to allow all or specific ICMP messages.
permit icmp {source mask | any | host ip-address} {destination mask | any | host ip-address} [dscp]
[message-type] [count [byte] | log] [order] [monitor] [fragments]

To remove this filter, you have two choices:

216

|

Access Control Lists (ACL)

•
•
Parameters

Defaults
Command Modes
Command
History

Usage
Information

Use the no seq sequence-number command syntax if you know the filter’s
sequence number or
Use the no permit icmp {source mask | any | host ip-address} {destination mask | any
| host ip-address} command.

source

Enter the IP address of the network or host from which the packets were sent.

mask

Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when
specified in A.B.C.D format, may be either contiguous or non-contiguous.

any

Enter the keyword any to specify that all routes are subject to the filter.

host ip-address

Enter the keyword host followed by the IP address to specify a host IP
address.

destination

Enter the IP address of the network or host to which the packets are sent.

dscp

Enter this keyword to deny a packet based on DSCP value.
Range: 0-63

message-type

(OPTIONAL) Enter an ICMP message type, either with the type (and code, if
necessary) numbers or with the name of the message type (ICMP message
types are listed in Table 7-2).
Range: 0 to 255 for ICMP type; 0 to 255 for ICMP code

count

(OPTIONAL) Enter the keyword count to count packets processed by the
filter.

byte

(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.

log

(OPTIONAL, E-Series only) Enter the keyword log to have the information
kept in an ACL log file.

order

(OPTIONAL) Enter the keyword order to specify the QoS priority for the
ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower
order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest order by
default (255).

monitor

(OPTIONAL) Enter the keyword monitor to monitor traffic on the
monitoring interface specified in the flow-based monitoring session along
with the filter operation.

fragments

Enter the keyword fragments to use ACLs to control packet fragments.

Not configured
CONFIGURATION-STANDARD-ACCESS-LIST
Version 8.3.1.0

Added dscp keyword.

Version 8.2.1.0

Allows ACL control of fragmented packets for IP (Layer 3) ACLs.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Added support for non-contiguous mask and added the monitor option.

Version 6.5.10

Expanded to include the optional QoS order priority for the ACL entry.

The order option is relevant in the context of the Policy QoS feature only. Refer to the Quality
of Service chapter of the FTOS Configuration Guide for more information.

Access Control Lists (ACL) | 217

www.dell.com | support.dell.com

When you use the log option, CP processor logs details about the packets that match.
Depending on how many packets match the log entry and at what rate, the CP may become
busy as it has to log these packets’ details.
The monitor option is relevant in the context of the flow-based monitoring feature only. Refer
to the Port Monitoring chapter.
Note: When ACL logging and byte counters are configured simultaneously, byte
counters may display an incorrect value. Configure packet counters with logging
instead.

permit tcp
ces
Syntax

Configure a filter to pass TCP packets meeting the filter criteria.
permit tcp {source mask | any | host ip-address} [bit] [operator port [port]] {destination mask | any |
host ip-address} [bit] [dscp] [operator port [port]] [count [byte] | log] [order] [monitor]
[fragments]

To remove this filter, you have two choices:
•
•
Parameters

218

|

Use the no seq sequence-number command syntax if you know the filter’s
sequence number or
Use the no permit tcp {source mask | any | host ip-address} {destination mask | any |
host ip-address} command.

source

Enter the IP address of the network or host from which the packets were sent.

mask

Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when
specified in A.B.C.D format, may be either contiguous or non-contiguous.

any

Enter the keyword any to specify that all routes are subject to the filter.

host ip-address

Enter the keyword host followed by the IP address to specify a host IP
address.

bit

Enter a flag or combination of bits:
ack: acknowledgement field
fin: finish (no more data from the user)
psh: push function
rst: reset the connection
syn: synchronize sequence numbers
urg: urgent field

dscp

Enter this keyword to deny a packet based on DSCP value.
Range: 0-63

Access Control Lists (ACL)

Defaults
Command Modes
Command
History

operator

(OPTIONAL) Enter one of the following logical operand:
• eq = equal to
• neq = not equal to
• gt = greater than
• lt = less than
• range = inclusive range of ports (you must specify two port for the port
parameter.)

port port

Enter the application layer port number. Enter two port numbers if using the
range logical operand.
Range: 0 to 65535.
The following list includes some common TCP port numbers:
23 = Telnet
20 and 21 = FTP
25 = SMTP
169 = SNMP

destination

Enter the IP address of the network or host to which the packets are sent.

mask

Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when
specified in A.B.C.D format, may be either contiguous or non-contiguous.

count

(OPTIONAL) Enter the keyword count to count packets processed by the
filter.

byte

(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.

log

(OPTIONAL, E-Series only) Enter the keyword log to enter ACL matches in
the log.

order

(OPTIONAL) Enter the keyword order to specify the QoS priority for the
ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower
order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest order
by default (255).

monitor

(OPTIONAL) Enter the keyword monitor when the rule is describing the
traffic that you want to monitor and the ACL in which you are creating the
rule will be applied to the monitored interface. For details, refer to the section
“Flow-based Monitoring” in the Port Monitoring chapter of the FTOS
Configuration Guide.

fragments

Enter the keyword fragments to use ACLs to control packet fragments.

Not configured.
CONFIGURATION-EXTENDED-ACCESS-LIST
Version 8.3.1.0

Added dscp keyword.

Version 8.2.1.0

Allows ACL control of fragmented packets for IP (Layer 3) ACLs.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

Access Control Lists (ACL) | 219

www.dell.com | support.dell.com

Usage
Information

Version 7.4.1.0

Added support for non-contiguous mask and added the monitor option.
Deprecated established keyword.

Version 6.5.10

Expanded to include the optional QoS order priority for the ACL entry.

The order option is relevant in the context of the Policy QoS feature only. Refer to the Quality
of Service chapter of the FTOS Configuration Guide for more information.
Note: When ACL logging and byte counters are configured simultaneously, byte
counters may display an incorrect value. Configure packet counters with logging
instead.

The monitor option is relevant in the context of the flow-based monitoring feature only. Refer
to the Port Monitoring chapter.
When you use the log option, CP processor logs details about the packets that match.
Depending on how many packets match the log entry and at what rate, the CP may become
busy as it has to log these packets’ details.
The C-Series and S-Series cannot count both packets and bytes, so when you enter the count
byte options, only bytes are incremented.
Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port
operators (gt, lt, range) may require more than one entry. The range of ports is configured in
the CAM based on bit mask boundaries; the space required depends on exactly what ports are
included in the range.
For example, an ACL rule with TCP port range 4000 - 8000 uses 8 entries in the CAM:
Rule#
1
2
3
4
5
6
7
8

Data

Mask

From

To

#Covered

0000111110100000
0000111111000000
0001000000000000
0001100000000000
0001110000000000
0001111000000000
0001111100000000
0001111101000000

1111111111100000
1111111111000000
1111100000000000
1111110000000000
1111111000000000
1111111100000000
1111111111000000
1111111111111111

4000
4032
4096
6144
7168
7680
7936
8000

4031
4095
6143
7167
7679
7935
7999
8000

32
64
2048
1024
512
256
64
1

Total Ports: 4001

But an ACL rule with TCP port lt 1023 takes only one entry in the CAM:
Rule#
1

Data

Mask

From

0000000000000000 1111110000000000 0

To

#Covered

1023

1024

Total Ports: 1024

Related
Commands

220

|

ip access-list extended

Create an extended ACL.

permit

Assign a permit filter for IP packets.

permit udp

Assign a permit filter for UDP packets.

Access Control Lists (ACL)

permit udp
ces
Syntax

Configure a filter to pass UDP packets meeting the filter criteria.
permit udp {source mask | any | host ip-address} [operator port [port]] {destination mask | any |
host ip-address} [dscp] [operator port [port]] [count [byte] | log] [order] [monitor] [fragments]

To remove this filter, you have two choices:
•
•
Parameters

Use the no seq sequence-number command syntax if you know the filter’s
sequence number or
Use the no permit udp {source mask | any | host ip-address} {destination mask | any |
host ip-address} command.

source

Enter the IP address of the network or host from which the packets were sent.

mask

Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when
specified in A.B.C.D format, may be either contiguous or non-contiguous.

any

Enter the keyword any to specify that all routes are subject to the filter.

host ip-address

Enter the keyword host followed by the IP address to specify a host IP
address.

dscp

Enter this keyword to deny a packet based on DSCP value.
Range: 0-63

operator

(OPTIONAL) Enter one of the following logical operand:
• eq = equal to
• neq = not equal to
• gt = greater than
• lt = less than
• range = inclusive range of ports (you must specify two ports for the port
parameter.)

port port

(OPTIONAL) Enter the application layer port number. Enter two port
numbers if using the range logical operand.
Range: 0 to 65535

destination

Enter the IP address of the network or host to which the packets are sent.

count

(OPTIONAL) Enter the keyword count to count packets processed by the
filter.

byte

(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.

log

(OPTIONAL, E-Series only) Enter the keyword log to enter ACL matches in
the log.

order

(OPTIONAL) Enter the keyword order to specify the QoS priority for the
ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower
order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest order
by default (255).

Access Control Lists (ACL) | 221

www.dell.com | support.dell.com

Defaults
Command Modes
Command
History

Usage
Information

monitor

(OPTIONAL) Enter the keyword monitor when the rule is describing the
traffic that you want to monitor and the ACL in which you are creating the
rule will be applied to the monitored interface. For details, refer to the section
“Flow-based Monitoring” in the Port Monitoring chapter of the FTOS
Configuration Guide.

fragments

Enter the keyword fragments to use ACLs to control packet fragments.

Not configured.
CONFIGURATION-EXTENDED-ACCESS-LIST
Version 8.3.1.0

Added dscp keyword.

Version 8.2.1.0

Allows ACL control of fragmented packets for IP (Layer 3) ACLs.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

Version 7.4.1.0

Added support for non-contiguous mask and added the monitor option.

Version 6.5.10

Expanded to include the optional QoS order priority for the ACL entry.

The order option is relevant in the context of the Policy QoS feature only. Refer to the Quality
of Service chapter of the FTOS Configuration Guide for more information.
The monitor option is relevant in the context of the flow-based monitoring feature only. Refer
to the Port Monitoring chapter.
Note: When ACL logging and byte counters are configured simultaneously, byte
counters may display an incorrect value. Configure packet counters with logging
instead.

When you use the log option, CP processor logs details about the packets that match.
Depending on how many packets match the log entry and at what rate, the CP may become
busy as it has to log these packets’ details.
The C-Series and S-Series cannot count both packets and bytes, so when you enter the count
byte options, only bytes are incremented.
Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port
operators (gt, lt, range) may require more than one entry. The range of ports is configured in
the CAM based on bit mask boundaries; the space required depends on exactly what ports are
included in the range.

222

|

Access Control Lists (ACL)

For example, an ACL rule with TCP port range 4000 - 8000 uses 8 entries in the CAM:
Rule#
1
2
3
4
5
6
7
8

Data

Mask

From

To

#Covered

0000111110100000
0000111111000000
0001000000000000
0001100000000000
0001110000000000
0001111000000000
0001111100000000
0001111101000000

1111111111100000
1111111111000000
1111100000000000
1111110000000000
1111111000000000
1111111100000000
1111111111000000
1111111111111111

4000
4032
4096
6144
7168
7680
7936
8000

4031
4095
6143
7167
7679
7935
7999
8000

32
64
2048
1024
512
256
64
1

Total Ports: 4001

But an ACL rule with TCP port lt 1023 takes only one entry in the CAM:
Rule#
1

Data

Mask

From

0000000000000000 1111110000000000 0

To

#Covered

1023

1024

Total Ports: 1024

Related
Commands

ip access-list extended

Configure an extended ACL.

permit

Assign a permit filter for IP packets.

permit tcp

Assign a permit filter for TCP packets.

resequence access-list
ces
Syntax
Parameters

Defaults
Command Modes

Re-assign sequence numbers to entries of an existing access-list.
resequence access-list {ipv4 | mac} {access-list-name StartingSeqNum Step-to-Increment}
ipv4 | mac

Enter the keyword ipv4 or mac to identify the access list type to
resequence.

access-list-name

Enter the name of a configured IP access list, up to 140 characters.

StartingSeqNum

Enter the starting sequence number to resequence.
Range: 0 - 4294967290

Step-to-Increment

Enter the step to increment the sequence number.
Range: 1 - 4294967290

No default values or behavior
EXEC
EXEC Privilege

Command
History

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Increased name string to accept up to 140 characters. Prior to 7.8.1.0,
names are up to 16 characters long.

Access Control Lists (ACL) | 223

www.dell.com | support.dell.com

Usage
Information

Related
Commands

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

Version 7.4.1.0

Introduced for E-Series

When all sequence numbers have been exhausted, this feature permits re-assigning new
sequence number to entries of an existing access-list. Prior to 7.8.1.0, names are up to 16
characters long.
resequence prefix-list ipv4

Resequence a prefix list

resequence prefix-list ipv4
ces
Syntax
Parameters

Defaults
Command Modes

Re-assign sequence numbers to entries of an existing prefix list.
resequence prefix-list ipv4 {prefix-list-name StartingSeqNum Step-to-increment}
prefix-list-name

Enter the name of configured prefix list, up to 140 characters long.

StartingSeqNum

Enter the starting sequence number to resequence.
Range: 0 – 65535

Step-to-Increment

Enter the step to increment the sequence number.
Range: 1 – 65535

No default values or behavior
EXEC
EXEC Privilege

Command
History

Usage
Information

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Increased name string to accept up to 140 characters. Prior to 7.8.1.0,
names are up to 16 characters long.

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

Version 7.4.1.0

Introduced for E-Series

When all sequence numbers have been exhausted, this feature permits re-assigning new
sequence number to entries of an existing prefix list.
Prior to 7.8.1.0, names are up to 16 characters long.

Related
Commands

224

|

resequence access-list

Access Control Lists (ACL)

Resequence an access-list

seq arp
e

Syntax

Configure an egress filter with a sequence number that filters ARP packets meeting this
criteria. This command is supported only on 12-port GE line cards with SFP optics; refer to
your line card documentation for specifications.
seq sequence-number {deny | permit} arp {destination-mac-address mac-address-mask | any} vlan
vlan-id {ip-address | any | opcode code-number} [count [byte] | log] [order] [monitor]

To remove this filter, use the no seq sequence-number command.
Parameters

sequence-number

Enter a number from 0 to 4294967290.

deny

Enter the keyword deny to drop all traffic meeting the filter criteria.

permit

Enter the keyword permit to forward all traffic meeting the filter criteria.

destination-mac-address Enter a MAC address and mask in the nn:nn:nn:nn:nn format.
mac-address-mask
For the MAC address mask, specify which bits in the MAC address must

match.
The MAC ACL supports an inverse mask, therefore, a mask of ff:ff:ff:ff:ff:ff
allows entries that do not match and a mask of 00:00:00:00:00:00 only
allows entries that match exactly.

Defaults

any

Enter the keyword any to match and drop any ARP traffic on the interface.

vlan vlan-id

Enter the keyword vlan followed by the VLAN ID to filter traffic associated
with a specific VLAN.
Range: 1 to 4094, 1-2094 for ExaScale (can used IDs 1-4094)
To filter all VLAN traffic specify VLAN 1.

ip-address

Enter an IP address in dotted decimal format (A.B.C.D) as the target IP
address of the ARP.

opcode code-number

Enter the keyword opcode followed by the number of the ARP opcode.
Range: 1 to 16.

count

(OPTIONAL) Enter the keyword count to count packets processed by the
filter.

byte

(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.

log

(OPTIONAL, E-Series only) Enter the keyword log to have the information
kept in an ACL log file.

order

(OPTIONAL) Enter the keyword order to specify the QoS priority for the
ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower
order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest order
by default (255).

monitor

(OPTIONAL) Enter the keyword monitor when the rule is describing the
traffic that you want to monitor and the ACL in which you are creating the
rule will be applied to the monitored interface. For details, refer to the
section “Flow-based Monitoring” in the Port Monitoring chapter of the
FTOS Configuration Guide.

Not configured.

Access Control Lists (ACL) | 225

www.dell.com | support.dell.com

Command Modes
Command
History

Usage
Information

CONFIGURATION-EXTENDED-ACCESS-LIST
Version 8.2.1.0

Allows ACL control of fragmented packets for IP (Layer 3) ACLs.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Added monitor option

Version 6.5.10

Expanded to include the optional QoS order priority for the ACL entry.

The monitor option is relevant in the context of the flow-based monitoring feature only. Refer
to the Port Monitoring chapter.
When you use the log option, CP processor logs details about the packets that match.
Depending on how many packets match the log entry and at what rate, the CP may become
busy as it has to log these packets’ details.
The order option is relevant in the context of the Policy QoS feature only. The following
applies:
•
•
•
•
•

The seq sequence-number is applicable only in an ACL group.
The order option works across ACL groups that have been applied on an interface
via QoS policy framework.
The order option takes precedence over the seq sequence-number.
If sequence-number is not configured, then rules with the same order value are
ordered according to their configuration order.
If the sequence-number is configured, then the sequence-number is used as a tie
breaker for rules with the same order.

Note: When ACL logging and byte counters are configured simultaneously, byte
counters may display an incorrect value. Configure packet counters with logging
instead.

You cannot include IP, TCP or UDP (Layer 3) filters in an ACL configured with ARP or
Ether-type (Layer 2) filters. Apply Layer 2 ACLs to interfaces in Layer 2 mode.

seq ether-type
e

Syntax

Parameters

226

|

Configure an egress filter with a specific sequence number that filters traffic with specified
types of Ethernet packets. This command is supported only on 12-port GE line cards with
SFP optics; refer to your line card documentation for specifications.
seq sequence-number {deny | permit} ether-type protocol-type-number {destination-mac-address
mac-address-mask | any} vlan vlan-id {source-mac-address mac-address-mask | any} [count [byte]
| log] [order] [monitor]
sequence-number

Enter a number from 0 to 4294967290.

deny

Enter the keyword deny to drop all traffic meeting the filter criteria.

Access Control Lists (ACL)

Defaults
Command Modes
Command
History

permit

Enter the keyword permit to forward all traffic meeting the filter
criteria.

protocol-type-number

Enter a number from 600 to FFFF as the specific Ethernet type traffic
to drop.

destination-mac-address
mac-address-mask

Enter a MAC address and mask in the nn:nn:nn:nn:nn format.
For the MAC address mask, specify which bits in the MAC address
must match.
The MAC ACL supports an inverse mask, therefore, a mask of
ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of
00:00:00:00:00:00 only allows entries that match exactly.

any

Enter the keyword any to match and drop specific Ethernet traffic on
the interface.

vlan vlan-id

Enter the keyword vlan followed by the VLAN ID to filter traffic
associated with a specific VLAN.
Range: 1 to 4094, 1-2094 for ExaScale (can used IDs 1-4094)
To filter all VLAN traffic specify VLAN 1.

source-mac-address
mac-address-mask

Enter a MAC address and mask in the nn:nn:nn:nn:nn format.
For the MAC address mask, specify which bits in the MAC address
must match.
The MAC ACL supports an inverse mask, therefore, a mask of
ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of
00:00:00:00:00:00 only allows entries that match exactly.

count

(OPTIONAL) Enter the keyword count to count packets processed by
the filter.

byte

(OPTIONAL) Enter the keyword byte to count bytes processed by the
filter.

log

(OPTIONAL, E-Series only) Enter the keyword log to have the
information kept in an ACL log file.

order

(OPTIONAL) Enter the keyword order to specify the QoS priority for
the ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest;
lower order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest
order by default (255).

monitor

(OPTIONAL) Enter the keyword monitor when the rule is describing
the traffic that you want to monitor and the ACL in which you are
creating the rule will be applied to the monitored interface. For details,
refer to the section “Flow-based Monitoring” in the Port Monitoring
chapter of the FTOS Configuration Guide.

Not configured.
CONFIGURATION-EXTENDED-ACCESS-LIST
Version 8.2.1.0

Allows ACL control of fragmented packets for IP (Layer 3) ACLs.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Added monitor option

Version 6.5.10

Expanded to include the optional QoS order priority for the ACL entry.

Access Control Lists (ACL) | 227

www.dell.com | support.dell.com

Usage
Information

The monitor option is relevant in the context of the flow-based monitoring feature only. Refer
to the Port Monitoring chapter.
When you use the log option, CP processor logs details about the packets that match.
Depending on how many packets match the log entry and at what rate, the CP may become
busy as it has to log these packets’ details.
The order option is relevant in the context of the Policy QoS feature only. The following
applies:
•
•
•
•
•

The seq sequence-number is applicable only in an ACL group.
The order option works across ACL groups that have been applied on an interface
via QoS policy framework.
The order option takes precedence over the seq sequence-number.
If sequence-number is not configured, then rules with the same order value are
ordered according to their configuration order.
If the sequence-number is configured, then the sequence-number is used as a tie
breaker for rules with the same order.

Note: When ACL logging and byte counters are configured simultaneously, byte
counters may display an incorrect value. Configure packet counters with logging
instead.

You cannot include IP, TCP or UDP (Layer 3) filters in an ACL configured with ARP or
Ether-type (Layer 2) filters. Apply Layer 2 filters to interfaces in Layer 2 mode.

seq
ces
Syntax

Parameters

228

|

Assign a sequence number to a deny or permit filter in an extended IP access list while
creating the filter.
seq sequence-number {deny | permit} {ip-protocol-number | icmp | ip | tcp | udp} {source mask |
any | host ip-address} {destination mask | any | host ip-address} [operator port [port]] [count [byte]
| log] [dscp value] [order] [monitor] [fragments]
sequence-number

Enter a number from 0 to 4294967290.
S4810 Range: 1 to 65534

deny

Enter the keyword deny to configure a filter to drop packets meeting this
condition.

permit

Enter the keyword permit to configure a filter to forward packets meeting
this criteria.

ip-protocol-number

Enter a number from 0 to 255 to filter based on the protocol identified in the
IP protocol header.

icmp

Enter the keyword icmp to configure an ICMP access list filter.

ip

Enter the keyword ip to configure a generic IP access list. The keyword ip
specifies that the access list will permit all IP protocols.

tcp

Enter the keyword tcp to configure a TCP access list filter.

Access Control Lists (ACL)

Defaults

udp

Enter the keyword udp to configure a UDP access list filter.

source

Enter the IP address of the network or host from which the packets were
sent.

mask

Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when
specified in A.B.C.D format, may be either contiguous or non-contiguous.

any

Enter the keyword any to specify that all routes are subject to the filter.

host ip-address

Enter the keyword host followed by the IP address to specify a host IP
address.

operator

(OPTIONAL) Enter one of the following logical operands:
• eq = equal to
• neq = not equal to
• gt = greater than
• lt = less than
• range = inclusive range of ports (you must specify two ports for the port
parameter.)

port port

(OPTIONAL) Enter the application layer port number. Enter two port
numbers if using the range logical operand.
Range: 0 to 65535
The following list includes some common TCP port numbers:
• 23 = Telnet
• 20 and 21 = FTP
• 25 = SMTP
• 169 = SNMP

destination

Enter the IP address of the network or host to which the packets are sent.

message-type

(OPTIONAL) Enter an ICMP message type, either with the type (and code,
if necessary) numbers or with the name of the message type (ICMP message
types are listed in Table 7-2).
Range: 0 to 255 for ICMP type; 0 to 255 for ICMP code

count

(OPTIONAL) Enter the keyword count to count packets processed by the
filter.

byte

(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.

log

(OPTIONAL, E-Series only) Enter the keyword log to enter ACL matches
in the log. Supported on Jumbo-enabled line cards only.

dscp

(OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP values.

order

(OPTIONAL) Enter the keyword order to specify the QoS priority for the
ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower
order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest order
by default (255).

monitor

(OPTIONAL) Enter the keyword monitor when the rule is describing the
traffic that you want to monitor and the ACL in which you are creating the
rule will be applied to the monitored interface. For details, refer to the
section “Flow-based Monitoring” in the Port Monitoring chapter of the
FTOS Configuration Guide.

fragments

Enter the keyword fragments to use ACLs to control packet fragments.

Not configured

Access Control Lists (ACL) | 229

www.dell.com | support.dell.com

Command Modes
Command
History

Usage
Information

CONFIGURATION-EXTENDED-ACCESS-LIST
Version 8.3.7.0

Introduced on S4810

Version 8.3.1.0

Add DSCP value for ACL matching.

Version 8.2.1.0

Allows ACL control of fragmented packets for IP (Layer 3) ACLs.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

Version 7.4.1.0

Added support for non-contiguous mask and added the monitor option.
Deprecated established keyword

Version 6.5.10

Expanded to include the optional QoS order priority for the ACL entry.

The monitor option is relevant in the context of the flow-based monitoring feature only. Refer
to the Port Monitoring chapter.
When you use the log option, CP processor logs details about the packets that match.
Depending on how many packets match the log entry and at what rate, the CP may become
busy as it has to log these packets’ details.
The order option is relevant in the context of the Policy QoS feature only. The following
applies:
•
•
•
•
•

The seq sequence-number is applicable only in an ACL group.
The order option works across ACL groups that have been applied on an interface
via QoS policy framework.
The order option takes precedence over the seq sequence-number.
If sequence-number is not configured, then rules with the same order value are
ordered according to their configuration order.
If the sequence-number is configured, then the sequence-number is used as a tie
breaker for rules with the same order.

If the sequence-number is configured, then the sequence-number is used as a tie breaker for
rules with the same order.
Note: When ACL logging and byte counters are configured simultaneously, byte
counters may display an incorrect value. Configure packet counters with logging
instead.
Related
Commands

230

|

deny

Configure a filter to drop packets.

permit

Configure a filter to forward packets.

Access Control Lists (ACL)

Common MAC Access List Commands
The following commands are available within both MAC ACL modes (Standard and
Extended) and do not have mode-specific options.

c and s platforms support Ingress MAC ACLs only.
The following commands allow you to clear, display and assign MAC ACL configurations.
•
•
•
•

clear counters mac access-group
mac access-group
show mac access-lists
show mac accounting access-list

clear counters mac access-group
ces
Syntax
Parameters

Command Modes
Command
History

Clear counters for all or a specific MAC ACL.
clear counters mac access-group [mac-list-name]
mac-list-name

(OPTIONAL) Enter the name of a configured MAC access list.

EXEC Privilege
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

mac access-group
ces
Syntax
Parameters

Defaults

Apply a MAC ACL to traffic entering or exiting an interface.
mac access-group access-list-name {in [vlan vlan-range] | out}
access-list-name

Enter the name of a configured MAC access list, up to 140 characters.

vlan vlan-range

(OPTIONAL) Enter the keyword vlan followed a range of VLANs. Note
that this option is available only with the in keyword option.
Range: 1 to 4094, 1-2094 for ExaScale (can used IDs 1-4094)

in

Enter the keyword in to configure the ACL to filter incoming traffic.

out

Enter the keyword out to configure the ACL to filter outgoing traffic. Not
available on S-Series.

No default behavior or configuration

Access Control Lists (ACL) | 231

www.dell.com | support.dell.com

Command Modes

INTERFACE

Command
History

Usage
Information

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names
are up to 16 characters long.

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

You can assign one ACL (standard or extended) to an interface.
Prior to 7.8.1.0, names are up to 16 characters long.

Related
Commands

mac access-list standard

Configure a standard MAC ACL.

mac access-list extended

Configure an extended MAC ACL.

show mac access-lists
ces

Syntax

Display all of the Layer 2 ACLs configured in the system, whether or not they are applied to
an interface, and the count of matches/mismatches against each ACL entry displayed.
show mac access-lists [access-list-name] [interface interface] [in | out]

Parameters

Command Modes
Command
History

232

|

access-list-name

Enter the name of a configured MAC ACL, up to 140 characters.

interface interface

Enter the keyword interface followed by the one of the following
keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel
followed by a number:
C-Series and S-Series Range: 1 to 128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a SONET interface, enter the keyword sonet followed by the
slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.

in | out

Identify whether ACL is applied on ingress or egress side.

EXEC Privilege
\

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.4.1.0

Introduced

Access Control Lists (ACL)

show mac accounting access-list
ces
Syntax
Parameters

Command Modes

Display

MAC access list configurations and counters (if configured).

show mac accounting access-list access-list-name interface interface in | out
access-list-name

Enter the name of a configured MAC ACL, up to 140 characters.

interface interface

Enter the keyword interface followed by the one of the following
keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel
followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a SONET interface, enter the keyword sonet followed by the
slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.

in | out

Identify whether ACL is applied ay Ingress (in) or egress (out) side.

EXEC
EXEC Privilege

Command
History

Example

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names
are up to 16 characters long.

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

FTOS#show mac accounting access-list mac-ext interface po 1
Extended mac access-list mac-ext on GigabitEthernet 0/11
seq 5 permit host 00:00:00:00:00:11 host 00:00:00:00:00:19
packets)
seq 10 deny host 00:00:00:00:00:21 host 00:00:00:00:00:29
packets)
seq 15 deny host 00:00:00:00:00:31 host 00:00:00:00:00:39
seq 20 deny host 00:00:00:00:00:41 host 00:00:00:00:00:49
seq 25 permit any any count (0 packets)
Extended mac access-list mac-ext on GigabitEthernet 0/12
seq 5 permit host 00:00:00:00:00:11 host 00:00:00:00:00:19
packets)
seq 10 deny host 00:00:00:00:00:21 host 00:00:00:00:00:29
packets)
seq 15 deny host 00:00:00:00:00:31 host 00:00:00:00:00:39
seq 20 deny host 00:00:00:00:00:41 host 00:00:00:00:00:49
seq 25 permit any any count (0 packets)
FTOS#

count (393794576
count (89076777
count (0 packets)
count (0 packets)

count (57589834
count (393143077
count (0 packets)
count (0 packets)

Access Control Lists (ACL) | 233

www.dell.com | support.dell.com

Usage
Information
Related
Commands

The ACL hit counters in this command increment the counters for each matching rule, not
just the first matching rule.
show mac accounting destination

Display destination counters for Layer 2 traffic (available
on physical interfaces only).

Standard MAC ACL Commands
When an access-list is created without any rule and then applied to an interface, ACL
behavior reflects implicit permit.

c and s platforms support Ingress MAC ACLs only.
The following commands configure standard MAC ACLs:
•
•
•
•

deny
mac access-list standard
permit
seq

Note: Refer also to Commands Common to all ACL Types and Common MAC
Access List Commands.

deny
ces
Syntax

Configure a filter to drop packets with a the MAC address specified.
deny {any | mac-source-address [mac-source-address-mask]} [count [byte]] [log] [monitor]

To remove this filter, you have two choices:
•
•
Parameters

234

|

Use the no seq sequence-number command syntax if you know the filter’s
sequence number or
Use the no deny {any | mac-source-address mac-source-address-mask} command.

any

Enter the keyword any to specify that all traffic is subject to
the filter.

mac-source-address

Enter a MAC address in nn:nn:nn:nn:nn:nn format.

mac-source-address-mask

(OPTIONAL) Specify which bits in the MAC address must
match. If no mask is specified, a mask of 00:00:00:00:00:00
is applied (in other words, the filter allows only MAC
addresses that match).

count

(OPTIONAL) Enter the keyword count to count packets
processed by the filter.

Access Control Lists (ACL)

Defaults
Command Modes
Command
History

byte

(OPTIONAL) Enter the keyword byte to count bytes
processed by the filter.

log

(OPTIONAL, E-Series only) Enter the keyword log to log the
packets.

monitor

(OPTIONAL) Enter the keyword monitor when the rule is
describing the traffic that you want to monitor and the ACL in
which you are creating the rule will be applied to the
monitored interface. For details, refer to the section
“Flow-based Monitoring” in the Port Monitoring chapter of
the FTOS Configuration Guide.

Not enabled.
CONFIGURATION-MAC ACCESS LIST-STANDARD
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 7.4.1.0

Added monitor option

pre-Version 6.1.1.0

Introduced for E-Series

Note: When ACL logging and byte counters are configured simultaneously, byte
counters may display an incorrect value. Configure packet counters with logging
instead.
Usage
Information

Related
Commands

When you use the log option, CP processor logs details about the packets that match.
Depending on how many packets match the log entry and at what rate, the CP may become
busy as it has to log these packets’ details.
permit

Configure a MAC address filter to pass packets.

seq

Configure a MAC address filter with a specified sequence number.

mac access-list standard
ces
Name a new or existing MAC access control list (MAC ACL) and enter the MAC ACCESS
LIST mode to configure a standard MAC ACL. Refer to Commands Common to all ACL
Types and Common MAC Access List Commands.
Syntax
Parameters

Defaults

mac access-list standard mac-list-name
mac-list-name

Enter a text string as the name of the standard MAC access list (140
character maximum).

Not configured

Access Control Lists (ACL) | 235

www.dell.com | support.dell.com

Command Modes
Command
History

Usage
Information

CONFIGURATION
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names
are up to 16 characters long.

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

FTOS supports one ingress and one egress MAC ACL per interface.
Prior to 7.8.1.0, names are up to 16 characters long.
The number of entries allowed per ACL is hardware-dependent. Refer to your line card
documentation for detailed specification on entries allowed per ACL.
C-Series and S-Series support ingress ACLs only.

Example

FTOS(conf)#mac access-list access-list standard TestMAC
FTOS(config-std-macl)#?
deny
Specify packets to reject
description
List description
exit
Exit from access-list configuration mode
no
Negate a command or set its defaults
permit
Specify packets to forward
remark
Specify access-list entry remark
seq
Sequence numbers
show
Show Standard ACL configuration

permit
ces
Syntax

Configure a filter to forward packets from a specific source MAC address.
permit {any | mac-source-address [mac-source-address-mask]} [count [byte]] | [log] [monitor]

To remove this filter, you have two choices:
•
•
Parameters

236

|

Use the no seq sequence-number command syntax if you know the filter’s
sequence number or
Use the no permit {any | mac-source-address mac-source-address-mask} command.

any

Enter the keyword any to forward all packets received with a
MAC address.

mac-source-address

Enter a MAC address in nn:nn:nn:nn:nn:nn format.

mac-source-address-mask

(OPTIONAL) Specify which bits in the MAC address must
match. If no mask is specified, a mask of 00:00:00:00:00:00 is
applied (in other words, the filter allows only MAC addresses
that match).

Access Control Lists (ACL)

Defaults
Command Modes
Command
History

count

(OPTIONAL) Enter the keyword count to count packets
processed by the filter.

byte

(OPTIONAL) Enter the keyword byte to count bytes
processed by the filter.

log

(OPTIONAL, E-Series only) Enter the keyword log to log the
packets.

monitor

(OPTIONAL) Enter the keyword monitor when the rule is
describing the traffic that you want to monitor and the ACL in
which you are creating the rule will be applied to the monitored
interface. For details, refer to the section “Flow-based
Monitoring” in the Port Monitoring chapter of the FTOS
Configuration Guide.

Not configured.
CONFIGURATION-MAC ACCESS LIST-STANDARD
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Note: When ACL logging and byte counters are configured simultaneously, byte
counters may display an incorrect value. Configure packet counters with logging
instead.
Usage
Information

Related
Commands

When you use the log option, CP processor logs details about the packets that match.
Depending on how many packets match the log entry and at what rate, the CP may become
busy as it has to log these packets’ details.
deny

Configure a MAC ACL filter to drop packets.

seq

Configure a MAC ACL filter with a specified sequence number.

seq
ces
Syntax

Parameters

Assign a sequence number to a deny or permit filter in a MAC access list while creating the
filter.
seq sequence-number {deny | permit} {any | mac-source-address [mac-source-address-mask]}
[count [byte]] [log] [monitor]
sequence-number

Enter a number between 0 and 65535.

deny

Enter the keyword deny to configure a filter to drop packets
meeting this condition.

permit

Enter the keyword permit to configure a filter to forward
packets meeting this criteria.

Access Control Lists (ACL) | 237

www.dell.com | support.dell.com

Defaults
Command Modes
Command
History

any

Enter the keyword any to filter all packets.

mac-source-address

Enter a MAC address in nn:nn:nn:nn:nn:nn format.

mac-source-address-mask

(OPTIONAL) Specify which bits in the MAC address must
match. If no mask is specified, a mask of 00:00:00:00:00:00 is
applied (in other words, the filter allows only MAC addresses
that match).

count

(OPTIONAL) Enter the keyword count to count packets
processed by the filter.

byte

(OPTIONAL) Enter the keyword byte to count bytes
processed by the filter.

log

(OPTIONAL, E-Series only) Enter the keyword log to log the
packets.

monitor

(OPTIONAL) Enter the keyword monitor when the rule is
describing the traffic that you want to monitor and the ACL in
which you are creating the rule will be applied to the
monitored interface. For details, refer to the section
“Flow-based Monitoring” in the Port Monitoring chapter of
the FTOS Configuration Guide.

Not configured.
CONFIGURATION-MAC ACCESS LIST-STANDARD
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 7.4.1.0

Added monitor option

pre-Version 6.1.1.0

Introduced for E-Series

Note: When ACL logging and byte counters are configured simultaneously, byte
counters may display an incorrect value. Configure packet counters with logging
instead.
Usage
Information

Related
Commands

When you use the log option, the CP processor logs details about the packets that match.
Depending on how many packets match the log entry and at what rate, the CP may become
busy as it has to log these packets’ details.
deny

Configure a filter to drop packets.

permit

Configure a filter to forward packets.

Extended MAC ACL Commands
When an access-list is created without any rule and then applied to an interface, ACL
behavior reflects implicit permit.

238

|

Access Control Lists (ACL)

c and s platforms support Ingress MAC ACLs only.
The following commands configure Extended MAC ACLs.
•
•
•
•

deny
mac access-list extended
permit
seq

Note: Refer also to Commands Common to all ACL Types and Common MAC
Access List Commands.

deny
ces
Syntax

Configure a filter to drop packets that match the filter criteria.
deny {any | host mac-address | mac-source-address mac-source-address-mask} {any | host
mac-address | mac-destination-address mac-destination-address-mask} [ethertype-operator] [count
[byte]] [log] [monitor]

To remove this filter, you have two choices:
•
•

Parameters

Use the no seq sequence-number command syntax if you know the filter’s
sequence number or
Use the no deny {any | host mac-address | mac-source-address
mac-source-address-mask} {any | host mac-address | mac-destination-address
mac-destination-address-mask} command.

any

Enter the keyword any to drop all packets.

host mac-address

Enter the keyword host followed by a MAC address to
drop packets with that host address.

mac-source-address

Enter the source MAC address in nn:nn:nn:nn:nn:nn
format.

mac-source-address-mask

Specify which bits in the MAC address must match.
The MAC ACL supports an inverse mask, therefore, a
mask of ff:ff:ff:ff:ff:ff allows entries that do not match
and a mask of 00:00:00:00:00:00 only allows entries
that match exactly.

mac-destination-address

Enter the destination MAC address and mask in
nn:nn:nn:nn:nn:nn format.

mac-destination-address-mask

Specify which bits in the MAC address must match.
The MAC ACL supports an inverse mask, therefore, a
mask of ff:ff:ff:ff:ff:ff allows entries that do not match
and a mask of 00:00:00:00:00:00 only allows entries
that match exactly.

Access Control Lists (ACL) | 239

www.dell.com | support.dell.com

Defaults
Command Modes
Command
History

ethertype operator

(OPTIONAL) To filter based on protocol type, enter
one of the following Ethertypes:
• ev2 - is the Ethernet II frame format.
• llc - is the IEEE 802.3 frame format.
• snap - is the IEEE 802.3 SNAP frame format.

count

(OPTIONAL) Enter the keyword count to count
packets processed by the filter.

byte

(OPTIONAL) Enter the keyword byte to count bytes
processed by the filter.

log

(OPTIONAL, E-Series only) Enter the keyword log to
log the packets.

monitor

(OPTIONAL) Enter the keyword monitor when the rule
is describing the traffic that you want to monitor and the
ACL in which you are creating the rule will be applied
to the monitored interface. For details, refer to the
section “Flow-based Monitoring” in the Port
Monitoring chapter of the FTOS Configuration Guide.

Not configured.
CONFIGURATION-MAC ACCESS LIST-EXTENDED
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 7.4.1.0

Added monitor option

pre-Version 6.1.1.0

Introduced for E-Series

Note: When ACL logging and byte counters are configured simultaneously, byte
counters may display an incorrect value. Configure packet counters with logging
instead.
Usage
Information

Related
Commands

When you use the log option, CP processor logs details about the packets that match.
Depending on how many packets match the log entry and at what rate, the CP may become
busy as it has to log these packets’ details.
permit

Configure a filter to forward based on MAC addresses.

seq

Configure a filter with specific sequence numbers.

mac access-list extended
ces

Syntax

240

|

Name a new or existing extended MAC access control list (extended MAC ACL).

mac access-list extended access-list-name

Access Control Lists (ACL)

Parameters

Defaults
Command Modes
Command
History

Usage
Information

access-list-name

Enter a text string as the MAC access list name, up to 140 characters.

No default configuration
CONFIGURATION
Version 8.3.10.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names
are up to 16 characters long.

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

The number of entries allowed per ACL is hardware-dependent. Refer to your line card
documentation for detailed specification on entries allowed per ACL.
Prior to 7.8.1.0, names are up to 16 characters long.

Example

FTOS(conf)#mac-access-list access-list extended TestMATExt
FTOS(config-ext-macl)#remark 5 IPv4
FTOS(config-ext-macl)#seq 10 permit any any ev2 eq 800 count bytes
FTOS(config-ext-macl)#remark 15 ARP
FTOS(config-ext-macl)#seq 20 permit any any ev2 eq 806 count bytes
FTOS(config-ext-macl)#remark 25 IPv6
FTOS(config-ext-macl)#seq 30 permit any any ev2 eq 86dd count bytes
FTOS(config-ext-macl)#seq 40 permit any any count bytes
FTOS(config-ext-macl)#exit
FTOS(conf)#do show mac accounting access-list snickers interface g0/47 in
Extended mac access-list snickers on GigabitEthernet 0/47
seq 10 permit any any ev2 eq 800 count bytes (559851886 packets 191402152148 bytes)
seq 20 permit any any ev2 eq 806 count bytes (74481486 packets 5031686754 bytes)
seq 30 permit any any ev2 eq 86dd count bytes (7751519 packets 797843521 bytes)

Related
Commands

mac access-list standard

Configure a standard MAC access list.

show mac accounting access-list

Display MAC access list configurations and counters (if
configured).

permit
ces
Syntax

Configure a filter to pass packets matching the criteria specified.
permit {any | host mac-address | mac-source-address mac-source-address-mask} {any | host
mac-address | mac-destination-address mac-destination-address-mask} [ethertype operator] [count
[byte]] | [log] [monitor]

To remove this filter, you have two choices:

Access Control Lists (ACL) | 241

www.dell.com | support.dell.com

•
•

Parameters

Defaults
Command Modes

242

|

Use the no seq sequence-number command syntax if you know the filter’s
sequence number or
Use the no permit {any | host mac-address | mac-source-address
mac-source-address-mask} {any | mac-destination-address
mac-destination-address-mask} command.

any

Enter the keyword any to forward all packets.

host

Enter the keyword host followed by a MAC address to
forward packets with that host address.

mac-source-address

Enter the source MAC address in nn:nn:nn:nn:nn:nn
format.

mac-source-address-mask

Specify which bits in the MAC address must be
matched.
The MAC ACL supports an inverse mask, therefore, a
mask of ff:ff:ff:ff:ff:ff allows entries that do not match
and a mask of 00:00:00:00:00:00 only allows entries that
match exactly.

mac-destination-address

Enter the destination MAC address and mask in
nn:nn:nn:nn:nn:nn format.

mac-destination-address-mask

Specify which bits in the MAC address must be
matched.
The MAC ACL supports an inverse mask, therefore, a
mask of ff:ff:ff:ff:ff:ff allows entries that do not match
and a mask of 00:00:00:00:00:00 only allows entries that
match exactly.

ethertype operator

(OPTIONAL) To filter based on protocol type, enter one
of the following Ethertypes:
• ev2 - is the Ethernet II frame format.
• llc - is the IEEE 802.3 frame format.
• snap - is the IEEE 802.3 SNAP frame format.

count

(OPTIONAL) Enter the keyword count to count packets
processed by the filter.

byte

(OPTIONAL) Enter the keyword byte to count bytes
processed by the filter.

log

(OPTIONAL, E-Series only) Enter the keyword log to
log the packets.

monitor

(OPTIONAL) Enter the keyword monitor when the rule
is describing the traffic that you want to monitor and the
ACL in which you are creating the rule will be applied to
the monitored interface. For details, refer to the section
“Flow-based Monitoring” in the Port Monitoring chapter
of the FTOS Configuration Guide.

Not configured.
CONFIGURATION-MAC ACCESS LIST-EXTENDED

Access Control Lists (ACL)

Command
History

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 7.4.1.0

Added monitor option

pre-Version 6.1.1.0

Introduced for E-Series

Note: When ACL logging and byte counters are configured simultaneously, byte
counters may display an incorrect value. Configure packet counters with logging
instead.
Usage
Information

Related
Commands

When you use the log option, the CP processor logs details about the packets that match.
Depending on how many packets match the log entry and at what rate, the CP may become
busy as it has to log these packets’ details.
deny

Configure a filter to drop traffic based on the MAC address.

seq

Configure a filter with specific sequence numbers.

seq
ces
Syntax

Parameters

Configure a filter with a specific sequence number.
seq sequence-number {deny | permit} {any | host mac-address | mac-source-address
mac-source-address-mask} {any | host mac-address | mac-destination-address
mac-destination-address-mask} [ethertype operator] [count [byte]] [log] [monitor]
sequence-number

Enter a number as the filter sequence number.
Range: zero (0) to 65535.

deny

Enter the keyword deny to drop any traffic matching this filter.

permit

Enter the keyword permit to forward any traffic matching this
filter.

any

Enter the keyword any to filter all packets.

host mac-address

Enter the keyword host followed by a MAC address to filter
packets with that host address.

mac-source-address

Enter the source MAC address in nn:nn:nn:nn:nn:nn format.
The MAC ACL supports an inverse mask, therefore, a mask of
ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of
00:00:00:00:00:00 only allows entries that match exactly.

mac-source-address-mask

Specify which bits in the MAC address must be matched.

mac-destination-address

Enter the destination MAC address and mask in
nn:nn:nn:nn:nn:nn format.

mac-destination-address-mask

Specify which bits in the MAC address must be matched.
The MAC ACL supports an inverse mask, therefore, a mask of
ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of
00:00:00:00:00:00 only allows entries that match exactly.

Access Control Lists (ACL) | 243

www.dell.com | support.dell.com

Defaults
Command Modes
Command
History

ethertype operator

(OPTIONAL) To filter based on protocol type, enter one of the
following Ethertypes:
• ev2 - is the Ethernet II frame format.
• llc - is the IEEE 802.3 frame format.
• snap - is the IEEE 802.3 SNAP frame format.

count

(OPTIONAL) Enter the keyword count to count packets
processed by the filter.

byte

(OPTIONAL) Enter the keyword byte to count bytes processed
by the filter.

log

(OPTIONAL, E-Series only) Enter the keyword log to log the
packets.

monitor

(OPTIONAL) Enter the keyword monitor when the rule is
describing the traffic that you want to monitor and the ACL in
which you are creating the rule will be applied to the monitored
interface. For details, refer to the section “Flow-based
Monitoring” in the Port Monitoring chapter of the FTOS
Configuration Guide.

Not configured
CONFIGURATION-MAC ACCESS LIST-STANDARD
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 7.4.1.0

Added monitor option

pre-Version 6.1.1.0

Introduced for E-Series

Note: When ACL logging and byte counters are configured simultaneously, byte
counters may display an incorrect value. Configure packet counters with logging
instead.
Usage
Information

Related
Commands

When you use the log option, the CP processor logs details about the packets that match.
Depending on how many packets match the log entry and at what rate, the CP may become
busy as it has to log these packets’ details.
deny

Configure a filter to drop traffic.

permit

Configure a filter to forward traffic.

IP Prefix List Commands
When an access-list is created without any rule and then applied to an interface, ACL
behavior reflects implicit permit.
Use these commands to configure or enable IP prefix lists.

244

|

Access Control Lists (ACL)

•
•
•
•
•
•
•
•

clear ip prefix-list
deny
ip prefix-list
permit
seq
show config
show ip prefix-list detail
show ip prefix-list summary

clear ip prefix-list
ces
Syntax
Parameters

Command Modes
Command
History

Default
Related
Commands

Reset the number of times traffic met the conditions (“hit” counters) of the configured prefix
lists.
clear ip prefix-list [prefix-name]
prefix-name

(OPTIONAL) Enter the name of the configured prefix list to clear only counters
for that prefix list, up to 140 characters long.

EXEC Privilege
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names
are up to 16 characters long.

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Clears “hit” counters for all prefix lists unless a prefix list is specified.
ip prefix-list

Configure a prefix list.

deny
ces
Syntax
Parameters

Configure a filter to drop packets meeting the criteria specified.
deny ip-prefix [ge min-prefix-length] [le max-prefix-length]
ip-prefix

Specify an IP prefix in the network/length format. For example,
35.0.0.0/8 means match the first 8 bits of address 35.0.0.0.

Access Control Lists (ACL) | 245

www.dell.com | support.dell.com

Defaults

ge min-prefix-length

(OPTIONAL) Enter the keyword ge followed by the minimum
prefix length, which is a number from zero (0) to 32.

le max-prefix-length

(OPTIONAL) Enter the keyword le followed by the maximum
prefix length, which is a number from zero (0) to 32.

Not configured.

Command Modes

PREFIX-LIST

Command
History

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Usage
Information

Sequence numbers for this filter are automatically assigned starting at sequence number 5.
If the options ge or le are not used, only packets with an exact match to the prefix are filtered.

Related
Commands

permit

Configure a filter to pass packets.

seq

Configure a drop or permit filter with a specified sequence number.

ip prefix-list
ces

Syntax
Parameters

Command Modes
Command
History

Usage
Information

246

|

Enter the PREFIX-LIST mode and configure a prefix list.

ip prefix-list prefix-name
prefix-name

Enter a string up to 16 characters long as the name of the prefix list, up to 140
characters long.

CONFIGURATION
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names
are up to 16 characters long.

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Prefix lists redistribute OSPF and RIP routes meeting specific criteria. For related RIP
commands supported on C-Series and E-Series, refer to the Routing Information Protocol
(RIP) chapter. For related OSPF commands supported on all three platforms, refer to the
E-Series E-Series FTOS Command Line Reference Guide Open Shortest Path First (OSPFv2)
chapter.

Access Control Lists (ACL)

Prior to 7.8.1.0, names are up to 16 characters long.
Related
Commands

show ip route list

Display IP routes in an IP prefix list.

show ip prefix-list summary

Display a summary of the configured prefix lists.

permit
ces
Syntax
Parameters

Configure a filter that passes packets meeting the criteria specified.
permit ip-prefix [ge min-prefix-length] [le max-prefix-length]
ip-prefix

Specify an IP prefix in the network/length format. For example,
35.0.0.0/8 means match the first 8 bits of address 35.0.0.0.

ge min-prefix-length

(OPTIONAL) Enter the keyword ge followed by the minimum
prefix length, which is a number from zero (0) to 32.

le max-prefix-length

(OPTIONAL) Enter the keyword le followed by the maximum prefix
length, which is a number from zero (0) to 32.

Command Modes

PREFIX-LIST

Command
History

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Usage
Information

Sequence numbers for this filter are automatically assigned starting at sequence number 5.
If the options ge or le are not used, only packets with an exact match to the prefix are filtered.

Related
Commands

deny

Configure a filter to drop packets.

seq

Configure a drop or permit filter with a specified sequence number.

seq
ces
Syntax

Parameters

Assign a sequence number to a deny or permit filter in a prefix list while configuring the
filter.
seq sequence-number {deny | permit} {any} | [ip-prefix /nn {ge min-prefix-length} {le
max-prefix-length}] | [bitmask number]
sequence-number

Enter a number.
Range: 1 to 4294967294.

deny

Enter the keyword deny to configure a filter to drop packets meeting
this condition.

Access Control Lists (ACL) | 247

www.dell.com | support.dell.com

Defaults

permit

Enter the keyword permit to configure a filter to forward packets
meeting this condition.

any

(OPTIONAL) Enter the keyword any to match any packets.

ip-prefix /nn

(OPTIONAL) Specify an IP prefix in the network/length format. For
example, 35.0.0.0/8 means match the first 8 bits of address 35.0.0.0.

ge min-prefix-length

(OPTIONAL) Enter the keyword ge followed by the minimum prefix
length, which is a number from zero (0) to 32.

le max-prefix-length

(OPTIONAL) Enter the keyword le followed by the maximum prefix
length, which is a number from zero (0) to 32.

bitmask number

Enter the keyword bitmask followed by a bit mask number in dotted
decimal format.

Not configured.

Command Modes

PREFIX-LIST

Command
History

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

Version 6.3.1.0

Added bit mask option

Usage
Information

If the options ge or le are not used, only packets with an exact match to the prefix are filtered.

Related
Commands

deny

Configure a filter to drop packets.

permit

Configure a filter to pass packets.

show config
ces
Syntax

Display

the current PREFIX-LIST configurations.

show config

Command Modes

PREFIX-LIST

Command
History

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Example

248

|

Access Control Lists (ACL)

FTOS(conf-nprefixl)#show config
!
ip prefix-list snickers
FTOS(conf-nprefixl)#

show ip prefix-list detail
ces
Syntax
Parameters

Command Modes

Display

details of the configured prefix lists.

show ip prefix-list detail [prefix-name]
prefix-name

(OPTIONAL) Enter a text string as the name of the prefix list, up to 140
characters.

EXEC
EXEC Privilege

Command
History

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names
are up to 16 characters long.

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Example

FTOS#show ip prefix-list detail
Prefix-list with the last deletion/insertion: filter_ospf
ip prefix-list filter_in:
count: 3, range entries: 3, sequences: 5 - 10
seq 5 deny 1.102.0.0/16 le 32 (hit count: 0)
seq 6 deny 2.1.0.0/16 ge 23 (hit count: 0)
seq 10 permit 0.0.0.0/0 le 32 (hit count: 0)
ip prefix-list filter_ospf:
count: 4, range entries: 1, sequences: 5 - 10
seq 5 deny 100.100.1.0/24 (hit count: 5)
seq 6 deny 200.200.1.0/24 (hit count: 1)
seq 7 deny 200.200.2.0/24 (hit count: 1)
seq 10 permit 0.0.0.0/0 le 32 (hit count: 132)
FTOS#

show ip prefix-list summary
ces
Syntax
Parameters

Command Modes

Display a summary of the configured prefix lists.
show ip prefix-list summary [prefix-name]
prefix-name

(OPTIONAL) Enter a text string as the name of the prefix list, up to 140
characters long.

EXEC
EXEC Privilege

Access Control Lists (ACL) | 249

www.dell.com | support.dell.com

Command
History

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names
are up to 16 characters long.

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Example

FTOS#show ip prefix summary
Prefix-list with the last deletion/insertion: test
ip prefix-list test:
count: 3, range entries: 1, sequences: 5 - 15
ip prefix-list test1:
count: 2, range entries: 2, sequences: 5 - 10
ip prefix-list test2:
count: 1, range entries: 1, sequences: 5 - 5
ip prefix-list test3:
count: 1, range entries: 1, sequences: 5 - 5
ip prefix-list test4:
count: 1, range entries: 1, sequences: 5 - 5
ip prefix-list test5:
count: 1, range entries: 1, sequences: 5 - 5
ip prefix-list test6:
count: 1, range entries: 1, sequences: 5 - 5
FTOS#

Route Map Commands
When an access-list is created without any rule and then applied to an interface, ACL
behavior reflects implicit permit.
The following commands allow you to configure route maps and their redistribution criteria.
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

250

|

Access Control Lists (ACL)

continue
description
match as-path
match community
match interface
match ip address
match ip next-hop
match ip route-source
match metric
match origin
match route-type
match tag
route-map
set as-path
set automatic-tag

•
•
•
•
•
•
•
•
•
•
•
•

set comm-list delete
set community
set level
set local-preference
set metric
set metric-type
set next-hop
set origin
set tag
set weight
show config
show route-map

continue
ces
Syntax
Parameters

Defaults

Configure a route-map to go to a route-map entry with a higher sequence number.
continue [sequence-number]
sequence-number

(OPTIONAL) Enter the route map sequence number.
Range: 1 - 65535
Default: no sequence number

Not Configured

Command Modes

ROUTE-MAP

Command
History

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 7.4.1.0

Introduced

Usage
Information

The continue feature allows movement from one route-map entry to a specific route-map
entry (the sequence number). If the sequence number is not specified, the continue feature
simply moves to the next sequence number (also known as an implied continue). If a match
clause exists, the continue feature executes only after a successful match occurs. If there are
no successful matches, continue is ignored.

Match clause with Continue clause
The continue feature can exist without a match clause. A continue clause without a match
clause executes and jumps to the specified route-map entry.

Access Control Lists (ACL) | 251

www.dell.com | support.dell.com

With a match clause and a continue clause, the match clause executes first and the continue
clause next in a specified route map entry. The continue clause launches only after a
successful match. The behavior is:
•

•
•

A successful match with a continue clause, the route map executes the set clauses
and then goes to the specified route map entry upon execution of the continue
clause.
If the next route map entry contains a continue clause, the route map will execute
the continue clause if a successful match occurs.
If the next route map entry does not contain a continue clause, the route map
evaluates normally. If a match does not does not occur, the route map does not
continue and will fall through to the next sequence number, if one exists.

Set clause with Continue clause
If the route-map entry contains sets with the continue clause, then set actions is performed
first followed by the continue clause jump to the specified route map entry.
•

•
Related
Commands

If a set actions occurs in the first route map entry and then the same set action
occurs with a different value in a subsequent route map entry, the last set of
actions overrides the previous set of actions with the same set command.
If set community additive and set as-path prepend are configure, the communities
and AS numbers are pre-pended.

set community

Specify a COMMUNITY attribute

set as-path

Configure a filter to modify the AS path

description
ces
Syntax
Parameters

Defaults

description {description}
description

Enter a description to identify the route map (80 characters maximum).

No default behavior or values

Command Modes

ROUTE-MAP

Command
History

Version 8.1.1.0

Introduced on E-Series ExaScale

pre-Version 7.7.1.0

Introduced

Related
Commands

252

Add a description to this route map.

|

route-map

Access Control Lists (ACL)

Enable a route map

match as-path
ces
Syntax
Parameters

Defaults

Configure a filter to match routes that have a certain AS number in their BGP path.
match as-path as-path-name
as-path-name

Enter the name of an established AS-PATH ACL, up to 140 characters.

Not configured.

Command Modes

ROUTE-MAP

Command
History

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names
are up to 16 characters long.

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Related
Commands

set as-path

Add information to the BGP AS_PATH attribute.

match community
ces
Syntax
Parameters

Defaults

Configure a filter to match routes that have a certain COMMUNITY attribute in their BGP
path.
match community community-list-name [exact]
community-list-name

Enter the name of a configured community list.

exact

(OPTIONAL) Enter the keywords exact to process only those routes
with this community list name.

Not configured.

Command Modes

ROUTE-MAP

Command
History

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Related
Commands

ip community-list

Configure an Community Access list.

set community

Specify a COMMUNITY attribute.

neighbor send-community

Send COMMUNITY attribute to peer or peer group.

Access Control Lists (ACL) | 253

www.dell.com | support.dell.com

match interface
ces
Syntax

Configure a filter to match routes whose next hop is on the interface specified.
match interface interface

To remove a match, use the no match interface interface command.
Parameters

Defaults

interface

Enter the following keywords and slot/port or number information:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/
port information.
• For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the
slot/port information.
• For the loopback interface, enter the keyword loopback followed by a number from
zero (0) to 16383.
• For a Port Channel interface, enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a SONET interface, enter the keyword sonet followed by the slot/port
information.
• For a Ten Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by the
slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to 4094, 1-2094
for ExaScale (can used IDs 1-4094).

Not configured

Command Modes

ROUTE-MAP

Command
History

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Related
Commands

match ip address

Redistribute routes that match an IP address.

match ip next-hop

Redistribute routes that match the next-hop IP address.

match ip route-source

Redistribute routes that match routes advertised by other routers.

match metric

Redistribute routes that match a specific metric.

match route-type

Redistribute routes that match a route type.

match tag

Redistribute routes that match a specific tag.

match ip address
ces

254

|

Configure a filter to match routes based on IP addresses specified in an access list.

Access Control Lists (ACL)

Syntax
Parameters

Defaults

match ip address prefix-list-name
prefix-list-name

Enter the name of configured prefix list, up to 140 characters.

Not configured.

Command Modes

ROUTE-MAP

Command
History

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names
are up to 16 characters long.

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Related
Commands

match interface

Redistribute routes that match the next-hop interface.

match ip next-hop

Redistribute routes that match the next-hop IP address.

match ip route-source

Redistribute routes that match routes advertised by other routers.

match metric

Redistribute routes that match a specific metric.

match route-type

Redistribute routes that match a route type.

match tag

Redistribute routes that match a specific tag.

match ip next-hop
ces
Syntax
Parameters

Defaults

Configure a filter to match based on the next-hop IP addresses specified in an IP access list or
IP prefix list.
match ip next-hop {access-list | prefix-list prefix-list-name}
access-list-name

Enter the name of a configured IP access list, up to 140 characters.

prefix-list prefix-list-name

Enter the keywords prefix-list followed by the name of configured
prefix list.

Not configured.

Command Modes

ROUTE-MAP

Command
History

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names
are up to 16 characters long.

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Access Control Lists (ACL) | 255

www.dell.com | support.dell.com

Related
Commands

match interface

Redistribute routes that match the next-hop interface.

match ip address

Redistribute routes that match an IP address.

match ip route-source

Redistribute routes that match routes advertised by other routers.

match metric

Redistribute routes that match a specific metric.

match route-type

Redistribute routes that match a route type.

match tag

Redistribute routes that match a specific tag.

match ip route-source
ces
Syntax
Parameters

Configure a filter to match based on the routes advertised by routes specified in IP access lists
or IP prefix lists.
match ip route-source {access-list | prefix-list prefix-list-name}
access-list-name

Enter the name of a configured IP access list, up to 140 characters.

prefix-list

Enter the keywords prefix-list followed by the name of configured
prefix list, up 10 140 characters.

prefix-list-name
Defaults

Not configured.

Command Modes

ROUTE-MAP

Command
History

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names
are up to 16 characters long.

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Related
Commands

match interface

Redistribute routes that match the next-hop interface.

match ip address

Redistribute routes that match an IP address.

match ip next-hop

Redistribute routes that match the next-hop IP address.

match metric

Redistribute routes that match a specific metric.

match route-type

Redistribute routes that match a route type.

match tag

Redistribute routes that match a specific tag.

match metric
ces
Syntax

256

|

Configure a filter to match on a specified value.
match metric metric-value

Access Control Lists (ACL)

Parameters

Defaults

metric-value

Enter a value to match.
Range: zero (0) to 4294967295.

Not configured.

Command Modes

ROUTE-MAP

Command
History

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Related
Commands

match interface

Redistribute routes that match the next-hop interface.

match ip address

Redistribute routes that match an IP address.

match ip next-hop

Redistribute routes that match the next-hop IP address.

match ip route-source

Redistribute routes that match routes advertised by other routers.

match route-type

Redistribute routes that match a route type.

match tag

Redistribute routes that match a specific tag.

match origin
ces
Syntax
Parameters

Defaults

Configure a filter to match routes based on the value found in the BGP path ORIGIN
attribute.
match origin {egp | igp | incomplete}
egp

Enter the keyword egp to match routes originating outside the AS.

igp

Enter the keyword igp to match routes originating within the same AS.

incomplete

Enter the keyword incomplete to match routes with incomplete routing
information.

Not configured.

Command Modes

ROUTE-MAP

Command
History

Version 8.1.1.0

Introduced on E-Series ExaScale

pre-Version 6.1.1.0

Introduced for E-Series

match route-type
ces

Configure a filter to match routes based on the how the route is defined.

Access Control Lists (ACL) | 257

www.dell.com | support.dell.com

Syntax
Parameters

Defaults

match route-type {external [type-1 | type-2] | internal | level-1 | level-2 | local}
external [type-1| type-2]

Enter the keyword external followed by either type-1 or type-2 to
match only on OSPF Type 1 routes or OSPF Type 2 routes.

internal

Enter the keyword internal to match only on routes generated
within OSPF areas.

level-1

Enter the keyword level-1 to match IS-IS Level 1 routes.

level-2

Enter the keyword level-2 to match IS-IS Level 2 routes.

local

Enter the keyword local to match only on routes generated
within the switch.

Not configured.

Command Modes

ROUTE-MAP

Command
History

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Related
Commands

match interface

Redistribute routes that match the next-hop interface.

match ip address

Redistribute routes that match an IP address.

match ip next-hop

Redistribute routes that match the next-hop IP address.

match ip route-source

Redistribute routes that match routes advertised by other routers.

match metric

Redistribute routes that match a specific metric.

match tag

Redistribute routes that match a tag.

match tag
ces

Syntax
Parameters

Defaults
Command Modes

258

|

Configure a filter to redistribute only routes that match a specified tag value.

match tag tag-value
tag-value

Not configured
ROUTE-MAP

Access Control Lists (ACL)

Enter a value as the tag on which to match.
Range: zero (0) to 4294967295.

Command
History

Related
Commands

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

match interface

Redistribute routes that match the next-hop interface.

match ip address

Redistribute routes that match an IP address.

match ip next-hop

Redistribute routes that match the next-hop IP address.

match ip route-source

Redistribute routes that match routes advertised by other routers.

match metric

Redistribute routes that match a specific metric.

match route-type

Redistribute routes that match a route type.

route-map
ces

Syntax
Parameters

Defaults

Enable a route map statement and configure its action and sequence number. This command
also places you in the ROUTE-MAP mode.
route-map map-name [permit | deny] [sequence-number]
map-name

Enter a text string of up to 140 characters to name the route map for easy
identification.

permit

(OPTIONAL) Enter the keyword permit to set the route map default as
permit.
If no keyword is specified, the default is permit.

deny

(OPTIONAL) Enter the keyword deny to set the route map default as
deny.

sequence-number

(OPTIONAL) Enter a number to identify the route map for editing and
sequencing with other route maps. You are prompted for a sequence
number if there are multiple instances of the route map.
Range: 1 to 65535.

Not configured
If no keyword (permit or deny) is defined for the route map, the permit action is the default.

Command Modes
Command
History

CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names
are up to 16 characters long.

Version 7.6.1.0

Support added for S-Series

Access Control Lists (ACL) | 259

www.dell.com | support.dell.com

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

\

Example
Usage
Information

FTOS(conf)#route-map dempsey
FTOS(config-route-map)#

Use caution when you delete route maps because if you do not specify a sequence number, all
route maps with the same map-name are deleted when you use no route-map map-name
command.
Prior to 7.8.1.0, names are up to 16 characters long.

Related
Commands

show config

Display the current configuration.

set as-path
ces

Syntax
Parameters

Defaults

Configure a filter to modify the AS path for BGP routes.

set as-path prepend as-number [... as-number]
prepend as-number

Enter the keyword prepend followed by up to eight AS numbers to be
inserted into the BGP path information.
Range: 1 to 65535

Not configured

Command Modes

ROUTE-MAP

Command
History

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Usage
Information

You can prepend up to eight AS numbers to a BGP route.
This command influences best path selection in BGP by inserting a tag or AS number into the
AS_PATH attribute.

Related
Commands

260

|

match as-path

Redistribute routes that match an AS-PATH attribute.

ip as-path access-list

Configure an AS-PATH access list.

neighbor filter-list

Configure a BGP filter based on the AS-PATH attribute.

show ip community-lists

Display configured IP Community access lists.

Access Control Lists (ACL)

set automatic-tag
ces

Syntax

Configure a filter to automatically compute the tag value of the route.

set automatic-tag

To return to the default, enter no set automatic-tag.
Defaults

Not configured.

Command Modes

ROUTE-MAP

Command
History

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Related
Commands

set level

Specify the OSPF area for route redistribution.

set metric

Specify the metric value assigned to redistributed routes.

set metric-type

Specify the metric type assigned to redistributed routes.

set tag

Specify the tag assigned to redistributed routes.

set comm-list delete
ces

Syntax
Parameters

Defaults

Configure a filter to remove the specified community list from the BGP route’s
COMMUNITY attribute.
set comm-list community-list-name delete
community-list-name

Enter the name of an established Community list, up to 140 characters.

Not configured.

Command Modes

ROUTE-MAP

Command
History

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names
are up to 16 characters long.

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Access Control Lists (ACL) | 261

www.dell.com | support.dell.com

Usage
Information

The community list used in the set comm-list delete command must be configured so that each
filter contains only one community. For example, the filter deny 100:12 is acceptable, but
the filter deny 120:13 140:33 results in an error.
If the set comm-list delete command and the set community command are configured in the
same route map sequence, then the deletion command (set comm-list delete) is processed
before the insertion command (set community).
Prior to 7.8.1.0, names are up to 16 characters long.

Related
Commands

ip community-list

Configure community access list.

match community

Redistribute routes that match the COMMUNITY attribute.

set community

Specify a COMMUNITY attribute.

set community
ces

Syntax

Allows you to assign a BGP COMMUNITY attribute.

set community {community-number | local-as | no-advertise | no-export | none} [additive]

To delete a BGP COMMUNITY attribute assignment, use the no set community
{community-number | local-as | no-advertise | no-export | none} command.
Parameters

Defaults
Command Modes

262

|

community-number

Enter the community number in AA:NN format where AA is the AS number
(2 bytes) and NN is a value specific to that autonomous system.

local-AS

Enter the keywords local-AS to drop all routes with the COMMUNITY
attribute of NO_EXPORT_SUBCONFED.
All routes with the NO_EXPORT_SUBCONFED (0xFFFFFF03)
community attribute must not be advertised to external BGP peers.

no-advertise

Enter the keywords no-advertise to drop all routes containing the
well-known community attribute of NO_ADVERTISE.
All routes with the NO_ADVERTISE (0xFFFFFF02) community attribute
must not be advertised to other BGP peers.

no-export

Enter the keywords no-export to drop all routes containing the well-known
community attribute of NO_EXPORT.
All routes with the NO_EXPORT (0xFFFFFF01) community attribute must
not be advertised outside a BGP confederation boundary.

none

Enter the keywords none to remove the community attribute from routes
meeting the route map criteria.

additive

(OPTIONAL) Enter the keyword additive add the communities to already
existing communities.

Not configured
ROUTE-MAP

Access Control Lists (ACL)

Command
History

Related
Commands

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

ip community-list

Configure a Community access list.

match community

Redistribute routes that match a BGP COMMUNITY attribute.

neighbor send-community

Assign the COMMUNITY attribute.

show ip bgp community

Display BGP community groups.

show ip community-lists

Display configured Community access lists.

set level
ces

Syntax
Parameters

Defaults

Configure a filter to specify the IS-IS level or OSPF area to which matched routes are
redistributed.
set level {backbone | level-1 | level-1-2 | level-2 | stub-area}
backbone

Enter the keyword backbone to redistribute matched routes to the OSPF
backbone area (area 0.0.0.0).

level-1

Enter the keyword level-1 to redistribute matched routes to IS-IS Level 1.

level-1-2

Enter the keyword level-1-2 to redistribute matched routes to IS-IS Level 1 and
Level 2.

level-2

Enter the keyword level-2 to redistribute matched routes to IS-IS Level 2.

stub-area

Enter the keyword stub to redistributed matched routes to OSPF stub areas.

Not configured.

Command Modes

ROUTE-MAP

Command
History

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Related
Commands

set automatic-tag

Compute the tag value of the route.

set metric

Specify the metric value assigned to redistributed routes.

set metric-type

Specify the metric type assigned to redistributed routes.

set tag

Specify the tag assigned to redistributed routes.

Access Control Lists (ACL) | 263

www.dell.com | support.dell.com

set local-preference
ces

Syntax
Parameters

Defaults

Configure a filter to set the BGP LOCAL_PREF attribute for routers within the local
autonomous system.
set local-preference value
value

Enter a number as the LOCAL_PREF attribute value.
Range: 0 to 4294967295

Not configured

Command Modes

ROUTE-MAP

Command
History

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Usage
Information

Related
Commands

The set local-preference command changes the LOCAL_PREF attribute for routes meeting
the route map criteria. To change the LOCAL_PREF for all routes, use the bgp default
local-preference command.
bgp default local-preference

Change default LOCAL_PREF attribute for all routes.

set metric
ces

Syntax

Configure a filter to assign a new metric to redistributed routes.

set metric [+ | -] metric-value

To delete a setting, enter no set metric.
Parameters

+

(OPTIONAL) Enter + to add a metric-value to the redistributed routes.

-

(OPTIONAL) Enter - to subtract a metric-value from the redistributed routes.

metric-value

Defaults
Command Modes

264

|

Not configured
ROUTE-MAP

Access Control Lists (ACL)

Enter a number as the new metric value.
Range: zero (0) to 4294967295

Command
History

Related
Commands

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

set automatic-tag

Compute the tag value of the route.

set level

Specify the OSPF area for route redistribution.

set metric-type

Specify the route type assigned to redistributed routes.

set tag

Specify the tag assigned to redistributed routes.

set metric-type
ces

Syntax
Parameters

Defaults

Configure a filter to assign a new route type for routes redistributed to OSPF.

set metric-type {internal | external | type-1 | type-2}
internal

Enter the keyword internal to assign the Interior Gateway Protocol metric of the
next hop as the route’s BGP MULTI_EXIT_DES (MED) value.

external

Enter the keyword external to assign the IS-IS external metric.

type-1

Enter the keyword type-1 to assign the OSPF Type 1 metric.

type-2

Enter the keyword type-2 to assign the OSPF Type 2 metric.

Not configured.

Command Modes

ROUTE-MAP

Command
History

Version 8.3.7.0

Introduced on S4810

Version 8.3.1.0

Implemented internal keyword

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

set automatic-tag

Compute the tag value of the route.

set level

Specify the OSPF area for route redistribution.

set metric

Specify the metric value assigned to redistributed routes.

set tag

Specify the tag assigned to redistributed routes.

Related
Commands

Access Control Lists (ACL) | 265

www.dell.com | support.dell.com

set next-hop
ces

Syntax
Parameters

Defaults

Configure a filter to specify an IP address as the next hop.

set next-hop ip-address
ip-address

Specify an IP address in dotted decimal format.

Not configured.

Command Modes

ROUTE-MAP

Command
History

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Usage
Information

If the set next-hop command is configured, its configuration takes precedence over the
neighbor next-hop-self command in the ROUTER BGP mode.
If you configure the set next-hop command with the interface’s (either Loopback or physical)
IP address, the software declares the route unreachable.

Related
Commands

match ip next-hop

Redistribute routes that match the next-hop IP address.

neighbor next-hop-self

Configure the routers as the next hop for a BGP neighbor.

set origin
ces

Syntax
Parameters

Defaults
Command Modes

266

|

Configure a filter to manipulate the BGP ORIGIN attribute.

set origin {igp | egp | incomplete}
egp

Enter the keyword egp to set routes originating from outside the local AS.

igp

Enter the keyword igp to set routes originating within the same AS.

incomplete

Enter the keyword incomplete to set routes with incomplete routing
information.

Not configured.
ROUTE-MAP

Access Control Lists (ACL)

Command
History

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

set tag
ces

Syntax
Parameters

Defaults

Configure a filter to specify a tag for redistributed routes.

set tag tag-value
tag-value

Enter a number as the tag.
Range: zero (0) to 4294967295.

Not configured

Command Modes

ROUTE-MAP

Command
History

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

set automatic-tag

Compute the tag value of the route.

set level

Specify the OSPF area for route redistribution.

set metric

Specify the metric value assigned to redistributed routes.

set metric-type

Specify the route type assigned to redistributed routes.

Related
Commands

set weight
ces

Syntax

Configure a filter to add a non-RFC compliant attribute to the BGP route to assist with route
selection.
set weight weight

Access Control Lists (ACL) | 267

www.dell.com | support.dell.com

Parameters

Defaults

weight

Enter a number as the weight to be used by the route meeting the route map
specification.
Routes with a higher weight are preferred when there are multiple routes to the
same destination.
Range: 0 to 65535
Default: router-originated = 32768; all other routes = 0

router-originated = 32768; all other routes = 0

Command Modes

ROUTE-MAP

Command
History

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Usage
Information

If you do not use the set weight command, router-originated paths have a weight attribute of
32768 and all other paths have a weight attribute of zero.

show config
ces

Syntax

Display

the current route map configuration.

show config

Command Modes

ROUTE-MAP

Command
History

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Example

FTOS(config-route-map)#show config
!
route-map hopper permit 10
FTOS(config-route-map)#

show route-map
ces

Syntax

268

|

Display

the current route map configurations.

show route-map [map-name]

Access Control Lists (ACL)

Parameters

Command Modes

map-name

(OPTIONAL) Enter the name of a configured route map, up to 140 characters.

EXEC
EXEC Privilege

Command
History

Example

Related
Commands

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names
are up to 16 characters long.

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

FTOS#show route-map
route-map firpo, permit, sequence 10
Match clauses:
Set clauses:
tag 34
FTOS#

route-map

Configure a route map.

AS-Path Commands
This feature is supported on E-Series only, as indicated by this character under each command
heading: e
The following commands configure AS-Path ACLs.
•
•
•
•
•

deny
ip as-path access-list
permit
show config
show ip as-path-access-lists

deny
e
Syntax

Create a filter to drop routes that match the route’s AS-PATH attribute. Use regular
expressions to identify which routes are affected by the filter.
deny as-regular-expression

Access Control Lists (ACL) | 269

www.dell.com | support.dell.com

Parameters

as-regular-expression

Defaults

Not configured

Command Modes

AS-PATH ACL

Usage
Information
Command
History

Enter a regular expression to match BGP AS-PATH attributes.
Use one or a combination of the following:
• . = (period) matches on any single character, including white space
• * = (asterisk) matches on sequences in a pattern (zero or more
sequences)
• + = (plus sign) matches on sequences in a pattern (one or more
sequences)
• ? = (question mark) matches sequences in a pattern (0 or 1
sequences). You must enter an escape sequence (CNTL+v) prior
to entering the ? regular expression.
• [ ] = (brackets) matches a range of single-character patterns.
• ^ = (caret) matches the beginning of the input string. (If the caret is
used at the beginning of a sequence or range, it matches on everything
BUT the characters specified.)
• $ = (dollar sign) matches the end of the output string.
• _ = (underscore) matches a comma (,), left brace ({), right brace (}),
left parenthesis, right parenthesis, the beginning of the input string,
the end of the input string, or a space.
• | = (pipe) matches either character.

The regular expression must match part of the ASCII-text in the AS-PATH attribute of the
BGP route.
Version 8.1.1.0

Introduced on E-Series ExaScale

pre-Version 6.1.1.0

Introduced for E-Series

ip as-path access-list
Enter the AS-PATH ACL mode and configure an access control list based on the BGP
AS_PATH attribute.

e
Syntax
Parameters

Defaults
Command Modes

ip as-path access-list as-path-name
as-path-name

Not configured
CONFIGURATION

Example
Usage
Information

270

|

Enter the access-list name, up to 140 characters.

FTOS(conf)#ip as-path access-list TestPath
FTOS(config-as-path)#

Use the match as-path or neighbor filter-list commands to apply the AS-PATH ACL to BGP
routes.

Access Control Lists (ACL)

Command
History

Related
Commands

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names
are up to 16 characters long.

pre-Version 6.1.1.0

Introduced for E-Series

match as-path

Match on routes contain a specific AS-PATH.

neighbor filter-list

Configure filter based on AS-PATH information.

permit
e
Syntax

Create a filter to forward BGP routes that match the route’s AS-PATH attributes. Use regular
expressions to identify which routes are affected by this filter.
permit as-regular-expression

Parameters

as-regular-expression

Enter a regular expression to match BGP AS-PATH attributes.
Use one or a combination of the following:
• . = (period) matches on any single character, including white space
• * = (asterisk) matches on sequences in a pattern (zero or more
sequences)
• + = (plus sign) matches on sequences in a pattern (one or more
sequences)
• ? = (question mark) matches sequences in a pattern (0 or 1 sequences).
You must enter an escape sequence (CNTL+v) prior to entering
the ? regular expression.
• [ ] = (brackets) matches a range of single-character patterns.
• ^ = (caret) matches the beginning of the input string. (If the caret is
used at the beginning of a sequence or range, it matches on everything
BUT the characters specified.)
• $ = (dollar sign) matches the end of the output string.
• _ = (underscore) matches a comma (,), left brace ({), right brace (}),
left parenthesis, right parenthesis, the beginning of the input string, the
end of the input string, or a space.
• | = (pipe) matches either character.

Defaults

Not configured

Command Modes

AS-PATH ACL

Command
History

Version 8.1.1.0

Introduced on E-Series ExaScale

pre-Version 6.1.1.0

Introduced for E-Series

show config
e
Syntax

Display

the current configuration.

show config

Access Control Lists (ACL) | 271

www.dell.com | support.dell.com

Command Mode

AS-PATH ACL

Command
History

Version 8.1.1.0

Introduced on E-Series ExaScale

pre-Version 6.1.1.0

Introduced for E-Series

Example

FTOS(config-as-path)#show config
!
ip as-path access-list snickers
deny .3
FTOS(config-as-path)#

show ip as-path-access-lists
e

Display
Syntax

Command Modes

the all AS-PATH access lists configured on the E-Series.

show ip as-path-access-lists

EXEC
EXEC Privilege

Command
History

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

pre-Version 6.1.1.0

Introduced for E-Series

Example

FTOS#show ip as-path-access-lists
ip as-path access-list 1
permit ^$
permit ^\(.*\)$
deny .*
ip as-path access-list 91
permit ^$
deny .*
permit ^\(.*\)$
FTOS#

IP Community List Commands
IP Community List commands are supported on E-Series only, as indicated by this character
under each command heading: e
The commands in this section are.
•
•
•
•
•

272

|

Access Control Lists (ACL)

deny
ip community-list
permit
show config
show ip community-lists

deny
e
Syntax

Parameters

Create a filter to drop routes matching a BGP COMMUNITY number.
deny {community-number | local-AS | no-advertise | no-export | quote-regexp
regular-expressions-list | regexp regular-expression}
community-number

Enter the community number in AA:NN format where AA is the AS number
(2 bytes) and NN is a value specific to that autonomous system.

local-AS

Enter the keywords local-AS to drop all routes with the COMMUNITY
attribute of NO_EXPORT_SUBCONFED.
All routes with the NO_EXPORT_SUBCONFED (0xFFFFFF03)
community attribute must not be advertised to external BGP peers.

no-advertise

Enter the keywords no-advertise to drop all routes containing the
well-known community attribute of NO_ADVERTISE.
All routes with the NO_ADVERTISE (0xFFFFFF02) community attribute
must not be advertised to other BGP peers.

no-export

Enter the keywords no-export to drop all routes containing the well-known
community attribute of NO_EXPORT.
All routes with the NO_EXPORT (0xFFFFFF01) community attribute must
not be advertised outside a BGP confederation boundary.

regexp

Enter the keyword regexp followed by a regular expression. Use one or a
combination of the following:
• . = (period) matches on any single character, including white space
• * = (asterisk) matches on sequences in a pattern (zero or more sequences)
• + = (plus sign) matches on sequences in a pattern (one or more
sequences)
• ? = (question mark) matches sequences in a pattern (0 or 1 sequences).
You must enter an escape sequence (CNTL+v) prior to entering the ?
regular expression.
• [ ] = (brackets) matches a range of single-character patterns.
• ^ = (caret) matches the beginning of the input string. (If the caret is used
at the beginning of a sequence or range, it matches on everything BUT
the characters specified.)
• $ = (dollar sign) matches the end of the output string.
• _ = (underscore) matches a comma (,), left brace ({), right brace (}), left
parenthesis, right parenthesis, the beginning of the input string, the end of
the input string, or a space.
• | = (pipe) matches either character.

regular-expression

Defaults
Command Modes
Command
History

Not configured.
COMMUNITY-LIST
Version 8.1.1.0

Introduced on E-Series ExaScale

pre-Version 6.1.1.0

Introduced for E-Series

ip community-list
e

Enter COMMUNITY-LIST mode and create an IP community-list for BGP.

Access Control Lists (ACL) | 273

www.dell.com | support.dell.com

Syntax

ip community-list comm-list-name

To delete a community-list, use the no ip community-list comm-list-name command.
Parameters

Command Modes

comm-list-name

CONFIGURATION

Example
Command
History

Enter a text string as the name of the community-list, up to 140 characters.

FTOS(conf)#ip community-list TestComList
FTOS(config-community-list)#

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names
are up to 16 characters long.

pre-Version 6.1.1.0

Introduced for E-Series

permit
e
Syntax

Parameters

274

|

Configure a filter to forward routes that match the route’s COMMUNITY attribute.
permit {community-number | local-AS | no-advertise | no-export | quote-regexp
regular-expressions-list | regexp regular-expression}
community-number

Enter the community number in AA:NN format where AA is the AS number
(2 bytes) and NN is a value specific to that autonomous system.

local-AS

Enter the keywords local-AS to drop all routes with the COMMUNITY
attribute of NO_EXPORT_SUBCONFED.
All routes with the NO_EXPORT_SUBCONFED (0xFFFFFF03)
community attribute must not be advertised to external BGP peers.

no-advertise

Enter the keywords no-advertise to drop all routes containing the
well-known community attribute of NO_ADVERTISE.
All routes with the NO_ADVERTISE (0xFFFFFF02) community attribute
must not be advertised to other BGP peers.

Access Control Lists (ACL)

no-export

Enter the keywords no-export to drop all routes containing the well-known
community attribute of NO_EXPORT.
All routes with the NO_EXPORT (0xFFFFFF01) community attribute must
not be advertised outside a BGP confederation boundary.

regexp

Enter the keyword regexp followed by a regular expression. Use one or a
combination of the following:
• . = (period) matches on any single character, including white space
• * = (asterisk) matches on sequences in a pattern (zero or more sequences)
• + = (plus sign) matches on sequences in a pattern (one or more
sequences)
• ? = (question mark) matches sequences in a pattern (0 or 1 sequences).
You must enter an escape sequence (CNTL+v) prior to entering the ?
regular expression.
• [ ] = (brackets) matches a range of single-character patterns.
• ^ = (caret) matches the beginning of the input string. (If the caret is used
at the beginning of a sequence or range, it matches on everything BUT
the characters specified.)
• $ = (dollar sign) matches the end of the output string.
• _ = (underscore) matches a comma (,), left brace ({), right brace (}), left
parenthesis, right parenthesis, the beginning of the input string, the end
of the input string, or a space.
• | = (pipe) matches either character.

regular-expression

Defaults
Command Modes

Not configured
COMMUNITY-LIST

Command
History

Version 8.1.1.0

Introduced on E-Series ExaScale

pre-Version 6.1.1.0

Introduced for E-Series

show config
e
Syntax
Command Mode
Command
History

Example

Display

the non-default information in the current configuration.

show config

COMMUNITY-LIST
Version 8.1.1.0

Introduced on E-Series ExaScale

pre-Version 6.1.1.0

Introduced for E-Series

FTOS(config-std-community-list)#show config
!
ip community-list standard patches
deny 45:1
permit no-export
FTOS(config-std-community-list)#

Access Control Lists (ACL) | 275

www.dell.com | support.dell.com

show ip community-lists
e

Display
Syntax

Parameters

Command Modes

configured IP community lists in alphabetic order.

show ip community-lists [name]
name

EXEC
EXEC Privilege

Command
History

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names
are up to 16 characters long.

pre-Version 6.1.1.0

Introduced for E-Series

Example

276

(OPTIONAL) Enter the name of the o or extended IP community list, up to 140
characters.

|

Access Control Lists (ACL)

FTOS#show ip community-lists
ip community-list standard 1
deny 701:20
deny 702:20
deny 703:20
deny 704:20
deny 705:20
deny 14551:20
deny 701:112
deny 702:112
deny 703:112
deny 704:112
deny 705:112
deny 14551:112
deny 701:666
deny 702:666
deny 703:666
deny 704:666
deny 705:666
deny 14551:666
FTOS#

8
Bidirectional Forwarding Detection
(BFD)
Overview
Bidirectional Forwarding Detection (BFD) is a detection protocol that provides fast
forwarding path failure detection. The FTOS implementation is based on the standards
specified in the IETF Draft draft-ietf-bfd-base-03 and supports BFD on all Layer 3 physical
interfaces including VLAN interfaces and port-channels.
BFD is supported on the C-Series c, E-Series e and
characters that appear under each of the command headings.

as indicated by the

Commands
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

bfd all-neighbors
bfd disable
bfd enable (Configuration)
bfd enable (Interface)
bfd interval
bfd neighbor
bfd protocol-liveness
clear bfd counters
debug bfd
ip route bfd
ip ospf bfd all-neighbors
isis bfd all-neighbors
neighbor bfd
neighbor bfd disable
show bfd counters
show bfd neighbors
vrrp bfd

Bidirectional Forwarding Detection (BFD) | 277

www.dell.com | support.dell.com

bfd all-neighbors
Enable BFD sessions with all neighbors discovered by Layer 3 protocols IS-IS, OSPF, or
BGP on router interfaces, and (optionally) reconfigure the default timer values.

ce
Syntax
Parameters

Defaults
Command Modes

bfd all-neighbors [interval interval min_rx min_rx multiplier value role {active | passive}]
interval milliseconds

(OPTIONAL) Enter this keyword to specify non-default BFD
session parameters beginning with the transmission interval.
Range: 50 to 1000
Default: 100

min_rx milliseconds

Enter this keyword to specify the minimum rate at which the local
system would like to receive control packets from the remote system.
Range: 50 to 100
Default: 100

multiplier value

Enter this keyword to specify the number of packets that must be
missed in order to declare a session down.
Range: 3 to 50
Default: 3

role [active | passive]

Enter the role that the local system assumes:
• Active—The active system initiates the BFD session. Both
systems can be active for the same session.
• Passive—The passive system does not initiate a session. It only
responds to a request for session initialization from the active
system.
Default: Active

Parameters
ROUTER OSPF
ROUTER BGP
ROUTER ISIS (Not available on C-Series)

Command
History

278

|

Version 8.3.8.0

BFD for BGP was introduced on the S4810.

Version 8.4.1.3

BFD for BGP was introduced on the E-Series ExaScale.

Version 8.2.1.0

BFD for OSPF and ISIS introduced on the E-Series ExaScale.

Version 7.6.1.0

BFD for OSPF introduced on the C-Series.

Version 7.5.1.0

BFD for ISIS introduced on the E-Series.

Version 7.4.1.0

BFD for OSPF introduced on the E-Series.

Bidirectional Forwarding Detection (BFD)

Usage
Information

All neighbors inherit the timer values configured with the bfd all-neighbors command except
in the following cases:
•

•

Related
Commands

Timer values configured with the isis bfd all-neighbors or ip ospf bfd
all-neighbors commands in INTERFACE mode override timer values configured
with the bfd all-neighbors command. Likewise, using the no bfd all-neighbors
command does not disable BFD on an interface if BFD is explicitly enabled
using the command isis bfd all-neighbors.
Neighbors that have been explicitly enabled or disabled for a BFD session with
the bfd neighbor or neighbor bfd disable commands in ROUTER BGP mode do
not inherit the global BFD enable/disable values configured with the bfd
all-neighbors command or configured for the peer group to which a neighbor
belongs. The neighbors inherit only the global timer values (configured with the
bfd all-neighbors command).

show bfd neighbors

Display BFD neighbor information on all interfaces or a specified
interface.

bfd neighbor

Explicitly enable a BFD session with a BGP neighbor or a BGP peer
group.

neighbor bfd disable

Explicitly disable a BFD session with a BGP neighbor or a BGP peer
group.

bfd disable
ce

Disable all VRRP sessions in a VRRP group.

Syntax

bfd disable

Re-enable BFD using the command no bfd disable.
Defaults
Command Modes
Command
History

BFD is disabled by default.
INTERFACE VRRP
Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on C-Series

Version 7.5.1.0

Introduced on E-Series

bfd enable (Configuration)
Enable BFD on all interfaces.

ce
Syntax

bfd enable

Disable BFD using the no bfd enable command.

Bidirectional Forwarding Detection (BFD) | 279

www.dell.com | support.dell.com

Defaults
Command Modes
Command
History

BFD is disabled by default.
CONFIGURATION
Version 8.3.10.0

Introduced on S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced on E-Series

bfd enable (Interface)
Enable BFD on an interface.

ce
Syntax
Defaults
Command Modes
Command
History

bfd enable

BFD is enabled on all interfaces when you enable BFD from CONFIGURATION mode.
INTERFACE
Version 8.3.10.0

Introduced on S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced on E-Series

bfd interval
Specify non-default BFD session parameters beginning with the transmission interval.

ce

This command is deprecated as of FTOS 8.3.12.0.
Syntax
Parameters

280

|

bfd interval interval min_rx min_rx multiplier value role {active | passive}
interval milliseconds

Enter this keyword to specify non-default BFD session parameters
beginning with the transmission interval.
Range: 50 to 1000
Default: 100

min_rx milliseconds

Enter this keyword to specify the minimum rate at which the local
system would like to receive control packets from the remote system.
Range: 50 to 100
Default: 100

Bidirectional Forwarding Detection (BFD)

Defaults
Command Modes
Command
History

multiplier value

Enter this keyword to specify the number of packets that must be
missed in order to declare a session down.
Range: 3 to 50
Default: 3

role [active | passive]

Enter the role that the local system assumes:
• Active—The active system initiates the BFD session. Both
systems can be active for the same session.
• Passive—The passive system does not initiate a session. It only
responds to a request for session initialization from the active
system.
Default: Active

Parameters
INTERFACE
Version 8.3.12.0

Deprecated command. Replaced by

Version 8.3.10.0

Introduced on S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced on E-Series

Example

FTOS(conf-if-gi-0/3)#bfd interval 250 min_rx 300 multiplier 4 role passive
FTOS(conf-if-gi-0/3)#

bfd neighbor
Establish a BFD session with a neighbor.

ce

This command is deprecated as of FTOS 8.3.12.0.
Syntax
Parameters

Defaults
Command Modes
Command
History

bfd neighbor ip-address
ip-address

Enter the IP address of the neighbor in dotted decimal format
(A.B.C.D).

None
INTERFACE
Version 8.3.12.0

Deprecated command. Replaced by

Version 8.3.10.0

Introduced on S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on C-Series

Version 7.5.1.0

Added support for VLAN and port-channel interfaces on E-Series.

Version 7.4.1.0

Introduced on E-Series

Bidirectional Forwarding Detection (BFD) | 281

www.dell.com | support.dell.com

Related
Commands

show bfd neighbors

Display BFD neighbor information on all interfaces or a specified
interface.

bfd protocol-liveness
Enable the BFD protocol liveness feature.

e
Syntax
Defaults
Command Modes
Command
History

Usage
Information

bfd protocol-liveness

Disabled
CONFIGURATION
Version 8.3.10.0

Introduced on S4810

Version 7.4.1.0

Introduced on E-Series

Protocol Liveness is a feature that notifies the BFD Manager when a client protocol (e.g
OSPF, ISIS) is disabled. When a client is disabled, all BFD sessions for that protocol are torn
down. Neighbors on the remote system receive an Admin Down control packet and are placed
in the Down state. Peer routers might take corrective action by choosing alternative paths for
the routes that originally pointed to this router.

clear bfd counters
ce

Clear all BFD counters, or counters for a particular interface.

Syntax

clear bfd counters [interface]

Parameters

Defaults
Command Modes

282

|

interface

None
EXEC Privilege

Bidirectional Forwarding Detection (BFD)

(OPTIONAL) Enter one of the following keywords and slot/port or number
information:
• For a 1-Gigabit Ethernet interface, enter the keyword gigabitethernet
followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
tengigabitethernet followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the slot/
port information.
• For a port-channel interface, enter the keyword port-channel followed
by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale, and 1 to 512 for ExaScale
• For VLAN interfaces, enter the keyword vlan followed by a number
from 1 to 4094. For ExaScale VLAN interfaces, the range is 1-2730
(VLAN IDs can be 0-4093).

Command
History

Related
Commands

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.7.1.0

Introduced on C-Series

Version 7.5.1.0

Added support for VLAN and port-channel interfaces on E-Series

Version 7.4.1.0

Introduced on E-Series

show bfd counters

Display BFD counter information.

debug bfd
ce

Enable BFD debugging.

Syntax

debug bfd {detail | event | packet} {all | interface} [mode] [count number]

Parameters

Defaults

detail

(OPTIONAL) Enter this keyword to display detailed information about BFD
packets.

event

(OPTIONAL) Enter this keyword to display information about BFD state.
The mode option is not available with this option.

packet

(OPTIONAL) Enter the keyword packet to display brief information about
control packets.

all

Enter this keyword to enable debugging on all interfaces. The count option is
not available with this option.

interface

Enter one of the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword gigabitethernet
followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword tengigabitethernet
followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the slot/port
information.
• For a port-channel interface, enter the keyword port-channel followed by a
number:
C-Series and S-Series Range: 1 to 128
E-Series Range: 1 to 255 for TeraScale, and 1 to 512 for ExaScale.
• For VLAN interfaces, enter the keyword vlan followed by a number from
1 to 4094. For ExaScale VLAN interfaces, the range is 1 to 2730 (VLAN
IDs can be 0 to 4093).

mode

(OPTIONAL) Enter one of the following debug transmission modes:
• Enter the keyword both to display information for both received and sent
packets.
• Enter the keyword rx to display information for received packets.
• Enter the keyword tx to display information for sent packets.
Default: both

count number

(OPTIONAL) Enter this keyword followed by the number of debug messages
to display. Range: 1 to 65534
Default: Infinite—that is, if a count number is not specified an infinite number
of debug messages will display.

Disabled

Bidirectional Forwarding Detection (BFD) | 283

www.dell.com | support.dell.com

Command Modes
Command
History

Usage
Information

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on C-Series

Version 7.5.1.0

Added support for VLAN and port-channel interfaces on E-Series

Version 7.4.1.0

Introduced on E-Series

Since BFD can potentially transmit 20 packets per interface, debugging information should
be restricted.

ip route bfd
ce

Enable BFD for all neighbors configured through static routes.

Syntax

ip route bfd [interval interval min_rx min_rx multiplier value role {active | passive}]

Parameters

Defaults
Command Modes
Command
History

Related
Commands

284

EXEC Privilege

|

interval milliseconds

(OPTIONAL) Enter this keyword to specify non-default BFD
session parameters beginning with the transmission interval.
Range: 50 to 1000
Default: 100

interval milliseconds

(OPTIONAL) Enter this keyword to specify non-default BFD
session parameters beginning with the transmission interval.
Range: 50 to 1000
Default: 100

multiplier value

Enter this keyword to specify the number of packets that must be
missed in order to declare a session down.
Range: 3 to 50
Default: 3

role [active | passive]

Enter the role that the local system assumes:
• Active—The active system initiates the BFD session. Both
systems can be active for the same session.
• Passive—The passive system does not initiate a session. It only
responds to a request for session initialization from the active
system.
Default: Active

Parameters
CONFIGURATION
Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced on E-Series

show bfd neighbors

Bidirectional Forwarding Detection (BFD)

Display BFD neighbor information on all interfaces or a specified
interface.

ip ospf bfd all-neighbors
Establish BFD sessions with all OSPF neighbors on a single interface.
Syntax
Command Modes

ip ospf bfd all-neighbors

CONFIGURATION

Command
History

Version 8.3.12.0

Related
Commands

bfd all-neighbors

Enable BFD sessions with all neighbors discovered by Layer 3
protocols IS-IS, OSPF or BFP on router interfaces.

neighbor bfd disable

Explicitly disable a BFD session with a BFP neighbor or a BFP peer
group.

show bfd neighbors

Display BFD neighbor information on all interfaces or a specified
interface.

Introduced on S4810

isis bfd all-neighbors
e
Syntax
Parameters

Defaults
Command Modes

Enable BFD on all IS-IS neighbors discovered on an interface.
isis bfd all-neighbors [disable

| [interval interval min_rx min_rx multiplier value role {active | passive}]]

disable

(OPTIONAL) Enter the keyword disable to disable BFD on this
interface.

interval milliseconds

(OPTIONAL) Enter this keyword to specify non-default BFD
session parameters beginning with the transmission interval.
Range: 50 to 1000
Default: 100

min_rx milliseconds

Enter this keyword to specify the minimum rate at which the local
system would like to receive control packets from the remote system.
Range: 50 to 100
Default: 100

multiplier value

Enter this keyword to specify the number of packets that must be
missed in order to declare a session down.
Range: 3 to 50
Default: 3

role [active | passive]

Enter the role that the local system assumes:
• Active—The active system initiates the BFD session. Both
systems can be active for the same session.
• Passive—The passive system does not initiate a session. It only
responds to a request for session initialization from the active
system.
Default: Active

Parameters
INTERFACE

Bidirectional Forwarding Detection (BFD) | 285

www.dell.com | support.dell.com

Command
History

Usage
Information

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.5.1.0

Introduced on E-Series

This command provides the flexibility to fine tune the timer values based on individual
interface needs when ISIS BFD is configured in CONFIGURATION mode. Any timer values
specified with this command override timers set using the command bfd all-neighbors. Using
the no form of this command will not disable BFD if BFD is configured in
CONFIGURATION mode.
Use the keyword disable to disable BFD on a specific interface while BFD is configured in
from CONFIGURATION mode.

neighbor bfd
ex
Syntax
Parameters

Defaults

Explicitly enable a BFD session with a BGP neighbor or a BGP peer group.
neighbor {ip-address | peer-group-name} bfd
ip-address

Enter the IP address of the BGP neighbor that you want to explicitly
enable for BFD sessions in dotted decimal format (A.B.C.D).

peer-group-name

Enter the name of the peer group that you want to explicitly enable for
BFD sessions.

None

Command Modes

ROUTER BGP

Command
History

Version 8.3.8.0

Introduced on the S4810.

Version 8.4.1.3

Introduced on the E-Series ExaScale.

Usage
Information

When you enable a BFD session with a specified BGP neighbor or peer group using the bfd
neighbor command, the default BFD session parameters are used (interval: 100 milliseconds,
min_rx: 100 milliseconds, multiplier: 3 packets, and role: active) if no parameters have been
specified with the bfd all-neighbors command.
When you explicitly enable a BGP neighbor for a BFD session with the bfd neighbor
command:
•

•

286

|

The neighbor does not inherit the global BFD enable values configured with the
bfd all-neighbors command or configured for the peer group to which the
neighbor belongs.
The neighbor only inherits the global timer values configured with the bfd
all-neighbors command: interval, min_rx, and multiplier.

Bidirectional Forwarding Detection (BFD)

Related
Commands

bfd all-neighbors

Enable BFD sessions with all neighbors discovered by Layer 3
protocols.

neighbor bfd disable

Explicitly disable a BFD session with a BGP neighbor or a BGP peer
group.

show bfd neighbors

Display BFD neighbor information on all interfaces or a specified
interface.

neighbor bfd disable
ex
Syntax
Parameters

Defaults

Explicitly disable a BFD session with a BGP neighbor or a BGP peer group.
neighbor {ip-address | peer-group-name} bfd disable
ip-address

Enter the IP address of the BGP neighbor that you want to explicitly
disable for BFD sessions in dotted decimal format (A.B.C.D).

peer-group-name

Enter the name of the peer group that you want to explicitly disable for
BFD sessions.

None

Command Modes

ROUTER BGP

Command
History

Version 8.3.8.0

Introduced on the S4810.

Version 8.4.1.3

Introduced on the E-Series ExaScale.

Usage
Information

When you explicitly disable a BGP neighbor for a BFD session with the neighbor bfd disable
command:
•

•

The neighbor does not inherit the global BFD disable values configured with the
bfd all-neighbors command or configured for the peer group to which the
neighbor belongs.
The neighbor only inherits the global timer values configured with the bfd
all-neighbors command: interval, min_rx, and multiplier.

When you remove the disabled state of a BFD for BGP session with a specified neighbor by
entering the no neighbor bfd disable command, the BGP link with the neighbor returns to
normal operation and uses the BFD session parameters globally configured with the bfd
all-neighbors command or configured for the peer group to which the neighbor belongs.
Related
Commands

bfd all-neighbors

Enable BFD sessions with all neighbors discovered by Layer 3
protocols.

Bidirectional Forwarding Detection (BFD) | 287

www.dell.com | support.dell.com

bfd neighbor

Explicitly enable a BFD session with a BGP neighbor or a BGP peer
group.

show bfd neighbors

Display BFD neighbor information on all interfaces or a specified
interface.

show bfd counters
ce

Display BFD counter information.

Syntax

show bfd counters [bgp | isis | ospf | vrrp | static-route] [interface]

Parameters

Defaults
Command Modes

interface

Enter one of the following keywords and slot/port or number
information:
• For a 1-Gigabit Ethernet interface, enter the keyword
gigabitethernet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
tengigabitethernet followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the
slot/port information.
• For a port-channel interface, enter the keyword port-channel
followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale, and 1 to 512 for
ExaScale
• For VLAN interfaces, enter the keyword vlan followed by a
number from 1 to 4094. For ExaScale VLAN interfaces, the
range is 1-2730 (VLAN IDs can be 0-4093).

bgp

(OPTIONAL) Enter this keyword to display counter information for
BFD sessions established with BGP neighbors.

isis

(OPTIONAL) Enter this keyword to display counter information for
BFD sessions established with ISIS neighbors. This option is not
available on C-Series.

ospf

(OPTIONAL) Enter this keyword to display counter information for
BFD sessions established with OSPF neighbors.

static-route

(OPTIONAL) Enter this keyword to display counter information for
BFD sessions established with ISIS neighbors.

vrrp

(OPTIONAL) Enter this keyword to display counter information for
BFD sessions established with VRRP neighbors.

None
EXEC
EXEC Privilege

Command
History

288

|

Version 8.4.1.3

Added support for BFD for BGP on the E-Series ExaScale.

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.7.1.0

Introduced on C-Series

Bidirectional Forwarding Detection (BFD)

Version 7.5.1.0

Added support for BFD for VLAN and port-channel interfaces, ISIS,
and VRRP on E-Series.

Version 7.4.1.0

Introduced BFD on physical ports, static routes, and OSPF on E-Series.

Example

FTOS#show bfd counters
Interface
GigabitEthernet 1/3
FTOS#

Tx
522

Rx
625

show bfd neighbors
Display BFD neighbor information on all interfaces or a specified interface.

ce
Syntax
Parameters

Defaults
Command Modes

show bfd neighbors interface [detail]
interface

Enter one of the following keywords and slot/port or number
information:
• For a 1-Gigabit Ethernet interface, enter the keyword
gigabitethernet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
tengigabitethernet followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the
slot/port information.
• For a Port Channel interface, enter the keyword port-channel
followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale, and 1 to 512 for
ExaScale
• For VLAN interfaces, enter the keyword vlan followed by a
number from 1 to 4094. For ExaScale VLAN interfaces, the
range is 1-2730 (VLAN IDs can be 0-4093).

detail

(OPTIONAL) Enter the keyword detail to view detailed information
about BFD neighbors.

None
EXEC
EXEC Privilege

Command
History

Version 8.3.8.0

Added support for BFD for BGP on the S4810.

Version 8.4.1.3

Added support for BFD for BGP on the E-Series ExaScale.

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on C-Series

Version 7.5.1.0

Added BFD on VLAN and port-channel interfaces on E-Series

Version 7.4.1.0

Introduced BFD on physical ports on E-Series

Bidirectional Forwarding Detection (BFD) | 289

www.dell.com | support.dell.com

Example

FTOS#show bfd neighbors
*
Ad Dn
B
C
I
O
R

-

Active session role
Admin Down
BGP
CLI
ISIS
OSPF
Static Route (RTM)

LocalAddr
* 10.1.3.2
FTOS#

Example
(show bfd
neighbors detail)

Related
Commands

RemoteAddr
10.1.3.1

Interface State Rx-int Tx-int Mult Clients
Gi 1/3
Up
300
250
3
C

FTOS#show bfd neighbors detail
Session Discriminator: 1
Neighbor Discriminator: 1
Local Addr: 10.1.3.2
Local MAC Addr: 00:01:e8:02:15:0e
Remote Addr: 10.1.3.1
Remote MAC Addr: 00:01:e8:27:2b:f1
Int: GigabitEthernet 1/3
State: Up
Configured parameters:
TX: 100ms, RX: 100ms, Multiplier: 3
Neighbor parameters:
TX: 250ms, RX: 300ms, Multiplier: 4
Actual parameters:
TX: 300ms, RX: 250ms, Multiplier: 3
Role: Active
Delete session on Down: False
Client Registered: CLI
Uptime: 00:02:04
Statistics:
Number of packets received from neighbor: 376
Number of packets sent to neighbor: 314
Number of state changes: 2
Number of messages from IFA about port state change: 0
Number of messages communicated b/w Manager and Agent: 6
FTOS#

bfd neighbor

Establish a BFD session with a neighbor.

bfd all-neighbors

Establish BFD sessions with all neighbors discovered by the IS-IS
protocol or OSPF protocol out of all interfaces.

vrrp bfd
ce

Establish a VRRP BFD session.

Syntax

vrrp bfd {all-neighbors | neighbor ip-address} [interval interval min_rx min_rx multiplier value role
{active | passive}]

Parameters

290

|

all-neighbors

Establish BFD sessions with all BFD neighbors on an interface.

neighbor ip-address

Enter the IP address of the BFD neighbor.

Bidirectional Forwarding Detection (BFD)

Defaults
Command Modes
Command
History

interval milliseconds

(OPTIONAL) Enter this keyword to specify non-default BFD
session parameters beginning with the transmission interval.
Range: 50 to 1000
Default: 100

interval milliseconds

(OPTIONAL) Enter this keyword to specify non-default BFD
session parameters beginning with the transmission interval.
Range: 50 to 1000
Default: 100

multiplier

Enter this keyword to specify the number of packets that must be
missed in order to declare a session down.
Range: 3 to 50
Default: 3

role [active | passive]

Enter the role that the local system assumes:
• Active—The active system initiates the BFD session. Both
systems can be active for the same session.
• Passive—The passive system does not initiate a session. It only
responds to a request for session initialization from the active
system.
Default: Active

Parameters.
INTERFACE
Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on C-Series

Version 7.5.1.0

Introduced on E-Series

Bidirectional Forwarding Detection (BFD) | 291

www.dell.com | support.dell.com
292

|

Bidirectional Forwarding Detection (BFD)

9
Border Gateway Protocol IPv4 (BGPv4)
Overview
BGPv4 is supported as shown in the following table.
FTOS version

Platform support

8.3.11.1

Z9000

8.3.7.0

S4810

8.1.1.0

E-Series ExaScale

ex

7.8.1.0

S-Series

s

7.7.1.0.

C-Series

c

pre-7.7.1.0

E-Series TeraScale

et

z

For detailed information on configuring BGP, refer to the BGP chapter in the FTOS
Configuration Guide.
This chapter contains the following sections:
•
•
•

BGPv4 Commands
MBGP Commands
BGP Extended Communities (RFC 4360)

BGPv4 Commands
Border Gateway Protocol (BGP) is an external gateway protocol that transmits interdomain
routing information within and between Autonomous Systems (AS). BGP version 4 (BGPv4)
supports Classless InterDomain Routing (CIDR) and the aggregation of routes and AS paths.
Basically, two routers (called neighbors or peers) exchange information including full routing
tables and periodically send messages to update those routing tables.

Border Gateway Protocol IPv4 (BGPv4) | 293

www.dell.com | support.dell.com
294

FTOS Version 7.7.1 supports 2-Byte (16-bit) and 4-Byte (32-bit) format for Autonomous System
Numbers (ASNs), where the 2-Byte format is 1-65535, the 4-Byte format is 1-4294967295.

Note:

FTOS Version 8.3.1.0 supports Dotted format as well as the Traditional Plain format for AS
Numbers. The dot format is displayed when using the show ip bgp commands. To determine the
comparable dot format for an ASN from a traditional format, use ASN/65536. ASN%65536.
For more information about using the 2 or 4-Byte format, refer to the FTOS Configuration Guide.
Note:

The following commands enable you to configure and enable BGP.
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

|

address-family
aggregate-address
bgp add-path
bgp always-compare-med
bgp asnotation
bgp bestpath as-path ignore
bgp bestpath as-path multipath-relax
bgp bestpath med confed
bgp bestpath med missing-as-best
bgp bestpath router-id ignore
bgp client-to-client reflection
bgp cluster-id
bgp confederation identifier
bgp confederation peers
bgp dampening
bgp default local-preference
bgp enforce-first-as
bgp fast-external-fallover
bgp four-octet-as-support
bgp graceful-restart
bgp log-neighbor-changes
bgp non-deterministic-med
bgp recursive-bgp-next-hop
bgp regex-eval-optz-disable
bgp router-id
bgp soft-reconfig-backup
capture bgp-pdu neighbor
capture bgp-pdu max-buffer-size
clear ip bgp
clear ip bgp dampening

Border Gateway Protocol IPv4 (BGPv4)

•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

clear ip bgp flap-statistics
debug ip bgp
debug ip bgp dampening
debug ip bgp events
debug ip bgp keepalives
debug ip bgp notifications
debug ip bgp soft-reconfiguration
debug ip bgp updates
default-metric
description
distance bgp
max-paths
neighbor activate
neighbor add-path
neighbor advertisement-interval
neighbor advertisement-start
neighbor allowas-in
neighbor default-originate
neighbor description
neighbor distribute-list
neighbor ebgp-multihop
neighbor fall-over
neighbor filter-list
neighbor graceful-restart
neighbor local-as
neighbor maximum-prefix
neighbor next-hop-self
neighbor password
neighbor peer-group (assigning peers)
neighbor peer-group (creating group)
neighbor peer-group passive
neighbor remote-as
neighbor remove-private-as
neighbor route-map
neighbor route-reflector-client
neighbor send-community
neighbor shutdown
neighbor soft-reconfiguration inbound
neighbor timers
neighbor update-source

Border Gateway Protocol IPv4 (BGPv4) | 295

www.dell.com | support.dell.com

•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

neighbor weight
network
network backdoor
redistribute
redistribute isis
redistribute ospf
router bgp
show capture bgp-pdu neighbor
show config
show ip bgp
show ip bgp cluster-list
show ip bgp community
show ip bgp community-list
show ip bgp dampened-paths
show ip bgp detail
show ip bgp extcommunity-list
show ip bgp filter-list
show ip bgp flap-statistics
show ip bgp inconsistent-as
show ip bgp neighbors
show ip bgp next-hop
show ip bgp paths
show ip bgp paths as-path
show ip bgp paths community
show ip bgp peer-group
show ip bgp regexp
show ip bgp summary
show running-config bgp
timers bgp

address-family
ces

Syntax
Parameters

Defaults

296

|

Enable the IPv4 multicast or the IPv6 address family.

address-family [ipv4 multicast| ipv6unicast]
ipv4 multicast

Enter BGPv4 multicast mode.

ipv6 unicast

Enter BGPv6 mode.

Not configured.

Border Gateway Protocol IPv4 (BGPv4)

Command Modes
Command
History

ROUTER BGP
.

Version 8.3.7.0

Introduced on the S4810.

Version 6.5.1.0

Introduced

aggregate-address
ces

Syntax

Parameters

Summarize a range of prefixes to minimize the number of entries in the routing table.

aggregate-address ip-address mask [advertise-map map-name] [as-set] [attribute-map
map-name] [summary-only] [suppress-map map-name]
ip-address mask

Enter the IP address and mask of the route to be the aggregate address.
Enter the IP address in dotted decimal format (A.B.C.D) and mask in /
prefix format (/x).

advertise-map

(OPTIONAL) Enter the keywords advertise-map followed by the name of
a configured route map to set filters for advertising an aggregate route.

map-name

as-set

(OPTIONAL) Enter the keyword as-set to generate path attribute
information and include it in the aggregate.
AS_SET includes AS_PATH and community information from the routes
included in the aggregated route.

attribute-map

(OPTIONAL) Enter the keywords attribute-map followed by the name of a
configured route map to modify attributes of the aggregate, excluding
AS_PATH and NEXT_HOP attributes.

map-name

summary-only

(OPTIONAL) Enter the keyword summary-only to advertise only the
aggregate address. Specific routes will not be advertised.

suppress-map

(OPTIONAL) Enter the keywords suppress-map followed by the name of
a configured route map to identify which more-specific routes in the
aggregate are suppressed.

map-name

Defaults
Command Modes

Not configured.
ROUTER BGP ADDRESS FAMILY
ROUTER BGP ADDRESS FAMILY IPv6

Usage
Information

At least one of the routes included in the aggregate address must be in the BGP routing table
for the configured aggregate to become active.
Do not add the as-set parameter to the aggregate, if routes within the aggregate are constantly
changing as the aggregate will flap to keep track of the changes in the AS_PATH.
In route maps used in the suppress-map parameter, routes meeting the deny clause are not
suppress; in other words, they are allowed. The opposite is true: routes meeting the permit
clause are suppressed.

Border Gateway Protocol IPv4 (BGPv4) | 297

www.dell.com | support.dell.com

If the route is injected via the network command, that route will still appear in the routing
table if the summary-only parameter is configured in the aggregate-address command.
The summary-only parameter suppresses all advertisements. If you want to suppress
advertisements to only specific neighbors, use the neighbor distribute-list command.
In the show ip bgp command, aggregates contain an ‘a’ in the first column and routes
suppressed by the aggregate contain an ‘s’ in the first column.
Command
History

.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

bgp add-path
Allow the advertisement of multiple paths for the same address prefix without the new paths
replacing any previous ones.
Syntax

bgp add-path [send | receive | both] count

Parameters

Defaults
Command Modes

Enter this keyword to indicate that the system will send multiple paths to
peers.

receive

Enter this keyword to indicate that the system will accept multiple paths
from peers.

both

Enter this keyword to indicate that the system will send and accept multiple
paths from peers.

count

Enter the number of paths supported.
Range: 2-64

Disabled
ROUTER BGP

Related
Commands

Command
History

send

neighbor add-path

Specify that this neighbor/peer group can send/receive multiple
path advertisements.

.

Version 8.3.8.0

Introduced on the S4810.

bgp always-compare-med
ces

Syntax

298

|

Enables you to enable comparison of the MULTI_EXIT_DISC (MED) attributes in the paths
from different external ASs.
bgp always-compare-med

Border Gateway Protocol IPv4 (BGPv4)

To disable comparison of MED, enter no bgp always-compare-med.
Defaults
Command Modes
Usage
Information

Disabled (that is, the software only compares MEDs from neighbors within the same AS).
ROUTER BGP
Any update without a MED attribute is the least preferred route
If you enable this command, use the clear ip bgp * command to recompute the best path.

Command
History

.

Version 8.3.7.0

Introduced on the S4810.

Version 8.2.1.0

Introduced command

Version 7.7.1.0

Introduced support on C-Series

bgp asnotation
ces

Syntax

Enables you to implement a method for AS Number representation in the CLI.

bgp asnotation [asplain | asdot+ | asdot]

To disable a dot or dot+ representation and return to ASPLAIN, enter no bgp asnotation.
Defaults
Command Modes
Usage
Information

asplain
ROUTER BGP
You must enable bgp four-octet-as-support before enabling this feature. If you disable
four-octect-support after using dot or dot+ format, the AS Numbers revert to asplain text.
When you apply an asnotation, it is reflected in the running-configuration. If you change the
notation type, the running-config is updated dynamically and the new notation is shown.

Related
Commands
Command
History

Example

bgp four-octet-as-support

Enable 4-byte support for the BGP process

Version 8.3.7.0

Introduced on the S4810.

Version 8.3.1.0

Introduced Dynamic Application of AS Notation changes

Version 8.2.1.0

Introduced

FTOS(conf)#router bgp 1
FTOS(conf-router_bgp)#bgp asnotation asdot
FTOS(conf-router_bgp)#ex
FTOS(conf)#do show run | grep bgp

router bgp 1

Border Gateway Protocol IPv4 (BGPv4) | 299

www.dell.com | support.dell.com

bgp four-octet-as-support
bgp asnotation asdot

FTOS(conf)#router bgp 1
FTOS(conf-router_bgp)#bgp asnotation asdot+
FTOS(conf-router_bgp)#ex

FTOS(conf)#do show run | grep bgp
router bgp 1
bgp four-octet-as-support
bgp asnotation asdot+

FTOS(conf)#router bgp 1
FTOS(conf-router_bgp)#bgp asnotation asplain
FTOS(conf-router_bgp)#ex
FTOS(conf)#do show run |grep bgp
router bgp 1
bgp four-octet-as-support

FTOS(conf)#

bgp bestpath as-path ignore
ces

Syntax

Ignore the AS PATH in BGP best path calculations.

bgp bestpath as-path ignore

To return to the default, enter no bgp bestpath as-path ignore.
Defaults
Command Modes
Usage
Information
Command
History

Disabled (that is, the software considers the AS_PATH when choosing a route as best).
ROUTER BGP
If you enable this command, use the clear ip bgp * command to recompute the best path.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

bgp bestpath as-path multipath-relax
z

300

|

Include prefixes received from different AS paths during multipath calculation.

Border Gateway Protocol IPv4 (BGPv4)

Syntax

bgp bestpath as-path multipath-relax
To return to the default BGP routing process, enter no bgp bestpath as-path multipath-relax.

Defaults

Disabled

Command Modes

ROUTER BGP

Usage Information

The bestpath router bgp configuration mode command changes the default bestpath selection
algorithm. The multipath-relax option allows load-sharing across providers with different
(but equal-length) autonomous system paths. Without this option, ECMP expects the AS
paths to be identical for load-sharing.

Command History

Version 8.3.11.4

Introduced on the Z9000.

bgp bestpath med confed
ces

Syntax

Enable MULTI_EXIT_DISC (MED) attribute comparison on paths learned from BGP
confederations.
bgp bestpath med confed

To disable MED comparison on BGP confederation paths, enter no bgp bestpath med confed.
Defaults
Command Modes
Usage
Information

Command
History

Disabled
ROUTER BGP
The software compares the MEDs only if the path contains no external autonomous system
numbers. If you enable this command, use the clear ip bgp * command to recompute the best
path.
Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

bgp bestpath med missing-as-best
ces

Syntax

During path selection, indicate preference to paths with missing MED (MULTI_EXIT_DISC)
over those paths with an advertised MED attribute.
bgp bestpath med missing-as-best

To return to the default selection, use the no bgp bestpath med missing-as-best command.
Defaults

Disabled

Border Gateway Protocol IPv4 (BGPv4) | 301

www.dell.com | support.dell.com

Command Modes
Usage
Information

Command
History

ROUTER BGP
The MED is a 4-byte unsigned integer value and the default behavior is to assume a missing
MED as 4294967295. This command causes a missing MED to be treated as 0. During the
path selection, paths with a lower MED are preferred over those with a higher MED.
Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 6.3.1.0

Introduced

bgp bestpath router-id ignore
ces

Syntax

Do not compare router-id information for external paths during best path selection.

bgp bestpath router-id ignore

To return to the default selection, use the no bgp bestpath router-id ignore command.
Defaults
Command Modes
Usage
Information
Command
History

Disabled
ROUTER BGP
Configuring this option will retain the current best-path. When sessions are subsequently
reset, the oldest received path will be chosen as the best-path.
Version 8.3.7.0

Introduced on the S4810.

Version 8.3.1.0

Introduced

bgp client-to-client reflection
ces

Syntax

Enables you to enable route reflection between clients in a cluster.

bgp client-to-client reflection

To disable client-to-client reflection, enter no bgp client-to-client reflection.
Defaults
Command Modes
Usage
Information

302

|

Enabled when a route reflector is configured.
ROUTER BGP
Route reflection to clients is not necessary if all client routers are fully meshed.

Border Gateway Protocol IPv4 (BGPv4)

Related
Commands

Command
History

bgp cluster-id

Assign ID to a BGP cluster with two or more route reflectors.

neighbor route-reflector-client

Configure a route reflector and clients.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

bgp cluster-id
ces

Syntax

Assign a cluster ID to a BGP cluster with more than one route reflector.

bgp cluster-id {ip-address | number}

To delete a cluster ID, use the no bgp cluster-id {ip-address | number} command.
Parameters

ip-address

Enter an IP address as the route reflector cluster ID.

number

Enter a route reflector cluster ID as a number from 1 to 4294967295.

Defaults

Not configured.

Command Modes

ROUTER BGP

Usage
Information

When a BGP cluster contains only one route reflector, the cluster ID is the route reflector’s
router ID. For redundancy, a BGP cluster may contain two or more route reflectors and you
assign a cluster ID with the bgp cluster-id command. Without a cluster ID, the route reflector
cannot recognize route updates from the other route reflectors within the cluster.
The default format for displaying the cluster-id is dotted decimal, but if you enter the
cluster-id as an integer, it will be displayed as an integer.

Related
Commands

Command
History

bgp client-to-client reflection

Enable route reflection between route reflector and clients.

neighbor route-reflector-client

Configure a route reflector and clients.

show ip bgp cluster-list

View paths with a cluster ID.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

bgp confederation identifier
ces

Configure an identifier for a BGP confederation.

Border Gateway Protocol IPv4 (BGPv4) | 303

www.dell.com | support.dell.com

Syntax

bgp confederation identifier as-number

To delete a BGP confederation identifier, use the no bgp confederation identifier as-number
command.
Parameters

as-number

Defaults

Not configured.

Command Modes

ROUTER BGP

Usage
Information

Enter the AS number.
Range: 0-65535 (2-Byte) or
1-4294967295 (4-Byte) or
0.1-65535.65535 (Dotted format)

You must configure your system to accept 4-Byte formats before entering a 4-Byte AS
Number. All the routers in the Confederation must be 4 or 2-Byte identified routers. You
cannot mix them.
The autonomous systems configured in this command are visible to the EBGP neighbors.
Each autonomous system is fully meshed and contains a few connections to other
autonomous systems. The next hop, MED, and local preference information is preserved
throughout the confederation.
FTOS accepts confederation EBGP peers without a LOCAL_PREF attribute. The software
sends AS_CONFED_SET and accepts AS_CONFED_SET and AS_CONF_SEQ.

Related
Commands
Command
History

bgp four-octet-as-support

Enable 4-Byte support for the BGP process.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series
Added support for 4-Byte format

bgp confederation peers
ces

Syntax

Specify the Autonomous Systems (ASs) that belong to the BGP confederation.

bgp confederation peers as-number [...as-number]

To return to the default, enter no bgp confederation peers.

304

|

Border Gateway Protocol IPv4 (BGPv4)

Parameters

as-number

Enter the AS number.
Range: 0-65535 (2-Byte) or
1-4294967295 (4-Byte) or
0.1-65535.65535 (Dotted format)

...as-number

(OPTIONAL) Enter up to 16 confederation numbers.
Range: 0-65535 (2-Byte) or
1-4294967295 (4-Byte) or
0.1-65535.65535 (Dotted format)

Defaults

Not configured.

Command Modes

ROUTER BGP

Usage
Information

All the routers in the Confederation must be 4 or 2 byte identified routers. You cannot mix
them.
The Autonomous Systems configured in this command are visible to the EBGP neighbors.
Each Autonomous System is fully meshed and contains a few connections to other
Autonomous Systems.
After specifying autonomous systems numbers for the BGP confederation, recycle the peers
to update their configuration.

Related
Commands

Command
History

bgp confederation identifier

Configure a confederation ID.

bgp four-octet-as-support

Enable 4-byte support for the BGP process.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series
Added support for 4-byte format

bgp dampening
ces

Syntax

Enable BGP route dampening and configure the dampening parameters.

bgp dampening [half-life reuse suppress max-suppress-time] [route-map map-name]

To disable route dampening, use the no bgp dampening [half-life reuse suppress
max-suppress-time] [route-map map-name] command.

Border Gateway Protocol IPv4 (BGPv4) | 305

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes
Usage
Information

Related
Commands
Command
History

half-life

(OPTIONAL) Enter the number of minutes after which the Penalty
is decreased. After the router assigns a Penalty of 1024 to a route,
the Penalty is decreased by half after the half-life period expires.
Range: 1 to 45.
Default: 15 minutes

reuse

(OPTIONAL) Enter a number as the reuse value, which is
compared to the flapping route’s Penalty value. If the Penalty value
is less than the reuse value, the flapping route is once again
advertised (or no longer suppressed).
Range: 1 to 20000.
Default: 750

suppress

(OPTIONAL) Enter a number as the suppress value, which is
compared to the flapping route’s Penalty value. If the Penalty value
is greater than the suppress value, the flapping route is no longer
advertised (that is, it is suppressed).
Range: 1 to 20000.
Default: 2000

max-suppress-time

(OPTIONAL) Enter the maximum number of minutes a route can
be suppressed. The default is four times the half-life value.
Range: 1 to 255.
Default: 60 minutes.

route-map map-name

(OPTIONAL) Enter the keyword route-map followed by the name
of a configured route map.
Only match commands in the configured route map are supported.

Disabled.
ROUTER-BGP-ADDRESS FAMILY
If you enter bgp dampening, the default values for half-life, reuse, suppress, and
max-suppress-time are applied. The parameters are position-dependent, therefore, if you
configure one parameter, you must configure the parameters in the order they appear in the
CLI.
show ip bgp dampened-paths

View the BGP paths

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

bgp default local-preference
ces

Syntax

306

|

Change the default local preference value for routes exchanged between internal BGP peers.

bgp default local-preference value

Border Gateway Protocol IPv4 (BGPv4)

To return to the default value, enter no bgp default local-preference.
Parameters

Defaults
Command Modes
Usage
Information

Related
Commands
Command
History

value

Enter a number to assign to routes as the degree of preference for those routes.
When routes are compared, the higher the degree of preference or local
preference value, the more the route is preferred.
Range: 0 to 4294967295
Default: 100

100
ROUTER BGP
The bgp default local-preference command setting is applied by all routers within the AS. To
set the local preference for a specific route, use the set local-preference command in the
ROUTE-MAP mode.
set local-preference

Assign a local preference value for a specific route.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced on C-Series

bgp enforce-first-as
ces

Syntax

Disable (or enable) enforce-first-as check for updates received from EBGP peers.

bgp enforce-first-as

To turn off the default, use the no bgp enforce-first-as command.
Defaults
Command Modes
Usage
Information

Enabled
ROUTER BGP
This is enabled by default, that is for all updates received from EBGP peers, BGP ensures that
the first AS of the first AS segment is always the AS of the peer. If not, the update is dropped
and a counter is incremented. Use the show ip bgp neighbors command to view the “failed
enforce-first-as check counter.
If enforce-first-as is disabled, it can be viewed via the show ip protocols command.

Related
Commands

show ip bgp neighbors

View the information exchanged by BGP neighbors

show ip protocols

View Information on routing protocols.

Border Gateway Protocol IPv4 (BGPv4) | 307

www.dell.com | support.dell.com

Command
History

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support for C-Series

Version 7.4.1.0

Introduced

bgp fast-external-fallover
ces

Syntax

Enable the fast external fallover feature, which immediately resets the BGP session if a link to
a directly connected external peer fails.
bgp fast-external-fallover

To disable fast external fallover, enter no bgp fast-external-fallover.
Defaults
Command Modes
Usage
Information
Command
History

Enabled.
ROUTER BGP
The bgp fast-external-fallover command appears in the show config command output.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support for C-Series

bgp four-octet-as-support
ces

Syntax

Enable 4-byte support for the BGP process.

bgp four-octet-as-support

To disable fast external fallover, enter no bgp four-octet-as-support.
Defaults
Command Modes
Usage
Information

Disabled (supports 2-Byte format)
ROUTER BGP
Routers supporting 4-Byte ASNs advertise that function in the OPEN message. The behavior
of a 4-Byte router will be slightly different depending on whether it is speaking to a 2-Byte
router or a 4-Byte router.
When creating Confederations, all the routers in the Confederation must be 4 or 2 byte
identified routers. You cannot mix them.

308

|

Border Gateway Protocol IPv4 (BGPv4)

Where the 2-Byte format is 1-65535, the 4-Byte format is 1-4294967295. Both formats are
accepted, and the advertisements will reflect the entered format.
For more information about using the 2 or 4-Byte format, refer to the FTOS Configuration
Guide.
Command
History

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced command
Introduced support on C-Series

bgp graceful-restart
ces

Syntax

Enable graceful restart on a BGP neighbor, a BGP node, or designate a local router to support
graceful restart as a receiver only.
bgp graceful-restart [restart-time seconds] [stale-path-time seconds] [role receiver-only]

To return to the default, enter the no bgp graceful-restart command.
Parameters

Defaults
Command Modes
Usage
Information

restart-time seconds

Enter the keyword restart-time followed by the maximum
number of seconds needed to restart and bring-up all the peers.
Range: 1 to 3600 seconds
Default: 120 seconds

stale-path-time seconds

Enter the keyword stale-path-time followed by the maximum
number of seconds to wait before restarting a peer’s stale paths.
Default: 360 seconds.

role receiver-only

Enter the keyword role receiver-only to designate the local
router to support graceful restart as a receiver only.

as above
ROUTER-BGP
This feature is advertised to BGP neighbors through a capability advertisement. In receiver
only mode, BGP saves the advertised routes of peers that support this capability when they
restart.
BGP graceful restart is active only when the neighbor becomes established. Otherwise it is
disabled. Graceful-restart applies to all neighbors with established adjacency.

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Border Gateway Protocol IPv4 (BGPv4) | 309

www.dell.com | support.dell.com

bgp log-neighbor-changes
ces
Syntax

Enable logging of BGP neighbor resets.
bgp log-neighbor-changes

To disable logging, enter no bgp log-neighbor-changes.
Defaults
Command Modes
Usage
Information

Enabled.
ROUTER BGP
Use the show logging command in the EXEC mode to view BGP neighbor resets.
The bgp log-neighbor-changes command appears in the show config command output.

Related
Commands
Command
History

show logging

View logging settings and system messages logged to the system.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

bgp non-deterministic-med
ces

Syntax

Compare MEDs of paths from different Autonomous Systems.

bgp non-deterministic-med

To return to the default, enter no bgp non-deterministic-med.
Defaults

Command Modes
Usage
Information

Disabled (that is, paths/routes for the same destination but from different ASs will not have
their MEDs compared).
ROUTER BGP
In non-deterministic mode, paths are compared in the order in which they arrive. This method
can lead to FTOS choosing different best paths from a set of paths, depending on the order in
which they are received from the neighbors since MED may or may not get compared
between adjacent paths. In deterministic mode (no bgp non-deterministic-med), FTOS
compares MED between adjacent paths within an AS group since all paths in the AS group
are from the same AS.
When you change the path selection from deterministic to non-deterministic, the path
selection for existing paths remains deterministic until you enter clear ip bgp command to
clear existing paths.

310

|

Border Gateway Protocol IPv4 (BGPv4)

Command
History

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

bgp recursive-bgp-next-hop
ces

Syntax

Enable next-hop resolution through other routes learned by BGP.

bgp recursive-bgp-next-hop

To disable next-hop resolution, use the no bgp recursive-bgp-next-hop command.
Defaults
Command Modes
Usage
Information

Enabled
ROUTER BGP
This command is a knob to disable BGP next-hop resolution via BGP learned routes. During
the next-hop resolution, only the first route that the next-hop resolves through is verified for
the route’s protocol source and is checked if the route is learned from BGP or not.
The clear ip bgp command is required for this command to take effect and to keep the BGP
database consistent. Execute the clear ip bgp command right after executing this command.

Related
Commands
Command
History

clear ip bgp

Description.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.2.1.0

Introduced

bgp regex-eval-optz-disable
ces

Syntax

Disables the Regex Performance engine that optimizes complex regular expression with BGP.

bgp regex-eval-optz-disable

To re-enable optimization engine, use the no bgp regex-eval-optz-disable command.
Defaults
Command Modes

Enabled by default
ROUTER BGP (conf-router_bgp)

Border Gateway Protocol IPv4 (BGPv4) | 311

www.dell.com | support.dell.com

Usage
Information

BGP uses regular expressions (regex) to filter route information. In particular, the use of
regular expressions to filter routes based on AS-PATHs and communities is quite common. In
a large scale configuration, filtering millions of routes based on regular expressions can be
quite CPU intensive, as a regular expression evaluation involves generation and evaluation of
complex finite state machines.
BGP policies, containing regular expressions to match as-path and communities, tend to use a
lot of CPU processing time, which in turn affects the BGP routing convergence. Additionally,
the show bgp commands, which are filtered through regular expressions, use up CPU cycles
particularly with large databases. The Regex Engine Performance Enhancement feature
optimizes the CPU usage by caching and reusing regular expression evaluation results. This
caching and reuse may be at the expensive of RP1 processor memory.

Related
Commands

Command
History

show ip protocols

View information on all routing protocols enabled and active on the
E-Series.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.6.1.0

Introduced

Example

FTOS(conf-router_bgp)#no bgp regex-eval-optz-disable
FTOS(conf-router_bgp)#do show ip protocols
Routing Protocol is "ospf 22222"
Router ID is 2.2.2.2
Area
Routing for Networks
51
10.10.10.0/00

Routing Protocol is "bgp 1"
Cluster Id is set to 10.10.10.0
Router Id is set to 10.10.10.0
Fast-external-fallover enabled
Regular expression evaluation optimization enabled
Capable of ROUTE_REFRESH
For Address Family IPv4 Unicast
BGP table version is 0, main routing table version 0
Distance: external 20 internal 200 local 200
FTOS(conf-router_bgp)#

bgp router-id
ces

Syntax

Assign a user-given ID to a BGP router.

bgp router-id ip-address

To delete a user-assigned IP address, enter no bgp router-id.
Parameters

312

|

ip-address

Enter an IP address in dotted decimal format to reset only that BGP neighbor.

Border Gateway Protocol IPv4 (BGPv4)

Defaults

Command Modes
Usage
Information
Command
History

The router ID is the highest IP address of the Loopback interface or, if no Loopback
interfaces are configured, the highest IP address of a physical interface on the router.
ROUTER BGP
Peering sessions are reset when you change the router ID of a BGP router.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

bgp soft-reconfig-backup
ces

Syntax

Use this command only when route-refresh is not negotiated to avoid the peer from resending
messages.
bgp soft-reconfig-backup

To return to the default setting, use the no bgp soft-reconfig-backup command.
Defaults
Command Modes
Usage
Information

Off
ROUTER BGP
When soft-reconfiguration is enabled for a neighbor and the clear ip bgp soft in is executed,
the update database stored in the router is replayed and updates are reevaluated. With this
command, the replay and update process is triggered only if route-refresh request is not
negotiated with the peer. If the request is indeed negotiated (upon execution of clear ip bgp
soft in), then BGP sends a route-refresh request to the neighbor and receives all of the peer’s
updates.
Note: This command is supported in BGP Router Configuration mode for IPv4
Unicast address only.

Related
Commands
Command
History

clear ip bgp soft in

Activate inbound policies without resetting the BGP TCP session.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.2.1.0

Introduced

Border Gateway Protocol IPv4 (BGPv4) | 313

www.dell.com | support.dell.com

capture bgp-pdu neighbor
ces

Syntax

Enable capture of an IPv4 BGP neighbor packet.

capture bgp-pdu neighbor ipv4-address direction {both | rx | tx}

To disable capture of the IPv4 BGP neighbor packet, use the no capture bgp-pdu neighbor
ipv4-address command.
Parameters

ipv4-address

Enter the IPv4 address of the target BGP neighbor.

direction {both | rx | tx}

Enter the keyword direction and a direction— either rx for
inbound, tx for outbound, or both.

Defaults

Not configured.

Command Modes

EXEC Privilege

Related
Commands

Command
History

capture bgp-pdu max-buffer-size

Specify a size for the capture buffer.

show capture bgp-pdu neighbor

Display BGP packet capture information

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.5.1.0

Introduced

capture bgp-pdu max-buffer-size
ces

Syntax
Parameters

capture bgp-pdu max-buffer-size 100-102400000
100-102400000

Defaults

40960000 bytes.

Command Modes

EXEC Privilege

Related
Commands

314

Set the size of the BGP packet capture buffer. This buffer size pertains to both IPv4 and IPv6
addresses.

|

Enter a size for the capture buffer.

capture bgp-pdu neighbor

Enable capture of an IPv4 BGP neighbor packet.

capture bgp-pdu neighbor (ipv6)

Enable capture of an IPv6 BGP neighbor packet.

show capture bgp-pdu neighbor

Display BGP packet capture information for an IPv6 address
on the E-Series.

Border Gateway Protocol IPv4 (BGPv4)

Command
History

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.5.1.0

Introduced

clear ip bgp
ces

Syntax
Parameters

Reset BGP sessions on the E-Series. The soft parameter (BGP Soft Reconfiguration) clears
the policies without resetting the TCP connection.
clear ip bgp * | as-number | ip-address [flap-statistics | soft [in | out]]
*

Enter an asterisk ( * ) to reset all BGP sessions.

as-number

Enter the AS number to reset all neighbors belonging to that AS.
Range: 0 to 65535 (2-Byte) or
1 to 4294967295 (4-Byte) or
0.1 to 65535.65535 (Dotted format)

ip-address

Enter an IP address in dotted decimal format to reset all prefixes
from that neighbor.

flap-statistics

(OPTIONAL) Enter the keyword flap-statistics to reset the flap
statistics on all prefixes from that neighbor.

soft

(OPTIONAL) Enter the keyword soft to configure and activate
policies without resetting the BGP TCP session, that is, BGP Soft
Reconfiguration.
Note: If you enter clear ip bgp ip-address soft, both inbound and
outbound policies are reset.

Command Modes
Related
Commands

Command
History

in

(OPTIONAL) Enter the keyword in to activate only inbound
policies.

out

(OPTIONAL) Enter the keyword out to activate only outbound
policies.

EXEC Privilege
bgp
recursive-bgp-next-hop

Disable next-hop resolution through other routes learned by BGP

bgp soft-reconfig-backup

Turn on BGP Soft Reconfiguration

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 6.5.1.0

Expanded to include the as-number option

Border Gateway Protocol IPv4 (BGPv4) | 315

www.dell.com | support.dell.com

clear ip bgp peer-group
ces

Syntax
Parameters

Command Modes
Command
History

Reset a peer-group’s BGP sessions.

clear ip bgp peer-group peer-group-name
peer-group-name

Enter the peer group name to reset the BGP sessions within that peer
group.

EXEC Privilege
Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

clear ip bgp dampening
ces

Syntax
Parameters

Command Modes
Usage
Information
Command
History

Clear information on route dampening and return suppressed route to active state.

clear ip bgp dampening [ip-address mask]
ip-address mask

(OPTIONAL) Enter an IP address in dotted decimal format and the
prefix mask in slash format (/x) to clear dampening information only that
BGP neighbor.

EXEC Privilege
After you enter this command, the software deletes history routes and returns suppressed
routes to active state.
Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

clear ip bgp flap-statistics
ces

Syntax

316

|

Clear BGP flap statistics, which includes number of flaps and the time of the last flap.

clear ip bgp flap-statistics [ip-address mask | filter-list as-path-name | regexp regular-expression]

Border Gateway Protocol IPv4 (BGPv4)

Parameters

ip-address mask

(OPTIONAL) Enter an IP address in dotted decimal format and the
prefix mask in slash format (/x) to reset only that prefix.

filter-list as-path-name

(OPTIONAL) Enter the keyword filter-list followed by the name of a
configured AS-PATH list.

regexp

(OPTIONAL) Enter the keyword regexp followed by regular
expressions. Use one or a combination of the following:
• . = (period) any single character (including a white space)
• * = (asterisk) the sequences in a pattern (0 or more sequences)
• + = (plus) the sequences in a pattern (1 or more sequences)
• ? = (question mark) sequences in a pattern (either 0 or 1 sequences).
You must enter an escape sequence (CTRL+v) prior to entering
the ? regular expression.
• [ ] = (brackets) a range of single-character patterns.
• ( ) = (parenthesis) groups a series of pattern elements to a single
element
• { } = (braces) minimum and the maximum match count
• ^ = (caret) the beginning of the input string. If the caret is used at the
beginning of a sequence or range, it matches on everything BUT the
characters specified.
• $ = (dollar sign) the end of the output string.

regular-expression

Command Modes
Usage
Information
Related
Commands

Command
History

EXEC Privilege
If you enter clear ip bgp flap-statistics without any parameters, all statistics are cleared.

show debugging

View enabled debugging operations.

show ip bgp flap-statistics

View BGP flap statistics.

undebug all

Disable all debugging operations.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

debug ip bgp
ces

Syntax

Display all information on BGP, including BGP events, keepalives, notifications, and
updates.
debug ip bgp [ip-address | peer-group peer-group-name] [in | out]

To disable all BGP debugging, enter no debug ip bgp.
Parameters

ip-address

Enter the IP address of the neighbor in dotted decimal format.

peer-group

Enter the keyword peer-group followed by the name of the peer group.

peer-group-name

Border Gateway Protocol IPv4 (BGPv4) | 317

www.dell.com | support.dell.com

Command Modes
Usage
Information

in

(OPTIONAL) Enter the keyword in to view only information on
inbound BGP routes.

out

(OPTIONAL) Enter the keyword out to view only information on
outbound BGP routes.

EXEC Privilege
To view information on both incoming and outgoing routes, do not include the in and out
parameters in the debugging command. The in and out parameters cancel each other; for
example, if you enter debug ip bgp in and then enter debug ip bgp out, you will not see
information on the incoming routes.
Entering a no debug ip bgp command removes all configured debug commands for BGP.

Related
Commands

Command
History

debug ip bgp events

View information about BGP events.

debug ip bgp keepalives

View information about BGP keepalives.

debug ip bgp notifications

View information about BGP notifications.

debug ip bgp updates

View information about BGP updates.

show debugging

View enabled debugging operations.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

debug ip bgp dampening
ces

Syntax

Display information on routes being dampened.

debug ip bgp dampening [in | out]

To disable debugging, enter no debug ip bgp dampening.
Parameters

Command Modes
Usage
Information
Related
Commands

318

|

in

(OPTIONAL) Enter the keyword in to view only inbound dampened routes.

out

(OPTIONAL) Enter the keyword out to view only outbound dampened
routes.

EXEC Privilege
Enter no debug ip bgp command to remove all configured debug commands for BGP.

show debugging

View enabled debugging operations.

show ip bgp dampened-paths

View BGP dampened routes.

Border Gateway Protocol IPv4 (BGPv4)

Command
History

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

debug ip bgp events
ces

Syntax

Display information on local BGP state changes and other BGP events.

debug ip bgp [ip-address | peer-group peer-group-name] events [in | out]

To disable debugging, use the no debug ip bgp [ip-address | peer-group peer-group-name] events
command.
Parameters

ip-address

(OPTIONAL) Enter the IP address of the neighbor in dotted decimal
format.

peer-group

(OPTIONAL) Enter the keyword peer-group followed by the name of
the peer group.

peer-group-name

Command Modes
Usage
Information
Command
History

in

(OPTIONAL) Enter the keyword in to view only events on inbound
BGP messages.

out

(OPTIONAL) Enter the keyword out to view only events on outbound
BGP messages.

EXEC Privilege
Enter no debug ip bgp command to remove all configured debug commands for BGP.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

debug ip bgp keepalives
ces

Syntax

Display information about BGP keepalive messages.

debug ip bgp [ip-address | peer-group peer-group-name] keepalives [in | out]

To disable debugging, use the no debug ip bgp [ip-address | peer-group peer-group-name]
keepalives [in | out] command.

Border Gateway Protocol IPv4 (BGPv4) | 319

www.dell.com | support.dell.com

Parameters

ip-address

(OPTIONAL) Enter the IP address of the neighbor in dotted decimal
format.

peer-group

(OPTIONAL) Enter the keyword peer-group followed by the name of
the peer group.

peer-group-name

Command Modes
Usage
Information
Command
History

in

(OPTIONAL) Enter the keyword in to view only inbound keepalive
messages.

out

(OPTIONAL) Enter the keyword out to view only outbound keepalive
messages.

EXEC Privilege
Enter no debug ip bgp command to remove all configured debug commands for BGP.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

debug ip bgp notifications
ces

Syntax

Enables you to view information about BGP notifications received from neighbors.

debug ip bgp [ip-address | peer-group peer-group-name] notifications [in | out]

To disable debugging, use the no debug ip bgp [ip-address | peer-group peer-group-name]
notifications [in | out] command.
Parameters

ip-address

(OPTIONAL) Enter the IP address of the neighbor in dotted decimal
format.

peer-group

(OPTIONAL) Enter the keyword peer-group followed by the name of
the peer group.

peer-group-name

Command Modes
Usage
Information
Command
History

320

|

in

(OPTIONAL) Enter the keyword in to view BGP notifications received
from neighbors.

out

(OPTIONAL) Enter the keyword out to view BGP notifications sent to
neighbors.

EXEC Privilege
Enter no debug ip bgp command to remove all configured debug commands for BGP.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Border Gateway Protocol IPv4 (BGPv4)

debug ip bgp soft-reconfiguration
ces

Syntax

Enable soft-reconfiguration debug.

debug ip bgp {ip-address | peer-group-name} soft-reconfiguration

To disable, use the no debug ip bgp {ip-address | peer-group-name} soft-reconfiguration
command.
Parameters

Defaults
Command Modes
Usage
Information
Command
History

ip-address

(OPTIONAL) Enter the IP address of the neighbor in dotted decimal
format.

peer-group-name

(OPTIONAL) Enter the name of the peer group to disable or enable all
routers within the peer group.

Disabled
EXEC Privilege
This command turns on BGP soft-reconfiguration inbound debugging. If no neighbor is
specified, debug is turned on for all neighbors.
Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.2.1.0

Introduced

debug ip bgp updates
ces

Syntax

Enables you to view information about BGP updates.

debug ip bgp updates [in | out | prefix-list prefix-list-name]

To disable debugging, use the no debug ip bgp [ip-address | peer-group peer-group-name]
updates [in | out] command.
Parameters

in

(OPTIONAL) Enter the keyword in to view only BGP updates received
from neighbors.

out

(OPTIONAL) Enter the keyword out to view only BGP updates sent to
neighbors.

prefix-list

(OPTIONAL) Enter the keyword prefix-list followed by the name of an
established prefix list. If the prefix list is not configured, the default is
permit (to allow all routes).

prefix-list-name

Border Gateway Protocol IPv4 (BGPv4) | 321

www.dell.com | support.dell.com

Command Modes
Usage
Information
Command
History

ip-address

(OPTIONAL) Enter the IP address of the neighbor in dotted decimal
format.

peer-group-name

(OPTIONAL) Enter the name of the peer group to disable or enable all
routers within the peer group.

EXEC Privilege
Enter no debug ip bgp command to remove all configured debug commands for BGP.

Version 8.3.7.0

Introduced on the S4810.

Version 7.7.1

Introduced support on C-Series

default-metric
ces

Syntax

Enables you to change the metrics of redistributed routes to locally originated routes. Use this
command with the redistribute command.
default-metric number

To return to the default setting, enter no default-metric.
Parameters

Defaults
Command Modes
Usage
Information
Related
Commands

Command
History

number

Enter a number as the metric to be assigned to routes from other protocols.
Range: 1 to 4294967295.

0
ROUTER BGP
The default-metric command in BGP sets the value of the BGP MULTI_EXIT_DISC (MED)
attribute for redistributed routes only.
bgp always-compare-med

Enable comparison of all BGP MED attributes.

redistribute

Redistribute routes from other routing protocols into BGP.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

description
ces

Syntax

322

|

Enter a description of the BGP routing protocol

description {description}

Border Gateway Protocol IPv4 (BGPv4)

To remove the description, use the no description {description} command.
Parameters

Defaults
Command Modes

description

No default behavior or values
ROUTER BGP

Command
History

Related
Commands

Enter a description to identify the BGP protocol (80 characters maximum).

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

pre-7.7.1.0

Introduced

router bgp

Enter ROUTER mode on the switch.

distance bgp
ces

Syntax

Configure three administrative distances for routes.

distance bgp external-distance internal-distance local-distance

To return to default values, enter no distance bgp.
Parameters

external-distance

Enter a number to assign to routes learned from a neighbor external to the
AS.
Range: 1 to 255
Default: 20

internal-distance

Enter a number to assign to routes learned from a router within the AS.
Range: 1 to 255
Default: 200

local-distance

Enter a number to assign to routes learned from networks listed in the
network command.
Range: 1 to 255
Default: 200

Defaults

external-distance

Command Modes

ROUTER BGP

= 20; internal-distance = 200; local-distance = 200

Caution: Dell Force10 recommends that you do not change the administrative distance of
internal routes. Changing the administrative distances may cause routing table
inconsistencies.

Border Gateway Protocol IPv4 (BGPv4) | 323

www.dell.com | support.dell.com

Usage
Information

Command
History

The higher the administrative distance assigned to a route means that your confidence in that
route is low. Routes assigned an administrative distance of 255 are not installed in the routing
table. Routes from confederations are treated as internal BGP routes.
Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

max-paths
cesz

Syntax

Configure the maximum number of parallel routes (multipath support) BGP supports.

max-paths {ebgp | ibgp} number

To return to the default values, enter no max-paths.
Parameters

Defaults
Command Modes
Usage
Information

ebgp

Enter the keyword ebgp to enable multipath support for External BGP routes.

ibgp

Enter the keyword ibgp to enable multipath support for Internal BGP routes.

number

Enter a number as the maximum number of parallel paths.
S4810, Z9000 Range: 1 to 64
ExaScale Range: 1 to 16
Default: 1

none
ROUTER BGP
If you enable this command, use the clear ip bgp * command to recompute the best path.
For optimal configuration, set the number variable to the highest possible value. Dell Force10
recommends maintaining the default setting or the next highest value.

Command
History

Version 8.3.8.0

Command syntax changed to max-paths (was maximum-paths).

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

neighbor activate
ces

Syntax

324

|

This command allows the specified neighbor/peer group to be enabled for the current AFI/
SAFI (Address Family Identifier/Subsequent Address Family Identifier).
neighbor [ip-address | peer-group-name] activate

Border Gateway Protocol IPv4 (BGPv4)

To disable, use the no neighbor [ip-address | peer-group-name] activate command.
Parameters

Defaults
Command Modes
Usage
Information

Command
History

ip-address

(OPTIONAL) Enter the IP address of the neighbor in dotted decimal
format.

peer-group-name

(OPTIONAL) Enter the name of the peer group

activate

Enter the keyword activate to enable the neighbor/peer group in the
new AFI/SAFI.

Disabled
CONFIGURATION-ROUTER-BGP-ADDRESS FAMILY
By default, when a neighbor/peer group configuration is created in the Router BGP context, it
is enabled for the IPv4/Unicast AFI/SAFI. By using activate in the new context, the neighbor/
peer group is enabled for AFI/SAFI.
Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

neighbor add-path
This command allows the specified neighbor/peer group to send/receive multiple path
advertisements.
Syntax
Parameters

Defaults
Command Modes
Related
Commands

neighbor [ip-address | peer-group-name] add-path [send | receive | both] count
ip-address

(OPTIONAL) Enter the IP address of the neighbor in dotted decimal
format.

peer-group-name

(OPTIONAL) Enter the name of the peer group.

send

Enter this keyword to indicate that the system will send multiple paths
to peers.

receive

Enter this keyword to indicate that the system will accept multiple
paths from peers.

both

Enter this keyword to indicate that the system will send and accept
multiple paths from peers.

count

Enter the number paths supported.
Range: 2 to 64

none
CONFIGURATION-ROUTER-BGP-ADDRESS FAMILY
bgp add-path

Allow the advertisement of multiple paths for the same address prefix
without the new paths implicitly replacing any previous ones.

Border Gateway Protocol IPv4 (BGPv4) | 325

www.dell.com | support.dell.com

Command
History

Version 8.3.8.0

Introduced on the S4810.

neighbor advertisement-interval
ces

Syntax

Set the advertisement interval between BGP neighbors or within a BGP peer group.

neighbor {ip-address | peer-group-name} advertisement-interval seconds

To return to the default value, use the no neighbor {ip-address | peer-group-name}
advertisement-interval command.
Parameters

Defaults

ip-address

Enter the IP address of the neighbor in dotted decimal format.

peer-group-name

Enter the name of the peer group to set the advertisement interval for all
routers in the peer group.

seconds

Enter a number as the time interval, in seconds, between BGP
advertisements.
Range: 0 to 600 seconds.
Default: 5 seconds for internal BGP peers; 30 seconds for external BGP
peers.

seconds

= 5 seconds (internal peers); seconds = 30 seconds (external peers)

Command Modes

ROUTER BGP

Command
History

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

neighbor advertisement-start
ces

Syntax

Set the minimum interval before starting to send BGP routing updates.

neighbor {ip-address} advertisement-start seconds

To return to the default value, use the no neighbor {ip-address} advertisement-start command.
Parameters

Defaults

326

|

ip-address

Enter the IP address of the neighbor in dotted decimal format.

seconds

Enter a number as the time interval, in seconds, before BGP route
updates are sent.
Range: 0 to 3600 seconds.

none

Border Gateway Protocol IPv4 (BGPv4)

Command Modes

ROUTER BGP

Command
History

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

neighbor allowas-in
ces

Syntax

Set the number of times an AS number can occur in the AS path

neighbor {ip-address | peer-group-name} allowas-in number

To return to the default value, use the no neighbor {ip-address | peer-group-name} allowas-in
command.
Parameters

ip-address

Enter the IP address of the neighbor in dotted decimal format.

peer-group-name

Enter the name of the peer group to set the advertisement interval for all
routers in the peer group.

number

Enter a number of times to allow this neighbor ID to use the AS path.
Range: 1 to 10.

Defaults

Not configured.

Command Modes

ROUTER BGP

Related
Commands
Command
History

bgp four-octet-as-support

Enable 4-Byte support for the BGP process.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced on C-Series and E-Series

neighbor default-originate
ces

Syntax

Inject the default route to a BGP peer or neighbor.

neighbor {ip-address | peer-group-name} default-originate [route-map map-name]

To remove a default route, use the no neighbor {ip-address | peer-group-name} default-originate
command.

Border Gateway Protocol IPv4 (BGPv4) | 327

www.dell.com | support.dell.com

Parameters

ip-address

Enter the IP address of the neighbor in dotted decimal format.

peer-group-name

Enter the name of the peer group to set the default route of all routers in
that peer group.

route-map map-name

(OPTIONAL) Enter the keyword route-map followed by the name of a
configured route map.

Defaults

Not configured.

Command Modes

ROUTER BGP

Usage
Information

Command
History

If you apply a route map to a BGP peer or neighbor with the neighbor default-originate
command configured, the software does not apply the set filters in the route map to that BGP
peer or neighbor.
Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

neighbor description
ces

Syntax

Assign a character string describing the neighbor or group of neighbors (peer group).

neighbor {ip-address | peer-group-name} description text

To delete a description, use the no neighbor {ip-address | peer-group-name} description
command.
Parameters

ip-address

Enter the IP address of the neighbor in dotted decimal format.

peer-group-name

Enter the name of the peer group.

text

Enter a continuous text string up to 80 characters.

Defaults

Not configured.

Command Modes

ROUTER BGP

Command
History

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

neighbor distribute-list
ces

328

|

Distribute BGP information via an established prefix list.

Border Gateway Protocol IPv4 (BGPv4)

Syntax

neighbor {ip-address | peer-group-name} distribute-list prefix-list-name {in | out}

To delete a neighbor distribution list, use the no neighbor {ip-address | peer-group-name}
distribute-list prefix-list-name {in | out} command.
Parameters

ip-address

Enter the IP address of the neighbor in dotted decimal format.

peer-group-name

Enter the name of the peer group to apply the distribute list filter to all
routers in the peer group.

prefix-list-name

Enter the name of an established prefix list.
If the prefix list is not configured, the default is permit (to allow all
routes).

in

Enter the keyword in to distribute only inbound traffic.

out

Enter the keyword out to distribute only outbound traffic.

Defaults

Not configured.

Command Modes

ROUTER BGP

Usage
Information
Related
Commands

Command
History

Other BGP filtering commands include neighbor filter-list, ip as-path access-list and neighbor
route-map.
ip as-path access-list

Configure IP AS-Path ACL.

neighbor filter-list

Assign a AS-PATH list to a neighbor or peer group.

neighbor route-map

Assign a route map to a neighbor or peer group.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

neighbor ebgp-multihop
ces

Syntax

Attempt and accept BGP connections to external peers on networks that are not directly
connected.
neighbor {ip-address | peer-group-name} ebgp-multihop [ttl]

To disallow and disconnect connections, use the no neighbor {ip-address | peer-group-name}
ebgp-multihop command.
Parameters

ip-address

Enter the IP address of the neighbor in dotted decimal format.

peer-group-name

Enter the name of the peer group.

ttl

(OPTIONAL) Enter the number of hops as the Time to Live (ttl) value.
Range: 1 to 255.
Default: 255

Border Gateway Protocol IPv4 (BGPv4) | 329

www.dell.com | support.dell.com

Defaults
Command Modes
Usage
Information

Command
History

Disabled.
ROUTER BGP
To prevent loops, the neighbor ebgp-multihop command will not install default routes of the
multihop peer. Networks not directly connected are not considered valid for best path
selection.
Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

neighbor fall-over
ces

Syntax

Enable or disable fast fall-over for BGP neighbors.

neighbor {ipv4-address | peer-group-name} fall-over

To disable, use the no neighbor {ipv4-address | peer-group-name} fall-over command.
Parameters

Defaults
Command Modes
Usage
Information

Related
Commands
Command
History

ipv4-address

Enter the IP address of the neighbor in dotted decimal format.

peer-group-name

Enter the name of the peer group.

Disabled
ROUTER BGP
When fall-over is enabled, BGP keeps track of IP or IPv6 reachability to the peer remote
address and the peer local address. Whenever either address becomes unreachable (i.e, no
active route exists in the routing table for peer IP or IPv6 destination/local address), BGP
brings down the session with the peer.
show ip bgp neighbors

Display information on the BGP neighbors

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.4.1.0

Introduced

neighbor filter-list
ces

330

|

Configure a BGP filter based on the AS-PATH attribute.

Border Gateway Protocol IPv4 (BGPv4)

Syntax

neighbor {ip-address | peer-group-name} filter-list as-path-name {in | out}

To delete a BGP filter, use the no neighbor {ip-address | peer-group-name} filter-list as-path-name
{in | out} command.
Parameters

ip-address

Enter the IP address of the neighbor in dotted decimal format.

peer-group-name

Enter the name of the peer group to apply the filter to all routers in
the peer group.

as-path-name

Enter the name of an established AS-PATH access list (up to 140
characters).
If the AS-PATH access list is not configured, the default is permit
(allow routes).

in

Enter the keyword in to filter inbound BGP routes.

out

Enter the keyword out to filter outbound BGP routes.

Defaults

Not configured.

Command Modes

ROUTER BGP

Usage
Information

Related
Commands
Command
History

Use the ip as-path access-list command syntax in the CONFIGURATION mode to enter the
AS-PATH ACL mode and configure AS-PATH filters to deny or permit BGP routes based on
information in their AS-PATH attribute.
ip as-path access-list

Enter AS-PATH ACL mode and configure AS-PATH filters.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, ACL
names are up to 16 characters long.

Version 7.7.1.0

Introduced support on C-Series

neighbor graceful-restart
ces

Syntax

Enable graceful restart on a BGP neighbor.

neighbor {ip-address | peer-group-name} graceful-restart [restart-time seconds] [stale-path-time
seconds] [role receiver-only]

To return to the default, enter the no bgp graceful-restart command.
Parameters

ip-address

Enter the IP address of the neighbor in dotted decimal format.

peer-group-name

Enter the name of the peer group to apply the filter to all routers
in the peer group.

Border Gateway Protocol IPv4 (BGPv4) | 331

www.dell.com | support.dell.com

Defaults
Command Modes
Usage
Information

Command
History

restart-time seconds

Enter the keyword restart-time followed by the maximum
number of seconds needed to restart and bring-up all the peers.
Range: 1 to 3600 seconds
Default: 120 seconds

stale-path-time seconds

Enter the keyword stale-path-time followed by the maximum
number of seconds to wait before restarting a peer’s stale paths.
Default: 360 seconds.

role receiver-only

Enter the keyword role receiver-only to designate the local
router to support graceful restart as a receiver only.

as above
ROUTER BGP
This feature is advertised to BGP neighbors through a capability advertisement. In receiver
only mode, BGP saves the advertised routes of peers that support this capability when they
restart.
Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

neighbor local-as
ces

Syntax

Configure Internal BGP (IBGP) routers to accept external routes from neighbors with a local
AS number in the AS number path
neighbor {ip-address | peer-group-name} local-as as-number [no-prepend]

To return to the default value, use the no neighbor {ip-address | peer-group-name} local-as
command.
Parameters

332

ip-address

Enter the IP address of the neighbor in dotted decimal format.

peer-group-name

Enter the name of the peer group to set the advertisement interval for all
routers in the peer group.

as-number

Enter the AS number to reset all neighbors belonging to that AS.
Range: 0-65535 (2-Byte) or
1-4294967295 (4-Byte) or
0.1-65535.65535 (Dotted format)

no prepend

Specifies that local AS values are not prepended to announcements from
the neighbor.

Defaults

Not configured.

Command Modes

ROUTER BGP

|

Border Gateway Protocol IPv4 (BGPv4)

Related
Commands
Command
History

Enable 4-Byte support for the BGP process.

bgp
four-octet-as-support

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced command
Introduced support on C-Series

neighbor maximum-prefix
ces

Syntax

Control the number of network prefixes received.

neighbor {ip-address | peer-group-name} maximum-prefix maximum [threshold] [warning-only]

To return to the default values, use the no neighbor {ip-address | peer-group-name}
maximum-prefix maximum command.
Parameters

Defaults
Command Modes
Usage
Information

Related
Commands

ip-address

Enter the IP address of the neighbor in dotted decimal format.

peer-group-name

Enter the name of the peer group.

maximum

Enter a number as the maximum number of prefixes allowed for this BGP
router.
Range: 1 to 4294967295.

threshold

(OPTIONAL) Enter a number to be used as a percentage of the maximum
value. When the number of prefixes reaches this percentage of the
maximum value, the E-Series software sends a message.
Range: 1 to 100 percent.
Default: 75

warning-only

(OPTIONAL) Enter the keyword warning-only to set the router to send a
log message when the maximum value is reached. If this parameter is not
set, the router stops peering when the maximum number of prefixes is
reached.

threshold =

75

ROUTER BGP
If the neighbor maximum-prefix is configured and the neighbor receives more prefixes than
allowed by the neighbor maximum-prefix command configuration, the neighbor goes down
and the show ip bgp summary command displays (prfxd) in the State/PfxRcd column for
that neighbor. The neighbor remains down until you enter the clear ip bgp command for the
neighbor or the peer group to which the neighbor belongs or you enter neighbor shutdown
and neighbor no shutdown commands.
show ip bgp summary

Displays the current BGP configuration.

Border Gateway Protocol IPv4 (BGPv4) | 333

www.dell.com | support.dell.com

Command
History

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

neighbor next-hop-self
ces

Syntax

Enables you to configure the router as the next hop for a BGP neighbor. (This command is
used for IBGP).
neighbor {ip-address | peer-group-name} next-hop-self

To return to the default setting, use the no neighbor {ip-address | peer-group-name}
next-hop-self command.
Parameters

Defaults
Command Modes
Usage
Information
Command
History

ip-address

Enter the IP address of the neighbor in dotted decimal format.

peer-group-name

Enter the name of the peer group.

Disabled.
ROUTER BGP
If the set next-hop command in the ROUTE-MAP mode is configured, its configuration takes
precedence over the neighbor next-hop-self command.
Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

neighbor password
ces

Syntax

Enable Message Digest 5 (MD5) authentication on the TCP connection between two
neighbors.
neighbor {ip-address | peer-group-name} password [encryption-type] password

To delete a password, use the no neighbor {ip-address | peer-group-name} password command.
Parameters

334

|

ip-address

Enter the IP address of the router to be included in the peer group.

peer-group-name

Enter the name of a configured peer group.

encryption-type

(OPTIONAL) Enter 7 as the encryption type for the password entered. 7
means that the password is encrypted and hidden.

password

Enter a text string up to 80 characters long. The first character of the
password must be a letter.
You cannot use spaces in the password.

Border Gateway Protocol IPv4 (BGPv4)

Defaults

Not configured.

Command Modes

ROUTER BGP

Usage
Information

Configure the same password on both BGP peers or a connection does not occur. When you
configure MD5 authentication between two BGP peers, each segment of the TCP connection
between them is verified and the MD5 digest is checked on every segment sent on the TCP
connection.
Configuring a password for a neighbor will cause an existing session to be torn down and a
new one established.
If you specify a BGP peer group by using the peer-group-name parameter, all the members of
the peer group will inherit the characteristic configured with this command.
If you configure a password on one neighbor, but you have not configured a password for the
neighboring router, the following message appears on the console while the routers attempt to
establish a BGP session between them:
%RPM0-P:RP1 %KERN-6-INT: No BGP MD5 from [peer's IP address]
:179 to [local router's IP address]:65524
Also, if you configure different passwords on the two routers, the following message appears
on the console:
%RPM0-P:RP1 %KERN-6-INT: BGP MD5 password mismatch from
[peer's IP address] : 11502 to [local router's IP address] :179

Command
History

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

neighbor peer-group (assigning peers)
ces

Syntax

Enables you to assign one peer to a existing peer group.

neighbor ip-address peer-group peer-group-name

To delete a peer from a peer group, use the no neighbor ip-address peer-group peer-group-name
command.
Parameters

ip-address

Enter the IP address of the router to be included in the peer group.

peer-group-name

Enter the name of a configured peer group.

Defaults

Not configured.

Command Modes

ROUTER BGP

Border Gateway Protocol IPv4 (BGPv4) | 335

www.dell.com | support.dell.com

Usage
Information

You can assign up to 256 peers to one peer group.
When you add a peer to a peer group, it inherits all the peer group’s configured parameters. A
peer cannot become part of a peer group if any of the following commands are configured on
the peer:
•
•
•
•
•
•
•

neighbor advertisement-interval
neighbor distribute-list out
neighbor filter-list out
neighbor next-hop-self
neighbor route-map out
neighbor route-reflector-client
neighbor send-community

A neighbor may keep its configuration after it was added to a peer group if the neighbor’s
configuration is more specific than the peer group’s, and the neighbor’s configuration does
not affect outgoing updates.
A peer group must exist before you add a peer to it. If the peer group is disabled (shutdown)
the peers within the group are also disabled (shutdown).
Related
Commands

Command
History

clear ip bgp

Resets BGP sessions.

neighbor peer-group (creating group)

Create a peer group.

show ip bgp peer-group

View BGP peers.

show ip bgp neighbors

View BGP neighbors configurations.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

neighbor peer-group (creating group)
ces

Syntax

Enables you to create a peer group and assign it a name.

neighbor peer-group-name peer-group

To delete a peer group, use the no neighbor peer-group-name peer-group command.
Parameters

336

peer-group-name

Defaults

Not configured.

Command Modes

ROUTER BGP

|

Border Gateway Protocol IPv4 (BGPv4)

Enter a text string up to 16 characters long as the name of the peer group.

Usage
Information
Related
Commands

Command
History

When a peer group is created, it is disabled (shut mode).

neighbor peer-group (assigning
peers)

Assign routers to a peer group.

neighbor remote-as

Assign a indirectly connected AS to a neighbor or peer group.

neighbor shutdown

Disable a peer or peer group.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

neighbor peer-group passive
ces

Syntax

Enable passive peering on a BGP peer group, that is, the peer group does not send an OPEN
message, but will respond to one.
neighbor peer-group-name peer-group passive [limit sessions]

To delete a passive peer-group, use the no neighbor peer-group-name peer-group passive
command.
Parameters

peer-group-name

Enter a text string up to 16 characters long as the name of the peer group.

limit

(Optional, S4810 only) Enter the keyword limit to constrain the numbers
of sessions for this peer-group.
Range: 2-256
Default: 256

Defaults

Not Configured

Command Modes

ROUTER BGP

Usage
Information

After you configure a peer group as passive, you must assign it a subnet using the neighbor
soft-reconfiguration inbound command.
For passive eBGP limits, the Remote AS must be different from the AS for this neighbor.

Related
Commands

Command
History

neighbor soft-reconfiguration inbound

Assign a subnet to a dynamically-configured BGP
neighbor.

neighbor remote-as

Create and specify the remote peer to the BGP neighbor

Version 8.3.8.0

Introduced the limit keyword on the S4810.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Border Gateway Protocol IPv4 (BGPv4) | 337

www.dell.com | support.dell.com

neighbor remote-as
ces

Create and specify the remote peer to the BGP neighbor.

Syntax

neighbor {ip-address | peer-group-name} remote-as number

To delete a remote AS entry, use the no neighbor {ip-address | peer-group-name} remote-as
number command.
Parameters

ip-address

Enter the IP address of the neighbor to enter the remote AS in its routing
table.

peer-group-name

Enter the name of the peer group to enter the remote AS into routing
tables of all routers within the peer group.

number

Enter a number of the AS.
Range: 0-65535 (2-Byte) or 1-4294967295 (4-Byte)

Defaults

Not configured.

Command Modes

ROUTER BGP

Usage
Information

You must configure your system to accept 4-Byte formats before entering a 4-Byte AS
Number. If the number parameter is the same as the AS number used in the router bgp
command, the remote AS entry in the neighbor is considered an internal BGP peer entry.
This command creates a peer and the newly created peer is disabled (shutdown).

Related
Commands

Command
History

router bgp

Enter the ROUTER BGP mode and configure routes in an AS.

bgp four-octet-as-support

Enable 4-Byte support for the BGP process.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series
Added 4-Byte support.

neighbor remove-private-as
ces

Syntax

Remove private AS numbers from the AS-PATH of outgoing updates.

neighbor {ip-address | peer-group-name} remove-private-as

To return to the default, use the no neighbor {ip-address | peer-group-name} remove-private-as
command.

338

|

Border Gateway Protocol IPv4 (BGPv4)

Parameters

Defaults
Command Modes
Usage
Information

ip-address

Enter the IP address of the neighbor to remove the private AS numbers.

peer-group-name

Enter the name of the peer group to remove the private AS numbers

Disabled (that is, private AS number are not removed).
ROUTER BGP
Applies to EBGP neighbors only.
You must configure your system to accept 4-byte formats before entering a 4-byte AS
Number.
If the AS-PATH contains both public and private AS number or contains AS numbers of an
EBGP neighbor, the private AS numbers are not removed.
If a confederation contains private AS numbers in its AS-PATH, the software removes the
private AS numbers only if they follow the confederation numbers in the AS path.
Private AS numbers are 64512 to 65535 (2-Byte).

Command
History

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series
Added 4-Byte support.

neighbor route-map
ces

Syntax

Apply an established route map to either incoming or outbound routes of a BGP neighbor or
peer group.
neighbor {ip-address | peer-group-name} route-map map-name {in | out}

To remove the route map, use the no neighbor {ip-address | peer-group-name} route-map
map-name {in | out} command.
Parameters

ip-address

Enter the IP address of the neighbor in dotted decimal format.

peer-group-name

Enter the name of the peer group.

map-name

Enter the name of an established route map.
If the Route map is not configured, the default is deny (to drop all
routes).

in

Enter the keyword in to filter inbound routes.

out

Enter the keyword out to filter outbound routes.

Defaults

Not configured.

Command Modes

ROUTER BGP

Border Gateway Protocol IPv4 (BGPv4) | 339

www.dell.com | support.dell.com

Usage
Information

When you apply a route map to outbound routes, only routes that match at least one section of
the route map are permitted.
If you identify a peer group by name, the peers in that peer group inherit the characteristics in
the Route map used in this command. If you identify a peer by IP address, the Route map
overwrites either the inbound or outbound policies on that peer.

Command
History

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

neighbor route-reflector-client
ces

Syntax

Configure the router as a route reflector and the specified neighbors as members of the
cluster.
neighbor {ip-address | peer-group-name} route-reflector-client

To remove one or more neighbors from a cluster, use the no neighbor {ip-address |
peer-group-name} route-reflector-client command. If you delete all members of a cluster, you
also delete the route-reflector configuration on the router.
Parameters

ip-address

Enter the IP address of the neighbor in dotted decimal format.

peer-group-name

Enter the name of the peer group.
All routers in the peer group receive routes from a route reflector.

Defaults

Not configured.

Command Modes

ROUTER BGP

Usage
Information

A route reflector reflects routes to the neighbors assigned to the cluster. Neighbors in the
cluster do not need not be fully meshed. By default, when no route reflector is used, internal
BGP (IBGP) speakers in the network must be fully meshed.
The first time you enter this command the router is configured as a route reflector and the
specified BGP neighbors are configured as clients in the route-reflector cluster.
When you remove all clients of a route reflector using the no neighbor route-reflector-client
command, the router no longer functions as a route reflector.
If the clients of a route reflector are fully meshed, you can configure the route reflector to not
reflect routes to specified clients by using the no bgp client-to-client reflection command.

Related
Commands

340

|

bgp client-to-client reflection

Border Gateway Protocol IPv4 (BGPv4)

Enable route reflection between route reflector and clients.

Command
History

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

neighbor send-community
ces

Syntax

Send a COMMUNITY attribute to a BGP neighbor or peer group. A COMMUNITY attribute
indicates that all routes with that attribute belong to the same community grouping.
neighbor {ip-address | peer-group-name} send-community

To disable sending a COMMUNITY attribute, use the no neighbor {ip-address |
peer-group-name} send-community command.
Parameters

Defaults
Command Modes
Usage
Information
Command
History

ip-address

Enter the IP address of the peer router in dotted decimal format.

peer-group-name

Enter the name of the peer group to send a COMMUNITY attribute to
all routers within the peer group.

Not configured and COMMUNITY attributes are not sent to neighbors.
ROUTER BGP
To configure a COMMUNITY attribute, use the set community command in the
ROUTE-MAP mode.
Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

neighbor shutdown
ces

Syntax

Disable a BGP neighbor or peer group.

neighbor {ip-address | peer-group-name} shutdown

To enable a disabled neighbor or peer group, use the neighbor {ip-address | peer-group-name}
no shutdown command.
Parameters

Defaults

ip-address

Enter the IP address of the neighbor in dotted decimal format.

peer-group-name

Enter the name of the peer group to disable or enable all routers within
the peer group.

Enabled (that is, BGP neighbors and peer groups are disabled.)

Border Gateway Protocol IPv4 (BGPv4) | 341

www.dell.com | support.dell.com

Command Modes
Usage
Information

ROUTER BGP
Peers that are enabled within a peer group are disabled when their peer group is disabled.
The neighbor shutdown command terminates all BGP sessions on the BGP neighbor or BGP
peer group. Use this command with caution as it terminates the specified BGP sessions.
When a neighbor or peer group is shutdown, use the show ip bgp summary command to
confirm its status.

Related
Commands

Command
History

show ip bgp summary

Displays the current BGP configuration.

show ip bgp neighbors

Displays the current BGP neighbors.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

neighbor soft-reconfiguration inbound
ces

Syntax

Enable soft-reconfiguration for BGP.

neighbor {ip-address | peer-group-name} soft-reconfiguration inbound

To disable, use the no neighbor {ip-address | peer-group-name} soft-reconfiguration inbound
command.
Parameters

Defaults
Command Modes
Usage
Information

ip-address

Enter the IP address of the neighbor in dotted decimal format.

peer-group-name

Enter the name of the peer group to disable or enable all routers
within the peer group.

Disabled
ROUTER BGP
This command enables soft-reconfiguration for the BGP neighbor specified. BGP will store
all the updates received by the neighbor but will not reset the peer-session.
Caution: Inbound update storage is a memory-intensive operation. The entire BGP update
database from the neighbor is stored in memory regardless of the inbound policy results
applied on the neighbor.

Note: This command is supported in BGP Router Configuration mode for IPv4
Unicast address only.

342

|

Border Gateway Protocol IPv4 (BGPv4)

Related
Commands
Command
History

show ip bgp neighbors

Display routes received by a neighbor

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.4.1.0

Introduced

neighbor subnet
ces
Syntax

Enable passive peering so that the members of the peer group are dynamic
neighbor peer-group-name subnet subnet-number mask

To remove passive peering, use the no neighbor peer-group-name subnet subnet-number mask
command.
Parameters

subnet-number

Enter a subnet number in dotted decimal format (A.B.C.D.) as the allowable
range of addresses included in the Peer group.
To allow all addresses, enter 0.0.0.0/0.

mask

Enter a prefix mask in / prefix-length format (/x).

Defaults

Not configured.

Command Modes

ROUTER BGP

Command
History

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

neighbor timers
ces

Syntax

Set keepalive and hold time timers for a BGP neighbor or a peer group.

neighbor {ip-address | peer-group-name} timers keepalive holdtime

To return to the default values, use the no neighbor {ip-address | peer-group-name} timers
command.
Parameters

ip-address

Enter the IP address of the peer router in dotted decimal format.

peer-group-name

Enter the name of the peer group to set the timers for all routers within the
peer group.

Border Gateway Protocol IPv4 (BGPv4) | 343

www.dell.com | support.dell.com

Defaults
Command Modes
Usage
Information

keepalive

Enter a number for the time interval, in seconds, between keepalive
messages sent to the neighbor routers.
Range: 1 to 65535
Default: 60 seconds

holdtime

Enter a number for the time interval, in seconds, between the last
keepalive message and declaring the router dead.
Range: 3 to 65535
Default: 180 seconds

keepalive

= 60 seconds; holdtime = 180 seconds.

ROUTER BGP
Timer values configured with the neighbor timers command override the timer values
configured with the any other command.
When two neighbors that are configured with different keepalive and holdtime values negotiate
for new values, the resulting values will be as follows:
•
•

Command
History

the lower of the holdtime values is the new holdtime value, and
whichever is the lower value; one-third of the new holdtime value, or the
configured keepalive value is the new keepalive value.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

neighbor update-source
ces

Syntax

Enable the E-Series software to use Loopback interfaces for TCP connections for BGP
sessions.
neighbor {ip-address | peer-group-name} update-source interface

To use the closest interface, use the no neighbor {ip-address | peer-group-name} update-source
interface command.
Parameters

344

ip-address

Enter the IP address of the peer router in dotted decimal format.

peer-group-name

Enter the name of the peer group to disable all routers within the peer
group.

interface

Enter the keyword loopback followed by a number of the loopback
interface.
Range: 0 to 16383.

Defaults

Not configured.

Command Modes

ROUTER BGP

|

Border Gateway Protocol IPv4 (BGPv4)

Usage
Information

Command
History

Loopback interfaces are up constantly and the BGP session may need one interface constantly
up to stabilize the session. The neighbor update-source command is not necessary for directly
connected internal BGP sessions.
Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

neighbor weight
ces

Syntax

Assign a weight to the neighbor connection, which is used to determine the best path.

neighbor {ip-address | peer-group-name} weight weight

To remove a weight value, use the no neighbor {ip-address | peer-group-name} weight
command.
Parameters

Defaults
Command Modes
Usage
Information

ip-address

Enter the IP address of the peer router in dotted decimal format.

peer-group-name

Enter the name of the peer group to disable all routers within the peer
group.

weight

Enter a number as the weight.
Range: 0 to 65535
Default: 0

0
ROUTER BGP
In the FTOS best path selection process, the path with the highest weight value is preferred.
Reset the neighbor connection (clear ip bgp * command) to apply the weight to
the connection and recompute the best path.
Note:

If the set weight command is configured in a route map applied to this neighbor, the weight
set in that command overrides the weight set in the neighbor weight command.
Related
Commands
Command
History

set weight

Assign a weight to all paths meeting the route map criteria.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Border Gateway Protocol IPv4 (BGPv4) | 345

www.dell.com | support.dell.com

network
ces

Syntax

Specify the networks for the BGP process and enter them in the BGP routing table.

network ip-address mask [route-map map-name]

To remove a network, use the no network ip-address mask [route-map map-name] command.
Parameters

ip-address

Enter an IP address in dotted decimal format of the network.

mask

Enter the mask of the IP address in the slash prefix length format (for example, /
24).
The mask appears in command outputs in dotted decimal format (A.B.C.D).

route-map

(OPTIONAL) Enter the keyword route-map followed by the name of an
established route map.
Only the following ROUTE-MAP mode commands are supported:
• match ip address
• set community
• set local-preference
• set metric
• set next-hop
• set origin
• set weight
If the route map is not configured, the default is deny (to drop all routes).

map-name

Defaults

Not configured.

Command Modes

ROUTER BGP

Usage
Information

Related
Commands
Command
History

FTOS software resolves the network address configured by the network command with the
routes in the main routing table to ensure that the networks are reachable via non-BGP routes
and non-default routes.
redistribute

Redistribute routes into BGP.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

network backdoor
ces

Syntax

Specify this IGP route as the preferred route.

network ip-address mask backdoor

To remove a network, use the no network ip-address mask backdoor command.

346

|

Border Gateway Protocol IPv4 (BGPv4)

Parameters

ip-address

Enter an IP address in dotted decimal format of the network.

mask

Enter the mask of the IP address in the slash prefix length format (for example, /
24).
The mask appears in command outputs in dotted decimal format (A.B.C.D).

Defaults

Not configured.

Command Modes

ROUTER BGP

Usage
Information
Command
History

Though FTOS does not generate a route due to backdoor config, there is an option for
injecting/sourcing a local route in presence of network backdoor config on a learned route.
Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

redistribute
ces

Syntax

Redistribute routes into BGP.

redistribute {connected | static} [route-map map-name]

To disable redistribution, use the no redistribution {connected | static} command.
Parameters

connected

Enter the keyword connected to redistribute routes from physically connected
interfaces.

static

Enter the keyword static to redistribute manually configured routes.
These routes are treated as incomplete routes.

route-map

(OPTIONAL) Enter the keyword route-map followed by the name of an
established route map.
Only the following ROUTE-MAP mode commands are supported:
• match ip address
• set community
• set local-preference
• set metric
• set next-hop
• set origin
• set weight
If the route map is not configured, the default is deny (to drop all routes).

map-name

Defaults

Not configured.

Command Modes

ROUTER BGP

Border Gateway Protocol IPv4 (BGPv4) | 347

www.dell.com | support.dell.com

Usage
Information

With FTOS version 8.3.1.0 and later, the redistribute command can be used to advertise the
IGP cost as the MED on redistributed routes. When the route-map is set with metric-type internal
and applied outbound to an EBGP peer/peer-group, the advertised routes corresponding to
those peer/peer-group will have IGP cost set as MED.
If you do not configure default-metric command, in addition to the redistribute command, or
there is no route map to set the metric, the metric for redistributed static and connected is “0”.
To redistribute the default route (0.0.0.0/0) configure the neighbor default-originate
command.

Related
Commands
Command
History

neighbor default-originate

Inject the default route.

Version 8.3.7.0

Introduced on the S4810.

Version 8.3.1.0

Introduced ability to substitute IGP cost for MED when a peer/peer-group
outbound route-map is set as internal.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

redistribute isis
e
Syntax

Redistribute IS-IS routes into BGP.
redistribute isis [WORD][level-1| level-1-2 | level-2] [metric metric-value] [route-map map-name]

To return to the default values, enter the no redistribute isis [WORD][level-1| level-1-2 | level-2]
[metric metric-value] [route-map map-name] command.
Parameters

348

|

WORD

ISO routing area tag

level-1

(OPTIONAL) Enter the keyword level-1 to independently
redistributed into Level 1 routes only.

level-1-2

(OPTIONAL) Enter the keyword level-1-2 to independently
redistributed into Level 1 and Level 2 routes. This is the default.

level-2

(OPTIONAL) Enter the keyword level-2 to independently
redistributed into Level 2 routes only

Border Gateway Protocol IPv4 (BGPv4)

Defaults
Command Modes

metric metric-value

(OPTIONAL) Enter the keyword metric followed by the metric value
used for the redistributed route. Use a metric value that is consistent
with the destination protocol.
Range: 0 to 16777215
Default: 0

route-map map-name

Enter the keyword route-map followed by the map name that is an
identifier for a configured route map.
The route map should filter imported routes from the source routing
protocol to the current routing protocol.
If you do not specify a map-name, all routes are redistributed. If you
specify a keyword, but fail to list route map tags, no routes will be
imported.

level-1-2

ROUTER BGP

Example

Usage
Information

FTOS(conf)#router bgp 1
FTOS(conf-router_bgp)#redistribute isis level-1 metric 44 route-map rmap-is2bgp
FTOS(conf-router_bgp)#show running-config bgp
!
router bgp 1
redistribute isis level-1 metric 44 route-map rmap-is2bgp

With FTOS version 8.3.1.0 and later, the redistribute command can be used to advertise the
IGP cost as the MED on redistributed routes. When the route-map is set with metric-type internal
and applied outbound to an EBGP peer/peer-group, the advertised routes corresponding to
those peer/peer-group will have IGP cost set as MED.
IS-IS to BGP redistribution supports matching of level-1 or level-2 routes or all routes (default).
More advanced match options can be performed using route maps. The metric value of
redistributed routes can be set by the redistribution command.

Command
History

Version 8.3.1.0

Introduced ability to substitute IGP cost for MED when a peer/peer-group
outbound route-map is set as internal.

Version 6.3.1.0

Introduced

redistribute ospf
ces

Syntax

Redistribute OSPF routes into BGP.

redistribute ospf process-id [[match external {1 | 2}] [match internal]] [route-map map-name]

To stop redistribution of OSPF routes, use the no redistribute ospf process-id command.

Border Gateway Protocol IPv4 (BGPv4) | 349

www.dell.com | support.dell.com

Parameters

process-id

Enter the number of the OSPF process.
Range: 1 to 65535

match external {1 | 2}

(OPTIONAL) Enter the keywords match external to redistribute
OSPF external routes. You can specify 1 or 2 to redistribute those
routes only.

match internal

(OPTIONAL) Enter the keywords match internal to redistribute
OSPF internal routes only.

route-map map-name

(OPTIONAL) Enter the keywords route-map followed by the name
of a configured Route map.

Defaults

Not configured.

Command Modes

ROUTER BGP

Usage
Information

With FTOS version 8.3.1.0 and later, the redistribute command can be used to advertise the
IGP cost as the MED on redistributed routes. When the route-map is set with metric-type internal
and applied outbound to an EBGP peer/peer-group, the advertised routes corresponding to
those peer/peer-group will have IGP cost set as MED.
When you enter redistribute isis process-id command without any other parameters, FTOS
redistributes all OSPF internal routes, external type 1 routes, and external type 2 routes. This
feature is not supported by an RFC.

Command
History

Version 8.3.7.0

Introduced on the S4810.

Version 8.3.1.0

Introduced ability to substitute IGP cost for MED when a peer/
peer-group outbound route-map is set as internal.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

router bgp
ces

Syntax

Enter ROUTER BGP mode to configure and enable BGP.

router bgp as-number

To disable BGP, use the no router bgp as-number command.
Parameters

Defaults
Command Modes
Example

350

|

as-number

Enter the AS number.
Range: 1 to 65535 (2-Byte) or 1-4294967295 (4-Byte) or
0.1-65535.65535 (Dotted format)

Not enabled.
CONFIGURATION
FTOS(conf)#router bgp 3

Border Gateway Protocol IPv4 (BGPv4)

FTOS(conf-router_bgp)#

Command
History

Usage
Information

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

At least one interface must be in Layer 3 mode for the router bgp command to be accepted. If
no interfaces are enabled for Layer 3, an error message appears: % Error: No router id
configured.

show capture bgp-pdu neighbor
ces

Syntax
Parameters

Command Modes
Example

Display BGP packet capture information for an IPv4 address on the system.

show capture bgp-pdu neighbor ipv4-address
ipv4-address

Enter the IPv4 address (in dotted decimal format) of the BGP address to
display packet information for that address.

EXEC Privilege
FTOS(conf-router_bgp)#show capture bgp-pdu neighbor 20.20.20.2
Incoming packet capture enabled for BGP neighbor 20.20.20.2
Available buffer size 40958758, 26 packet(s) captured using 680 bytes
PDU[1] : len 101, captured 00:34:51 ago
ffffffff ffffffff ffffffff ffffffff 00650100 00000013 00000000 00000000 419ef06c 00000000
00000000 00000000 00000000 00000000 0181a1e4 0181a25c 41af92c0 00000000 00000000 00000000
00000000 00000001 0181a1e4 0181a25c 41af9400 00000000
PDU[2] : len 19, captured 00:34:51 ago
ffffffff ffffffff ffffffff ffffffff 00130400
PDU[3] : len 19, captured 00:34:51 ago
ffffffff ffffffff ffffffff ffffffff 00130400
[. . .]
Outgoing packet capture enabled for BGP neighbor 20.20.20.2
Available buffer size 40958758, 27 packet(s) captured using 562 bytes
PDU[1] : len 41, captured 00:34:52 ago
ffffffff ffffffff ffffffff ffffffff 00290104 000100b4 14141401 0c020a01 04000100 01020080
00000000
PDU[2] : len 19, captured 00:34:51 ago
ffffffff ffffffff ffffffff ffffffff 00130400
PDU[3] : len 19, captured 00:34:50 ago
ffffffff ffffffff ffffffff ffffffff 00130400
[. . .]
FTOS#

Related
Commands
Command
History

capture bgp-pdu max-buffer-size

Specify a size for the capture buffer.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Border Gateway Protocol IPv4 (BGPv4) | 351

www.dell.com | support.dell.com

Version 7.7.1.0

Introduced support on C-Series

Version 7.5.1.0

Introduced

show config
ces

Syntax
Command Modes

View the current ROUTER BGP configuration.

show config

ROUTER BGP

Example

FTOS(conf-router_bgp)#show confi
!
router bgp 45
neighbor suzanne peer-group
neighbor suzanne no shutdown
neighbor sara peer-group
neighbor sara shutdown
neighbor 13.14.15.20 peer-group suzanne
neighbor 13.14.15.20 shutdown
neighbor 123.34.55.123 peer-group suzanne
neighbor 123.34.55.123 shutdown
FTOS(conf-router_bgp)#

Command
History

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

show ip bgp
ces

Syntax
Parameters

Command Modes

View the current BGP IPv4 routing table for the system.

show ip bgp [ipv4 unicast] [network [network-mask] [longer-prefixes]]

ipv4 unicast

(OPTIONAL) Enter the ipv4 unicast keywords to view information only
related to ipv4 unicast routes.

network

(OPTIONAL) Enter the network address (in dotted decimal format) of the
BGP network to view information only on that network.

network-mask

(OPTIONAL) Enter the network mask (in slash prefix format) of the BGP
network address.

longer-prefixes

(OPTIONAL) Enter the keyword longer-prefixes to view all routes with a
common prefix.

EXEC
EXEC Privilege

352

|

Border Gateway Protocol IPv4 (BGPv4)

Usage
Information

When you enable bgp non-deterministic-med command, the show ip bgp command output for a
BGP route does not list the INACTIVE reason.

Example

FTOS>show ip bgp
BGP table version is 847562, local router ID is 63.114.8.131
Status codes: s suppressed, d damped, h history, * valid, > best
Path source: I - internal, a - aggregate, c - confed-external, r - redistributed, n - network
Origin codes: i - IGP, e - EGP, ? - incomplete
Network
*> 0.0.0.0/0
* 3.0.0.0/8
*>
*> 3.3.0.0/16
*> 4.0.0.0/8
*> 4.2.49.12/30
* 4.17.250.0/24
*>
* 4.21.132.0/23
*>
*> 4.24.118.16/30
*> 4.24.145.0/30
*> 4.24.187.12/30
*> 4.24.202.0/30
*> 4.25.88.0/30
*> 5.0.0.0/9
*> 5.0.0.0/10
*> 5.0.0.0/11
--More--

Next Hop
63.114.8.33
63.114.8.33
63.114.8.33
0.0.0.0
63.114.8.35
63.114.8.33
63.114.8.33
63.114.8.33
63.114.8.33
63.114.8.33
63.114.8.33
63.114.8.33
63.114.8.33
63.114.8.33
63.114.8.33
63.114.8.33
63.114.8.33
63.114.8.33
63.114.8.33

Metric

LocPrf

22

0
0
0

Weight
0
0
0
32768
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

Path
18508
18508
18508
?
18508
18508
18508
18508
18508
18508
18508
18508
18508
18508
18508
18508
18508
18508
18508

i
209 701 80 i
701 80 i
?
701
209
209
701
209
701
209
209
209
209
209
?
?
?

1i
i
1239
1239
6461
6461
i
i
i
i
3561

13716
13716
16422
16422

i
i
i
i

3908 i

Table 9-1 defines the information displayed in the previous example
Table 9-1.

Related
Commands

Command
History

show ip bgp Command Example Fields

Field

Description

Network

Displays the destination network prefix of each BGP route.

Next Hop

Displays the next hop address of the BGP router.
If 0.0.0.0 is listed in this column, then local routes exist in the
routing table.

Metric

Displays the BGP route’s metric, if assigned.

LocPrf

Displays the BGP LOCAL_PREF attribute for the route.

Weight

Displays the route’s weight

Path

Lists all the ASs the route passed through to reach the destination
network.

show ip bgp community

View BGP communities.

neighbor maximum-prefix

Control number of network prefixes received.

Version 8.3.8.0

Added the add-path option to the S4810. Output on the S4810 shows
ADDPATH parameters.

Version 8.3.7.0

Introduced on the S4810.

Border Gateway Protocol IPv4 (BGPv4) | 353

www.dell.com | support.dell.com

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

show ip bgp cluster-list
ces

Syntax
Parameters

Command Modes

View BGP neighbors in a specific cluster.

show ip bgp [ipv4 unicast] cluster-list [cluster-id]

ipv4 unicast

(OPTIONAL) Enter the ipv4 unicast keywords to view information only related
to ipv4 unicast routes.

cluster-id

(OPTIONAL) Enter the cluster id in dotted decimal format.

EXEC
EXEC Privilege

Example

FTOS#show ip bgp cluster-list
BGP table version is 64444683, local router ID is 120.1.1.1
Status codes: s suppressed, d damped, h history, * valid, > best
Path source: I - internal, a - aggregate, c - confed-external, r - redistributed, n - network
Origin codes: i - IGP, e - EGP, ? - incomplete
Network
* I 10.10.10.1/32
* I
*>I
* I
* I
* I
* I 10.19.75.5/32
* I
*>I
* I
* I
* I
* I 10.30.1.0/24
* I
*>I
* I
* I
* I

354

|

Border Gateway Protocol IPv4 (BGPv4)

Next Hop
192.68.16.1
192.68.16.1
192.68.16.1
192.68.16.1
192.68.16.1
192.68.16.1
192.68.16.1
192.68.16.1
192.68.16.1
192.68.16.1
192.68.16.1
192.68.16.1
192.68.16.1
192.68.16.1
192.68.16.1
192.68.16.1
192.68.16.1
192.68.16.1

Metric
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

LocPrf Weight Path
100
0 i
100
0 i
100
0 i
100
0 i
100
0 i
100
0 i
100
0 ?
100
0 ?
100
0 ?
100
0 ?
100
0 ?
100
0 ?
100
0 ?
100
0 ?
100
0 ?
100
0 ?
100
0 ?
100
0 ?

Table 9-2 defines the information displayed in the previous example.
Table 9-2.

Command
History

show ip bgp cluster-list Command Fields

Field

Description

Network

Displays the destination network prefix of each BGP route.

Next Hop

Displays the next hop address of the BGP router.
If 0.0.0.0 is listed in this column, then local routes exist in the
routing table.

Metric

Displays the BGP route’s metric, if assigned.

LocPrf

Displays the BGP LOCAL_PREF attribute for the route.

Weight

Displays the route’s weight

Path

Lists all the ASs the route passed through to reach the destination
network.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

show ip bgp community
ces

Syntax

Parameters

View information on all routes with Community attributes or view specific BGP community
groups.
show ip bgp [ipv4 unicast] community [community-number] [local-as] [no-export]
[no-advertise]

ipv4 unicast

(OPTIONAL) Enter the ipv4 unicast keywords to view information
only related to ipv4 unicast routes.

community-number

Enter the community number in AA:NN format where AA is the AS
number (2 bytes) and NN is a value specific to that autonomous system.
You can specify up to eight community numbers to view information on
those community groups.

local-AS

Enter the keywords local-AS to view all routes with the COMMUNITY
attribute of NO_EXPORT_SUBCONFED.
All routes with the NO_EXPORT_SUBCONFED (0xFFFFFF03)
community attribute must not be advertised to external BGP peers.

no-advertise

Enter the keywords no-advertise to view all routes containing the
well-known community attribute of NO_ADVERTISE.
All routes with the NO_ADVERTISE (0xFFFFFF02) community
attribute must not be advertised to other BGP peers.

no-export

Enter the keywords no-export to view all routes containing the
well-known community attribute of NO_EXPORT.
All routes with the NO_EXPORT (0xFFFFFF01) community attribute
must not be advertised outside a BGP confederation boundary.

Border Gateway Protocol IPv4 (BGPv4) | 355

www.dell.com | support.dell.com

Command Modes

EXEC
EXEC Privilege

Usage
Information

To view the total number of COMMUNITY attributes found, use the show ip bgp summary
command. The text line above the route table states the number of COMMUNITY attributes
found.

Example

FTOS>show ip bgp community
BGP table version is 3762622, local router ID is 63.114.8.48
Status codes: s suppressed, d damped, h history, * valid, > best
Path source: I - internal, a - aggregate, c - confed-external, r - redistributed, n - network
Origin codes: i - IGP, e - EGP, ? - incomplete
Network
* i 3.0.0.0/8
*>i 4.2.49.12/30
* i 4.21.132.0/23
*>i 4.24.118.16/30
*>i 4.24.145.0/30
*>i 4.24.187.12/30
*>i 4.24.202.0/30
*>i 4.25.88.0/30
*>i 6.1.0.0/16
*>i 6.2.0.0/22
*>i 6.3.0.0/18
*>i 6.4.0.0/16
*>i 6.5.0.0/19
*>i 6.8.0.0/20
*>i 6.9.0.0/20
*>i 6.10.0.0/15
*>i 6.14.0.0/15
*>i 6.133.0.0/21
*>i 6.151.0.0/16
--More--

Next Hop
205.171.0.16
205.171.0.16
205.171.0.16
205.171.0.16
205.171.0.16
205.171.0.16
205.171.0.16
205.171.0.16
205.171.0.16
205.171.0.16
205.171.0.16
205.171.0.16
205.171.0.16
205.171.0.16
205.171.0.16
205.171.0.16
205.171.0.16
205.171.0.16
205.171.0.16

Metric

LocPrf
100
100
100
100
100
100
100
100
100
100
100
100
100
100
100
100
100
100
100

Weight
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

Path
209 701 80 i
209 i
209 6461 16422 i
209 i
209 i
209 i
209 i
209 3561 3908 i
209 7170 1455 i
209 7170 1455 i
209 7170 1455 i
209 7170 1455 i
209 7170 1455 i
209 7170 1455 i
209 7170 1455 i
209 7170 1455 i
209 7170 1455 i
209 7170 1455 i
209 7170 1455 i

The show ip bgp community command without any parameters lists BGP routes with at least
one BGP community attribute and the output is the same as for the show ip bgp command
output.
Table 9-3.

356

|

Command Example Fields: show ip bgp community

Field

Description

Network

Displays the destination network prefix of each BGP route.

Next Hop

Displays the next hop address of the BGP router.
If 0.0.0.0 is listed in this column, then local routes exist in the
routing table.

Metric

Displays the BGP route’s metric, if assigned.

LocPrf

Displays the BGP LOCAL_PREF attribute for the route.

Weight

Displays the route’s weight

Path

Lists all the ASs the route passed through to reach the destination
network.

Border Gateway Protocol IPv4 (BGPv4)

Command
History

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

show ip bgp community-list
ces

Syntax
Parameters

Command Modes

View routes that are affected by a specific community list.

show ip bgp [ipv4 unicast] community-list community-list-name [exact-match]

ipv4 unicast

(OPTIONAL) Enter the ipv4 unicast keywords to view information
only related to ipv4 unicast routes.

community-list-name

Enter the name of a configured IP community list. (max 16 chars)

exact-match

Enter the keyword for an exact match of the communities.

EXEC
EXEC Privilege

Example

FTOS#show ip bgp community-list pass
BGP table version is 0, local router ID is 10.101.15.13
Status codes: s suppressed, d damped, h history, * valid, > best
Path source: I - internal, a - aggregate, c - confed-external, r - redistributed, n - network
Origin codes: i - IGP, e - EGP, ? - incomplete
Network
FTOS#

Next Hop

Metric

LocPrf

Weight

Path

The show ip bgp community-list command without any parameters lists BGP routes matching
the Community List and the output is the same as for the show ip bgp command output.
Table 9-4.

show ip bgp community-list Command Example Fields

Field

Description

Network

Displays the destination network prefix of each BGP route.

Next Hop

Displays the next hop address of the BGP router.
If 0.0.0.0 is listed in this column, then local routes exist in the
routing table.

Metric

Displays the BGP route’s metric, if assigned.

LocPrf

Displays the BGP LOCAL_PREF attribute for the route.

Weight

Displays the route’s weight

Path

Lists all the ASs the route passed through to reach the destination
network.

Border Gateway Protocol IPv4 (BGPv4) | 357

www.dell.com | support.dell.com

Command
History

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

show ip bgp dampened-paths
ces

Syntax
Command Modes

View BGP routes that are dampened (non-active).

show ip bgp [ipv4 unicast] dampened-paths

EXEC
EXEC Privilege

Example

FTOS>show ip bgp damp
BGP table version is 210708, local router ID is 63.114.8.2
Status codes: s suppressed, d damped, h history, * valid, > best
Path source: I - internal, a - aggregate, c - confed-external, r - redistributed, n - network
Origin codes: i - IGP, e - EGP, ? - incomplete
Network
From
Reuse
Path
FTOS>

Table 9-5 defines the information displayed in the previous exampleFigure .
Table 9-5.

Command
History

show ip bgp dampened-paths Command Example

Field

Description

Network

Displays the network ID to which the route is dampened.

From

Displays the IP address of the neighbor advertising the dampened
route.

Reuse

Displays the hour:minutes:seconds until the dampened route is
available.

Path

Lists all the ASs the dampened route passed through to reach the
destination network.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

show ip bgp detail
ces

358

|

Display BGP internal information for IPv4 Unicast address family.

Border Gateway Protocol IPv4 (BGPv4)

Syntax
Defaults
Command Modes

show ip bgp [ipv4 unicast] detail

none
EXEC
EXEC Privilege

Example

FTOS#show ip bgp detail
Detail information for BGP Node
bgpNdP 0x41a17000 : NdTmrP 0x41a17000 : NdKATmrP 0x41a17014 : NdTics 74857 :
NhLocAS 1 : NdState 2 : NdRPMPrim 1 : NdListSoc 13
NdAuto 1 : NdEqCost 1 : NdSync 0 : NdDefOrg 0
NdV6ListSoc 14 NdDefDid 0 : NdConfedId 0 : NdMedConfed 0 : NdMedMissVal -1 :
NdIgnrIllId 0 : NdRRC2C 1 : NdClstId 33686273 : NdPaTblP 0x41a19088
NdASPTblP 0x41a19090 : NdCommTblP 0x41a19098 : NhOptTransTblP 0x41a190a0 : NdRRClsTblP 0x41a190a8
NdPktPA 0 : NdLocCBP 0x41a6f000 : NdTmpPAP 0x419efc80 : NdTmpASPAP 0x41a25000 : NdTmpCommP 0x41a25800
NdTmpRRClP 0x41a4b000 : NdTmpOptP 0x41a4b800 : NdTmpNHP : NdOrigPAP 0
NdOrgNHP 0 : NdModPathP 0x419efcc0 : NdModASPAP 0x41a4c000 : NdModCommP 0x41a4c800
NdModOptP 0x41a4d000 : NdModNHP : NdComSortBufP 0x41a19110 : NdComSortHdP 0x41a19d04 : NdUpdAFMsk 0 : AFRstSet 0x41a1a298 : NHopDfrdHdP 0x41a1a3e0 :

NumNhDfrd 0 : CfgHdrAFMsk 1
AFChkNetTmrP 0x41ee705c : AFRtDamp 0 : AlwysCmpMed 0 : LocrHld 10 : LocrRem 10 : softReconfig 0x41a1a58c
DefMet 0 : AutoSumm 1 : NhopsP 0x41a0d100 : Starts 0 : Stops 0 : Opens 0
Closes 0 : Fails 0 : Fatals 0 : ConnExps 0 : HldExps 0 : KeepExps 0
RxOpens 0 : RxKeeps 0 : RxUpds 0 : RxNotifs 0 : TxUpds 0 : TxNotifs 0
BadEvts 0 : SynFails 0 : RxeCodeP 0x41a1b6b8 : RxHdrCodeP 0x41a1b6d4 : RxOpCodeP 0x41a1b6e4
RxUpdCodeP 0x41a1b704 : TxEcodeP 0x41a1b734 : TxHdrcodeP 0x41a1b750 : TxOpCodeP 0x41a1b760
TxUpdCodeP 0x41a1b780 : TrEvt 0 : LocPref 100 : tmpPathP 0x41a1b7b8 : LogNbrChgs 1
RecursiveNH 1 : PgCfgId 0 : KeepAlive 0 : HldTime 0 : DioHdl 0 : AggrValTmrP 0x41ee7024
UpdNetTmrP 0 : RedistTmrP 0x41ee7094 : PeerChgTmrP 0 : CleanRibTmrP 0x41ee7104
PeerUpdTmrP 0x41ee70cc : DfrdNHTmrP 0x41ee7174 : DfrdRtselTmrP 0x41ee713c : FastExtFallover 1 : FastIntFallover 0 : Enforce1stAS 1

PeerIdBitsP 0x41967120 : softOutSz 16 : RibUpdCtxCBP 0
UpdPeerCtxCBP 0 : UpdPeerCtxAFI 0 : TcpioCtxCB 0 : RedistBlk 1
NextCBPurg 1101119536 : NumPeerToPurge 0 : PeerIBGPCnt 0 : NonDet 0 : DfrdPathSel 0
BGPRst 0 : NumGrCfg 1 : DfrdTmestmp 0 : SnmpTrps 0 : IgnrBestPthASP 0
RstOn 1 : RstMod 1 : RstRole 2 : AFFalgs 7 : RstInt 120 : MaxeorExtInt 361
FixedPartCrt 1 : VarParCrt 1
Packet Capture max allowed length 40960000 : current length 0
Peer Grp List
Nbr List
Confed Peer List
Address Family specific Information
AFIndex 0
NdSpFlag 0x41a190b0 : AFRttP 0x41a0d200 : NdRTMMkrP 0x41a19d28 : NdRTMAFTblVer 0 : NdRibCtxAddr 1101110688
NdRibCtxAddrLen 255 : NdAFPrefix 0 : NdAfNLRIP 0 : NdAFNLRILen 0 : NdAFWPtrP 0
NdAFWLen 0 : NdAfNH : NdAFRedRttP 0x41a0d400 : NdRecCtxAdd 1101110868
NdRedCtxAddrLen 255 : NdAfRedMkrP 0x41a19e88 : AFAggRttP 0x41a0d600 : AfAggCtxAddr 1101111028 : AfAggrCtxAddrLen 255

AfNumAggrPfx 0 : AfNumAggrASSet 0 : AfNumSuppmap 0 : AfNumAggrValidPfx 0 : AfMPathRttP 0x41a0d700
MpathCtxAddr 1101111140 : MpathCtxAddrlen 255 : AfEorSet 0x41a19f98 : NumDfrdPfx 0
AfActPeerHd 0x41a1a3a4 : AfExtDist 1101112312 : AfIntDist 200 : AfLocDist 200
AfNumRRc 0 : AfRR 0 : AfNetRttP 0x41a0d300 : AfNetCtxAddr 1101112392 : AfNetCtxAddrlen 255
AfNwCtxAddr 1101112443 : AfNwCtxAddrlen 255: AfNetBKDrRttP 0x41a0d500: AfNetBKDRCnt 0: AfDampHLife 0
AfDampReuse 0 : AfDampSupp 0 : AfDampMaxHld 0 : AfDampCeiling 0 : AfDampRmapP 0x41a1a508
AfNumDamped 0 : AfNumHist 0 : AfNumTotalHist 0 : AfDfrdRtLstP 0x41a1b5fc : AfDfrdNodeCnt 0 : softRecfgAf 0x41a1b5b4 : softRecfgCfgAf 0x41a1b5f0

AfCfgCnt 0 : AfRedistCfg 0 : IBGP_Mpath 0 : EBGP_Mpath 0 : DebugInPfList : DebugOutPfList

Command
History

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Border Gateway Protocol IPv4 (BGPv4) | 359

www.dell.com | support.dell.com

Version 7.7.1.0

Introduced support on C-Series

Version 7.5.1.0

Introduced

show ip bgp extcommunity-list
ces

Syntax
Parameters

Command Modes

View information on all routes with Extended Community attributes.

show ip bgp [ipv4 unicast] extcommunity-list [list name]

ipv4 unicast

(OPTIONAL) Enter the ipv4 unicast keywords to view information
only related to ipv4 unicast routes.

list name

Enter the extended community list name you wish to view.

EXEC
EXEC Privilege

Usage
Information

To view the total number of COMMUNITY attributes found, use the show ip bgp summary
command. The text line above the route table states the number of COMMUNITY attributes
found.
The show ip bgp community command without any parameters lists BGP routes with at least
one BGP community attribute and the output is the same as for the show ip bgp command
output.

Command
History

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

show ip bgp filter-list
ces

Syntax
Parameters

Command Modes

View the routes that match the filter lists.

show ip bgp [ipv4 unicast] filter-list as-path-name

ipv4 unicast

(OPTIONAL) Enter the ipv4 unicast keywords to view information only
related to ipv4 unicast routes.

as-path-name

Enter the name of an AS-PATH.

EXEC
EXEC Privilege

360

|

Border Gateway Protocol IPv4 (BGPv4)

Example

FTOS#show ip bgp filter-list hello
BGP table version is 80227, local router ID is 120.1.1.1
Status codes: s suppressed, d damped, h history, * valid, > best
Path source: I - internal, a - aggregate, c - confed-external, r - redistributed, n - network
Origin codes: i - IGP, e - EGP, ? - incomplete
Network
* I 6.1.5.0/24
* I
* I
* I
*>I
* I
* I
* I 6.1.6.0/24
* I
* I
* I
*>I
* I
* I
* I 6.1.20.0/24
* I
* I
* I
FTOS#

Next Hop
192.100.11.2
192.100.8.2
192.100.9.2
192.100.10.2
6.1.5.1
6.1.6.1
6.1.20.1
192.100.11.2
192.100.8.2
192.100.9.2
192.100.10.2
6.1.5.1
6.1.6.1
6.1.20.1
192.100.11.2
192.100.8.2
192.100.9.2
192.100.10.2

Metric
20000
20000
20000
20000
20000
20000
20000
20000
20000
20000
20000
20000
20000
20000
20000
20000
20000
20000

LocPrf Weight Path
9999
0 ?
9999
0 ?
9999
0 ?
9999
0 ?
9999
0 ?
9999
0 ?
9999
0 ?
9999
0 ?
9999
0 ?
9999
0 ?
9999
0 ?
9999
0 ?
9999
0 ?
9999
0 ?
9999
0 ?
9999
0 ?
9999
0 ?
9999
0 ?

Table 9-6 defines the information displayed in the previous example.
Table 9-6.

Command
History

Command Example fields: show ip bgp filter-list

Field

Description

Path source codes

Lists the path sources shown to the right of the last AS
number in the Path column:
• i = internal route entry
• a = aggregate route entry
• c = external confederation route entry
• n = network route entry
• r = redistributed route entry

Next Hop

Displays the next hop address of the BGP router.
If 0.0.0.0 is listed in this column, then local routes exist in the
routing table.

Metric

Displays the BGP route’s metric, if assigned.

LocPrf

Displays the BGP LOCAL_PREF attribute for the route.

Weight

Displays the route’s weight

Path

Lists all the ASs the route passed through to reach the
destination network.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Border Gateway Protocol IPv4 (BGPv4) | 361

www.dell.com | support.dell.com

show ip bgp flap-statistics
ces

Syntax

View flap statistics on BGP routes.

show ip bgp [ipv4 unicast] flap-statistics [ip-address [mask]] [filter-list as-path-name] [regexp
regular-expression]

Parameters

Command Modes

ipv4 unicast

(OPTIONAL) Enter the ipv4 unicast keywords to view information
only related to ipv4 unicast routes.

ip-address

(OPTIONAL) Enter the IP address (in dotted decimal format) of the
BGP network to view information only on that network.

mask

(OPTIONAL) Enter the network mask (in slash prefix (/x) format)
of the BGP network address.

filter-list as-path-name

(OPTIONAL) Enter the keyword filter-list followed by the name of
a configured AS-PATH ACL.

regexp regular-expression

Enter a regular expression then use one or a combination of the
following characters to match:
• . = (period) any single character (including a white space)
• * = (asterisk) the sequences in a pattern (0 or more sequences)
• + = (plus) the sequences in a pattern (1 or more sequences)
• ? = (question mark) sequences in a pattern (either 0 or 1
sequences). You must enter an escape sequence (CTRL+v)
prior to entering the ? regular expression.
• [ ] = (brackets) a range of single-character patterns.
• ( ) = (parenthesis) groups a series of pattern elements to a single
element
• { } = (braces) minimum and the maximum match count
• ^ = (caret) the beginning of the input string. If the caret is used
at the beginning of a sequence or range, it matches on everything
BUT the characters specified.
• $ = (dollar sign) the end of the output string.

EXEC
EXEC Privilege

Example

FTOS>show ip bgp flap
BGP table version is 210851, local router ID is 63.114.8.2
Status codes: s suppressed, d damped, h history, * valid, > best
Path source: I - internal, a - aggregate, c - confed-external, r - redistributed, n - network
Origin codes: i - IGP, e - EGP, ? - incomplete
Network
FTOS>

362

|

Border Gateway Protocol IPv4 (BGPv4)

From

Flaps Duration Reuse

Path

Table 9-7 defines the information displayed in the previous example.
show ip bgp flap-statistics Command Example Fields

Table 9-7.

Command
History

Field

Description

Network

Displays the network ID to which the route is flapping.

From

Displays the IP address of the neighbor advertising the flapping
route.

Flaps

Displays the number of times the route flapped.

Duration

Displays the hours:minutes:seconds since the route first flapped.

Reuse

Displays the hours:minutes:seconds until the flapped route is
available.

Path

Lists all the ASs the flapping route passed through to reach the
destination network.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series.

Version 7.7.1.0

Introduced support on C-Series.

show ip bgp inconsistent-as
ces

Syntax
Command Modes

View routes with inconsistent originating Autonomous System (AS) numbers, that is,
prefixes that are announced from the same neighbor AS but with a different AS-Path.
show ip bgp [ipv4 unicast] inconsistent-as

EXEC
EXEC Privilege

Example
(Partial)

FTOS>show ip bgp inconsistent-as
BGP table version is 280852, local router ID is 10.1.2.100
Status codes: s suppressed, d damped, h history, * valid, > best
Path source: I - internal, c - confed-external, r - redistributed, n - network
Origin codes: i - IGP, e - EGP, ? - incomplete

*
*
*
*>
*>
*
*
*
*>
*
*
*
*

Network
3.0.0.0/8

3.18.135.0/24

4.0.0.0/8

6.0.0.0/20

Next Hop
63.114.8.33
63.114.8.34
63.114.8.60
63.114.8.33
63.114.8.60
63.114.8.34
63.114.8.33
63.114.8.33
63.114.8.60
63.114.8.34
63.114.8.33
63.114.8.33
63.114.8.60

Metric

LocPrf Weight Path
0 18508
0 18508
0 18508
0 18508
0 18508
0 18508
0 18508
0 18508
0 18508
0 18508
0 18508
0 18508
0 18508

209
209
209
701
209
209
701
209
209
209
701
209
209

7018 80 i
7018 80 i
7018 80 i
80 i
7018 ?
7018 ?
7018 ?
7018 ?
1 i
1 i
1 i
1 i
3549 i

Border Gateway Protocol IPv4 (BGPv4) | 363

www.dell.com | support.dell.com

*
*>
*
* 9.2.0.0/16
*
--More--

0

0
0
0
0
0

18508
18508
18508
18508
18508

209
?
209
209
209

3549 i
3549 i
701 i
701 i

show ip bgp inconsistent-as Command Example Fields

Table 9-8.

Command
History

63.114.8.34
63.114.8.33
63.114.8.33
63.114.8.60
63.114.8.34

Fields

Description

Network

Displays the destination network prefix of each BGP route.

Next Hop

Displays the next hop address of the BGP router.
If 0.0.0.0 is listed in this column, then local routes exist in the
routing table.

Metric

Displays the BGP route’s metric, if assigned.

LocPrf

Displays the BGP LOCAL_PREF attribute for the route.

Weight

Displays the route’s weight

Path

Lists all the ASs the route passed through to reach the destination
network.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

show ip bgp neighbors
ces

Syntax

Enables you to view the information exchanged by BGP neighbors.

show ip bgp [ipv4 unicast] neighbors [ip-address [advertised-routes | dampened-routes | detail
| flap-statistics | routes | {received-routes [network [network-mask]]} | {denied-routes [network

[network-mask]]}]
Parameters

364

|

ipv4 unicast

(OPTIONAL) Enter the ipv4 unicast keywords to view information only
related to ipv4 unicast routes.

ip-address

(OPTIONAL) Enter the IP address of the neighbor to view only BGP
information exchanged with that neighbor.

advertised-routes

(OPTIONAL) Enter the keywords advertised-routes to view only the
routes the neighbor sent.

dampened-routes

(OPTIONAL) Enter the keyword dampened-routes to view information
on dampened routes from the BGP neighbor.

detail

(OPTIONAL) Enter the keyword detail to view neighbor-specific
internal information for the IPv4 Unicast address family.

flap-statistics

(OPTIONAL) Enter the keyword flap-statistics to view flap statistics on
the neighbor’s routes.

Border Gateway Protocol IPv4 (BGPv4)

routes

(OPTIONAL) Enter the keywords routes to view only the neighbor’s
feasible routes.

received-routes

(OPTIONAL) Enter the keywords received-routes followed by either
the network address (in dotted decimal format) or the network mask (in
slash prefix format) to view all information received from neighbors.

[network
[network-mask]

Note: neighbor soft-reconfiguration inbound must be configured prior to

viewing all the information received from the neighbors.

denied-routes

[network
[network-mask]
Command Modes

(OPTIONAL) Enter the keywords denied-routes followed by either the
network address (in dotted decimal format) or the network mask (in slash
prefix format) to view all information on routes denied via neighbor
inbound filters.

EXEC
EXEC Privilege

Command
History

Example
(S4810)

Version 8.3.8.0

Added the add-path option to the S4810. Output on the S4810 shows
ADDPATH parameters.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.5.1.0

Added detail option and output now displays default MED value

Version 7.2.1.0

Added received and denied route options

Version 6.3.10

The output is changed to display the total number of advertised prefixes

FTOS#show ip bgp neighbors
BGP neighbor is 10.10.10.1, remote AS 23456, external link
BGP version 4, remote router ID 10.10.10.1
BGP state ESTABLISHED, in this state for 00:00:35
. . .
Capabilities received from neighbor for IPv4 Unicast :
MULTIPROTO_EXT(1)
ROUTE_REFRESH(2)
4_OCTECT_AS(65)
ADD_PATH (69)
CISCO_ROUTE_REFRESH(128)

Example
(partial)

FTOS#show ip bgp neighbors
BGP neighbor is 100.10.10.2, remote AS 200, external link
BGP version 4, remote router ID 192.168.2.101
BGP state ESTABLISHED, in this state for 00:16:12
Last read 00:00:12, last write 00:00:03
Hold time is 180, keepalive interval is 60 seconds
Received 1404 messages, 0 in queue
3 opens, 1 notifications, 1394 updates
6 keepalives, 0 route refresh requests
Sent 48 messages, 0 in queue
3 opens, 2 notifications, 0 updates
43 keepalives, 0 route refresh requests
Minimum time between advertisement runs is 30 seconds
Minimum time before advertisements start is 0 seconds

Border Gateway Protocol IPv4 (BGPv4) | 365

www.dell.com | support.dell.com

Capabilities received from neighbor for IPv4 Unicast :
MULTIPROTO_EXT(1)
ROUTE_REFRESH(2)
CISCO_ROUTE_REFRESH(128)
Capabilities advertised to neighbor for IPv4 Unicast :
MULTIPROTO_EXT(1)
ROUTE_REFRESH(2)
ROUTE_REFRESH(2)
GRACEFUL_RESTART(64)
CISCO_ROUTE_REFRESH(128)
Route map for incoming advertisements is test
Maximum prefix set to 4 with threshold 75
For address family: IPv4 Unicast
BGP table version 34, neighbor version 34
5 accepted prefixes consume 20 bytes
Prefix advertised 0, denied 4, withdrawn 0
Prefixes accepted 1 (consume 4 bytes), withdrawn 0 by peer
Prefixes advertised 0, rejected 0, withdrawn 0 from peer
Connections established 2; dropped 1
Last reset 00:18:21, due to Maximum prefix limit reached
Notification History
'Connection Reset' Sent : 1

Recv: 0

Local host: 100.10.10.1, Local port: 179
Foreign host: 100.10.10.2, Foreign port: 47496
FTOS#

Example
(show ip bgp
neighbors
advertised-routes)

FTOS>show ip bgp neighbors 192.14.1.5 advertised-routes
BGP table version is 74103, local router ID is 33.33.33.33
Status codes: s suppressed, S stale, d damped, h history, * valid, > best
Path source: I - internal, a - aggregate, c - confed-external, r - redistributed, n - network
Origin codes: i - IGP, e - EGP, ? - incomplete
Network
Next Hop
*>r 1.10.1.0/24
0.0.0.0
*>r 1.11.0.0/16
0.0.0.0
.....
.....
*>I 223.94.249.0/24
223.100.4.249
*>I 223.94.250.0/24
223.100.4.250
*>I 223.100.0.0/16
223.100.255.254
Total number of prefixes: 74102

Example
(show ip bgp ip
neighbors
received-route)

|

0
0
0

LocPrf Weight Path
32768 ?
32768 ?

100
100
100

0 ?
0 ?
0 ?

FTOS#show ip bgp neighbors 100.10.10.2 received-routes
BGP table version is 13, local router ID is 120.10.10.1
Status codes: s suppressed, S stale, d damped, h history, * valid, > best
Path source: I - internal, a - aggregate, c - confed-external, r - redistributed
n - network, D - denied, S - stale
Origin codes: i - IGP, e - EGP, ? - incomplete

D
D
D
D
*>
*>

366

Metric
5000
5000

Network
70.70.21.0/24
70.70.22.0/24
70.70.23.0/24
70.70.24.0/24
70.70.25.0/24
70.70.26.0/24

Border Gateway Protocol IPv4 (BGPv4)

Next Hop
100.10.10.2
100.10.10.2
100.10.10.2
100.10.10.2
100.10.10.2
100.10.10.2

Metric

0

LocPrf Weight Path
0
0 100 200 ?
0
0 100 200 ?
0
0 100 200 ?
0
0 100 200 ?
0
0 100 200 ?
0
0 100 200 ?

*> 70.70.27.0/24
*> 70.70.28.0/24
*> 70.70.29.0/24
FTOS#

Example
(show ip bgp
neighbors
denied-routes)

100.10.10.2
100.10.10.2
100.10.10.2

0
0
0

0
0
0

0 100 200 ?
0 100 200 ?
0 100 200 ?

FTOS#show ip bgp neighbors 100.10.10.2 denied-routes
4 denied paths using 205 bytes of memory
BGP table version is 34, local router ID is 100.10.10.2
Status codes: s suppressed, S stale, d damped, h history, * valid, > best
Path source: I - internal, a - aggregate, c - confed-external, r - redistributed
n - network, D - denied, S - stale
Origin codes: i - IGP, e - EGP, ? - incomplete
Network
D
70.70.21.0/24
D
70.70.22.0/24
D
70.70.23.0/24
D
70.70.24.0/24
FTOS#
Table 9-9.

Next Hop
100.10.10.2
100.10.10.2
100.10.10.2
100.10.10.2

Metric

LocPrf Weight Path
0
0 100 200 ?
0
0 100 200 ?
0
0 100 200 ?
0
0 100 200 ?

Command Example fields: show ip bgp neighbors

Lines beginning with

Description

BGP neighbor

Displays the BGP neighbor address and its AS number. The
last phrase in the line indicates whether the link between the
BGP router and its neighbor is an external or internal one. If
they are located in the same AS, then the link is internal;
otherwise the link is external.

BGP version

Displays the BGP version (always version 4) and the remote
router ID.

BGP state

Displays the neighbor’s BGP state and the amount of time in
hours:minutes:seconds it has been in that state.

Last read

This line displays the following information:
• last read is the time (hours:minutes:seconds) the router read
a message from its neighbor
• hold time is the number of seconds configured between
messages from its neighbor
• keepalive interval is the number of seconds between
keepalive messages to help ensure that the TCP session is
still alive.

Received messages

This line displays the number of BGP messages received, the
number of notifications (error messages) and the number of
messages waiting in a queue for processing.

Sent messages

The line displays the number of BGP messages sent, the
number of notifications (error messages) and the number of
messages waiting in a queue for processing.

Received updates

This line displays the number of BGP updates received and
sent.

Soft reconfiguration

This line indicates that soft reconfiguration inbound is
configured.

Minimum time

Displays the minimum time, in seconds, between
advertisements.

Border Gateway Protocol IPv4 (BGPv4) | 367

www.dell.com | support.dell.com

Table 9-9.

Related
Commands

Command Example fields: show ip bgp neighbors

Lines beginning with

Description

(list of inbound and outbound
policies)

Displays the policy commands configured and the names of the
Route map, AS-PATH ACL or Prefix list configured for the
policy.

For address family:

Displays IPv4 Unicast as the address family.

BGP table version

Displays the which version of the primary BGP routing table
the router and the neighbor are using.

accepted prefixes

Displays the number of network prefixes accepted by the
router and the amount of memory used to process those
prefixes.

Prefix advertised

Displays the number of network prefixes advertised, the
number rejected and the number withdrawn from the BGP
routing table.

Connections established

Displays the number of TCP connections established and
dropped between the two peers to exchange BGP information.

Last reset

Displays the amount of time since the peering session was last
reset. Also states if the peer resets the peering session.
If the peering session was never reset, the word never is
displayed.

Local host:

Displays the peering address of the local router and the TCP
port number.

Foreign host:

Displays the peering address of the neighbor and the TCP port
number.

show ip bgp

View the current BGP routing table.

show ip bgp next-hop
ces

Syntax
Command Modes

View all next hops (via learned routes only) with current reachability and flap status. This
command only displays one path, even if the next hop is reachable by multiple paths.
show ip bgp next-hop

EXEC
EXEC Privilege

Example

368

|

FTOS>show ip bgp next-hop
Next-hop
Via
63.114.8.33
63.114.8.33,
63.114.8.34
63.114.8.34,
63.114.8.35
63.114.8.35,
63.114.8.60
63.114.8.60,
FTOS>

Border Gateway Protocol IPv4 (BGPv4)

Gi
Gi
Gi
Gi

12/22
12/22
12/22
12/22

RefCount
240984
135152
1
135155

Cost
0
0
0
0

Flaps
0
0
0
0

Time Elapsed
00:18:25
00:18:13
00:18:07
00:18:11

Table 9-10.

Command
History

Command Example fields: show ip bgp next-hop

Field

Description

Next-hop

Displays the next-hop IP address.

Via

Displays the IP address and interface used to reach the next hop.

RefCount

Displays the number of BGP routes using this next hop.

Cost

Displays the cost associated with using this next hop.

Flaps

Displays the number of times the next hop has flapped.

Time Elapsed

Displays the time elapsed since the next hop was learned. If the route is
down, then this field displays time elapsed since the route went down.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

show ip bgp paths
ces

Syntax
Parameters

Command Modes

View all the BGP path attributes in the BGP database.

show ip bgp paths [regexp regular-expression]
regexp regular-expression

Enter a regular expression then use one or a combination of the
following characters to match:
• . = (period) any single character (including a white space)
• * = (asterisk) the sequences in a pattern (0 or more sequences)
• + = (plus) the sequences in a pattern (1 or more sequences)
• ? = (question mark) sequences in a pattern (either 0 or 1
sequences). You must enter an escape sequence (CTRL+v)
prior to entering the ? regular expression.
• [ ] = (brackets) a range of single-character patterns.
• ( ) = (parenthesis) groups a series of pattern elements to a single
element
• { } = (braces) minimum and the maximum match count
• ^ = (caret) the beginning of the input string. If the caret is used at
the beginning of a sequence or range, it matches on everything
BUT the characters specified.
• $ = (dollar sign) the end of the output string.

EXEC
EXEC Privilege

Example

FTOS#show ip bgp path
Total 16 Paths
Address
Hash Refcount Metric Path
0x1efe7e5c
15
10000
32 ?

Border Gateway Protocol IPv4 (BGPv4) | 369

www.dell.com | support.dell.com

0x1efe7e1c
0x1efe7ddc
0x1efe7d9c
0x1efe7d5c
0x1efe7c9c
0x1efe7b1c
0x1efe7d1c
0x1efe7c5c
0x1efe7cdc
0x1efe7c1c
0x1efe7bdc
0x1efe7b5c
0x1efe7adc
0x1efe7e9c
0x1efe7b9c
FTOS#

71
127
183
239
283
287
295
339
351
395
451
491
883
983
1003

Table 9-11.

Command
History

10000
10000
10000
10000
6
336 20000
10000
6
10000
6
6
78
0
2
120
10000
6
0

23 ?
22 ?
43 ?
42 ?
{102 103} ?
?
13 ?
{92 93} ?
12 ?
{82 83} ?
{72 73} ?
?
i
33 ?
i

Command Example fields: show ip bgp paths

Field

Description

Total

Displays the total number of BGP path attributes.

Address

Displays the internal address where the path attribute is stored.

Hash

Displays the hash bucket where the path attribute is stored.

Refcount

Displays the number of BGP routes using this path attribute.

Metric

Displays the MED attribute for this path attribute.

Path

Displays the AS path for the route, with the origin code for the
route listed last.
Numbers listed between braces {} are AS_SET information.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

show ip bgp paths as-path
ces

Syntax
Command Modes

View all unique AS-PATHs in the BGP database

show ip bgp paths as-path

EXEC
EXEC Privilege

Example

370

|

FTOS#show ip bgp paths as-path
Total 13 AS-Paths
Address
Hash Refcount AS-Path
0x1ea3c1ec
251
1 42
0x1ea3c25c
251
1 22
0x1ea3c1b4
507
1 13
0x1ea3c304
507
1 33

Border Gateway Protocol IPv4 (BGPv4)

0x1ea3c10c
0x1ea3c144
0x1ea3c17c
0x1ea3c2cc
0x1ea3c09c
0x1ea3c0d4
0x1ea3c224
0x1ea3c294
0x1ea3c02c
FTOS#

763
763
763
763
764
764
1019
1019
1021

Table 9-12.

Command
History

1
1
1
1
1
1
1
1
4

{92 93}
{102 103}
12
32
{72 73}
{82 83}
43
23

Command Example fields: show ip bgp paths community

Field

Description

Address

Displays the internal address where the path attribute is stored.

Hash

Displays the hash bucket where the path attribute is stored.

Refcount

Displays the number of BGP routes using these AS-Paths.

AS-Path

Displays the AS paths for this route, with the origin code for the route
listed last.
Numbers listed between braces {} are AS_SET information.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

show ip bgp paths community
ces

Syntax
Command Modes

View all unique COMMUNITY numbers in the BGP database.

show ip bgp paths community

EXEC
EXEC Privilege

Example

E1200-BGP>show ip bgp paths community
Total 293 Communities
Address
Hash Refcount Community
0x1ec88a5c
3
4 209:209 209:6059 209:31272 3908:900 19092:300
0x1e0f10ec
15
4 209:209 209:3039 209:31272 3908:900 19092:300
0x1c902234
37
2 209:209 209:7193 209:21362 3908:900 19092:300
0x1f588cd4
41
24 209:209 209:6253 209:21362 3908:900 19092:300
0x1e805884
46
2 209:209 209:21226 286:777 286:3033 1899:3033 64675:21092
0x1e433f4c
46
8 209:209 209:5097 209:21362 3908:900 19092:300
0x1f173294
48
16 209:209 209:21226 286:40 286:777 286:3040 5606:40 12955:5606
0x1c9f8e24
50
6 209:209 209:4069 209:21362 3908:900 19092:300
0x1c9f88e4
53
4 209:209 209:3193 209:21362 3908:900 19092:300
0x1f58a944
57
6 209:209 209:2073 209:21362 3908:900 19092:300
0x1ce6be44
80
2 209:209 209:999 209:40832
0x1c6e2374
80
2 209:777 209:41528
0x1f58ad6c
82
46 209:209 209:41528
0x1c6e2064
83
2 209:777 209:40832

Border Gateway Protocol IPv4 (BGPv4) | 371

www.dell.com | support.dell.com

0x1f588ecc
85
570 209:209 209:40832
0x1f57cc0c
98
2 209:209 209:21226 286:3031 13646:1044 13646:1124 13646:1154 13646:1164
13646:1184 13646:1194 13646:1204 13646:1214 13646:1224 13646:1234 13646:1244 13646:1254 13646:1264 13646:3000
0x1d65b2ac
117
6 209:209 209:999 209:31272
0x1f5854ac
119
18 209:209 209:21226 286:108 286:111 286:777 286:3033 517:5104
0x1d77b49c
119
2 209:209 209:21226 286:81 286:777 286:3358 790:51 790:61 790:3358
0x1c6e210c
120
2 209:777 209:31272
0x1f588bf4
122
680 209:209 209:31272
0x1f004f64
123
12 209:209 209:21226 286:777 286:3031 5466:20
--More--

Table 9-13.

Command
History

Command Example fields: show ip bgp paths community

Field

Description

Address

Displays the internal address where the path attribute is stored.

Hash

Displays the hash bucket where the path attribute is stored.

Refcount

Displays the number of BGP routes using these communities.

Community

Displays the community attributes in this BGP path.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

show ip bgp peer-group
ces

Syntax
Parameters

Command Modes

Enables you to view information on the BGP peers in a peer group.

show ip bgp [ipv4 unicast] peer-group [peer-group-name [detail | summary]]

ipv4 unicast

(OPTIONAL) Enter the ipv4 unicast keywords to view information only
related to ipv4 unicast routes.

peer-group-name

(OPTIONAL) Enter the name of a peer group to view information about
that peer group only.

detail

(OPTIONAL) Enter the keyword detail to view detailed status
information of the peers in that peer group.

summary

(OPTIONAL) Enter the keyword summary to view status information of
the peers in that peer group.
The output is the same as that found in show ip bgp summary command

EXEC
EXEC Privilege

Example
(S4810)

FTOS#show ip bgp peer-group
Peer-group pg1
BGP version 4
Minimum time between advertisement runs is 30 seconds

372

|

Border Gateway Protocol IPv4 (BGPv4)

For address family: IPv4 Unicast
BGP neighbor is pg1
Number of peers in this group 4
Update packing has 4_OCTECT_AS support enabled
Add-path support enabled
Peer-group members (* - outbound optimized):
1.1.1.5
1.1.1.6
10.10.10.2*
20.20.20.100

Example

FTOS#show ip bgp peer-group
Peer-group RT-PEERS
Description: ***peering-with-RT***
BGP version 4
Minimum time between advertisement runs is 30 seconds
For address family: IPv4 Unicast
BGP neighbor is RT-PEERS
Number of peers in this group 20
Peer-group members (* - outbound optimized):
12.1.1.2*
12.1.1.3*
12.1.1.4*
12.1.1.5*
12.1.1.6*
12.2.1.2*
12.2.1.3*
12.2.1.4*
12.2.1.5*
12.2.1.6*
12.3.1.2*
12.3.1.3*
12.3.1.4*
12.3.1.5*
12.3.1.6*
12.4.1.2*
12.4.1.3*
12.4.1.4*
12.4.1.5*
12.4.1.6*

Table 9-14.

Command Example fields: show ip bgp peer-group

Line beginning with

Description

Peer-group

Displays the peer group’s name.

Administratively shut

Displays the peer group’s status if the peer group is not enabled.
If the peer group is enabled, this line is not displayed.

BGP version

Displays the BGP version supported.

Minimum time

Displays the time interval between BGP advertisements.

For address family

Displays IPv4 Unicast as the address family.

BGP neighbor

Displays the name of the BGP neighbor.

Border Gateway Protocol IPv4 (BGPv4) | 373

www.dell.com | support.dell.com

Table 9-14.

Related
Commands

Command
History

Command Example fields: show ip bgp peer-group

Line beginning with

Description

Number of peers

Displays the number of peers currently configured for this peer group.

Peer-group members:

Lists the IP addresses of the peers in the peer group.
If the address is outbound optimized, a * is displayed next to the IP
address.

neighbor peer-group (assigning peers)

Assign peer to a peer-group.

neighbor peer-group (creating group)

Create a peer group.

show ip bgp peer-group (multicast)

View information on the BGP peers in a peer group.

Version 8.3.8.0

Added the add-path option to the S4810. Output on the S4810 shows
ADDPATH parameters.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.8.1.0

Introduced support on S-Series

show ip bgp regexp
ces

Syntax
Parameters

Command Modes

374

|

Display the subset of BGP routing table matching the regular expressions specified.

show ip bgp regexp regular-expression [character]
regular-expression [character]

EXEC

Border Gateway Protocol IPv4 (BGPv4)

Enter a regular expression then use one or a combination of
the following characters to match:
• . = (period) any single character (including a white
space)
• * = (asterisk) the sequences in a pattern (0 or more
sequences)
• + = (plus) the sequences in a pattern (1 or more
sequences)
• ? = (question mark) sequences in a pattern (either 0 or 1
sequences). You must enter an escape sequence
(CTRL+v) prior to entering the ? regular
expression.
• [ ] = (brackets) a range of single-character patterns.
• ( ) = (parenthesis) groups a series of pattern elements
to a single element
• { } = (braces) minimum and the maximum match count
• ^ = (caret) the beginning of the input string. If the caret
is used at the beginning of a sequence or range, it
matches on everything BUT the characters specified.
• $ = (dollar sign) the end of the output string.

EXEC Privilege
Example

FTOS#show ip bgp regexp ^2914+
BGP table version is 3700481, local router ID is 63.114.8.35
Status codes: s suppressed, S stale, d damped, h history, * valid, > best
Path source: I - internal, a - aggregate, c - confed-external, r - redistributed, n - network
Origin codes: i - IGP, e - EGP, ? - incomplete
Network
Next Hop
Metric
LocPrf Weight Path
*>I 3.0.0.0/8
1.1.1.2
0
100
0 2914 1239 80 i
*>I 4.0.0.0/8
1.1.1.2
0
100
0 2914 3356 i
*>I 4.17.225.0/24
1.1.1.2
0
100
0 2914 11853 11853 11853 11853 11853 6496
*>I 4.17.226.0/23
1.1.1.2
0
100
0 2914 11853 11853 11853 11853 11853 6496
*>I 4.17.251.0/24
1.1.1.2
0
100
0 2914 11853 11853 11853 11853 11853 6496
*>I 4.17.252.0/23
1.1.1.2
0
100
0 2914 11853 11853 11853 11853 11853 6496
*>I 4.19.2.0/23
1.1.1.2
0
100
0 2914 701 6167 6167 6167 i
*>I 4.19.16.0/23
1.1.1.2
0
100
0 2914 701 6167 6167 6167 i
*>I 4.21.80.0/22
1.1.1.2
0
100
0 2914 174 4200 16559 i
*>I 4.21.82.0/24
1.1.1.2
0
100
0 2914 174 4200 16559 i
*>I 4.21.252.0/23
1.1.1.2
0
100
0 2914 701 6389 8063 19198 i
*>I 4.23.180.0/24
1.1.1.2
0
100
0 2914 3561 6128 30576 i
*>I 4.36.200.0/21
1.1.1.2
0
100
0 2914 14742 11854 14135 i
*>I 4.67.64.0/22
1.1.1.2
0
100
0 2914 11608 19281 i
*>I 4.78.32.0/21
1.1.1.2
0
100
0 2914 3491 29748 i
*>I 6.1.0.0/16
1.1.1.2
0
100
0 2914 701 668 i
*>I 6.2.0.0/22
1.1.1.2
0
100
0 2914 701 668 i
*>I 6.3.0.0/18
1.1.1.2
0
100
0 2914 701 668 i
Table 9-15.

Command
History

Command Example fields: show ip bgp regexp

Field

Description

Network

Displays the destination network prefix of each BGP route.

Next Hop

Displays the next hop address of the BGP router.
If 0.0.0.0 is listed in this column, then non-BGP routes exist in the router’s routing
table.

Metric

Displays the BGP router’s metric, if assigned.

LocPrf

Displays the BGP LOCAL_PREF attribute for the route.

Weight

Displays the route’s weight

Path

Lists all the AS paths the route passed through to reach the destination network.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

show ip bgp summary
ces

Syntax
Command Modes

Enables you to view the status of all BGP connections.

show ip bgp [ipv4 unicast] summary

EXEC

Border Gateway Protocol IPv4 (BGPv4) | 375

www.dell.com | support.dell.com

EXEC Privilege
Example

FTOS#show ip bgp summary
BGP router identifier 120.10.10.1, local AS number 100
BGP table version is 34, main routing table version 34
9 network entrie(s) using 1372 bytes of memory
5 paths using 380 bytes of memory
4 denied paths using 164 bytes of memory
BGP-RIB over all using 385 bytes of memory
2 BGP path attribute entrie(s) using 168 bytes of memory
1 BGP AS-PATH entrie(s) using 39 bytes of memory
1 BGP community entrie(s) using 43 bytes of memory
2 neighbor(s) using 7232 bytes of memory
Neighbor

AS

100.10.10.2
120.10.10.2
FTOS#

200
300

Table 9-16.

MsgRcvd

MsgSent

TblVer

InQ

46
40

41
47

34
34

0
0

OutQ Up/Down

State/Pfx

0 00:14:33
0 00:37:10

Command Example fields: show ip bgp summary

Field

Description

BGP router identifier

Displays the local router ID and the AS number.

BGP table version

Displays the BGP table version and the main routing table version.

network entries

Displays the number of network entries and route paths and the amount
of memory used to process those entries.

paths

Displays the number of paths and the amount of memory used.

denied paths

Displays the number of denied paths and the amount of memory used.

BGP path attribute entries Displays the number of BGP path attributes and the amount of memory
used to process them.

376

|

BGP AS-PATH entries

Displays the number of BGP AS_PATH attributes processed and the
amount of memory used to process them.

BGP community entries

Displays the number of BGP COMMUNITY attributes processed and
the amount of memory used to process them. The show ip bgp
community command provides more details on the COMMUNITY
attributes.

Dampening enabled

Displayed only when dampening is enabled. Displays the number of
paths designated as history, dampened, or penalized.

Neighbor

Displays the BGP neighbor address.

AS

Displays the AS number of the neighbor.

MsgRcvd

Displays the number of BGP messages that neighbor received.

MsgSent

Displays the number of BGP messages that neighbor sent.

TblVer

Displays the version of the BGP table that was sent to that neighbor.

InQ

Displays the number of messages from that neighbor waiting to be
processed.

OutQ

Displays the number of messages waiting to be sent to that neighbor.
If a number appears in parentheses, the number represents the number of
messages waiting to be sent to the peer group.

Border Gateway Protocol IPv4 (BGPv4)

5
0

Table 9-16.

Command
History

Command Example fields: show ip bgp summary

Field

Description

Up/Down

Displays the amount of time that the neighbor is in the Established stage.
If the neighbor has never moved into the Established stage, the word
never is displayed.
The output format is:
Time Established----------Display Example
< 1 day ----------------------- 00:12:23 (hours:minutes:seconds)
< 1 week --------------------- 1d21h (DaysHours)
> 1 week --------------------- 11w2d (WeeksDays)

State/Pfxrcd

If the neighbor is in Established stage, the number of network prefixes
received.
If a maximum limit was configured with the neighbor maximum-prefix
command, (prfxd) appears in this column.
If the neighbor is not in Established stage, the current stage is displayed
(Idle, Connect, Active, OpenSent, OpenConfirm) When the peer is
transitioning between states and clearing the routes received, the phrase
(Purging) may appear in this column.
If the neighbor is disabled, the phrase (Admin shut) appears in this
column.

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

show running-config bgp
ces

Syntax
Defaults
Command Modes
Command
History

Use this feature to display the current BGP configuration.

show running-config bgp

No default values or behavior
EXEC Privilege
Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced on S-Series

Version 7.7.1.0

Introduced on C-Series

Version 7.6.1.0

Introduced on E-Series

Border Gateway Protocol IPv4 (BGPv4) | 377

www.dell.com | support.dell.com

timers bgp
ces

Syntax

Adjust BGP Keep Alive and Hold Time timers.

timers bgp keepalive holdtime

To return to the default, enter no timers bgp.
Parameters

Defaults

keepalive

Enter a number for the time interval, in seconds, between keepalive
messages sent to the neighbor routers.
Range: 1 to 65535
Default: 60 seconds

holdtime

Enter a number for the time interval, in seconds, between the last
keepalive message and declaring the router dead.
Range: 3 to 65535
Default: 180 seconds

No default values or behavior

Command Modes

ROUTER BGP

Command
History

Version 8.3.7.0

Introduced on the S4810.

Version 7.8.1.0

Introduced on S-Series

Version 7.7.1.0

Introduced on C-Series

Version 7.6.1.0

Introduced on E-Series

MBGP Commands
Multiprotocol BGP (MBGP) is an enhanced BGP that enables multicast routing policy
throughout the Internet and connecting multicast topologies between BGP and autonomous
systems (AS). FTOS MBGP is implemented as per IETF RFC 1858.
FTOS version 7.8.1.0 and later support MBGP for IPv6 on et and c platforms.
FTOS version 7.8.1.0 and later support MBGP for IPv4 Multicast only on the s platform.
FTOS version 8.2.1.0 and later support MBGP on the E-Series ExaScale ex platform.
The MBGP commands are:
•
•
•
•

378

|

address family ipv4 multicast (MBGP)
aggregate-address
bgp dampening
clear ip bgp ipv4 multicast

Border Gateway Protocol IPv4 (BGPv4)

•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

clear ip bgp dampening
clear ip bgp flap-statistics
debug ip bgp dampening
debug ip bgp dampening
debug ip bgp dampening
debug ip bgp peer-group updates
debug ip bgp updates
distance bgp
neighbor activate
neighbor advertisement-interval
neighbor default-originate
neighbor distribute-list
neighbor filter-list
neighbor maximum-prefix
neighbor next-hop-self
neighbor remove-private-as
neighbor route-map
neighbor route-reflector-client
network
redistribute
redistribute ospf
show ip bgp ipv4 multicast
show ip bgp cluster-list
show ip bgp community
show ip bgp community-list
show ip bgp dampened-paths
show ip bgp filter-list
show ip bgp flap-statistics
show ip bgp inconsistent-as
show ip bgp ipv4 multicast neighbors
show ip bgp peer-group
show ip bgp summary

address family ipv4 multicast (MBGP)
c et s
Syntax

This command changes the context to SAFI (Subsequent Address Family Identifier).
address family ipv4 multicast

To remove SAFI context, use the no address family ipv4 multicast command.

Border Gateway Protocol IPv4 (BGPv4) | 379

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes
Usage
Information

Command
History

ipv4

Enter the keyword ipv4 to specify the address family as IPV4.

multicast

Enter the keyword multicast to specify multicast as SAFI.

IPv4 Unicast
ROUTER BGP (conf-router_bgp)
All subsequent commands will apply to this address family once this command is executed.
You can exit from this AFI/SAFI to the IPv4 Unicast (the default) family by entering exit and
returning to the Router BGP context.
Version 7.8.1.0

Introduced support on S-Series for MBGP IPv4 Multicast

Version 7.7.1.0

Introduced support on C-Series

aggregate-address
c et s
Syntax

Parameters

Defaults
Command Modes
Usage
Information

380

|

Summarize a range of prefixes to minimize the number of entries in the routing table.
aggregate-address ip-address mask [advertise-map map-name] [as-set] [attribute-map
map-name] [summary-only] [suppress-map map-name]
ip-address mask

Enter the IP address and mask of the route to be the aggregate
address. Enter the IP address in dotted decimal format (A.B.C.D)
and mask in /prefix format (/x).

advertise-map map-name

(OPTIONAL) Enter the keywords advertise-map followed by the
name of a configured route map to set filters for advertising an
aggregate route.

as-set

(OPTIONAL) Enter the keyword as-set to generate path attribute
information and include it in the aggregate.
AS_SET includes AS_PATH and community information from the
routes included in the aggregated route.

attribute-map map-name

(OPTIONAL) Enter the keywords attribute-map followed by the
name of a configured route map to modify attributes of the
aggregate, excluding AS_PATH and NEXT_HOP attributes.

summary-only

(OPTIONAL) Enter the keyword summary-only to advertise only
the aggregate address. Specific routes will not be advertised.

suppress-map map-name

(OPTIONAL) Enter the keywords suppress-map followed by the
name of a configured route map to identify which more-specific
routes in the aggregate are suppressed.

Not configured.
ROUTER BGP Address Family (conf-router_bgp_af)
At least one of the routes included in the aggregate address must be in the BGP routing table
for the configured aggregate to become active.

Border Gateway Protocol IPv4 (BGPv4)

Do not add the as-set parameter to the aggregate. If routes within the aggregate are constantly
changing, the aggregate will flap to keep track of the changes in the AS_PATH.
In route maps used in the suppress-map parameter, routes meeting the deny clause are not
suppress; in other words, they are allowed. The opposite is true: routes meeting the permit
clause are suppressed.
If the route is injected via the network command, that route will still appear in the routing
table if the summary-only parameter is configured in the aggregate-address command.
The summary-only parameter suppresses all advertisements. If you want to suppress
advertisements to only specific neighbors, use the neighbor distribute-list command.
Command
History

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

bgp dampening
c et s
Syntax

Enable MBGP route dampening.
bgp dampening [half-life time] [route-map map-name]

To disable route dampening, use the no bgp dampening [half-life time] [route-map map-name]
command.
Parameters

Defaults
Command Modes
Command
History

half-life time

(OPTIONAL) Enter the number of minutes after which the Penalty is
decreased. After the router assigns a Penalty of 1024 to a route, the
Penalty is decreased by half, after the half-life period expires.
Range: 1 to 45.
Default: 15 minutes

route-map map-name

(OPTIONAL) Enter the keyword route-map followed by the name
of a configured route map.
Only match commands in the configured route map are supported.

Disabled.
ROUTER BGP Address Family (conf-router_bgp_af)
Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.6.1.0

Introduced IPv6 MGBP support for E-Series

clear ip bgp ipv4 multicast
c et s

Reset MBGP sessions.

Border Gateway Protocol IPv4 (BGPv4) | 381

www.dell.com | support.dell.com

Syntax
Parameters

Command Modes
Command
History

clear ip bgp ipv4 multicast * ip-address [dampening | flap-statistics] peer-group]
*

Enter the character * to clear all peers.

ip-address

Enter an IP address in dotted decimal format to clear the prefixes
from that neighbor.

dampening

(OPTIONAL) Enter the keyword dampening to clear route flap
dampening information.

flap-statistics

(OPTIONAL) Enter the keyword flap-statistics to reset the flap
statistics on all prefixes from that neighbor.

peer-group

(OPTIONAL) Enter the keyword peer-group to clear all members
of a peer-group.

EXEC Privilege
Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

clear ip bgp dampening
c et s
Syntax
Parameters

Command Modes
Command
History

Clear information on route dampening.
clear ip bgp dampening ipv4 multicast network network-mask
dampening

Enter the keyword dampening to clear route flap dampening
information.

network

(OPTIONAL) Enter the network address in dotted decimal format
(A.B.C.D).

network-mask

(OPTIONAL) Enter the network mask in slash prefix format (/x).

EXEC Privilege
Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.6.1.0

Introduced IPv6 MGBP support for E-Series

clear ip bgp flap-statistics
c et s
Syntax

382

|

Clear BGP flap statistics, which includes number of flaps and the time of the last flap.
clear ip bgp ipv4 multicast flap-statistics network | filter-list list |regexp regexp

Border Gateway Protocol IPv4 (BGPv4)

Parameters

Network

(OPTIONAL) Enter the network address to clear flap statistics in dotted
decimal format (A.B.C.D).

filter-list list

(OPTIONAL) Enter the keyword filter-list followed by the name of a
configured AS-PATH list (max 16 characters).

regexp regexp

(OPTIONAL) Enter the keyword regexp followed by regular
expressions. Use one or a combination of the following:
• . = (period) any single character (including a white space)
• * = (asterisk) the sequences in a pattern (0 or more sequences)
• + = (plus) the sequences in a pattern (1 or more sequences)
• ? = (question mark) sequences in a pattern (either 0 or 1 sequences).
You must enter an escape sequence (CTRL+v) prior to entering
the ? regular expression.
• [ ] = (brackets) a range of single-character patterns.
• ( ) = (parenthesis) groups a series of pattern elements to a single
element
• { } = (braces) minimum and the maximum match count
• ^ = (caret) the beginning of the input string. If the caret is used at the
beginning of a sequence or range, it matches on everything BUT the
characters specified.
• $ = (dollar sign) the end of the output string.

Command Modes

EXEC Privilege

Command
History

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.6.1.0

Introduced IPv6 MGBP support for E-Series

debug ip bgp dampening
c et s
Syntax

View information on routes being dampened.
debug ip bgp ipv4 multicast dampening

To disable debugging, enter no debug ip bgp ipv4 multicast dampening
Parameters

dampening

Enter the keyword dampening to clear route flap dampening
information.

Command Modes

EXEC Privilege

Command
History

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.6.1.0

Introduced IPv6 MGBP support for E-Series

Border Gateway Protocol IPv4 (BGPv4) | 383

www.dell.com | support.dell.com

debug ip bgp peer-group updates
c et s

View information about BGP peer-group updates.
debug ip bgp peer-group peer-group-name updates [in | out]

To disable debugging, enter no debug ip bgp peer-group peer-group-name updates [in | out]
command.
Parameters

Command Modes
Command
History

peer-group
peer-group-name

Enter the keyword peer-group followed by the name of the
peer-group.

updates

Enter the keyword updates to view BGP update information.

in

(OPTIONAL) Enter the keyword in to view only BGP updates
received from neighbors.

out

(OPTIONAL) Enter the keyword out to view only BGP updates sent
to neighbors.

EXEC Privilege
Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.6.1.0

Introduced IPv6 MGBP support for E-Series

debug ip bgp updates
c et s

View information about BGP updates.
debug ip bgp updates [in | out]

To disable debugging, enter no debug ip bgp updates [in | out] command.
Parameters

Command Modes
Defaults
Command
History

384

|

updates

Enter the keyword updates to view BGP update information.

in

(OPTIONAL) Enter the keyword in to view only BGP updates
received from neighbors.

out

(OPTIONAL) Enter the keyword out to view only BGP updates sent
to neighbors.

EXEC Privilege
Disabled.
Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.6.1.0

Introduced IPv6 MGBP support for E-Series

Border Gateway Protocol IPv4 (BGPv4)

distance bgp
c et s
Syntax

Define an administrative distance for routes.
distance bgp external-distance internal-distance local-distance

To return to default values, enter no distance bgp.
Parameters

Defaults
Command Modes

external-distance

Enter a number to assign to routes learned from a neighbor external to the
AS.
Range: 1 to 255
Default: 20

internal-distance

Enter a number to assign to routes learned from a router within the AS.
Range: 1 to 255
Default: 200

local-distance

Enter a number to assign to routes learned from networks listed in the
network command.
Range: 1 to 255
Default: 200

external-distance

= 20; internal-distance = 200; local-distance = 200

ROUTER BGP (conf-router_bgp_af)

Caution: Dell Force10 recommends that you do not change the administrative distance of
internal routes. Changing the administrative distances may cause routing table
inconsistencies.
Usage
Information

Command
History

The higher the administrative distance assigned to a route means that your confidence in that
route is low. Routes assigned an administrative distance of 255 are not installed in the routing
table. Routes from confederations are treated as internal BGP routes.
Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.6.1.0

Introduced IPv6 MGBP support for E-Series

neighbor activate
c et s
Syntax

This command allows the specified neighbor/peer group to be enabled for the current AFI/
SAFI.
neighbor [ip-address | peer-group-name] activate

To disable, use the no neighbor [ip-address | peer-group-name] activate command.

Border Gateway Protocol IPv4 (BGPv4) | 385

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes
Usage
Information

Related
Commands
Command
History

ip-address

(OPTIONAL) Enter the IP address of the neighbor in dotted decimal
format.

peer-group-name

(OPTIONAL) Enter the name of the peer group

activate

Enter the keyword activate to enable the neighbor/peer group in the
new AFI/SAFI.

Disabled
ROUTER BGP Address Family (conf-router_bgp_af)
By default, when a neighbor/peer group configuration is created in the Router BGP context, it
is enabled for the IPv4/Unicast AFI/SAFI. By using activate in the new context, the neighbor/
peer group is enabled for AFI/SAFI.
address family ipv4 multicast (MBGP)

Changes the context to SAFI

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.6.1.0

Introduced IPv6 MGBP support for E-Series

neighbor advertisement-interval
c et s
Syntax

Set the advertisement interval between BGP neighbors or within a BGP peer group.
neighbor {ip-address | peer-group-name} advertisement-interval seconds

To return to the default value, use the no neighbor {ip-address | peer-group-name}
advertisement-interval command.
Parameters

Defaults
Command Modes
Command
History

386

|

ip-address

Enter the IP address of the neighbor in dotted decimal format.

peer-group-name

Enter the name of the peer group to set the advertisement interval for all
routers in the peer group.

seconds

Enter a number as the time interval, in seconds, between BGP
advertisements.
Range: 0 to 600 seconds.
Default: 5 seconds for internal BGP peers; 30 seconds for external BGP
peers.

seconds

= 5 seconds (internal peers); seconds = 30 seconds (external peers)

ROUTER BGP Address Family (conf-router_bgp_af)
Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.6.1.0

Introduced IPv6 MGBP support for E-Series

Border Gateway Protocol IPv4 (BGPv4)

neighbor default-originate
c et s
Syntax

Inject the default route to a BGP peer or neighbor.
neighbor {ip-address | peer-group-name} default-originate [route-map map-name]

To remove a default route, use the no neighbor {ip-address | peer-group-name} default-originate
command.
Parameters

Defaults
Command Modes
Command
History

ip-address

Enter the IP address of the neighbor in dotted decimal format.

peer-group-name

Enter the name of the peer group to set the default route of all routers in
that peer group.

route-map map-name

(OPTIONAL) Enter the keyword route-map followed by the name of a
configured route map.

Not configured.
ROUTER BGP Address Family (conf-router_bgp_af)
Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.6.1.0

Introduced IPv6 MGBP support for E-Series

neighbor distribute-list
c et s
Syntax

Distribute BGP information via an established prefix list.
neighbor [ip-address | peer-group-name] distribute-list prefix-list-name [in | out]

To delete a neighbor distribution list, use the no neighbor [ip-address | peer-group-name]
distribute-list prefix-list-name [in | out] command.
Parameters

Defaults
Command Modes

ip-address

Enter the IP address of the neighbor in dotted decimal format.

peer-group-name

Enter the name of the peer group to apply the distribute list filter to all
routers in the peer group.

prefix-list-name

Enter the name of an established prefix list.
If the prefix list is not configured, the default is permit (to allow all
routes).

in

Enter the keyword in to distribute only inbound traffic.

out

Enter the keyword out to distribute only outbound traffic.

Not configured.
ROUTER BGP Address Family (conf-router_bgp_af)

Border Gateway Protocol IPv4 (BGPv4) | 387

www.dell.com | support.dell.com

Usage
Information
Related
Commands

Command
History

Other BGP filtering commands include: neighbor filter-list, ip as-path access-list, and
neighbor route-map.
ip as-path access-list

Configure IP AS-Path ACL.

neighbor filter-list

Assign a AS-PATH list to a neighbor or peer group.

neighbor route-map

Assign a route map to a neighbor or peer group.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.6.1.0

Introduced IPv6 MGBP support for E-Series

neighbor filter-list
c et s
Syntax

Configure a BGP filter based on the AS-PATH attribute.
neighbor [ip-address | peer-group-name] filter-list aspath access-list-name [in | out]

To delete a BGP filter, use the no neighbor [ip-address | peer-group-name] filter-list aspath
access-list-name [in | out] command.
Parameters

Defaults
Command Modes
Usage
Information

Related
Commands
Command
History

388

|

ip-address

Enter the IP address of the neighbor in dotted decimal format.

peer-group-name

Enter the name of the peer group to apply the filter to all routers in
the peer group.

access-list-name

Enter the name of an established AS-PATH access list (up to 140
characters).
If the AS-PATH access list is not configured, the default is permit
(to allow routes).

in

Enter the keyword in to filter inbound BGP routes.

out

Enter the keyword out to filter outbound BGP routes.

Not configured.
ROUTER BGP Address Family (conf-router_bgp_af)
Use the ip as-path access-list command syntax in the CONFIGURATION mode to enter the
AS-PATH ACL mode and configure AS-PATH filters to deny or permit BGP routes based on
information in their AS-PATH attribute.
ip as-path access-list

Enter AS-PATH ACL mode and configure AS-PATH filters.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.6.1.0

Introduced IPv6 MGBP support for E-Series

Border Gateway Protocol IPv4 (BGPv4)

neighbor maximum-prefix
c et s
Syntax

Control the number of network prefixes received.
neighbor ip-address | peer-group-name maximum-prefix maximum [threshold] [warning-only]

To return to the default values, use the no neighbor ip-address | peer-group-name
maximum-prefix maximum command.
Parameters

Defaults
Command Modes
Command
History

ip-address

(OPTIONAL) Enter the IP address of the neighbor in dotted decimal
format.

peer-group-name

(OPTIONAL) Enter the name of the peer group.

maximum

Enter a number as the maximum number of prefixes allowed for this BGP
router.
Range: 1 to 4294967295.

threshold

(OPTIONAL) Enter a number to be used as a percentage of the maximum
value. When the number of prefixes reaches this percentage of the
maximum value, FTOS sends a message.
Range: 1 to 100 percent.
Default: 75

warning-only

(OPTIONAL) Enter the keyword warning-only to set the router to send a
log message when the maximum value is reached. If this parameter is not
set, the router stops peering when the maximum number of prefixes is
reached.

threshold =

75

ROUTER BGP Address Family (conf-router_bgp_af)
Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.6.1.0

Introduced IPv6 MGBP support for E-Series

neighbor next-hop-self
c et s
Syntax

Enables you to configure the router as the next hop for a BGP neighbor.
neighbor ip-address | peer-group-name next-hop-self

To return to the default setting, use the no neighbor ip-address | peer-group-name next-hop-self
command.
Parameters

Defaults

ip-address

(OPTIONAL) Enter the IP address of the neighbor in dotted decimal
format.

peer-group-name

(OPTIONAL) Enter the name of the peer group.

Disabled.

Border Gateway Protocol IPv4 (BGPv4) | 389

www.dell.com | support.dell.com

Command Modes
Usage
Information
Command
History

ROUTER BGP Address Family (conf-router_bgp_af)
If the set next-hop command in the ROUTE-MAP mode is configured, its configuration takes
precedence over the neighbor next-hop-self command.
Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.6.1.0

Introduced IPv6 MGBP support for E-Series

neighbor remove-private-as
c et s
Syntax

Remove private AS numbers from the AS-PATH of outgoing updates.
neighbor ip-address | peer-group-name remove-private-as

To return to the default, use the no neighbor ip-address | peer-group-name remove-private-as
command.
Parameters

Defaults
Command Modes
Command
History

ip-address

(OPTIONAL) Enter the IP address of the neighbor to remove the private
AS numbers.

peer-group-name

(OPTIONAL) Enter the name of the peer group to remove the private
AS numbers

Disabled (that is, private AS number are not removed).
ROUTER BGP Address Family (conf-router_bgp_af)
Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.6.1.0

Introduced IPv6 MGBP support for E-Series

neighbor route-map
c et s
Syntax

Apply an established route map to either incoming or outbound routes of a BGP neighbor or c
peer group.
neighbor [ip-address | peer-group-name] route-map map-name [in | out]

To remove the route map, use the no neighbor [ip-address | peer-group-name] route-map
map-name [in | out] command.
Parameters

390

|

ip-address

(OPTIONAL) Enter the IP address of the neighbor in dotted decimal
format.

peer-group-name

(OPTIONAL) Enter the name of the peer group.

Border Gateway Protocol IPv4 (BGPv4)

Defaults
Command Modes
Usage
Information

map-name

Enter the name of an established route map.
If the Route map is not configured, the default is deny (to drop all
routes).

in

Enter the keyword in to filter inbound routes.

out

Enter the keyword out to filter outbound routes.

Not configured.
ROUTER BGP Address Family (conf-router_bgp_af)
When you apply a route map to outbound routes, only routes that match at least one section of
the route map are permitted.
If you identify a peer group by name, the peers in that peer group inherit the characteristics in
the Route map used in this command. If you identify a peer by IP address, the Route map
overwrites either the inbound or outbound policies on that peer.

Command
History

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.6.1.0

Introduced IPv6 MGBP support for E-Series

neighbor route-reflector-client
c et s
Syntax

Configure a neighbor as a member of a route reflector cluster.
neighbor ip-address | peer-group-name route-reflector-client

To indicate that the neighbor is not a route reflector client or to delete a route reflector
configuration, use the no neighbor ip-address | peer-group-name route-reflector-client command.
Parameters

Defaults
Command Modes
Usage
Information

ip-address

(OPTIONAL) Enter the IP address of the neighbor in dotted
decimal format.

peer-group-name

(OPTIONAL) Enter the name of the peer group.
All routers in the peer group receive routes from a route reflector.

Not configured.
ROUTER BGP Address Family (conf-router_bgp_af)
The first time you enter this command it configures the neighbor as a route reflector and
members of the route-reflector cluster. Internal BGP (IBGP) speakers do not need to be fully
meshed if you configure a route reflector.
When all clients of a route reflector are disabled, the neighbor is no longer a route reflector.

Border Gateway Protocol IPv4 (BGPv4) | 391

www.dell.com | support.dell.com

Command
History

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.6.1.0

Introduced IPv6 MGBP support for E-Series

network
c et s
Syntax

Specify the networks for the BGP process and enter them in the BGP routing table.
network ip-address mask [route-map map-name]

To remove a network, use the no network ip-address mask [route-map map-name] command.
Parameters

ip-address

Enter an IP address in dotted decimal format of the network.

mask

Enter the mask of the IP address in the slash prefix length format (for example, /
24).
The mask appears in command outputs in dotted decimal format (A.B.C.D).

route-map

(OPTIONAL) Enter the keyword route-map followed by the name of an
established route map.
Only the following ROUTE-MAP mode commands are supported:
• match ip address
• set community
• set local-preference
• set metric
• set next-hop
• set origin
• set weight
If the route map is not configured, the default is deny (to drop all routes).

map-name

Defaults
Command Modes
Usage
Information

Related
Commands
Command
History

Not configured.
ROUTER BGP Address Family (conf-router_bgp_af)
FTOS resolves the network address configured by the network command with the routes in the

main routing table to ensure that the networks are reachable via non-BGP routes and
non-default routes.
redistribute

Redistribute routes into BGP.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.6.1.0

Introduced IPv6 MGBP support for E-Series

redistribute
c et s

392

|

Redistribute routes into BGP.

Border Gateway Protocol IPv4 (BGPv4)

Syntax

redistribute [connected | static] [route-map map-name]

To disable redistribution, use the no redistribution [connected | static] [route-map map-name]
command.
Parameters

connected

Enter the keyword connected to redistribute routes from physically connected
interfaces.

static

Enter the keyword static to redistribute manually configured routes.
These routes are treated as incomplete routes.

route-map

(OPTIONAL) Enter the keyword route-map followed by the name of an
established route map.
Only the following ROUTE-MAP mode commands are supported:
• match ip address
• set community
• set local-preference
• set metric
• set next-hop
• set origin
• set weight
If the route map is not configured, the default is deny (to drop all routes).

map-name

Defaults
Command Modes
Usage
Information

Not configured.
ROUTER BGP Address Family (conf-router_bgp_af)
If you do not configure default-metric command in addition to the redistribute command, or
there is no route map to set the metric, the metric for redistributed static and connected is “0”.
To redistribute the default route (0.0.0.0/0) configure the neighbor default-originate
command.

Related
Commands
Command
History

neighbor default-originate

Inject the default route.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.6.1.0

Introduced IPv6 MGBP support for E-Series

redistribute ospf
c et s
Syntax

Redistribute OSPF routes into BGP.
redistribute ospf process-id [[match external {1 | 2}] [match internal]] [route-map map-name]

To stop redistribution of OSPF routes, use the no redistribute ospf process-id command.

Border Gateway Protocol IPv4 (BGPv4) | 393

www.dell.com | support.dell.com

Parameters

process-id

Enter the number of the OSPF process.
Range: 1 to 65535

match external
{1 | 2}

(OPTIONAL) Enter the keywords match external to redistribute OSPF
external routes. You can specify 1 or 2 to redistribute those routes only.

match internal

(OPTIONAL) Enter the keywords match internal to redistribute OSPF
internal routes only.

route-map

(OPTIONAL) Enter the keywords route-map followed by the name of a
configured Route map.

map-name
Defaults
Command Modes
Usage
Information

Not configured.
ROUTER BGP Address Family (conf-router_bgp_af)
When you enter redistribute ospf process-id command without any other parameters, FTOS
redistributes all OSPF internal routes, external type 1 routes, and external type 2 routes.
This feature is not supported by an RFC.

Command
History

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.6.1.0

Introduced IPv6 MGBP support for E-Series

show ip bgp ipv4 multicast
c et s
Syntax
Parameters

Command Modes

View the current MBGP routing table for the system.
show ip bgp ipv4 multicast [detail | network [network-mask] [length]]
detail

(OPTIONAL) Enter the keyword detail to display BGP internal
information for the IPv4 Multicast address family.

network

(OPTIONAL) Enter the network address (in dotted decimal format) of the
BGP network to view information only on that network.

network-mask

(OPTIONAL) Enter the network mask (in slash prefix format) of the BGP
network address.

longer-prefixes

(OPTIONAL) Enter the keyword longer-prefixes to view all routes with a
common prefix.

EXEC
EXEC Privilege

Example

FTOS#show ip bgp ipv4 multicast
BGP table version is 14, local router ID is 100.10.10.1
Status codes: s suppressed, S stale, d damped, h history, * valid, > best
Path source: I - internal, a - aggregate, c - confed-external, r - redistributed, n - network
Origin codes: i - IGP, e - EGP, ? - incomplete
Network

394

|

Border Gateway Protocol IPv4 (BGPv4)

Next Hop

Metric

LocPrf Weight Path

*>I 25.1.0.0/16
*>I 25.2.0.0/16
*>I 25.3.0.0/16
*>r 144.1.0.0/16
*>r 144.2.0.0/16
*>r 144.3.0.0/16
*>n 145.1.0.0/16
FTOS#
Table 9-17.

Related
Commands
Command
History

25.25.25.25
25.25.25.26
211.1.1.165
0.0.0.0
100.10.10.10
211.1.1.135
0.0.0.0

0
0
0
0
0
0
0

100
100
100

0
0
0
32768
32768
32768
32768

i
?
?
?
?
?
i

show ip bgp Command Example Fields

Field

Description

Network

Displays the destination network prefix of each BGP route.

Next Hop

Displays the next hop address of the BGP router.
If 0.0.0.0 is listed in this column, then local routes exist in the routing
table.

Metric

Displays the BGP route’s metric, if assigned.

LocPrf

Displays the BGP LOCAL_PREF attribute for the route.

Weight

Displays the route’s weight

Path

Lists all the ASs the route passed through to reach the destination
network.

show ip bgp community

View BGP communities.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.6.1.0

Introduced IPv6 MGBP support for E-Series

Version 7.8.1.0

Introduced support on S-Series

show ip bgp cluster-list
c et s
Syntax
Parameters

Command Modes

View BGP neighbors in a specific cluster.
show ip bgp ipv4 multicast cluster-list [cluster-id]
cluster-id

(OPTIONAL) Enter the cluster id in dotted decimal format.

EXEC
EXEC Privilege

Command
History

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.6.1.0

Introduced IPv6 MGBP support for E-Series

Border Gateway Protocol IPv4 (BGPv4) | 395

www.dell.com | support.dell.com

show ip bgp community
ces

View information on all routes with Community attributes or view specific BGP community
groups.

Syntax

show ip bgp ipv4 multicast community [community-number] [local-as] [no-export] [no-advertise]

Parameters

Command Modes

community-number

Enter the community number in AA:NN format where AA is the AS
number (2 bytes) and NN is a value specific to that autonomous system.
You can specify up to eight community numbers to view information on
those community groups.

local-AS

Enter the keywords local-AS to view all routes with the COMMUNITY
attribute of NO_EXPORT_SUBCONFED.
All routes with the NO_EXPORT_SUBCONFED (0xFFFFFF03)
community attribute must not be advertised to external BGP peers.

no-advertise

Enter the keywords no-advertise to view all routes containing the
well-known community attribute of NO_ADVERTISE.
All routes with the NO_ADVERTISE (0xFFFFFF02) community
attribute must not be advertised to other BGP peers.

no-export

Enter the keywords no-export to view all routes containing the
well-known community attribute of NO_EXPORT.
All routes with the NO_EXPORT (0xFFFFFF01) community attribute
must not be advertised outside a BGP confederation boundary.

EXEC
EXEC Privilege

Usage
Information

To view the total number of COMMUNITY attributes found, use the show ip bgp summary
command. The text line above the route table states the number of COMMUNITY attributes
found.
The show ip bgp community command without any parameters lists BGP routes with at least
one BGP community attribute and the output is the same as for the show ip bgp command
output.

Command
History

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.6.1.0

Introduced IPv6 MGBP support for E-Series

show ip bgp community-list
c et s
Syntax
Parameters

396

|

View routes that are affected by a specific community list.
show ip bgp ipv4 multicast community-list community-list-name
community-list-name

Border Gateway Protocol IPv4 (BGPv4)

Enter the name of a configured IP community list.

Command Modes

EXEC
EXEC Privilege

Command
History

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

show ip bgp dampened-paths
c et s
Syntax
Command Modes

View BGP routes that are dampened (non-active).
show ip bgp ipv4 multicast dampened-paths

EXEC
EXEC Privilege

Command
History

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.6.1.0

Introduced IPv6 MGBP support for E-Series

show ip bgp filter-list
c et s
Syntax
Parameters

Command Modes

View the routes that match the filter lists.
show ip bgp ipv4 multicast filter-list as-path-name
as-path-name

Enter the name of an AS-PATH.

EXEC
EXEC Privilege

Command
History

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.6.1.0

Introduced IPv6 MGBP support for E-Series

show ip bgp flap-statistics
c et s
Syntax

View flap statistics on BGP routes.
show ip bgp ipv4 multicast flap-statistics [ip-address [mask]] [filter-list as-path-name] [regexp
regular-expression]

Border Gateway Protocol IPv4 (BGPv4) | 397

www.dell.com | support.dell.com

Parameters

Command Modes

ip-address

(OPTIONAL) Enter the IP address (in dotted decimal format) of the
BGP network to view information only on that network.

mask

(OPTIONAL) Enter the network mask (in slash prefix (/x) format) of
the BGP network address.

filter-list as-path-name

(OPTIONAL) Enter the keyword filter-list followed by the name of a
configured AS-PATH ACL.

regexp regular-expression

Enter a regular expression then use one or a combination of the
following characters to match:
• . = (period) any single character (including a white space)
• * = (asterisk) the sequences in a pattern (0 or more sequences)
• + = (plus) the sequences in a pattern (1 or more sequences)
• ? = (question mark) sequences in a pattern (either 0 or 1
sequences). You must enter an escape sequence (CTRL+v)
prior to entering the ? regular expression.
• [ ] = (brackets) a range of single-character patterns.
• ( ) = (parenthesis) groups a series of pattern elements to a single
element
• { } = (braces) minimum and the maximum match count
• ^ = (caret) the beginning of the input string. If the caret is used at
the beginning of a sequence or range, it matches on everything
BUT the characters specified.
• $ = (dollar sign) the end of the output string.

EXEC
EXEC Privilege

Command
History

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.6.1.0

Introduced IPv6 MGBP support for E-Series

show ip bgp inconsistent-as
c et s
Syntax
Command Modes

View routes with inconsistent originating Autonomous System (AS) numbers, that is,
prefixes that are announced from the same neighbor AS but with a different AS-Path.
show ip bgp ipv4 multicast inconsistent-as

EXEC
EXEC Privilege

Command
History

398

|

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Border Gateway Protocol IPv4 (BGPv4)

show ip bgp ipv4 multicast neighbors
c et s
Syntax

Parameters

Command Modes

Enables you to view the information exchanged by BGP neighbors.
show ip bgp ipv4 multicast neighbors [ip-address [advertised-routes | dampened-routes | detail |
flap-statistics | routes]]
ip-address

(OPTIONAL) Enter the IP address, in either IPv4 or IPv6 format, of the
neighbor to view only BGP information exchanged with that neighbor.

advertised-routes

(OPTIONAL) Enter the keywords advertised-routes to view only the
routes the neighbor sent.

dampened-routes

(OPTIONAL) Enter the keyword dampened-routes to view information
on dampened routes from the BGP neighbor.

detail

(OPTIONAL) Display detailed neighbor information.

flap-statistics

(OPTIONAL) Enter the keyword flap-statistics to view flap statistics on
the neighbor’s routes.

routes

(OPTIONAL) Enter the keywords routes to view only the neighbor’s
feasible routes.

EXEC
EXEC Privilege

Example

FTOS#show ip bgp ipv4 multicast neighbors
BGP neighbor is 25.25.25.25, remote AS 6400, internal link
BGP version 4, remote router ID 25.25.25.25
BGP state ESTABLISHED, in this state for 00:02:18
Last read 00:00:16, hold time is 180, keepalive interval is 60 seconds
Received 1404 messages, 0 in queue
3 opens, 1 notifications, 1394 updates
6 keepalives, 0 route refresh requests
Sent 48 messages, 0 in queue
3 opens, 2 notifications, 0 updates
43 keepalives, 0 route refresh requests
Minimum time between advertisement runs is 5 seconds
Minimum time before advertisements start is 0 seconds
Capabilities received from neighbor for IPv4 unicast :
MULTIPROTO_EXT(1)
ROUTE_REFRESH(2)
CISCO_ROUTE_REFRESH(128)
Capabilities advertised to neighbor for IPv4 Multicast :
MULTIPROTO_EXT(1)
ROUTE_REFRESH(2)
CISCO_ROUTE_REFRESH(128)
Update source set to Loopback 0
For address family: IPv4 Multicast
BGP table version 14, neighbor version 14
3 accepted prefixes consume 12 bytes
Prefixes accepted 1 (consume 4 bytes), withdrawn 0 by peer
Prefixes advertised 0, rejected 0, withdrawn 0 from peer
Connections established 2; dropped 1
Last reset 00:03:17, due to user reset
Notification History
'Connection Reset' Sent : 1

Recv: 0

Border Gateway Protocol IPv4 (BGPv4) | 399

www.dell.com | support.dell.com

Local host: 100.10.10.1, Local port: 179
Foreign host: 25.25.25.25, Foreign port: 2290
BGP neighbor is 211.1.1.129, remote AS 640, external link
BGP version 4, remote router ID 0.0.0.0
BGP state ACTIVE, in this state for 00:00:36
Last read 00:00:41, hold time is 180, keepalive interval is 60 seconds
Received 28 messages, 0 notifications, 0 in queue
Sent 6 messages, 3 notifications, 0 in queue
Received 18 updates, Sent 6 updates
Route refresh request: received 0, sent 0
Minimum time between advertisement runs is 30 seconds
For address family: IPv4 Multicast
BGP table version 14, neighbor version 0
0 accepted prefixes consume 0 bytes
Prefix advertised 0, rejected 0, withdrawn 0
Connections established 3; dropped 3
Last reset 00:00:37, due to user reset
Notification History
'Connection Reset' Sent : 3

Recv: 0

No active TCP connection
FTOS#

Table 9-18.

400

|

Command Example fields: show ip bgp ipv4 multicast neighbors

Lines beginning with

Description

BGP neighbor

Displays the BGP neighbor address and its AS number. The last
phrase in the line indicates whether the link between the BGP
router and its neighbor is an external or internal one. If they are
located in the same AS, then the link is internal; otherwise the link
is external.

BGP version

Displays the BGP version (always version 4) and the remote router
ID.

BGP state

Displays the neighbor’s BGP state and the amount of time in
hours:minutes:seconds it has been in that state.

Last read

This line displays the following information:
• last read is the time (hours:minutes:seconds) the router read a
message from its neighbor
• hold time is the number of seconds configured between
messages from its neighbor
• keepalive interval is the number of seconds between keepalive
messages to help ensure that the TCP session is still alive.

Received messages

This line displays the number of BGP messages received, the
number of notifications (error messages) and the number of
messages waiting in a queue for processing.

Sent messages

The line displays the number of BGP messages sent, the number of
notifications (error messages) and the number of messages waiting
in a queue for processing.

Received updates

This line displays the number of BGP updates received and sent.

Minimum time

Displays the minimum time, in seconds, between advertisements.

Border Gateway Protocol IPv4 (BGPv4)

Table 9-18.

Related
Commands
Command
History

Command Example fields: show ip bgp ipv4 multicast neighbors

Lines beginning with

Description

(list of inbound and outbound
policies)

Displays the policy commands configured and the names of the
Route map, AS-PATH ACL or Prefix list configured for the policy.

For address family:

Displays IPv4 Unicast as the address family.

BGP table version

Displays the which version of the primary BGP routing table the
router and the neighbor are using.

accepted prefixes

Displays the number of network prefixes accepted by the router
and the amount of memory used to process those prefixes.

Prefix advertised

Displays the number of network prefixes advertised, the number
rejected and the number withdrawn from the BGP routing table.

Connections established

Displays the number of TCP connections established and dropped
between the two peers to exchange BGP information.

Last reset

Displays the amount of time since the peering session was last
reset. Also states if the peer resets the peering session.
If the peering session was never reset, the word never is displayed.

Local host:

Displays the peering address of the local router and the TCP port
number.

Foreign host:

Displays the peering address of the neighbor and the TCP port
number.

show ip bgp

View the current BGP routing table.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.6.1.0

Introduced IPv6 MGBP support for E-Series

show ip bgp peer-group
c et s
Syntax
Parameters

Command Modes

Enables you to view information on the BGP peers in a peer group.
show ip bgp ipv4 multicast peer-group [peer-group-name [detail | summary]]
peer-group-name

(OPTIONAL) Enter the name of a peer group to view information about
that peer group only.

detail

(OPTIONAL) Enter the keyword detail to view detailed status
information of the peers in that peer group.

summary

(OPTIONAL) Enter the keyword summary to view status information of
the peers in that peer group.
The output is the same as that found in show ip bgp summary command

EXEC

Border Gateway Protocol IPv4 (BGPv4) | 401

www.dell.com | support.dell.com

EXEC Privilege
Related
Commands

Command
History

neighbor peer-group (assigning peers)

Assign peer to a peer-group.

neighbor peer-group (creating group)

Create a peer group.

show ip bgp peer-group

View information on the BGP peers in a peer group.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.6.1.0

Introduced IPv6 MGBP support for E-Series

Version 7.5.1.0

Modified: added detail option

show ip bgp summary
c et s
Syntax
Command Modes

Enables you to view the status of all BGP connections.
show ip bgp ipv4 multicast summary

EXEC
EXEC Privilege

Example

FTOS#sho ip bgp ipv4 multicast summary
BGP router identifier 100.10.10.1, local AS number 6400
BGP table version is 14, main routing table version 14
7 network entrie(s) and 7 paths using 972 bytes of memory
2 BGP path attribute entrie(s) using 112 bytes of memory
1 BGP AS-PATH entrie(s) using 35 bytes of memory
Neighbor

AS

25.25.25.25
211.1.1.129
FTOS#

6400
640

Table 9-19.

402

|

MsgRcvd

MsgSent

TblVer

InQ

21
28

9
6

14
0

0
0

OutQ Up/Down

State/Pfx

0 00:02:04
0 00:00:21 Active

3

Command Example fields: show ip bgp ipv4 multicast summary

Field

Description

BGP router identifier

Displays the local router ID and the AS number.

BGP table version

Displays the BGP table version and the main routing table version.

network entries

Displays the number of network entries and route paths and the amount
of memory used to process those entries.

BGP path attribute entries

Displays the number of BGP path attributes and the amount of memory
used to process them.

BGP AS-PATH entries

Displays the number of BGP AS_PATH attributes processed and the
amount of memory used to process them.

Border Gateway Protocol IPv4 (BGPv4)

Table 9-19.

Command
History

Command Example fields: show ip bgp ipv4 multicast summary

Field

Description

BGP community entries

Displays the number of BGP COMMUNITY attributes processed and
the amount of memory used to process them. The show ip bgp
community command provides more details on the COMMUNITY
attributes.

Dampening enabled

Displayed only when dampening is enabled. Displays the number of
paths designated as history, dampened, or penalized.

Neighbor

Displays the BGP neighbor address.

AS

Displays the AS number of the neighbor.

MsgRcvd

Displays the number of BGP messages that neighbor received.

MsgSent

Displays the number of BGP messages that neighbor sent.

TblVer

Displays the version of the BGP table that was sent to that neighbor.

InQ

Displays the number of messages from that neighbor waiting to be
processed.

OutQ

Displays the number of messages waiting to be sent to that neighbor.
If a number appears in parentheses, the number represents the number
of messages waiting to be sent to the peer group.

Up/Down

Displays the amount of time (in hours:minutes:seconds) that the
neighbor is in the Established stage.
If the neighbor has never moved into the Established stage, the word
never is displayed.

State/Pfx

If the neighbor is in Established stage, the number of network prefixes
received.
If a maximum limit was configured with the neighbor maximum-prefix
command, (prfxd) appears in this column.
If the neighbor is not in Established stage, the current stage is displayed
(Idle, Connect, Active, OpenSent, OpenConfirm) When the peer is
transitioning between states and clearing the routes received, the phrase
(Purging) may appear in this column.
If the neighbor is disabled, the phrase (Admin shut) appears in this
column.

Version 7.8.1.0

Introduced support on S-Series

Version 7.7.1.0

Introduced support on C-Series

Version 7.6.1.0

Introduced IPv6 MGBP support for E-Series

BGP Extended Communities (RFC 4360)
BGP Extended Communities, as defined in RFC 4360, is an optional transitive BGP attribute.
It provides two major advantages over Standard Communities:

Border Gateway Protocol IPv4 (BGPv4) | 403

www.dell.com | support.dell.com

•
•

The range is extended from 4-octet (AA:NN) to 8-octet (Type:Value) to provide
enough number communities.
Communities are structured using a new “Type” field (1 or 2-octets), allowing
you to provide granular control/filter routing information based on the type of
extended communities.

The BGP Extended Community commands are:
•
•
•
•
•
•
•
•
•
•
•
•
•

deny
deny regex
description
ip extcommunity-list
match extcommunity
permit
permit regex
set extcommunity rt
set extcommunity soo
show ip bgp ipv4 extcommunity-list
show ip bgp paths extcommunity
show ip extcommunity-list
show running-config extcommunity-list

deny
ces
Syntax

Use this feature to reject (deny) from the two types of extended communities, Route Origin
(rt) or Site-of-Origin (soo).
deny {rt | soo} {as4 ASN4:NN | ASN:NNNN | IPADDR:NN}

To remove (delete) the rule, use the no deny {rt | soo} {as4 ASN4:NN | ASN:NNNN |
IPADDR:NN} command.
Parameters

Defaults

404

|

rt

Enter the keyword rt to designate a Route Origin community

soo

Enter the keyword soo to designate a Site-of-Origin community (also known
as Route Origin).

as4 ASN4:NN

Enter the keyword as4 followed by the 4-octet AS specific extended
community number in the format ASN4:NN (4-byte AS number:2-byte
community value).

ASN:NNNN

Enter the 2-octet AS specific extended community number in the format
ASN:NNNN (2-byte AS number:4-byte community value).

IPADDR:NN

Enter the IP address specific extended community in the format
IPADDR:NN (4-byte IPv4 Unicast Address:2-byte community value)

Not configured

Border Gateway Protocol IPv4 (BGPv4)

Command Modes
Related
Commands

Command
History

CONFIGURATION (conf-ext-community-list)
permit

Configure to add (permit) rules

show ip extcommunity-list

Display the Extended Community list

Version 7.8.1.0

Introduced on S-Series

Version 7.7.1.0

Introduced on C-Series

Version 7.6.1.0

Introduced on E-Series

deny regex
ces
Syntax

This features enables you to specify an extended communities to reject (deny) using a regular
expressions (regex).
deny regex {regex}

To remove, use the no deny regex {regex} command.
Parameters

Defaults
Command Modes
Usage
Information

Not configured
CONFIGURATION (conf-ext-community-list)
Duplicate commands are silently accepted.

Example
Related
Commands
Command
History

Enter a regular expression.

regex

FTOS(conf-ext-community-list)#deny regexp 123
FTOS(conf-ext-community-list)#

permit regex

Permit a community using a regular expression

Version 7.8.1.0

Introduced on S-Series

Version 7.7.1.0

Introduced on C-Series

Version 7.6.1.0

Introduced on E-Series

description
ces
Syntax

Use this feature to designate a meaningful description to the extended community.
description {line}

To remove the description, use the no description {line} command.
Parameters

line

Enter a description (maximum 80 characters).

Border Gateway Protocol IPv4 (BGPv4) | 405

www.dell.com | support.dell.com

Defaults
Command Modes
Command
History

Not configured
CONFIGURATION (conf-ext-community-list)
Version 7.8.1.0

Introduced on S-Series

Version 7.7.1.0

Introduced on C-Series

Version 7.6.1.0

Introduced on E-Series

ip extcommunity-list
ces
Syntax

Use this feature to enter the Extended Community-list mode.
ip extcommunity-list word

To exit from this mode, use the exit command.
Parameters

Defaults
Command Modes
Usage
Information
Example
Command
History

word

Enter a community list name (maximum 16 characters).

No defaults values or behavior
CONFIGURATION (conf-ext-community-list)
This new mode will change the prompt. Refer to the example below.
FTOS(conf)#ip extcommunity-list test
FTOS(conf-ext-community-list)#

Version 7.8.1.0

Introduced on S-Series

Version 7.7.1.0

Introduced on C-Series

Version 7.6.1.0

Introduced on E-Series

match extcommunity
ces
Syntax

Use this feature to match an extended community in the Route Map mode.
match extcommunity {extended community list name}

To change the match, use the no match extcommunity {extended community list name}
command.
Parameters

Defaults
Command Modes

406

|

extended community list name

No defaults values or behavior
ROUTE MAP (config-route-map)

Border Gateway Protocol IPv4 (BGPv4)

Enter the name of the extended community list.

Usage
Information

Like standard communities, extended communities can be used in route-map to match the
attribute.

Example
Command
History

FTOS(config-route-map)#match extcommunity Freedombird
FTOS(config-route-map)#

Version 7.8.1.0

Introduced on S-Series

Version 7.7.1.0

Introduced on C-Series

Version 7.6.1.0

Introduced on E-Series

permit
ces
Syntax

Use this feature to add rules (permit) from the two types of extended communities, Route
Origin (rt) or Site-of-Origin (soo).
permit {rt | soo} {as4 ASN4:NN | ASN:NNNN | IPADDR:NN}

To change the rules, use the no permit {rt | soo} {as4 ASN4:NN | ASN:NNNN | IPADDR:NN}
command.
Parameters

Defaults
Command Modes
Related
Commands

Command
History

rt

Enter the keyword rt to designate a Route Origin community

soo

Enter the keyword soo to designate a Site-of-Origin community (also known
as Route Origin).

as4 ASN4:NN

Enter the keyword as4 followed by the 4-octet AS specific extended
community number in the format ASN4:NN (4-byte AS number:2-byte
community value).

ASN:NNNN

Enter the 2-octet AS specific extended community number in the format
ASN:NNNN (2-byte AS number:4-byte community value).

IPADDR:NN

Enter the IP address specific extended community in the format
IPADDR:NN (4-byte IPv4 Unicast Address:2-byte community value)

Not Configured
CONFIGURATION (conf-ext-community-list)
deny

Configure to delete (deny) rules

show ip extcommunity-list

Display the Extended Community list

Version 7.8.1.0

Introduced on S-Series

Version 7.7.1.0

Introduced on C-Series

Version 7.6.1.0

Introduced on E-Series

permit regex
ces

This features enables you specify an extended communities to forward (permit) using a
regular expressions (regex).

Border Gateway Protocol IPv4 (BGPv4) | 407

www.dell.com | support.dell.com

Syntax

permit regex {regex}

To remove, use the no permit regex {regex} command.
Parameters

Defaults
Command Modes
Usage
Information
Example
Related
Commands
Command
History

Enter a regular expression.

regex

Not configured
CONFIGURATION (conf-ext-community-list)
Duplicate commands are silently accepted.
FTOS(conf-ext-community-list)#permit regexp 123
FTOS(conf-ext-community-list)#

deny regex

Deny a community using a regular expression

Version 7.8.1.0

Introduced on S-Series

Version 7.7.1.0

Introduced on C-Series

Version 7.6.1.0

Introduced on E-Series

set extcommunity rt
ces
Syntax

Use this feature to set Route Origin community attributes in Route Map.
set extcommunity rt {as4 ASN4:NN [non-trans] | ASN:NNNN [non-trans] | IPADDR:NN
[non-trans]} [additive]

To delete the Route Origin community, use the no set extcommunity command.
Parameters

Defaults
Command Modes

408

|

as4 ASN4:NN

Enter the keyword as4 followed by the 4-octet AS specific extended
community number in the format ASN4:NN (4-byte AS number:2-byte
community value).

ASN:NNNN

Enter the 2-octet AS specific extended community number in the format
ASN:NNNN (2-byte AS number:4-byte community value).

IPADDR:NN

Enter the IP address specific extended community in the format
IPADDR:NN (4-byte IPv4 Unicast Address:2-byte community value)

additive

(OPTIONAL) Enter the keyword additive to add to the existing extended
community.

non-trans

(OPTIONAL) Enter the keyword non-trans to indicate a non-transitive BGP
extended community.

No default values or behavior
ROUTE MAP (config-route-map)

Border Gateway Protocol IPv4 (BGPv4)

Usage
Information

If the set community rt and soo are in the same route-map entry, we can define the behavior
as:
•
•
•

Related
Commands
Command
History

If rt option comes before soo, with or without additive option, then soo overrides
the communities set by rt
If rt options comes after soo, without the additive option, then rt overrides the
communities set by soo
If rt with additive option comes after soo, then rt adds the communities set by soo

set extcommunity soo

Set extended community site-of-origin in route-map.

Version 7.8.1.0

Introduced on S-Series

Version 7.7.1.0

Introduced on C-Series

Version 7.6.1.0

Introduced on E-Series

set extcommunity soo
ces
Syntax

Use this feature to set extended community site-of-origin in Route Map.
set extcommunity soo {as4 ASN4:NN | ASN:NNNN | IPADDR:NN [non-trans]}

To delete the site-of-origin community, use the no set extcommunity command.
Parameters

Defaults
Command Modes
Usage
Information

as4 ASN4:NN

Enter the keyword as4 followed by the 4-octet AS specific extended
community number in the format ASN4:NN (4-byte AS number:2-byte
community value).

ASN:NNNN

Enter the 2-octet AS specific extended community number in the format
ASN:NNNN (2-byte AS number:4-byte community value).

IPADDR:NN

Enter the IP address specific extended community in the format
IPADDR:NN (4-byte IPv4 Unicast Address:2-byte community value)

non-trans

(OPTIONAL) Enter the keyword non-trans to indicate a non-transitive BGP
extended community.

No default behavior or values
ROUTE MAP (config-route-map)
If the set community rt and soo are in the same route-map entry, we can define the behavior
as:
•
•
•

If rt option comes before soo, with or without additive option, then soo overrides
the communities set by rt
If rt options comes after soo, without the additive option, then rt overrides the
communities set by soo
If rt with additive option comes after soo, then rt adds the communities set by soo

Border Gateway Protocol IPv4 (BGPv4) | 409

www.dell.com | support.dell.com

Related
Commands
Command
History

set extcommunity rt

Set extended community route origins via the route-map

Version 7.8.1.0

Introduced on S-Series

Version 7.7.1.0

Introduced on C-Series

Version 7.6.1.0

Introduced on E-Series

show ip bgp ipv4 extcommunity-list
ces
Syntax
Parameters

Defaults
Command Modes

Use this feature to display IPv4 routes matching the extended community list name.
show ip bgp [ipv4 [multicast | unicast] | ipv6 unicast] extcommunity-list name
multicast

Enter the keyword multicast to display the multicast route information.

unicast

Enter the keyword unicast to display the unicast route information.

ipv6 unicast

Enter the keywords ipv6 unicast to display the IPv6 unicast route information.

name

(OPTIONALLY) Enter the name of the extcommunity-list.

No default values or behavior
EXEC
EXEC Privilege

Usage
Information

If there is a type or sub-type that is not well-known, it will be displayed as:
TTSS:XX:YYYY
Where TT is type, SS is sub-type displayed in hexadecimal format, XX:YYYY is the value
divided into 2-byte and 4-byte values in decimal format. This format is consistent with other
vendors.
For example, if the extended community has type 0x04, sub-type 0x05, value
0x20 00 00 00 10 00, it will be displayed as:
0x0405:8192:4096
Non-transitive extended communities are marked with an asterisk, as shown in the figure
below.

Example

FTOS#show ip bgp ipv4 multicast extcommunity-list
BGP routing table entry for 192.168.1.0/24, version 2
Paths: (1 available, table Default-IP-Routing-Table.)
Not advertised to any peer
Received from :
100.100.1.2 (2.4.0.1)
Best
AS_PATH : 200
Next-Hop : 100.100.1.2, Cost : 0

410

|

Border Gateway Protocol IPv4 (BGPv4)

Origin IGP, Metric 4294967295 (Default), LocalPref 100, Weight 0, external
Communities :
300:400
500:600
Extended Communities :
RT:1111:4278080 SoO:35:4
SoO:38:50529045 SoO:0.0.0.2:33

SoO:36:50529043
SoO:506.62106:34

SoO:37:50529044
0x0303:254:11223*

FTOS#

Command
History

Version 7.8.1.0

Introduced on S-Series

Version 7.7.1.0

Introduced on C-Series

Version 7.6.1.0

Introduced on E-Series

show ip bgp paths extcommunity
ces
Syntax
Command Modes

Use this feature to display all BGP paths having extended community attributes.
show ip bgp paths extcommunity

EXEC
EXEC Privilege

Example

FTOS#show ip bgp paths extcommunity
Total 1 Extended Communities
Address

Hash

Refcount

Extended Community

0x41d57024
FTOS#

12272

1

RT:7:200 SoO:5:300 SoO:0.0.0.3:1285

Table 9-20.

Command
History

Command Example fields: show ip bgp paths community

Field

Description

Address

Displays the internal address where the path attribute is stored.

Hash

Displays the hash bucket where the path attribute is stored.

Refcount

Displays the number of BGP routes using these extended communities.

Community

Displays the extended community attributes in this BGP path.

Version 7.8.1.0

Introduced on S-Series

Version 7.7.1.0

Introduced on C-Series

Version 7.6.1.0

Introduced on E-Series

show ip extcommunity-list
ces
Syntax

Display the IP extended community list.
show ip extcommunity-list [word]

Border Gateway Protocol IPv4 (BGPv4) | 411

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes

word

Enter the name of the extended community list you want to view.

Defaults.
EXEC
EXEC Privilege

Example

Command
History

FTOS#show ip extcommunity-list test
ip extcommunity-list test
deny RT:1234:12
permit regexp 123
deny regexp 234
deny regexp 123
FTOS#

Version 7.8.1.0

Introduced on S-Series

Version 7.7.1.0

Introduced on C-Series

Version 7.6.1.0

Introduced on E-Series

show running-config extcommunity-list
ces
Syntax
Parameters

Defaults
Command Modes
Example

Use this feature to display the current configuration of the extended community lists.
show running-config extcommunity-list [word]
word

Enter the name of the extended community list you want to view.

No default values or behavior
EXEC Privilege
FTOS#show running-config extcommunity-list test
ip extcommunity-list test
permit rt 65033:200
deny soo 101.11.11.2:23
permit rt as4 110212:340
deny regex ^(65001_)$
FTOS#

Command
History

412

|

Version 7.8.1.0

Introduced on S-Series

Version 7.7.1.0

Introduced on C-Series

Version 7.6.1.0

Introduced on E-Series

Border Gateway Protocol IPv4 (BGPv4)

10
Bare Metal Provisioning
Overview
z

Bare Metal Provisioning is supported on platforms:

Bare Metal Provisioning version 2.0 is supported on S4810 and z switches.
In a data center network, Bare Metal Provisioning (BMP) automates the configuration and
updating of switches, ensuring standard configurations across installed devices.
You can configure auto-configuration on a single switch or on multiple switches. BMP allows
you to set up a stack with a minimum of effort, but is also useful for quick configuration of a
single switch.
For additional information on BMP in an auto-configuration mode, refer to the Open
Automation Guide.
BMP 2.0 eases configuration by providing the following key features:
•
•
•
•

Boot images and running configurations are specified in a DHCP server.
Files are automatically downloaded from a file server and applied by the switch
Switch access is allowed through all ports (management and user ports) with or
without DHCP-based dynamic IP address configuration of a switch.
Booting up in Layer 3 mode with interfaces already in no shutdown mode and
only enabling some basic protocols enabled to protect the system and the network

Commands
•
•
•

reload-type
show reload-type
stop jump-start

reload-type
BMP 2.0 auto-configuration mode: Configure a switch to reload in normal mode or as a
DHCP client with all ports configured for Layer 3 traffic.

Bare Metal Provisioning | 413

www.dell.com | support.dell.com

Syntax

Parameters

Defaults

reload-type {normal-reload | jump-start [config-download {enable | disable}] [dhcp-timeout
minutes]}
normal-reload

The switch reloads in normal mode using the FTOS image and
startup configuration file stored in the local flash.

jump-start

The switch reloads in Jumpstart mode as a DHCP client.

config-download {enable |
disable}

(Optional) Configure whether the switch boots up using the
configuration file downloaded from the DHCP/file servers (enable)
OR if the downloaded file will be discarded and the startup
configuration file stored in the local flash will be used (disable).

dhcp-timeout minutes

(Optional) Configure the DHCP timeout (in minutes) after which the
Jumpstart reload stops.
Range: 1 to 50.
Default: Infinite number of retries.

A switch running BMP 2.0 reloads in Jumpstart mode as a DHCP client with all ports
configured for Layer 3 traffic.

Command Modes

EXEC Privilege

Command
History

Version 8.3.10.1

Usage
Information

Introduced on S4810.

For an initial setup, the config-download parameter of the reload-type command is enabled.
After the configuration file is successfully downloaded, the config-download parameter is
automatically disabled. You can enable it again using the reload-type command.
After you set the auto-configuration mode (Jumpstart or Normal reload) using the reload-type
command, you must enter the reload command to reload the switch in the configured mode.
When a switch reloads in Jumpstart mode, all ports, including the management port, are
automatically configured as Layer 3 physical ports. The switch acts as a DHCP client on the
ports for a user-configured time (dhcp-timeout option). You can reconfigure the default startup
configuration and DHCP timeout values.
If a switch enters a loop while reloading in Jumpstart mode because the switch continuously
tries to contact a DHCP server and a DHCP server is not found, enter the stop jump-start
command to interrupt the reload and boot up in normal mode. The startup configuration is
then loaded from the local flash on the switch.
Use the reload-type command in BMP 2.0 to toggle between Normal and Jumpstart
auto-configuration modes. The reload settings for the auto-configuration mode that you
configure are stored in memory and retained for future reboots and BMP software upgrades.
You can enter the reload command at any time to reload the switch in the last configured
mode: Normal reload or Jumpstart mode.

Related
Commands

414

|

show reload-type

Display the current reload mode (Normal or jump-start mode)

stop jump-start

Stops the Jumpstart process to prevent a loop if the DHCP server
is not found.

Bare Metal Provisioning

show reload-type
Display the currently configured reload mode.
Syntax
Defaults

show reload-type

None

Command Modes

EXEC Privilege

Command
History

Version 8.3.10.1

Usage
Information

Introduced on S4810.

Use the show reload-type command to check the currently configured auto-configuration
mode (Jumpstart or Normal reload) on a switch running BMP 2.0.
You can also use the show bootvar command to display the current reload mode for BMP 2.0
with the path of the FTOS image file retrieved from a DHCP server.

Example

FTOS#show reload-type
Reload-Type

Related
Commands

reload-type

:

normal-reload [Next boot : normal-reload]

Configure the reload mode as normal or Jumpstart.

stop jump-start
Stop the switch from reloading in Jumpstart mode to prevent an infinite loop.
Syntax
Defaults

stop jump-start

None

Command Modes

EXEC Privilege

Command
History

Version 8.3.10.1

Related
Commands
Usage
Information

reload-type

Introduced on S4810.
Configure the reload mode as normal or Jumpstart.

Use the stop jump-start command on a switch running BMP 2.0 if the switch enters a loop
while reloading in Jumpstart mode; loop occurs when the switch is continuously trying to
contact a DHCP server and a DHCP server is not found. The stop jump-start command stops
the switch from connecting to the DHCP server. After the stop jump-start command is used,
the next default reload type will be a normal reload. This will be indicated in the show
reload-type command.

Bare Metal Provisioning | 415

416

|

Bare Metal Provisioning

www.dell.com | support.dell.com

11
Content Addressable Memory (CAM)
Overview
Content Addressable Memory (CAM) commands are supported on the Dell Force10 E-Series
TeraScale e t, C-Series c, S-Series s, or
platforms as indicated by the
characters that appear under each of the command headings.
Note: Not all CAM commands are supported on all platforms. Be sure to note the
platform symbol when looking for a command.

Warning: If you are using these features for the first time, contact Dell Force10
Technical Assistance Center (TAC) for guidance. For information on contacting Dell
Force10 TAC, visit the Dell Force10 website at www.force10networks.com/support

This chapter includes the following sections:
•
•
•

CAM Profile Commands
CAM IPv4flow Commands
CAM Layer 2 ACL Commands

CAM Profile Commands
The CAM profiling feature enables you to partition the CAM to best suit your application.
For example:
•
•
•
•
•
•

Configure more Layer 2 FIB entries when the system is deployed as a switch.
Configure more Layer 3 FIB entries when the system is deployed as a router.
Configure more ACLs (when IPv6 is not employed).
Hash MPLS packets based on source and destination IP addresses for LAGs.
Hash based on bidirectional flow for LAGs.
Optimize the VLAN ACL Group feature, which permits group VLANs for IP
egress ACLs.

Content Addressable Memory (CAM) | 417

www.dell.com | support.dell.com

Important Points to Remember
•
•
•
•

•

•

•

•
•

CAM Profiles are available on FTOS versions 6.3.1.1 and later for the E-Series
TeraScale.
FTOS versions 7.8.1.0 and later support CAM allocations on the C-Series and
S-Series.
FTOS versions 8.3.12.0 and later support CAM allocations on the
.
All line cards within a single system must have the same CAM profile (including
CAM sub-region configurations); this profile must match the system CAM
profile (the profile on the primary RPM).
FTOS automatically reconfigures the CAM profile on line cards and the
secondary RPM to match the system CAM profile by saving the correct profile
on the card and then rebooting it.
The CAM configuration is applied to entire system when you use
CONFIGURATION mode commands. You must save the running-configuration
to affect the change.
When budgeting your CAM allocations for ACLs and QoS configurations,
remember that ACL and QoS rules might consume more than one CAM entry
depending on complexity. For example, TCP and UDP rules with port range
options might require more than one CAM entry.
After you install a secondary RPM, copy the running-configuration to the
startup-configuration so that the new RPM has the correct CAM profile.
You MUST save your changes and reboot the system for CAM profiling or
allocations to take effect.

The CAM Profiling commands are:
•
•
•
•
•
•
•
•
•

cam-acl (Configuration)
cam-acl (EXEC Privilege)
cam-optimization
cam-profile (Config)
show cam-acl
show cam-acl-egress
show cam-profile
show cam-usage
test cam-usage

cam-acl (Configuration)
cs

418

|

Select the default CAM allocation settings or reconfigure new CAM allocation for Layer 2,
IPv4 and IPv6 ACLs, Layer 2 and Layer 3 (IPv4) QoS, Layer 2 Protocol Tunneling (L2PT),
IP and MAC source address validation for DHCP, Ethernet Connectivity Fault Management
(CFM) ACLs, and Policy-based Routing (PBR).

Content Addressable Memory (CAM)

Syntax

Parameters

Command Modes
Command
History

Usage
Information

cam-acl {default | l2acl number ipv4acl number ipv6acl number ipv4qos number
l2qos number l2pt number ipmacacl number ecfmacl number [vman-qos | vman-dual-qos number]
ipv4pbr number [fcoeacl number iscsioptacl number]}

default

Use the default CAM profile settings, and set the CAM as
follows.
L3 ACL (ipv4acl): 4
L2 ACL(l2acl): 5
IPv6 L3 ACL (ipv6acl): 0
L3 QoS (ipv4qos): 1
L2 QoS (l2qos): 1

l2acl number ipv4acl number
ipv6acl number, ipv4qos number
l2qos number,
l2pt number ipmacacl number
ecfmacl number [vman-qos |
vman-dual-qos number] ipv4pbr
number [fcoeacl number
iscsioptacl number]

Allocate space to each CAM region.
Enter the CAM profile name followed by the amount of
CAM space to be allotted.
The total space allocated must equal 13 blocks.
The range for ipv4acl is 1 to 4.
The ipv6acl range must be a factor of 2.

CONFIGURATION
Version 8.3.12.0

Added fcoeacl and iscsioptacl keywords for S4810.

Version 8.3.10.2

Clarified block information for S4810.

Version 8.3.10.0

Introduced on S4810.

Version 8.3.1.0

Added ecfmacl, vman-qos, and vman-dual-qos keywords.

Version 8.2.1.0

Introduced on the S-Series.

Version 7.8.1.0

Introduced on the C-Series.

You must save the new CAM settings to the startup-config (write-mem or copy run start) then
reload the system for the new settings to take effect.
The total amount of space allowed is 16 FP Blocks. System flow requires 3 blocks that cannot
be reallocated. The ipv4acl profile range is 1 to 4.
When configuring space for IPv6 ACLs, the total number of Blocks must equal 13.
On the S4810, there can be only one odd number of Blocks in the CLI configuration; the other
Blocks must be in factors of 2. For example, a CLI configuration of 5+4+2+1+1 Blocks is not
supported; a configuration of 6+4+2+1 Blocks is supported.
Ranges for the CAM profiles are 1 to 10, except for the ipv6acl profile which is 0 to 10. The
ipv6acl allocation must be a factor of 2 (2, 4, 6, 8, 10).

If allocation values are not entered for the CAM regions, the value is 0.

Content Addressable Memory (CAM) | 419

www.dell.com | support.dell.com

cam-acl-egress (Configuration)
cs

Select the FP groups for CAM access control lists for Layer 2, IPv4 and IPv6 ACLs.

Syntax

cam-acl-egress {default | l2acl number ipv4acl number ipv6acl number}

Parameters

Command Modes
Command
History

Usage
Information

default

Reset the egress CAM ACL entries to the default settings.

l2acl number ipv4acl number
ipv6acl number

Allocate space to each CAM region.
Enter the CAM profile name followed by the amount of
CAM space to be allotted.
The total space allocated must equal 13.
l2acl range: 1 to 4
ipv4acl range: 1 to 4
ipv6acl range: 0 to 4

CONFIGURATION
Version 8.3.10.0

Introduced on the S4810

Version 8.3.1.0

Added ecfmacl, vman-qos, and vman-dual-qos keywords.

Version 8.2.1.0

Introduced on the S-Series

Version 7.8.1.0

Introduced on the C-Series

You must save the new CAM settings to the startup-config (write-mem or copy run start)
then reload the system for the new settings to take effect.
There are 4 groups total. You must allocate at least one group for L2ACL and IPv4 ACL.
Ranges for the CAM profiles are 1 to 4 for l2acl. The range for the ipv6acl profile is 0 to 10.
The ipv6acl allocation must be a factor of 2 (2, 4, 6, 8, 10).

cam-acl (EXEC Privilege)
cs

Adjust linecard CAM setting to match chassis settings.
This command is deprecated as of FTOS 8.3.1.0

Syntax
Command Modes
Command
History

cam-acl {chassis |linecard}

EXEC Privilege
Version 8.3.1.0

COMMAND DEPRECATED

Version 7.8.1.0

Introduced on the C-Series

cam-optimization
cs

420

|

Optimize CAM utilization for QoS Entries by minimizing require policy-map CAM space.

Content Addressable Memory (CAM)

Syntax
Parameters

Command Modes
Defaults
Command
History

Usage
Information

cam-optimization [qos]
qos

Optimize CAM usage for Quality of Service (QoS)

CONFIGURATION
Disabled
Version 8.2.1.0

Introduced on the S-Series

Version 7.8.1.0

Introduced on the C-Series and S-Series

When this command is enabled, if a Policy Map containing classification rules (ACL and/or
dscp/ip-precedence rules) is applied to more than one physical interface on the same port
pipe, only a single copy of the policy will be written (only 1 FP entry will be used).
Note that an ACL itself may still require more that a single FP entry, regardless of the number
of interfaces. Refer to IP Access Control Lists, Prefix Lists, and Route-map in the FTOS
Configuration Guide for complete discussion.

cam-profile (Config)
e
Syntax
Parameters

Set the default CAM profile and the required microcode.
cam-profile profile microcode microcode
profile

Choose one of the following CAM profiles:
• Enter the keyword default to specify the default CAM profile.
• Enter the keyword eg-default to specify the default CAM profile for
EG (dual-CAM) line cards.
• Enter the keyword ipv4-320k to specify the CAM profile that provides
320K entries for the IPv4 Forwarding Information Base (FIB).
• Enter the keyword ipv4-egacl-16k to specify the CAM profile that
provides 16K entries for egress ACLs.

•
•
•

•
•
•

Enter the keyword ipv6-extacl to specify the CAM
profile that provides IPv6 functionality.
Enter the keyword l2-ipv4-inacl to specify the CAM
profile that provides 32K entries for ingress ACLs.

Enter the keyword unified-default to specify the CAM profile that
maintains the CAM allocations for the IPv6 and IPv4 FIB while
allocating more CAM space for the Ingress and Egress Layer 2 ACL,
and IPv4 ACL regions.
Enter the keyword ipv4-vrf to specify the CAM profile that maintains
the CAM allocations for the IPv4 FIB while allocating CAM space
for VRF.
Enter the keyword ipv4-v6-vrf to specify the CAM profile that
maintains the CAM allocations for the IPv4 and IPv6FIB while
allocating CAM space for VRF.
Enter the keyword ipv4-64k-ipv6 to specify the CAM profile that
provides an alternate to ipv6-extacl that redistributes CAM space
from the IPv4FIB to IPv4Flow and IPv6FIB.

Content Addressable Memory (CAM) | 421

www.dell.com | support.dell.com

microcode microcode

Defaults
Command Modes
Command
History

Usage
Information

Choose a microcode based on the CAM profile you chose. Not all
microcodes are available to be paired with a CAM profile.
• Enter the keyword default to select the microcode that distributes
CAM space for a typical deployment.
• Enter the keyword lag-hash-align to select the microcode for
applications that require the same hashing for bi-directional traffic.
• Enter the keyword lag-hash-mpls to select the microcode for hashing
based on MPLS labels (up to five labels deep).
• Enter the keyword ipv6-extacl to select the microcode for IPv6.
• Enter the keyword acl-group to select the microcode for applications
that need 16k egress IPv4 ACLs.
• Enter the keyword ipv4-vrf to select the microcode for IPv4 VRF
applications.
• Enter the keyword ipv4-v6-vrf to select the microcode for IPv4 and
IPv6 VRF applications.
• E-Series TeraScale only: Select l2-switched-pbr microcode if you
apply a PBR redirect list to a VLAN interface and want to prevent
Layer 2 traffic from being redirected and dropped. l2-switched-pbr
(IPv4-LDA) microcode allows only Layer 3 traffic to be redirected
while Layer 2 traffic is switched within the VLAN.

cam-profile default microcode default

CONFIGURATION
Version 8.4.1.0

Added support for l2-switched-pbr microcode.

Version 8.2.1.0

Added support for the ipv4-64k-ipv6 profile.

Version 7.9.1.0

Added support for VRF protocols.

Version 7.5.1.0

Added the l2-ipv4-inacl CAM profile

Version 7.4.2.0

Added the unified-default CAM profile and lag-hash-align microcode

Version 7.4.1.0

Added the lag-hash-mpls microcode

Version 6.5.1.0

Added the eg-default and ipv4-320k CAM profiles

Version 6.3.1.0

Introduced on E-Series

You must save the running configuration using the command copy running-config startup-config
after changing the CAM profile from CONFIGURATION mode. CAM profile changes take
effect after the next chassis reboot.
Note: Do not use the ipv4-egacl-16 CAM profile for Layer 2 egress ACLs.
Note: Do not make any changes to the CAM profile after you change the profile to
ipv4-320K and save the configuration until after you reload the chassis; any changes
lead to unexpected behavior. After you reload the chassis, you may make changes to
the IPv4 Flow partition.

show cam-acl
cs

422

|

Display the details of the CAM profiles on the chassis and all line cards.

Content Addressable Memory (CAM)

Syntax
Defaults

show cam-acl

None

Command Modes

EXEC Privilege

Command
History

Version 8.3.12.0

Introduced on S4810.

Version 7.8.1.0

Introduced on C-Series

Usage
Information
Example
(default for
C-Series /
S-Series)

The display reflects the settings implemented with the cam-acl command.
FTOS#show cam-acl
-- Chassis Cam ACL -Current Settings(in block sizes)
L2Acl
:
6
Ipv4Acl
:
5
Ipv6Acl
:
0
Ipv4Qos
:
1
L2Qos
:
1
L2PT
:
0
IpMacAcl
:
0
VmanQos
:
0
VmanDualQos:
0
Ipv4pbr
:
0
-- Line card 4 -Current Settings(in block sizes)
L2Acl
:
6
Ipv4Acl
:
5
Ipv6Acl
:
0
Ipv4Qos
:
1
L2Qos
:
1
L2PT
:
0
IpMacAcl
:
0
VmanQos
:
0
VmanDualQos:
0
Ipv4pbr
:
0

FTOS#

Example
(default for
S4810)

FTOS#show cam-acl
-- Chassis Cam ACL -Current Settings(in block sizes)
L2Acl
:
4
Ipv4Acl
:
4
Ipv6Acl
:
0
Ipv4Qos
:
2
L2Qos
:
1
L2PT
:
0
IpMacAcl
:
0
VmanQos
:
0
VmanDualQos :
0
EcfmAcl
:
0
FcoeAcl
:
0
iscsiOptAcl :
2
-- Stack unit 0 --

Content Addressable Memory (CAM) | 423

www.dell.com | support.dell.com

Current Settings(in block sizes)
:
4
:
4
:
0
:
2
:
1
:
0
:
0
:
0
:
0
:
0
:
0
:
2

L2Acl
Ipv4Acl
Ipv6Acl
Ipv4Qos
L2Qos
L2PT
IpMacAcl
VmanQos
VmanDualQos
EcfmAcl
FcoeAcl
iscsiOptAcl
FTOS#

Example
(non-default for
C-Series /
S-Series)

FTOS#show cam-acl
-- Chassis Cam ACL -Current Settings(in block sizes)
L2Acl
:
2
Ipv4Acl
:
2
Ipv6Acl
:
2
Ipv4Qos
:
2
L2Qos
:
2
L2PT
:
1
IpMacAcl
:
2
VmanQos
:
0
VmanDualQos:
0
Ipv4pbr
:
0
-- Line card 4 -Current Settings(in block sizes)
L2Acl
:
5
Ipv4Acl
:
5
Ipv6Acl
:
1
Ipv4Qos
:
1
L2Qos
:
1
L2PT
:
0
IpMacAcl
:
0
VmanQos
:
0
VmanDualQos:
0
Ipv4pbr
:
0
FTOS#

show cam-acl-egress
cs

Display the details of the FP groups allocated for the egress ACL.

Syntax

show cam-acl-egress

Defaults
Command Modes
Usage
Information

424

|

None
Configuration
The display reflects the settings implemented with the cam-acl-egress command.

Content Addressable Memory (CAM)

Example
(default)

FTOS#show cam-acl-egress
-- Chassis Egress Cam ACL -Current Settings(in block sizes)
L2Acl
:
1
Ipv4Acl
:
1
Ipv6Acl
:
2
-- Stack unit 0 -Current Settings(in block sizes)
L2Acl
:
1
Ipv4Acl
:
1
Ipv6Acl
:
2
FTOS#

show cam-profile
e
Syntax

Display the details of the CAM profiles on the chassis and all line cards.
show cam-profile [profile microcode microcode | summary]

Content Addressable Memory (CAM) | 425

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes
Command
History

Usage
Information

426

|

profile

(OPTIONAL) Choose a single CAM profile to display:
• Enter the keyword default to specify the default CAM profile.
• Enter the keyword eg-default to specify the default CAM profile for EG
(dual-CAM) line cards.
• Enter the keyword ipv4-320k to specify the CAM profile that provides 320K
entries for the IPv4 Forwarding Information Base (FIB).
• Enter the keyword ipv4-egacl-16k to specify the CAM profile that provides
16K entries for egress ACLs.
• Enter the keyword ipv6-extacl to specify the CAM profile that provides IPv6
functionality.
• Enter the keyword l2-ipv4-inacl to specify the CAM profile that provides 32K
entries for ingress ACLs.
• Enter the keyword unified-default to specify the CAM profile that maintains
the CAM allocations for the IPv6 and IPv4 FIB while allocating more CAM
space for the Ingress and Egress Layer 2 ACL, and IPv4 ACL regions.
• Enter the keyword ipv4-vrf to specify the CAM profile that maintains the
CAM allocations for the IPv4 FIB while allocating CAM space for VRF.
• Enter the keyword ipv4-v6-vrf to specify the CAM profile that maintains the
CAM allocations for the IPv4 and IPv6FIB while allocating CAM space for
VRF.

microcode
microcode

Choose the microcode to display. Not all microcodes are available to be paired
with a CAM profile.
• Enter the keyword default to select the microcode that distributes CAM space
for a typical deployment.
• Enter the keyword lag-hash-align to select the microcode for applications that
require the same hashing for bi-directional traffic.
• Enter the keyword lag-hash-mpls to select the microcode for hashing based
on MPLS labels (up to five labels deep).
• Enter the keyword ipv6-extacl to select the microcode for IPv6.
• Enter the keyword acl-group to select the microcode for applications that
need 16k egress IPv4 ACLs.
• Enter the keyword ipv4-vrf to select the microcode for IPv4 VRF applications.
• Enter the keyword ipv4-v6-vrf to select the microcode forIPv4 and IPv6 VRF
applications.
• Enter the keyword ipv4-64k-ipv6 to specify the CAM profile that provides an
alternate to ipv6-extacl that redistributes CAM space from the IPv4FIB to
IPv4Flow and IPv6FIB.

summary

(OPTIONAL) Enter this keyword to view a summary listing of the CAM profile
and microcode on the chassis and all line cards.

None
EXEC Privilege
Version 8.2.1.0

Added support for ipv4-64k-ipv6 profile

Version 7.9.1.0

Added support for VRF protocols.

Version 6.3.1.0

Introduced on E-Series

If the CAM profile has been changed, this command displays the current CAM profile setting
in one column and in the other column displays the CAM profile and the microcode that will
be configured for the chassis and all online line cards after the next reboot.

Content Addressable Memory (CAM)

Example
(show
cam-profile
summary)

FTOS#show cam-profile summary
-- Chassis CAM Profile -: Current Settings : Next Boot
Profile Name
: Default
: Default
MicroCode Name
: Default
: Default
: Current Settings : Next Boot
-- Line card 1 -Profile Name
: Default
: Default
MicroCode Name
: Default
: Default
: Current Settings : Next Boot
-- Line card 6 -Profile Name
: Default
: Default
MicroCode Name
: Default
: Default
FTOS#

Example
(show
cam-profile)

FTOS#show cam-profile
-- Chassis Cam Profile -CamSize

:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:

18-Meg
Current Settings
DEFAULT
32K entries
1K entries
256K entries
12K entries
24K entries
1K entries
1K entries
8K entries
0 entries
0 entries
0 entries
0 entries
Default

:
:
:
:
:
:
:
:
:
:
:
:
:
:
:

Next Boot
DEFAULT
32K entries
1K entries
256K entries
12K entries
24K entries
1K entries
1K entries
8K entries
0 entries
0 entries
0 entries
0 entries
Default

-- Line card 0 -CamSize
:
:
Profile Name
:
L2FIB
:
L2ACL
:
IPv4FIB
:
IPv4ACL
:
IPv4Flow
:
EgL2ACL
:
EgIPv4ACL
:
Reserved
:
IPv6FIB
:
IPv6ACL
:
IPv6Flow
:
EgIPv6ACL
:
MicroCode Name
:
FTOS#

18-Meg
Current Settings
DEFAULT
32K entries
1K entries
256K entries
12K entries
24K entries
1K entries
1K entries
8K entries
0 entries
0 entries
0 entries
0 entries
Default

:
:
:
:
:
:
:
:
:
:
:
:
:
:
:

Next Boot
DEFAULT
32K entries
1K entries
256K entries
12K entries
24K entries
1K entries
1K entries
8K entries
0 entries
0 entries
0 entries
0 entries
Default

Profile Name
L2FIB
L2ACL
IPv4FIB
IPv4ACL
IPv4Flow
EgL2ACL
EgIPv4ACL
Reserved
IPv6FIB
IPv6ACL
IPv6Flow
EgIPv6ACL
MicroCode Name

Content Addressable Memory (CAM) | 427

www.dell.com | support.dell.com

show cam-usage
e
Syntax
Parameters

Defaults
Command Modes
Command
History
Example

Example
(show cam-usage
acl)

Display Layer 2, Layer 3, ACL, or all CAM usage statistics.
show cam-usage [acl | router | switch]
acl

(OPTIONAL) Enter this keyword to display Layer 2 and Layer 3 ACL CAM usage.

router

(OPTIONAL) Enter this keyword to display Layer 3 CAM usage.

switch

(OPTIONAL) Enter this keyword to display Layer 2 CAM usage.

None
EXEC Privilege
Version 6.5.1.0

Introduced on E-Series

FTOS#show cam-usage
Linecard|Portpipe| CAM Partition
| Total CAM
| Used CAM
|Available CAM
========|========|=================|=============|=============|==============
1
|
0
| IN-L2 ACL
|
1008
|
320
|
688
|
| IN-L2 FIB
|
32768
|
1132
|
31636
|
| IN-L3 ACL
|
12288
|
2
|
12286
|
| IN-L3 FIB
|
262141
|
14
|
262127
|
| IN-L3-SysFlow
|
2878
|
45
|
2833
|
| IN-L3-TrcList
|
1024
|
0
|
1024
|
| IN-L3-McastFib |
9215
|
0
|
9215
|
| IN-L3-Qos
|
8192
|
0
|
8192
|
| IN-L3-PBR
|
1024
|
0
|
1024
|
| IN-V6 ACL
|
0
|
0
|
0
|
| IN-V6 FIB
|
0
|
0
|
0
|
| IN-V6-SysFlow
|
0
|
0
|
0
|
| IN-V6-McastFib |
0
|
0
|
0
|
| OUT-L2 ACL
|
1024
|
0
|
1024
|
| OUT-L3 ACL
|
1024
|
0
|
1024
|
| OUT-V6 ACL
|
0
|
0
|
0
1
|
1
| IN-L2 ACL
|
320
|
0
|
320
|
| IN-L2 FIB
|
32768
|
1136
|
31632
|
| IN-L3 ACL
|
12288
|
2
|
12286
|
| IN-L3 FIB
|
262141
|
14
|
262127
|
| IN-L3-SysFlow
|
2878
|
44
|
2834
--More-FTOS#show cam-usage acl
Linecard|Portpipe| CAM Partition
| Total CAM
| Used CAM
|Available CAM
========|========|=================|=============|=============|==============
11
|
0
| IN-L2 ACL
|
1008
|
0
|
1008
|
| IN-L3 ACL
|
12288
|
2
|
12286
|
| OUT-L2 ACL
|
1024
|
2
|
1022
|
| OUT-L3 ACL
|
1024
|
0
|
1024
FTOS#

Example
(show cam-usage
router)

428

|

FTOS#show cam-usage router
Linecard|Portpipe| CAM Partition
| Total CAM
| Used CAM
|Available CAM
========|========|=================|=============|=============|==============
11
|
0
| IN-L3 ACL
|
8192
|
3
|
8189

Content Addressable Memory (CAM)

11

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

1

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

IN-L3 FIB
IN-L3-SysFlow
IN-L3-TrcList
IN-L3-McastFib
IN-L3-Qos
IN-L3-PBR
OUT-L3 ACL
IN-L3 ACL
IN-L3 FIB
IN-L3-SysFlow
IN-L3-TrcList
IN-L3-McastFib
IN-L3-Qos
IN-L3-PBR
OUT-L3 ACL

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

196607
2878
1024
9215
8192
1024
16384
8192
196607
2878
1024
9215
8192
1024
16384

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

1
0
0
0
0
0
0
3
1
0
0
0
0
0
0

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

196606
2878
1024
9215
8192
1024
16384
8189
196606
2878
1024
9215
8192
1024
16384

FTOS#

Example
(show cam-usage
switch)

FTOS#show cam-usage switch
Linecard|Portpipe| CAM Partition
| Total CAM
| Used CAM
|Available CAM
========|========|=================|=============|=============|==============
11
|
0
| IN-L2 ACL
|
7152
|
0
|
7152
|
| IN-L2 FIB
|
32768
|
1081
|
31687
|
| OUT-L2 ACL
|
0
|
0
|
0
11
|
1
| IN-L2 ACL
|
7152
|
0
|
7152
|
| IN-L2 FIB
|
32768
|
1081
|
31687
|
| OUT-L2 ACL
|
0
|
0
|
0
FTOS#

test cam-usage
ces
Syntax
Parameters

Defaults
Command Modes
Command
History
Usage
Information

Verify that enough CAM space is available for the IPv6 ACLs you have created.
test cam-usage service-policy input

input policy name linecard {number | all}

policy-map name

Enter the name of the policy-map to verify.

number

Enter all to get information for all the linecards/stack-units, or enter the
linecard/stack-unit number to get information for a specific card.
Range: 0-6 for E-Series, 0-7 for C-Series, 0-7 for S-Series.

None
EXEC Privilege
Version 7.8.1.0

Introduced

This command applies to both IPv4 and IPv6 CAM Profiles, but is best used when verifying
QoS optimization for IPv6 ACLs.
QoS Optimization for IPv6 ACLs does not impact the CAM usage for applying a policy on a
single (or the first of several) interfaces. It is most useful when a policy is applied across
multiple interfaces; it can reduce the impact to CAM usage across subsequent interfaces.

Content Addressable Memory (CAM) | 429

www.dell.com | support.dell.com

Example
(C-Series)

The following examples show some sample output when using the test cam-usage command.
FTOS#test cam-usage service-policy input LauraMapTest linecard all
Linecard | Portpipe | CAM Partition | Available CAM | Estimated CAM per Port | Status
-----------------------------------------------------------------------------------------2|
1 | IPv4Flow
|
232 |
0 | Allowed
2|
1 | IPv6Flow
|
0|
0 | Allowed
4|
0 | IPv4Flow
|
232 |
0 | Allowed
4|
0 | IPv6Flow
|
0|
0 | Allowed
FTOS#

FTOS#test cam-usage service-policy input LauraMapTest linecard 4 port-set 0
Linecard | Portpipe | CAM Partition | Available CAM | Estimated CAM per Port | Status
-----------------------------------------------------------------------------------------4|
0 | IPv4Flow
|
232 |
0 | Allowed
4|
0 | IPv6Flow
|
0|
0 | Allowed
FTOS#

FTOS#test cam-usage service-policy input LauraMapTest linecard 2 port-set 1
Linecard | Portpipe | CAM Partition | Available CAM | Estimated CAM per Port | Status
-----------------------------------------------------------------------------------------2|
1 | IPv4Flow
|
232 |
0 | Allowed
2|
1 | IPv6Flow
|
0|
0 | Allowed
FTOS#

Table 11-1.

Example
(S-Series)

Output Explanations: test cam-usage (C-Series)

Term

Explanation

Linecard

Lists the line card or linecards that are checked. Entering all
shows the status for linecards in the chassis

Portpipe

Lists the portpipe (port-set) or port pipes (port-sets) that are
checked. Entering all shows the status for linecards and
port-pipes in the chassis.

CAM Partition

Shows the CAM profile of the CAM

Available CAM

Identifies the amount of CAM space remaining for that profile

Estimated CAM per Port

Estimates the amount of CAM space the listed policy will
require.

Status

Indicates whether or not the policy will be allowed in the
CAM
FTOS#test cam-usage service-policy input LauraIn stack-unit all

Stack-Unit | Portpipe | CAM Partition | Available CAM | Estimated CAM per Port
| Status
----------------------------------------------------------------------------------------0 |
0 | IPv4Flow
|
102 |
0
| Allowed
0 |
1 | IPv4Flow
|
102 |
0
| Allowed
FTOS#
!
FTOS#test cam-usage service-policy input LauraIn stack-unit 0 port-set 1
Stack-Unit | Portpipe | CAM Partition | Available CAM | Estimated CAM per Port | Status

430

|

Content Addressable Memory (CAM)

-----------------------------------------------------------------------------------------0|
1 | IPv4Flow
|
102 |
0 | Allowed
FTOS#

Table 11-2.

Output Explanations: test cam-usage (S-Series)

Term

Explanation

Stack-Unit

Lists the stack unit or units that are checked. Entering all
shows the status for all stacks.

Portpipe

Lists the portpipe (port-set) or port pipes (port-sets) that are
checked. Entering all shows the status for linecards and
port-pipes in the chassis.

CAM Partition

Shows the CAM profile of the CAM

Available CAM

Identifies the amount of CAM space remaining for that profile

Estimated CAM per Port

Estimates the amount of CAM space the listed policy will
require.

Status

Indicates whether or not the policy will be allowed in the
CAM

CAM IPv4flow Commands
IPv4Flow sub-partitions are supported on the E-Series TeraScale platform et
The 18-megabit user configurable CAM is divided into multiple regions such as Layer 2 FIB,
Layer 3 FIB, IPv4Flow, IPv4 Ingress ACL, etc. The IPv4Flow region is further sub-divided
into 5 regions: System Flow, QoS, PBR, Trace-lists, Multicast FIB & ACL.
You can change the amount of CAM space allocated to each sub-region. You can configure
the IPv4Flow region in TeraScale.
Like CAM profiles, you can configure the IPv4Flow region from EXEC Privilege and
CONFIGURATION mode.
The CAM IPv4flow commands are:
•
•
•

cam ipv4flow (EXEC Privilege)
cam-ipv4flow (CONFIGURATION)
show cam-ipv4flow

cam ipv4flow (EXEC Privilege)
et

Configure the amount of CAM space in IPv4flow sub-regions.
This command is deprecated as of FTOS 8.3.1.0.

Content Addressable Memory (CAM) | 431

www.dell.com | support.dell.com

Syntax

Command Modes
Command
History

EXEC Privilege
Version 8.3.1.0

COMMAND DEPRECATED

Version 6.3.1.0

Introduced on E-Series

cam-ipv4flow (CONFIGURATION)
et
Syntax
Parameters

Defaults
Command Modes
Command
History
Usage
Information

432

cam ipv4flow {chassis all | linecard number} {default | acl value multicast-fib value pbr value qos value
system-flow value trace-list value}

|

Configure the amount of CAM space in IPv4flow sub-regions.
cam-ipv4flow {default | multicast-fib value pbr value qos value system-flow value trace-list value}
default

Enter the keyword default to reset the IPV4Flow CAM region to its
default setting.

multicast-fib value

Enter the keyword multicast-fib followed by the number of entries for the
multicast FIB sub-region in 1K increments.
Range: 1 to 32 KB
Default: 9 KB

pbr value

Enter the keyword pbr followed by the number of entries for the PBR
sub-region in 1K increments.
Range: 1 to 32 KB
Default: 1 KB

qos value

Enter the keyword qos followed by the number of entries for the QoS
sub-region in 1K increments.
Range: 1 to 32 KB
Default: 8 KB

system-flow value

Enter the keyword system-flow followed by the number of entries for the
system-flow sub-region in 1K increments.
Range: 4 to 32 KB
Default: 5 KB

trace-list value

Enter the keyword trace-list followed by the number of entries for the
trace-list sub-region in 1K increments.
Range: 1 to 32 KB
Default: 1 KB

Parameters
CONFIGURATION
Version 6.3.1.0

Introduced on E-Series

CAM profile changes take effect after the next chassis reboot.

Content Addressable Memory (CAM)

Related
Commands

copy

Save the running configuration.

show cam-ipv4flow

Display the CAM IPv4flow entries.

show cam-ipv4flow
et
Syntax
Command Modes
Command
History
Example

Display details about the IPv4Flow sub-regions.
show cam-ipv4flow

EXEC Privilege
Version 6.3.1.0

Introduced on E-Series

FTOS#show cam-ipv4flow
-- Chassis Cam Ipv4Flow -Current Settings
Acl
:
8K
Multicast Fib/Acl :
9K
Pbr
:
1K
Qos
:
8K
System Flow
:
5K
Trace Lists
:
1K

Next Boot
5K
12K
1K
8K
5K
1K

-- Line card 2 -:
:
:
:
:
:

Current Settings
5K
9K
1K
8K
5K
1K

Next Boot
0K
12K
1K
8K
5K
1K

:
:
:
:
:
:

Current Settings
5K
9K
1K
8K
5K
1K

Next Boot
0K
12K
1K
8K
5K
1K

Current Settings
Acl
:
5K
Multicast Fib/Acl :
9K
Pbr
:
1K
Qos
:
8K
System Flow
:
5K
Trace Lists
:
1K
FTOS#
FTOS#show cam-ipv4flow

Next Boot
0K
12K
1K
8K
5K
1K

Acl
Multicast Fib/Acl
Pbr
Qos
System Flow
Trace Lists
-- Line card 8 -Acl
Multicast Fib/Acl
Pbr
Qos
System Flow
Trace Lists
-- Line card 13 --

-- Chassis Cam Ipv4Flow -Current Settings
Acl
:
8K
Multicast Fib/Acl :
9K
Pbr
:
1K

Next Boot
5K
12K
1K

Content Addressable Memory (CAM) | 433

www.dell.com | support.dell.com

Qos
System Flow
Trace Lists

:
:
:

8K
5K
1K

8K
5K
1K

-- Line card 2 -:
:
:
:
:
:

Current Settings
5K
9K
1K
8K
5K
1K

Next Boot
0K
12K
1K
8K
5K
1K

:
:
:
:
:
:

Current Settings
5K
9K
1K
8K
5K
1K

Next Boot
0K
12K
1K
8K
5K
1K

Current Settings
5K
9K
1K
8K
5K
1K

Next Boot
0K
12K
1K
8K
5K
1K

Acl
Multicast Fib/Acl
Pbr
Qos
System Flow
Trace Lists
-- Line card 8 -Acl
Multicast Fib/Acl
Pbr
Qos
System Flow
Trace Lists
-- Line card 13 -Acl
Multicast Fib/Acl
Pbr
Qos
System Flow
Trace Lists
FTOS#

Usage
Information

Related
Commands

:
:
:
:
:
:

If the IPv4Flow sub-region has been changed, this command displays the current IPv4Flow
configuration in one column and in the other column displays the IPv4Flow configuration
that will be loaded after the next reboot.
cam-ipv4flow
(CONFIGURATION)

Configure the amount of CAM space in IPv4flow sub-regions.

CAM Layer 2 ACL Commands
IPv4Flow sub-partitions are supported on the E-Series TeraScale platform et
The CAM Layer 2 ACL commands are:
•
•
•

cam l2acl (EXEC Privilege)
cam-l2acl (CONFIGURATION)
show cam-l2acl

The 18-megabit user configurable CAM is divided into multiple regions such as Layer 2 FIB,
Layer 3 FIB, IPv4Flow, IPv4 Ingress ACL, etc. The Layer 2 ACL region is further
sub-divided into 6 regions: Sysflow, L2ACL, PVST, QoS, L2PT, FRRP.

434

|

Content Addressable Memory (CAM)

You can change the amount of CAM space, in percentage, allocated to each sub-region. The
amount of space that you can distribute to the sub-partitions is equal to the amount of CAM
space that the selected CAM profile allocates to the Layer 2 ACL partition. FTOS requires
that you specify the amount of CAM space for all sub-partitions and that the sum of all
sub-partitions is 100%.
Like CAM profiles, you can configure the Layer 2 ACL partition from EXEC Privilege mode
or CONFIGURATION mode.

cam l2acl (EXEC Privilege)
et

Re-allocate the amount of space, in percentage, for each Layer 2 ACL CAM sub-partition.
This command is deprecated as of FTOS 8.3.1.0

Syntax

Command Modes
Command
History

cam l2acl {chassis all | linecard number} {default | system-flow percentage l2acl percentage pvst
percentage qos percentage l2pt percentage frrp percentage}

EXEC Privilege
Version 8.3.1.0

COMMAND DEPRECATED

Version 7.7.1.0

Introduced on E-Series

cam-l2acl (CONFIGURATION)
et

Re-allocate the amount of space, in percentage, for each Layer 2 ACL CAM sub-partition.

Syntax

cam-l2acl {default | system-flow percentage l2acl percentage pvst percentage qos percentage l2pt
percentage frrp percentage}

Parameters

default

Enter this keyword to reset the Layer 2 ACL CAM sub-partition space
allocations to the default values (Sysflow: 6, L2ACL: 14, PVST: 50,
QoS: 12, L2PT: 13, FRRP: 5).

system-flow percentage

Allocate a percentage of the Layer 2 ACL CAM space for system
flow entries. Enter the keyword system-flow and specify the
percentage.
Range: 5 to 100

l2acl percentage

Allocate a percentage of the Layer 2 ACL CAM space for Layer 2
ACL entries. Enter the keyword l2acl and specify the percentage.
Range: 5 to 95

pvst percentage

Allocate a percentage of the Layer 2 ACL CAM space for PVST+
entries. Enter the keyword pvst and specify the percentage.
Range: 5 to 95

qos percentage

Allocate a percentage of the Layer 2 ACL CAM space for QoS
entries. Enter the keyword qos and specify the percentage.
Range: 5 to 95

Content Addressable Memory (CAM) | 435

www.dell.com | support.dell.com

Command Modes
Command
History
Usage
Information
Related
Commands

l2pt percentage

Allocate a percentage of the Layer 2 ACL CAM space for L2PT
entries. Enter the keyword l2pt and specify the percentage.
Range: 5 to 95

frrp percentage

Allocate a percentage of the Layer 2 ACL CAM space for FRRP
entries. Enter the keyword frrp and specify a percentage.
Range: 5 to 95

CONFIGURATION
Version 7.7.1.0

Introduced on E-Series

The PVST sub-partition requires a minimum number of entries when employing PVST+. the
CAM chapter of the FTOS Configuration Guide for the E-Series.

show cam-l2acl

Display the percentage of the Layer 2 ACL CAM partition that is allocated to
each Layer 2 ACL CAM sub-partition.

show cam-l2acl
et

Syntax
Command Modes
Command
History
Example

Display the percentage of the Layer 2 ACL CAM partition that is allocated to each Layer 2
ACL CAM sub-partition. If configuration has changed, the command displays the current
configuration and the configuration that FTOS will write to the CAM after the next chassis
reboot.
show cam-l2acl

EXEC Privilege
Version 7.7.1.0

Introduced on E-Series

FTOS#show cam-l2acl
-- Chassis Cam L2-ACL -Current Settings(in percent)
Sysflow :
6
L2Acl
:
14
Pvst
:
50
Qos
:
12
L2pt
:
13
Frrp
:
5
-- Line card 1 -Current Settings(in percent)
Sysflow :
6
L2Acl
:
14
Pvst
:
50
Qos
:
12
L2pt
:
13
Frrp
:
5
-- Line card 5 -Current Settings(in percent)

436

|

Content Addressable Memory (CAM)

Sysflow :
L2Acl
:
--More--

Related
Commands

cam-l2acl
(CONFIGURATION)

6
14

Re-allocate the amount of space, in percentage, for each Layer 2 ACL
CAM sub-partition.

Content Addressable Memory (CAM) | 437

www.dell.com | support.dell.com
438

|

Content Addressable Memory (CAM)

12
Control Plane Policing (CoPP)
Overview
The CoPP commands are supported on the Dell Force10
and Z Z-Series platforms
as indicated by the characters that appear under each of the command headings.

Commands
•
•
•
•
•
•
•

control-plane-cpuqos
service-policy rate-limit-cpu-queues
service-policy rate-limit-protocols
show cpu-queue rate cp
show ip protocol-queue-mapping
show ipv6 protocol-queue-mapping
show mac protocol-queue-mapping

control-plane-cpuqos
Enter control-plane mode and configure the switch to manage control-plane traffic.
Syntax
Defaults
Command Modes
Command
History

control-plane-cpuqos

Not configured.
CONFIGURATION
Version 8.3.8.0

Introduced on S4810

service-policy rate-limit-cpu-queues
Apply a policy map for the system to rate limit control traffic on a per-queue basis.
Syntax

service-policy rate-limit-cpu-queues policy-name

Control Plane Policing (CoPP) | 439

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes
Command
History
Usage
Information

policy-name

Enter the service-policy name, in a string up to 140 characters.

Not configured.
CONTROL-PLANE-CPUQOS
Version 8.3.8.0

Introduced on S4810

A policy-map must be created by associating a queue number with the qos-policy.
The QoS policies must be created prior to enabling this command.

Related
Commands

qos-policy-input

Create a QoS input policy map.

class-map

Create a QoS class map.

policy-map-input

Create an input policy map.

service-policy rate-limit-protocols
Apply a policy for the system to rate limit control protocols on a per-protocol basis.
Syntax
Parameters

Defaults
Command Modes
Command
History
Usage
Information

service-policy rate-limit-protocols policy-name

policy-name

Enter the service-policy name, in a string up to 140 characters.

Not configured.
CONTROL-PLANE-CPUQOS
Version 8.3.8.0

Introduced on S4810

This command applies the service-policy based on the type of protocol defined in the ACL
rules.
The ACL and QoS policies must be created prior to enabling this command.

Related
Commands

440

|

ip access-list extended

Create an extended IP ACL

ipv6 access-list

Create an IPv6 ACL

mac access-list extended

Create an extended MAC ACL.

qos-policy-input

Create a QoS input policy map.

class-map

Create a QoS class map.

policy-map-input

Create an input policy map.

Control Plane Policing (CoPP)

show cpu-queue rate cp
Display the rates for each queue.
Syntax

show cpu-queue rate cp

Defaults

Not configured.

Command Modes

EXEC Privilege

Command
History
Example

Version 8.3.8.0

Introduced on S4810

FTOS#show cpu-queue rate cp
Service-Queue
Rate (PPS)
-----------------------Q0
1300
Q1
300
Q2
300
Q3
300
Q4
2000
Q5
400
Q6
400
Q7
1100
FTOS#

show ip protocol-queue-mapping
Display the queue mapping for each configured protocol.
Syntax

show ip protocol-queue-mapping

Defaults

Not configured.

Command Modes

EXEC Privilege

Command
History

Version 8.3.8.0

Introduced on S4810

Control Plane Policing (CoPP) | 441

www.dell.com | support.dell.com

Example

FTOS#show ip protocol-queue-mapping
Protocol
Src-Port
Dst-Port
TcpFlag
---------------------------TCP (BGP)
any/179
179/any
_
UDP (DHCP)
67/68
68/67
_
UDP (DHCP-R) 67
67
_
TCP (FTP)
any
21
_
ICMP
any
any
_
IGMP
any
any
_
TCP (MSDP)
any/639
639/any
_
UDP (NTP)
any
123
_
OSPF
any
any
_
PIM
any
any
_
UDP (RIP)
any
520
_
TCP (SSH)
any
22
_
TCP (TELNET) any
23
_
VRRP
any
any
_
FTOS#

Queue
EgPort
---------Q6
CP
Q6/Q5
CP
Q6
CP
Q6
CP
Q6
CP
Q7
CP
Q6
CP
Q6
CP
Q7
CP
Q7
CP
Q7
CP
Q6
CP
Q6
CP
Q7
CP

Rate (kbps)
----------100
_
_
_
_
_
_
_
_
_
_
_
_
_

show ipv6 protocol-queue-mapping
Display the queue mapping for each configured IPv6 protocol.
Syntax

show ipv6 protocol-queue-mapping

Defaults

Not configured.

Command Modes

EXEC Privilege

Command
History
Example

Version 8.3.8.0

Introduced on S4810

FTOS#show ipv6 protocol-queue-mapping
Protocol
Src-Port
Dst-Port
TcpFlag
---------------------------TCP (BGP)
any/179
179/any
_
ICMP
any
any
_
VRRP
any
any
_
FTOS#

show mac protocol-queue-mapping
Display the queue mapping for the MAC protocols.
Syntax
Defaults

Not configured.

Command Modes

EXEC Privilege

Command
History

442

show mac protocol-queue-mapping

|

Version 8.3.8.0

Control Plane Policing (CoPP)

Introduced on S4810

Queue
----Q6
Q6
Q7

EgPort
-----CP
CP
CP

Rate (kbps)
----------_
_
_

Example
FTOS#show mac protocol-queue-mapping
Protocol
Destination Mac
EtherType
--------------------------------ARP
any
0x0806
FRRP
01:01:e8:00:00:10/11 any
LACP
01:80:c2:00:00:02
0x8809
LLDP
any
0x88cc
GVRP
01:80:c2:00:00:21
any
STP
01:80:c2:00:00:00
any
ISIS
01:80:c2:00:00:14/15 any
09:00:2b:00:00:04/05 any
FTOS#

Queue
EgPort
---------Q5/Q6
CP
Q7
CP
Q7
CP
Q7
CP
Q7
CP
Q7
CP
Q7
CP
Q7
CP

Rate (kbps)
----------_
_
_
_
_
_
_

Control Plane Policing (CoPP) | 443

www.dell.com | support.dell.com
444

|

Control Plane Policing (CoPP)

13
Data Center Bridging
Overview
Data center bridging (DCB) refers to a set of IEEE Ethernet enhancements that provide data centers
with a single, robust, converged network to support multiple traffic types, including LAN, server, and
storage traffic.
The Dell Force10 operating software (FTOS) commands for data center bridging features include
802.1Qbb priority-based flow control (PFC), 802.1Qaz enhanced transmission selection (ETS), and the
Data Center Bridging Exchange (DCBX) protocol. CLI commands for individual DCB features are as
follows:

DCB Command
•

dcb-enable

PFC Commands
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

clear pfc counters
dcb-input
dcb-policy input
dcb-policy input stack-unit stack-ports all
dcb stack-unit pfc-buffering pfc-port pfc-queues
description
pfc link-delay
pfc mode on
pfc priority
pfc no-drop queues
show dcb
show interface pfc
show interface pfc statistics
show qos dcb-input
show stack-unit stack-ports pfc detail

Data Center Bridging | 445

www.dell.com | support.dell.com

ETS Commands
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

bandwidth-percentage
clear ets counters
dcb-enable
dcb-output
dcb-policy output
dcb-policy output stack-unit stack-ports all
description
ets mode on
priority-list
priority-group
priority-group qos-policy
qos-policy-output ets
scheduler
set-pgid
show interface ets
show qos dcb-output
show qos priority-groups
show stack-unit stack-ports ets detail

DCBX Commands
•
•
•
•
•
•
•
•

advertise dcbx-appln-tlv
advertise dcbx-tlv
dcbx version
dcbx port-role
fcoe priority-bits
iscsi priority-bits
debug dcbx
show interface dcbx detail

advertise dcbx-appln-tlv
On a DCBX port with a manual role, configure the application priority TLVs advertised on the
interface to DCBX peers.
Syntax

advertise dcbx-appln-tlv {fcoe | iscsi}

To remove the application priority TLVs, use the no advertise dcbx-appln-tlv {fcoe | iscsi} command.
Parameters

{fcoe | iscsi}

Enter the application priority TLVs, where:
•
•

Defaults

446

|

fcoe: enables the advertisement of FCoE in application priority TLVs.
iscsi: enables the advertisement of iSCSI in application priority TLVs.

Application priority TLVS are enabled to advertise FCoE and iSCSI.

Data Center Bridging

Command Modes
Command
History

Usage
Information

PROTOCOL LLDP
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

To disable TLV transmission, use the no form of the command; for example, no advertise
dcbx-appln-tlv iscsi.

advertise dcbx-tlv
On a DCBX port with a manual role, configure the PFC and ETS TLVs advertised to DCBX peers.

Syntax

advertise dcbx-tlv {ets-conf | ets-reco | pfc} [ets-conf | ets-reco | pfc] [ets-conf | ets-reco | pfc]

To remove the advertised ETS TLVs, use the no advertise dcbx-tlv command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

{ets-conf | ets-reco |
pfc}

Enter the PFC and ETS TLVs to be advertised, where:
•
•
•

ets-conf: enables the advertisement of ETS configuration TLVs.
ets-reco: enables the advertisement of ETS recommend TLVs.
pfc: enables the advertisement of PFC TLVs.

All PFC and ETS TLVs are advertised.
PROTOCOL LLDP
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

You can configure the transmission of more than one TLV type at a time; for example: advertise
dcbx-tlv ets-conf ets-reco.
You can enable ETS recommend TLVs (ets-reco) only if ETS configuration TLVs (ets-conf) are
enabled. To disable TLV transmission, use the no form of the command; for example, no advertise
dcbx-tlv pfc ets-reco.
DCBX requires that you enable LLDP to advertise DCBX TLVs to peers.
Configure DCBX operation at the INTERFACE level on a switch or globally on the switch. To verify
the DCBX configuration on a port, use the show interface dcbx detail command.

bandwidth-percentage
Configure the bandwidth percentage allocated to priority traffic in port queues.

Syntax

bandwidth-percentage percentage

To remove the configured bandwidth percentage, use the no bandwidth-percentage command.

Data Center Bridging | 447

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes
Command
History

Usage
Information

percentage

(Optional) Enter the bandwidth percentage.
The percentage range is 1 to 100% in units of 1%.

none
QOS-POLICY-OUT-ETS
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

By default, equal bandwidth is assigned to each port queue and each dot1p priority in a priority group.
Use the bandwidth-percentage command to configure bandwidth amounts in associated dot1p
queues. When specified bandwidth is assigned to some port queues and not to others, the remaining
bandwidth (100% minus assigned bandwidth amount) is equally distributed to unassigned non-strict
priority queues in the priority group. The sum of the allocated bandwidth to all queues in a priority
group should be 100% of the bandwidth on the link.
ETS-assigned bandwidth allocation applies only to data queues, not to control queues.
The configuration of bandwidth allocation and strict-queue scheduling is not supported at the same
time for a priority group. If both are configured, the configured bandwidth allocation will be ignored
for priority-group traffic when you apply the output policy on an interface.
By default, equal bandwidth is assigned to each priority group in the ETS output policy applied to an
egress port if no bandwidth allocation is configured. The sum of configured bandwidth allocation to
dot1p priority traffic in all ETS priority groups must be 100%. You must allocate at least 1% of the
total bandwidth to each priority group and queue. If bandwidth is assigned to some priority groups but
not to others, the remaining bandwidth (100% minus assigned bandwidth amount) is equally
distributed to non-strict-priority groups which have no configured scheduler.

Related
Commands

qos-policy-output ets

Create a QoS output policy.

scheduler

Schedule priority traffic in port queues.

clear ets counters
Clear all ETS TLV counters on an interface.

Syntax
Parameters
Defaults
Command Modes
Command
History

448

|

clear ets counters port-type slot/port
port-type

Enter the keyword port-type followed by the slot/port information.

none
EXEC Privilege
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

Data Center Bridging

clear pfc counters
Clear the PFC TLV counters and PFC statistics on an interface or stack unit.

Syntax

clear pfc counters [port-type slot/port | stack-unit {unit number | all } all stack-ports all}]]

Parameters

Defaults
Command Modes
Command
History

port-type

Enter the keyword port-type followed by the slot/port information.

stack-unit unit
number

Enter the keyword stack-unit followed by the stack-unit number to be cleared.

all stack-ports all

Enter the keyword all stack-ports all to clear the counters on all interfaces.

none
EXEC Privilege
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

dcb-enable
Enable Data Center Bridging.

Syntax

dcb enable

To disable DCB, use the no dcb enable command.
Defaults
Command Modes
Command
History

none
CONFIGURATION
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

Related
Commands
Usage
Information

dcb-policy input

Apply the input policy with the PFC configuration to an ingress interface.

By default, iSCSI is enabled on the unit and flowcontrol is enabled on all of the interfaces or if
link-level flow control is enabled on one or more interfaces. To enable DCB, do one of the following:
•
•

Apply the dcb-input policy command with the command no pfc-mode on to all the interfaces.
Disable flow-control on all of the interfaces.

dcb-input
Create a DCB input policy to apply pause or flow control for specified priorities using a configure
delay time.
Syntax

dcb-input policy-name

Data Center Bridging | 449

www.dell.com | support.dell.com

To delete the DCB input policy, use the no dcb-input command.
Parameters
Defaults
Command Modes
Command
History

Usage
Information

policy-name

Maximum: 32 alphanumeric characters.

none
CONFIGURATION
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

As soon as you apply a DCB policy with PFC enabled on an interface, DCBX starts exchanging
information with PFC-enabled peers. The IEEE802.1Qbb, CEE, and CIN versions of PFC TLV are
supported. DCBX also validates PFC configurations received in TLVs from peer devices.
By applying a DCB input policy with PFC enabled, you enable PFC operation on ingress port traffic.
To achieve complete lossless handling of traffic, you must also enable PFC on all DCB egress ports or
configure the dot1p priority-queue assignment of PFC priorities to lossless queues (refer to pfc no-drop
queues).
To remove a DCB input policy, including the PFC configuration it contains, enter the no dcb-input
policy-name command in interface configuration mode.

Related
Commands

dcb-policy input

Apply the input policy with the PFC configuration.

dcb-output
Create a DCB output policy to associate an ETS configuration with priority traffic.

Syntax

dcb-output policy-name

To remove the ETS output policy globally, use the no dcb output policy-name command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

450

|

policy-name

Enter the DCB output policy name.
Maximum: 32 alphanumeric characters.

none
CONFIGURATION
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

Create a DCB output policy to associate a priority group with an ETS output policy with scheduling
and bandwidth configuration. You can apply a DCB output policy on multiple egress ports. When you
apply an ETS output policy on an interface, ETS-configured scheduling and bandwidth allocation take
precedence over any configured settings in QoS output policies.

Data Center Bridging

The ETS configuration associated with 802.1 priority traffic in a DCB output policy is used in DCBX
negotiation with ETS peers.
Related
Commands

dcb-policy output

Apply the output policy.

dcb-policy input
Apply the input policy with the PFC configuration to an ingress interface.

Syntax

dcb-policy input policy-name

To delete the input policy, use the no dcb-policy input command.
Parameters
Defaults
Command Modes

policy name

none
INTERFACE

Command
History

Usage
Information

Enter the input policy name with the PFC configuration to an ingress interface.

Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

If you apply an input policy with PFC disabled (no pfc mode on):
•

•

Link-level flow control can be enabled on the interface. To delete the input policy, you must first
disable link-level flow control. PFC is then automatically enabled on the interface because an
interface is by default PFC-enabled.
PFC still allows you to configure lossless queues on a port to ensure no-drop handling of lossless
traffic.

When you apply an input policy to an interface, an error message is displayed if:
•
•

The PFC dot1p priorities result in more than two lossless port queues globally on the switch.
Link-level flow control is already enabled. PFC and link-level flow control cannot be enabled at
the same time on an interface.

In a switch stack, you must configure all stacked ports with the same PFC configuration.
A DCB input policy for PFC applied to an interface may become invalid if the dot1p-queue mapping is
reconfigured. This situation occurs when the new dot1p-queue assignment exceeds the maximum
number (2) of lossless queues supported globally on the switch. In this case, all PFC configurations
received from PFC-enabled peers are removed and re-synchronized with the peer devices.
Traffic may be interrupted when you reconfigure PFC no-drop priorities in an input policy or re-apply
the policy to an interface.
Related
Commands

dcb-input

Create a DCB input policy.

Data Center Bridging | 451

www.dell.com | support.dell.com

dcb-policy input stack-unit stack-ports all
Apply the specified DCB input policy on all ports of the switch stack or a single stacked switch.

Syntax

dcb-policy input stack-unit {all | stack-unit-id} stack-ports all dcb-input-policy-name

To remove all DCB input policies applied to the stacked ports and rest the PFC to its default settings,
use the no dcb-policy input stack-unit all command.
To remove only the DCB input policies applied to the specified switch, use the no dcb-policy input
stack-unit command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

Related
Commands

stack-unit-id

Enter the stack unit identification.

dcb-input-policy-name

Enter the policy name for the DCB input policy.

None
CONFIGURATION
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

The dcb-policy input stack-unit all command overwrites any previous dcb-policy input stack-unit
stack-unit-id configurations. Similarly, a dcb-policy input stack-unit stack-unit-id command
overwrites any previous dcb-policy input stack-unit all configuration.
dcb-policy output stack-unit
stack-ports all

Apply the specified DCB output policy.

dcb-policy output
Apply the output policy with the ETS configuration to an egress interface.

Syntax

dcb-policy output policy-name

To delete the output policy, use the no dcb-policy output command.
Parameters
Defaults
Command Modes
Command
History

Usage
Information

452

|

policy name

Enter the output policy name.

none
INTERFACE
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

When you apply an ETS output policy to on interface, ETS-configured scheduling and bandwidth
allocation take precedence over any configured settings in QoS output policies.

Data Center Bridging

When DCB is disabled, ETS is disabled by default. When DCB is enabled, ETS is enabled for all
interfaces that has the default ETS configuration applied (all dot1p priorities in the same group with
equal bandwidth allocation).
Related
Commands

dcb-output

Create a DCB output policy.

dcb-policy output stack-unit stack-ports all
Apply the specified DCB output policy on all ports of the switch stack or a single stacked switch.

Syntax

dcb-policy output stack-unit {all | stack-unit-id} stack-ports all dcb-output-policy-name

To remove all DCB output policies applied to the stacked ports, use the no dcb-policy output
stack-unit all command.
To remove only the DCB output policies applied to the specified switch, use the no dcb-policy output
stack-unit command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

stack-unit-id

Enter the stack unit identification.

dcb-output-policyname

Enter the policy name for the DCB output policy.

none
CONFIGURATION
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

The dcb-policy output stack-unit all command overwrites any previous dcb-policy output stack-unit
stack-unit-id configurations. Similarly, a dcb-policy output stack-unit stack-unit-id command
overwrites any previous dcb-policy output stack-unit all configuration.
You can apply a DCB output policy with ETS configuration to all stacked ports in a switch stack or an
individual stacked switch. You can apply different DCB output policies to different stack units.

Related
Commands

dcb-policy input stack-unit
stack-ports all

Apply the specified DCB input policy.

dcb stack-unit all pfc-buffering pfc-port pfc-queues
Configure the PFC buffer for all switches in the stack.

Syntax

dcb stack-unit all pfc-buffering pfc-port {1-64} pfc-queues {1-2}

To remove the configuration for the PFC buffer on all switches in the stack, use the no dcb stack-unit
all pfc-buffering pfc-port-count pfc-queues command.

Data Center Bridging | 453

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes
Command
History

Usage
Information

pfc-port-count {1-64}

Enter the pfc-port count.
Range: 1 to 64.

pfc-queues {1-2}

Enter the pfc-queue number.
Range: 1 to 2.

The PFC buffer is enabled on all ports on the stack unit.
CONFIGURATION
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

If you configure PFC on a 40GbE port, count the 40GbE port as four PFC-enabled ports in the pfc-port
number you enter in the command syntax.
To achieve lossless PFC operation, the PFC port count and queue number used for the reserved buffer
size that is created must be greater than or equal to the buffer size required for PFC-enabled ports and
lossless queues on the switch.
You must reload the stack or a specified stack unit (use the reload command in EXEC Privilege mode)
for the PFC buffer configuration to take effect.

Related
Commands

dcb stack-unit pfc-buffering pfc-port
pfc-queues

Configure the PFC buffer for all port pipes in a specified stack
unit.

dcb stack-unit pfc-buffering pfc-port pfc-queues
Configure the PFC buffer for all port pipes in a specified stack unit by specifying the port-pipe number,
number of PFC-enabled ports, and number of configured lossless queues.
Syntax

dcb stack-unit stack-unit-id [port-set port-set-id] pfc-buffering pfc-ports {1-64} pfc-queues {1-2}

To remove the configuration for the PFC buffer on all port pipes in a specified stack unit, use the no
dcb stack-unit stack-unit-id [port-set port-set-id] pfc-buffering pfc-ports pfc-queues command.
Parameters

Command Modes
Command
History

454

|

stack-unit-id

Enter the stack-unit identification.
Range:0 to 5.

port-set

Enter the port-set identification.

pfc-ports {1-65}

Enter the pfc-ports.
Range:1 to 64.

pfc-queues {1-2}

Enter the pfc-queue number.
Range:1 to 2.

CONFIGURATION
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

Data Center Bridging

Usage
Information

If you configure PFC on a 40GbE port, count the 40GbE port as four PFC-enabled ports in the pfc-port
number you enter in the command syntax.
To achieve lossless PFC operation, the PFC port count and queue number used for the reserved buffer
size that is created must be greater than or equal to the buffer size required for PFC-enabled ports and
lossless queues on the switch.
You must reload the stack or a specified stack unit (use the reload command in EXEC Privilege mode)
for the PFC buffer configuration to take effect.

Related
Commands

dcb stack-unit all pfc-buffering pfc-port pfc-queues

Configure the PFC buffer for all switches in the stack.

dcbx port-role
Configure the DCBX port role used by the interface to exchange DCB information.

Syntax

dcbx port-role {config-source | auto-downstream | auto-upstream | manual}

To remove DCBX port role, use the no dcbx port-role {config-source | auto-downstream |
auto-upstream | manual} command.
Parameters

config-source |
auto-downstrea
m|
auto-upstream |
manual

Enter the DCBX port role, where:
•
•
•
•

Defaults
Command Modes
Command
History

Usage
Information

config-source: configures the port to serve as the configuration source on the
switch.

auto-upstream: configures the port to receive a peer configuration. The
configuration source is elected from auto-upstream ports.
auto-downstream: configures the port to accept the internally propagated DCB
configuration from a configuration source.
manual: configures the port to operate only on administer-configured DCB
parameters. The port does not accept a DCB configuration received form a peer or a
local configuration source.

Manual.
INTERFACE PROTOCOL LLDP
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

DCBX requires that you enable LLDP to advertise DCBX TLVs to peers.
Configure DCBX operation at the INTERFACE level on a switch or globally on the switch. To verify
the DCBX configuration on a port, use the show interface dcbx detail command.

dcbx version
Configure the DCBX version used on the interface.

Data Center Bridging | 455

www.dell.com | support.dell.com

dcbx version {auto | cee | cin | ieee-v2.5}

Syntax

To remove the DCBX version, use the dcbx version {auto | cee | cin | ieee-v2.5} command.
Parameters

Defaults

auto | cee | cin |
ieee-v2.5

Enter the DCBX version type used on the interface, where:
•

auto: configures the port to operate using the DCBX version received from a

•
•
•

peer.
cee: configures the port to use CDD (Intel 1.01).
cin: configures the port to use Cisco-Intel-Nuova (DCBX 1.0).
ieee-v2: configures the port to use IEEE 802.1az (Draft 2.5).

Auto

Command Modes

PROTOCOL LLDP
INTERFACE PROTOCOL LLDP

Command
History

Usage
Information

Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

DCBX requires that you enable LLDP to advertise DCBX TLVs to peers.
Configure DCBX operation at the INTERFACE level on a switch or globally on the switch. To verify
the DCBX configuration on a port, use the show interface dcbx detail command.

debug dcbx
Enable DCBX debugging.

Syntax

debug dcbx {all | auto-detect-timer | config-exchng | fail | mgmt | resource | sem | tlv}

To disable DCBX debugging, use the no debug dcbx command.
Parameters

Defaults
Command Modes

456

|

{all |
auto-detect-timer |
config-exchng | fail |
mgmt | resource |
sem | tlv}

none
EXEC PRIVILEGE

Data Center Bridging

Enter the type of debugging, where:
•
•
•
•
•
•
•
•

all: enables all DCBX debugging operations.
auto-detect-timer: enables traces for DCBX auto-detect timers.
config-exchng: enables traces for DCBX configuration exchanges.
fail: enables traces for DCBX failures.
mgmt: enables traces for DCBX management frames.
resource: enables traces for DCBX system resource frames.
sem: enables traces for the DCBX state machine.
tlv: enables traces for DCBX TLVs.

Command
History

Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

description
Enter a text description of the DCB policy (PFC input or ETS output).

Syntax

description text

To remove the text description, use the no description command.
Parameters

Defaults
Command Modes

text

Enter the description of the output policy.
Maximum: 32 characters.

none
DCB INPUT POLICY
DCB OUTPUT POLICY

Command
History

Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

Related
Commands

dcb-input

Create a DCB PFC input policy.

dcb-policy input

Apply the output policy.

dcb-output

Create a DCBETS output policy.

dcb-policy output

Apply the output policy.

ets mode on
Enable the ETS configuration so that scheduling and bandwidth allocation configured in an ETS output
policy or received in a DCBX TLV from a peer can take effect on an interface.
Syntax

ets mode on

To remove the ETS configuration, use the no ets mode on command.
Defaults
Command Modes
Command
History

ETS mode is on.
DCB OUTPUT POLICY
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

Data Center Bridging | 457

www.dell.com | support.dell.com

Usage
Information

Related
Commands

If you disable ETS in an output policy applied to an interface using the no ets mode on command, any
previously configured QoS settings at the interface or global level take effect. If QoS settings are
configured at the interface or global level and in an output policy map (service-policy output
command), the QoS configuration in the output policy takes precedence.
dcb-output

Create a DCB output policy.

dcb-policy output

Apply the output policy.

fcoe priority-bits
Configure the FCoE priority advertised for the FCoE protocol in application priority TLVs.

Syntax

fcoe priority-bits priority-bitmap

To remove the configured FCoE priority, use the no fcoe priority-bits command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

priority-bitmap

Enter the priority-bitmap range.
Range: 1 to FF.

0x8
PROTOCOL LLDP
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

This command is available at the global level only.

iscsi priority-bits
Configure the iSCSI priority advertised for the iSCSI protocol in application priority TLVs.

Syntax

iscsi priority-bits priority-bitmap

To remove the configured iSCSI priority, use the no iscsi priority-bits command.
Parameters

Defaults
Command Modes
Command
History

458

|

priority-bitmap

Enter the priority bitmap.
Range: 1 to FF.

0x10
PROTOCOL LLDP
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

Data Center Bridging

Usage
Information

This command is available at the global level only.

pfc link-delay
Configure the link delay used to pause specified priority traffic.

Syntax

pfc link-delay value

To remove the link delay, use the no pfc link-delay command.
Parameters
Defaults
Command Modes
Command
History

Related
Commands
Usage
Information

value

Range: (in quanta) 712-65535. One quantum is equal to a 512-bit transmission.

45556 quantum
DCB INPUT POLICY
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

dcb-input

Create a DCB input policy.

The minimum link delay should be greater than the round-trip transmission time required by a peer to
honor a PFC pause frame multiplied by the number of PFC-enabled ingress ports.

pfc mode on
Enable the PFC configuration on the port so that the priorities are included in DCBX negotiation with
peer PFC devices.
Syntax

pfc mode on

To disable the PFC configuration, use the no pfc mode on command.
Defaults
Command Modes
Command
History

Usage
Information

PFC mode is on.
DCB INPUT POLICY
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

By applying a DCB input policy with PFC enabled, you enable PFC operation on ingress port traffic.
To achieve complete lossless handling of traffic, you must also enable PFC on all DCB egress ports or
configure the dot1p priority-queue assignment of PFC priorities to lossless queues (see pfc no-drop
queues).

Data Center Bridging | 459

www.dell.com | support.dell.com

To disable PFC operation on an interface, enter the no pfc mode on command in DCB input policy
configuration mode. PFC is enabled and disabled as global DCB operation is enabled (dcb-enable) or
disabled (no dcb-enable).
PFC and link-level flow control cannot be enabled at the same time on an interface.
Related
Commands

dcb-input

Create a DCB input policy.

pfc no-drop queues
Configure the port queues that will still function as no-drop queues for lossless traffic.

Syntax

pfc no-drop queues queue-range

To remove the no-drop port queues, use the no pfc no-drop queues command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

queue-range

Enter the queue range. Separate the queue values with a comma; specify a
priority range with a dash; for example, pfc no-drop queues 1,3 or pfc
no-drop queues 2-3.
Range: 0 to 3.

No lossless queues are configured.
INTERFACE
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

The maximum number of lossless queues globally supported on the switch is two.
Table 13-1 lists the dot1p priority-queue assignments.
Table 13-1.

dot1p Priority-Queue Assignments

dot1p Value in the Incoming Frame

460

|

Data Center Bridging

Egress Queue Assignment

0

0

1

0

2

0

3

1

4

2

5

3

6

3

7

3

pfc priority
Configure the CoS traffic to be stopped for the specified delay.

Syntax

pfc priority priority-range

To delete the pfc priority configuration, use the no pfc priority command.
Parameters

Defaults
Command Modes
Command
History

Related
Commands
Usage
Information

priority-range

Enter the 802.1p values of the frames to be paused. Separate the priority values with a
comma; specify a priority range with a dash; for example, pfc priority 1,3,5-7.
Range: 0 to 7.

None
DCB INPUT POLICY
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

dcb-input

Create a DCB input policy.

you can enable any number of 802.1p priorities for PFC. Queues to which PFC priority traffic is
mapped are lossless by default. Traffic may be interrupted due to an interface flap (going down and
coming up) when you reconfigure the lossless queues for no-drop priorities in a PFC input policy and
re-apply the policy to an interface.
The maximum number of lossless queues supported on the switch is two.
The configured priority traffic must be supported by a PFC peer (as detected by DCBX) for PFC to be
applied.

priority-group
Create an ETS priority group to use with an ETS output policy.

Syntax

priority-group group-name

To remove the priority group, use the no priority-group command.
Parameters

Defaults
Command Modes

group-name

Enter the name of the ETS priority group.
Maximum: 32 characters.

none
CONFIGURATION

Data Center Bridging | 461

www.dell.com | support.dell.com

Command
History

Usage
Information

Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

A priority group consists of 802.1p priority values that are grouped together for similar bandwidth
allocation and scheduling, and that share the same latency and loss requirements. All 802.1p priorities
mapped to the same queue should be in the same priority group.
All 802.1p priorities should be configured in priority groups associated with an ETS output policy. You
can assign each dot1p priority to only one priority group.
The maximum number of priority groups supported in ETS output policies on an interface is equal to
the number of data queues (4) on the port. The 802.1p priorities in a priority group can map to multiple
queues.
If you configure more than one priority queue as strict priority or more than one priority group as strict
priority, the higher numbered priority queue is given preference when scheduling data traffic

Related
Commands

priority-list

Configure the 802.1p priorities for an ETS output policy.

set-pgid

Configure the priority-group.

priority-group qos-policy
Associate the 802.1p priority traffic in a priority group with the ETS configuration in a QoS output
policy.
Syntax

priority-group group-name qos-policy ets-policy-name

To remove the 802.1p priority group, use the no priority-group qos-policy command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

group-name

Enter the group name of the 802.1p priority group.
Maximum: 32 characters.

ets-policy-name

Enter the ETS policy name.

none
DCB OUTPUT POLICY
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

The ETS configuration associated with 802.1p priority traffic in a DCB output policy is used in DCBX
negotiation with ETS peers.
If you disable ETS in an output policy applied to an interface using the no ets mode on command, any
previously configured QoS settings at the interface or global level take effect. If QoS settings are
configured at the interface or global level and in an output policy map (service-policy output
command), the QoS configuration in the output policy takes precedence.

462

|

Data Center Bridging

Related
Commands

dcb-output

Create a DCB output policy.

dcb-policy output

Apply the output policy.

priority-list
Configure the 802.1p priorities for the traffic on which you want to apply an ETS output policy.

Syntax

priority-list value

To remove the priority list, use the no priority-list command.
Parameters

Defaults
Command Modes

value

none
PRIORITY-GROUP

Command
History

Usage
Information

Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

By default:
•
•

Related
Commands

Enter the priority list value. Separate priority values with a comma; specify a
priority range with a dash; for example, priority-list 3,5-7.
Range: 0 to 7.

All 802.1p priorities are grouped in priority group 0.
100% of the port bandwidth is assigned to priority group 0. The complete bandwidth is equally
assigned to each priority class so that each class has 12-13%.
priority-group

Create an ETS priority group.

priority-group
qos-policy

Associate an ETS priority group with an ETS output policy.

set-pgid

Configure the priority-group.

qos-policy-output ets
Create a QoS output policy to configure the ETS bandwidth allocation and scheduling for priority
traffic.
Syntax

qos-policy-output policy-name ets

To remove the QoS output policy, use the no qos-policy-output ets command.
Parameters

Command Modes

policy-name

Enter the policy name.
Maximum: 32 characters.

CONFIGURATION

Data Center Bridging | 463

www.dell.com | support.dell.com

Command
History

Usage
Information

Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

If an error occurs in an ETS output-policy configuration, the configuration is ignored and the scheduler
and bandwidth allocation settings are reset to the ETS default values (all priorities are in the same ETS
priority group and bandwidth is allocated equally to each priority).
If an error occurs when a port receives a peer’s ETS configuration, the port’s configuration is reset to
the previously configured ETS output policy. If no ETS output policy was previously applied, the port
is reset to the default ETS parameters.

Related
Commands

scheduler

Schedule priority traffic in port queues.

bandwidth-percentage

Bandwidth percentage allocated to priority traffic in port queues.

scheduler
Configure the method used to schedule priority traffic in port queues.

Syntax

scheduler value

To remove the configured priority schedule, use the no scheduler command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

value

Enter schedule priority value.
Range: strict: strict priority traffic is serviced before any other queued
traffic.

WERR scheduling is used to queue priority traffic.
POLICY-MAP-OUT-ETS
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

dot1p priority traffic on the switch is scheduled to the current queue mapping. dot1p priorities within
the same queue should have the same traffic properties and scheduling method.
ETS-assigned scheduling applies only to data queues, not to control queues.
The configuration of bandwidth allocation and strict-queue scheduling is not supported at the same
time for a priority group. If both are configured, the configured bandwidth allocation will be ignored
for priority-group traffic when you apply the output policy on an interface.

Related
Commands

464

|

qos-policy-output ets

Configure the ETS bandwidth allocation.

bandwidth-percentage

Bandwidth percentage allocated to priority traffic in port queues.

Data Center Bridging

set-pgid
Configure the priority-group identifier.

Syntax

set-pgid value

To remove the priority group, use the no set-pgid command.
Parameters

Defaults
Command Modes
Command
History

Related
Commands

value

Enter the priority group identification.
Range: 0 to 7.

none
PRIORITY-GROUP
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

priority-group qos-policy

Create an ETS priority group.

priority-list

Configure the 802.1p priorities.

show dcb
Displays the data center bridging status, the number of PFC-enabled ports, and the number of
PFC-enabled queues.
Syntax
Parameters

Command Mode
Command
History

Example

Usage
Information

show dcb [stack-unit unit-number] [port-set port-set port-set number]
unit number

Enter the DCB unit number.
Range: 0 to 5.

port-set number

Enter the port-set number

EXEC PRIVILEGE
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

FTOS# show dcb
stack-unit 0 port-set 0
DCB Status : Enabled
PFC Port Count : 56 (current), 56 (configured)
PFC Queue Count : 2 (current), 2 (configured)

Specify a stack-unit number on the Master switch in a stack.

Data Center Bridging | 465

www.dell.com | support.dell.com

show interface dcbx detail
Displays the DCBX configuration on an interface.

Syntax
Parameters

Command Mode
Command
History

Example

show interface port-type slot/port dcbx detail
port-type

Enter the port type.

slot/port

Enter the slot/port number.

EXEC PRIVILEGE
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

FTOS(conf)# show interface tengigabitethernet 0/49 dcbx detail
FTOS#show interface te 0/49 dcbx detail
E-ETS Configuration TLV enabled
e-ETS Configuration TLV disabled
R-ETS Recommendation TLV enabled
r-ETS Recommendation TLV disabled
P-PFC Configuration TLV enabled
p-PFC Configuration TLV disabled
F-Application priority for FCOE enabled
f-Application Priority for FCOE
disabled
I-Application priority for iSCSI enabled
i-Application Priority for iSCSI
disabled
----------------------------------------------------------------------------------------Interface TenGigabitEthernet 0/49
Remote Mac Address 00:00:00:00:00:11
Port Role is Auto-Upstream
DCBX Operational Status is Enabled
Is Configuration Source? TRUE
Local DCBX Compatibility mode is CEE
Local DCBX Configured mode is CEE
Peer Operating version is CEE
Local DCBX TLVs Transmitted: ErPfi
Local DCBX Status
----------------DCBX Operational Version is 0
DCBX Max Version Supported is 0
Sequence Number: 2
Acknowledgment Number: 2
Protocol State: In-Sync
Peer DCBX Status:
---------------DCBX Operational Version is 0
DCBX Max Version Supported is 255
Sequence Number: 2
Acknowledgment Number: 2
Total DCBX Frames transmitted 27
Total DCBX Frames received 6
Total DCBX Frame errors 0
Total DCBX Frames unrecognized 0

Table 13-2 lists the show interface dcbx detail field descriptions.
Table 13-2.

466

|

show interface dcbx detail Command Example Fields

Field

Description

Interface

Interface type with chassis slot and port number.

Port-Role

Configured the DCBX port role: auto-upstream, auto-downstream, config-source,
or manual.

Data Center Bridging

Table 13-2.

show interface dcbx detail Command Example Fields (continued)

Field

Description

DCBX Operational Status Operational status (enabled or disabled) used to elect a configuration source and
internally propagate a DCB configuration. The DCBX operational status is the
combination of PFC and ETS operational status.
Configuration Source

Specifies whether the port serves as the DCBX configuration source on the switch:
true (yes) or false (no).

Local DCBX
Compatibility mode

DCBX version accepted in a DCB configuration as compatible. In auto-upstream
mode, a port can only received a DCBX version supported on the remote peer.

Local DCBX Configured
mode

DCBX version configured on the port: CEE, CIN, IEEE v2.5, or Auto (port
auto-configures to use the DCBX version received from a peer).

Peer Operating version

DCBX version that the peer uses to exchange DCB parameters.

Local DCBX TLVs
Transmitted

Transmission status (enabled or disabled) of advertised DCB TLVs (see TLV code
at the top of the show command output).

Local DCBX Status:
DCBX Operational
Version

DCBX version advertised in Control TLVs.

Local DCBX Status:
DCBX Max Version
Supported

Highest DCBX version supported in Control TLVs.

Local DCBX Status:
Sequence Number

Sequence number transmitted in Control TLVs.

Local DCBX Status:
Acknowledgment
Number

Acknowledgement number transmitted in Control TLVs.

Local DCBX Status:
Protocol State

Current operational state of the DCBX protocol: ACK or IN-SYNC.

Peer DCBX Status:
DCBX Operational
Version

DCBX version advertised in Control TLVs received from the peer device.

Peer DCBX Status:
DCBX Max Version
Supported

Highest DCBX version supported in Control TLVs received from the peer device.

Peer DCBX Status:
Sequence Number

Sequence number transmitted in Control TLVs received from the peer device.

Peer DCBX Status:
Acknowledgment
Number

Acknowledgement number transmitted in Control TLVs received from the peer
device.

Total DCBX Frames
transmitted

Number of DCBX frames sent from the local port.

Total DCBX Frames
received

Number of DCBX frames received from the remote peer port.

Total DCBX Frame errors Number of DCBX frames with errors received.
Total DCBX Frames
unrecognized

Usage
Information

Number of unrecognizable DCBX frames received.

To clear DCBX frame counters, use the clear dcbx counters interface stack-unit/port command.

Data Center Bridging | 467

www.dell.com | support.dell.com

show interface ets
Displays the ETS configuration applied to egress traffic on an interface, including priority groups with
priorities and bandwidth allocation.
Syntax
Parameters

Command Mode
Command
History

Example
(ets summary)

show interface port-type slot/port ets {summary | detail}
port-type slot/port
ets

Enter the port-type slot and port ETS information.

{summary |
detail}

Enter the keyword summary for a summary list of results or enter the keyword detail
for a full list of results.

EXEC PRIVILEGE
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

FTOS(conf-qos-policy-out-ets)#show interface te 0/3 ets de
Interface TenGigabitEthernet 0/3
Max Supported TC Groups is 4
Number of Traffic Classes is 8
Admin mode is on
Admin Parameters :
-----------------Admin is enabled
TC-grp
Priority#
Bandwidth
TSA
-----------------------------------------------0
1
0,1,2
100%
ETS
2
3
0 %
SP
3
4,5,6,7
0 %
SP
4
5
6
7
Remote Parameters :
------------------Remote is disabled
Local Parameters :
-----------------Local is enabled
TC-grp
Priority#
Bandwidth
TSA
-----------------------------------------------0
1
0,1,2
100%
ETS
2
3
0 %
SP
3
4,5,6,7
0 %
SP
4
5
6
7
Oper status is init
ETS DCBX Oper status is Down
State Machine Type is Asymmetric
Conf TLV Tx Status is enabled
Reco TLV Tx Status is enabled
0 Input Conf TLV Pkts, 1955 Output Conf TLV Pkts, 0 Error Conf TLV Pkts
0 Input Reco TLV Pkts, 1955 Output Reco TLV Pkts, 0 Error Reco TLV Pkts
FTOS(conf-qos-policy-out-ets)#do sho int te 0/3 ets de

468

|

Data Center Bridging

Interface TenGigabitEthernet 0/3
Max Supported TC Groups is 4
Number of Traffic Classes is 8
Admin mode is on
Admin Parameters :
-----------------Admin is enabled
TC-grp
Priority#
Bandwidth
TSA
-----------------------------------------------0
1
0,1,2
100%
ETS
2
3
0 %
SP
3
4,5,6,7
0 %
SP
4
5
6
7
Remote Parameters :
------------------Remote is disabled
Local Parameters :
-----------------Local is enabled
TC-grp
Priority#
Bandwidth
TSA
-----------------------------------------------0
1
0,1,2
100%
ETS
2
3
0 %
SP
3
4,5,6,7
0 %
SP
4
5
6
7
Oper status is init
ETS DCBX Oper status is Down
State Machine Type is Asymmetric
Conf TLV Tx Status is enabled
Reco TLV Tx Status is enabled
0 Input Conf TLV Pkts, 1955 Output Conf TLV Pkts, 0 Error Conf TLV Pkts
0 Input Reco TLV Pkts, 1955 Output Reco TLV Pkts, 0 Error Reco TLV Pkts
FTOS(conf)# show interfaces tengigabitethernet 0/0 ets detail
Interface TenGigabitEthernet 0/0
Max Supported TC Groups is 4
Number of Traffic Classes is 8
Admin mode is on
Admin Parameters :
-----------------Admin is enabled
TC-grp Priority# Bandwidth TSA
0 0,1,2,3,4,5,6,7 100% ETS
1 0% ETS
2 0% ETS
3 0% ETS
4 0% ETS
5 0% ETS
6 0% ETS
7 0% ETS
Priority# Bandwidth TSA
0 13% ETS
1 13% ETS
2 13% ETS
3 13% ETS
4 12% ETS
5 12% ETS
6 12% ETS
7 12% ETS
Remote Parameters:
------------------Remote is disabled
Local Parameters :
-----------------Local is enabled
TC-grp Priority# Bandwidth TSA

Data Center Bridging | 469

www.dell.com | support.dell.com

0 0,1,2,3,4,5,6,7 100% ETS
1 0% ETS
2 0% ETS
3 0% ETS
4 0% ETS
5 0% ETS
6 0% ETS
7 0% ETS
Priority# Bandwidth TSA
0 13% ETS
1 13% ETS
2 13% ETS
3 13% ETS
4 12% ETS
5 12% ETS
6 12% ETS
7 12% ETS
Oper status is init
Conf TLV Tx Status is disabled
Traffic Class TLV Tx Status is disabled
0 Input Conf TLV Pkts, 0 Output Conf TLV Pkts, 0 Error Conf TLV Pkts
0T LIVnput Traffic Class TLV Pkts, 0 Output Traffic Class TLV Pkts, 0 Error Traffic
Class
Pkts

Example
(ets detail)

FTOS(conf)# show interfaces tengigabitethernet 0/0 ets
Interface TenGigabitEthernet 0/0
Max Supported TC Groups is 4
Number of Traffic Classes is 8
Admin mode is on
Admin Parameters :
-----------------Admin is enabled
TC-grp
Priority#
Bandwidth
TSA
0
0,1,2,3,4,5,6,7
100%
ETS
1
0%
ETS
2
0%
ETS
3
0%
ETS
4
0%
ETS
5
0%
ETS
6
0%
ETS
7
0%
ETS
Priority#
0
1
2
3
4
5
6
7
Remote Parameters:
------------------Remote is disabled
Local Parameters :
-----------------Local is enabled
TC-grp
Priority#
0
0,1,2,3,4,5,6,7
1
2
3
4
5
6
7
Priority#
0
1
2
3
4
5
6
7
Oper status is init

470

|

Data Center Bridging

Bandwidth
13%
13%
13%
13%
12%
12%
12%
12%

TSA
ETS
ETS
ETS
ETS
ETS
ETS
ETS
ETS

Bandwidth
100%
0%
0%
0%
0%
0%
0%
0%

TSA
ETS
ETS
ETS
ETS
ETS
ETS
ETS
ETS

Bandwidth
13%
13%
13%
13%
12%
12%
12%
12%

TSA
ETS
ETS
ETS
ETS
ETS
ETS
ETS
ETS

detail

Conf TLV Tx Status is disabled
Traffic Class TLV Tx Status is disabled
0 Input Conf TLV Pkts, 0 Output Conf TLV Pkts, 0 Error Conf TLV Pkts
0 Input Traffic Class TLV Pkts, 0 Output Traffic Class TLV Pkts, 0 Error Traffic Class
TLV
Pkts

Table 13-3 lists the show interface ets detail field descriptions.
Table 13-3.

show interfaces ets detail Command Example Fields

Field

Description

Interface

Interface type with stack-unit and port number.

Max Supported TC Group Maximum number of priority groups supported.
Number of Traffic Classes Number of 802.1p priorities currently configured.
Admin mode

ETS mode: on or off.
When on, the scheduling and bandwidth allocation configured in an ETS output
policy or received in a DCBX TLV from a peer can take effect on an interface.

Admin Parameters

ETS configuration on local port, including priority groups, assigned dot1p
priorities, and bandwidth allocation.

Remote Parameters

ETS configuration on remote peer port, including admin mode (enabled if a valid
TLV was received or disabled), priority groups, assigned dot1p priorities, and
bandwidth allocation. If ETS admin mode is enabled on the remote port for DCBX
exchange, the Willing bit received in ETS TLVs from the remote peer is included.

Local Parameters

ETS configuration on local port, including admin mode (enabled when a valid TLV
is received from a peer), priority groups, assigned dot1p priorities, and bandwidth
allocation.

Operational status (local
port)

Port state for current operational ETS configuration:
•
•

Init: Local ETS configuration parameters were exchanged with the peer.
Recommend: Remote ETS configuration parameters were received from the

•

Internally propagated: ETS configuration parameters were received from

peer.
the configuration source.

Usage
Information

ETS DCBX Oper status

Operational status of the ETS configuration on the local port: match or mismatch.

State Machine Type

Type of state machine used for DCBX exchanges of ETS parameters:
Feature - for legacy DCBX versions; Asymmetric - for an IEEE version.

Conf TLV Tx Status

Status of ETS Configuration TLV advertisements: enabled or disabled.

ETS TLV Statistic: Input
Conf TLV pkts

Number of ETS Configuration TLVs received.

ETS TLV Statistic:
Output Conf TLV pkts

Number of ETS Configuration TLVs transmitted.

ETS TLV Statistic: Error
Conf TLV pkts

Number of ETS Error Configuration TLVs received.

To clear ETS TLV counters, use the clear ets counters interface port-type slot/port command.

Data Center Bridging | 471

www.dell.com | support.dell.com

show interface pfc
Displays the PFC configuration applied to ingress traffic on an interface, including priorities and link
delay.
Syntax
Parameters

Command Mode
Command
History

Example

show interface port-type slot/port pfc {summary | detail}
port-type slot/
port pfc

Enter the port-type slot and port PFC information.

{summary | detail}

Enter the keyword summary for a summary list of results or enter the keyword detail
for a full list of results.

INTERFACE
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

FTOS# show interfaces tengigabitethernet 0/49 pfc summary
Interface TenGigabitEthernet 0/49
Admin mode is on
Admin is enabled
Remote is enabled, Priority list is 4
Remote Willing Status is enabled
Local is enabled
Oper status is Recommended
PFC DCBX Oper status is Up
State Machine Type is Feature
TLV Tx Status is enabled
PFC Link Delay 45556 pause quantams
Application Priority TLV Parameters :
-------------------------------------FCOE TLV Tx Status is disabled
ISCSI TLV Tx Status is disabled
Local FCOE PriorityMap is 0x8
Local ISCSI PriorityMap is 0x10
Remote FCOE PriorityMap is 0x8
Remote ISCSI PriorityMap is 0x8
FTOS# show interfaces tengigabitethernet 0/49 pfc detail
Interface TenGigabitEthernet 0/49
Admin mode is on
Admin is enabled
Remote is enabled
Remote Willing Status is enabled
Local is enabled
Oper status is recommended
PFC DCBX Oper status is Up
State Machine Type is Feature
TLV Tx Status is enabled
PFC Link Delay 45556 pause quanta
Application Priority TLV Parameters :
-------------------------------------FCOE TLV Tx Status is disabled
ISCSI TLV Tx Status is disabled
Local FCOE PriorityMap is 0x8
Local ISCSI PriorityMap is 0x10
Remote FCOE PriorityMap is 0x8
Remote ISCSI PriorityMap is 0x8
0 Input TLV pkts, 1 Output TLV pkts, 0 Error pkts, 0 Pause Tx pkts, 0 Pause Rx pkts

472

|

Data Center Bridging

Usage
Information

To clear the PFC TLV counters, use the clear pfc counters interface port-type slot/port command.
Table 13-4 lists the show interface pfc summary field descriptions.
Table 13-4.

show interfaces pfc summary Command Example Fields

Field

Description

Interface

Interface type with stack-unit and port number.

Admin mode is on
Admin is enabled

PFC admin mode is on or off with a list of the configured PFC priorities. When the
PFC admin mode is on, PFC advertisements are enabled to be sent and received
from peers; received PFC configuration will take effect. The admin operational
status for a DCBX exchange of PFC configuration is enabled or disabled.

Remote is enabled,
Priority list
Remote Willing Status is
enabled

Operational status (enabled or disabled) of peer device for DCBX exchange of PFC
configuration with a list of the configured PFC priorities. Willing status of peer
device for DCBX exchange (Willing bit received in PFC TLV): enabled or disable.

Local is enabled

DCBX operational status (enabled or disabled) with a list of the configured PFC
priorities.

Operational status (local
port)

Port state for current operational PFC configuration:
•
•

Init: Local PFC configuration parameters were exchanged with the peer.
Recommend: Remote PFC configuration parameters were received from the
peer.

•

Internally propagated: PFC configuration parameters were received from
the configuration source.

PFC DCBX Oper status

Operational status for the exchange of the PFC configuration on the local port:
match (up) or mismatch (down).

State Machine Type

Type of state machine used for DCBX exchanges of the PFC parameters:
Feature - for legacy DCBX versions; Symmetric - for an IEEE version.

TLV Tx Status

Status of the PFC TLV advertisements: enabled or disabled.

PFC Link Delay

Link delay (in quanta) used to pause specified priority traffic.

Application Priority TLV: Status of FCoE advertisements in application priority TLVs from the local DCBX
FCOE TLV Tx Status
port: enabled or disabled.
Application Priority TLV: Status of ISCSI advertisements in application priority TLVs from the local DCBX
SCSI TLV Tx Status
port: enabled or disabled.
Application Priority TLV: Priority bitmap used by the local DCBX port in FCoE advertisements in application
Local FCOE Priority Map priority TLVs.
Application Priority TLV: Priority bitmap used by the local DCBX port in ISCSI advertisements in application
Local ISCSI Priority Map priority TLVs.
Application Priority TLV: Status of FCoE advertisements in application priority TLVs from the remote peer
Remote FCOE Priority
port: enabled or disabled.
Map
Application Priority TLV: Status of iSCSI advertisements in application priority TLVs from the remote peer
Remote ISCSI Priority
port: enabled or disabled.
Map
PFC TLV Statistics: Input Number of PFC TLVs received.
TLV pkts
PFC TLV Statistics:
Output TLV pkts

Number of PFC TLVs transmitted.

Data Center Bridging | 473

www.dell.com | support.dell.com

Table 13-4.

show interfaces pfc summary Command Example Fields (continued)

Field

Description

PFC TLV Statistics: Error Number of PFC error packets received.
pkts
PFC TLV Statistics: Pause Number of PFC pause frames transmitted.
Tx pkts
PFC TLV Statistics: Pause Number of PFC pause frames received.
Rx pkts

show interface pfc statistics
Displays counters for the PFC frames received and transmitted (by dot1p priority class) on an interface.

Syntax
Parameters

Command Mode
Command
History

Example

show interface port-type slot/port pfc statistics
port-type

Enter the port type.

slot/port

Enter the slot/port number.

INTERFACE
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

FTOS#show interfaces te 0/0
Interface TenGigabitEthernet
Priority Received PFC Frames
-------- ------------------0
0
1
0
2
0
3
0
4
0
5
0
6
0
7
0

pfc statistics
0/0
Transmitted PFC Frames
---------------------0
0
0
0
0
0
0
0

show qos dcb-input
Displays the PFC configuration in a DCB input policy.

Syntax
Parameters

Command Mode

474

|

show qos dcb-input [dcb-input-policy-name]
dcb-input-policyname

EXEC PRIVILEGE

Data Center Bridging

Enter the PFC profile.

Command
History

Example

Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

FTOS(conf)# show qos dcb-input
dcb-input pfc-profile
pfc link-delay 32
pfc priority 0-1
dcb-input pfc-profile1
no pfc mode on
pfc priority 6-7

show qos dcb-output
Displays the ETS configuration in a DCB output policy.

Syntax
Parameters
Command Mode
Command
History

Example

show qos dcb-output [ets-profile]
[ets-profile]

Enter the ETS profile.

EXEC PRIVILEGE
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

FTOS# show qos dcb-output
dcb-output ets
priority-group san qos-policy san
priority-group ipc qos-policy ipc
priority-group lan qos-policy lan

show qos priority-groups
Displays the ETS priority groups configured on the switch, including the 802.1p priority classes and ID
of each group.
Syntax
Command Mode
Command
History

Example

show qos priority-groups

EXEC PRIVILEGE
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

FTOS#show qos priority-groups
priority-group ipc
priority-list 4
set-pgid 2

Data Center Bridging | 475

www.dell.com | support.dell.com

show stack-unit stack-ports ets detail
Displays the ETS configuration applied to egress traffic on stacked ports, including ETS operational
mode on each unit and the configurated priority groups with dot1p priorities, bandwidth allocation, and
scheduler type.
Syntax
Parameters

Command Mode
Command
History

Example

show stack-unit {all | stack-unit} stack-ports {all | port-number} ets detail
stack-unit

Enter the stack unit identification.

port-number

Enter the port number.

EXEC PRIVILEGE
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

FTOS(conf)# show stack-unit all

stack-ports all ets details

Stack unit 0 stack port all
Max Supported TC Groups is 4
Number of Traffic Classes is 1
Admin mode is on
Admin Parameters:
-------------------Admin is enabled
TC-grp
Priority#
Bandwidth
TSA
-----------------------------------------------0
0,1,2,3,4,5,6,7
100%
ETS
1
2
3
4
5
6
7
8
Stack unit 1 stack port all
Max Supported TC Groups is 4
Number of Traffic Classes is 1
Admin mode is on
Admin Parameters:
-------------------Admin is enabled
TC-grp
Priority#
Bandwidth
TSA
-----------------------------------------------0
0,1,2,3,4,5,6,7
100%
ETS
1
2
3
4
5
6
7
8
-

476

|

Data Center Bridging

show stack-unit stack-ports pfc detail
Displays the PFC configuration applied to ingress traffic on stacked ports, including PFC operational
mode on each unit with the configured priorities, link delay, and number of pause packets sent and
received.
Syntax
Parameters

Command Mode
Command
History

Example

show stack-unit {all | stack-unit} stack-ports {all | port-number} pfc detail
stack-unit

Enter the stack unit.

port-number

Enter the port number.

EXEC PRIVILEGE
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

FTOS(conf)# show stack-unit all

stack-ports all pfc details

stack unit 0 stack-port all
Admin mode is On
Admin is enabled, Priority list is 4-5
Local is enabled, Priority list is 4-5
Link Delay 45556 pause quantum
0 Pause Tx pkts, 0 Pause Rx pkts
stack unit 1 stack-port all
Admin mode is On
Admin is enabled, Priority list is 4-5
Local is enabled, Priority list is 4-5
Link Delay 45556 pause quantum
0 Pause Tx pkts, 0 Pause Rx pkts

Data Center Bridging | 477

478

|

Data Center Bridging

www.dell.com | support.dell.com

14
Dynamic Host Configuration Protocol
(DHCP)
Overview
Dynamic Host Configuration Protocol (DHCP) is an application layer protocol that
dynamically assigns IP addresses and other configuration parameters to network end-stations
(hosts) based on configuration policies determined by network administrators.
The basic DHCP commands are supported by FTOS on all Dell Force10 platforms, as
indicated by the characters that appear under each of the command headings: e E-Series,
c C-Series, s S-Series, or
.
•
•

Commands to Configure the System to be a DHCP Server
Commands to Configure Secure DHCP

Commands to Configure the System to be a
DHCP Server
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

clear ip dhcp
debug ip dhcp server
default-router
disable
dns-server
domain-name
excluded-address
hardware-address
host
disable
lease
netbios-name-server
netbios-node-type
network
pool

Dynamic Host Configuration Protocol (DHCP) | 479

www.dell.com | support.dell.com

•
•
•
•

show ip dhcp binding
show ip dhcp configuration
show ip dhcp conflict
show ip dhcp server

clear ip dhcp
Reset DHCP counters.

cs
Syntax
Parameters

Command Mode
Default
Command
History

Usage
Information

clear ip dhcp [binding {address} | conflict | server statistics]
binding

Enter this keyword to delete all entries in the binding table.

address

Enter the IP address to clear the binding entry for a single IP address.

conflicts

Enter this keyword to delete all of the log entries created for IP address
conflicts.

server statistics

Enter this keyword to clear all the server counter information.

EXEC Privilege
None
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduced on C-Series and S-Series.

Entering  after clear ip dhcp binding, clears all the IPs from the binding table.

debug ip dhcp server
cs

Display FTOS debugging messages for DHCP.

Syntax

debug ip dhcp server [events | packets]

Parameters

Command Mode
Default
Command
History

480

|

events

Enter this keyword to display DHCP state changes.

packet

Enter this keyword to display packet transmission/reception.

EXEC Privilege
None
Version 8.2.1.0

Introduced on C-Series and S-Series.

Dynamic Host Configuration Protocol (DHCP)

default-router
Assign a default gateway to clients based on address pool.

cs
Syntax
Parameters

Command Mode
Default
Command
History

default-router address [address2...address8]
address

Enter the a list of routers that may be the default gateway for clients on the subnet.
You may specify up to 8. List them in order of preference.

DHCP 
None
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduced on C-Series and S-Series.

disable
Disable DHCP Server.

cs

DHCP Server is disabled by default. Enable the system to be a DHCP server using the no
form of the disable command.
Syntax
Command Mode
Default
Command
History

disable

CONFIGURATION
Disabled
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduced on C-Series and S-Series.

dns-server
Assign a DNS server to clients based on address pool.

cs
Syntax
Parameters

Command Mode
Default

dns-server address [address2...address8]
address

Enter the a list of DNS servers that may service clients on the subnet. You may list up
to 8 servers, in order of preference.

DHCP 
None

Dynamic Host Configuration Protocol (DHCP) | 481

www.dell.com | support.dell.com

Command
History

Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduced on C-Series and S-Series.

domain-name
Assign a domain to clients based on address pool.

cs
Syntax
Parameters

Command Mode
Default
Command
History

domain-name name
name

Give a name to the group of addresses in a pool.

DHCP 
None
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduced on C-Series and S-Series.

excluded-address
Prevent the server from leasing an address or range of addresses in the pool.

cs
Syntax
Parameters

Command Mode
Default
Command
History

excluded-address [address | low-address high-address]
address

Enter a single address to be excluded from the pool.

low-address

Enter the lowest address in a range of addresses to be excluded from
the pool.

high-address

Enter the highest address in a range of addresses to be excluded from
the pool.

DHCP
None
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduced on C-Series and S-Series.

hardware-address
For manual configurations, specify the client hardware address.

cs
Syntax

482

|

hardware-address address

Dynamic Host Configuration Protocol (DHCP)

Parameters

Command Mode
Default
Command
History

address

Enter the hardware address of the client.

DHCP 
None
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduced on C-Series and S-Series.

host
For manual (rather than automatic) configurations, assign a host to a single-address pool.

cs
Syntax
Parameters

Command Mode
Default
Command
History

host address
address/mask

Enter the host IP address and subnet mask.

DHCP 
None
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduced on C-Series and S-Series.

lease
Specify a lease time for the addresses in a pool.

cs
Syntax
Parameters

Command Mode
Default
Command
History

lease {days [hours] [minutes] | infinite}
days

Enter the number of days of the lease.
Range: 0-31

hours

Enter the number of hours of the lease.
Range: 0-23

minutes

Enter the number of minutes of the lease.
Range: 0-59

infinite

Specify that the lease never expires.

DHCP 
24 hours
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduced on C-Series and S-Series.

Dynamic Host Configuration Protocol (DHCP) | 483

www.dell.com | support.dell.com

netbios-name-server
Specify the NetBIOS Windows Internet Naming Service (WINS) name servers, in order of
preference, that are available to Microsoft Dynamic Host Configuration Protocol (DHCP)
clients.

cs

Syntax
Parameters

Command Mode
Default
Command
History

netbios-name-server address [address2...address8]
address

Enter the address of the NETBIOS name server. You may enter up to 8, in
order of preference.

DHCP 
None
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduced on C-Series and S-Series.

netbios-node-type
Specify the NetBIOS node type for a Microsoft DHCP client. Dell Force10 recommends
specifying clients as hybrid.

cs
Syntax
Parameters

Command Mode
Default
Command
History

netbios-node-type type
type

Enter the NETBIOS node type.
Broadcast: Enter the keyword b-node.
Hybrid: Enter the keyword h-node.
Mixed: Enter the keyword m-node.
Peer-to-peer: Enter the keyword p-node.

DHCP 
Hybrid
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduced on C-Series and S-Series.

network
Specify the range of addresses in an address pool.

cs
Syntax
Parameters

484

|

network network/prefix-length
network /prefix-length

Specify a range of addresses.
Prefix-length Range: 17-31

Dynamic Host Configuration Protocol (DHCP)

Command Mode
Default
Command
History

DHCP 
None
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduced on C-Series and S-Series.

pool
Create an address pool.

cs
Syntax
Parameters

Command Mode
Default
Command
History

pool name

Enter the address pool’s identifying name

name

DHCP
None
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduced on C-Series and S-Series.

show ip dhcp binding
cs

Display the DHCP binding table.

Syntax

show ip dhcp binding

Command Mode
Default
Command
History

EXEC Privilege
None
Version 8.2.1.0

Introduced on C-Series and S-Series.

show ip dhcp configuration
cs

Display the DHCP configuration.

Syntax

show ip dhcp configuration [global | pool name]

Parameters

Command Mode

pool name

Display the configuration for a DHCP pool.

global

Display the DHCP configuration for the entire system.

EXEC Privilege

Dynamic Host Configuration Protocol (DHCP) | 485

www.dell.com | support.dell.com

Default
Command
History

None
Version 8.2.1.0

Introduced on C-Series and S-Series.

show ip dhcp conflict
cs

Display the address conflict log.

Syntax

show ip dhcp conflict address

Parameters

Command Mode
Default
Command
History

address

Display a particular conflict log entry.

EXEC Privilege
None
Version 8.2.1.0

Introduced on C-Series and S-Series.

show ip dhcp server
cs

Display the DHCP server statistics.

Syntax

show ip dhcp server statistics

Command Mode
Default
Command
History

EXEC Privilege
None
Version 8.2.1.0

Introduced on C-Series and S-Series.

Commands to Configure Secure DHCP
DHCP as defined by RFC 2131 provides no authentication or security mechanisms. Secure
DHCP is a suite of features that protects networks that use dynamic address allocation from
spoofing and attacks.
•
•
•
•
•
•

486

|

arp inspection
arp inspection-trust
clear ip dhcp snooping
ip dhcp snooping
ip dhcp snooping database
ip dhcp snooping binding

Dynamic Host Configuration Protocol (DHCP)

•
•
•
•
•
•
•

ip dhcp snooping database renew
ip dhcp snooping trust
ip dhcp source-address-validation
ip dhcp snooping vlan
ip dhcp relay information-option
ip dhcp snooping verify mac-address
show ip dhcp snooping

arp inspection
ces

Syntax
Command Modes
Default
Command
History

Related
Commands

Enable Dynamic Arp Inspection (DAI) on a VLAN.

arp inspection

INTERFACE VLAN
Disabled
Version 8.3.7.0

Introduced on S4810

Version 8.3.1.0

Introduced on E-Series.

Version 8.2.1.0

Introduced on C-Series and S-Series

arp inspection-trust

Specify a port as trusted so that ARP frames are not validated against
the binding table.

arp inspection-trust
ces

Syntax
Command Modes

Specify a port as trusted so that ARP frames are not validated against the binding table.

arp inspection-trust

INTERFACE
INTERFACE PORT-CHANNEL

Default
Command
History

Disabled
Version 8.3.7.0

Introduced on S4810

Version 8.3.1.0

Introduced on E-Series.

Version 8.2.1.0

Introduced on C-Series and S-Series

Dynamic Host Configuration Protocol (DHCP) | 487

www.dell.com | support.dell.com

Related
Commands

arp inspection

Enable Dynamic ARP Inspection on a VLAN.

clear ip dhcp snooping
ces

Clear the DHCP binding table.

Syntax

clear ip dhcp snooping binding

Command Modes
Default
Command
History

Related
Commands

EXEC Privilege
None
Version 8.3.1.0

Introduced on E-Series.

Version 7.8.1.0

Introduced on C-Series and S-Series

show ip dhcp snooping

Display the contents of the DHCP binding table.

ip dhcp snooping
ces
Syntax
Command Modes
Default
Command
History

Usage
Information

Enable DHCP Snooping globally.
[no] ip dhcp snooping

CONFIGURATION
Disabled
Version 8.3.1.0

Introduced on E-Series.

Version 8.2.1.0

Introduced on C-Series and S-Series for Layer 2 interfaces.

Version 7.8.1.0

Introduced on C-Series and S-Series on Layer 3 interfaces.

When enabled, no learning takes place until snooping is enabled on a VLAN. Upon disabling
DHCP Snooping the binding table is deleted, and Option 82, IP Source Guard, and Dynamic
ARP Inspection are disabled.
Introduced in FTOS version 7.8.1.0, DHCP Snooping was available for Layer 3 only and
dependent on DHCP Relay Agent (ip helper-address). FTOS version 8.2.1.0 extends DHCP
Snooping to Layer 2, and you do not have to enable relay agent to snoop on Layer 2
interfaces.

Related
Commands

488

|

ip dhcp snooping vlan

Dynamic Host Configuration Protocol (DHCP)

Enable DHCP Snooping on one or more VLANs.

ip dhcp snooping database
ces
Syntax
Parameters

Command Modes
Default
Command
History

Delay writing the binding table for a specified time.
ip dhcp snooping database write-delay minutes
minutes

Range: 5-21600

CONFIGURATION
None
Version 8.3.1.0

Introduced on E-Series.

Version 7.8.1.0

Introduced on C-Series and S-Series

ip dhcp snooping binding
ces

Syntax

Create a static entry in the DHCP binding table.

[no] ip dhcp snooping binding mac address vlan-id vlan-id ip ip-address interface type slot/port
lease number

Parameters

mac address

Enter the keyword mac followed by the MAC address of the host to which
the server is leasing the IP address.

vlan-id vlan-id

Enter the keyword vlan-id followed by the VLAN to which the host
belongs.
Range: 2-4094

ip ip-address

Enter the keyword ip followed by the IP address that the server is leasing.

interface type

Enter the keyword interface followed by the type of interface to which the
host is connected.

•
•
•
•
•

Command Modes

For an 10/100 Ethernet interface, enter the keyword
fastethernet.
For a Gigabit Ethernet interface, enter the keyword
gigabitethernet.
For a SONET interface, enter the keyword sonet.
For a Ten Gigabit Ethernet interface, enter the keyword
tengigabitethernet.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE.

slot/port

Enter the slot and port number of the interface.

lease time

Enter the keyword lease followed by the amount of time the IP address will
be leased.
Range: 1-4294967295

EXEC

Dynamic Host Configuration Protocol (DHCP) | 489

www.dell.com | support.dell.com

EXEC Privilege
Default
Command
History

Related
Commands

None
Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 8.3.1.0

Introduced on E-Series.

Version 7.8.1.0

Introduced on C-Series and S-Series

show ip dhcp snooping

Display the contents of the DHCP binding table.

ip dhcp snooping database renew
ces

Syntax
Command Modes

Renew the binding table.

ip dhcp snooping database renew

EXEC
EXEC Privilege

Default
Command
History

None
Version 8.3.7.0

Introduced on S4810

Version 8.3.1.0

Introduced on E-Series.

Version 7.8.1.0

Introduced on C-Series and S-Series

ip dhcp snooping trust
ces

Syntax
Command Modes
Default
Command
History

490

|

Configure an interface as trusted.

[no] ip dhcp snooping trust

INTERFACE
Untrusted
Version 8.3.7.0

Introduced on S4810

Version 8.3.1.0

Introduced on E-Series.

Version 7.8.1.0

Introduced on C-Series and S-Series

Dynamic Host Configuration Protocol (DHCP)

ip dhcp source-address-validation
ces

Syntax
Parameters

Command Modes
Default
Command
History

Usage
Information

Enable IP Source Guard.

[no] ip dhcp source-address-validation [ipmac]

ipmac

Enable IP+MAC Source Address Validation (Not available on E-Series).

INTERFACE
Disabled
Version 8.3.7.0

Introduced on S4810

Version 8.3.1.0

Introduced on E-Series.

Version 8.2.1.0

Added keyword ipmac.

Version 7.8.1.0

Introduced on C-Series and S-Series

You must allocate at least one FP block to ipmacacl before you can enable IP+MAC Source
Address Validation.
1. Use the command cam-acl l2acl from CONFIGURATION mode
2. Save the running-config to the startup-config
3. Reload the system.

ip dhcp snooping vlan
ces
Syntax
Parameters

Command Modes
Default
Command
History

Usage
Information
Related
Commands

Enable DHCP Snooping on one or more VLANs.
[no] ip dhcp snooping vlan name
name

Enter the name of a VLAN on which to enable DHCP Snooping.

CONFIGURATION
Disabled
Version 8.3.1.0

Introduced on E-Series.

Version 7.8.1.0

Introduced on C-Series and S-Series

When enabled the system begins creating entries in the binding table for the specified
VLAN(s). Note that learning only happens if there is a trusted port in the VLAN.
ip dhcp snooping trust

Configure an interface as trusted.

Dynamic Host Configuration Protocol (DHCP) | 491

www.dell.com | support.dell.com

ip dhcp relay information-option
ces
Enable Option 82.
Syntax
Parameters

Command Modes
Default
Command
History

ip dhcp relay information-option [remote-id | trust-downstream]

remote-id

Configure the system to enable remote-id string in Option 82.

trust-downstream

Configure the system to trust Option 82 when it is received from the
previous-hop router.

CONFIGURATION
Disabled
Version 8.3.5.3.

Introduced on S55.

Version 8.3.3.8

Introduced on S60.

Version 8.3.7.0

Introduced on S4810.

Version 8.3.1.0

Introduced on E-Series.

Version 7.8.1.0

Introduced on C-Series and S-Series.

show ip dhcp snooping
ces
Syntax
Parameters

Command Modes

Display the contents of the DHCP binding table or display the interfaces configured with IP
Source Guard.
show ip dhcp snooping [binding | source-address-validation]
binding

Display the binding table.

source-address-validation

Display the interfaces configured with IP Source Guard.

EXEC
EXEC Privilege

Default
Command
History

Related
Commands

492

|

None
Version 8.3.1.0

Introduced on E-Series.

Version 7.8.1.0

Introduced on C-Series and S-Series

clear ip dhcp snooping

Dynamic Host Configuration Protocol (DHCP)

Clear the contents of the DHCP binding table.

ip dhcp snooping verify mac-address
ces
Syntax
Command Modes
Default
Command
History

Validate a DHCP packet’s source hardware address against the client hardware address field
(CHADDR) in the payload.
[no] ip dhcp snooping verify mac-address

CONFIGURATION
Disabled
Version 8.3.1.0

Introduced on E-Series.

Version 8.2.1.0

Introduced on C-Series and S-Series

Dynamic Host Configuration Protocol (DHCP) | 493

www.dell.com | support.dell.com
494

|

Dynamic Host Configuration Protocol (DHCP)

15
Equal Cost Multi-Path
Overview
The characters that appear below command headings indicate support for the associated Dell
Force10 platform as indicated by the characters that appear under each of the command
headings: e E-Series, c C-Series, s S-Series, or
.

Commands
The ECMP commands are:
•
•
•
•
•
•
•
•
•

ecmp-group
hash-algorithm
hash-algorithm ecmp
hash-algorithm d
ip ecmp-deterministic
ip ecmp-group
ipv6 ecmp-deterministic
link-bundle-monitor enable
link-bundle-distribution trigger-threshold

ecmp-group
Provides a mechanism to monitor traffic distribution on an ECMP link bundle. A system log
is generated when the standard deviation of traffic distribution on a member link exceeds a
defined threshold.
Syntax

ecmp-group ecmp-group-id

To remove the selected interface, use the ecmp-group no interface command.
To disable link bundle monitoring, use the ecmp-group no link-bundle-monitor command.

Equal Cost Multi-Path | 495

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes

ecmp-group ID

Enter the identifier number for the ECMP group.
Range: 2 to 64.

interface

Enter the following keywords and slot/port to add the interface to the
ECMP group.
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.
• For a LAG interface, enter the keyword port-channel followed by the
slot/port information.
Range: 1 to 128.

Off
CONFIGURATION
CONFIGURATION ECMP-GROUP

Command
History
Usage
Information

]

Version 8.3.10.0

Introduced on S4810

Using the Configuration command mode, create an ECMP group ID. Interfaces can then be
assigned to the ECMP group using the CONFIGURATION ECMP-GROUP command mode.
Link bundle monitoring can be enabled on the port-channel configuration using the
CONFIGURATION ECMP-GROUP command mode.

hash-algorithm
Change the hash algorithm used to distribute traffic flows across a Port Channel. The ECMP,
LAG, and line card options are supported only on the E-Series TeraScale and ExaScale
chassis.

e

Syntax

hash-algorithm {algorithm-number | {ecmp {checksum | crc | xor} [number] lag {checksum | crc
| xor} [number] nh-ecmp {checksum | crc | xor}[number] linecard number ip-sa-mask value
ip-da-mask value}

To return to the default hash algorithm, use the no hash-algorithm command.
To return to the default Equal-cost Multipath Routing (ECMP) hash algorithm, use the no
hash-algorithm ecmp algorithm-value command.
To remove the hash algorithm on a particular line card, use the no hash-algorithm linecard
number command.

496

|

Equal Cost Multi-Path

Parameters

algorithm-number

Enter the algorithm number.
Range: 0 to 47

ecmp hash algorithm

TeraScale and ExaScale Only: Enter the keyword ecmp followed by the
ECMP hash algorithm value.
Range: 0 to 47

value

Defaults

lag hash algorithm
value

TeraScale and ExaScale Only: Enter the keyword lag followed by the
LAG hash algorithm value.
Range: 0 to 47

nh-ecmp hash
algorithm value

(OPTIONAL) Enter the keyword nh-ecmp followed by the ECMP hash
algorithm value.

linecard number

(OPTIONAL) TeraScale and ExaScale Only: Enter the keyword
linecard followed by the linecard slot number.
Range: 0 to 13 on an E1200/E1200i, 0 to 6 on an E600/E600i, and 0 to 5
on an E300

ip-sa-mask value

(OPTIONAL) Enter the keyword ip-sa-mask followed by the ECMP/
LAG hash mask value.
Range: 0 to FF
Default: FF

ip-da-mask value

(OPTIONAL) Enter the keyword ip-da-mask followed by the ECMP/
LAG hash mask value.
Range: 0 to FF
Default: FF

0 for hash-algorithm value on TeraScale and ExaScale
IPSA and IPDA mask value is FF for line card

Command Modes
Command
History

Usage
Information

CONFIGURATION
Version 8.3.10.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Added nh-ecmp option

Version 7.7.1.1

Added nh-ecmp option

Version 6.5.1.0

Added support for the line card option on TeraScale only

Version 6.3.1.0

Added the support for ECMP and LAG on TeraScale only

Set the default hash-algorithm method on ExaScale systems to ensure CRC is not used for
LAG. For example, hash-algorithm ecmp xor lag checksum nh-ecmp checksum
To achieve the functionality of hash-align on the ExaScale platform, do not use CRC as a
hash-algorithm method.
The hash value calculated with the hash-algorithm command is unique to the entire chassis.
The hash algorithm command with the line card option changes the hash for a particular line
card by applying the mask specified in the IPSA and IPDA fields.

Equal Cost Multi-Path | 497

www.dell.com | support.dell.com

The line card option is applicable with the lag-hash-align microcode only (refer to
cam-profile (Config)). Any other microcode returns an error message as follows:
Message 1 FTOS(conf)#hash-algorithm linecard 5 ip-sa-mask ff ip-da-mask ff
Message 2 % Error: This command is not supported in the current microcode configuration.
In addition, the linecard number ip-sa-mask value ip-da-mask value option has the following
behavior to maintain bi-directionality:
•
•

When hashing is done on both IPSA and IPDA, the ip-sa-mask and ip-da-mask
values must be equal. (Single Linecard)
When hashing is done only on IPSA or IPDA, FTOS maintains bi-directionality
with masks set to XX 00 for line card 1 and 00 XX for line card 2 (ip-sa-mask
and ip-da-mask). The mask value must be the same for both line cards when
using multiple line cards as ingress (where XX is any value from 00 to FF for both
line cards). For example, assume traffic is flowing between linecard 1 and
linecard 2:

Message 3 hash-algorithm linecard 1 ip-sa-mask aa ip-da-mask 00
Message 4 hash-algorithm linecard 2 ip-sa-mask 00 ip-da-mask aa
The different hash algorithms are based on the number of Port Channel members and packet
values. The default hash algorithm (number 0) yields the most balanced results in various test
scenarios, but if the default algorithm does not provide a satisfactory distribution of traffic,
then use the hash-algorithm command to designate another algorithm.
When a Port Channel member leaves or is added to the Port Channel, the hash algorithm is
recalculated to balance traffic across the members.
On TeraScale if the keyword ECMP or LAG is not entered, FTOS assumes it to be common for
both. If the keyword ECMP or LAG is entered separately, both should fall in the range of 0 to
23 or 24 to 47 since compression enable/disable is common for both.
TeraScale and ExaScale support the range 0-47. The default for ExaScale is 24..

0-11

Compression Enabled
rotate [0 - 11]

12 - 23
24 - 35
36 - 47

498

|

Equal Cost Multi-Path

Compression Enabled
shift [0 - 11]
Compression Disabled
rotate [0 - 11]
Compression Disabled
shift [0 - 11]

Related
Commands

load-balance (E-Series)

Change the traffic balancing method.

hash-algorithm ecmp
cs

Change the hash algorithm used to distribute traffic flows across an ECMP (equal-cost
multipath routing) group.

Syntax

hash-algorithm ecmp {crc-upper} | {dest-ip} | {lsb}

To return to the default hash algorithm, use the no hash-algorithm ecmp command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

crc-upper

Uses the upper 32 bits of the key for the hash computation
Default: crc-lower

dest-ip

Uses the destination IP for ECMP hashing
Default: enabled

lsb

Returns the LSB of the key as the hash
Default: crc-lower

crc-lower, dest-ip enabled

CONFIGURATION
Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

The hash value calculated with the hash-algorithm command is unique to the entire chassis.
The default ECMP hash configuration is crc-lower. This takes the lower 32 bits of the hash
key to compute the egress port and is the “fall-back” configuration if the user hasn’t
configured anything else.
The different hash algorithms are based on the number of ECMP group members and packet
values. The default hash algorithm yields the most balanced results in various test scenarios,
but if the default algorithm does not provide satisfactory distribution of traffic, then use this
command to designate another algorithm.
When a member leaves or is added to the ECMP group, the hash algorithm is recalculated to
balance traffic across the members.

Related
Commands

load-balance (C-Series and
S-Series)

hash-algorithm d
e
Syntax

Select the d value for the ECMP, LAG, and NH hashing algorithm.
hash-algorithm d value [linecard slot] [port-set number]

Equal Cost Multi-Path | 499

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes
Command
History
Usage
Information

d value

Enter the keyword followed by the d value.
Range: 0 to 4095

linecard slot

Enter the keyword linecard followed by the linecard slot number.

port-set number

Enter the keyword port-set followed by the linecard port-pipe
number.

None
CONFIGURATION
Version 8.3.1.0

Introduced on E-Series.

Deterministic ECMP sorts ECMPs in order even though RTM provides them in a random
order. However, the hash algorithm uses as a d the lower 12 bits of the chassis MAC, which
yields a different hash result for every chassis. This means that for a given flow, even though
the prefixes are sorted, two unrelated chassis will select different hops.
FTOS provides a CLI-based solution for modifying the hash d to ensure that on each
configured system, the ECMP selection is same. When configured, the same d is set for
ECMP, LAG, and NH, and is used for incoming traffic only.
Note: While the d is stored separately on each port-pipe, the same d is used across
all CAMs.
Note: You cannot separate LAG and ECMP, but you can use different algorithms
across chassis with the same d. If LAG member ports span multiple port-pipes and
line cards, set the d to the same value on each port-pipe to achieve deterministic
behavior.
Note: If the hash algorithm configuration is removed. Hash d will not go to original
factory default setting.

ip ecmp-deterministic
e

Deterministic ECMP Next Hop arranges all ECMPs in order before writing them into the
CAM. For example, suppose the RTM learns 8 ECMPs in the order that the protocols and
interfaces came up. In this case, the FIB and CAM sort them so that the ECMPs are always
arranged.This implementation ensures that every chassis having the same prefixes orders the
ECMPs the same.
With 8 or less ECMPs, the ordering is lexicographic and deterministic. With more than 8
ECMPs, ordering is deterministic, but it is not in lexicographic order.

Syntax
Defaults
Command Modes

500

|

ip ecmp-deterministic

Disabled
CONFIGURATION

Equal Cost Multi-Path

Command
History
Usage
Information

Version 8.3.1.0

Introduced on E-Series.

After enabling IPv6 Deterministic ECMP, traffic loss occurs for a few milliseconds while
FTOS sorts the CAM entries.

ipv6 ecmp-deterministic
e

Deterministic ECMP Next Hop arranges all ECMPs in order before writing them into the
CAM. For example, suppose the RTM learns 8 ECMPs in the order that the protocols and
interfaces came up. In this case, the FIB and CAM sort them so that the ECMPs are always
arranged. This implementation ensures that every chassis having the same prefixes orders the
ECMPs the same.
With 8 or less ECMPs, the ordering is lexicographic and deterministic. With more than 8
ECMPs, ordering is deterministic but it is not in lexicographic order.

Syntax
Defaults
Command Modes
Command
History
Usage
Information

ipv6 ecmp-deterministic

Disabled
CONFIGURATION
Version 8.3.1.0

Introduced on E-Series.

After enabling IPv6 Deterministic ECMP, traffic loss occurs for a few milliseconds while
FTOS sorts the CAM entries.

ip ecmp-group
Enable and specify the maximum number of ecmp that the L3 CAM hold for a route, By
default, when maximum paths are not configured, the CAM can hold a maximum of 16 ecmp
per route.
Syntax

ip ecmp-group {maximum-paths | {number} {path-fallback}

To negate a command, use the no command. For example no ip ecmp-group maximum-paths
{number}
Parameters

Defaults
Command Modes

maximum-paths

Specify the maximum number of ecmp for a route.
Range: 2 to 64

path-fallback

Use the keyword path-fallback to enable this feature. If the feature is
enabled, re-enter this keyword to disable the feature.

16
CONFIGURATION

Equal Cost Multi-Path | 501

www.dell.com | support.dell.com

Command
History

Version 8.3.10.0

Introduced on S4810

Usage
Information

You must save the new ECMP settings to the startup-config (write-mem) then reload the
system for the new settings to take effect.

Related
Commands

show ip cam stack-unit

Display content-addressable memory (CAM) entries for an S-Series
switch.

link-bundle-monitor enable
Provides a mechanism to enable monitoring of traffic distribution on an ECMP link bundle.
Syntax

link-bundle-monitor enable

To exit from ecmp group mode, use the exit command.
Command Modes

ECMP-GROUP
PORT-CHANNEL INTERFACE

Command
History

Version 8.3.10.0

Introduced on S4810

link-bundle-distribution trigger-threshold
Provides a mechanism to set the threshold to trigger when traffic distribution will begin being
monitored on an ECMP link bundle.
Syntax

link-bundle-distribution trigger-threshold [percent]

To exit from ecmp group mode, use the exit command.
Parameters

percent

Command Modes

EXEC Privilege

Command
History

Version 8.3.10.0

Indicate the threshold value when traffic distribution will start being
monitored on an ECMP link bundle.
Range: 1 to 90%
Default: 60%

Introduced on S4810

show config
Display the ECMP configuration.

502

|

Equal Cost Multi-Path

Syntax
Command Modes
Command
History
Related
Commands

show config
CONFIGURATION-ECMP-GROUP
Version 8.3.10.0
show running-config
ecmp-group

Introduced on S4810

Display interfaces, LAG, or LAG link bundles being monitored
for uneven traffic distribution

show link-bundle distribution
Display the link-bundle distribution for the interfaces in the bundle, type of bundle (LAG or
ECMP) and the most recently calculated interface utilization (either bytes per second rate or
maximum rate) for each interface.
Syntax
Command Modes
Example

show link-bundle-distribution
EXEC Privilege
FTOS#show link-bundle-distribution
Link-bundle trigger threshold - 60
ECMP bundle - 5
Interface
Te 0/4
Te 0/3

Command
History

Version 8.3.10.0

Utilization[In Percent] - 0
Line Protocol
Up
Up

Alarm State - Inactive

Utilization[In Percent]
5
30

Introduced on S4810.

Equal Cost Multi-Path | 503

504

|

Equal Cost Multi-Path

www.dell.com | support.dell.com

16
FIP Snooping
Overview
In a converged Ethernet network, an MXL Switch or
can operate as an intermediate Ethernet
bridge to snoop on Fibre Channel over Ethernet Initialization Protocol (FIP) packets during the login
process on Fibre Channel over Ethernet (FCoE) forwarders (FCFs). Acting as a transit FIP snooping
bridge, the switch uses dynamically-created ACLs to permit only authorized FCoE traffic to be
transmitted between an FCoE end-device and an FCF.
The following FTOS commands are used to configure and verify the FIP snooping feature on the
:

FIP
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

clear fip-snooping database interface vlan
clear fip-snooping statistics
debug fip snooping
feature fip-snooping
fip-snooping enable
fip-snooping fc-map
fip-snooping port-mode fcoe-trusted
fip-snooping port-mode fcf
show fip-snooping config
show fip-snooping enode
show fip-snooping fcf
show fip-snooping sessions
show fip-snooping statistics
show fip-snooping system
show fip-snooping vlan

clear fip-snooping database interface vlan
Clear FIP snooping information on a VLAN for a specified FCoE MAC address, ENode MAC address,
or FCF MAC address, and remove the corresponding ACLs generated by FIP snooping.
Syntax

clear fip-snooping database interface vlan {vlan-id} enode {enode-mac-address} | fcf
{fcf-mac-address} | session {session-mac-address}

FIP Snooping | 505

www.dell.com | support.dell.com

Parameters

enode-mac-address

Enter the ENode MAC address to be cleared of FIP snooping information.

fcf-mac-address

Enter the FCF MAC address to be cleared of FIP snooping information.

session-mac-address

Enter the MAC address for the session to be cleared of FIP snooping information.

Command Modes

EXEC Privilege

Command
History

Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

clear fip-snooping statistics
Clears the statistics on the FIP packets snooped on all VLANs, a specified VLAN, or a specified port
interface.
Syntax

Parameters

clear fip-snooping statistics [interface vlan vlan-id | interface port-type port/slot | interface
port-channel port-channel-number]
vlan-id

Enter the VLAN ID of the FIP packet statistics to be cleared.

port-type port/slot

Enter the port-type and slot number of the FIP packet statistics to be cleared.

port-channelnumber]

Enter the port channel number of the FIP packet statistics to be cleared.

Command Modes

EXEC Privilege

Command
History

Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

debug fip snooping
Enable debugging on FIP Snooping.

Syntax
Parameters

Command Modes

506

|

FIP Snooping

debug fip-snooping [all | acl | error | ifm | info | ipc | rx]
all

Enter the keyword all to enable debugging on all the options.

acl

Enter the keyword acl for ACL-specific debugging

error

Enter the keyword error for error-specific debugging

ifm

Enter the keyword ifm for IFM-specific debugging

info

Enter the keyword info for information-specific debugging

ipc

Enter the keyword ipc for IPC-specific debugging

rx

Enter the keyword rx for debugging received packets

EXEC Privilege

Command
History

Version 8.3.12.0

Introduced on the S4810.

feature fip-snooping
Enable the FIP snooping feature on a switch.

Syntax

feature fip-snooping
To disable the FIP snooping feature, use the no feature fip-snooping command.

Defaults
Command Modes
Command
History

Disabled.
CONFIGURATION
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

fip-snooping enable
Enable FIP snooping on all VLANs or on a specified VLAN.

Syntax

fip-snooping enable

To disable the FIP snooping feature on all or a specified VLAN, use the no fip-snooping enable
command.
Defaults
Command Modes

Command
History

Usage
Information

FIP snooping is disabled on all VLANs.
CONFIGURATION
VLAN INTERFACE
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

The maximum number of FCFs supported per FIP snooping-enabled VLAN is four. The maximum
number of FIP snooping sessions supported per ENode server is 16.

fip-snooping fc-map
Configure the FC-MAP value used by FIP snooping on all VLANs.

Syntax

fip-snooping fc-map fc-map-value

To remove the configured FM-MAP value, use the no fip-snooping fc-map command.

FIP Snooping | 507

www.dell.com | support.dell.com

Parameters

Defaults
Command Mode

Command
History

fc-map-value

Enter the FC-MAP value used by FIP snooping.
The range is from 0EFC00 to 0EFCFF.

0x0EFC00
CONFIGURATION
VLAN INTERFACE
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

fip-snooping port-mode fcoe-trusted
Configure the port for bridge-to-bridge links.

Syntax

fip-snooping port-mode fcoe-trusted
To remove the bridge-to-bridge link configuration from the port, use the no fip-snooping port-mode
fcoe-trusted command.

Command Modes
Command
History

Usage
Information

INTERFACE
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

The maximum number of FCoE VLANs supported on the switch is eight.

fip-snooping port-mode fcf
Configure the port for bridge-to-FCF links.

Syntax

fip-snooping port-mode fcf
To disable the bridge-to-FCF link on a port, use the no fip-snooping port-mode fcf command.

Command Modes
Command
History

Usage
Information

508

|

FIP Snooping

INTERFACE
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

The maximum number of FCFs supported per FIP snooping-enabled VLAN is four.

show fip-snooping config
Display the FIP snooping status and configured FC-MAP values.

Syntax
Command Mode

Example

show fip-snooping config

EXEC
EXEC Privilege
FTOS# show fip-snooping config
FIP Snooping Feature enabled Status: Enabled
FIP Snooping Global enabled Status: Enabled
Global FC-MAP Value: 0X0EFC00
FIP Snooping enabled VLANs
VLAN
Enabled
FC-MAP
----------------100
TRUE
0X0EFC00

Command
History

Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

show fip-snooping enode
Display information on the ENodes in FIP-snooped sessions, including the ENode interface and MAC
address, FCF MAC address, VLAN ID and FC-ID.
Syntax
Parameters

Command Mode

Command
History

Example

show fip-snooping enode [enode-mac-address]
enode-macaddress

Enter the MAC address of the ENodes to be displayed.

EXEC
EXEC Privilege
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

FTOS# show fip-snooping enode
Enode MAC
Enode Interface
----------------------d4:ae:52:1b:e3:cd
Te 0/11

Table 16-1.

FCF MAC
------54:7f:ee:37:34:40

VLAN
---100

FC-ID
----62:00:11

show fip-snooping enode Command Field Description

Field

Description

ENode MAC

MAC address of the ENode

ENode Interface

Slot/ port number of the interface connected to the ENode.

FCF MAC

MAC address of the FCF

FIP Snooping | 509

www.dell.com | support.dell.com

Table 16-1.

show fip-snooping enode Command Field Description (continued)

Field

Description

VLAN

VLAN ID number used by the session

FC-ID

Fibre Channel session ID assigned by the FCF.

show fip-snooping fcf
Display information on the FCFs in FIP-snooped sessions, including the FCF interface and MAC
address, FCF interface, VLAN ID, FC-MAP value, FKA advertisement period, and number of ENodes
connected.
Syntax
Parameters
Command Mode

Command
History

Example

show fip-snooping fcf [fcf-mac-address]
fcf-mac-address

Enter the MAC address of the FCF to be displayed.

EXEC
EXEC Privilege
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

FTOS# show fip-snooping fcf
FCF MAC
FCF Interface
------------------54:7f:ee:37:34:40
Po 22

VLAN
---100

FC-MAP
-----0e:fc:00

FKA_ADV_PERIOD
-------------4000

No. of Enodes
------------2

Table 16-2 lists the show fip-snooping fcf command field descriptions.
Table 16-2.

510

|

FIP Snooping

show fip-snooping fcf Command Field Descriptions

Field

Description

FCF MAC

MAC address of the FCF

FCF Interface

Slot/port number of the interface to which the FCF is connected.

VLAN

VLAN ID number used by the session

FC-MAP

FC-Map value advertised by the FCF.

ENode Interface

Slot/ number of the interface connected to the ENode.

FKA_ADV_PERIOD

Period of time (in milliseconds) during which FIP keep-alive
advertisements are transmitted.

No of ENodes

Number of ENodes connected to the FCF

FC-ID

Fibre Channel session ID assigned by the FCF.

show fip-snooping sessions
Display information on FIP-snooped sessions on all VLANs or a specified VLAN, including the
ENode interface and MAC address, the FCF interface and MAC address, VLAN ID, FCoE MAC
address and FCoE session ID number (FC-ID), worldwide node name (WWNN) and the worldwide
port name (WWPN).
Syntax
Parameters
Command Mode

Command
History

Example

show fip-snooping sessions [interface vlan vlan-id]
vlan-id

Enter the vlan-id of the specified VLAN to be displayed.

EXEC
EXEC Privilege
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

Enode MAC

Enode Intf

-----------------00:00:c9:f1:e1:37 Te 0/28
00:c0:dd:12:c0:05 Te 1/26

FCF MAC

FCF Intf

VLAN

FCoE MAC

FC-ID

Port WWPN

Port WWNN

------------------------------------------54:7f:ee:34:77:4e Te 1/47
111
0e:fc:00:b5:00:07 b5:00:07 10:00:00:00:c9:f1:e1:37 20:00:00:00:c9:f1:e1:37
54:7f:ee:34:77:4e Te 1/47
111
0e:fc:00:b5:00:75 b5:00:75 21:00:00:c0:dd:12:c0:05 20:00:00:c0:dd:12:c0:05

Table 16-3 lists the show fip-snooping sessions command field descriptions.
Table 16-3.

show fip-snooping sessions Command Field Description

Field

Description

ENode MAC

MAC address of the ENode.

ENode Interface

Slot/ port number of the interface connected to the ENode.

FCF MAC

MAC address of the FCF.

FCF Interface

Slot/ port number of the interface to which the FCF is connected.

VLAN

VLAN ID number used by the session.

FCoE MAC

MAC address of the FCoE session assigned by the FCF.

FC-ID

Fibre Channel ID assigned by the FCF.

Port WWPN

Worldwide port name of the CNA port.

Port WWNN

Worldwide node name of the CNA port.

show fip-snooping statistics
Display statistics on the FIP packets snooped on all interfaces, including VLANs, physical ports, and
port channels.
Syntax

Parameters

show fip-snooping statistics [interface vlan vlan-id | interface port-type port/slot | interface
port-channel port-channel-number]
vlan-id

Enter the VLAN ID of the FIP packet statistics to be displayed.

FIP Snooping | 511

www.dell.com | support.dell.com

Command Mode

Command
History

Example

port-type port/slot

Enter the port-type and slot number of the FIP packet statistics to be displayed.

port-channelnumber]

Enter the port channel number of the FIP packet statistics to be displayed.

EXEC
EXEC Privilege
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

FTOS# show fip-snooping statistics interface vlan 100
Number of Vlan Requests
Number of Vlan Notifications
Number of Multicast Discovery Solicits
Number of Unicast Discovery Solicits
Number of FLOGI
Number of FDISC
Number of FLOGO
Number of Enode Keep Alive
Number of VN Port Keep Alive
Number of Multicast Discovery Advertisement
Number of Unicast Discovery Advertisement
Number of FLOGI Accepts
Number of FLOGI Rejects
Number of FDISC Accepts
Number of FDISC Rejects
Number of FLOGO Accepts
Number of FLOGO Rejects
Number of CVL
Number of FCF Discovery Timeouts
Number of VN Port Session Timeouts
Number of Session failures due to Hardware Config
FTOS(conf)#

:0
:0
:2
:0
:2
:16
:0
:9021
:3349
:4437
:2
:2
:0
:16
:0
:0
:0
:0
:0
:0
:0

FTOS# show fip-snooping statistics int tengigabitethernet 0/11
Number of Vlan Requests
:1
Number of Vlan Notifications
:0
Number of Multicast Discovery Solicits
:1
Number of Unicast Discovery Solicits
:0
Number of FLOGI
:1
Number of FDISC
:16
Number of FLOGO
:0
Number of Enode Keep Alive
:4416
Number of VN Port Keep Alive
:3136
Number of Multicast Discovery Advertisement
:0
Number of Unicast Discovery Advertisement
:0
Number of FLOGI Accepts
:0
Number of FLOGI Rejects
:0
Number of FDISC Accepts
:0
Number of FDISC Rejects
:0
Number of FLOGO Accepts
:0
Number of FLOGO Rejects
:0
Number of CVL
:0
Number of FCF Discovery Timeouts
:0
Number of VN Port Session Timeouts
:0
Number of Session failures due to Hardware Config
:0

Example
(port channel)

512

|

FIP Snooping

FTOS# show fip-snooping statistics interface port-channel 22
Number of Vlan Requests
:0
Number of Vlan Notifications
:2
Number of Multicast Discovery Solicits
:0

Number
Number
Number
Number
Number
Number
Number
Number
Number
Number
Number
Number
Number
Number
Number
Number
Number
Number

of
of
of
of
of
of
of
of
of
of
of
of
of
of
of
of
of
of

Unicast Discovery Solicits
FLOGI
FDISC
FLOGO
Enode Keep Alive
VN Port Keep Alive
Multicast Discovery Advertisement
Unicast Discovery Advertisement
FLOGI Accepts
FLOGI Rejects
FDISC Accepts
FDISC Rejects
FLOGO Accepts
FLOGO Rejects
CVL
FCF Discovery Timeouts
VN Port Session Timeouts
Session failures due to Hardware Config

:0
:0
:0
:0
:0
:0
:4451
:2
:2
:0
:16
:0
:0
:0
:0
:0
:0
:0

Table 16-4 lists the show fip-snooping statistics command field descriptions.
Table 16-4.

show fip-snooping statistics Command Fields Description

Field

Description

Number of Vlan Requests

Number of FIP-snooped VLAN request frames received on the
interface

Number of VLAN Notifications

Number of FIP-snooped VLAN notification frames received on
the interface.

Number of Multicast Discovery
Solicits

Number of FIP-snooped multicast discovery solicit frames
received on the interface

Number of Unicast Discovery
Solicits

Number of FIP-snooped unicast discovery solicit frames
received on the interface

Number of FLOGI

Number of FIP-snooped FLOGI request frames received on the
interface

Number of FDISC

Number of FIP-snooped FDISC request frames received on the
interface

Number of FLOGO

Number of FIP-snooped FLOGO frames received on the
interface

Number of ENode Keep Alives

Number of FIP-snooped ENode keep-alive frames received on
the interface

Number of VN Port Keep Alives

Number of FIP-snooped VN port keep-alive frames received on
the interface

Number of Multicast Discovery
Advertisements

Number of FIP-snooped multicast discovery advertisements
received on the interface

Number of Unicast Discovery
Advertisements

Number of FIP-snooped unicast discovery advertisements
received on the interface

Number of FLOGI Accepts

Number of FIP FLOGI accept frames received on the interface

Number of FLOGI Rejects

Number of FIP FLOGI reject frames received on the interface

Number of FDISC Accepts

Number of FIP FDISC accept frames received on the interface

Number of FDISC Rejects

Number of FIP FDISC reject frames received on the interface

FIP Snooping | 513

www.dell.com | support.dell.com

Table 16-4.

show fip-snooping statistics Command Fields Description (continued)

Field

Description

Number of FLOGO Accepts

Number of FIP FLOGO accept frames received on the interface

Number of FLOGO Rejects

Number of FIP FLOGO reject frames received on the interface

Number of CVLs

Number of FIP clear virtual link frames received on the
interface

Number of FCF Discovery
Timeouts

Number of FCF discovery timeouts that occurred on the
interface

Number of VN Port Session
Timeouts

Number of VN port session timeouts that occurred on the
interface

Number of Session failures due to
Hardware Config

Number of session failures due to hardware configuration that
occurred on the interface

show fip-snooping system
Display information on the status of FIP snooping on the switch (enabled or disabled), including the
number of FCoE VLANs, FCFs, ENodes, and currently active sessions.
Syntax
Command Mode

Command
History

Example

show fip-snooping system

EXEC
EXEC Privilege
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

FTOS# show fip-snooping system
Global Mode
FCOE VLAN List (Operational)
FCFs
Enodes
Sessions

:
:
:
:
:

Enabled
1, 100
1
2
17

show fip-snooping vlan
Display information on the FCoE VLANs on which FIP snooping is enabled.

Syntax
Command Mode

Example

show fip-snooping vlan

EXEC
EXEC Privilege
FTOS# show fip-snooping vlan
* = Default VLAN
VLAN
---*1
100

514

|

FIP Snooping

FC-MAP
-----0X0EFC00

FCFs
---1

Enodes
-----2

Sessions
-------17

Command
History

Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

show fips status
Display the FIPs status on the platform.
Note: You must have a license to access this command. For more information, please
contact your Dell Force10 representative.
Syntax

show fips status

Default

None

Command Modes
Command
History

EXEC
Version 8.3.12.0

Introduced on the S4810.

FIP Snooping | 515

516

|

FIP Snooping

www.dell.com | support.dell.com

17
Force10 Resilient Ring Protocol (FRRP)
Overview
Force10 Resilient Ring Protocol (FRRP) is supported on Dell Force10 platforms, as indicated
by the characters that appear under each of the command headings: e E-Series, c
C-Series, s S-Series, or
.
FRRP is a proprietary protocol for that offers fast convergence in a Layer 2 network without
having to run the Spanning Tree Protocol. The Resilient Ring Protocol is an efficient protocol
that transmits a high-speed token across a ring to verify the link status. All the intelligence is
contained in the master node with practically no intelligence required of the transit mode.

Commands
The FRRP commands are:
•
•
•
•
•
•
•
•
•
•

clear frrp
debug frrp
description
disable
interface
member-vlan
mode
protocol frrp
show frrp
timer

Important Points to Remember
•
•
•

FRRP is media- and speed-independent.
FRRP is a Dell Force10 proprietary protocol that does not interoperate with any
other vendor.
Spanning Tree must be disabled on both primary and secondary interfaces before
Resilient Ring protocol is enabled.

Force10 Resilient Ring Protocol (FRRP) | 517

www.dell.com | support.dell.com

•
•
•
•

A VLAN configured as control VLAN for a ring cannot be configured as control
or member VLAN for any other ring.
Member VLANs across multiple rings are not supported in Master nodes.
If multiple rings share one or more member VLANs, they cannot share any links
between them.
Each ring can have only one Master node; all others are Transit nodes.

clear frrp
Clear the FRRP statistics counters.

ce
Syntax
Parameters

Defaults
Command Modes
Command
History

Example

clear frrp [ring-id]
ring-id

(Optional) Enter the ring identification number.
Range: 1 to 255

No default values or behavior
EXEC
Version 8.3.7.0

Introduced for S4810

Version 8.2.1.0

Introduced for the C-Series

Version 7.5.1.0

Introduced

FTOS#clear frrp
Clear frrp statistics counter on all ring [confirm] yes
FTOS#clear frrp 4
Clear frrp statistics counter for ring 4 [confirm] yes
FTOS#

Usage
Information

Executing this command, without the optional ring-id, will clear statistics counters on all the
available rings. FTOS requires a command line confirmation before the command is
executed. This commands clears the following counters:
•
•
•

Related
Commands

hello Rx and Tx counters
Topology change Rx and Tx counters
The number of state change counters

show frrp

Display the Resilient Ring Protocol configuration

debug frrp
ce

518

|

Enable FRRP debugging.

Force10 Resilient Ring Protocol (FRRP)

Syntax

debug frrp {event | packet | detail} [ring-id] [count number]

To disable debugging, use the no debug frrp {event | packet | detail} {ring-id} [count number]
command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

event

Enter the keyword event to display debug information related to ring
protocol transitions.

packet

Enter the keyword packet to display brief debug information related
to control packets.

detail

Enter the keyword detail to display detailed debug information
related to the entire ring protocol packets.

ring-id

(Optional) Enter the ring identification number.
Range: 1 to 255

count number

Enter the keyword count followed by the number of debug outputs.
Range: 1 to 65534

Disabled
CONFIGURATION (conf-frrp)
Version 8.3.7.0

Introduced for the S4810

Version 8.2.1.0

Introduced for the C-Series

Version 7.4.1.0

Introduced

Since the Resilient Ring Protocol can potentially transmit 20 packets per interface, debug
information must be restricted.

description
ce

Enter an identifying description of the ring.

Syntax

description description

To remove the ring description, use the no description description command.
Parameters

Defaults
Command Modes
Command
History

description

Enter a description of the ring.
Maximum: 255 characters

No default values or behavior
CONFIGURATION (conf-frrp)
Version 8.2.1.0

Introduced for the C-Series

Version 7.4.1.0

Introduced

Force10 Resilient Ring Protocol (FRRP) | 519

www.dell.com | support.dell.com

disable
ce

Disable the Resilient Ring Protocol.

Syntax

disable

To enable the Resilient Ring Protocol, use the no disable command.
Defaults
Command Modes
Command
History

Disabled
CONFIGURATION (conf-frrp)
Version 8.2.1.0

Introduced for the C-Series

Version 7.4.1.0

Introduced

interface
ce

Configure the primary, secondary, and control-vlan interfaces.

Syntax

interface {primary interface secondary interface control-vlan vlan-id}

To return to the default, use the no interface {primary interface secondary interface control-vlan
vlan-id} command.
Parameters

520

|

primary interface

Force10 Resilient Ring Protocol (FRRP)

Enter the keyword primary to configure the primary interface followed by
one of the following interfaces and slot/port information:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed
by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed
by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a SONET interface, enter the keyword sonet followed by the slot/
port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.

Defaults
Command Modes
Command
History

Usage
Information

Related
Commands

secondary interface

Enter the keyword secondary to configure the secondary interface
followed by one of the following interfaces and slot/port information:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed
by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed
by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a SONET interface, enter the keyword sonet followed by the slot/
port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.

control-vlan vlan-id

Enter the keyword control-vlan followed by the VLAN ID.
Range: 1 to 4094

No default values or behavior
CONFIGURATION (conf-frrp)
Version 8.2.1.0

Introduced for the C-Series

Version 7.4.1.0

Introduced

This command causes the Ring Manager to take ownership of these two ports after the
configuration is validated by the IFM. Ownership is relinquished for a port only when the
interface does not play a part in any control VLAN, that is, the interface does not belong to
any ring.
show frrp

Display the Resilient Ring Protocol configuration information

member-vlan
Specify the member VLAN identification numbers.

ce
Syntax

member-vlan {vlan-range}

To return to the default, use the no member-vlan [vlan-range] command.
Parameters

Defaults

vlan-range

Enter the member VLANs using comma separated VLAN IDs, a range of
VLAN IDs, a single VLAN ID, or a combination. For example:
Comma separated: 3, 4, 6
Range: 5-10
Combination: 3, 4, 5-10, 8

No default values or behavior

Force10 Resilient Ring Protocol (FRRP) | 521

www.dell.com | support.dell.com

Command Modes

CONFIGURATION (conf-frrp)

Command
History

Version 8.3.7.0

Introduced for the S4810

Version 8.2.1.0

Introduced for the C-Series

Version 7.4.1.0

Introduced

mode
Set the Master or Transit mode of the ring.

ce
Syntax

mode {master | transit}

To reset the mode, use the no mode {master | transit} command.
Parameters

Defaults
Command Modes

master

Enter the keyword master to set the Ring node to Master mode.

transit

Enter the keyword transit to set the Ring node to Transit mode.

Mode None
CONFIGURATION (conf-frrp)

Command
History

Version 8.3.7.0

Introduced for the S4810

Version 8.2.1.0

Introduced for the C-Series

Version 7.4.1.0

Introduced

protocol frrp
Enter the Resilient Ring Protocol and designate a ring identification.

ce
Syntax

protocol frrp {ring-id}

To exit the ring protocol, use the no protocol frrp {ring-id} command.
Parameters

Defaults
Command Modes
Command
History

522

|

ring-id

Enter the ring identification number.
Range: 1 to 255

No default values or behavior
CONFIGURATION
Version 8.3.7.0

Introduced for the S4810

Version 8.2.1.0

Introduced for the C-Series

Version 7.4.1.0

Introduced

Force10 Resilient Ring Protocol (FRRP)

Usage
Information

This command places you into the Resilient Ring Protocol. After executing this command,
the command line prompt changes to conf-frrp.

show frrp
Display the Resilient Ring Protocol configuration.

ce
Syntax
Parameters

Defaults
Command Modes
Command
History

show frrp [ring-id [summary]] | [summary]
ring-id

Enter the ring identification number.
Range: 1 to 255

summary

(OPTIONAL) Enter the keyword summary to view just a
summarized version of the Ring configuration.

No default values or behavior
EXEC
Version 8.3.7.0

Introduced for the S4810

Version 8.2.1.0

Introduced for the C-Series

Version 7.4.1.0

Introduced

Example
(show frrp
summary)

FTOS#show frrp summary

Example
(show frrp
ring-id)

FTOS#show frrp 1
Ring protocol 1 is in Master mode
Ring Protocol Interface:
Primary : GigabitEthernet 0/16 State: Forwarding
Secondary: Port-channel 100 State: Blocking
Control Vlan: 1
Ring protocol Timers: Hello-Interval 50 msec Dead-Interval 150 msec
Ring Master's MAC Address is 00:01:e8:13:a3:19
Topology Change Statistics: Tx:110 Rx:45
Hello Statistics: Tx:13028 Rx:12348
Number of state Changes: 34
Member Vlans: 1000-1009

Ring-ID
State
Mode
Ctrl_Vlan
Member_Vlans
----------------------------------------------------------------2
UP
Master
2
11-20, 25,27-30
31
UP
Transit
31
40-41
50
Down
Transit
50
32
FTOS#

FTOS#

Example
(show frrp ring-id
summary)

Related
Commands

FTOS#show frrp 2 summary
Ring-ID
State
Mode
Ctrl_Vlan
Member_Vlans
----------------------------------------------------------------2
Up
Master
2
11-20, 25, 27-30
FTOS#

protocol frrp

Enter the Resilient Ring Protocol and designate a ring identification

Force10 Resilient Ring Protocol (FRRP) | 523

www.dell.com | support.dell.com

timer
ce

Set the hello or dead interval for the Ring control packets.

Syntax

timer {hello-interval milliseconds}| {dead-interval milliseconds}

To remove the timer, use the no timer {hello-interval [milliseconds]}| {dead-interval milliseconds}
command.
Parameters

hello-interval milliseconds

Enter the keyword hello-interval followed by the time, in
milliseconds, to set the hello interval of the control packets. The
milliseconds must be enter in increments of 50 milliseconds, for
example 50, 100, 150 and so on. If an invalid value is entered, an
error message is generated.
Range: 50 to 2000ms
Default: 500 ms

dead-interval milliseconds

Enter the keyword dead-interval followed by the time, in
milliseconds, to set the dead interval of the control packets.
Range: 50 to 6000ms
Default: 1500ms
Note: The configured dead interval should be at least three times the
hello interval

Defaults
Command Modes
Command
History

Usage
Information

524

|

Default as shown
CONFIGURATION (conf-frrp)
Version 8.2.1.0

Introduced for the C-Series

Version 7.4.1.0

Introduced

The hello interval is the interval at which ring frames are generated from the primary
interface of the master node. The dead interval is the time that elapses before a timeout
occurs.

Force10 Resilient Ring Protocol (FRRP)

18
GARP VLAN Registration (GVRP)
Overview
The basic GVRP commands are supported by FTOS on all Dell Force10 platforms, as
indicated by the characters that appear under each of the command headings: e E-Series,
c C-Series, s S-Series, or
.

Commands
The GVRP commands are:
•
•
•
•
•
•
•
•
•
•
•

clear gvrp statistics
debug gvrp
disable
garp timers
gvrp enable
gvrp registration
protocol gvrp
show config
show garp timers
show gvrp
show gvrp statistics

The GARP (Generic Attribute Registration Protocol) mechanism allows the configuration of
a GARP participant to propagate through a network quickly. A GARP participant registers or
de-registers its attributes with other participants by making or withdrawing declarations of
attributes. At the same time, based on received declarations or withdrawals, GARP handles
attributes of other participants.
GVRP enables a device to propagate local VLAN registration information to other participant
devices and dynamically update the VLAN registration information from other devices. The
registration information updates local databases regarding active VLAN members and
through which port the VLANs can be reached.

GARP VLAN Registration (GVRP) | 525

www.dell.com | support.dell.com

GVRP ensures that all participants on a bridged LAN maintain the same VLAN registration
information. The VLAN registration information propagated by GVRP include both
manually configured local static entries and dynamic entries from other devices.
GVRP participants have the following components:
•
•
•

Important Points to Remember
•
•
•
•
•
•

•
•
•
•

•

•

•

526

The GVRP application
GARP Information Propagation (GIP)
GARP Information Declaration (GID)

|

GVRP is supported on Layer 2 ports only.
All VLAN ports added by GVRP are tagged.
GVRP is supported on untagged ports belonging to a default VLAN, and tagged
ports.
GVRP cannot be enabled on untagged ports belonging to a non-default VLAN
unless native VLAN is turned on.
GVRP requires end stations with dynamic access NICs.
Based on updates from GVRP-enabled devices, GVRP allows the system to
dynamically create a port-based VLAN (unspecified) with a specific VLAN ID
and a specific port.
On a port-by-port basis, GVRP allows the system to learn about GVRP updates
to an existing port-based VLAN with that VLAN ID and IEEE 802.1Q tagging.
GVRP allows the system to send dynamic GVRP updates about your existing
port-based VLAN.
GVRP updates are not sent to any blocked Spanning Tree Protocol (STP) ports.
GVRP operates only on ports that are in the forwarding state.
GVRP operates only on ports that are in the STP forwarding state. If GVRP is
enabled, a port that changes to the STP forwarding state automatically begins to
participate in GVRP. A port that changes to an STP state other than forwarding
no longer participates in GVRP.
VLANs created dynamically with GVRP exist only as long as a GVRP-enabled
device is sending updates. If the devices no longer send updates, or GVRP is
disabled, or the system is rebooted, all dynamic VLANs are removed.
GVRP manages the active topology, not non-topological data such as VLAN
protocols. If a local bridge needs to classify and analyze packets by VLAN
protocols, you must manually configure protocol-based VLANs, and simply rely
on GVRP for VLAN updates. But if the local bridge needs to know only how to
reach a given VLAN, then GVRP provides all necessary information.
The VLAN topologies that GVRP learns are treated differently from VLANs that
are statically configured. The GVRP dynamic updates are not saved in NVRAM,
while static updates are saved in NVRAM. When GVRP is disabled, the system
deletes all VLAN interfaces that were learned through GVRP and leaves
unchanged all VLANs that were manually configured.

GARP VLAN Registration (GVRP)

clear gvrp statistics
ces

Syntax
Parameters

Defaults
Command Modes
Command
History

Related
Commands

Clear GVRP statistics on an interface.

clear gvrp statistics interface interface
interface interface

Enter the following keywords and slot/port or number information:
• For a Fast Ethernet interface, enter the keyword FastEthernet
followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel
followed by a number:
C-Series and S-Series Range: 1 to 128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for
ExaScale.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.

No default values or behavior.
EXEC
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on C, E, and S-Series

show gvrp statistics

Display the GVRP statistics

debug gvrp
ces

Syntax

Enable debugging on GVRP.

debug gvrp {config | events | pdu}

To disable debugging, use the no debug gvrp {config | events | pdu} command.
Parameters

config

Enter the keyword config to enable debugging on the GVRP configuration.

event

Enter the keyword event to enable debugging on the JOIN/LEAVE events.
Not available on S4810

GARP VLAN Registration (GVRP) | 527

www.dell.com | support.dell.com

pdu

Defaults
Command Modes
Command
History

Enter the keyword pdu followed one of the following Interface keywords and
slot/port or number information:
(Not available on S4810)
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by
the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by a
number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed
by the slot/port information.

Disabled
EXEC Privilege
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on C, E, and S-Series

disable
ces

Syntax

Globally disable GVRP.

disable

To re-enable GVRP, use the no disable command.
Defaults
Command Modes
Command
History

Related
Commands

Enabled
CONFIGURATION-GVRP
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on C, E, and S-Series

gvrp enable

Enable GVRP on physical interfaces and LAGs.

protocol gvrp

Access GVRP protocol

garp timers
ces

528

|

Set the intervals (in milliseconds) for sending GARP messages.

GARP VLAN Registration (GVRP)

Syntax

garp timers {join | leave | leave-all}

To return to the previous setting, use the no garp timers {join | leave | leave-all} command.
Parameters

join

Enter the keyword join followed by the number of milliseconds to configure the join
time.
Range: 100 to 147483647 milliseconds
Default: 200 milliseconds
Note: Designate the milliseconds in multiples of 100

leave

Enter the keyword leave followed by the number of milliseconds to configure the leave
time.
Range: 100 to 2147483647 milliseconds
Default: 600 milliseconds
Note: Designate the milliseconds in multiples of 100

leave-all

Enter the keyword leave-all followed by the number of milliseconds to configure the
leave-all time.
Range: 100 to 2147483647 milliseconds
Default: 1000 milliseconds
Note: Designate the milliseconds in multiples of 100

Defaults
Command Modes

Default as above
CONFIGURATION-GVRP

Command
History

Usage
Information

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on C, E, and S-Series

Join Timer—Join messages announce the willingness to register some attributes with other
participants. Each GARP application entity sends a Join message twice, for reliability, and
uses a join timer to set the sending interval.
Leave Timer—Leave announces the willingness to de-register with other participants.
Together with the Join, Leave messages help GARP participants complete attribute
reregistration and de-registration. Leave Timer starts upon receipt of a leave message sent for
de-registering some attribute information. If a join message is not received before the leave
time expires, the GARP application entity removes the attribute information as requested.
Leave All Timer—The Leave All Timer starts when a GARP application entity starts. When
this timer expires, the entity sends a leave-all message so that other entities can re-register
their attribute information. Then, the leave-all time begins again.

Related
Commands

show garp timers

Display the current GARP times

gvrp enable
ces

Enable GVRP on physical interfaces and LAGs.

GARP VLAN Registration (GVRP) | 529

www.dell.com | support.dell.com

Syntax

gvrp enable

To disable GVRP on the interface, use the no gvrp enable command.
Defaults
Command Modes
Command
History

Related
Commands

Disabled
CONFIGURATION-INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on C, E, and S-Series

disable

Globally disable GVRP.

gvrp registration
ces

Syntax

Configure the GVRP register type.

gvrp registration {fixed | normal | forbidden}

To return to the default, use the gvrp register normal command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

fixed

Enter the keyword fixed followed by the VLAN range in a comma
separated VLAN ID set.

normal

Enter the keyword normal followed by the VLAN range in a comma
separated VLAN ID set.
This is the default

forbidden

Enter the keyword forbidden followed by the VLAN range in a
comma separated VLAN ID set.

Default registration is normal
CONFIGURATION-INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on C, E, and S-Series

The fixed registration prevents an interface, configured via the command line to belong to a
VLAN (static configuration), from being un-configured when it receives a Leave message.
Therefore, the registration mode on that interface is fixed.
The normal registration is the default registration. The port’s membership in the VLANs
depends on GVRP. The interface becomes a member of VLANs after learning about the
VLAN through GVRP. If the VLAN is removed from the port that sends GVRP
advertisements to this device, then the port will stop being a member of the VLAN.

530

|

GARP VLAN Registration (GVRP)

The forbidden is used when you do not want the interface to advertise or learn about VLANs
through GVRP.
Related
Commands

show gvrp

Display the GVRP configuration including the registration

protocol gvrp
ces
Syntax
Defaults
Command Modes

Access GVRP protocol — (config-gvrp)#.
protocol gvrp

Disabled
CONFIGURATION

Command
History

Version 7.6.1.0

Related
Commands

disable

Introduced on C, E, and S-Series

Globally disable GVRP.

show config
ces

Syntax
Command Modes
Command
History

Related
Commands

Display the global GVRP configuration.

show config

CONFIGURATION-GVRP
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on C, E, and S-Series

gvrp enable

Enable GVRP on physical interfaces and LAGs.

protocol gvrp

Access GVRP protocol.

show garp timers
ces

Syntax

Display the GARP timer settings for sending GARP messages.

show garp timers

GARP VLAN Registration (GVRP) | 531

www.dell.com | support.dell.com

Defaults
Command Modes

No default values or behavior
EXEC
EXEC Privilege

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on C, E, and S-Series

Example

Related
Commands

FTOS#show garp timers
GARP Timers
Value (milliseconds)
---------------------------------------Join Timer
200
Leave Timer
600
LeaveAll Timer
10000
FTOS#

garp timers

Set the intervals (in milliseconds) for sending GARP messages.

show gvrp
ces

Syntax
Parameters

Defaults
Command Modes

Display the GVRP configuration.

show gvrp [brief | interface]
brief

(OPTIONAL) Enter the keyword brief to display a brief summary of the GVRP
configuration.

interface

(OPTIONAL) Enter the following keywords and slot/port or number
information:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by
the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by a
number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed
by the slot/port information.

No default values or behavior
EXEC
EXEC Privilege

532

|

GARP VLAN Registration (GVRP)

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on C, E, and S-Series

Example

R3#show gvrp brief
GVRP Feature is currently enabled.
Port
GVRP Status
Edge-Port
------------------------------------------------------Gi 3/0
Disabled
No
Gi 3/1
Disabled
No
Gi 3/2
Enabled
No
Gi 3/3
Disabled
No
Gi 3/4
Disabled
No
Gi 3/5
Disabled
No
Gi 3/6
Disabled
No
Gi 3/7
Disabled
No
Gi 3/8
Disabled
No
R3#show gvrp brief

Usage
Information

If no ports are GVRP participants, the message output changes from:
GVRP Participants running on 

to
GVRP Participants running on no ports
Related
Commands

show gvrp statistics

Display the GVRP statistics

show gvrp statistics
ces
Syntax
Parameters

Defaults

Display the GVRP configuration statistics.
show gvrp statistics {interface interface | summary}
interface interface

Enter the keyword interface followed by one of the interface keywords
and slot/port or number information:
• For a Fast Ethernet interface, enter the keyword FastEthernet
followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel
followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.

summary

Enter the keyword summary to display just a summary of the GVRP
statistics.

No default values or behavior

GARP VLAN Registration (GVRP) | 533

www.dell.com | support.dell.com

Command Modes

EXEC
EXEC Privilege

Command
History
Example

Version 7.6.1.0

Introduced on C, E, and S-Series

FTOS#show gvrp statistics int gi 1/0
Join Empty Received: 0
Join In Received: 0
Empty Received: 0
LeaveIn Received: 0
Leave Empty Received: 0
Leave All Received: 40
Join Empty Transmitted: 156
Join In Transmitted: 0
Empty Transmitted: 0
Leave In Transmitted: 0
Leave Empty Transmitted: 0
Leave All Transmitted: 41
Invalid Messages/Attributes skipped: 0
Failed Registrations: 0
FTOS#

Usage
Information

Invalid messages/attributes skipped can occur in the following cases:
•
•
•
•
•
•

The incoming GVRP PDU has an incorrect length.
"End of PDU" was reached before the complete attribute could be parsed.
The Attribute Type of the attribute that was being parsed was not the GVRP VID
Attribute Type (0x01).
The attribute that was being parsed had an invalid attribute length.
The attribute that was being parsed had an invalid GARP event.
The attribute that was being parsed had an invalid VLAN ID. The valid range is 1
- 4095.

A failed registration can occur for the following reasons:
•
•
Related
Commands

534

|

Join requests were received on a port that was blocked from learning dynamic
VLANs (GVRP Blocking state).
An entry for a new GVRP VLAN could not be created in the GVRP database.

show gvrp

GARP VLAN Registration (GVRP)

Display the GVRP configuration

19
High Availability (HA)
Overview
High Availability (HA) in FTOS is configuration synchronization to minimize recovery time
in the event of a Route Processor Module (RPM) failure. The feature is available on the
C-Series and E-Series where noted by these symbols under command headings: c e s and

FTOS on the E-Series supports RPM 1 + 1 redundancy. The Primary RPM performs all
routing and control operations, while the Secondary RPM is online and monitoring the
Primary RPM.
In general, a protocol is defined as “hitless” in the context of an RPM failure/failover, and not
failures of a line card, SFM, or power module. A protocol is defined as hitless if an RPM
failover has no impact on the protocol.
Some protocols must be specifically enabled for HA, and some protocols are only hitless if
related protocols are also enabled as hitless (Refer to the redundancy protocol command).
High Availability is supported on the S-Series S4810
E-Series ExaScale ex with FTOS 8.1.1.0. and later.

with FTOS 8.3.12.0 and

Commands
The HA commands available in FTOS are:
•
•
•
•
•
•
•
•
•
•

patch flash://RUNTIME_PATCH_DIR
process restartable
redundancy auto-failover-limit
redundancy disable-auto-reboot
redundancy force-failover
redundancy primary
redundancy protocol
redundancy reset-counter
redundancy sfm standby
redundancy synchronize

High Availability (HA) | 535

www.dell.com | support.dell.com

•
•
•

show patch
show processes restartable
show redundancy

patch flash://RUNTIME_PATCH_DIR
Insert an In-Service Modular Hot-Fix patch.

e
Syntax

patch flash://RUNTIME_PATCH_DIR/patch-filename

To remove the patch, enter no patch flash://RUNTIME_PATCH_DIR/patch-filename
Defaults
Command Modes
Command
History

Usage
Information

None
CONFIGURATION
Version 8.3.12.0

Introduced on the S4810.

Version 8.2.1.0

Introduced

The patch filename includes the FTOS version, the platform, the cpu, and the process it
affects (FTOS-platform-cpu-process-patchversion.rtp). For example, a patch labeled
7.8.1.0-EH-rp2-l2mgr-1.rtp identifies that this patch applies to FTOS version 7.8.1.0 - E-Series
platform, for RP2, addressing the layer 2 management process, and this is the first version of
this patch.
There is no need to reload or reboot the system when the patch is inserted. The In-Service
Modular patch replaces the existing process code. Once installation is complete, the system
executes the patch code as though it was always there.

Related
Commands

show patch

Display the system patches loaded with the In-Service Modular Hot
Fix Command.

process restartable
Enable a process to be restarted. Restartablility is subject to a maximum restart limit — the
limit is defined as a configured amount of restarts within a configured amount of time. On the
software exception that exceeds the limit, the system reloads (for systems with a single RPM)
or fails over (for systems with dual RPMs).

e

Syntax
Parameters

536

|

process restartable [process] [count number] [period minutes]

process

High Availability (HA)

Configure a process to be restartable.

Defaults

Command Modes
Command
History

Related
Commands

count number

Enter the number of times a process can restart within the configured
period.
Range: 1-3
Default: 3

period minutes

Enter the amount of time within which the process can restart count times.
Range: 1-60 minutes
Default: 60 minutes

By default, a process can be restarted a maximum of 3 times within 1 hour. On the exception
that exceeds this limit, the system reloads or fails over.
CONFIGURATION
Version 8.3.12.0

Introduced on the S4810.

Version 8.4.1.0

Introduced on E-Series.

show processes restartable

redundancy auto-failover-limit
Specify an auto-failover limit for RPMs. When an non-recoverable fatal error is detected, an
automatic RPM failover occurs. This command does not affect user-initiated (manual)
failovers.

ce

Syntax

redundancy auto-failover-limit [count number [period minutes] | period minutes]]

To disable the auto-failover limit control, enter no redundancy auto-failover-limit.
Parameters

Defaults
Command Modes
Command
History

count number

Enter the number of times the RPMs can automatically failover within the
period defined in the period parameter.
Range: 2 to 10
Default: 3

period minutes]

Enter a duration in which to allow a number of automatic failovers (limited to
the number defined in the count parameter).
Range: 5 to 9000 minutes
Default: 60 minutes

Count: 3 Period: 60 minutes
CONFIGURATION
Version 8.3.12.0

Introduced on the S4810.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.5.1.0

Introduced on C-Series

Version 7.6.1.0

Introduced on E-Series

High Availability (HA) | 537

www.dell.com | support.dell.com

Usage
Information

If auto failover is disabled, enter the redundancy auto-failover-limit (without any parameters)
to set auto failover to the default parameters (Count 3, Period 60 minutes).Use the show
redundancy command to view the redundancy status.
When you change one or both of the optional parameters, FTOS checks that the interval
between auto failovers is more than five (5) minutes. If the interval is less, FTOS returns a
configuration error message.

redundancy disable-auto-reboot
Prevent the system from auto-rebooting the failed module.

ce
Syntax

redundancy disable-auto-reboot [rpm| card number | all]

To return to the default, enter no redundancy disable-auto-reboot rpm.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

rpm

Enter the keyword rpm to disable auto-reboot of the failed RPM.

Disabled (that is, the failed module is automatically rebooted).
CONFIGURATION
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.1.0

Added the all option

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on E-Series

Enabling this command will keep the failed RPM in the failed state. If there are two RPMs in
the system, enabling this command prevents the failed RPM from becoming a working
Standby RPM. If there is only one RPM in the system, the failed RPM will not recover — this
will affect the system.

redundancy force-failover
Force the secondary RPM to become primary RPM. This command can also be used to
upgrade the software on one RPM from the other when the other has been loaded with the
upgraded software.

ce

Syntax
Parameters

538

redundancy force-failover {rpm }
rpm

Defaults

Not configured.

Command Modes

EXEC Privilege

|

High Availability (HA)

Enter the keyword rpm to force the secondary RPM to become the primary
RPM.

Command
History

Usage
Information

Version 8.3.12.0

Introduced on the S4810.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.5.1.0

Introduced on C-Series

Version 7.6.1.0

Introduced on E-Series

This command can be used to provide a hitless or warm upgrade. A hitless upgrade means
that a software upgrade does not require a reboot of the line cards. A warm upgrade means
that a software upgrade requires a reset of the line cards and SFMs. A warm upgrade is
possible for major releases and lower, while a hitless upgrade can only support patch releases.
You load the software upgrade on one RPM and then issue this command with the rpm
keyword to move the software to the other RPM. The system senses the condition and
provides a series of prompts appropriate to that context, as shown in the following example:
Note: On C-Series, this command could affect traffic (even during hot-failover) since
the switch fabric present on the RPM is taken down during the failover.

Example

FTOS#redundancy force-failover rpm
Peer RPM's SW version is different but HA compatible.
Failover can be done by warm or hitless upgrade.
All linecards will be reset during warm upgrade.
Specify hitless upgrade or warm upgrade [confirm hitless/warm]:hitless
Proceed with warm upgrade [confirm yes/no]:

Example
(force-failover
sfm)

FTOS#redundancy force-failover sfm 0
%TSM-6-SFM_FAILOVER: Standby switch to SFM 8
Standby switch to SFM 0
FTOS#

redundancy primary
Set an RPM as the primary RPM.

ce
Syntax

redundancy primary [rpm0 | rpm1]

To delete a configuration, enter no redundancy primary.
Parameters

Defaults
Command Modes
Command
History

rpm0

Enter the keyword rpm0 to set the RPM in slot R0 as the primary RPM.

rpm1

Enter the keyword rpm1 to set the RPM in slot R1 as the primary RPM.

The RPM in slot R0 is the Primary RPM.
CONFIGURATION
Version 8.3.12.0

Introduced on the S4810.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.5.1.0

Introduced on C-Series

Version 7.6.1.0

Introduced on E-Series

High Availability (HA) | 539

www.dell.com | support.dell.com

redundancy protocol
Enable hitless protocols.

ce
Syntax

redundancy protocol {lacp | xstp}

To disable a hitless protocol, enter no redundancy protocol {lacp | xstp}.
Parameters

lacp

Enter the keyword lacp to make LACP hitless.

xstp

Enter the keyword xstp to invoke hitless STP (all STP modes — MSTP,
PVST+, RSTP, STP).
Note: On the C-Series, hitless STP is available only for MSTP, PVST+,
and RSTP.

Defaults
Command Modes
Command
History

Related
Commands

Disabled
CONFIGURATION
Version 8.3.12.0

Introduced on S4810

Version 8.2.1.0

Introduced on C-Series

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on E-Series

show lacp

Display the lacp configuration

show redundancy

Display the current redundancy configuration.

redundancy reset-counter
Reset failover counter and timestamp information displayed in the show redundancy
command output.

e
Syntax
Defaults

redundancy reset-counter

Not configured

Command Modes

EXEC Privilege

Command
History

Version 8.3.12.0

Introduced on the S4810.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on E-Series

redundancy sfm standby
c

540

|

Place the SFM in an offline state.

High Availability (HA)

Syntax

redundancy sfm standby

Place the SFM in an online state using the command no redundancy sfm standby command.
Defaults
Command Modes

The SFM is online by default.
CONFIGURATION

Command
History

Version 7.5.1.0

Command
History

Version 8.3.12.0

Introduced on the S4810.

Version 7.5.1.0

Introduced on C-Series Only

Usage
Information

Introduced on C-Series

When a secondary RPM with logical SFM is inserted or removed, the system must add or
remove the backplane links to the switch fabric trunk. To avoid traffic disruption, use this
command when the secondary RPM is inserted. When this command is executed, the logical
SFM on the standby RPM is immediately taken offline and the SFM state is set as “standby”.
Note: This command could affect traffic when taking the secondary SFM offline.

Example

FTOS#show sfm

all

Switch Fabric State:

up

-- Switch Fabric Modules -Slot Status
--------------------------------------------------------------------------0
active
1
active
FTOS#configure
FTOS(conf)#redundancy sfm standby
Taking secondary SFM offline...
!
FTOS(conf)#do show sfm all
Switch Fabric State:

up

-- Switch Fabric Modules -Slot Status
--------------------------------------------------------------------------0
active
1
standby
FTOS(conf)#no redundancy sfm
Taking secondary SFM online...
!
FTOS(conf)#do show sfm all
Switch Fabric State:

up

-- Switch Fabric Modules -Slot Status
--------------------------------------------------------------------------0
active
1
active

High Availability (HA) | 541

www.dell.com | support.dell.com

Related
Commands

show sfm

Display the SFM status

show switch links

Display the switch fabric backplane or internal status.

redundancy synchronize
Manually synchronize data once between the Primary RPM and the Secondary RPM.

ce
Syntax
Parameters

redundancy synchronize [full | persistent-data | system-data]
full

Enter the keyword full to synchronize all data.

persistent-data

Enter the keywords persistent-data to synchronize the startup
configuration between RPMs.

system-data

Enter the keywords system-data to synchronize persistent-data and the
running configuration file, event log, SFM and line card states.

Defaults

Not configured.

Command Modes

EXEC Privilege

Command
History

Version 8.3.12.0

Introduced on the S4810.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.5.1.0

Introduced on C-Series

Version 7.6.1.0

Introduced on E-Series

show patch
Display the system patches loaded with the In-Service Modular Hot Fix Command.

e
Syntax
Command Modes
Command
History

Related
Commands

show patch

EXEC
Version 8.3.12.0

Introduced on the S4810.

Version 8.2.1.0

Introduced on E-Series

patch flash://
RUNTIME_PATCH_DIR

Insert an In-Service Modular Hot-Fix patch.

show processes restartable
Display the processes and tasks configured for restartability.

e
Syntax

542

|

show processes restartable [history]

High Availability (HA)

Parameters

history

Display the last time the restartable processes crashed.

Command Modes

EXEC Privilege

Command
History

Version 8.3.12.0

Introduced on the S4810.

Version 8.4.1.0

Introduced on E-Series

Example

FTOS#sho processes restartable
------------------------------------------------------------------------------------Process name
State
How many times restarted
Timestamp last restarted
------------------------------------------------------------------------------------radius
enabled
0
[-]
tacplus
enabled
0
[-]
------------------------------------------------------------------------------------FTOS#show processes restartable history
------------------------------------------------------------------------------------Process name
Timestamp last crashed
------------------------------------------------------------------------------------radius
[5/23/2001 10:11:47]
-------------------------------------------------------------------------------------

Related
Commands

process restartable

show redundancy
Display the current redundancy configuration.

ce
Syntax
Command Modes

show redundancy

EXEC
EXEC Privilege

Command
History

Example

Version 8.3.12.0

Introduced on the S4810.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.5.1.0

Introduced on C-Series

Version 7.6.1.0

Introduced on E-Series

FTOS#show redundancy
-- RPM Status ------------------------------------------------RPM Slot ID:
1
RPM Redundancy Role:
Primary
RPM State:
Active
RPM SW Version:
7.5.1.0
Link to Peer:
Up
--

PEER RPM Status

--

High Availability (HA) | 543

www.dell.com | support.dell.com

-----------------------------------------------RPM State:
Standby
RPM SW Version:
7.5.1.0
-- RPM Redundancy Configuration ------------------------------------------------Primary RPM:
rpm0
Auto Data Sync:
Full
Failover Type:
Hot Failover
Auto reboot RPM:
Enabled
Auto failover limit:
3 times in 60 minutes
-- RPM Failover Record ------------------------------------------------Failover Count:
1
Last failover timestamp:
Jul 13 2007 21:25:32
Last failover Reason:
User request
-- Last Data Block Sync Record: ------------------------------------------------Line Card Config:
succeeded Jul 13 2007
Start-up Config:
succeeded Jul 13 2007
SFM Config State:
succeeded Jul 13 2007
Runtime Event Log:
succeeded Jul 13 2007
Running Config:
succeeded Jul 13 2007
FTOS#

21:28:53
21:28:53
21:28:53
21:28:53
21:28:53

Table 19-1. show redundancy Command Example Fields

544

|

Field

Description

RPM Status

Displays the following information:
• Slot number of the RPM
• Whether the RPM is Primary or Standby
• The state of the RPM: Active, Standby, Booting, or Offline
• Whether the link to the second RPM is up or down.

PEER RPM Status

Displays the state of the second RPM, if present

RPM Redundancy
Configuration

Displays the following information:
• which RPM is the preferred Primary on next boot (redundancy
primary command)
• the data sync method configured (redundancy synchronize
command).
• the failover type (you cannot change this; it is software dependent)
Hot Failover means the running configuration and routing table are
applied on secondary RPM. Fast Failover means the running
configuration is not applied on the secondary RPM till failover
occurs, and the routing table on line cards is cleared during failover.
• the status of auto booting the RPM (redundancy disable-auto-reboot
command)
• the parameter for auto failover limit control (redundancy
auto-failover-limit command)

High Availability (HA)

Table 19-1. show redundancy Command Example Fields (continued)
Field

Description

RPM Failover Record

Displays the following information:
• RPM failover counter (to reset the counter, use the redundancy
reset-counter command)
• the time and date of the last RPM failover
• the reason for the last RPM failover.

Last Data Sync Record

Displays the data sync information and the timestamp for the data sync:
• Start-up Config is the contents of the startup-config file.
• Line Card Config is the line card types configured and interfaces on
those line cards.
• Runtime Event Log is the contents of the Event log.
• Running Config is the current running-config.
This field only appears when you enter the command from the Primary
RPM.

High Availability (HA) | 545

546

|

High Availability (HA)

www.dell.com | support.dell.com

20
ICMP Message Types
This chapter lists and describes the possible ICMP Message Type. The first three columns list
the possible symbol or type/code. For example, you would receive a ! or 03 as an echo reply
from a ping.
Table 20-2.

ICMP Messages and their definitions

Symbol Type

Code

•

Query

Error

Timeout (no reply)

!

0

U

3

C

Description

4

3

echo reply

•

destination unreachable:
0

network unreachable

•

1

host unreachable

•

2

protocol unreachable

•

3

port unreachable

•

4

fragmentation needed but don’t fragment bit set

•

5

source route failed

•

6

destination network unknown

•

7

destination host unknown

•

8

source host isolated (obsolete)

•

9

destination network administratively prohibited

•

10

destination host administratively prohibited

•

11

network unreachable for TOS

•

12

host unreachable for TOS

•

13

communication administratively prohibited by
filtering

•

14

host precedence violation

•

15

precedence cutoff in effect

•

0

source quench

•

redirect

•

0

redirect for network

•

1

redirect for host

•

2

redirect for type-of-service and network

•

5

| 547

www.dell.com | support.dell.com

Table 20-2.

548

ICMP Messages and their definitions

Symbol Type

&

Code

Query

3

redirect for type-of-service and host

8

0

echo request

•

9

0

router advertisement

•

10

0

router solicitation

•

11

Error
•

time exceeded:
0

time-to-live equals 0 during transit

•

1

time-to-live equals 0 during reassembly

•

12

|

Description

parameter problem:
1

IP header bad (catchall error)

•

2

required option missing

•

13

0

timestamp request

•

14

0

timestamp reply

•

15

0

information request (obsolete)

•

16

0

information reply (obsolete)

•

17

0

address mask request

•

18

0

address mask reply

•

21
Internet Group Management Protocol
(IGMP)
Overview
The IGMP commands are supported by FTOS on all Dell Force10 platforms, as indicated by
the characters that appear under each of the command headings: e E-Series, c C-Series,
s S-Series, or
.
This chapter contains the following sections:
•
•

IGMP Commands
IGMP Snooping Commands

IGMP Commands
FTOS supports IGMPv1/v2/v3 and is compliant with RFC-3376.

Important Points to Remember
•
•
•
•
•
•
•

FTOS supports PIM-SM and PIM-SSM include and exclude modes.
IGMPv2 is the default version of IGMP on interfaces. IGMPv3 can be
configured on interfaces, and is backward compatible with IGMPv2.
The maximum number of interfaces supported is 512 on the E-Series. On the
C-Series and S-Series 31 interfaces are supported.
Maximum number of groups supported – no hard limit
IGMPv3 router interoperability with IGMPv2 and IGMPv1 routers on the same
subnet is not supported.
An administrative command (ip igmp version) is added to manually set the IGMP
version.
All commands, previously used for IGMPv2, are compatible with IGMPv3.

The commands include:
•
•

clear ip igmp groups
debug ip igmp

Internet Group Management Protocol (IGMP) | 549

www.dell.com | support.dell.com

•
•
•
•
•
•
•
•
•
•
•
•
•

ip igmp access-group
ip igmp group-join-limit
ip igmp immediate-leave
ip igmp last-member-query-interval
ip igmp querier-timeout
ip igmp query-interval
ip igmp query-max-resp-time
ip igmp ssm-map
ip igmp static-group
ip igmp version
show ip igmp groups
show ip igmp interface
show ip igmp ssm-map

clear ip igmp groups
ces

Syntax
Parameters

Command Modes
Command
History

Clear entries from the group cache table.

clear ip igmp groups [group-address | interface]
group-address

(OPTIONAL) Enter the IP multicast group address in dotted decimal format.

interface

(OPTIONAL) Enter the following keywords and slot/port or number
information:
• For an 100/1000 Base-T Ethernet interface, enter the keyword
gigabitethernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword gigabitethernet
followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the slot/port
information.
• For a 10-Gigabit Ethernet interface, enter the keyword tengigabitethernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed
by the slot/port information.

EXEC Privilege
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series legacy command
Usage
Information

550

|

IGMP commands accept only non-VLAN interfaces — specifying VLAN will not yield a
result.

Internet Group Management Protocol (IGMP)

debug ip igmp
ces

Syntax

Enable debugging of IGMP packets.

debug ip igmp [group address | interface]

To disable IGMP debugging, enter no debug ip igmp [group address | interface]. To disable all
debugging, enter undebug all.
Parameters

Defaults
Command Modes
Command
History

group-address

(OPTIONAL) Enter the IP multicast group address in dotted decimal format.

interface

(OPTIONAL) Enter the following keywords and slot/port or number
information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed
by:
-C-Series and S-Series range: 1-128
-E-Series range: 1-255 for TeraScale
• For SONET interfaces, enter the keyword sonet followed by the slot/port
information. This keyword is only available on E-Series and C-Series.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.

Disabled
EXEC Privilege
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series legacy command
Usage
Information

IGMP commands accept only non-VLAN interfaces — specifying a VLAN will not yield a
result. This command displays packets for IGMP and IGMP Snooping.

ip igmp access-group
ces

Syntax

Use this feature to specify access control for packets.

ip igmp access-group access-list

To remove the feature, use the no ip igmp access-group access-list command.
Parameters

Defaults

access-list

Enter the name of the extended ACL (16 characters maximum).

Not configured

Internet Group Management Protocol (IGMP) | 551

www.dell.com | support.dell.com

Command Modes
Command
History

Usage
Information

INTERFACE (conf-if-interface-slot/port)
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on C-Series and S-Series

Version 7.6.1.0

Introduced on E-Series

The access list accepted is an extended ACL. This feature is used to block IGMP reports from
hosts, on a per-interface basis; based on the group address and source address specified in the
access list.

ip igmp group-join-limit
ces

Syntax
Parameters

Defaults
Command Modes
Command
History

Use this feature to limit the number of IGMP groups that can be joined in a second.

ip igmp group-join-limit number
number

Enter the number of IGMP groups permitted to join in a second.
Range: 1 to 10000

No default values or behavior
CONFIGURATION (conf-if-interface-slot/port)
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on C-Series and S-Series

Version 7.6.1.0

Introduced on E-Series

ip igmp immediate-leave
ces

Syntax

Enable IGMP immediate leave.

ip igmp immediate-leave [group-list prefix-list-name]

To disable ip igmp immediate leave, use the no ip igmp immediate-leave command.
Parameters

Defaults

552

|

group-list prefix-list-name

Not configured

Internet Group Management Protocol (IGMP)

Enter the keyword group-list followed by a string up to
16 characters long of the prefix-list-name.

Command Modes
Command
History

INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.7.1.0

Introduced on C-Series

E-Series legacy command
Usage
Information

Querier normally sends a certain number of group specific queries when a leave message is
received, for a group, prior to deleting a group from the membership database. There may be
situations in which immediate deletion of a group from the membership database is required.
This command provides a way to achieve the immediate deletion. In addition, this command
provides a way to enable immediate-leave processing for specified groups.

ip igmp last-member-query-interval
ces

Syntax

Change the last member query interval, which is the Max Response Time inserted into
Group-Specific Queries sent in response to Leave Group messages. This interval is also the
interval between Group-Specific Query messages.
ip igmp last-member-query-interval milliseconds

To return to the default value, enter no ip igmp last-member-query-interval.
Parameters

Defaults
Command Modes
Command
History

Enter the number of milliseconds as the interval.
Default: 1000 milliseconds
Range: 100 to 65535

milliseconds

1000 milliseconds
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.7.1.0

Introduced on C-Series

E-Series legacy command

ip igmp querier-timeout
ces

Syntax

Change the interval that must pass before a multicast router decides that there is no longer
another multicast router that should be the querier.
ip igmp querier-timeout seconds

To return to the default value, enter no ip igmp querier-timeout.

Internet Group Management Protocol (IGMP) | 553

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes
Command
History

seconds

Enter the number of seconds the router must wait to become the new querier.
Default: 125 seconds
Range: 60 to 300

125 seconds
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.7.1.0

Introduced on C-Series

Version 7.6.1.0

Introduced on S-Series in Interface VLAN mode only to enable that system to
act as an IGMP Proxy Querier.

Version 7.5.1.0

Introduced on C-Series in Interface VLAN mode only to enable that system to
act as an IGMP Proxy Querier.

E-Series legacy command

ip igmp query-interval
ces

Syntax

Change the transmission frequency of IGMP general queries sent by the Querier.

ip igmp query-interval seconds

To return to the default values, enter no ip igmp query-interval.
Parameters

Defaults
Command Modes
Command
History

seconds

Enter the number of seconds between queries sent out.
Default: 60 seconds
Range: 1 to 18000

60 seconds
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.7.1.0

Introduced on C-Series

Version 7.6.1.0

Introduced on S-Series in Interface VLAN mode only to enable that system to
act as an IGMP Proxy Querier.

Version 7.5.1.0

Introduced on C-Series in Interface VLAN mode only to enable that system to
act as an IGMP Proxy Querier.

E-Series legacy command

554

|

Internet Group Management Protocol (IGMP)

ip igmp query-max-resp-time
ces

Syntax

Set the maximum query response time advertised in general queries.

ip igmp query-max-resp-time seconds

To return to the default values, enter no ip igmp query-max-resp-time.
Parameters

Defaults
Command Modes
Command
History

Enter the number of seconds for the maximum response time.
Default: 10 seconds
Range: 1 to 25

seconds

10 seconds
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.7.1.0

Introduced on C-Series

Version 7.6.1.0

Introduced on S-Series in Interface VLAN mode only to enable that system to
act as an IGMP Proxy Querier.

Version 7.5.1.0

Introduced on C-Series in Interface VLAN mode only to enable that system to
act as an IGMP Proxy Querier.

E-Series legacy command

ip igmp ssm-map
ces

Syntax

Use a statically configured list to translate (*,G) memberships to (S,G) memberships.

ip igmp ssm-map std-access-list source-address

Undo this configuration, that is, remove SSM map (S,G) states and replace them with (*,G)
states using the command ip igmp ssm-map std-access-list source-address command.
Parameters

Command Modes
Command
History

std-access-list

Specify the standard IP access list that contains the mapping rules for
multicast groups.

source-address

Specify the multicast source address to which the groups are mapped.

CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Internet Group Management Protocol (IGMP) | 555

www.dell.com | support.dell.com

Usage
Information

Related
Commands

Version 7.8.1.0

Introduced on C-Series and S-Series

Version 7.7.1.0

Introduced on E-Series

Mapping applies to both v1 and v2 IGMP joins; any updates to the ACL are reflected in the
IGMP groups. You may not use extended access lists with this command. When a static SSM
map is configured and the router cannot find any matching access lists, the router continues to
accept (*,G) groups.
ip access-list standard

Create a standard access list to filter based on IP address.

ip igmp static-group
ces

Syntax

Configure an IGMP static group.

ip igmp static-group {group address [exclude [source address]]

| [include {source address}]}

To delete a static address, use the no ip igmp static-group {group address [exclude [source
address]] | [include {source address}]} command.
Parameters

group address

Enter the group address in dotted decimal format (A.B.C.D)

exclude source
address

(OPTIONAL) Enter the keyword exclude followed by the source address, in
dotted decimal format (A.B.C.D), for which a static entry needs to be added.

include source
address

(OPTIONAL) Enter the keyword include followed by the source address, in
dotted decimal format (A.B.C.D), for which a static entry needs to be added.
Note: A group in include mode must have at least one source address defined.

Defaults
Command Modes
Command
History

No default values or behavior
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.7.1.0

Introduced on C-Series

Version 7.5.1.0

Expanded to support the exclude and include options

E-Series legacy command
Usage
Information

556

|

A group in the include mode should have at least one source address defined. In exclude mode
if no source address is specified, FTOS implicitly assumes all sources are included. If neither
include or exclude is specified, FTOS implicitly assumes a IGMPv2 static join.

Internet Group Management Protocol (IGMP)

Command Limitations
•

•

Related
Commands

Only one mode (include or exclude) is permitted per multicast group per interface.
To configure another mode, all sources belonging to the original mode must be
unconfigured.
If a static configuration is present and a packet for the same group arrives on an
interface, the dynamic entry will completely overwrite all the static configuration
for the group.

show ip igmp groups

Display IGMP group information

ip igmp version
ces

Syntax
Parameters

Defaults
Command Modes
Command
History

Manually set the version of the router to IGMPv2 or IGMPv3.

ip igmp version {2 | 3}
2

Enter the number 2 to set the IGMP version number to IGMPv2.

3

Enter the number 3 to set the IGMP version number to IGMPv3.

2 (that is IGMPv2)
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.7.1.0

Introduced on C-Series

Version 7.5.1.0

Introduced for E-Series

show ip igmp groups
ces

Syntax

View the IGMP groups.

show ip igmp groups [group-address [detail] | detail | interface [group-address [detail]]]

Internet Group Management Protocol (IGMP) | 557

www.dell.com | support.dell.com

Parameters

Command Modes

group-address

(OPTIONAL) Enter the group address in dotted decimal format to view
information on that group only.

interface

(OPTIONAL) Enter the interface type and slot/port information:
• For a 100/1000 Ethernet interface, enter the keyword gigabitethernet
followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword gigabitethernet
followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by
a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a Loopback interface, enter the keyword loopback followed by a
number from 0 to 16383.
• For a SONET interface, enter the keyword sonet followed by the slot/port
information.
• For a 10-Gigabit Ethernet interface, enter the keyword tengigabitethernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed
by the slot/port information.
• For a VLAN interface enter the keyword vlan followed by a number from
1 to 4094.

detail

(OPTIONAL) Enter the keyword detail to display the IGMPv3 source
information.

EXEC
EXEC Privilege

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series and on C-Series

Version 7.5.1.0

Expanded to support the detail option.

E-Series legacy command
Usage
Information
Example

558

|

This command displays the IGMP database including configured entries for either all groups
on all interfaces, or all groups on specific interfaces, or specific groups on specific interfaces.
FTOS#show ip igmp groups
Total Number of Groups: 5
IGMP Connected Group Membership
Group Address
Interface
225.0.0.0
Vlan 100
Member Ports: Po 2
225.0.0.1
Vlan 100
Member Ports: Po 2
225.0.0.2
Vlan 100
Member Ports: Po 2
225.0.0.3
Vlan 100
Member Ports: Po 2
225.0.0.4
Vlan 100
Member Ports: Po 2

Internet Group Management Protocol (IGMP)

Mode
IGMPv2

Uptime
Expires Last Reporter
00:00:05 00:02:04 3.0.0.51

IGMPv2

00:00:05 00:02:04 3.0.0.51

IGMPv2

00:00:05 00:02:04 3.0.0.51

IGMPv2

00:00:05 00:02:04 3.0.0.51

IGMPv2

00:00:05 00:02:04 3.0.0.51

Example
(VLT Port
Channel Down)

Note: The asterisk (*) after the port channel number (Po 2) highlighted in the example below
indicates the port channel is VLT, that the local VLT port channel is down and the remote VLT
port is up.
FTOS#show ip igmp groups
Total Number of Groups: 5
IGMP Connected Group Membership
Group Address
Interface
225.0.0.0
Vlan 100
Member Ports: Po 2*
225.0.0.1
Vlan 100
Member Ports: Po 2*
225.0.0.2
Vlan 100
Member Ports: Po 2*
225.0.0.3
Vlan 100
Member Ports: Po 2*
225.0.0.4
Vlan 100
Member Ports: Po 2*

Mode
IGMPv2

Uptime
Expires Last Reporter
00:00:05 00:02:04 3.0.0.51

IGMPv2

00:00:05 00:02:04 3.0.0.51

IGMPv2

00:00:05 00:02:04 3.0.0.51

IGMPv2

00:00:05 00:02:04 3.0.0.51

IGMPv2

00:00:05 00:02:04 3.0.0.51

Table 21-1. show ip igmp groups Command Example Fields
Field

Description

Group Address

Lists the multicast address for the IGMP group.

Interface

Lists the interface type, slot and port number.

Mode

Displays the IGMP version used.

Uptime

Displays the amount of time the group has been operational.

Expires

Displays the amount of time until the entry expires.

Last Reporter

Displays the IP address of the last host to be a member of the
IGMP group.

Member Ports

Indicates the port channel. If the port channel is VLT, an asterisk
(*) after the port channel number indicates the port channel is
locally down and that a remote VLT port is up.

show ip igmp interface
ces

Syntax

View information on the interfaces participating in IGMP.

show ip igmp interface [interface]

Internet Group Management Protocol (IGMP) | 559

www.dell.com | support.dell.com

Parameters

Command Modes

interface

(OPTIONAL) Enter the interface type and slot/port information:
• For a 100/1000 Ethernet interface, enter the keyword gigabitethernet followed
by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword gigabitethernet followed
by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by a
number:
C-Series and S-Series Range: 1 to 128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a Loopback interface, enter the keyword loopback followed by a number
from 0 to 16383.
• For a SONET interface, enter the keyword sonet followed by the slot/port
information.
• For a 10-Gigabit Ethernet interface, enter the keyword tengigabitethernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by
the slot/port information.
• For a VLAN interface enter the keyword vlan followed by a number from 1 to
4094.

EXEC
EXEC Privilege

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series legacy command
Usage
Information
Example

560

|

IGMP commands accept only non-VLAN interfaces — specifying VLAN will not yield a
results.
FTOS#show ip igmp interface
GigabitEthernet 0/0 is down, line protocol is down
Internet protocol processing disabled
GigabitEthernet 0/5 is down, line protocol is down
Internet protocol processing disabled
GigabitEthernet 0/6 is down, line protocol is down
Internet protocol processing disabled
GigabitEthernet 0/7 is up, line protocol is down
Internet protocol processing disabled
GigabitEthernet 7/9 is up, line protocol is up
Internet address is 10.87.5.250/24
IGMP is enabled on interface
IGMP query interval is 60 seconds
IGMP querier timeout is 120 seconds
IGMP max query response time is 10 seconds
IGMP last member query response interval is 1000 ms
IGMP activity: 0 joins, 0 leaves
IGMP querying router is 10.87.5.250 (this system)
IGMP version is 2
FTOS#

Internet Group Management Protocol (IGMP)

show ip igmp ssm-map
ces

Syntax
Parameters

Command Modes

Display is a list of groups that are currently in the IGMP group table and contain SSM
mapped sources.
show ip igmp ssm-map [group]
group

(OPTIONAL) Enter the multicast group address in the form A.B.C.D to display the
list of sources to which this group is mapped.

EXEC
EXEC Privilege

Command
History

Related
Commands

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on C-Series and S-Series

Version 7.7.1.0

Introduced on E-Series

ip igmp
ssm-map

Use a statically configured list to translate (*,G) memberships to (S,G)
memberships.

IGMP Snooping Commands
FTOS supports IGMP Snooping version 2 and 3 on all Dell Force10 systems:
•
•
•
•
•
•
•

ip igmp snooping enable
ip igmp snooping fast-leave
ip igmp snooping flood
ip igmp snooping last-member-query-interval
ip igmp snooping mrouter
ip igmp snooping querier
show ip igmp snooping mrouter

Important Points to Remember for IGMP
Snooping
•
•

•
•

FTOS supports version 1, version 2, and version 3 hosts.
FTOS IGMP snooping implementation is based on IP multicast address (not
based on Layer 2 multicast mac-address) and the IGMP snooping entries are in
Layer 3 flow table not in Layer 2 FIB.
FTOS IGMP snooping implementation is based on draft-ietf-magma-snoop-10.
FTOS supports IGMP snooping on JUMBO enabled cards.

Internet Group Management Protocol (IGMP) | 561

www.dell.com | support.dell.com

•
•
•
•

•
•

IGMP snooping is not enabled by default on the switch.
A maximum of 1800 groups and 600 VLAN are supported.
IGMP snooping is not supported on default VLAN interface.
IGMP snooping is not supported over VLAN-Stack-enabled VLAN interfaces
(you must disable IGMP snooping on a VLAN interface before configuring
VLAN-Stack-related commands).
IGMP snooping does not react to Layer 2 topology changes triggered by STP.
IGMP snooping reacts to Layer 2 topology changes triggered by MSTP by
sending a general query on the interface that comes in FWD state.

Important Points to Remember for IGMP Querier
•
•

•
•

•

The IGMP snooping Querier supports version 2.
You must configure an IP address to the VLAN interface for IGMP snooping
Querier to begin. The IGMP snooping Querier disables itself when a VLAN IP
address is cleared, and then it restarts itself when an IP address is re-assigned to
the VLAN interface.
When enabled, IGMP snooping Querier will not start if there is a statically
configured multicast router interface in the VLAN.
When enabled, IGMP snooping Querier starts after one query interval in case no
IGMP general query (with IP SA lower than its VLAN IP address) is received on
any of its VLAN members.
When enabled, IGMP snooping Querier periodically sends general queries with
an IP source address of the VLAN interface. If it receives a general query on any
of its VLAN member, it will check the IP source address of the incoming frame.

If the IP SA in the incoming IGMP general query frame is lower than the IP address of
the VLAN interface, then the switch disables its IGMP snooping Querier functionality.
If the IP SA of the incoming IGMP general query is higher than the VLAN IP address,
the switch will continue to work as an IGMP snooping Querier.

ip igmp snooping enable
ces

Syntax

Enable IGMP snooping on all or a single VLAN. This is the master on/off switch to enable
IGMP snooping.
ip igmp snooping enable

To disable IGMP snooping, enter no ip igmp snooping enable command.
Defaults
Command Modes

Disabled
CONFIGURATION
INTERFACE VLAN

562

|

Internet Group Management Protocol (IGMP)

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series legacy command
Usage
Information

You must enter this command to enable IGMP snooping. When enabled from
CONFIGURATION mode, IGMP snooping is enabled on all VLAN interfaces (except
default VLAN).
Note: You must execute the no shutdown command on the VLAN interface for IGMP
Snooping to function.

Related
Commands

no shutdown

Activate an interface

ip igmp snooping fast-leave
ces

Syntax

Enable IGMP snooping fast leave for this VLAN.

ip igmp snooping fast-leave

To disable IGMP snooping fast leave, use the no igmp snooping fast-leave command.
Defaults
Command Modes
Command
History

Not configured
INTERFACE VLAN — (conf-if-vl-n)
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series legacy command
Usage
Information

Queriers normally send a certain number of queries when a leave message is received prior to
deleting a group from the membership database. There may be situations in which fast
deletion of a group is required. When IGMP fast leave processing is enabled, the switch will
remove an interface from the multicast group as soon as it detects an IGMP version 2 leave
message on the interface.

ip igmp snooping flood
ces

This command controls the flooding behavior of unregistered multicast data packets. On the
E-Series, when flooding is enabled (the default), unregistered multicast data traffic is flooded
to all ports in a VLAN. When flooding is disabled, unregistered multicast data traffic is
forwarded to only multicast router ports, both static and dynamic, in a VLAN. If there is no
multicast router port in a VLAN, then unregistered multicast data traffic is dropped. On the

Internet Group Management Protocol (IGMP) | 563

www.dell.com | support.dell.com

C-Series and S-Series, unregistered multicast data traffic is dropped when flooding is
disabled; they do not forward the packets to multicast router ports. On the C-Series and
S-Series, Layer 3 multicast must be disabled (no ip multicast-routing) in order to disable Layer 2
multicast flooding.
Syntax
Defaults
Command Modes
Command
History

ip igmp snooping flood

Enabled
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduced on the C-Series and S-Series.

Version 7.7.1.1

Introduced on E-Series.

ip igmp snooping last-member-query-interval
ces

Syntax

The last member query interval is the “maximum response time” inserted into Group-Specific
queries sent in response to Group-Leave messages. This interval is also the interval between
successive Group-Specific Query messages. Use this command to change the last member
query interval.
ip igmp snooping last-member-query-interval milliseconds

To return to the default value, enter no ip igmp snooping last-member-query-interval.
Parameters

Defaults
Command Modes
Command
History

milliseconds

Enter the interval in milliseconds.
Default: 1000 milliseconds
Range: 100 to 65535

1000 milliseconds
INTERFACE VLAN
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series legacy command

ip igmp snooping mrouter
ces

Syntax

564

|

Statically configure a VLAN member port as a multicast router interface.

ip igmp snooping mrouter interface interface

Internet Group Management Protocol (IGMP)

To delete a specific multicast router interface, use the no igmp snooping mrouter interface
interface command.
Parameters

Defaults
Command Modes
Command
History

interface interface

Enter the following keywords and slot/port or number information:
• For an 100/1000 Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed
by a number:
C-Series and S-Series Range: 1 to 128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.

Not configured
INTERFACE VLAN — (conf-if-vl-n)
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series legacy command
Usage
Information

FTOS provides the capability of statically configuring interface to which a multicast router is
attached. To configure a static connection to the multicast router, enter the ip igmp snooping
mrouter interface command in the VLAN context. The interface to the router must be a part of
the VLAN where you are entering the command.

ip igmp snooping querier
ces

Syntax

Enable IGMP querier processing for the VLAN interface.

ip igmp snooping querier

To disable IGMP querier processing for the VLAN interface, enter no ip igmp snooping querier
command.
Defaults
Command Modes
Command
History

Not configured
INTERFACE VLAN — (conf-if-vl-n)
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Internet Group Management Protocol (IGMP) | 565

www.dell.com | support.dell.com

Version 7.5.1.0

Introduced on C-Series

E-Series legacy command
Usage
Information

This command enables the IGMP switch to send General Queries periodically. This is useful
when there is no multicast router present in the VLAN because the multicast traffic does not
need to be routed. An IP address must be assigned to the VLAN interface for the switch to act
as a querier for this VLAN.

show ip igmp snooping mrouter
ces

Syntax
Parameters

Command Modes

Display multicast router interfaces.

show ip igmp snooping mrouter [vlan number]
vlan number

Enter the keyword vlan followed by the vlan number.
Range: 1 to 4094

EXEC
EXEC Privilege

Command
History

Version 8.3.7.0,

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series legacy command
Example

Usage
Information
Related
Commands

566

|

FTOS(conf-if-po-100)#show ip ig snooping mrouter
Interface Router Ports
Vlan 100 Po 100

If the port channel is a VLT port channel, an asterisk (*) after the port channel number (Po
100*) indicates the port channel is locally down and that a remote VLT port is up.
ip igmp snooping
mrouter

Use this command to configure a static connection to the multicast
router.

show ip igmp groups

Use this IGMP command to view groups

Internet Group Management Protocol (IGMP)

\

22
Interfaces
Overview
The commands in this chapter are supported by FTOS on all Dell Force10 platforms, as
indicated by the characters that appear under each of the command headings: e E-Series,
c C-Series, s S-Series,
. or Z Z-Series.
Although all interfaces are supported on E-Series ExaScale, some interface functionality is
supported on E-Series ExaScale ex with FTOS 8.2.1.0. and later. When this is the case
that is noted in the command history.
This chapter defines interface commands and is divided into the following sections:
•
•
•
•

Basic Interface Commands
Port Channel Commands
Time Domain Reflectometer (TDR)
UDP Broadcast

Basic Interface Commands
The following commands are for physical, Loopback, and Null interfaces:
•
•
•
•
•
•
•
•
•
•
•
•

clear counters
clear dampening
cx4-cable-length
dampening
description
disable-on-sfm-failure
duplex (Management)
duplex (10/100 Interfaces)
flowcontrol
interface
interface loopback
interface ManagementEthernet

Interfaces | 567

www.dell.com | support.dell.com

•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

568

|

Interfaces

interface null
interface range
interface range macro (define)
interface range macro name
interface vlan
ipg (Gigabit Ethernet interfaces)
ipg (10 Gigabit Ethernet interfaces)
keepalive
lfs enable
link debounce-timer
monitor interface
mtu
negotiation auto
portmode hybrid
rate-interval
show config
show config (from INTERFACE RANGE mode)
show interfaces
show interfaces configured
show interfaces dampening
show interfaces description
show interfaces linecard
show interfaces phy
show interfaces stack-unit
show interfaces status
show interfaces switchport
show interfaces transceiver
show range
show running-config ecmp-group
shutdown
speed (for 10/100/1000 interfaces)
speed (Management interface)
stack-unit portmode
switchport
wanport

clear counters
ces

Syntax
Parameters

Clear the counters used in the show interfaces commands for all VRRP groups, VLANs, and
physical interfaces, or selected ones.
clear counters [interface] [vrrp [{[ipv6] vrid | vrf instance}] | learning-limit]
interface

(OPTIONAL) Enter any of the following keywords and slot/port or number to
clear counters from a specified interface:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Loopback interface, enter the keyword loopback followed by a
number from 0 to 16383.
• For a Port Channel interface, enter the keyword port-channel followed by
a number:
C-Series and S-Series Range: 1-128
E-Series Range:1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For the management interface on the RPM, enter the keyword
ManagementEthernet followed by slot/port information. The slot range is
0-1, and the port range is 0.
• For a SONET interface, enter the keyword sonet followed by the slot/port
information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed
by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to
4094.

vrrp
[[ipv6] vrid]

(OPTIONAL) Enter the keyword vrrp to clear the counters of all VRRP
groups. To clear the counters of VRRP groups on all IPv6 interfaces, enter
ipv6. To clear the counters of a specified group, enter a vrid number from 1 to
255.

vrrp
[vrf instance]

(OPTIONAL) E-Series only: Enter the keyword vrrp to clear counters for all
VRRP groups. To clear the counters of VRRP groups in a specified VRF
instance, enter the name of the instance (32 characters maximum). IPv6 VRRP
groups are not supported.

learning-limit

(OPTIONAL) Enter the keyword learning-limit to clear unknown source
address (SA) drop counters when MAC learning limit is configured on the
interface.
Note: This option is not supported on the S-Series, as the MAC learning limit is
not supported

Defaults
Command Modes
Command
History

Without an interface specified, the command clears all interface counters.
EXEC Privilege
Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.4.1.0

On the E-Series, support was added for VRRP groups in a VRF instance.

Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Support for 4093 VLANs on E-Series ExaScale. Prior to release supported
2094.

Interfaces | 569

www.dell.com | support.dell.com

Example
Related
Commands

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 6.5.1.0

Updated definition of the learning-limit option for clarity.

FTOS#clear counters
Clear counters on all interfaces [confirm]

mac learning-limit

Allow aging of MACs even though a learning-limit is configured or
disallow station move on learnt MACs.

show interfaces

Displays information on the interfaces.

clear dampening
ces

Syntax
Parameters

Defaults
Command Modes
Command
History

570

|

Interfaces

Clear the dampening counters on all the interfaces or just the specified interface.

clear dampening [interface]
interface

(Optional) Enter one of the following keywords and slot/port or
number information:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel
followed by a number:
C-Series and S-Series Range: 1 to 128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for
ExaScale.
• For a SONET interface, enter the keyword sonet followed by the
slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.

Without a specific interface specified, the command clears all interface dampening counters
EXEC Privilege
Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced on E-Series

Usage
Information

On the S4810, after you enter the clear counters command and verify the results with the
show interfaces command, the line rate is not reset to 0.00%.

Example

Related
Commands

FTOS#clear dampening gigabitethernet 1/2
Clear dampening counters on Gi 1/2 [confirm] y
FTOS#

show interfaces dampening

Display interface dampening information.

dampening

Configure dampening on an interface.

cx4-cable-length
s
Syntax
Parameters

Defaults
Mode
Command
History
Usage
Information

Configure the length of the cable to be connected to the selected CX4 port.
[no] cx4-cable-length {long | medium | short}
long | medium | short

Enter the keyword that matches the cable length to be used at the
selected port:
short = For 1-meter and 3-meter cable lengths
medium = For 5-meter cable length
long = For 10-meter and 15-meter cable lengths

medium

Interface
Version 7.7.1.0

Introduced on S-Series

This command only works on ports that the system recognizes as CX4 ports. The figure
below shows an attempt to configure an XFP port in an S25P with the command after
inserting a CX4 converter into the port:
Note: When using a long CX4 cable between the C-Series and the S-Series,
configure the cable using the cx4-cable-length short command only to avoid any
errors.
Note: 15M CX4 active cable is not supported on C-Series and S-series. It is only
supported for S2410 with active end on the device.

Example

FTOS#show interfaces tengigabitethernet 0/26 | grep "XFP type"
Pluggable media present, XFP type is 10GBASE-CX4
FTOS(conf-if-te-0/26)#cx4-cable-length short
% Error: Unsupported command.
FTOS(conf-if-te-0/26)#cx4-cable-length medium
% Error: Unsupported command.
FTOS(conf-if-te-0/26)#cx4-cable-length long
% Error: Unsupported command.
FTOS(conf-if-te-0/26)#

The figure below shows a successful CX4 cable length configuration.

Interfaces | 571

www.dell.com | support.dell.com

Example
(CX4 Cable
Length
Configuration)

FTOS#config
FTOS(config)#interface tengigabitethernet 0/52
FTOS(conf-if-0/52)#cx4-cable-length long
FTOS(conf-if-0/52)#show config
!
interface TenGigabitEthernet 0/51
no ip address
cx4-cable-length long
shutdown
FTOS(conf-if-0/52)#exit
FTOS(config)#

For details on using XFP ports with CX4 cables, your S-Series hardware guide.
Related
Commands

show config

Display the configuration of the selected interface.

dampening
ces
Syntax

Configure dampening on an interface.
dampening [[[[half-life] [reuse-threshold]] [suppress-threshold]] [max-suppress-time]]

To disable dampening, use the no dampening [[[[half-life] [reuse-threshold]]
[suppress-threshold]] [max-suppress-time]] command syntax.
Parameters

Defaults
Command Modes
Command
History

572

|

Interfaces

half-life

Enter the number of seconds after which the penalty is decreased.
The penalty is decreased by half after the half-life period expires.
Range: 1 to 30 seconds
Default: 5 seconds

reuse-threshold

Enter a number as the reuse threshold, the penalty value below which
the interface state is changed to “up”.
Range: 1 to 20000
Default: 750

suppress-threshold

Enter a number as the suppress threshold, the penalty value above
which the interface state is changed to “error disabled”.
Range: 1 to 20000
Default: 2500

max-suppress-time

Enter the maximum number for which a route can be suppressed.
The default is four times the half-life value.
Range: 1 to 86400
Default: 20 seconds

Disabled
INTERFACE (conf-if-)
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Example
Usage
Information

Version 7.5.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced on E-Series

FTOS(conf-if-gi-3/2)#dampening 20 800 4500 120
FTOS(conf-if-gi-3/2)#

With each flap, FTOS penalizes the interface by assigning a penalty (1024) that decays
exponentially depending on the configured half-life. Once the accumulated penalty exceeds
the suppress threshold value, the interface is moved to the error-disabled state. This interface
state is deemed as “down” by all static/dynamic Layer 2 and Layer 3 protocols. The penalty is
exponentially decayed based on the half-life timer. Once the penalty decays below the reuse
threshold, the interface is enabled. The configured parameters should follow:
•
•

should be greater than reuse-threshold
max-suppress-time should be at least 4 times half-life
suppress-threshold

Note: Dampening cannot be applied on an interface that is monitoring traffic for other
interfaces.
Related
Commands

clear dampening

Clear the dampening counters on all the interfaces or just the
specified interface.

show interfaces dampening

Display interface dampening information.

description
ces
Syntax

Assign a descriptive text string to the interface.
description desc_text

To delete a description, enter no description.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

desc_text

Enter a text string up to 240 characters long.

No description is defined.
INTERFACE
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 7.4.1.0

Modified for E-Series: Revised from 78 to 240 characters.

•
•

Spaces between characters are not preserved after entering this command unless
you enclose the entire description in quotation marks (“desc_text”).
Entering a text string after the description command overwrites any previous text
string configured as the description.

Interfaces | 573

www.dell.com | support.dell.com

•
•
Related
Commands

The shutdown and description commands are the only commands that you can
configure on an interface that is a member of a port-channel.
Use the show interfaces description command to display descriptions configured
for each interface.

show interfaces description

Display description field of interfaces.

disable-on-sfm-failure
e
Syntax

Disable select ports on E300 systems when a single SFM is available.
disable-on-sfm-failure

To delete a description, enter no disable-on-sfm-failure.
Defaults
Command Modes
Command
History
Usage
Information

Port is not disabled
INTERFACE
Version 7.7.1.0

Introduced on E300 systems only

When an E300 system boots up and a single SFM is active this configuration, any ports
configured with this feature will be shut down. If an SFM fails (or is removed) in an E300
system with two SFM, ports configured with this feature will be shut down. All other ports
are treated normally.
When a second SFM is installed or replaced, all ports are booted up and treated as normally.
This feature does not take affect until a single SFM is active in the E300 system.

duplex (Management)
ce

Set the mode of the Management interface.

Syntax

duplex {half | full}

To return to the default setting, enter no duplex.
Parameters

Defaults
Command Modes

574

|

Interfaces

half

Enter the keyword half to set the Management interface to transmit only in one direction.

full

Enter the keyword full to set the Management interface to transmit in both directions.

Not configured
INTERFACE

Command
History

Usage
Information
Related
Commands

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.5.1.0

Introduced on C-Series

Version 6.4.1.0

Documentation modified—added Management to distinguish from duplex (10/
100 Interfaces)

This command applies only to the Management interface on the RPMs.

interface ManagementEthernet

Configure the Management port on the system (either the
Primary or Standby RPM).

duplex (Management)

Set the mode of the Management interface.

management route

Configure a static route that points to the Management
interface or a forwarding router.

speed (Management interface)

Set the speed on the Management interface.

duplex (10/100 Interfaces)
ces

Configure duplex mode on any physical interfaces where the speed is set to 10/100.Syntax
duplex {half | full}

To return to the default setting, enter no duplex.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

half

Enter the keyword half to set the physical interface to transmit only in one direction.

full

Enter the keyword full to set the physical interface to transmit in both directions.

Not configured
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 6.4.1.0

Introduced

This command applies to any physical interface with speed set to 10/100.
Note: Starting with FTOS 7.8.1.0, when a copper SFP2 module with catalog number
GP-SFP2-1T is used in the S25P model of the S-Series, its speed can be manually set
with the speed command. When the speed is set to 10 or 100 Mbps, the duplex
command can also be executed.

Interfaces | 575

www.dell.com | support.dell.com

Related
Commands

speed (for 10/100/1000 interfaces)

Set the speed on the Base-T Ethernet interface.

negotiation auto

Enable or disable auto-negotiation on an interface.

ecmp-group
Provides a mechanism to monitor traffic distribution on a LAG link bundle. A system log or
SNMP trap is generated when the standard deviation of traffic distribution on a member link
exceeds a defined threshold.
Syntax

ecmp-group {ecmp-path} [interface interface] [monitoring enable]

To negate a command, use the no command.
Parameters

Defaults
Command Modes
Command
History

ecmp-path

Enter the path number for the LAG.
Range: 2 to 64

interface

Enter the following keywords and slot/port to add the interface to the
LAG.
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.

monitoring

Enter the keyword monitoring to monitor the LAG. To enable
monitoring, follow by entering the keyword enable.

Off
CONFIGURATION
Version 8.3.10.0

Introduced on S4810

flowcontrol
ces

Syntax

Control how the system responds to and generates 802.3x pause frames on 1Gig and 10Gig
line cards.
flowcontrol rx {off | on} tx {off | on} threshold {<1-2047> <1-2013> <1-2013>}

The threshold keyword is supported on C-Series and S-Series only.
Parameters

576

|

Interfaces

rx on

Enter the keywords rx on to process the received flow control frames on this port.
This is the default value for the receive side.

rx off

Enter the keywords rx off to ignore the received flow control frames on this port.

Defaults

tx on

Enter the keywords tx on to send control frames from this port to the connected
device when a higher rate of traffic is received. This is the default value on the
send side.

tx off

Enter the keywords tx off so that flow control frames are not sent from this port to
the connected device when a higher rate of traffic is received.

threshold
(C-Series and
S-Series only)

When tx on is configured, you can set the threshold values for:
Number of flow-control packet pointers: 1 to 2047 (default = 75)
Flow-control buffer threshold in KB: 1 to 2013 (default = 49KB)
Flow-control discard threshold in KB: 1 to 2013 (default= 75KB)

C-Series: rx off tx off
E-Series: rx on tx on
S-Series: rx off tx off
S4810: rx on tx off

Command Modes
Command
History

Usage
Information

INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 6.5.1.9 and 7.4.1.0

Introduced on E-Series

Version 7.8.1.0

Introduced on C-Series and S-Series with thresholds

The globally assigned 48-bit Multicast address 01-80-C2-00-00-01 is used to send and
receive pause frames. To allow full duplex flow control, stations implementing the pause
operation instruct the MAC to enable reception of frames with a destination address equal to
this multicast address.
The pause:
•
•

Starts when either the packet pointer or the buffer threshold is met (whichever is
met first). When the discard threshold is met, packets are dropped.
Ends when both the packet pointer and the buffer threshold fall below 50% of the
threshold settings.

The discard threshold defines when the interface starts dropping the packet on the interface.
This may be necessary when a connected device does not honor the flow control frame sent
by the S-Series. The discard threshold should be larger than the buffer threshold so that the
buffer holds at least hold at least 3 packets.
Changes in the flow-control values may not be reflected automatically in the show interface
output. As a workaround, apply the new settings, execute shut followed by no shut on the
interface, and then check the running-config of the port using the show interface command.
Note: If rx flow control is disabled, Dell Force10 recommends rebooting the system.

Interfaces | 577

www.dell.com | support.dell.com

Important Points to Remember
•
•

Do not enable tx pause when buffer carving is enabled. Consult Dell Force10
TAC for information and assistance.
Asymmetric flow control (rx on tx off or rx off tx on) setting for the interface port
less than 100 Mb/s speed is not permitted. The following error is returned:
Can’t configure Asymmetric flowcontrol when speed <1G, config
ignored

•

The only configuration applicable to half duplex ports is rx off tx off. The
following error is returned:
Can’t configure flowcontrol when half duplex is configure, config
ignored

•

Half duplex cannot be configured when the flow control configuration is on
(default is rx on tx on). The following error is returned:
Can’t configure half duplex when flowcontrol is on, config ignored

Note: The flow control must be off (rx off tx off) before configuring the half duplex.

•

Speeds less than 1 Gig cannot be configured when the asymmetric flow control
configuration is on. The following error is returned:
Can’t configure speed <1G when Asymmetric flowcontrol is on, config
ignored

•
•

Example

578

|

Interfaces

FTOS only supports rx on tx on and rx off tx off for speeds less than 1 Gig
(Symmetric).
On the C-Series and S-Series systems, the flow-control sender and receiver must
be on the same port-pipe. Flow control is not supported across different
port-pipes on the C-Series or S-Series system.

FTOS(conf-if-gi-0/1)#show config
!
interface GigabitEthernet 0/1
no ip address
switchport
no negotiation auto
flowcontrol rx off tx on
no shutdown
...

The table below displays how FTOS negotiates the flow control values between two Dell
Force10 chassis connected back-to-back using 1G copper ports.
Table 22-1.

Negotiated Flow Control Values

Configured

Negotiated

LocRxConf

LocTxConf

RemoteRxConf RemoteTxConf LocNegRx

LocNegTx

RemNegRx

RemNegTx

off

off

off
off
on
on

off
on
off
on

off
off
off
off

off
off
off
off

off
off
off
off

off
off
off
off

off

on

off
off
on
on

off
on
off
on

off
off
off
off

off
off
on
off

off
off
on
off

off
off
off
off

on

off

off
off
on
on

off
on
off
on

off
on
on
on

off
off
on
on

off
off
on
on

off
on
on
on

on

on

off
off
on
on

off
on
off
on

off
off
on
on

off
off
on
on

off
off
on
on

off
off
on
on

Related
Commands

show running-config

Display the flow configuration parameters (non-default values only).

show interfaces

Display the negotiated flow control parameters.

interface
ces
Syntax
Parameters

Configure a physical interface on the switch.
interface interface
interface

Enter one of the following keywords and slot/port or number information:
• For 100/1000 Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For SONET interfaces, enter the keyword sonet followed by the slot/port
information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by
the slot/port information.

Interfaces | 579

www.dell.com | support.dell.com

Defaults
Command Modes
Command
History

Not configured.
CONFIGURATION
Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 6.4.1.0

Introduced

Example

FTOS(conf)#interface gig 0/0
FTOS(conf-if-gi-0/0)#exit#

Usage
Information

You cannot delete a physical interface.
By default, physical interfaces are disabled (shutdown) and are in Layer 3 mode. To place an
interface in mode, ensure that the interface’s configuration does not contain an IP address and
enter the switchport command.

Related
Commands

interface loopback

Configure a Loopback interface.

interface null

Configure a Null interface.

interface port-channel

Configure a port channel.

interface vlan

Configure a VLAN.

show interfaces

Display interface configuration.

interface loopback
ces
Syntax

Configure a Loopback interface.
interface loopback number

To remove a loopback interface, use the no interface loopback number command.
Parameters

Defaults
Command Modes
Command
History

Example

580

|

Interfaces

number

Enter a number as the interface number.
Range: 0 to 16383.

Not configured.
CONFIGURATION
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 6.4.1.0

Introduced

FTOS(conf)#interface loopback 1655

FTOS(conf-if-lo-1655)#

Related
Commands

interface

Configure a physical interface.

interface null

Configure a Null interface.

interface port-channel

Configure a port channel.

interface vlan

Configure a VLAN.

interface ManagementEthernet
ces
Z
Syntax
Parameters

Defaults
Command Modes
Command
History

Example
Usage
Information

Configure the Management port on the system (either the Primary or Standby RPM).

interface ManagementEthernet slot/port
slot/port

Enter the keyword ManagementEthernet followed by slot number (0-1) and
port number zero (0).

Not configured.
CONFIGURATION
Version 8.3.11.1

Introduced on Z9000

Version 8.3.11.1

Introduced on S55, S60 and S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.5.1.0

Introduced for C-Series

Version 6.4.1.0

Introduced for E-Series

FTOS(conf)#interface managementethernet 0/0
FTOS(conf-if-ma-0/0)#

You cannot delete a Management port.
The Management port is enabled by default (no shutdown). Use the ip address command to
assign an IP address to the Management port.
If two RPMs are installed in your system, use the show redundancy command to display
which RPM is the Primary RPM.

Related
Commands

management route

Configure a static route that points to the Management interface
or a forwarding router.

duplex (Management)

Clear FIB entries on a specified line card.

speed (Management interface)

Clear FIB entries on a specified line card.

Interfaces | 581

www.dell.com | support.dell.com

interface null
ces
Syntax
Parameters

Defaults
Command Modes
Command
History

Configure a Null interface on the switch.
interface null number
number

Not configured; number = 0
CONFIGURATION
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 6.4.1.0

Introduced

Example
Usage
Information
Related
Commands

Enter zero (0) as the Null interface number.

FTOS(conf)#interface null 0
FTOS(conf-if-nu-0)#

You cannot delete the Null interface. The only configuration command possible in a Null
interface is ip unreachables.
interface

Configure a physical interface.

interface loopback

Configure a Loopback interface.

interface port-channel

Configure a port channel.

interface vlan

Configure a VLAN.

ip unreachables

Enable generation of ICMP unreachable messages.

interface range
ces

Syntax

582

|

Interfaces

This command permits configuration of a range of interfaces to which subsequent commands
are applied (bulk configuration). Using the interface range command, identical commands can
be entered for a range of interfaces.
interface range interface, interface,...

Parameters

interface,
interface,...

Enter the keyword interface range and one of the interfaces — slot/port,
port-channel or VLAN number. Select the range of interfaces for bulk
configuration. You can enter up to six comma separated ranges—spaces are
not required between the commas. Comma-separated ranges can include
VLANs, port-channels and physical interfaces.
Slot/Port information must contain a space before and after the dash. For
example, interface range gigabitethernet 0/1 - 5 is valid; interface range
gigabitethernet 0/1-5 is not valid.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by
a number:
C-Series and S-Series Range: 1 to 128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a SONET interface, enter the keyword sonet followed by the slot/port
information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed
by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to
4094.

Defaults
Command Modes
Command
History

Usage
Information

This command has no default behavior or values.
CONFIGURATION
Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.2.1.0

Support for 4093 VLANs on E-Series ExaScale. Prior releases supported
2094.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version
6.1.1.0

Introduced for E-Series

When creating an interface range, interfaces appear in the order they are entered; they are not
sorted. The command verifies that interfaces are present (physical) or configured (logical).
Important things to remember:
•
•
•

•

Bulk configuration is created if at least one interface is valid.
Non-existing interfaces are excluded from the bulk configuration with a warning
message.
The interface range prompt includes interface types with slot/port information for
valid interfaces. The prompt allows for a maximum of 32 characters. If the bulk
configuration exceeds 32 characters, it is represented by an ellipsis ( ... ).
When the interface range prompt has multiple port ranges, the smaller port range
is excluded from the prompt.

Interfaces | 583

www.dell.com | support.dell.com

•
Example

If overlapping port ranges are specified, the port range is extended to the smallest
start port and the biggest end port.

FTOS(conf)#interface range so 2/0 - 1 , te 10/0 , gi 3/0 , fa 0/0
% Warning: Non-existing ports (not configured) are ignored by interface-range

(Bulk Configuration
Warning message)

Example

FTOS(conf)#interface range gi 2/0 - 23 , gi 2/1 - 10
FTOS(conf-if-range-gi-2/0-23#

(Interface Range
prompt with
multiple ports)

Example

FTOS(conf)#interface range gi 2/1 - 11 , gi 2/1 - 23
FTOS(conf-if-range-gi-2/1-23#

(Interface Range
prompt with
overlapping port
ranges)

Only VLAN and port-channel interfaces created using the interface vlan and interface
port-channel commands can be used in the interface range command.
Use the show running-config command to display the VLAN and port-channel interfaces.
VLAN or port-channel interfaces that are not displayed in the show running-config command
can not be used with the bulk configuration feature of the interface range command. You
cannot create virtual interfaces (VLAN, Port-channel) using the interface range command.
Note: If a range has VLAN, physical, port-channel, and SONET interfaces, only
commands related to physical interfaces can be bulk configured. To configure
commands specific to VLAN, port-channel or SONET, only those respective
interfaces should be configured in a particular range.
Example

The following text is an example of a single range bulk configuration.

(Single Range Bulk
Configuration)

Example
(Multiple Range Bulk
Configuration Gigabit
Ethernet & Ten Gigabit
Ethernet)

FTOS(config)# interface range gigabitethernet 5/1 - 23
FTOS(config-if-range)# no shutdown
FTOS(config-if-range)#

The following example shows how to use commas to add different interface types to the range
enabling all Gigabit Ethernet interfaces in the range 5/1 to 5/23 and both Ten Gigabit Ethernet
interfaces 1/1 and 1/2.
1/1 - 2

FTOS(config-if)# interface range gigabitethernet 5/1 - 23, tengigabitethernet
FTOS(config-if-range)# no shutdown
FTOS(config-if-range)#

Example
(Multiple Range Bulk
Configuration with
SONET, VLAN, and
port channel)

Related
Commands

584

|

Interfaces

The following figure shows how to use commas to add SONET, VLAN, and port-channel
interfaces to the range.
FTOS(config-if)# interface range gigabitethernet 5/1 - 23, tengigabitethernet
1/1 – 2, Vlan 2 – 100 , Port 1 – 25
FTOS(config-if-range)# no shutdown
FTOS(config-if-range)#

interface port-channel

Configure a port channel group.

interface vlan

Configure a VLAN interface.

show config (from INTERFACE
RANGE mode)

Show the bulk configuration interfaces.

show range

Show the bulk configuration ranges.

interface range macro (define)

Define a macro for an interface-range.

interface range macro (define)
ces
Syntax
Parameters

Defines a macro for an interface range and then saves the macro in the running configuration.
define interface range macro name interface , interface , ...
name

Enter up to 16 characters for the macro name.

interface , interface ,...

Enter the interface keyword ( below) and one of the interfaces slot/
port, port-channel or VLAN numbers. Select the range of interfaces
for bulk configuration. You can enter up to six comma separated
ranges—spaces are not required between the commas.
Comma-separated ranges can include VLANs, port-channels and
physical interfaces.
Slot/Port information must contain a space before and after the dash.
For example, interface range gigabitethernet 0/1 - 5 is valid;
interface range gigabitethernet 0/1-5 is not valid.
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel
followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range:1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a SONET interface, enter the keyword sonet followed by the
slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from
1 to 4094.

Defaults
Command Modes
Command
History

Example

This command has no default behavior or value.
CONFIGURATION
Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.2.1.0

Support for 4093 VLANs on E-Series ExaScale. Prior releases supported 2094.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 6.2.1.1

Introduced

FTOS(config)# define interface-range test tengigabitethernet 0/0 - 3 ,
gigabitethernet 5/0 - 47 , gigabitethernet 13/0 - 89

Interfaces | 585

www.dell.com | support.dell.com

FTOS# show running-config | grep define
define interface-range test tengigabitethernet 0/0 - 3 , gigabitethernet 5/0 47 , gigabitethernet 13/0 - 89
FTOS(config)#interface range macro test
FTOS(config-if-range-te-0/0-3,gi-5/0-47,gi-13/0-89)#

Usage
Information
Related
Commands

interface range

Configure a range of command (bulk configuration)

interface range macro name

Run an interface range macro.

interface range macro name
ces
Syntax
Parameters

Defaults
Command Modes
Command
History

Usage
Information
Example

Related
Commands

586

The above text is an example of how to define an interface range macro named test. Execute
the show running-config command to display the macro definition.

|

Interfaces

Run the interface-range macro to automatically configure the pre-defined range of interfaces.
interface range macro name
name

Enter the name of an existing macro.

This command has no default behavior or value
CONFIGURATION
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 6.2.1.1

Introduced

The following figure runs the macro named test that was defined earlier.
FTOS(config)#interface range macro test
FTOS(config-if-range-te-0/0-3,gi-5/0-47,gi-13/0-89)#
FTOS

interface range

Configure a range of command (bulk configuration)

interface range macro (define)

Define a macro for an interface range (bulk configuration)

interface vlan
ces
Syntax

Configure a VLAN. You can configure up to 4094 VLANs.
interface vlan vlan-id

To delete a VLAN, use the no interface vlan vlan-id command.
Parameters

Defaults
Command Modes
Command
History

vlan-id

Not configured, except for the Default VLAN, which is configured as VLAN 1.
CONFIGURATION
Version 8.2.1.0

Support for 4093 VLANs on E-Series ExaScale. Prior releases supported
2094.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version
6.2.1.0

Introduced for E-Series

Example
Usage
Information

Enter a number as the VLAN Identifier.
Range: 1 to 4094.

FTOS(conf)#int vlan 3
FTOS(conf-if-vl-3)#

For more information on VLANs and the commands to configure them, refer to Virtual LAN
(VLAN) Commands.
FTP, TFTP, and SNMP operations are not supported on a VLAN. MAC ACLs are not
supported in VLANs. IP ACLs are supported. Refer to the Access Control Lists (ACL)
chapter.

Related
Commands

interface

Configure a physical interface.

interface loopback

Configure a loopback interface.

interface null

Configure a null interface.

interface port-channel

Configure a port channel group.

show vlan

Display the current VLAN configuration on the switch.

shutdown

Disable/Enable the VLAN.

tagged

Add a Layer 2 interface to a VLAN as a tagged interface.

untagged

Add a Layer 2 interface to a VLAN as an untagged interface.

ipg (10 Gigabit Ethernet interfaces)
e
Syntax

Set the Inter-packet Gap for traffic on 10 Gigabit Ethernet interface.
ipg {ieee-802.3ae | shrink}

Interfaces | 587

www.dell.com | support.dell.com

To return to the default of averaging the IPG, enter no ipg {shrink | ieee-802.3ae}
Parameters

Defaults
Command Modes
Command
History
Usage
Information

ieee-802.3ae

Enter the keyword ieee-802.3ae to set the IPG to 12 (12-15) bytes (packet
size dependent)

shrink

Enter the keyword shrink to set the IPG to 8 (8-11) bytes (packet size
dependent).

averaging the IPG
INTERFACE
pre-Version 6.1.1.0

Introduced for E-Series

For 10 Gigabit Ethernet interfaces only.
IPG equals 96 bits times from end of the previous packet to start of the pre-amble of the next
packet.

keepalive
ces

Syntax

On SONET interfaces, send keepalive packets periodically to keep an interface alive when it
is not transmitting data.
keepalive [seconds]

To stop sending SONET keepalive packets, enter no keepalive.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

588

|

Interfaces

seconds

(OPTIONAL) For SONET interfaces with PPP encapsulation enabled, enter the
number of seconds between keepalive packets.
Range: 0 to 23767
Default: 10 seconds

Enabled
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.2

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.0

Introduced for E-Series

When you configure keepalive, the system sends a self-addressed packet out of the configured
interface to verify that the far end of a WAN link is up. When you configure no keepalive, the
system does not send keepalive packets and so the local end of a WAN link remains up even
if the remote end is down.

lfs enable
e
Syntax

Enable Link Fault Signaling (LFS) on 10 Gigabit Ethernet interfaces only.
lfs enable

To disable LFS, enter no lfs enable.
Defaults
Command Modes
Command
History
Usage
Information

Enabled.
INTERFACE (10 Gigabit Ethernet interfaces only)
pre-Version 6.1.1.0

Introduced for E-Series

If there is a failure on the link, FTOS brings down the interface. The interface will stay down
until the link failure signal stops.
Note: On TeraScale line cards, LFS is always enabled by default.

link debounce-timer
e
Syntax
Parameters

Command Modes
Command
History

Usage
Information

Assign the debounce time for link change notification on this interface.
link debounce [milliseconds]
milliseconds

Enter the time to delay link status change notification on this interface.
Range: 100-5000 ms
Default for copper is 3100 ms
Default for fiber is 100 ms

INTERFACE
Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on E-Series

Changes do not affect any ongoing debounces. The timer changes take affect from the next
debounce onward.

monitor interface
ces

Syntax

Monitor counters on a single interface or all interfaces on a line card. The screen is refreshed
every 5 seconds and the CLI prompt disappears.
monitor interface [interface]

To disable monitoring and return to the CLI prompt, press the q key.

Interfaces | 589

www.dell.com | support.dell.com

Parameters

Command Modes

(OPTIONAL) Enter the following keywords and slot/port or number information:
• For an 100/1000 Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For the management port, enter the keyword managementethernet followed
by the slot (0-1) and the port (0).
• For a SONET interface, enter the keyword sonet followed by the slot/port.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by
the slot/port information.

interface

EXEC
EXEC Privilege

Command
History

Usage
Information
Example
(Single Interface)

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.0

Introduced for E-Series

The delta column displays changes since the last screen refresh.
systest-3

Monitor time: 00:00:06

Refresh Intvl.: 2s

Time: 03:26:26

Interface: Gi 0/3, Enabled, Link is Up, Linespeed is 1000 Mbit
Traffic statistics:
Input bytes:
Output bytes:
Input packets:
Output packets:
64B packets:
Over 64B packets:
Over 127B packets:
Over 255B packets:
Over 511B packets:
Over 1023B packets:
Error statistics:
Input underruns:
Input giants:
Input throttles:
Input CRC:
Input IP checksum:
Input overrun:
Output underruns:
Output throttles:
m
l
T
q

590

|

Interfaces

-

Current
9069828
606915800
54001
9401589
67
49166
350
1351
286
2781

43
43
0
0
0
0
0
0
0
0

0
0
0
0
0
0
0
0

0
0
0
0
0
0
0
0

Change mode
Page up
Increase refresh interval
Quit

Rate
Bps
Bps
pps
pps
pps
pps
pps
pps
pps
pps
pps
pps
pps
pps
pps
pps
pps
pps

Delta
86
86
1
1
0
1
0
0
0
0
0
0
0
0
0
0
0
0

c - Clear screen
a - Page down
t - Decrease refresh interval

Example
(All Interfaces on
a Line Card)

[delta]

systest-3

Monitor time: 00:01:31

Interface

Link

0
0
42
24
2661385
832816
5
72

1
144
15
27
1
81293
0
0
18
9
1114221
523329

[delta]

Out Packets

Gi 0/0

Down

0

0

0

Gi 0/1

Down

0

0

0

Gi 0/2

Up

61512

52

66160

Gi 0/3

Up

63086

20

9405888

Gi 0/4

Up

14697471418

Gi 0/5

Up

3759

2661481
3

13392989657
161959604

Gi 0/6

Up

4070

3

8680346

Gi 0/7

Up

61934

34

138734357

Gi 0/8

Up

61427

1

59960

Up

62039

53

104239232

Gi 0/10

Up

17740044091

372

7373849244

Gi 0/11

Up

18182889225

44

Gi 0/12

Up

18182682056

0

Gi 0/13

Up

18182681434

43

Gi 0/14

Up

61349

55

86281941

Gi 0/15

Up

59808

58

62060

Gi 0/16

Up

59889

1

Gi 0/17

Up

Gi 0/18

Up

0

0

0

Gi 0/19

Down

0

0

0

3

138

Time: 03:54:14

Gi 0/9

1

79

In Packets

Refresh Intvl.: 2s

0

7184747584
3682
6592378911

61616
0

14950126

Gi 0/20

Up

62734

54

Gi 0/21

Up

60198

9

Gi 0/22

Up

17304741100

3157554

10102508511

Gi 0/23

Up

17304769659

3139507

7133354895

m
b
l
T
q

-

Change mode
Display bytes
Page up
Increase refresh interval
Quit

Table 22-2.
Key

62766
200899

c - Clear screen
r - Display pkts/bytes per sec
a - Page down
t - Decrease refresh interval

monitor Command Menu Options

Description

systest-3
monitor time
time

Displays the host name assigned to the system.
Displays the amount of time since the monitor interface command was entered.
Displays the amount of time the chassis is up (since last reboot).

m

Change the view from a single interface to all interfaces on the line card or
visa-versa.

c

Refresh the view.

b

Change the counters displayed from Packets on the interface to Bytes.

r

Change the [delta] column from change in the number of packets/bytes in the last
interval to rate per second.

Interfaces | 591

www.dell.com | support.dell.com

Table 22-2.
Key

monitor Command Menu Options

Description
l

Change the view to next interface on the line card, or if in the line card mode, the
next line card in the chassis.

a

Change the view to the previous interface on the line card, or if the line card mode,
the previous line card in the chassis.

T

Increase the screen refresh rate.

t

Decrease the screen refresh rate.

q

Return to the CLI prompt.

mtu
ces
Z
Syntax

Set the maximum Link MTU (frame size) for an Ethernet interface.

mtu value

To return to the default MTU value, enter no mtu.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

value

Enter a maximum frame size in bytes.
C-Series, E-Series, and S-Series range: 594 to 9252
S4810 and Z9000 range: 594 to 12000
Default: 1554

1554
INTERFACE
Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.0

Introduced for E-Series

If the packet includes a Layer 2 header, the difference between the link MTU and IP MTU (ip
mtu command) must be enough bytes to include the Layer 2 header:
•
•

On C-Series, the IP MTU will get adjusted automatically when the Layer 2 MTU
is configured with the mtu command.
On the E-Series, you must compensate for a Layer 2 header when configuring IP
MTU and link MTU on an Ethernet interface. Use the ip mtu command.

When you enter the no mtu command, FTOS reduces the IP MTU value to 1536 bytes. On the
E-Series, to return the IP MTU value to the default, enter no ip mtu.

592

|

Interfaces

Link MTU and IP MTU considerations for port channels and VLANs are as follows.
Port channels:
•
•

All members must have the same link MTU value and the same IP MTU value.
The port channel link MTU and IP MTU must be less than or equal to the link
MTU and IP MTU values configured on the channel members.

Example: if the members have a link MTU of 2100 and an IP MTU 2000, the port channel’s
MTU values cannot be higher than 2100 for link MTU or 2000 bytes for IP MTU.
VLANs:
•
•
•
Example

All members of a VLAN must have same IP MTU value.
Members can have different Link MTU values. Tagged members must have a
link MTU 4 bytes higher than untagged members to account for the packet tag.
The VLAN link MTU and IP MTU must be less than or equal to the link MTU
and IP MTU values configured on the VLAN members.

The VLAN contains tagged members with Link MTU of 1522 and IP MTU of 1500 and
untagged members with Link MTU of 1518 and IP MTU of 1500. The VLAN’s Link MTU
cannot be higher than 1518 bytes and its IP MTU cannot be higher than 1500 bytes.
Table 22-3.

Difference between Link MTU and IP MTU

Layer 2 Overhead

Link MTU and IP MTU Delta

Ethernet (untagged)

18 bytes

VLAN Tag

22 bytes

Untagged Packet with VLAN-Stack Header

22 bytes

Tagged Packet with VLAN-Stack Header

26 bytes

negotiation auto
ces

Syntax

Enable auto-negotiation on an interface.

negotiation auto

To disable auto-negotiation, enter no negotiation auto.
Defaults
Command Modes
Command
History

Enabled.
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Interfaces | 593

www.dell.com | support.dell.com

Usage
Information

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.0

Introduced for E-Series

This command is supported on C-Series, S-Series, and E-Series (TeraScale and ExaScale) 10/
100/1000 Base-T Ethernet interfaces.
The no negotiation auto command is only available if you first manually set the speed of a
port to 10Mbits or 100Mbits.
The negotiation auto command provides a mode option for configuring an individual port to
forced-master/forced slave once auto-negotiation is enabled
Note: The mode option is not available on non-10/100/1000 Base-T Ethernet line
cards.

Example
(Master/Slave)

FTOS(conf)# int gi 0/0
FTOS(conf-if)#neg auto
FTOS(conf-if-autoneg)# ?
end
Exit from configuration mode
exit
Exit from autoneg configuration mode
mode
Specify autoneg mode
no
Negate a command or set its defaults
show
Show autoneg configuration information
FTOS(conf-if-autoneg)#mode ?
forced-master
Force port to master mode
forced-slave
Force port to slave mode
FTOS(conf-if-autoneg)#

If the mode option is not used, the default setting is slave. If you do not configure
forced-master or forced slave on a port, the port negotiates to either a master or a slave state.
Port status is one of the following:
•
•
•
•
•

Forced-master
Force-slave
Master
Slave
Auto-neg Error—typically indicates that both ends of the node are configured
with forced-master or forced-slave.

Caution: Ensure that one end of your node is configured as forced-master and one is
configured as forced-slave. If both are configured the same (that is forced-master or
forced-slave), the show interfaces command will flap between an auto-neg-error and
forced-master/slave states.

You can display master/slave settings with the show interfaces command.
Example
(Display Master/
Slave setting)

594

|

Interfaces

FTOS#show interfaces configured
GigabitEthernet 13/18 is up, line protocol is up
Hardware is Force10Eth, address is 00:01:e8:05:f7:fc
Current address is 00:01:e8:05:f7:fc

Interface index is 474791997
Internet address is 1.1.1.1/24
MTU 1554 bytes, IP MTU 1500 bytes
LineSpeed 1000 Mbit, Mode full duplex, Master
ARP type: ARPA, ARP Timeout 04:00:00
Last clearing of "show interfaces" counters 00:12:42
Queueing strategy: fifo
Input Statistics:
...

Both sides of the link must have auto-negotiation enabled or disabled for the link to come up.
The following table details the possible speed and auto-negotiation combinations for a line
between two 10/100/1000 Base-T Ethernet interfaces.
Table 22-4.

Auto-negotiation and Link Speed Combinations
Link Status between
Port 1 and Port 2

Port 0

Port 1

auto-negotiation enabled*
speed 1000 or auto

auto-negotiation enabled*
speed 1000 or auto

Up at 1000 Mb/s

auto-negotiation enabled
speed 100

auto-negotiation enabled
speed 100

Up at 100 Mb/s

auto-negotiation disabled
speed 100

auto-negotiation disabled
speed 100

Up at 100 Mb/s

auto-negotiation disabled
speed 100

auto-negotiation enabled
speed 100

Down

auto-negotiation enabled*
speed 1000 or auto

auto-negotiation disabled
speed 100

Down

* You cannot disable auto-negotiation when the speed is set to 1000 or auto.
Related
Commands

speed (for 10/100/1000
interfaces)

Set the link speed to 10, 100, 1000 or auto-negotiate the speed.

portmode hybrid
ces

Syntax

Set a physical port or port-channel to accept both tagged and untagged frames. A port
configured this way is identified as a hybrid port in report displays.
portmode hybrid

To return a port to accept either tagged or untagged frames (non-hybrid), use the no portmode
hybrid command.
Defaults
Command Modes

non-hybrid
INTERFACE (conf-if-interface-slot/port)

Interfaces | 595

www.dell.com | support.dell.com

Command
History

Example

Usage
Information

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on E-Series and S-Series

Version 7.5.1.0

Introduced on C-Series only

FTOS(conf)#interface gi 7/0
FTOS(conf-if-gi-7/0)#portmode hybrid
FTOS(conf-if-gi-7/0)#interface vlan 10
FTOS(conf-if-vl-10)#untagged gi 7/0
FTOS(conf-if-vl-10)#interface vlan 20
FTOS(conf-if-vl-20)#tagged gi 7/0
FTOS(conf-if-vl-20)#

The example above sets a port as hybrid, makes the port a tagged member of VLAN 20, and
an untagged member of VLAN 10, which becomes the native VLAN of the port. The port
will now accept:
•
•

Example
(Tagged Hybrid
Interface)

untagged frames and classify them as VLAN 10 frames
VLAN 20 tagged frames

The next example shows output with “Hybrid” as the newly added value for 802.1QTagged.
The options for this field are:
•
•
•

True—port is tagged
False—port is untagged
Hybrid—port accepts both tagged and untagged frames

FTOS(conf-if-vl-20)#do show interfaces switchport
Name: GigabitEthernet 7/0
802.1QTagged: Hybrid
Vlan membership:
Vlan
10, Vlan
20
Native VlanId:
10
FTOS(conf-if-vl-20)#

Example
(Removing Hybrid
port configuration)

The text below is an example unconfiguration of the hybrid port using the no portmode hybrid
command.
Note: You must remove all other configurations on the port before you can remove
the hybrid configuration from the port.
FTOS(conf-if-vl-20)#interface vlan 10
FTOS(conf-if-vl-10)#no untagged gi 7/0
FTOS(conf-if-vl-10)#interface vlan 20
FTOS(conf-if-vl-20)#no tagged gi 7/0
FTOS(conf-if-vl-20)#interface gi 7/0
FTOS(conf-if-gi-7/0)#no portmode hybrid
FTOS(conf-if-vl-20)#

Related
Commands

596

|

Interfaces

show interfaces switchport

Display the configuration of switchport (Layer 2) interfaces on the
switch.

switchport

Place the interface in a Layer 2 mode.

vlan-stack trunk

Specify an interface as a trunk port to the Stackable VLAN network.

Interfaces | 597

www.dell.com | support.dell.com

rate-interval
ces
Syntax

Configure the traffic sampling interval on the selected interface.
rate-interval seconds

Parameters

seconds

Enter the number of seconds for which to collect traffic data.
Range: 30 to 299 seconds
Note: Since polling occurs every 15 seconds, the number of seconds designated
here will round to the multiple of 15 seconds lower than the entered value. For
example, if 44 seconds is designated it will round to 30; 45 to 59 seconds will
round to 45, and so forth.

Defaults
Command Modes

299 seconds
INTERFACE

Command
History

Usage
Information

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 6.1.1.0

Introduced

The configured rate interval is displayed, along with the collected traffic data, in the output of
show interfaces commands.

Related
Commands

show interfaces

Display information on physical and virtual interfaces.

show config
ces

Syntax
Command Modes
Command
History

Example

598

|

Interfaces

Display

the interface configuration.

show config

INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.0

Introduced for E-Series

FTOS(conf-if)#show conf
!
interface GigabitEthernet 1/7
no ip address
switchport
no shutdown

FTOS(conf-if)#

show config (from INTERFACE RANGE mode)
ces
Syntax
Command Modes
Command
History

Display

the bulk configured interfaces (interface range).

show config

CONFIGURATION INTERFACE (conf-if-range)
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 6.1.1.0

Introduced on E-Series

Example

FTOS(conf)#interface range gigabitethernet 1/1 - 2
FTOS(conf-if-range-gi-1/1-2)#show config
!
interface GigabitEthernet 1/1
no ip address
switchport
no shutdown
!
interface GigabitEthernet 1/2
no ip address
switchport
no shutdown
FTOS(conf-if-range-gi-1/1-2)#

show interfaces
ces

Syntax

Display information on a specific physical interface or virtual interface.

show interfaces interface

Interfaces | 599

www.dell.com | support.dell.com

Parameters

Command Modes

interface

Enter one of the following keywords and slot/port or number information:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by the
slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed
by the slot/port information.
• For a Loopback interface, enter the keyword loopback followed by a number
from 0 to 16383.
• For the management interface on an RPM, enter the keyword
ManagementEthernet followed by the slot/port information. The slot range is 0
to 1 and the port range is 0.
• For a Null interface, enter the keywords null 0.
• For a Port Channel interface, enter the keyword port-channel followed by a
number:
C-Series and S-Series Range: 1 to 128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a SONET interface, enter the keyword sonet followed by the slot/port.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by the
slot/port information.
• For a VLAN interface, enter the keyword vlan followed by a number from 1 to 4094.

EXEC
EXEC Privilege

Command
History

Usage
Information

Version 8.3.12.1

Updated command output to support multiple IPv6 addresses.

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 8.2.1.2

Include SFP and SFP+ optics power detail in E-Series and C-Series output.

Version 8.2.1.0

Support for 4093 VLANs on E-Series ExaScale. Prior releases supported 2094.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Output expanded to include SFP+ media in C-Series

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 6.4.1.0

Changed organization of display output

Version 6.3.1.0

Added Pluggable Media Type field in E-Series TeraScale output

Use this show interfaces command for details on a specific interface. Use the show interfaces
linecard command for details on all interfaces on the designated line card.
On the S4810, the show interface output displays incorrect rate information details over time
for link monitoring when the rate-interval is configured for 5 seconds. Dell Force10
recommends using higher rate-intervals such as 15 to 299 seconds to minimize the errors
Note: In the CLI output, the power value will be rounded to a 3-digit value. For
receive/transmit power that is less than 0.000, an snmp query will return the
corresponding dbm value even though the CLI displays as 0.000.

600

|

Interfaces

Note: After the counters are cleared, the line-rate continues to increase until it
reaches the maximum line rate. When the maximum line rate is reached, there will be
no change in the line-rate.
Example

FTOS#show interfaces
TenGigabitEthernet 2/0 is down, line protocol is down
Hardware is DellForce10Eth, address is 00:01:e8:8b:3d:e7
Current address is 00:01:e8:8b:3d:e7
Pluggable media present, Media type is unknown
Wavelength unknown
Interface index is 100992002
Internet address is not set
MTU 1554 bytes, IP MTU 1500 bytes
LineSpeed auto
Flowcontrol rx on tx off
ARP type: ARPA, ARP Timeout 04:00:00
Last clearing of "show interface" counters 3d17h53m
Queueing strategy: fifo
Input Statistics:
0 packets, 0 bytes
0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts
0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts
0 Multicasts, 0 Broadcasts
0 runts, 0 giants, 0 throttles
0 CRC, 0 overrun, 0 discarded
Output Statistics:
0 packets, 0 bytes, 0 underruns
0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts
0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts
0 Multicasts, 0 Broadcasts, 0 Unicasts
0 throttles, 0 discarded, 0 collisions, 0 wreddrops
Rate info (interval 299 seconds):
Input 00.00 Mbits/sec,
0 packets/sec, 0.00% of line-rate
Output 00.00 Mbits/sec,
0 packets/sec, 0.00% of line-rate
Time since last interface status change: 3d17h51m

Table 22-5.

Lines in show interfaces Command Example

Line

Description

TenGigabitEthernet 2/0...

Displays the interface’s type, slot/port, and administrative and line
protocol status.

Hardware is...

Displays the interface’s hardware information and its assigned MAC
address.

Interface index...

Displays the interface index number used by SNMP to identify the
interface.

Internet address...

States whether an IP address is assigned to the interface. If one is, that
address is displayed.

MTU 1554...

Displays link and IP MTU information.
If the chassis is in Jumbo mode, this number can range from 576 to
9252.

LineSpeed

Displays the interface’s line speed.

ARP type:...

Displays the ARP type and the ARP timeout value for the interface.

Last clearing...

Displays the time when the show interfaces counters where cleared.

Queuing strategy...

States the packet queuing strategy. FIFO means first in first out.

Interfaces | 601

www.dell.com | support.dell.com

Table 22-5.

Lines in show interfaces Command Example (continued)

Line

Description

Input Statistics:

Displays all the input statistics including:
• Number of packets and bytes into the interface
• Number of packets with IP headers, VLAN tagged headers and
MPLS headers
Note: The sum of the number of packets may not be as expected
since a VLAN tagged IP packet counts as both a VLAN packet and an
IP packet.

•
•

•

Output Statistics:

602

|

Interfaces

Packet size and the number of those packets inbound to the
interface
Number of symbol errors, runts, giants, and throttles packets:
symbol errors = number packets containing bad data. That
is, the port MAC detected a physical coding error in the
packet.
runts = number of packets that are less than 64B
giants = packets that are greater than the MTU size
throttles = packets containing PAUSE frames
Number of CRC, IP Checksum, overrun, and discarded packets:
CRC = packets with CRC/FCS errors
IP Checksum = packets with IP Checksum errors
overrun = number of packets discarded due to FIFO
overrun conditions
discarded = the sum of input symbol errors, runts, giants,
CRC, IP Checksum, and overrun packets discarded without
any processing

Displays output statistics sent out of the interface including:
• Number of packets, bytes and underruns out of the interface
packets = total number of packets
bytes = total number of bytes
underruns = number of packets with FIFO underrun
conditions
• Number of Multicast, Broadcast and Unicast packets:
Multicasts = number of MAC multicast packets
Broadcasts = number of MAC broadcast packets
Unicasts = number of MAC unicast packets
• Number of IP, VLAN and MPLs packets:
IP Packets = number of IP packets
Vlans = number of VLAN tagged packets
MPLS = number of MPLS packets (found on a LSR
interface)
• Number of throttles and discards packets:
throttles = packets containing PAUSE frames
discarded = number of packets discarded without any
processing

Table 22-5.

Example
(TeraScale)

Example
(1G SFP
Interface)

Lines in show interfaces Command Example (continued)

Line

Description

Rate information...

Estimate of the input and output traffic rate over a designated interval
(30 to 299 seconds).
Traffic rate is displayed in bits, packets per second, and percent of line
rate.

Time since...

Elapsed time since the last interface status change (hh:mm:ss format).

FTOS#show interfaces tengigabitethernet 0/0
TenGigabitEthernet 3/0 is up, line protocol is up
Hardware is Force10Eth, address is 00:01:e8:41:77:c5
Current address is 00:01:e8:41:77:c5
Pluggable media present, XFP type is 10GBASE-SR
Medium is MultiRate, Wavelength is 850.00nm
XFP receive power reading is -2.4834
Interface index is 134545468
Port will not be disabled on partial SFM failure
MTU 9252 bytes, IP MTU 9234 bytes
LineSpeed 10000 Mbit
Flowcontrol rx on tx on
ARP type: ARPA, ARP Timeout 04:00:00
Last clearing of "show interface" counters 00:15:14
Queueing strategy: fifo
Input Statistics:
4410013700 packets, 282240876800 bytes
0 Vlans
4410013700 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts
0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts
0 Multicasts, 0 Broadcasts
0 runts, 0 giants, 0 throttles
0 CRC, 0 overrun, 0 discarded
Output Statistics:
857732 packets, 54894848 bytes, 0 underruns
857732 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts
0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts
24 Multicasts, 0 Broadcasts, 857708 Unicasts
0 Vlans,0 throttles, 0 discarded, 0 collisions, 4409143619 wredDrops
Rate info (interval 30 seconds):
Input 00.00 Mbits/sec,
0 packets/sec, 0.00% of line-rate
Output 00.00 Mbits/sec,
0 packets/sec, 0.00% of line-rate
Time since last interface status change: 00:12:14
FTOS#
FTOS#show interfaces gigabitethernet 2/0
GigabitEthernet 2/0 is up, line protocol is down
Hardware is Force10Eth, address is 00:01:e8:41:77:95
Current address is 00:01:e8:41:77:95
Pluggable media present, SFP type is 1000BASE-SX
Wavelength is 850nm
Interface index is 100974648
Port will not be disabled on partial SFM failure
Internet address is not set
MTU 1554 bytes, IP MTU 1500 bytes
LineSpeed 1000 Mbit
Flowcontrol rx on tx on
ARP type: ARPA, ARP Timeout 04:00:00
Last clearing of "show interface" counters 1w0d5h
Queueing strategy: fifo
Input Statistics:
0 packets, 0 bytes

Interfaces | 603

www.dell.com | support.dell.com

0 Vlans
0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts
0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts
0 Multicasts, 0 Broadcasts
0 runts, 0 giants, 0 throttles
0 CRC, 0 overrun, 0 discarded
Output Statistics:
0 packets, 0 bytes, 0 underruns
0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts
0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts
0 Multicasts, 0 Broadcasts, 0 Unicasts
0 Vlans, 0 throttles, 0 discarded, 0 collisions, 0 wreddrops
Rate info (interval 299 seconds):
Input 00.00 Mbits/sec,
0 packets/sec, 0.00% of line-rate
Output 00.00 Mbits/sec,
0 packets/sec, 0.00% of line-rate
Time since last interface status change: 1w0d5h
FTOS#

Example
(10G SFP+
Interface C-Series)

Example
(show interfaces
ManagementEthernet)

Usage
Information

FTOS#show interfaces tengigabitethernet 0/44
TenGigabitEthernet 0/44 is down, line protocol is down
Hardware is Force10Eth, address is 00:01:e8:32:44:26
Current address is 00:01:e8:32:44:26
Pluggable media present, SFP+ type is 10GBASE-CU5M
Medium is MultiRate
Interface index is 45417732
FTOS#
FTOS#show interfaces managementethernet 0/0
ManagementEthernet 0/0 is up, line protocol is up
Hardware is Force10Eth, address is 00:01:e8:8b:3d:e1
Current address is 00:01:e8:8b:3d:e1
Pluggable media not present
Interface index is 436486344
Internet address is 10.30.4.154/24
Link local IPv6 address: fe80::201:e8ff:fe8b:3de1/64
Global IPv6 address: 1010:10::1/64
Global IPv6 address: 2000:1::1/64
Virtual-IP is not set
Virtual-IP IPv6 address is not set
MTU 1554 bytes, IP MTU 1500 bytes
LineSpeed 1000 Mbit, Mode full duplex
ARP type: ARPA, ARP Timeout 04:00:00
Last clearing of "show interface" counters 00:07:24
Queueing strategy: fifo
Input 55 packets, 4067 bytes, 54 multicast
Received 0 errors, 0 discarded
Output 40 packets, 6672 bytes, 39 multicast
Output 0 errors, 0 invalid protocol
Time since last interface status change: 00:07:19

On the C-Series and S-Series, the interface counter “over 1023-byte pkts” does not increment
for packets in the range 9216 > x < 1023.
The Management port is enabled by default (no shutdown). If necessary, use the ip address
command to assign an IP address to the Management port. If two RPMs are installed in your
system, use the show redundancy command to display which RPM is the Primary RPM.

Related
Commands

show interfaces configured

Display any interface with a non-default configuration.

show interfaces linecard

Display information on all interfaces on a specific line card.

show interfaces phy

604

|

Interfaces

show interfaces rate

Display information of either rate limiting or rate policing on the
interface.

show interfaces switchport

Display Layer 2 information about the interfaces.

show inventory (C-Series
and E-Series)

Display the chassis type, components (including media), FTOS
version including hardware identification numbers and configured
protocols.

show inventory (S-Series)

Display the S-Series switch type, components (including media),
FTOS version including hardware identification numbers and
configured protocols.

show ip interface

Display Layer 3 information about the interfaces.

show linecard

Display the line card(s) status.

show range

Display all interfaces configured using the interface range
command.

Interfaces | 605

www.dell.com | support.dell.com

show interfaces configured
ces

Syntax
Command Modes

any interface with a non-default configuration.

show interfaces configured

EXEC
EXEC Privilege

Command
History

Example

Related
Commands

606

Display

|

Interfaces

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 6.4.1.0

Changed organization of display output

FTOS#show interfaces configured
GigabitEthernet 13/18 is up, line protocol is up
Hardware is Force10Eth, address is 00:01:e8:05:f7:fc
Current address is 00:01:e8:05:f7:fc
Interface index is 474791997
Internet address is 1.1.1.1/24
MTU 1554 bytes, IP MTU 1500 bytes
LineSpeed 1000 Mbit, Mode full duplex, Master
ARP type: ARPA, ARP Timeout 04:00:00
Last clearing of "show interfaces" counters 00:12:42
Queueing strategy: fifo
Input Statistics:
10 packets, 10000 bytes
0 Vlans
0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts
0 over 255-byte pkts, 10 over 511-byte pkts, 0 over 1023-byte pkts
0 Multicasts, 0 Broadcasts
0 runts, 0 giants, 0 throttles
0 CRC, 0 overrun, 0 discarded
Output Statistics:
1 packets, 64 bytes, 0 underruns
1 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts
0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts
0 Multicasts, 1 Broadcasts, 0 Unicasts
0 Vlans, 0 throttles, 0 discarded, 0 collisions
Rate info (interval 299 seconds):
Input 00.00 Mbits/sec,
0 packets/sec, 0.00% of line-rate
Output 00.00 Mbits/sec,
0 packets/sec, 0.00% of line-rate
Time since last interface status change: 00:04:59
FTOS#

show interfaces

Display information on a specific physical interface or virtual interface.

show interfaces dampening
ces
Syntax
Parameters

Defaults
Command Modes
Command
History

Display interface dampening information.
show interfaces dampening [[interface] [summary] [detail]]
interface

(Optional) Enter one of the following keywords and slot/port or number
information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by a
number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a SONET interface, enter the keyword sonet followed by the slot/port
information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by
the slot/port information.

summary

(OPTIONAL) Enter the keyword summary to display the current summary of
dampening data, including the number of interfaces configured and the number
of interfaces suppressed, if any.

detail

(OPTIONAL) Enter the keyword detail to display detailed interface dampening
data.

No default values or behavior.
EXEC
Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced

Example
Max-Sup

FTOS#show interfaces dampening
Interface
Supp
Flaps
Gi 3/2
Gi 3/10
FTOS#

Related
Commands

State
Up
Up

0
0

Penalty
0
0

Half-Life
20
5

Reuse
800
750

Suppress
4500
2500

dampening

Configure dampening on an interface

show interfaces

Display information on a specific physical interface or virtual
interface.

show interfaces configured

Display any interface with a non-default configuration.

120
20

Interfaces | 607

www.dell.com | support.dell.com

show interfaces debounce
e
Syntax
Parameters

Command Modes

Display information on interfaces with debounce timer configured.
show interfaces debounce interface
interface

Enter one of the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed
by the slot/port information.

EXEC
EXEC Privilege

Command
History

Related
Commands

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.2.1.0

Introduced on E-Series ExaScale.

Version 7.7.1.0

Introduced on E-Series.

show interfaces

Display information on a specific physical interface or virtual interface.

show interfaces description
ces
Syntax

608

|

Interfaces

Display the descriptions configured on the interface.
show interfaces [interface] description

Parameters

Command Modes

interface

Enter one of the following keywords and slot/port or number information:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by the
slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed
by the slot/port information.
• For Loopback interfaces, enter the keyword loopback followed by a number from
0 to 16383.
• For the management interface on the RPM, enter the keyword
ManagementEthernet followed by the slot/port information. The slot range is
0-1 and the port range is 0.
• For the Null interface, enter the keywords null 0.
• For a Port Channel interface, enter the keyword port-channel followed by a
number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For SONET interfaces, enter the keyword sonet followed by the slot/port.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by the
slot/port information.
• For VLAN interfaces, enter the keyword vlan followed by a number from 1 to 4094.

EXEC
EXEC Privilege

Command
History

Example

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.2.1.0

Support for 4093 VLANs on E-Series ExaScale. Prior releases supported
2094.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

FTOS>
Interface
OK?
GigabitEthernet 4/17
NO
GigabitEthernet 4/18
NO
GigabitEthernet 4/19
NO
GigabitEthernet 4/20
NO
GigabitEthernet 4/21
NO
***connected-to-Radius-Server***
GigabitEthernet 4/22
NO
***connected-to-Web-Server***
GigabitEthernet 4/23
NO
TenGigabitEthernet 6/0 NO
GigabitEthernet 8/0
YES
GigabitEthernet 8/1
YES
GigabitEthernet 8/2
YES
GigabitEthernet 8/3
YES
GigabitEthernet 8/4
YES
GigabitEthernet 8/5
YES
GigabitEthernet 8/6
YES
GigabitEthernet 8/7
YES
GigabitEthernet 8/8
YES
GigabitEthernet 8/9
YES

Status
Protocol
admin down down
admin down down
admin down down
admin down down
up
down

Description
***connected-to-host***
***connected-to-Tom***
***connected-to-marketing***
***connected-to-Bill***

admin down down
admin down down
admin down down
up
up
up
up
up
up
up
up
up
up
up
up
up
up
up
up
up
up
up
up

***connected-to-PC-client***

Interfaces | 609

www.dell.com | support.dell.com

GigabitEthernet 8/10
GigabitEthernet 8/11
FTOS>

YES up
YES up

up
up

Table 22-6.

show interfaces description Command Example Fields

Field

Description

Interface

Displays type of interface and associated slot and port number.

OK?

Indicates if the hardware is functioning properly.

Status

States whether the interface is enabled (up) or disabled (administratively down).

Protocol

States whether IP is enabled (up) or disabled (down) on the interface.

Description Displays the description (if any) manually configured for the interface.
Related
Commands

show interfaces

Display information on a specific physical interface or virtual interface.

show interfaces linecard
ce

Display information on all interfaces on a specific line card.

Syntax

show interfaces linecard slot-number

Parameters

slot-number

Enter a number for the line card slot.
C-Series Range: 0-7 for C300; 0–3 for C150
E-Series Range: 0 to 13 on the E1200/1200i, 0 to 6 on the E600/600i, 0 to 5
on the E300

Command Modes

EXEC
Command
History

Usage

Example

610

|

Interfaces

EXEC Privilege
Version 8.1.1.2

Introduced support on E-Series ExaScale E600i

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

The following figure shows a line card that has an XFP interface. The type, medium,
wavelength, and receive power details are displayed. When a device that is not certified by
Dell Force10 is inserted, it might work, but its details might not be readable by FTOS and not
displayed here.
FTOS#show interfaces linecard 0
TenGigabitEthernet 0/0 is down, line protocol is down
Hardware is Force10Eth, address is 00:01:e8:51:b2:d4
Current address is 00:01:e8:51:b2:d4
Pluggable media present, XFP type is 10GBASE-SR
Medium is MultiRate, Wavelength is 850.00nm
XFP receive power reading is -2.3538
Interface index is 33883138
Internet address is not set

MTU 1554 bytes, IP MTU 1500 bytes
LineSpeed 10000 Mbit
ARP type: ARPA, ARP Timeout 04:00:00
Last clearing of "show interface" counters 20:16:29
Queueing strategy: fifo
Input Statistics:
0 packets, 0 bytes
0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts
0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts
0 Multicasts, 0 Broadcasts
0 runts, 0 giants, 0 throttles
0 CRC, 0 overrun, 0 discarded
Output Statistics:
0 packets, 0 bytes, 0 underruns
0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts
--More--

Related
Commands

show interfaces

Display information on a specific physical interface or virtual interface.

show interfaces phy
ces
Syntax
Parameters

Command Modes

Display auto-negotiation and link partner information.
show interfaces gigabitethernet slot/port phy
gigabitethernet

Enter the keyword gigabitethernet followed by the slot/port information.

EXEC
EXEC Privilege

Command
History

Example

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on C-Series and S-Series

Version 6.5.4.0

Introduced on E-Series

FTOS#show int gigabitethernet 1/0 phy
Mode Control:
SpeedSelection:
10b
AutoNeg:
ON
Loopback:
False
PowerDown:
False
Isolate:
False
DuplexMode:
Full
Mode Status:
AutoNegComplete:
False
RemoteFault:
False
LinkStatus:
False
JabberDetect:
False
AutoNegotation Advertise:
100MegFullDplx:
True
100MegHalfDplx:
True
10MegFullDplx:
False
10MegHalfDplx:
True
Asym Pause:
False
Sym Pause:
False
AutoNegotiation Remote Partner's Ability:

Interfaces | 611

www.dell.com | support.dell.com

100MegFullDplx:
100MegHalfDplx:
10MegFullDplx:
10MegHalfDplx:
Asym Pause:
Sym Pause:
AutoNegotiation Expansion:
ParallelDetectionFault:
...

612

Table 22-7.

|

Interfaces

False
False
False
False
False
False
False

Lines in show interfaces gigabitethernet Command Example

Line

Description

Mode Control

Indicates if auto negotiation is enabled. If so, indicates the selected
speed and duplex.

Mode Status

Displays auto negotiation fault information. When the interface
completes auto negotiation successfully, the autoNegComplete field
and the linkstatus field read “True.”

AutoNegotiation Advertise

Displays the control words advertised by the local interface during
negotiation. Duplex is either half or full. Asym- and Sym Pause is the
types of flow control supported by the local interface.

AutoNegotiation Remote
Partner’s Ability

Displays the control words advertised by the remote interface during
negotiation. Duplex is either half or full. Asym- and Sym Pause is the
types of flow control supported by the remote interface

AutoNegotiation
Expansion

ParallelDetectionFault is the handshaking scheme in which the link
partner continuously transmit an “idle” data packet using the Fast
Ethernet MLT-3 waveform. Equipment that does not support
auto-negotiation must be configured to exactly match the mode of
operation as the link partner or else no link can be established.

1000Base-T Control

1000Base-T requires auto-negotiation. The IEEE Ethernet standard
does not support setting a speed to 1000 Mbps with the speed
command without auto-negotiation. E-Series line cards support both
full-duplex and half-duplex 1000BaseT.

Phy Specific Control

Values are:
0 - Manual MDI
1 - Manual MDIX
2 - N/A
3 - Auto MDI/MDIX

Phy Specific Status

Displays PHY-specific status information. Cable length represents a
rough estimate in meters:
0 - < 50 meters
1 - 50 - 80 meters
2 - 80 - 110 meters
3 - 110 - 140 meters
4 - 140 meters.
Link Status:
Up or Down
Speed:
Auto
1000MB
100MB
10MB

Related
Commands

show interfaces

Display information on a specific physical interface or virtual
interface.

show interfaces stack-unit
sz

Display information on all interfaces on a specific S-Series stack member.

Syntax

show interfaces stack-unit unit-number

Parameters

Command Modes

unit-number

Enter the stack member number (0 to 7 for Z9000, 0-11 for S4810).

EXEC
EXEC Privilege

Command
History

Example

Version 8.3.11.1

Introduced on Z9000

Version 7.6.1.0

Introduced for S-Series only

FTOS#show interfaces stack-unit 0
GigabitEthernet 0/1 is down, line protocol is down
Hardware is Force10Eth, address is 00:01:e8:4c:f2:82
Current address is 00:01:e8:4c:f2:82
Pluggable media not present
Interface index is 34129154
Internet address is not set
MTU 1554 bytes, IP MTU 1500 bytes
LineSpeed auto, Mode auto
ARP type: ARPA, ARP Timeout 04:00:00
Last clearing of "show interface" counters 3w0d17h
Queueing strategy: fifo
Input Statistics:
0 packets, 0 bytes
5144 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts
0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts
0 Multicasts, 0 Broadcasts
0 runts, 0 giants, 0 throttles
0 CRC, 0 overrun, 0 discarded
Output Statistics:
0 packets, 0 bytes, 0 underruns
0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts
0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts
0 Multicasts, 0 Broadcasts, 0 Unicasts
0 throttles, 0 discarded, 0 collisions
Rate info (interval 299 seconds):
Input 00.00 Mbits/sec,
0 packets/sec, 0.00% of line-rate
Output 00.00 Mbits/sec,
0 packets/sec, 0.00% of line-rate
Time since last interface status change: 3w0d17h
GigabitEthernet 0/2 is down, line protocol is down
Hardware is Force10Eth, address is 00:01:e8:4c:f2:83
Current address is 00:01:e8:4c:f2:83
!-------------output truncated ----------------!

Interfaces | 613

www.dell.com | support.dell.com

Related
Commands

show hardware stack-unit

Display data plane and management plane input/output statistics.

show interfaces

Display information on a specific physical interface or virtual
interface.

show interfaces status
ces
Syntax
Parameters

Defaults
Command Modes

Display a summary of interface information or specify a line card slot and interface to display
status information on that specific interface only.
show interfaces [interface | linecard slot-number] status
interface

(OPTIONAL) Enter one of the following keywords and slot/port or
number information:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.

linecard slot-number

(OPTIONAL) Enter the keyword linecard followed by the slot number.
C-Series Range: 0 to 7 for C300; 0 to 3 for C150
E-Series Range: 0 to 13 on the E1200, 0 to 6 on the E600, 0 to 5 on the
E300

No default behavior or values
EXEC
EXEC Privilege

Command
History

Example

614

|

Interfaces

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 7.5.1.0

Introduced on E-Series

FTOS#show interfaces status
Port
Description Status Speed
Duplex Vlan
Gi 0/0
Up
1000 Mbit Auto
-Gi 0/1
Down
Auto
Auto
1
Gi 0/2
Down
Auto
Auto
1
Gi 0/3
Down
Auto
Auto
-Gi 0/4
FTOSPort Up
1000 Mbit Auto
30-130
Gi 0/5
Down
Auto
Auto
-Gi 0/6
Down
Auto
Auto
-Gi 0/7
Up
1000 Mbit Auto
1502,1504,1506-1508,1602
Gi 0/8
Down
Auto
Auto
-Gi 0/9
Down
Auto
Auto
-Gi 0/10
Down
Auto
Auto
-Gi 0/11
Down
Auto
Auto
-Gi 0/12
Down
Auto
Auto
--

Gi 0/13
Gi 0/14
Gi 0/15
FTOS#

Related
Commands

Down
Down
Down

show interfaces

Auto
Auto
Auto

Auto
Auto
Auto

----

Display information on a specific physical interface or virtual
interface.

show interfaces switchport
ces
Syntax
Parameters

Display only virtual and physical interfaces in Layer 2 mode. This command displays the
Layer 2 mode interfaces’ IEEE 802.1Q tag status and VLAN membership.
show interfaces switchport [interface [linecard slot-number] | stack-unit unit-id ]
interface

Enter one of the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by a
number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For SONET interfaces, enter the keyword sonet followed by the slot/port
information. This keyword is only available on E-Series and C-Series.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed
by the slot/port information.
• Enter the keyword backup to view the backup interface for this interface.

linecard

(OPTIONAL) Enter the keyword linecard followed by the slot number. This
option is available only on E-Series and C-Series.
C-Series Range: 0-7 for C300; 0–3 for C150
E-Series Range: 0 to 13 on the E1200, 0 to 6 on the E600, 0 to 5 on the E300

slot-number

stack-unit
unit-id

Command Modes

(OPTIONAL) Enter the keyword stack-unit followed by the stack member
number. This option is available only on S-Series.
Range: 0 to 1

EXEC
EXEC Privilege

Command
History

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.2.1.0

Support for 4093 VLANs on E-Series ExaScale

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Support added for hybrid port/native VLAN, introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series legacy command
Example

FTOS#show interfaces switchport
Name: GigabitEthernet 13/0

Interfaces | 615

www.dell.com | support.dell.com

802.1QTagged: Hybrid
Vlan membership:
Vlan
2, Vlan
20
Native VlanId: 20

Name: GigabitEthernet 13/1
802.1QTagged: True
Vlan membership:
Vlan
2

Name: GigabitEthernet 13/2
802.1QTagged: True
Vlan membership:
Vlan
2

Name: GigabitEthernet 13/3
802.1QTagged: True
Vlan membership:
Vlan
2
--More--

Table 22-8.

Related
Commands

Items in show interfaces switchport Command Example

Items

Description

Name

Displays the interface’s type, slot and port number.

802.1QTagged

Displays whether if the VLAN tagged (“True”), untagged (“False”), or
hybrid (“Hybrid”), which supports both untagged and tagged VLANs by
port 13/0.

Vlan membership

Lists the VLANs to which the interface is a member. Starting with FTOS
7.6.1, this field can display native VLAN membership by port 13/0.

interface

Configure a physical interface on the switch.

show ip interface

Displays Layer 3 information about the interfaces.

show interfaces

Display information on a specific physical interface or virtual interface.

show interfaces
transceiver

Display the physical status and operational status of an installed
transceiver. The output also displays the transceiver’s serial number.

show interfaces transceiver
cesz
Syntax
Parameters

616

|

Interfaces

Display the physical status and operational status of an installed transceiver. The output also
displays the transceiver’s serial number.
show interfaces [gigabitethernet slot/port | tengigabitethernet slot/port | fortyGigE slot/port] transceiver
gigabitethernet

For a 10/100/1000 interface, enter the keyword gigabitethernet followed
by the slot/port information.

Command Modes

tengigabitethernet

For a 10G interface, enter the keyword tengigabitethernet followed by
the slot/port information.

fortyGigE

For a 40G interface, enter the keyword fortyGigE followed by the slot/
port information.

EXEC
EXEC Privilege

Command
History

Usage

Version 8.3.11.1

Introduced on Z9000.

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.1.1.0

Introduced on E-Series ExaScale.

Version 7.8.1.0

Output augmented with diagnostic data for pluggable media.

Version 7.7.1.0

Removed three fields in output: Vendor Name, Vendor OUI, Vendor PN.

Version 7.6.1.0

Introduced on C-Series and S-Series.

Version 6.5.4.0

Introduced on E-Series.

Refer to the figure below for an example screenshot, and the following table or a description
of the output fields.
For related commands, the Related Commands section, below, and the Debugging and
Diagnostics chapter for your platform at the end of this book.

Example

FTOS#show interfaces gigabitethernet 1/0 transceiver
SFP is present.
SFP
SFP
SFP
SFP
SFP
SFP
SFP
SFP
SFP
SFP
SFP
SFP
SFP
SFP
SFP
SFP
SFP
SFP
SFP
SFP
SFP
SFP

0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

Serial Base ID fields
Id
= 0x03
Ext Id
= 0x04
Connector
= 0x07
Transciever Code
= 0x00 0x00 0x00 0x01 0x20 0x40 0x0c 0x05
Encoding
= 0x01
BR Nominal
= 0x15
Length(9um)
Km
= 0x00
Length(9um)
100m = 0x00
Length(50um)
10m
= 0x1e
Length(62.5um) 10m
= 0x0f
Length(Copper) 10m
= 0x00
Vendor Rev
= A
Laser Wavelength
= 850 nm
CheckCodeBase
= 0x66
Serial Extended ID fields
Options= 0x00 0x12
BR max= 0
BR min= 0
Vendor SN= P5N1ACE
Datecode
= 040528
CheckCodeExt
= 0x5b

SFP 1 Diagnostic Information
===================================
SFP 1 Rx Power measurement type
===================================
SFP 1 Temp High Alarm threshold
SFP 1 Voltage High Alarm threshold

= Average
= 95.000C
= 3.900V

Interfaces | 617

www.dell.com | support.dell.com

SFP 1 Bias High Alarm threshold
= 17.000mA
SFP 1 TX Power High Alarm threshold
= 0.631mW
SFP 1 RX Power High Alarm threshold
= 1.259mW
SFP 1 Temp Low Alarm threshold
= -25.000C
SFP 1 Voltage Low Alarm threshold
= 2.700V
SFP 1 Bias Low Alarm threshold
= 1.000mA
SFP 1 TX Power Low Alarm threshold
= 0.067mW
SFP 1 RX Power Low Alarm threshold
= 0.010mW
===================================
SFP 1 Temp High Warning threshold
= 90.000C
SFP 1 Voltage High Warning threshold
= 3.700V
SFP 1 Bias High Warning threshold
= 14.000mA
SFP 1 TX Power High Warning threshold = 0.631mW
SFP 1 RX Power High Warning threshold = 0.794mW
SFP 1 Temp Low Warning threshold
= -20.000C
SFP 1 Voltage Low Warning threshold
= 2.900V
SFP 1 Bias Low Warning threshold
= 2.000mA
SFP 1 TX Power Low Warning threshold
= 0.079mW
SFP 1 RX Power Low Warning threshold
= 0.016mW
===================================
SFP 1 Temperature
= 39.930C
SFP 1 Voltage
= 3.293V
SFP 1 Tx Bias Current
= 6.894mA
SFP 1 Tx Power
= 0.328mW
SFP 1 Rx Power
= 0.000mW
===================================
SFP 1 Data Ready state Bar
= False
SFP 1 Rx LOS state
= True
SFP 1 Tx Fault state
= False
SFP 1 Rate Select state
= False
SFP 1 RS state
= False
SFP 1 Tx Disable state
= False
===================================
SFP 1 Temperature High Alarm Flag
= False
SFP 1 Voltage High Alarm Flag
= False
SFP 1 Tx Bias High Alarm Flag
= False
SFP 1 Tx Power High Alarm Flag
= False
SFP 1 Rx Power High Alarm Flag
= False
SFP 1 Temperature Low Alarm Flag
= False
SFP 1 Voltage Low Alarm Flag
= False
SFP 1 Tx Bias Low Alarm Flag
= False
SFP 1 Tx Power Low Alarm Flag
= False
SFP 1 Rx Power Low Alarm Flag
= True
===================================
!-------output truncated -------------------------!

Table 22-9.

618

|

Interfaces

Diagnostic Data in show interfaces transceiver

Line

Description

Rx Power measurement
type

Output depends on the vendor, typically either “Average” or “OMA”
(Receiver optical modulation amplitude).

Temp High Alarm
threshold

Factory-defined setting, typically in Centigrade. Value differs
between SFPs and SFP+.

Voltage High Alarm
threshold

Displays the interface index number used by SNMP to identify the
interface.

Bias High Alarm threshold

Factory-defined setting. Value can differ between SFP and SFP+.

TX Power High Alarm
threshold

Factory-defined setting. Value can differ between SFP and SFP+.

Table 22-9.

Diagnostic Data in show interfaces transceiver (continued)

Line

Description

RX Power High Alarm
threshold

Factory-defined setting. Value can differ between SFP and SFP+.

Temp Low Alarm
threshold

Factory-defined setting. Value can differ between SFP and SFP+.

Voltage Low Alarm
threshold

Factory-defined setting. Value can differ between SFP and SFP+.

Bias Low Alarm threshold

Factory-defined setting. Value can differ between SFP and SFP+.

TX Power Low Alarm
threshold

Factory-defined setting. Value can differ between SFP and SFP+.

RX Power Low Alarm
threshold

Factory-defined setting. Value can differ between SFP and SFP+.

Temp High Warning
threshold

Factory-defined setting. Value can differ between SFP and SFP+.

Voltage High Warning
threshold

Factory-defined setting. Value can differ between SFP and SFP+.

Bias High Warning
threshold

Factory-defined setting. Value can differ between SFP and SFP+.

TX Power High Warning
threshold

Factory-defined setting. Value can differ between SFP and SFP+.

RX Power High Warning
threshold

Factory-defined setting. Value can differ between SFP and SFP+.

Temp Low Warning
threshold

Factory-defined setting. Value can differ between SFP and SFP+.

Voltage Low Warning
threshold

Factory-defined setting. Value can differ between SFP and SFP+.

Bias Low Warning
threshold

Factory-defined setting. Value can differ between SFP and SFP+.

TX Power Low Warning
threshold

Factory-defined setting. Value can differ between SFP and SFP+.

Power Low Warning
threshold

Factory-defined setting. Value can differ between SFP and SFP+.

Temperature

Current temperature of the sfps.If this temperature crosses Temp High
alarm/warning thresholds, then the temperature high alarm/warning
flag is set to true.

Voltage

Current voltage of the sfps.If this voltage crosses voltage high alarm/
warning thresholds, then the voltage high alarm/warning flag is set to
true.

Tx Bias Current

Present Tx bias current of the SFP. If this crosses bias high alarm/
warning thresholds, then the tx bias high alarm/warning flag is set to
true. If it falls below the low alarm/warning thresholds, then the tx
bias low alarm/warning flag is set to true.

Interfaces | 619

www.dell.com | support.dell.com

Table 22-9.

620

|

Interfaces

Diagnostic Data in show interfaces transceiver (continued)

Line

Description

Tx Power

Present Tx power of the SFP. If this crosses Tx power alarm/warning
thresholds, then the Tx power high alarm/warning flag is set to true. If
it falls below the low alarm/warning thresholds, then the Tx power
low alarm/warning flag is set to true.

Rx Power

Present Rx power of the SFP. This value is either average Rx power or
OMA.This depends upon on the Rx Power measurement type
displayed above. If this crosses Rx power alarm/warning thresholds,
then the Rx power high alarm/warning flag is set to true. If it falls
below the low alarm/warning thresholds, then the Rx power low
alarm/warning flag is set to true.

Data Ready state Bar

This field indicates that the transceiver has achieved power up and
data is ready. This is set to true if data is ready to be sent, false if data
is being transmitted.

Rx LOS state

This is the digital state of the Rx_LOS output pin.This is set to true if
the operating status is down.

Tx Fault state

This is the digital state of the Tx Fault output pin.

Rate Select state

This is the digital state of the SFP rate_select input pin.

RS state

This is the reserved digital state of the pin AS(1) per SFF-8079 and
RS(1) per SFF-8431.

Tx Disable state

If the admin status of the port is down then this flag will be set to true.

Temperature High Alarm
Flag

This can be either true/False and it depends on the Current
Temperature value displayed above.

Voltage High Alarm Flag

This can be either true or false, depending on the Current voltage
value displayed above.

Tx Bias High Alarm Flag

This can be either true or false, depending on the present Tx bias
current value displayed above.

Tx Power High Alarm Flag

This can be either true or false, depending on the Current Tx power
value displayed above.

Rx Power High Alarm Flag

This can be either true or false, depending on the Current Rx power
value displayed above.

Temperature Low Alarm
Flag

This can be either true or false, depending on the Current Temperature
value displayed above.

Voltage Low Alarm Flag

This can be either true or false, depending on the Current voltage
value displayed above.

Tx Bias Low Alarm Flag

This can be either true or false, depending on the Tx bias current value
displayed above.

Tx Power Low Alarm Flag

This can be either true or false, depending on the Current Tx power
value displayed above.

Rx Power Low Alarm Flag

This can be either true or false, depending on the Current Rx power
value displayed above.

Temperature High Warning
Flag

This can be either true or false, depending on the Current Temperature
value displayed above.

Table 22-9.

Related
Commands

Diagnostic Data in show interfaces transceiver (continued)

Line

Description

Voltage High Warning
Flag

This can be either true or false, depending on the Current voltage
value displayed above.

Tx Bias High Warning Flag

This can be either true or false, depending on the Tx bias current value
displayed above.

Tx Power High Warning
Flag

This can be either true or false, depending on the Current Tx power
value displayed above.

Rx Power High Warning
Flag

This can be either true or false, depending on the Current Tx power
value displayed above.

Temperature Low Warning
Flag

This can be either true or false, depending on the Current Temperature
value displayed above.

Voltage Low Warning Flag

This can be either true or false, depending on the Current voltage
value displayed above.

Tx Bias Low Warning Flag

This can be either true or false, depending on the present Tx bias
current value displayed above.

Tx Power Low Warning
Flag

This can be either true or false, depending on the Current Tx power
value displayed above.

Rx Power Low Warning
Flag

This can be either true or false, depending on the Current Rx power
value displayed above.

interface

Configure a physical interface on the switch.

show ip interface

Displays Layer 3 information about the interfaces.

show interfaces

Display information on a specific physical interface or virtual interface.

show inventory
(C-Series and E-Series)

Display the chassis type, components (including media), FTOS version
including hardware identification numbers and configured protocols.

show inventory
(S-Series)

Display the S-Series switch type, components (including media), FTOS
version including hardware identification numbers and configured
protocols.

show range
ces
Syntax
Command Mode
Command
History

Display all interfaces configured using the interface range command.
show range

INTERFACE RANGE (config-if-range)
Version 8.2.1.0

Support for 4093 VLANs on E-Series ExaScale

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 6.1.1.0

Introduced

Interfaces | 621

www.dell.com | support.dell.com

Example

622

Related
Commands

|

Interfaces

FTOS(conf-if-range-so-2/0-1,fa-0/0)#show range
interface sonet 2/0 - 1
interface fastethernet 0/0
FTOS(conf-if-range-so-2/0-1,fa-0/0)#

interface

Configure a physical interface on the switch.

show ip interface

Displays Layer 3 information about the interfaces.

show interfaces

Display information on a specific physical interface or virtual interface.

show running-config ecmp-group
Display interfaces, LAG, or LAG link bundles being monitored for uneven traffic distribution
using the ecmp-group monitoring enable command. The ECMP group could have a LAG or a
list of 10G/40 interfaces (not just LAG link-bundles).
Syntax
Command Mode
Defaults
Command
History
Related
Commands

show running-config ecmp-group

CONFIGURATION
Disabled
Version 8.3.10.0

Introduced on S4810

ecmp-group

Configure a mechanism to monitor traffic distribution.

shutdown
ces

Syntax

Disable an interface.

shutdown

To activate an interface, enter no shutdown.
Defaults
Command Modes
Command
History

The interface is disabled.
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series legacy command
Usage
Information

The shutdown command marks a physical interface as unavailable for traffic. To discover if
an interface is disabled, use the show ip interface brief command. Disabled interfaces are
listed as down.
Disabling a VLAN or a port channel causes different behavior. When a VLAN is disabled, the
Layer 3 functions within that VLAN are disabled. Layer 2 traffic continues to flow. Entering
the shutdown c command on a port channel disables all traffic on the port channel and the
individual interfaces within the port channel. To enable a port channel, you must enter no
shutdown on the port channel interface and at least one interface within that port channel.
The shutdown c and description commands are the only commands that you can configure on
an interface that is a member of a port channel.

Interfaces | 623

www.dell.com | support.dell.com

Related
Commands

interface port-channel

Create a port channel interface.

interface vlan

Create a VLAN.

show ip interface

Displays the interface routing status. Add the keyword brief to display
a table of interfaces and their status.

speed (for 10/100/1000 interfaces)
ces

Syntax

Set the speed for 10/100/1000 Base-T Ethernet interfaces. Both sides of a link must be set to
the same speed (10/100/1000) or to auto or the link may not come up.
speed {10 | 100 | 1000 | auto}

To return to the default setting, use the no speed {10 | 100 | 1000} command.
Parameters

Defaults
Command Modes
Command
History

10

Enter the keyword 10 to set the interface’s speed to 10 Mb/s.
Note: This interface speed is not supported on the LC-EH-GE-50P or the
LC-EJ-GE-50P card. If the command is entered for these interfaces, an
error message appears.

100

Enter the keyword 100 to set the interface’s speed to 10/100 Mb/s.
Note: When this setting is enabled, only 100Base-FX optics are
supported on the LC-EH-GE-50P or the LC-EJ-GE-50P card.

1000

Enter the keyword 1000 to set the interface’s speed to 1000 Mb/s.
(Auto-negotiation is enabled. Refer to negotiation auto for more information)
When this setting is enabled, only 100oBase-FX optics are supported on the
LC-EH-GE-50P or the LC-EJ-GE-50P card.

auto

Enter the keyword auto to set the interface to auto-negotiate its speed.
(Auto-negotiation is enabled. Refer to negotiation auto for more information)

auto

INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 8.3.1.0

Supported on LC-EH-GE-50P or the LC-EJ-GE-50P cards

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series legacy command
Usage
Information

This command is found on the 10/100/1000 Base-T Ethernet interfaces.
When auto is enabled, the system performs and automatic discovery to determine the optics
installed and configure the appropriate speed.

624

|

Interfaces

When you configure a speed for the 10/100/1000 interface, you should confirm the
negotiation auto command setting. Both sides of the link should have auto-negotiation either
enabled or disabled. For speed settings of 1000 or auto, the software sets the link to
auto-negotiation and you cannot change that setting.
In FTOS, the command speed 100 is an exact equivalent of speed auto 100 in IOS.
Note: Starting with FTOS 7.8.1.0, when a copper SFP2 module with catalog number
GP-SFP2-1T is used in the S25P model of the S-Series, its speed can be manually set
with the speed command. When the speed is set to 10 or 100 Mbps, the duplex
command can also be executed.
Related
Commands

duplex (10/100
Interfaces)

Configure duplex mode on physical interfaces with the speed set to 10/100.

negotiation auto

Enable or disable auto-negotiation on an interface.

speed (Management interface)
ce

Set the speed for the Management interface.

z
Syntax

speed {10 | 100 | auto}

To return to the default setting, use the no speed {10 | 100} command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information
Related
Commands

10

Enter the keyword 10 to set the interface’s speed to 10 Mb/s.

100

Enter the keyword 100 to set the interface’s speed to 100 Mb/s.

auto

Enter the keyword auto to set the interface to auto-negotiate its speed.

auto

INTERFACE
Version 8.3.11.1

Introduced on Z9000.

Version 8.3.11.1

Introduced on S55, S60, and S4810.

Version 8.1.1.0

Introduced on E-Series ExaScale.

Version 7.5.1.0

Introduced on C-Series.

pre-Version 6.2.1.0

Introduced for E-Series.

This command is found on the Management interface only.

interface ManagementEthernet

Configure the Management port on the system (either the
Primary or Standby RPM).

Interfaces | 625

www.dell.com | support.dell.com

duplex (Management)

Set the mode of the Management interface.

management route

Configure a static route that points to the Management interface
or a forwarding router.

stack-unit portmode
z
Syntax

Split a single 40G port into 4-10G ports on the S4810 or Z9000.
stack-unit stack-unit port number portmode quad

Parameters

stack-unit

Enter the stack member unit identifier of the stack member to reset.
S4810 range: 0 to 11
Z9000 range: 0 to 7
Note: The S4810 commands accept Unit ID numbers 0-11, though S4810 supports
stacking up to 3 units only with FTOS version 8.3.7.1.

number

Defaults
Command Modes

Disabled
CONFIGURATION

Command
History

Usage
Information

Enter the port number of the 40G port to be split.
S4810 range: Enter one of the following port numbers: 48, 52, 56, or 60.
Z9000 range: 0 to 124 in multiples of 4 (0, 4, 8, 12, ... 120 124)

Version 8.3.11.1

Introduced on Z9000.

Version 8.3.7.1

Introduced on S4810.

Splitting a 40G port into 4x10G port is supported only on a standalone unit.
•
•
•
•

Split ports cannot be used as stack-link to stack an S4810.
Split ports S4810 unit cannot be a part of any stacked system.
The unit number with the split ports must be the default (stack-unit 0)
This can be verified using CLI “show system brief”. If the unit ID is different than 0, then it must
be renumbered to 0 before ports are split. By using the stackunit id renumber 0 command in EXEC
mode.

The quad port must be in a default configuration before it can be split into 4x10G ports. The
40G port is lost in the config when the port is split, so be sure the port is also removed from
other L2/L3 feature configurations.
The system must be reloaded after issuing the CLI for the change to take effect.

626

|

Interfaces

switchport
ces

Syntax

Place an interface in Layer 2 mode.

switchport [backup interface {gigabit slot/port | tengigabit slot/port | fortyGigE slot/port |
port-channel number}]

To remove an interface from Layer 2 mode and place it in Layer 3 mode, enter no switchport.
If a switchport backup interface is configured, you must first remove the backup
configuration. To remove a switchport backup interface, enter no switchport backup interface
{gigabit slot/port | tengigabit slot/port | fortyGigE slot/port | port-channel number}.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

backup
interface

Use this option to configure a redundant Layer 2 link without using Spanning
Tree. This keyword configures a backup port so that if the primary port fails the
backup port changes to the up state. If the primary later comes up, it becomes
the backup.

gigabit

Enter this keyword if the backup port is a 1G port.

tengigabit

Enter this keyword if the backup port is a 10G port.

fortyGigE

Enter this keyword if the backup port is a 40G port.

port-channel

Enter this keyword if the backup port is a static or dynamic port channel.

slot/port

Specify the line card and port number of the backup port.

Disabled (The interface is in Layer 3 mode.)
INTERFACE
Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.4.1.0

Added support for port-channel interfaces (port-channel number
option).

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.7.1.0

Added backup interface option.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.0

Introduced for E-Series

If an IP address or VRRP group is assigned to the interface, you cannot use the switchport
command on the interface. To use the switchport command on an interface, only the no ip
address and no shutdown statements must be listed in the show config output.
When you enter the switchport command, the interface is automatically added to the default
VLAN.

Interfaces | 627

www.dell.com | support.dell.com

To use the switchport backup interface command on a port, you must first enter the switchport
command. For details, the Configuring Redundant Links section in the Layer 2 chapter of the
FTOS Configuration Guide.
Related
Commands

interface port-channel

Create a port channel interface.

show interfaces switchport

Display information about switchport interfaces.

wanport
e
Syntax

Enable the WAN mode on a TenGigabitEthernet interface.
wanport

To disable the WAN Port, enter no wanport.
Defaults
Command Modes
Command
History

Usage
Information

Not configured.
CONFIGURATION
Version 8.1.1.2

Introduced on E-Series ExaScale

pre-Version 6.2.1.0

Introduced for E-Series

The port must be in a shutdown state to change from LAN mode to WAN mode and
vice-versa as shown in the figure below.
For E-Series ExaScale systems, you must configure all the ports in a port-pipe to either
WANPHY or non-WANPHY. They cannot be mixed on the same port-pipe.

Example

628

|

Interfaces

interface TenGigabitEthernet 13/0
no ip address
no shutdown
FTOS(conf-if-te-13/0)#
FTOS(conf-if-te-13/0)#wanport
% Error: Port should be in shutdown mode, config ignored Te 13/0.
FTOS(conf-if-te-13/0)#
FTOS(conf-if-te-13/0)#shutdown
FTOS(conf-if-te-13/0)#
FTOS(conf-if-te-13/0)#wanport
FTOS(conf-if-te-13/0)#

Port Channel Commands
A Link Aggregation Group (LAG) is a group of links that appear to a MAC client as if they
were a single link according to IEEE 802.3ad. In FTOS, a LAG is referred to as a Port
Channel.
Table 22-10.

Port Channel Limits
Maximum Port
Channel IDs

Platform

Maximum Members per
Port Channel

E-Series ExaScale

255

64

E-Series TeraScale

255

16

C-Series

128

8

S-Series

128

8

Because each port can be assigned to only one Port Channel, and each Port Channel must
have at least one port, some of those nominally available Port Channels might have no
function because they could have no members if there are not enough ports installed. In the
S-Series, those ports could be provided by stack members.
The commands in this section are specific to Port Channel interfaces:
•
•
•
•
•
•
•
•

channel-member
group
interface port-channel
minimum-links
port-channel failover-group
show config
show interfaces port-channel
show port-channel-flow

Note: The FTOS implementation of LAG or Port Channel requires that you configure
a LAG on both switches manually. For information on FTOS Link Aggregation Control
Protocol (LACP) for dynamic LAGs, refer to Link Aggregation Control Protocol
(LACP).
For more information on configuring and using Port Channels, refer to the FTOS
Configuration Guide.

Interfaces | 629

www.dell.com | support.dell.com

channel-member
ces

Syntax

Add an interface to the Port Channel, while in the INTERFACE PORTCHANNEL mode.

channel-member interface

To delete an interface from a Port Channel, use the no channel-member interface command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

interface

Enter the following keywords and slot/port or number information:
• For a 100/1000 Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed
by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the slot/port
information.
• For a Ten Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by
the slot/port information.

Not configured.
INTERFACE PORTCHANNEL
Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.0

Introduced for E-Series

Use the interface port-channel command to access this command.
You cannot add an interface to a Port Channel if the interface contains an IP address in its
configuration. Only the shutdown, description, mtu, and ip mtu commands can be configured
on an interface if it is to be added to a Port Channel. The mtu and ip mtu commands are only
available when the chassis is in Jumbo mode.
Link MTU and IP MTU considerations for Port Channels are:
•
•

All members must have the same link MTU value and the same IP MTU value.
The Port Channel link MTU and IP MTU must be less than or equal to the link
MTU and IP MTU values configured on the channel members.

Example: If the members have a link MTU of 2100 and an IP MTU 2000, the Port Channel’s
MTU values cannot be higher than 2100 for link MTU or 2000 bytes for IP MTU.

630

|

Interfaces

When an interface is removed from a Port Channel with the no channel-member command
syntax, the interface reverts to its configuration prior to joining the Port Channel.
An interface can belong to only one Port Channel.
On the E-Series TeraScale, you can add up to 16 interfaces to a Port Channel; E-Series
ExaScale can have up to 64. You can have eight interfaces per Port Channel on the C-Series
and S-Series. The interfaces can be located on different line cards but must be the same
physical type and speed (for example, all 1-Gigabit Ethernet interfaces). However, you can
combine 100/1000 interfaces and GE interfaces in the same Port Channel.
If the Port Channel contains a mix of interfaces with 100 Mb/s speed and 1000 Mb/s speed,
the software disables those interfaces whose speed does not match the speed of the first
interface configured and enabled in the Port Channel. If that first interface goes down, the
Port Channel does not change its designated speed; you must disable and re-enable the Port
Channel or change the order of the channel members configuration to change the designated
speed. Refer to the FTOS Configuration Guide for more information on Port Channels.
Related
Commands

description

Assign a descriptive text string to the interface.

interface port-channel

Create a Port Channel interface.

shutdown

Disable/Enable the port channel.

group
ces

Syntax

Group two LAGs in a supergroup (“fate-sharing group” or “failover group”).

group group_number port-channel number port-channel number

To remove an existing LAG supergroup, use the no group group_number command.
Parameters

Defaults
Command Modes
Command
History

Example

group_number

Enter an integer from 1 to 32 that will uniquely identify this LAG
fate-sharing group.

port-channel number

Enter the keyword port-channel followed by an existing LAG
number. Enter this keyword/variable combination twice, identifying
the two LAGs to be paired.

No default values or behavior
PORT-CHANNEL FAILOVER-GROUP (conf-po-failover-grp)
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced for C-Series, E-Series, and S-Series

FTOS(conf)#port-channel failover-group
FTOS(conf-po-failover-grp)#group 1 port-channel 1 port-channel 2

Interfaces | 631

www.dell.com | support.dell.com

FTOS(conf-po-failover-grp)#

Related
Commands

port-channel failover-group

Access the PORT-CHANNEL FAILOVER-GROUP mode to
configure a LAG failover group.

show interfaces port-channel

Display information on configured Port Channel groups.

interface port-channel
ces

Syntax

Create a Port Channel interface, which is a link aggregation group containing up to 16
physical interfaces on E-Series, eight physical interfaces on C-Series and S-Series.

interface port-channel channel-number

To delete a Port Channel, use the no interface port-channel channel-number command.
Parameters

Defaults
Command Modes
Command
History

Example
Usage
Information

channel-number

For a Port Channel interface, enter the keyword port-channel followed by
a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.

Not configured.
CONFIGURATION
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.0

Introduced for E-Series

FTOS(conf)#int port-channel 2
FTOS(conf-if-po-2)#

Port Channel interfaces are logical interfaces and can be either in Layer 2 mode (by using the
switchport command) or Layer 3 mode (by configuring an IP address). You can add a Port
Channel in Layer 2 mode to a VLAN.
The shutdown, description, and name commands are the only commands that you can
configure on an interface while it is a member of a Port Channel. To add a physical interface
to a Port Channel, the interface can only have the shutdown, description, and name
commands configured. The Port Channel’s configuration is applied to the interfaces within
the Port Channel.
A Port Channel can contain both 100/1000 interfaces and GE interfaces. Based on the first
interface configured in the Port Channel and enabled, FTOS determines if the Port Channel
uses 100 Mb/s or 1000 Mb/s as the common speed. Refer to channel-member for more
information.

632

|

Interfaces

If the line card is in a Jumbo mode chassis, then the mtu and ip mtu commands can also be
configured. The Link MTU and IP MTU values configured on the channel members must be
greater than the Link MTU and IP MTU values configured on the Port Channel interface.
Note: In a Jumbo-enabled system, all members of a Port Channel must be configured
with the same link MTU values and the same IP MTU values.
Related
Commands

channel-member

Add a physical interface to the LAG.

interface

Configure a physical interface.

interface loopback

Configure a Loopback interface.

interface null

Configure a null interface.

interface vlan

Configure a VLAN.

shutdown

Disable/Enable the port channel.

minimum-links
ces

Syntax
Parameters

Defaults
Command Modes
Command
History

Usage
Information

Configure the minimum number of links in a LAG (Port Channel) that must be in “oper up”
status for the LAG to be also in “oper up” status.
minimum-links number
number

Enter the number of links in a LAG that must be in “oper up” status.
Range: 1 to 16
Default: 1

1
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.0

Introduced for E-Series

If you use this command to configure the minimum number of links in a LAG that must be in
“oper up” status, then the LAG must have at least that number of “oper up” links before it can
be declared as up.
For example, if the required minimum is four, and only three are up, then the LAG will be
considered down.

Interfaces | 633

www.dell.com | support.dell.com

port-channel failover-group
ces

Syntax

Access the PORT-CHANNEL FAILOVER-GROUP mode to configure a LAG failover
group.
port-channel failover-group

To remove all LAG failover groups, use the no port-channel failover-group command.
Defaults
Command Modes

No default values or behavior
CONFIGURATION

Command
History

Usage
Information

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced for C-Series, E-Series, and S-Series

This feature groups two LAGs to work in tandem as a supergroup, so that, for example, if one
LAG goes down, the other LAG is taken down automatically, providing an alternate path to
reroute traffic, avoiding oversubscription on the other LAG. You can use both static and
dynamic (LACP) LAGs to configure failover groups. For details, refer to the Port Channel
chapter in the FTOS Configuration Guide.

Related
Commands

group

Group two LAGs in a supergroup (“fate-sharing group”).

show interfaces port-channel

Display information on configured Port Channel groups.

show config
ces
Syntax
Command Modes
Example

Command
History

634

|

Interfaces

Display the current configuration of the selected LAG.
show config

INTERFACE PORTCHANNEL
FTOS(conf-if-po-1)#show config
!
interface Port-channel 1
no ip address
shutdown
FTOS(conf-if-po-1)#

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

show interfaces port-channel
ces
Syntax
Parameters

Command Modes

Display information on configured Port Channel groups.
show interfaces port-channel [channel-number] [brief]
channel-number

For a Port Channel interface, enter the keyword port-channel
followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.

brief

(OPTIONAL) Enter the keyword brief to display only the port channel
number, the state of the port channel, and the number of interfaces in
the port channel.

EXEC
EXEC Privilege

Command
History

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced for S-Series; Modified to display LAG failover group status

Version 7.5.1.0

Introduced for C-Series

E-Series legacy command
Example

FTOS#show interfaces port-channel 20
Port-channel 20 is up, line protocol is up (Failover-group 1 is down)
Hardware address is 00:01:e8:01:46:fa
Port-channel is part of failover-group 1
Internet address is 1.1.120.1/24
MTU 1554 bytes, IP MTU 1500 bytes
LineSpeed 2000 Mbit
Members in this channel: Gi 0/5 Gi 0/18
ARP type: ARPA, ARP timeout 04:00:00
Last clearing of "show interfaces" counters 00:00:00
Queueing strategy: fifo
44507301 packets input, 3563070343 bytes
Input 44506754 IP Packets, 0 Vlans 0 MPLS
41 64-byte pkts, 44502871 over 64-byte pkts, 249 over 127-byte pkts
407 over 255-byte pkts, 3127 over 511-byte pkts, 606 over 1023-byte pkts
Received 0 input symbol errors, 0 runts, 0 giants, 0 throttles
0 CRC, 0 IP Checksum, 0 overrun, 0 discarded
1218120 packets output, 100745130 bytes, 0 underruns
Output 5428 Multicasts, 4 Broadcasts, 1212688 Unicasts
1216142 IP Packets, 0 Vlans, 0 MPLS
0 throttles, 0 discarded
Rate info (interval 299 sec):
Input 01.50Mbits/sec,
2433 packets/sec
Output 00.02Mbits/sec,
4 packets/sec
Time since last interface status change: 00:22:34
FTOS#

Interfaces | 635

www.dell.com | support.dell.com

Table 22-11.

Example
(show interfaces
port-channel brief)

Field

Description

Port-Channel 1...

Displays the LAG’s status. In the example, the status of the LAG’s
LAG fate-sharing group (“Failover-group”) is listed.

Hardware is...

Displays the interface’s hardware information and its assigned MAC
address.

Port-channel is part...

Indicates whether the LAG is part of a LAG fate-sharing group
(“Failover-group”).

Internet address...

States whether an IP address is assigned to the interface. If one is, that
address is displayed.

MTU 1554...

Displays link and IP MTU.

LineSpeed

Displays the interface’s line speed. For a port channel interface, it is
the line speed of the interfaces in the port channel.

Members in this...

Displays the interfaces belonging to this port channel.

ARP type:...

Displays the ARP type and the ARP timeout value for the interface.

Last clearing...

Displays the time when the show interfaces counters were cleared.

Queueing strategy.

States the packet queuing strategy. FIFO means first in first out.

packets input...

Displays the number of packets and bytes into the interface.

Input 0 IP packets...

Displays the number of packets with IP headers, VLAN tagged
headers and MPLS headers.
The number of packets may not add correctly because a VLAN tagged
IP packet counts as both a VLAN packet and an IP packet.

0 64-byte...

Displays the size of packets and the number of those packets entering
that interface. This information is displayed over two lines.

Received 0...

Displays the type and number of errors or other specific packets
received. This information is displayed over three lines.

Output 0...

Displays the type and number of packets sent out the interface. This
information is displayed over three lines.

Rate information...

Displays the traffic rate information into and out of the interface.
Traffic rate is displayed in bits and packets per second.

Time since...

Displays the time since the last change in the configuration of this
interface.

FTOS#sh int por 1 br
LAG Mode
1
L2

FTOS#

636

|

Interfaces

show interfaces port-channel Command Example Fields

Status
up

Uptime
00:00:08

Ports
Gi 3/0
Gi 3/1
Gi 3/2

(Up) *
(Down)
(Up)

Table 22-12.

Related
Commands

show interfaces port-channel brief Command Example Fields

Field

Description

LAG

Lists the port channel number.

Mode

Lists the mode:
• L3 - for Layer 3
• L2 - for Layer 2

Status

Displays the status of the port channel.
• down - if the port channel is disabled (shutdown)
• up - if the port channel is enabled (no shutdown)

Uptime

Displays the age of the port channel in hours:minutes:seconds.

Ports

Lists the interfaces assigned to this port channel.

(untitled)

Displays the status of the physical interfaces (up or down).
In Layer 2 port channels, an * (asterisk) indicates which interface
is the primary port of the port channel. The primary port sends out
interface PDU.
In Layer 3 port channels, the primary port is not indicated.

show lacp

Display the LACP matrix.

show port-channel-flow
ces

Syntax

Display an egress port in a given port-channel flow.

show port-channel-flow outgoing-port-channel number incoming-interface interface {source-ip
address destination-ip address} | {protocol number | icmp | tcp | udp} | {source-port number
destination-port number} | {source-mac address destination-mac address}

Interfaces | 637

www.dell.com | support.dell.com

Parameters

outgoing-port-channel number

Enter the keyword outgoing-port-channel followed by the
number of the port channel to display flow information.
• For a Port Channel interface, enter the keyword
port-channel followed by a number:
C-Series and S-Series Range: 1 to 128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for
ExaScale.

incoming-interface interface

Enter the keyword incoming-interface followed by the
interface type and slot/port or number information:
• For a Fast Ethernet interface, enter the keyword
FastEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed
by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword
fortyGigE followed by the slot/port information.

source-ip address

Enter the keyword source-ip followed by the IP source address
in IP address format.

destination-ip address

Enter the keyword destination-ip followed by the IP
destination address in IP address format.

protocol number | icmp | tcp
udp

|

On the E-Series only, enter the keyword protocol followed by
one of the protocol type
keywords: tcp, udp, icmp or protocol number
Note: The protocol number keyword applies to E-Series only.

Command Modes
Command
History
Usage
Information

638

|

Interfaces

source-port number

Enter the keyword source-port followed by the source port
number.
Range: 1 to 65536
Default: None

destination-port number

Enter the keyword destination-port followed by the destination
port number.
Range: 1 to 65536
Default: None

source-mac address

Enter the keyword source-mac followed by the MAC source
address in the nn:nn:nn:nn:nn:nn format.

destination-mac address

Enter the keyword destination-mac followed by the MAC
destination address in the nn:nn:nn:nn:nn:nn format.

EXEC
Version 8.3.10.0

Introduced on S4810

Since this command calculates based on a Layer 2 hash algorithm, use this command to
display flows for switched Layer 2 packets, not for routed packets (use the show ip flow
command to display routed packets).

The show port-channel-flow command returns the egress port identification in a given
port-channel if a valid flow is entered. A mismatched flow error occurs if MAC-based
hashing is configured for a Layer 2 interface and the user is trying to display a Layer 3 flow.
The output will display three entries:
•
•
•

Egress port for unfragmented packets.
In the event of fragmented packets, egress port of the first fragment.
In the event of fragmented packets, egress port of the subsequent fragments.

Note: In the show port channel flow command output, the egress port for an unknown
unicast, multicast or broadcast traffic is not displayed.
Example

show port-channel-flow outgoing-port-channel number incoming-interface interface source-mac
address destination-mac address

•
•
•

Load-balance is configured for MAC
Load-balance is configured for IP 4-tuple/2-tuple for the C-Series and S-Series
A non-IP payload is going out of Layer 2 LAG interface that is a member of
VLAN with an IP address.

FTOS#show port-channel-flow outgoing-port-channel 1 incoming-interface gi 3/0
source-mac 00:00:50:00:00:00 destination-mac 00:00:a0:00:00:00
Egress Port for port-channel 1, for the given flow, is Te 13/01

Example
(E-Series)

On the E-Series only:
show port-channel-flow outgoing-port-channel number incoming-interface interface source-ip
address destination-ip address {protocol number [icmp/tcp/udp]} {source-port number
destination-port number}

•
•

Load-balance is configured for IP 5-tuple/3-tuple.
An IP payload is going out of a Layer 2 LAG interface that is a member of a
VLAN with an IP address.

FTOS#show port-channel-flow outgoing-port-channel 2 incoming-interface gi 3/0
source-ip 2.2.2.0 destination-ip 3.2.3.1 protocol tcp source-port 5 destination-port 6
Egress Port for port-channel 2, for the given flow:
Unfragmented packet: Gi 1/6
Fragmented packets (first fragment): Gi 1/12
Fragmented packets (remaining fragments): Gi 1/12

Related
Commands

load-balance (E-Series)

Balance traffic over E-Series port channel members.

Interfaces | 639

www.dell.com | support.dell.com

Time Domain Reflectometer (TDR)
ces

TDR is useful for troubleshooting an interface that is not establishing a link; either it is
flapping or not coming up at all. TDR detects open or short conditions of copper cables on
100/1000 Base-T modules.
•
•

tdr-cable-test
show tdr

Important Points to Remember
•

•
•
•

The interface and port must be enabled (configured— the interface command)
before running TDR. An error message is generated if you have not enabled the
interface.
The interface on the far-end device must be shut down before running TDR.
Since TDR is an intrusive test on an interface that is not establishing a link, do
not run TDR on an interface that is passing traffic.
When testing between two devices, do not run the test on both ends of the cable.

tdr-cable-test
ces

Syntax
Parameters

Defaults
Command Modes
Command
History

Usage
Information

640

|

Interfaces

Test the condition of copper cables on 100/1000 Base-T modules.

tdr-cable-test interface
interface

Enter the keyword GigabitEthernet followed by the slot/port
information for the 100/1000 Ethernet interface.

No default behavior or setting
EXEC
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

Version 6.1.1.0

Introduced on E-Series

The interface must be enabled to run the test or an error message is generated:

Message 1 FTOS#tdr-cable-test gigabitethernet 5/2
Message 2 %Error: Interface is disabled GI 5/2

The C-Series and S-Series do not generate log messages is generated when the link flaps
down/up during TDR tests. The E-series, does produce these log messages.
Related
Commands

show tdr

Display the results of the TDR test.

show tdr
ces

Syntax
Parameters

Defaults
Command Modes
Command
History

Example

Display the TDR test results.

show tdr interface
interface

Enter the keyword GigabitEthernet followed by the slot/port
information for the 100/1000 Ethernet interface.

No default behavior or settings
EXEC
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.7.1.0

Support added for S-Series

Version 7.6.1.0

Support added for C-Series

Version 6.1.1.0

Introduced

FTOS#show tdr gigabitethernet 10/47
Time since last test: 00:00:02
Pair A, Length: OK Status: Terminated
Pair B, Length: 92 (+/- 1) meters, Status: Short
Pair C, Length: 93 (+/- 1) meters, Status: Open
Pair D, Length: 0 (+/- 1) meters, Status: Impedance Mismatch

Table 22-13. TDR Test Status
Status

Definition

OK Status: Terminated

TDR test is complete, no fault is detected on the
cable, and the test is terminated

Length: 92 (+/- 1) meters, Status: Shorted

A short is detected on the cable. The location, in
this example 92 meters, of the short is accurate to
plus or minus one meter.

Length: 93 (+/- 1) meters, Status: Open

An opening is detected on the cable. The location,
in this example 93 meters, of the open is accurate
to plus or minus one meter.

Status: Impedance Mismatch

There is an impedance mismatch in the cables.

Interfaces | 641

www.dell.com | support.dell.com

Usage
Information

If the TDR test has not been run, an error messages is generated:
Message 3 %Error: Please run the TDR test first

Related
Commands

tdr-cable-test

Run the TDR test.

UDP Broadcast
The User Datagram Protocol (UDP) broadcast feature is a software-based method to forward
low throughput (not to exceed 200 pps) IP/UDP broadcast traffic arriving on a physical or
VLAN interface.

Important Points to Remember
•
•
•
•
•

This feature is available only on the E-Series platform, as noted by this symbol
under each command heading: e
This feature applies only to E-Series Layer 3 physical or VLAN interfaces.
Routing Information Protocol (RIP) is not supported with the UDP Broadcast
feature.
If this feature is configured on an interface using ip udp-helper udp-port, then the
command ip directed-broadcast becomes ineffective on that interface.
The existing command show interface has been modified to display the
configured broadcast address.

The commands for UDP Broadcast are:
•
•
•
•

debug ip udp-helper
ip udp-broadcast-address
ip udp-helper udp-port
show ip udp-helper

debug ip udp-helper
Enable UDP debug and display the debug information on a console.

e
Syntax

debug ip udp-helper

To disable debug information, use the no debug ip udp-helper command.
Defaults
Command Modes

Debug disabled
EXEC
EXEC Privilege

642

|

Interfaces

Example

FTOS#debug ip udp-helper
UDP helper debugging is on
01:20:22: Pkt rcvd on Gi 5/0 with IP DA (0xffffffff) will be sent on Gi 5/1 Gi 5/2 Vlan 3
01:44:54: Pkt rcvd on Gi 7/0 is handed over for DHCP processing.

Related
Commands

Command
History

ip udp-broadcast-address

Configure a UDP IP address for broadcast

ip udp-helper udp-port

Enable the UDP broadcast feature on an interface.

show ip udp-helper

Display the configured UDP helper(s) on all interfaces.

Version 8.3.7.0

Introduced on S4810

Pre-version 8.3.7.0

Introduced on E-Series ExaScale

ip udp-broadcast-address
Configure an IP UDP address for broadcast.

e
Syntax

ip udp-broadcast-address address

To delete the configuration, use the no ip udp-broadcast-address address command.
Parameters

Defaults
Command Modes
Usage
Information

Command
History

Related
Commands

address

Enter an IP broadcast address in dotted decimal format (A.B.C.D).

Not Configured
INTERFACE (config-if)
When a UDP broadcast packet is flooded out of an interface, and the outgoing interface is
configured using this command, the outgoing packet’s IP destination address is replaced with
the configured broadcast address.
Version 8.3.7.0

Introduced on S4810

Pre-version 8.3.7.0

Introduced on E-Series ExaScale

debug ip udp-helper

Enable debug and display the debug information on a console.

show ip udp-helper

Display the configured UDP helper(s) on all interfaces.

Interfaces | 643

www.dell.com | support.dell.com

ip udp-helper udp-port
Enable the UDP broadcast feature on an interface either for all UDP ports or a specified list of
UDP ports.

e
Syntax

ip udp-helper udp-port [udp-port-list]

To disable the UDP broadcast on a port, use the no ip udp-helper udp-port [udp-port-list]
command.
Parameters

udp-port-list

(OPTIONAL) Enter up to 16 comma separated UDP port numbers.
Note: If this option is not used, all UDP Ports are considered by default.

Defaults
Command Modes
Usage
Information

No default behavior or values
INTERFACE (config-if)
If the ip helper-address command and ip udp-helper udp-port command are configured, the
behavior is that the UDP broadcast traffic with port numbers 67/68 will be unicast relayed to
the DHCP server per the ip helper-address configuration. This will occur regardless if the ip
udp-helper udp-port command contains port numbers 67/68 or not.
If only the ip udp-helper udp-port command is configured, all the UDP broadcast traffic is
flooded, including ports 67/68 traffic if those ports are part of the udp-port-list.

Command
History

Related
Commands

644

|

Interfaces

Version 8.3.7.0

Introduced on S4810

Pre-version 8.3.7.0

Introduced on E-Series ExaScale

ip helper-address

Configure the destination broadcast or host address for DHCP server.

debug ip udp-helper

Enable debug and display the debug information on a console.

show ip udp-helper

Display the configured UDP helper(s) on all interfaces.

show ip udp-helper
Display the configured UDP helper(s) on all interfaces.

e
Syntax
Defaults
Command Modes
Example

Command
History

Related
Commands

show ip udp-helper

No default configuration or values
EXEC
FTOS#show ip udp-helper
-------------------------------------------------Port
UDP port list
-------------------------------------------------Gi 10/0 656, 658
Gi 10/1 All

Version 8.3.7.0

Introduced on S4810

Pre-version 8.3.7.0

Introduced on E-Series ExaScale

debug ip udp-helper

Enable debug and display the debug information on a console.

ip udp-broadcast-address

Configure a UDP IP address for broadcast.

ip udp-helper udp-port

Enable the UDP broadcast feature on an interface either for all UDP
ports or a specified list of UDP ports.

Interfaces | 645

646

|

Interfaces

www.dell.com | support.dell.com

23
IPv4 Routing
Overview
The basic IPv4 commands are supported by FTOS on all Dell Force10 systems, as indicated
by the characters that appear under each of the command headings: e E-Series, c
C-Series, s S-Series,
, or Z Z-Series.

Commands
IPv4-related commands are described in this chapter. They are:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

arp
arp learn-enable
arp retries
arp timeout
clear arp-cache
clear host
clear ip fib linecard
clear ip route
clear tcp statistics
debug arp
debug ip dhcp
debug ip icmp
debug ip packet
ip address
ip directed-broadcast
ip domain-list
ip domain-lookup
ip domain-name
ip fib download-igp-only
ip helper-address
ip helper-address hop-count disable
ip host

IPv4 Routing | 647

www.dell.com | support.dell.com

•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

arp

648

|

IPv4 Routing

ip max-frag-count
ip mtu
ip name-server
ip proxy-arp
ip redirects
ip route
ip source-route
ip unreachables
ip vlan-flooding
load-balance (C-Series and S-Series)
load-balance (E-Series)
management route
show arp
show arp retries
show hosts
show ip cam linecard
show ip cam stack-unit
show ip fib linecard
show ip fib stack-unit
show ip flow
show ip interface
show ip management-route
show ipv6 management-route
show ip protocols
show ip route
show ip route list
show ip route summary
show ip traffic
show protocol-termination-table
show tcp statistics

ces

Syntax

Use Address Resolution Protocol (ARP) to associate an IP address with a MAC address in the
switch.
arp vrf {vrf name} ip-address mac-address interface

To remove an ARP address, use the no arp ip-address command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information
Related
Commands

vrf name

E-Series Only: Enter the VRF process identifier to tie the static route to the
VRF process.

ip-address

Enter an IP address in dotted decimal format.

mac-address

Enter a MAC address in nnnn.nnnn.nnnn format.

interface

Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For the Management interface, enter the keyword ManagementEthernet
followed by the slot/port information. The slot range is 0-1 and the port
range is 0.
• For a Port Channel interface, enter the keyword port-channel followed by
a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a SONET interface, enter the keyword sonet followed by the slot/port
information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed
by the slot/port information.

Not configured.
CONFIGURATION
Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

You cannot use Class D or Class E IP addresses or zero IP address (0.0.0.0) when creating a
static ARP. Zero MAC addresses (00:00:00:00:00:00) are also invalid.
clear arp-cache

Clear dynamic ARP entries from the ARP table.

show arp

Display ARP table.

arp learn-enable
IPv4 Routing | 649

www.dell.com | support.dell.com

ces

Syntax
Defaults
Command Modes
Command
History

Usage
Information

Enable ARP learning via Gratuitous ARP.

arp learn-enable

Disabled
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 8.3.1.0

Introduced

In FTOS versions prior to 8.3.1.0, if a gratuitous ARP is received some time after an ARP
request is sent, only RP2 installs the ARP information. For example:
1. At time t=0 FTOS sends an ARP request for IP A.B.C.D
2. At time t=1 FTOS receives an ARP request for IP A.B.C.D
3. At time t=2 FTOS installs an ARP entry for A.B.C.D only on RP2.
Beginning with version 8.3.1.0, when a Gratuitous ARP is received, FTOS installs an ARP
entry on all 3 CPUs.

arp retries
ces

Syntax
Parameters

Defaults
Command Modes
Command
History

Usage
Information
Related
Commands

650

|

IPv4 Routing

Set the number of ARP retries in case the system does not receive an ARP reply in response
to an ARP request.
arp retries number
number

Enter the number of retries.
Range: 5 to 20.
Default: 5

5
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 8.3.1.0

Introduced

Retries are 20 seconds apart.

show arp retries

Display the configured number of ARP retries.

arp timeout
ces

Syntax

Set the time interval for an ARP entry to remain in the ARP cache.

arp timeout minutes

To return to the default value, enter no arp timeout.
Parameters

Defaults
Command Modes
Command
History

Related
Commands

seconds

Enter the number of minutes.
Range: 0 to 35790
Default: 240 minutes

240 minutes (4 hours)
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

show interfaces

Displays the ARP timeout value for all available interfaces.

clear arp-cache

IPv4 Routing | 651

www.dell.com | support.dell.com

ces

Syntax
Parameters

Clear the dynamic ARP entries from a specific interface or optionally delete (no-refresh) ARP
entries from CAM.
clear arp-cache [vrf name | interface | ip ip-address] [no-refresh]

vrf name

E-Series Only: Clear only the ARP cache entries tied to the VRF process.

interface

(OPTIONAL) Enter the following keywords and slot/port or number
information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For the Management interface, enter the keyword
ManagementEthernet followed by the slot/port information. The slot
range is 0-1 and the port range is 0.
• For a Port Channel interface, enter the keyword port-channel followed
by a number:
C-Series and S-Series Range: 1 to 128
E-Series Range:1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a SONET interface, enter the keyword sonet followed by the slot/
port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to
4094.

ip ip-address

(OPTIONAL) Enter the keyword ip followed by the IP address of the ARP
entry you wish to clear.

no-refresh

(OPTIONAL) Enter the keyword no-refresh to delete the ARP entry from
CAM. Or use this option with interface or ip ip-address to specify which
dynamic ARP entries you want to delete.
Note: Transit traffic may not be forwarded during the period when deleted
ARP entries are resolved again and re-installed in CAM. Use this option with
extreme caution.

Command Modes
Command
History

clear host

652

|

IPv4 Routing

EXEC Privilege
Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Support 4094 VLANs on E-Series ExaScale (prior limit was 2094)

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.9.1.0

Introduced VRF on the E-Series

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

ces

Syntax
Parameters

Command Modes
Command
History

Remove one or all dynamically learnt host table entries.

clear host name
name

Enter the name of the host to delete.
Enter * to delete all host table entries.

EXEC Privilege
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

clear ip fib linecard
ces

Syntax
Parameters

Command Mode

Clear all Forwarding Information Base (fib) entries in the specified line card (use this
command with caution. Refer to the Usage Information below.)
clear ip fib linecard slot-number | vrf vrf instance
slot-number

Enter the number of the line card slot.
C-Series and S-Series Range: 0 to 7
E-Series Range: 0 to 13 on E12001200i, 0 to 6 on E600/E600i; 0 to 5 on
E300

vrf instance

(Optional) E-Series Only: Clear only the FIB entries on the specified card
associated with the VRF instance.

EXEC
EXEC Privilege

Command
History

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.2

Introduced support on E-Series ExaScale E600i

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.9.1.0

Introduced VRF on the E-Series

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

IPv4 Routing | 653

www.dell.com | support.dell.com

Usage
Information

Use this command to clear Layer 3 CAM inconsistencies.
Caution: Executing this command will cause traffic disruption.

Related
Commands

show ip fib linecard

Show FIB entries.

clear ip route
ces

Syntax
Parameters

Command Modes
Command
History

Related
Commands

Clear one or all routes in the routing table.

clear ip route {* | ip-address mask | vrf vrf instance}
*

Enter an asterisk (*) to clear all learned IP routes.

ip-address mask

Enter a specific IP address and mask in dotted decimal format to
clear that IP address from the routing table.

vrf instance

(Optional) E-Series Only: Clear only the routes tied to the VRF
instance.

EXEC Privilege
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.9.1.0

Introduced VRF

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

ip route

Assign an IP route to the switch.

show ip route

View the routing table.

show ip route summary

View a summary of the routing table.

clear tcp statistics
ces

Syntax

Clear TCP counters.

clear tcp statistics [all | cp | rp1 | rp2]

Note: These options are supported only on the E-Series.

654

|

IPv4 Routing

Parameters

Command Modes
Command
History

all

Enter the keyword all to clear all TCP statistics maintained on all switch processors.

cp

(OPTIONAL) Enter the cp to clear only statistics from the Control Processor.

rp1

(OPTIONAL) Enter the keyword rp1 to clear only the statistics from Route Processor 1.

rp2

(OPTIONAL) Enter the keyword rp2 to clear only the statistics from Route Processor 2.

EXEC Privilege
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

debug arp
ces

Syntax

View information on ARP transactions.

debug arp [interface] [count value]

To stop debugging ARP transactions, enter no debug arp.
Parameters

Command Modes
Command
History

interface

(OPTIONAL) Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword gigabitethernet
followed by the slot/port information.
• For the Management interface, enter the keyword managementethernet
followed by the slot/port information. The slot range is 0-1 and the port range
is 0.
• For a Port Channel interface, enter the keyword port-channel followed by a
number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a SONET interface, enter the keyword sonet followed by the slot/port
information.
• For a 10-Gigabit Ethernet interface, enter the keyword tengigabitethernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by
the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.

count value

(OPTIONAL) Enter the keyword count followed by the count value.
Range: 1 to 65534

EXEC Privilege
Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Support 4094 VLANs on E-Series ExaScale (prior limit was 2094)

IPv4 Routing | 655

www.dell.com | support.dell.com

Defaults
Usage
Information

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 6.3.1.0

Added the count option

No default behavior or values
Use the count option to stop packets from flooding the user terminal when debugging is
turned on.

debug ip dhcp
ces

Syntax

Enable debug information for DHCP relay transactions and display the information on the
console.
debug ip dhcp

To disable debug, use the no debug ip dhcp command.
Defaults

Debug disabled

Command Modes

EXEC Privilege

Command
History

Example

656

|

IPv4 Routing

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Introduced on C-Series

Version 6.4.10

Introduced on E-Series

FTOS#debug ip dhcp
00:12:21 : %RELAY-I-PACKET: BOOTP REQUEST (Unicast) received at interface
113.3.3.17 BOOTP Request, hops = 0, XID = 0xbf05140f, secs = 0, hwaddr =
00:60:CF:20:7B:8C, giaddr = 0.0.0.0
00:12:21 : %RELAY-I-BOOTREQUEST: Forwarded BOOTREQUEST for 00:60:CF:20:7B:8C
to 14.4.4.2
00:12:26 : %RELAY-I-PACKET: BOOTP REQUEST (Unicast) received at interface
113.3.3.17 BOOTP Request, hops = 0, XID = 0xbf05140f, secs = 5, hwaddr =
00:60:CF:20:7B:8C, giaddr = 0.0.0.0
00:12:26 : %RELAY-I-BOOTREQUEST: Forwarded BOOTREQUEST for 00:60:CF:20:7B:8C
to 14.4.4.2
00:12:40 : %RELAY-I-PACKET: BOOTP REQUEST (Unicast) received at interface
113.3.3.17 BOOTP Request, hops = 0, XID = 0xda4f9503, secs = 0, hwaddr =
00:60:CF:20:7B:8C, giaddr = 0.0.0.0
00:12:40 : %RELAY-I-BOOTREQUEST: Forwarded BOOTREQUEST for 00:60:CF:20:7B:8C
to 14.4.4.2
00:12:42 : %RELAY-I-PACKET: BOOTP REPLY (Unicast) received at interface
14.4.4.1 BOOTP Reply, hops = 0, XID = 0xda4f9503, secs = 0, hwaddr =
00:60:CF:20:7B:8C, giaddr = 113.3.3.17
00:12:42 : %RELAY-I-BOOTREPLY: Forwarded BOOTREPLY for 00:60:CF:20:7B:8C to
113.3.3.254
00:12:42 : %RELAY-I-PACKET: BOOTP REQUEST (Unicast) received at interface
113.3.3.17 BOOTP Request, hops = 0, XID = 0xda4f9503, secs = 0, hwaddr =
00:60:CF:20:7B:8C, giaddr = 0.0.0.0
00:12:42 : %RELAY-I-BOOTREQUEST: Forwarded BOOTREQUEST for 00:60:CF:20:7B:8C
to 14.4.4.2
00:12:42 : %RELAY-I-PACKET: BOOTP REPLY (Unicast) received at interface
14.4.4.1 BOOTP Reply, hops = 0, XID = 0xda4f9503, secs = 0, hwaddr =
00:60:CF:20:7B:8C, giaddr = 113.3.3.17

00:12:42 : %RELAY-I-BOOTREPLY: Forwarded BOOTREPLY for 00:60:CF:20:7B:8C to
113.3.3.254
FTOS#

Related
Commands

ip helper-address

Specify the destination broadcast or host address for
DHCP server request.

ip helper-address hop-count disable

Disable hop-count increment for DHCP relay agent.

debug ip icmp
ces

Syntax

View information on the Internal Control Message Protocol (ICMP).

debug ip icmp [interface] [count value]

To disable debugging, use the no debug ip icmp command.
Parameters

Command Modes
Command
History

interface

(OPTIONAL) Enter the following keywords and slot/port or number
information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For the Management interface, enter the keyword ManagementEthernet
followed by the slot/port information. The slot range is 0 and the port range is
0-1.
• For a Port Channel interface, enter the keyword port-channel followed by a
number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a SONET interface, enter the keyword sonet followed by the slot/port
information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by
the slot/port information.
• For VLAN, enter the keyword vlan followed by a number from 1 to 4094.

count value

(OPTIONAL) Enter the keyword count followed by the count value.
Range: 1 to 65534
Default: Infinity

EXEC Privilege
Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Support 4094 VLANs on E-Series ExaScale (prior limit was 2094)

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 6.3.1.0

Added the count option

IPv4 Routing | 657

www.dell.com | support.dell.com

Example

Usage
Information

ICMP:
ICMP:
ICMP:
ICMP:
ICMP:
ICMP:
ICMP:
ICMP:

echo request rcvd from src 40.40.40.40
src 40.40.40.40, dst 40.40.40.40, echo
src 40.40.40.40, dst 40.40.40.40, echo
echo request sent to dst 40.40.40.40
echo request rcvd from src 40.40.40.40
src 40.40.40.40, dst 40.40.40.40, echo
src 40.40.40.40, dst 40.40.40.40, echo
echo request sent to dst 40.40.40.40

reply
reply

reply
reply

Use the count option to stop packets from flooding the user terminal when debugging is
turned on.

debug ip packet
ces

Syntax

View a log of IP packets sent and received.

debug ip packet [access-group name] [count value] [interface]

To disable debugging, use the no debug ip packet [access-group name] [count value] [interface]
command.
Parameters

658

|

IPv4 Routing

access-group name

Enter the keyword access-group followed by the access list name
(maximum 16 characters) to limit the debug output based on the
defined rules in the ACL.

count value

(OPTIONAL) Enter the keyword count followed by the count value.
Range: 1 to 65534
Default: Infinity

interface

(OPTIONAL) Enter the following keywords and slot/port or number
information:
• For a 1-Gigabit Ethernet interface, enter the keyword
gigabitethernet followed by the slot/port information.
• For the management interface on the RPM, enter the keyword
managementethernet followed by the slot/port information. The
slot range is 0-1 and the port range is 0.
• For a Port Channel interface, enter the keyword port-channel
followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a SONET interface, enter the keyword sonet followed by the
slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
tengigabitethernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from
1 to 4094.

Command Mode
Command
History

Example

EXEC Privilege
Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Support 4094 VLANs on E-Series ExaScale (prior limit was 2094)

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Added the access-group option

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 6.3.1.0

Added the count option

IP: s=10.1.2.62 (local), d=10.1.2.206 (Ma 0/0), len 54, sending
TCP src=23, dst=40869, seq=2112994894, ack=606901739, win=8191 ACK PUSH
IP: s=10.1.2.206 (Ma 0/0), d=10.1.2.62, len 40, rcvd
TCP src=0, dst=0, seq=0, ack=0, win=0
IP: s=10.1.2.62 (local), d=10.1.2.206 (Ma 0/0), len 226, sending
TCP src=23, dst=40869, seq=2112994896, ack=606901739, win=8192 ACK PUSH
IP: s=10.1.2.216 (Ma 0/0), d=10.1.2.255, len 78, rcvd
UDP src=0, dst=0
IP: s=10.1.2.62 (local), d=10.1.2.3 (Ma 0/0), len 1500, sending fragment
IP Fragment, Ident = 4741, fragment offset = 0
ICMP type=0, code=0
IP: s=10.1.2.62 (local), d=10.1.2.3 (Ma 0/0), len 1500, sending fragment
IP Fragment, Ident = 4741, fragment offset = 1480
IP: s=40.40.40.40 (local), d=224.0.0.5 (Gi 4/11), len 64, sending broad/
multicast proto=89
IP: s=40.40.40.40 (local), d=224.0.0.6 (Gi 4/11), len 28, sending broad/
multicast proto=2
IP: s=0.0.0.0, d=30.30.30.30, len 100, unroutable
ICMP type=8, code=0
IP: s=0.0.0.0, d=30.30.30.30, len 100, unroutable
ICMP type=8, code=0

Table 23-1.

debug ip packet Command Example Fields

Field

Description

s=

Lists the source address of the packet and the name of the interface
(in parentheses) that received the packet.

d=

Lists the destination address of the packet and the name of the
interface (in parentheses) through which the packet is being sent
out on the network.

len

Displays the packet’s length.

sending
rcvd
fragment
sending broad/multicast proto
unroutable

The last part of each line lists the status of the packet.

TCP src=

Displays the source and destination ports, the sequence number,
the acknowledgement number, and the window size of the packets
in that TCP packets.

UDP src=

Displays the source and destination ports for the UDP packets.

IPv4 Routing | 659

www.dell.com | support.dell.com

Table 23-1.

Usage
Information

debug ip packet Command Example Fields

Field

Description

ICMP type=

Displays the ICMP type and code.

IP Fragment

States that it is a fragment and displays the unique number
identifying the fragment (Ident) and the offset (in 8-byte units) of
this fragment (fragment offset) from the beginning of the original
datagram.

Use the count option to stop packets from flooding the user terminal when debugging is
turned on.
The access-group option supports only the equal to (eq) operator in TCP ACL rules. Port
operators not equal to (neq), greater than (gt), less than (lt), or range are not supported in
access-group option (Refer to the Example Error Messages below ). ARP packets (arp) and
Ether-type (ether-type) are also not supported in access-group option. The entire rule is
skipped to compose the filter.
The access-group option pertains to:
•
•
•
•
•

IP Protocol Number
0 to 255
Internet Control Message Protocol* icmp
* but not the ICMP message type (0-255)
Any Internet Protocol
ip
Transmission Control Protocol*
tcp
* but not on the rst, syn, or urg bit
User Datagram Protocol
udp

In the case of ambiguous access control list rules, the debug ip packet access-control
command will be disabled. A message appears identifying the error as shown below.
Example
(Error Messages)

FTOS#debug ip packet access-group test
%Error: port operator GT not supported in access-list debug
%Error: port operator LT not supported in access-list debug
%Error: port operator RANGE not supported in access-list debug
%Error: port operator NEQ not supported in access-list debug
FTOS#00:10:45: %RPM0-P:CP %IPMGR-3-DEBUG_IP_PACKET_ACL_AMBIGUOUS_EXP:
Ambiguous rules not supported in access-list debug, access-list debugging is turned
off
FTOS#

ip address

660

|

IPv4 Routing

ces

Syntax

Assign a primary and secondary IP address to the interface.

ip address ip-address mask [secondary]

To delete an IP address from an interface, use the no ip address [ip-address] command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

ip-address

Enter an IP address in dotted decimal format.

mask

Enter the mask of the IP address in slash prefix format (for example, /24).

secondary

(OPTIONAL) Enter the keyword secondary to designate the IP address as the
secondary address.

Not configured.
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

You must be in the INTERFACE mode before you add an IP address to an interface. Assign
an IP address to an interface prior to entering the ROUTER OSPF mode.

ip directed-broadcast
ces

Syntax

Enables the interface to receive directed broadcast packets.

ip directed-broadcast

To disable the interface from receiving directed broadcast packets, enter no ip
directed-broadcast.
Defaults
Command Modes
Command
History

Disabled (that is, the interface does not receive directed broadcast packets)
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

IPv4 Routing | 661

www.dell.com | support.dell.com

ip domain-list
ces

Syntax

Configure names to complete unqualified host names.

ip domain-list name

To remove the name, use the no ip domain-list name command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

name

Enter a domain name to be used to complete unqualified names (that is,
incomplete domain names that cannot be resolved).

Disabled.
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Configure the ip domain-list command up to 6 times to configure a list of possible domain
names.
If both the ip domain-name and ip domain-list commands are configured, the software will try
to resolve the name using the ip domain-name command. If the name is not resolved, the
software goes through the list of names configured with the ip domain-list command to find a
match.
Use the following steps to enable dynamic resolution of hosts:
•
•

specify a domain name server with the ip name-server command.
enable DNS with the ip domain-lookup command.

To view current bindings, use the show hosts command. To view DNS related configuration,
use the show running-config resolve command.
Related
Commands

ip domain-name

ip domain-lookup

662

|

IPv4 Routing

Specify a DNS server.

ces

Syntax

Enable dynamic host-name to address resolution (that is, DNS).

ip domain-lookup

To disable DNS lookup, use the no ip domain-lookup.
Defaults
Command Mode
Command
History

Usage
Information

Disabled.
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

To fully enable DNS, also specify one or more domain name servers with the ip name-server
command.
FTOS does not support sending DNS queries over a VLAN. DNS queries are sent out all
other interfaces, including the Management port.
To view current bindings, use the show hosts command.

Related
Commands

ip name-server

Specify a DNS server.

show hosts

View current bindings.

ip domain-name
ces

Syntax

Configure one domain name for the switch.

ip domain-name name

To remove the domain name, enter no ip domain-name.
Parameters

Defaults
Command Modes
Command
History

name

Enter one domain name to be used to complete unqualified names (that
is, incomplete domain names that cannot be resolved).

Not configured.
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

IPv4 Routing | 663

www.dell.com | support.dell.com

Usage
Information

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

You can only configure one domain name with the ip domain-name command. To configure
more than one domain name, configure the ip domain-list command up to 6 times.
Use the following steps to enable dynamic resolution of hosts:
•
•

specify a domain name server with the ip name-server command.
enable DNS with the ip domain-lookup command.

To view current bindings, use the show hosts command.
Related
Commands

ip domain-list

Configure additional names.

ip fib download-igp-only
e

Syntax

Configure the E-Series to download only IGP routes (for example, OSPF) on to line cards.
When the command is configured or removed, it clears the routing table (similar to clear ip
route command) and only IGP routes populate the table.
ip fib download-igp-only [small-fib]

To return to default setting, use the no ip fib download-igp-only [small-fib] command.
Parameters

Defaults
Command Modes
Command
History

small-fib

Disabled
CONFIGURATION
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

pre-Version 6.2.1.1

Introduced on E-Series

ip helper-address

664

|

IPv4 Routing

(OPTIONAL) Enter the keyword small-fib to download a smaller FIB table. This
option is useful on line cards with a limited FIB size.

ces

Syntax

Specify the address of a DHCP server so that DHCP broadcast messages can be forwarded
when the DHCP server is not on the same subnet as the client.
ip helper-address ip-address | default-vrf

To remove a DHCP server address, enter no ip helper-address.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

ip-address

Enter an IP address in dotted decimal format (A.B.C.D).

default-vrf

(Optional) E-Series Only: Enter default-vrf for the DHCP server VRF
is using.

Not configured.
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.9.1.0

Introduced VRF on the E-Series

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

pre-Version 6.2.1.1

Introduced on E-Series

You can add multiple DHCP servers by entering the ip helper-address command multiple
times. If multiple servers are defined, an incoming request is sent simultaneously to all
configured servers and the reply is forwarded to the DHCP client.
FTOS uses standard DHCP ports, that is UDP ports 67 (server) and 68 (client) for DHCP
relay services. It listens on port 67 and if it receives a broadcast, the software converts it to
unicast, and forwards to it to the DHCP-server with source port=68 and destination port=67.
The server replies with source port=67, destination port=67 and FTOS forwards to the client
with source port=67, destination port=68.

ip helper-address hop-count disable

IPv4 Routing | 665

www.dell.com | support.dell.com

ces

Syntax

Disable the hop-count increment for the DHCP relay agent.

ip helper-address hop-count disable

To re-enable the hop-count increment, use the no ip helper-address hop-count disable
command.
Defaults
Command Modes
Command
History

Usage
Information

Related
Commands

Enabled; the hops field in the DHCP message header is incremented by default
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

Version 6.3.1.0

Introduced for E-Series

This command disables the incrementing of the hops field when boot requests are relayed to a
DHCP server through FTOS. If the incoming boot request already has a non-zero hops field,
the message will be relayed with the same value for hops. However, the message will be
discarded if the hops field exceeds 16, to comply with the relay agent behavior specified in
RFC 1542.
ip helper-address

Specify the destination broadcast or host address for DHCP server
requests.

show running-config

Display the current configuration and changes from default values.

ip host
ces

Syntax

Assign a name and IP address to be used by the host-to-IP address mapping table.

ip host name ip-address

To remove an IP host, use the no ip host name [ip-address] command.
Parameters

666

|

IPv4 Routing

name

Enter a text string to associate with one IP address.

ip-address

Enter an IP address, in dotted decimal format, to be mapped to the name.

Defaults
Command Modes
Command
History

Not configured.
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

ip max-frag-count
ces

Syntax

Set the maximum number of fragments allowed in one packet for packet re-assembly.

ip max-frag-count count

To place no limit on the number of fragments allowed, enter no ip max-frag-count.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

count

Enter a number for the number of fragments allowed for re-assembly.
Range: 2 to 256

No limit is set on number of fragments allowed.
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

To avoid Denial of Service (DOS) attacks, keep the number of fragments allowed for
re-assembly low.

ip mtu

IPv4 Routing | 667

Set the IP MTU (frame size) of the packet transmitted by the RPM for the line card interface.
If the packet must be fragmented, FTOS sets the size of the fragmented packets to the size
specified in this command.

www.dell.com | support.dell.com

e

Syntax

ip mtu value

To return to the default IP MTU value, enter no ip mtu.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

Enter the maximum MTU size if the IP packet is fragmented.
Default: 1500 bytes
Range: 576 to 9234

value

1500 bytes
INTERFACE (Gigabit Ethernet and 10 Gigabit Ethernet interfaces)
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

pre-Version 6.1.1.0

Introduced for E-Series

When you enter no mtu command, FTOS reduces the ip mtu value to 1536 bytes. To return
the IP MTU value to the default, enter no ip mtu.
You must compensate for Layer 2 header when configuring link MTU on an Ethernet
interface or FTOS may not fragment packets. If the packet includes a Layer 2 header, the
difference between the link MTU and IP MTU (ip mtu command) must be enough bytes to
include for the Layer 2 header.
Link MTU and IP MTU considerations for Port Channels and VLANs are as follows.
Port Channels:
All members must have the same link MTU value and the same IP MTU value.
•

The Port Channel link MTU and IP MTU must be less than or equal to the link
MTU and IP MTU values configured on the channel members.

Example: if the members have a link MTU of 2100 and an IP MTU 2000, the Port Channel’s
MTU values cannot be higher than 2100 for link MTU or 2000 bytes for IP MTU.
VLANs:
•
•
•

668

|

IPv4 Routing

All members of a VLAN must have same IP MTU value.
Members can have different Link MTU values. Tagged members must have a
link MTU 4 bytes higher than untagged members to account for the packet tag.
The VLAN link MTU and IP MTU must be less than or equal to the link MTU
and IP MTU values configured on the VLAN members.

Example: The VLAN contains tagged members with Link MTU of 1522 and IP MTU of 1500
and untagged members with Link MTU of 1518 and IP MTU of 1500. The VLAN’s Link
MTU cannot be higher than 1518 bytes and its IP MTU cannot be higher than 1500 bytes.
Table 23-2.

Related
Commands

Difference between Link MTU and IP MTU

Layer 2 Overhead

Difference between Link MTU and IP MTU

Ethernet (untagged)

18 bytes

VLAN Tag

22 bytes

Untagged Packet with VLAN-Stack Header

22 bytes

Tagged Packet with VLAN-Stack Header

26 bytes

mtu

Set the link MTU for an Ethernet interface.

ip name-server
ces

Syntax

Enter up to 6 IPv4 addresses of name servers. The order you enter the addresses determines
the order of their use.
ip name-server ipv4-address [ipv4-address2...ipv4-address6]

To remove a name server, use the no ip name-server ip-address command.
Parameters

Defaults
Command Modes
Command
History

ipv4-address

Enter the IPv4 address, in dotted decimal format, of the name server to be used.

ipv4-address2...
ipv4-address6

(OPTIONAL) Enter up five more IPv4 addresses, in dotted decimal format, of
name servers to be used.
Separate the addresses with a space.

No name servers are configured.
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

IPv4 Routing | 669

www.dell.com | support.dell.com

Usage
Information

FTOS does not support sending DNS queries over a VLAN. DNS queries are sent out all
other interfaces, including the Management port.
You can separately configure both IPv4 and IPv6 domain name servers.

Related
Commands

ipv6 name-server

Configure an IPv6 name server.

ip proxy-arp
ces

Syntax

Enable Proxy ARP on an interface.

ip proxy-arp

To disable Proxy ARP, enter no ip proxy-arp.
Defaults
Command Modes
Command
History

Related
Commands

Enabled.
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

show ip interface

Displays the interface routing status and configuration.

ip redirects
e
Syntax

Enable the interface to send ICMP redirect messages.
ip redirects

To return to default, enter no ip redirects.
Defaults
Command Modes
Command
History

670

|

IPv4 Routing

Disabled
INTERFACE
Version 8.1.1.0

Introduced on E-Series ExaScale

pre-Version 6.1.1.0

Introduced for E-Series

Usage
Information

This command is available for physical interfaces and port-channel interfaces on the E-Series.
Note: This command is not supported on default VLAN (default vlan-id command).

ip route
ces

Syntax

Assign a static route to the switch.

ip route vrf {vrf instance} destination mask {ip-address | interface [ip-address]} [distance]

[permanent] [tag tag-value]
To delete a specific static route, use the no ip route destination mask {address | interface
[ip-address]} command.
To delete all routes matching a certain route, use the no ip route destination mask command.
Parameters

vrf name

(OPTIONAL) E-Series Only: Enter the keyword vrf followed by the VRF
Instances name to tie the static route to the VRF instance.

destination

Enter the IP address in dotted decimal format of the destination device.

mask

Enter the mask in slash prefix formation (/x) of the destination device’s IP
address.

ip-address

Enter the IP address in dotted decimal format of the forwarding router.

interface

Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a loopback interface, enter the keyword loopback followed by a
number from zero (0) to 16383.
• For the null interface, enter the keyword null followed by zero (0).
• For a Port Channel interface, enter the keyword port-channel followed by
a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a SONET interface, enter the keyword sonet followed by the sonet
followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed
by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.

distance

(OPTIONAL) Enter a number as the distance metric assigned to the route.
Range: 1 to 255

IPv4 Routing | 671

www.dell.com | support.dell.com

Defaults
Command Modes
Command
History

Usage
Information

permanent

(OPTIONAL) Enter the keyword permanent to specify the route is not
removed, even if the interface assigned to that route goes down. The route must
be up initially to install it in the routing table.
If you disable the interface with an IP address associated with the keyword
permanent, the route disappears from the routing table.

tag tag-value

(OPTIONAL) Enter the keyword tag followed by a number to assign to the
route.
Range: 1 to 4294967295

Not configured.
CONFIGURATION
Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Support 4094 VLANs on E-Series ExaScale (prior limit was 2094)

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.9.1.0

Introduced VRF on the E-Series

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Using the following example of a static route:
ip route 33.33.33.0 /24 gigabitethernet 0/0 172.31.5.43

•

•
•
•
•
Related
Commands

672

|

IPv4 Routing

The software installs a next hop that is not on the directly connected subnet but
which recursively resolves to a next hop on the interface’s configured subnet. In
the example, if gig 0/0 has ip address on subnet 2.2.2.0 and if 172.31.5.43
recursively resolves to 2.2.2.0, FTOS installs the static route.
When the interface goes down, FTOS withdraws the route.
When the interface comes up, FTOS re-installs the route.
When recursive resolution is “broken,” FTOS withdraws the route.
When recursive resolution is satisfied, FTOS re-installs the route.

show ip route

View the switch routing table.

ip source-route
ces

Syntax

Enable FTOS to forward IP packets with source route information in the header.

ip source-route

To drop packets with source route information, enter no ip route-source.
Defaults
Command Modes
Command
History

Enabled.
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

ip unreachables
ces

Syntax

Enable the generation of Internet Control Message Protocol (ICMP) unreachable messages.

ip unreachables

To disable the generation of ICMP messages, enter no ip unreachables.
Defaults
Command Modes
Command
History

Disabled
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.0

Introduced on E-Series

ip vlan-flooding

IPv4 Routing | 673

www.dell.com | support.dell.com

e
Syntax

Enable unicast data traffic flooding on VLAN member ports.
ip vlan-flooding

To disable, use the no ip vlan-flooding command.
Defaults
Command Modes
Command
History

Usage
Information

disabled
CONFIGURATION
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series

By default this command is disabled. When enabled, all the Layer 3 unicast routed data traffic
going through a VLAN member port is flooded across all the member ports of that VLAN.
There might be some ARP table entries which are resolved through ARP packets which had
Ethernet MAC SA different from MAC information inside the ARP packet. This unicast data
traffic flooding occurs only for those packets which use these ARP entries.

load-balance (C-Series and S-Series)

674

|

IPv4 Routing

cs

By default for C-Series and S-Series, FTOS uses an IP 4-tuple (IP SA, IP DA, Source Port,
and Destination Port) to distribute IP traffic over members of a Port Channel as well as
equal-cost paths. To designate another method to balance traffic over Port Channel members,
use the load-balance command.

Syntax

load-balance {ip-selection [dest-ip | source-ip]} | {mac [dest-mac | source-dest-mac |
source-mac]} | {tcp-udp | ingress-port [enable]}

To return to the default setting (IP 4-tuple), use the no version of the command.
Parameters

Defaults
Command Modes
Command
History

ip-selection {dest-ip |
source-ip}

Enter the keywords to distribute IP traffic based on the following
criteria:
• dest-ip — Uses destination IP address and destination port fields
to hash. The hashing mechanism returns a 3-bit index indicating
to which port the packet should be forwarded.
• source-ip — Uses source IP address and source port fields to
hash. The hashing mechanism returns a 3-bit index indicating to
which port the packet should be forwarded.

mac {dest-mac |
source-dest-mac |
source-mac}

Enter the keywords to distribute MAC traffic based on the following
criteria:
• dest-mac — Uses the destination MAC address, VLAN,
Ethertype, source module ID and source port ID fields to hash.
The hashing mechanism returns a 3-bit index indicating to which
port the packet should be forwarded.
• source-dest-mac — Uses the destination and source MAC
address, VLAN, Ethertype, source module ID and source port ID
fields to hash. The hashing mechanism returns a 3-bit index
indicating to which port the packet should be forwarded.
• source-mac — Uses the source MAC address, VLAN,
Ethertype, source module ID and source port ID fields to hash.
The hashing mechanism returns a 3-bit index indicating to which
port the packet should be forwarded.

tcp-udp enable

Enter the keywords to distribute traffic based on the following:
• enable — Takes the TCP/UDP source and destination ports into
consideration when doing hash computations. (By default, this is
enabled)

ingress-port enable

Enter the keywords to distribute traffic based on the following:
enable — Takes the source port into consideration when doing hash
computations. (By default, this is disabled.)

IP 4-tuple (IP SA, IP DA, Source Port, Destination Port)
CONFIGURATION
Version 8.3.10.0

Added ingress-port parameter for S4810

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Introduced on C-Series

IPv4 Routing | 675

www.dell.com | support.dell.com

Usage
Information

By default, FTOS distributes incoming traffic based on a hash algorithm using the following
criteria:
•
•
•
•

Related
Commands

IP source address
IP destination address
TCP/UDP source port
TCP/UDP destination port

hash-algorithm ecmp

load-balance (E-Series)
e

Syntax

By default, for E-Series chassis, FTOS uses an IP 5-tuple to distribute IP traffic over members
of a Port Channel as well as equal cost paths. To designate another method to balance traffic
over Port Channel members, use the load-balance command.
load-balance [ip-selection 3-tuple | ip-selection packet-based] [mac]

To return to the default setting (IP 5-tuple), use one of the following commands:

Parameters

•
•

no load-balance ip-selection 3-tuple

•

no load-balance mac

no load-balance ip-selection packet-based

ip-selection 3-tuple

Enter the keywords ip-selection 3-tuple to distribute IP traffic
based on the following criteria:
• IP source address
• IP destination address
• IP Protocol type
Note: For IPV6, only the first 32 bits (LSB) of IP SA and IP DA are
used for hash generation.

ip-selection packet-based

Enter the keywords ip-selection packet-based to distribute IPV4
traffic based on the IP Identification field in the IPV4 header.
This option does not affect IPV6 traffic; that is, IPV6 traffic is not
distributed when this command is executed.
Note: Hash-based load-balancing on MPLS does not work when
packet-based hashing (load-balance ip-selection packet-based) is
enabled.

mac

676

|

IPv4 Routing

Enter the keyword mac to distribute traffic based on the following:
• MAC source address, and
• MAC destination address

Defaults
Command Modes
Command
History

Usage
Information

IP 5-tuple (IP SA, IP DA, IP Protocol Type, Source Port and Destination Port)
CONFIGURATION
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 6.1.1.0

Introduced for E-Series

By default, FTOS distributes incoming traffic based on a hash algorithm using the following
criteria:
•
•
•
•
•

IP source address
IP destination address
IP Protocol type
TCP/UDP source port
TCP/UDP destination port

Note: For IPV6, only the first 32 bits (LSB) of IP Source Address and IP Destination
Address are used for hash generation.
The table below lists

the load balance command options and how the command combinations
effect the distribution of traffic.

Table 23-3.

Configurations of the load-balance Command

Configuration

Switched IP Traffic

Routed IP Traffic
(IPV4 Only)

Switched Non-IP
Traffic

Default (IP 5-tuple)

IP 5-tuple

IP 5-tuple

MAC based

ip-selection 3-tuple

IP 3-tuple

IP 3-tuple

MAC based

mac

MAC based

IP 5-tuple

MAC based

ip-selection 3-tuple and mac

MAC based

IP 3-tuple

MAC based

Packet based: IPV4
No distribution: IPV6

Packet based: IPV4

MAC based

MAC based

Packet based: IPV4

MAC based

ip-selection packet-based
ip-selection packet-based and mac
Related
Commands

ip address

Change the algorithm used to distribute traffic on an E-Series chassis.

IPv4 Routing | 677

www.dell.com | support.dell.com

management route
ce

Configure a static route that points to the Management interface or a forwarding router.

Syntax

management route {ipv4-address | ipv6-address}/mask {forwarding-router-address |
managementethernet}

Parameters

Defaults
Command Modes
Command
History

Usage
Information

Related
Commands

show arp

678

|

IPv4 Routing

{ipv4-address | ipv6-address}/mask

Enter an IPv4 address (A.B.C.D) or IPv6 address
(X:X:X:X::X), followed by the prefix-length for the IP
address of the management interface.

forwarding-router-address

Enter an IPv4 or IPv6 address of a forwarding router.

managementethernet

Enter the keyword managementethernet for the
Management interface on the Primary RPM.

Not configured.
CONFIGURATION
Version 8.4.1.0

Added support for IPv6 management routes.

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

When a static route (or a protocol route) overlaps with Management static route, the static
route (or a protocol route) is preferred over the Management Static route. Also, Management
static routes and the Management Connected prefix are not reflected in the hardware routing
tables. Separate routing tables are maintained for IPv4 and IPv6 management routes. This
command manages both tables.
interface ManagementEthernet

Configure the Management port on the system (either the
Primary or Standby RPM).

duplex (Management)

Set the mode of the Management interface.

speed (Management interface)

Set the speed for the Management interface.

ces

Syntax

Parameters

Command Modes
Command
History

Display the ARP table.

show arp [vrf vrf nanometers interface | ip ip-address [mask] | macaddress mac-address
[mac-address mask]] [cpu {cp | rp1 | rp2}] [static | dynamic] [summary]

vrf name

E-Series Only: Show only the ARP cache entries tied to the VRF
process.

cpu

(OPTIONAL) Enter the keyword cpu with one of the following
keywords to view ARP entries on that CPU:
• cp - view ARP entries on the control processer.
• rp1 - view ARP entries on Routing Processor 1.
• rp2 - view ARP entries on Routing Processor 2.

interface interface

(OPTIONAL) Enter the following keywords and slot/port or number
information:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For the Management interface, enter the keyword
managementethernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel
followed by a number:
C-Series and S-Series Range: 1 to 128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a SONET interface, enter the keyword sonet followed by the
slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to
4094.

ip ip-address mask

(OPTIONAL) Enter the keyword ip followed by an IP address in the
dotted decimal format. Enter the optional IP address mask in the slash
prefix format (/x).

macaddress
mac-address mask

(OPTIONAL) Enter the keyword macaddress followed by a MAC
address in nn:nn:nn:nn:nn:nn format. Enter the optional MAC address
mask in nn:nn:nn:nn:nn format also.

static

(OPTIONAL) Enter the keyword static to view entries entered manually.

dynamic

(OPTIONAL) Enter the keyword dynamic to view dynamic entries.

summary

(OPTIONAL) Enter the keyword summary to view a summary of ARP
entries.

EXEC Privilege
Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Support 4094 VLANs on E-Series ExaScale (prior limit was 2094)

Version 8.1.1.0

Introduced on E-Series ExaScale

IPv4 Routing | 679

www.dell.com | support.dell.com

Usage
Information

Version 7.9.1.0

Introduced VRF on the E-Series

Version 7.8.1.0

Augmented to display local ARP entries learned from private VLANs
(PVLANs)

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.0

Introduced for E-Series

The following figure shows two VLANs that are associated with a private VLAN (Private
VLAN (PVLAN)), a feature added for C-Series and S-Series in FTOS 7.8.1.0.

Example

FTOS>show arp
Protocol
Address
Age(min) Hardware Address
Interface VLAN
CPU
-----------------------------------------------------------------------------Internet
192.2.1.254
1
00:00:c0:02:01:02
Gi 9/13
CP
Internet
192.2.1.253
1
00:00:c0:02:01:02
Gi 9/13
CP
Internet
192.2.1.252
1
00:00:c0:02:01:02
Gi 9/13
CP
Internet
192.2.1.251
1
00:00:c0:02:01:02
Gi 9/13
CP
Internet
192.2.1.250
1
00:00:c0:02:01:02
Gi 9/13
CP
Internet
192.2.1.251
1
00:00:c0:02:01:02
Gi 9/13
CP
Internet
192.2.1.250
1
00:00:c0:02:01:02
Gi 9/13
CP
Internet
192.2.1.249
1
00:00:c0:02:01:02
Gi 9/13
CP
Internet
192.2.1.248
1
00:00:c0:02:01:02
Gi 9/13
CP
Internet
192.2.1.247
1
00:00:c0:02:01:02
Gi 9/13
CP
Internet
192.2.1.246
1
00:00:c0:02:01:02
Gi 9/13
CP
Internet
192.2.1.245
1
00:00:c0:02:01:02
Gi 9/13
CP

Example
(Private VLAN
Data)

FTOS#show arp
Protocol
Address
Age(min) Hardware Address
Interface VLAN CPU
------------------------------------------------------------------------------

---200
CP

Internet
CP
Internet

CP
CP
CP
CP
CP

Example
(show arp cpu
cp)

|

IPv4 Routing

-

00:01:e8:43:96:5e

-

Vl 10 pv

5.5.5.10

-

00:01:e8:44:99:55

-

Internet

10.1.2.4

1

00:01:e8:d5:9e:e2

Ma 0/0

-

Internet

10.10.10.4

1

00:01:e8:d5:9e:e2

Ma 0/0

-

Internet

10.16.127.53

1

00:01:e8:d5:9e:e2

Ma 0/0

-

Internet

10.16.134.254

20

00:01:e8:d5:9e:e2

Ma 0/0

-

Internet

133.33.33.4

1

00:01:e8:d5:9e:e2

Ma 0/0

-

Vl 10

FTOS#sho arp cpu cp
Protocol
Address
Age(min) Hardware Address
Interface VLAN
CPU
-----------------------------------------------------------------------------Internet
10.1.2.206
0
00:a0:80:00:15:b8
Ma 0/0
CP
Internet
182.16.1.20
0
00:30:19:24:2d:70
Gi 8/0
CP
Internet
100.10.10.10
0
00:30:19:4f:d3:80
Gi 8/12
CP
Internet
10.1.2.209
12
00:a0:80:00:12:6c
Ma 0/0
CP
FTOS#

Table 23-4.

680

5.5.5.1

show arp Command Example Fields

Row Heading

Description

Protocol

Displays the protocol type.

Address

Displays the IP address of the ARP entry.

Table 23-4.
Row Heading

Description

Age(min)

Displays the age in minutes of the ARP entry.

Hardware Address

Displays the MAC address associated with the ARP entry.

Interface

Displays the first two letters of the interfaces type and the slot/port
associated with the ARP entry.

VLAN

Displays the VLAN ID, if any, associated with the ARP entry.

CPU

Lists which CPU the entries are stored on.

Example
(show arp
summary)

FTOS#show arp summary
Total Entries
Static Entries
Dynamic Entries CPU
-----------------------------------------------------83
0
83
CP
FTOS

Table 23-5.

Related
Commands

show arp Command Example Fields (continued)

show arp summary Command Example Fields

Row Heading

Description

Total Entries

Lists the total number of ARP entries in the ARP table.

Static Entries

Lists the total number of configured or static ARP entries.

Dynamic Entries

Lists the total number of learned or dynamic ARP entries.

CPU

Lists which CPU the entries are stored on.

ip local-proxy-arp

Enable/disable Layer 3 communication in secondary VLANs.

switchport mode
private-vlan

Set the PVLAN mode of the selected port.

show arp retries
ces

Syntax
Command Modes

Display the configured number of ARP retries.

show arp retries

EXEC
EXEC Privilege

Command
History
Related
Commands

Version 8.3.1.0
arp retries

Introduced
Set the number of ARP retries in case the system does not receive an
ARP reply in response to an ARP request.

IPv4 Routing | 681

www.dell.com | support.dell.com

show hosts
ces

Syntax
Command Modes

View the host table and DNS configuration.

show hosts

EXEC
EXEC Privilege

Command
History

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Example

FTOS#show hosts
Default domain is not set
Name/address lookup uses static
Name servers are not set
Host
Flags
-----------ks
(perm,
4200-1
(perm,
1230-3
(perm,
ZZr
(perm,
Z10-3
(perm,
FTOS#

Table 23-6.

mappings

OK)
OK)
OK)
OK)
OK)

TTL
----

Type
---IP
IP
IP
IP
IP

Address
------2.2.2.2
192.68.69.2
192.68.99.2
192.71.18.2
192.71.23.1

show hosts Command Example Fields

Field

Description

Default domain...

Displays the domain name (if configured).

Name/address lookup... States if DNS is enabled on the system.
If DNS is enabled, the Name/Address lookup is domain service.
If DNS is not enabled, the Name/Address lookup is static mapping.

682

|

IPv4 Routing

Name servers are...

Lists the name servers, if configured.

Host

Displays the host name assigned to the IP address.

Flags

Classifies the entry as one of the following:
• perm - the entry was manually configured and will not time out
• temp - the entry was learned and will time out after 72 hours of
inactivity.
Also included in the flag is an indication of the validity of the route:
• ok - the entry is valid.
• ex - the entry expired.
• ?? - the entry is suspect.

TTL

Displays the amount of time until the entry ages out of the cache. For
dynamically learnt entries only.

Table 23-6.

Related
Commands

show hosts Command Example Fields (continued)

Field

Description

Type

Displays IP as the type of entry.

Address

Displays the IP address(es) assigned to the host.

traceroute

View DNS resolution

ip host

Configure a host.

show ip cam linecard
View CAM entries for a port pipe on a line card.

ce
Syntax

Parameters

show ip cam linecard number port-set pipe-number [ip-address mask [longer-prefixes] | index
index-number | summary | vrf vrf instance]
number

Enter the number of the line card.
Range: 0 to 13 on a E1200/1200i, 0 to 6 on a E600600i, and 0 to 5 on a E300.

pipe-number

Enter the number of the line card’s port-pipe.
Range: 0 to 1

ip-address mask

(OPTIONAL) Enter the IP address and mask of a route to CAM entries for
that route only.
Enter the keyword longer-prefixes to view routes with a common prefix.

[longer-prefix]
index
index-number

Command Modes

(OPTIONAL) Enter the keyword index followed by the CAM index number.
Range: depends on CAM size

summary

(OPTIONAL) Enter the keyword summary to view a table listing route
prefixes and the total number of routes that can be entered into the CAM.

vrf instance

(OPTIONAL) E-Series Only: Enter the keyword vrf followed by the VRF
Instance name to show CAM information as it applies to that VRF instance.

EXEC
EXEC Privilege

Command
History

Example

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.2

E-Series ExaScale E600i supported

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.9.1.0

Introduced VRF on the E-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.0

Introduced for E-Series

FTOS#show ip cam linecard 13 port-set 0
Index
Destination
EC CG V C
Next-Hop
VId
Mac-Addr
Port
------ --------------- -- -- - - --------------- ---- ---------------- -------

IPv4 Routing | 683

www.dell.com | support.dell.com

Example
(show ip cam
summary)

3276
3277
3278
3279
3280
11144
11145
11146
11147
11148
65535
FTOS#

6.6.6.2
5.5.5.2
4.4.4.2
3.3.3.2
2.2.2.2
6.6.6.0
5.5.5.0
4.4.4.0
3.3.3.0
2.2.2.0
0.0.0.0

0
0
0
0
0
0
0
0
0
0
0

Table 23-7.

show ip cam Command Example Fields

|

IPv4 Routing

1
1
1
1
1
1
1
1
1
1
1

1
1
1
1
1
1
1
1
1
1
1

0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0

0
0
0
0
0
6
5
4
3
2
0

00:00:00:00:00:00
00:00:00:00:00:00
00:00:00:00:00:00
00:00:00:00:00:00
00:00:00:00:00:00
00:00:00:00:00:00
00:00:00:00:00:00
00:00:00:00:00:00
00:00:00:00:00:00
00:00:00:00:00:00
00:00:00:00:00:00

17c1
17c1
17c1
17c1
17c1
17c5
17c5
17c5
17c5
17c5
17c5

CP
CP
CP
CP
CP
RP2
RP2
RP2
RP2
RP2
RP2

Field

Description

Index

Displays the CAM index number of the entry.

Destination

Displays the destination route of the index.

EC

Displays the number of equal cost multipaths (ECMP) available for the default
route for non-Jumbo line cards.
Displays 0,1 when ECMP is more than 8, for Jumbo line cards.

CG

Displays 0.

V

Displays a 1 if the entry is valid and a 0 if the entry is for a line card with Catalog
number beginning with LC-EF.

C

Displays the CPU bit.
1 indicates that a packet hitting this entry is forwarded to the CP or RP2,
depending on Egress port.

Next-Hop

Displays the next hop IP address of the entry.

VId

Displays the VLAN ID. If the entry is 0, the entry is not part of a VLAN.

Mac Addr

Displays the next-hop router’s MAC address.

Port

Displays the egress interface. Use the second half of the entry to determine the
interface. For example, in the entry 17cl CP, the CP is the pertinent portion.
CP = control processor
RP2 = route processor 2
Gi = Gigabit Ethernet interface
So = SONET interface
Te = 10 Gigabit Ethernet interface
FTOS#show ip cam linecard 4 port-set 0 summary
Total Number of Routes in the CAM is 13
Total Number of Routes which can be entered in CAM is 131072
Prefix Len Current Use
---------- ----------32
7
31
0
30
0
29
0
28
0
27
0
26
0
25
0
24
6
23
0

684

0
0
0
0
0
0
0
0
0
0
0

Initial Sz
---------37994
1312
3932
1312
1312
1312
1312
1312
40610
3932

22
21
20
19
18
17
16
15
14
13
12
11
10
9
8
7
6
5
4
3
2
1
0
FTOS#

0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

Table 23-8.

2622
2622
2622
2622
1312
1312
3932
1312
1312
1312
1312
1312
1312
1312
1312
1312
1312
1312
1312
1312
1312
1312
8

show ip cam summary Command Example Fields

Field

Description

Prefix Length

Displays the prefix-length or mask for the IP address configured on the linecard 0
port pipe 0.

Current Use

Displays the number of routes currently configured for the corresponding prefix or
mask on the linecard 0 port pipe 0.

Initial Size

Displays the CAM size allocated by FTOS for the corresponding mask. The CAM
size is adjusted by FTOS if the number of routes for the mask exceeds the initial
allocation.

show ip cam stack-unit
Display content-addressable memory (CAM) entries for an S-Series switch.

s
Syntax

Parameters

show ip cam stack-unit 0-7 port-set pipe-number [ip-address mask [longer-prefixes] | detail |
member-info | summary]
0-7

Enter the stack-unit ID, from 0 to 7.

pipe-number

Enter the number of the Port-Pipe number.
S50n, S50V range: 0 to 1; S25N, S25P, S25V range: 0 to 0

ip-address mask

(OPTIONAL) Enter the IP address and mask of a route to CAM entries for
that route only.
Enter the keyword longer-prefixes to view routes with a common prefix.

[longer-prefix]
detail

Enter the keyword detail to display the group index ID used by the ecmp
routes in the CAM.

IPv4 Routing | 685

www.dell.com | support.dell.com

Command Modes

member-info

Enter the keyword member-info to display the group index used by the
ecmp, the number of egress ports (members) for the ecmp, and the port
details of each member.
The detail information under member-info will give the MAC address,
VLAN ID and gateway of every member port of the ecmp.

summary

(OPTIONAL) Enter the keyword summary to view a table listing route
prefixes and the total number routes which can be entered in to CAM.

EXEC
EXEC Privilege

Command
History

Version 7.7.1.0

Modified: Added support for up to seven stack members.

Version 7.6.1.0

Introduced on S-Series

Example

FTOS#show ip cam stack-unit 0 port-set 0 10.10.10.10/32 longer-prefixes
Destination

EC CG V C

----------------10.10.10.10

VId

Mac-Addr

Port

-- -- - - ----- ----------------- ------------0 0 1 1
0 00:00:00:00:00:00
3f01
CP

FTOS#

Table 23-9.

Example
(show ip cam
stack-unit
ecmp-group detail)

show ip cam Command Example Fields

Field

Description

Destination

Displays the destination route of the index.

EC

Displays the number of equal cost multipaths (ECMP) available for the default
route for non-Jumbo line cards.
Displays 0,1 when ECMP is more than 8, for Jumbo line cards.

CG

Displays 0.

V

Displays a 1 if the entry is valid and a 0 otherwise.

C

Displays the CPU bit.
1 indicates that a packet hitting this entry is forwarded to the control processor,
depending on Egress port.

V Id

Displays the VLAN ID. If the entry is 0, the entry is not part of a VLAN.

Mac Addr

Displays the next-hop router’s MAC address.

Port

Displays the egress interface. Use the second half of the entry to determine the
interface. For example, in the entry 17cl CP, the CP is the pertinent portion.
CP = control processor
Gi = Gigabit Ethernet interface
Te = 10 Gigabit Ethernet interface
FTOS#show ip cam stack-unit 0 po 0 ecmp-group detail
Destination

EC CG V C

----------------------------------1.1.1.2

686

|

IPv4 Routing

VId

Mac-Addr

Port

ECMP Group-Index

-- -- - - ----- ----------------- ------------0

0 1 0

0 00:01:e8:8a:d6:58

0004 Te 0/3

-

2.1.1.2
1.1.1.1
2.1.1.1
1.1.1.0
2.1.1.0
100.1.1.0
100.1.1.0
0.0.0.0
FTOS#

Example

0
0
0
0
0
1
1
0

0
0
0
0
0
0
0
0

1
1
1
1
1
1
1
1

0
1
1
1
1
0
0
1

0
0
0
0
0
0
0
0

00:01:e8:8a:d6:58
00:00:00:00:00:00
00:00:00:00:00:00
00:00:00:00:00:00
00:00:00:00:00:00
00:01:e8:8a:d6:58
00:01:e8:8a:d6:58
00:00:00:00:00:00

0009 Te 0/8
3f01
CP
3f01
CP
3f01
CP
3f01
CP
0004 Te 0/3
0009 Te 0/8
3f01
CP

0
0
-

FTOS#show ip cam stack-unit 0 po 0 ecmp-group member-info detail

(show ip cam
stack-unit
ecmp-group
member-info detail)

Group Index
----------0

Member Count
-----------2

Mac-Addr
--------------00:01:e8:8a:d6:58
00:01:e8:8a:d6:58

Port
VLan ID
--------- --------Te 0/3
0
Te 0/8
0

Gateway
--------1.1.1.2
2.1.1.2

FTOS#

show ip fib linecard
ce
Syntax
Parameters

Command Mode

View all Forwarding Information Base (FIB) entries.

show ip fib linecard slot-number [vrf vrf instance | ip-address/prefix-list | summary]

vrf instance

(OPTIONAL) E-Series Only: Enter the keyword vrf followed by the VRF
Instance name to show the FIB cache entries tied to that VRF instance.

slot-number

Enter the number of the line card slot.
C-Series Range: 0 to 7
E-Series Range: 0 to 13 on a E1200, 0 to 6 on a E600/E600i, 0 to 5 on a E300

ip-address mask

(OPTIONAL) Enter the IP address of the network destination to view only
information on that destination.
You must enter the IP address is dotted decimal format (A.B.C.D). You must
enter the mask in slash prefix format (/X).

longer-prefixes

(OPTIONAL) Enter the keyword longer-prefixes to view all routes with a
common prefix.

summary

(OPTIONAL) Enter the keyword summary to view the total number of
prefixes in the FIB.

EXEC
EXEC Privilege

Command
History

Example

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.9.1.0

Introduced VRF on the E-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.0

Introduced for E-Series

FTOS>show ip fib linecard 12

IPv4 Routing | 687

www.dell.com | support.dell.com

Destination
Gateway
First-Hop
Mac-Addr
VId Index EC
-------------------- -------------------------- ----------------------------------- -------------3.0.0.0/8
via 100.10.10.10, So 2/8
100.10.10.10
00:01:e8:00:03:ff So 2/8
0
60260 0
3.0.0.0/8
via 101.10.10.10, So 2/9
100.10.10.0/24
Direct, So 2/8
0.0.0.0
00:01:e8:00:03:ff So 2/8
0
11144 0
100.10.10.1/32
via 127.0.0.1
127.0.0.1
00:00:00:00:00:00 CP
0
3276 0
100.10.10.10/32
via 100.10.10.10, So 2/8
100.10.10.10
00:01:e8:00:03:ff So 2/8
0
0 0
101.10.10.0/24
Direct, So 2/9
0.0.0.0
00:00:00:00:00:00 RP2
0
11145 0
101.10.10.1/32
via 127.0.0.1
127.0.0.1
00:00:00:00:00:00 CP
0
3277 0
101.10.10.10/32
via 101.10.10.10, So 2/9
101.10.10.10
00:01:e8:01:62:32 So 2/9
0
1 0
FTOS>
Port

Table 23-10.

Related
Commands

show ip fib linecard Command Example Fields

Field

Description

Destination

Lists the destination IP address.

Gateway

Displays either the word direct and an interface for a directly
connected route or the remote IP address to be used to forward the
traffic.

First-Hop

Displays the first hop IP address.

Mac-Addr

Displays the MAC address.

Port

Displays the egress-port information.

VId

Displays the VLAN ID. If no VLAN is assigned, zero (0) is listed.

Index

Displays the internal interface number.

EC

Displays the number of ECMP paths.

clear ip fib linecard

Clear FIB entries on a specified line card.

show ip fib stack-unit
View all Forwarding Information Base (FIB) entries.

s
Syntax
Parameters

688

|

IPv4 Routing

show ip fib stack-unit 0-7 [ip-address [mask] [longer-prefixes] | summary]
0-7

Enter the S-Series stack unit ID, from 0 to 7.

ip-address mask

(OPTIONAL) Enter the IP address of the network destination to view only
information on that destination.
Enter the IP address in dotted decimal format (A.B.C.D). You must enter the
mask in slash prefix format (/X).

longer-prefixes

(OPTIONAL) Enter the keyword longer-prefixes to view all routes with a
common prefix.

summary

(OPTIONAL) Enter the keyword summary to view the total number of
prefixes in the FIB.

Command Mode

EXEC
EXEC Privilege

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Modified: Added support for up to seven stack members.

Version 7.6.1.0

Introduced on S-Series

Example

FTOS#show ip fib stack-unit 0
Destination

Gateway

First-Hop

Mac-Addr

Port

VId

EC

------------------ --------------------------- ----------------------------------- -------- ----- -10.10.10.10/32
Direct, Nu 0
0.0.0.0
00:00:00:00:00:00 BLK HOLE
0 0
FTOS>

Table 23-11.

show ip fib linecard Command Example Fields

Field

Description

Destination

Lists the destination IP address.

Gateway

Displays either the word Direct and an interface for a directly connected route or
the remote IP address to be used to forward the traffic.

First-Hop

Displays the first hop IP address.

Mac-Addr

Displays the MAC address.

Port

Displays the egress-port information.

VId

Displays the VLAN ID. If no VLAN is assigned, zero (0) is listed.

EC

Displays the number of ECMP paths.

Related
Commands

clear ip fib linecard

Clear FIB entries on a specified line card.

show ip flow

IPv4 Routing | 689

www.dell.com | support.dell.com

ces

Syntax

Parameters

Command Modes
Command
History

690

|

IPv4 Routing

Show how a Layer 3 packet is forwarded when it arrives at a particular interface.

show ip flow interface [vrf vrf instance] interface {source-ip address destination-ip address}
{protocol number [tcp | udp] | icmp} {src-port number destination-port number}

vrf instance

E-Series Only: Show only the L3 flow as they apply to that VRF
process.

interface interface

Enter the keyword interface followed by of the following interface
keywords.
• For a Fast Ethernet interface, enter the keyword FastEthernet
followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the
slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.
(OPTIONAL) Enter an in or out parameter in conjunction with
the optional interface:

source-ip address

Enter the keyword source-ip followed by the IP source address in IP
address format.

destination-ip address

Enter the keyword destination-ip followed by the IP destination
address in IP address format.

protocol number [tcp |
udp] | icmp

E-Series only: Enter the keyword protocol followed by one of the
protocol type
keywords: tcp, udp, icmp or protocol number

src-port number

Enter the keyword src-port followed by the source port number.

destination-port number

Enter the keyword destination-port followed by the destination port
number.

EXEC
Version 8.3.10.0

Introduced on S4810

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.9.1.0

Introduced VRF on the E-Series

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Usage
Information

This command provides egress port information for a given IP flow. This is useful in
identifying which interface the packet will follow in the case of Port-channel and Equal Cost
Multi Paths. Use this command for routed packed only. For switched packets use the show
port-channel-flow command.
show ip flow does not compute the egress port information when load-balance mac hashing is

also configured due to insufficient information (the egress MAC is not available).
S-Series produces the following error message:
Message 1

%Error: Unable to read IP route table

C-Series produces the message:
%Error: FIB cannot compute the egress port with the current trunk hash
setting.
Example
(E-Series)

FTOS#show ip flow interface Gi 1/8 189.1.1.1 63.0.0.1 protocol tcp source-port
7898 destination-port 8976
flow: 189.1.1.1 63.0.0.1 protocol 6 7868 8976
Ingress interface: Gi 1/20
Egress interface: Gi 1/14 to 1.7.1.2[CAM hit 103710] unfragmented packet
Gi 1/10 to 1.2.1.2[CAM hit 103710] fragmented packet

show ip interface
ces

Syntax
Parameter

View IP-related information on all interfaces.

show ip interface [interface | brief | linecard slot-number] [configuration]
interface

(OPTIONAL) Enter the following keywords and slot/port or number
information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Loopback interface, enter the keyword Loopback followed by a
number from 0 to 16383.
• For the Management interface, enter the keyword ManagementEthernet
followed by zero (0).
• For the Null interface, enter the keyword null followed by zero (0).
• For a Port Channel interface, enter the keyword port-channel followed by
a number:
C-Series and S-Series Range: 1 to 128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a SONET interface, enter the keyword sonet followed by the slot/port
information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed
by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to
4094.

IPv4 Routing | 691

www.dell.com | support.dell.com

brief

(OPTIONAL) Enter the keyword brief to view a brief summary of the
interfaces and whether an IP address is assigned.

linecard

(OPTIONAL) Enter the keyword linecard followed by the number of the line
card slot.
C-Series Range: 0-7
E-Series Range: 0 to 13 on a E1200/1200i, 0 to 6 on a E600/E600i, and 0 to 5
on a E300

slot-number

Note: This keyword is not available on the S-Series.

configuration

Command Modes

(OPTIONAL) Enter the keyword configuration to display the physical
interfaces with non-default configurations only.

EXEC
EXEC Privilege

Command
History

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.2

Supported on E-Series ExaScale E600i

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Example

FTOS#show ip int te 0/0
TenGigabitEthernet 0/0 is down, line protocol is down
Internet address is not set
IP MTU is 1500 bytes
Inbound access list is not set
Proxy ARP is enabled
Split Horizon is enabled
Poison Reverse is disabled
ICMP redirects are not sent
ICMP unreachables are not sent

FTOS#

Table 23-12.

692

|

IPv4 Routing

show ip interface Command Example Items

Lines

Description

TenGigabitEthernet 0/0...

Displays the interface’s type, slot/port and physical and line
protocol status.

Internet address...

States whether an IP address is assigned to the interface. If one is,
that address is displayed.

IP MTU is...

Displays IP MTU value.

Inbound access...

Displays the name of the any configured incoming access list. If
none is configured, the phrase “not set” is displayed.

Proxy ARP...

States whether proxy ARP is enabled on the interface.

Split horizon...

States whether split horizon for RIP is enabled on the interface.

Table 23-12.

show ip interface Command Example Items (continued)

Lines

Description

Poison Reverse...

States whether poison for RIP is enabled on the interface

ICMP redirects...

States if ICMP redirects are sent.

ICMP unreachables...

States if ICMP unreachable messages are sent.

Example
(show ip
interface brief)

FTOS#show ip int brief
Interface
IP-Address
GigabitEthernet 1/0
unassigned
GigabitEthernet 1/1
unassigned
GigabitEthernet 1/2
unassigned
GigabitEthernet 1/3
unassigned
GigabitEthernet 1/4
unassigned
GigabitEthernet 1/5
10.10.10.1
GigabitEthernet 1/6
unassigned

Table 23-13.

OK? Method Status
Protocol
NO Manual administratively down down
NO Manual administratively down down
YES Manual up
up
YES Manual up
up
YES Manual up
up
YES Manual up
up
NO Manual administratively down down

show ip interface brief Column Headings

Field

Description

Interface

Displays type of interface and the associated slot and port number.

IP-Address

Displays the IP address for the interface, if configured.

Ok?

Indicates if the hardware is functioning properly.

Method

Displays Manual if the configuration is read from the saved configuration.

Status

States whether the interface is enabled (up) or disabled
(administratively down).

Protocol

States whether IP is enabled (up) or disabled (down) on the interface.

show ip management-route
ce

View the IP addresses assigned to the Management interface.

Syntax

show ip management-route [all | connected | summary | static]

Parameters

all

(OPTIONAL) Enter the keyword all to view all IP addresses assigned to
all Management interfaces on the switch.

connected

(OPTIONAL) Enter the keyword connected to view only routes
directly connected to the Management interface.

summary

(OPTIONAL) Enter the keyword summary to view a table listing the
number of active and non-active routes and their sources.

static

(OPTIONAL) Enter the keyword static to view non-active routes also.

IPv4 Routing | 693

www.dell.com | support.dell.com

Command Modes

EXEC
EXEC Privilege

Command
History

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Example

FTOS#show ip management-route
Destination
----------10.1.2.0/24
172.16.1.0/24

Gateway
------ManagementEthernet 0/0
10.1.2.4

State
----Connected
Active

FTOS#

show ipv6 management-route
Display the IPv6 static routes configured for the management interface.

ce
Syntax
Parameters

Command Modes
Command
History

Example

show ipv6 management-route [all | connected | summary | static]
all

Enter the keyword all to view all IP addresses assigned to all
Management interfaces on the switch.

connected

Enter the keyword connected to view only routes directly connected to
the Management interface.

summary

Enter the keyword summary to view a table listing the number of active
and non-active routes and their sources.

static

Enter the keyword static to view non-active routes also.

EXEC Privilege
Version 8.4.1.0

Introduced on C- and E-Series

Version 8.3.7.0

Introduced on S4810

FTOS#show ipv6 management-route
IPv6 Destination
Gateway
---------------------2001:34::0/64
ManagementEthernet 0/0
2001:68::0/64
2001:34::16
FTOS#

show ip protocols

694

|

IPv4 Routing

State
----Connected
Active

ces

Syntax
Command Modes

View information on all routing protocols enabled and active on the switch.

show ip protocols

EXEC
EXEC Privilege

Command
History

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Regular evaluation optimization enabled/disabled added to display output

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.0 Introduced for E-Series
Example

FTOS#show ip protocols
Routing Protocol is "bgp 1"
Cluster Id is set to 20.20.20.3
Router Id is set to 20.20.20.3
Fast-external-fallover enabled
Regular expression evaluation optimization enabled
Capable of ROUTE_REFRESH
For Address Family IPv4 Unicast
BGP table version is 0, main routing table version 0
Distance: external 20 internal 200 local 200
Neighbor(s):
Address : 20.20.20.2
Filter-list in : foo
Route-map in : foo
Weight : 0
Address : 5::6
Weight : 0
FTOS#

show ip route
ces

Syntax

Parameter

View information, including how they were learned, about the IP routes on the switch.

show ip route [vrf [vrf name] hostname | ip-address [mask] [longer-prefixes] | list prefix-list |
protocol [process-id | routing-tag] | all | connected | static | summary]

vrf name

E-Series Only: Clear only the route entries tied to the VRF process.

ip-address

(OPTIONAL) Specify a name of a device or the IP address of the device
to view more detailed information about the route.

mask

(OPTIONAL) Specify the network mask of the route. Use this
parameter with the IP address parameter.

longer-prefixes

(OPTIONAL) Enter the keyword longer-prefixes to view all routes
with a common prefix.

IPv4 Routing | 695

www.dell.com | support.dell.com

Command Modes

list prefix-list

(OPTIONAL) Enter the keyword list and the name of a configured
prefix list. Refer to show ip route list.

protocol

(OPTIONAL) Enter the name of a routing protocol (bgp, isis, ospf, rip)
or the keywords connected or static.
bgp, isis, ospf, rip are E-Series-only options.
If you enter bgp, you can include the BGP as-number. (E-Series only)
If you enter isis, you can include the ISIS routing-tag. (E-Series only)
If you enter ospf, you can include the OSPF process-id.

process-id

(OPTIONAL) Specify that only OSPF routes with a certain process ID
must be displayed.

routing-tag

(OPTIONAL) Specify that only ISIS routes with a certain routing tag
must be displayed.

connected

(OPTIONAL) Enter the keyword connected to view only the directly
connected routes.

all

(OPTIONAL) Enter the keyword all to view both active and non-active
routes.

static

(OPTIONAL) Enter the keyword static to view only routes configured
by the ip route command.

summary

(OPTIONAL) Enter the keyword summary. Refer to show ip route
summary.

EXEC
EXEC Privilege

Command
History

Example

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.9.1.0

Introduced VRF on the E-Series

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.0

Introduced for E-Series

FTOS#show ip route all
Codes: C - connected, S - static, R - RIP
B - BGP, IN - internal BGP, EX - external BGP, LO - Locally Originated
O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1
N2 - OSPF NSSA external type 2, E1 - OSPF external type 1
E2 - OSPF external type 2, i - IS-IS, L1 - IS-IS level-1
L2 - IS-IS level-2, IA - IS-IS inter area, * - candidate default
> - non-active route + - summary route
Gateway of last resort is not set

R
C
> R
C
> R

696

|

IPv4 Routing

Destination
----------3.0.0.0/8
100.10.10.0/24
100.10.10.0/24
101.10.10.0/24
101.10.10.0/24

Gateway
------via 100.10.10.10, So 2/8
via 101.10.10.10, So 2/9
Direct, So 2/8
Direct, So 2/8
Direct, So 2/9
Direct, So 2/9

Dist/Metric Last Change
----------- ----------120/1
00:07:12
0/0
120/0
0/0
120/0

00:08:54
00:08:54
00:09:15
00:09:15

FTOS#

Example
(show ip route
summary & show
ip static route)

FTOS#show ip route summary
Route Source
Active Routes
Non-active Routes
connected
2
0
static
1
0
Total
3
0
Total 3 active route(s) using 612 bytes
R1_E600i>show ip route static ?
|
Pipe through a command

R1_E600i>show ip route static
Destination
Gateway
Dist/Metric Last Change
--------------------------- ----------*S
0.0.0.0/0
via 10.10.91.9, Gi 1/2
1/0
3d2h
FTOS>

Table 23-14.

show ip route all Command Example Fields

Field

Description

(undefined)

Identifies the type of route:
• C = connected
• S = static
• R = RIP
• B = BGP
• IN = internal BGP
• EX = external BGP
• LO = Locally Originated
• O = OSPF
• IA = OSPF inter area
• N1 = OSPF NSSA external type 1
• N2 = OSPF NSSA external type 2
• E1 = OSPF external type 1
• E2 = OSPF external type 2
• i = IS-IS
• L1 = IS-IS level-1
• L2 = IS-IS level-2
• IA = IS-IS inter-area
• * = candidate default
• > = non-active route
• + = summary routes

Destination

Identifies the route’s destination IP address.

Gateway

Identifies whether the route is directly connected and on which interface the route
is configured.

Dist/Metric

Identifies if the route has a specified distance or metric.

Last Change

Identifies when the route was last changed or configured.

show ip route list

IPv4 Routing | 697

www.dell.com | support.dell.com

ces

Syntax
Parameters

Command Modes

Display IP routes in an IP prefix list.

show ip route list prefix-list
prefix-list

Enter the name of a configured prefix list.

EXEC
EXEC Privilege

Command
History

Related
Commands

Example

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.0

Introduced for E-Series

ip prefix-list

Enter the CONFIGURATION-IP PREFIX-LIST mode and
configure a prefix list.

show ip prefix-list summary

Display a summary of the configured prefix lists.

FTOS#show ip route list test
Codes: C - connected, S - static, R - RIP,
B - BGP, IN - internal BGP, EX - external BGP,LO - Locally Originated,
O - OSPF, IA - OSPF inter area, N1 - OSPF NSSA external type 1,
N2 - OSPF NSSA external type 2, E1 - OSPF external type 1,
E2 - OSPF external type 2, i - IS-IS, L1 - IS-IS level-1,
L2 - IS-IS level-2, IA - IS-IS inter area, * - candidate default,
> - non-active route, + - summary route
Gateway of last resort is not set

R
R
R
R
C

Destination
----------2.1.0.0/24
2.1.1.0/24
2.1.2.0/24
2.1.3.0/24
2.1.4.0/24

show ip route summary

698

|

IPv4 Routing

Gateway
------via 2.1.4.1, Gi
via 2.1.4.1, Gi
via 2.1.4.1, Gi
via 2.1.4.1, Gi
Direct, Gi 4/43

4/43
4/43
4/43
4/43

Dist/Metric Last Change
----------- ----------120/2
3d0h
120/2
3d1h
120/1
3d0h
120/1
3d1h
0/0
3d1h

ces

Syntax
Command Modes

View a table summarizing the IP routes in the switch.

show ip route summary

EXEC
EXEC Privilege

Command
History

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Example

FTOS>show ip route summary
Route Source
Active Routes
Non-active Routes
connected
17
0
static
3
0
ospf 100
1368
2
Intra-area: 762 Inter-area: 1 External-1: 600 External-2: 5
Total
1388
2
Total 1388 active route(s) using 222440 bytes
Total 2 non-active route(s) using 128 bytes
FTOS>

Table 23-15.

Related
Commands

show ip route summary Column Headings

Column Heading

Description

Route Source

Identifies how the route is configured in FTOS.

Active Routes

Identifies the best route if a route is learned from two protocol sources.

Non-active Routes

Identifies the back-up routes when a route is learned by two different
protocols. If the best route or active route goes down, the non-active route
will become the best route.

ospf 100

If routing protocols (OSPF, RIP) are configured and routes are advertised,
then information on those routes is displayed.

Total 1388 active...

Displays the number of active and non-active routes and the memory usage
of those routes.
If there are no routes configured in the FTOS, this line does not appear.

show ip route

Display information about the routes found in switch.

show ip traffic

IPv4 Routing | 699

www.dell.com | support.dell.com

ces

Syntax

View IP, ICMP, UDP, TCP and ARP traffic statistics.

show ip traffic [all | cp | rp1 | rp2]

Note: These options are supported only on the E-Series.
Parameters

Command Modes
Command
History

Example

all

(OPTIONAL) Enter the keyword all to view statistics from all processors.
If you do not enter a keyword, you also view all statistics from all processors.

cp

(OPTIONAL) Enter the cp to view only statistics from the Control Processor.

rp1

(OPTIONAL) Enter the keyword rp1 to view only the statistics from Route
Processor 1.

rp2

(OPTIONAL) Enter the keyword rp2 to view only the statistics from Route
Processor 2.

EXEC Privilege
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 6.5.1.0

F10 Monitoring MIB available for ip traffic statistics

pre-Version 6.1.1.0

Introduced for E-Series

FTOS#show ip traffic
Control Processor IP Traffic:
IP statistics:
Rcvd: 23857 total, 23829 local destination
0 format errors, 0 checksum errors, 0 bad hop count
0 unknown protocol, 0 not a gateway
0 security failures, 0 bad options
Frags: 0 reassembled, 0 timeouts, 0 too big
0 fragmented, 0 couldn't fragment
Bcast: 28 received, 0 sent; Mcast: 0 received, 0 sent
Sent: 16048 generated, 0 forwarded
21 encapsulation failed, 0 no route
ICMP statistics:
Rcvd: 0 format errors, 0 checksum errors, 0 redirects, 0 unreachable
0 echo, 0 echo reply, 0 mask requests, 0 mask replies, 0 quench
0 parameter, 0 timestamp, 0 info request, 0 other
Sent: 0 redirects, 0 unreachable, 0 echo, 0 echo reply
0 mask requests, 0 mask replies, 0 quench, 0 timestamp
0 info reply, 0 time exceeded, 0 parameter problem
UDP statistics:
Rcvd: 0 total, 0 checksum errors, 0 no port
0 short packets, 0 bad length, 0 no port broadcasts, 0 socket full
Sent: 0 total, 0 forwarded broadcasts
TCP statistics:
Rcvd: 23829 total, 0 checksum errors, 0 no port
Sent: 16048 total
ARP statistics:
Rcvd: 156 requests, 11 replies
Sent: 21 requests, 10 replies (0 proxy)

700

|

IPv4 Routing

Routing Processor1 IP Traffic:

Table 23-16.
Keyword

show ip traffic output definitions

Definition

unknown protocol... No receiver for these packets. Counts those packets whose protocol type
field is not recognized by FTOS.
not a gateway...

Packets can not be routed; host/network is unreachable.

security failures...

Counts the number of received unicast/multicast packets that could not be
forwarded due to:
• route not found for unicast/multicast; ingress interfaces do not belong to
the destination multicast group
• destination IP address belongs to reserved prefixes; host/network
unreachable

bad options...

Unrecognized IP option on a received packet.

Frags:

IP fragments received.

... reassembled

Number of IP fragments that were reassembled.

... timeouts

Number of times a timer expired on a reassembled queue.

... too big

Number of invalid IP fragments received.

... couldn’t fragment Number of packets that could not be fragmented and forwarded.
...encapsulation
failed

Counts those packets which could not be forwarded due to ARP resolution
failure. FTOS sends an arp request prior to forwarding an IP packet. If a
reply is not received, FTOS repeats the request three times. These packets
are counted in encapsulation failed.

Rcvd:
...short packets

The number of bytes in the packet are too small.

...bad length

The length of the packet was not correct.

...no port broadcasts The incoming broadcast/multicast packet did not have any listener.
...socket full

The applications buffer was full and the incoming packet had to be dropped.

IPv4 Routing | 701

www.dell.com | support.dell.com

Usage
Information

The F10 Monitoring MIB provides access to the statistics described below.
Table 23-17.

F10 Monitoring MIB

Command Display

Object

OIDs

IP statistics:
Bcast:
Received
Sent

f10BcastPktRecv
f10BcastPktSent

1.3.6.1.4.1.6027.3.3.5.1.1
1.3.6.1.4.1.6027.3.3.5.1.2

f10McastPktRecv
f10McastPktSent

1.3.6.1.4.1.6027.3.3.5.1.3
1.3.6.1.4.1.6027.3.3.5.1.4

f10ArpReqRecv
f10ArpReplyRecv

1.3.6.1.4.1.6027.3.3.5.2.1
1.3.6.1.4.1.6027.3.3.5.2.3

f10ArpReqSent
f10ArpReplySent
f10ArpProxySent

1.3.6.1.4.1.6027.3.3.5.2.2
1.3.6.1.4.1.6027.3.3.5.2.4
1.3.6.1.4.1.6027.3.3.5.2.5

Mcast:
Received
Sent
ARP statistics:
Rcvd:
Request
Replies
Sent:
Request
Replies
Proxy

show protocol-termination-table
e
Syntax
Parameters

Defaults
Command Modes

Display the IP Packet Termination Table (IPPTT).
show protocol-termination-table linecard number port-set port-pipe-number
linecard number

Enter the keyword linecard followed by slot number of the line
card.
E-Series Range: 0 to 13 on a E1200/1200i, 0 to 6 on a E600/
E600i, and 0 to 5 on a E300

port-set port-pipe-number

Enter the keyword port-set followed by the line card’s
Port-Pipe number.
Range: 0 to 1

No default behavior or values
EXEC
EXEC Privilege

Command
History

702

|

IPv4 Routing

Version 8.1.1.2

Introduced support for E-Series ExaScale E600i

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 6.4.1.0

Introduced

Example

Usage
Information

FTOS#show protocol-termination-table
Index Protocol Src-Port Dst-Port
----- -------- -------- -------0
ICMP
any
any
1
UDP
any
1812
2
UDP
any
68
3
UDP
any
67
4
TCP
any
22
5
TCP
22
any
6
TCP
639
any
7
TCP
any
639
8
TCP
646
any
9
TCP
any
646
10
UDP
646
any
11
UDP
any
646
12
TCP
23
any
13
TCP
any
23
14
UDP
any
123
15
TCP
any
21
16
TCP
any
20
17
UDP
any
21
18
UDP
any
20
19
TCP
21
any
20
TCP
20
any
21
UDP
21
any
22
UDP
20
any
23
UDP
any
69
24
UDP
69
any
25
TCP
any
161
26
TCP
161
any
27
TCP
162
any
28
TCP
any
162
29
UDP
any
161
30
UDP
161
any
31
UDP
any
162
32
UDP
162
any
33
PIM-SM
any
any
34
IGMP
any
any
35
OSPF
any
any
36
RSVP
any
any
FTOS#

port-set 0
Blk-Hole VlanCPU
-------- ---------No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
-

EgPort
-----CP
CP
CP
CP
CP
CP
RP2
RP2
RP1
RP1
RP1
RP1
CP
CP
CP
CP
CP
CP
CP
CP
CP
CP
CP
CP
CP
CP
CP
CP
CP
CP
CP
CP
CP
RP2
RP2
RP1
RP1

The IPPTT table is used for looking up forwarding information for IP control traffic destined
to the router. For the listed control traffic types, IPPTT contains the information for the
following:
•
•

Related
Commands

linecard 2
Queue DP
----- -Q0
0
Q7
6
Q7
6
Q7
6
Q7
6
Q7
6
Q7
6
Q7
6
Q7
6
Q7
6
Q7
6
Q7
6
Q7
6
Q7
6
Q7
6
Q7
6
Q7
6
Q7
6
Q7
6
Q7
6
Q7
6
Q7
6
Q7
6
Q7
6
Q7
6
Q7
6
Q7
6
Q7
6
Q7
6
Q7
6
Q7
6
Q7
6
Q7
6
Q6
0
Q7
6
Q7
6
Q7
6

Which CPU to send the traffic (CP, RP1, or RP2)
What QoS parameters to set

show ip cam stack-unit

Display the CAM table

show tcp statistics

IPv4 Routing | 703

www.dell.com | support.dell.com

ces

Syntax
Parameters

Command Modes
Command
History

View information on TCP traffic through the switch.

show tcp statistics {all | cp | rp1 | rp2}
all

Enter the keyword all to view all TCP information.

cp

Enter the keyword cp to view only TCP information from the Control Processor.

rp1

Enter the keyword rp1 to view only TCP statistics from Route Processor 1.

rp2

Enter the keyword rp2 to view only TCP statistics from Route Processor 2.

EXEC Privilege
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 6.4.1.0

Introduced

Example

FTOS#show tcp stat cp
Control Processor TCP:
Rcvd: 10585 Total, 0 no port
0 checksum error, 0 bad offset, 0 too short
329 packets (1263 bytes) in sequence
17 dup packets (6 bytes)
0 partially dup packets (0 bytes)
7 out-of-order packets (0 bytes)
0 packets ( 0 bytes) with data after window
0 packets after close
0 window probe packets, 41 window update packets
41 dup ack packets, 0 ack packets with unsend data
10184 ack packets (12439508 bytes)
Sent: 12007 Total, 0 urgent packets
25 control packets (including 24 retransmitted)
11603 data packets (12439677 bytes)
24 data packets (7638 bytes) retransmitted
355 ack only packets (41 delayed)
0 window probe packets, 0 window update packets
7 Connections initiated, 8 connections accepted, 15 connections established
14 Connections closed (including 0 dropped, 0 embryonic dropped)
20 Total rxmt timeout, 0 connections dropped in rxmt timeout
0 Keepalive timeout, 0 keepalive probe, 0 Connections dropped in keepalive
FTOS#

Table 23-18.

704

|

IPv4 Routing

show tcp statistics cp Command Example Fields

Field

Description

Rcvd:

Displays the number and types of TCP packets received by the switch.
• Total = total packets received
• no port = number of packets received with no designated port.

0 checksum error...

Displays the number of packets received with the following:
• checksum errors
• bad offset to data
• too short

329 packets...

Displays the number of packets and bytes received in sequence.

Table 23-18.

show tcp statistics cp Command Example Fields (continued)

Field

Description

17 dup...

Displays the number of duplicate packets and bytes received.

0 partially...

Displays the number of partially duplicated packets and bytes received.

7 out-of-order...

Displays the number of packets and bytes received out of order.

0 packets with data after
window

Displays the number of packets and bytes received that exceed the
switch’s window size.

0 packets after close

Displays the number of packet received after the TCP connection was
closed.

0 window probe packets... Displays the number of window probe and update packets received.
41 dup ack...

Displays the number of duplicate acknowledgement packets and
acknowledgement packets with data received.

10184 ack...

Displays the number of acknowledgement packets and bytes received.

Sent:

Displays the total number of TCP packets sent and the number of urgent
packets sent.

25 control packets...

Displays the number of control packets sent and the number
retransmitted.

11603 data packets...

Displays the number of data packets sent.

24 data packets
retransmitted

Displays the number of data packets resent.

355 ack...

Displays the number of acknowledgement packets sent and the number
of packet delayed.

0 window probe...

Displays the number of window probe and update packets sent.

7 Connections initiated...

Displays the number of TCP connections initiated, accepted, and
established.

14 Connections closed...

Displays the number of TCP connections closed, dropped.

20 Total rxmt...

Displays the number of times the switch tried to re-send data and the
number of connections dropped during the TCP retransmit timeout
period.

0 Keepalive....

Lists the number of keepalive packets in timeout, the number keepalive
probes and the number of TCP connections dropped during keepalive.

IPv4 Routing | 705

706

|

IPv4 Routing

www.dell.com | support.dell.com

24
IPv6 Access Control Lists (IPv6 ACLs)
Overview
IPv6 ACLs and IPv6 Route Map commands are supported on Dell Force10 platforms, as
indicated by the characters that appear under each of the command headings: e E-Series,
c C-Series, s S-Series, or
.
•
•

IPv6 ACL Commands
IPv6 Route Map Commands

Note: For IPv4 ACL commands, refer to IPv6 Access Control Lists (IPv6 ACLs).

Important Points to Remember
•
•
•
•
•

•
•
•
•
•

E-Series platforms require IPv6-ExtACL CAM profile to support IPv6 ACLs.
C-Series and S-Series platforms require manual CAM usage space allotment.
Refer to cam-acl later in this document.
Egress IPv6 ACL and IPv6 ACL on Loopback interface is not supported.
Reference to an empty ACL will permit any traffic.
ACLs are not applied to self-originated traffic (e.g. Control Protocol traffic not
affected by IPv6 ACL since the routed bit is not set for Control Protocol traffic
and for egress ACLs the routed bit must be set).
The same access list name can be used for both IPv4 and IPv6 ACLs.
Both IPv4 and IPv6 ACLs can be applied on an interface at the same time.
IPv6 ACLs can be applied on physical interfaces and a logical interfaces
(Port-channel/VLAN).
Non-contiguous masks are not supported in source or destination addresses in
IPv6 ACL entries.
Since prefix mask is specified in /x format in IPv6 ACLs, inverse mask is not
supported.

IPv6 Access Control Lists (IPv6 ACLs) | 707

www.dell.com | support.dell.com

IPv6 ACL Commands
The following commands configure IPv6 ACLs:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

cam-acl
cam-acl-egress
clear counters ipv6 access-group
deny
deny icmp
deny tcp
deny udp
ipv6 access-group
ipv6 control-plane egress-filter
ipv6 access-list
permit
permit icmp
permit tcp
permit udp
remark
resequence access-list
resequence prefix-list ipv6
seq
show cam-acl
show cam-acl-egress
show config
show ipv6 accounting access-list
show running-config acl
test cam-usage

cam-acl
ces
Syntax

708

|

Allocate space for IPv6 ACLs.
cam-acl {default | l2acl 1-10 ipv4acl 1-10 ipv6acl 0-10 ipv4qos 1-10 l2qos 1-10}

IPv6 Access Control Lists (IPv6 ACLs)

Parameters

Command Modes
Command
History

Usage
Information

default

Use the default CAM profile settings, and set the CAM as
follows.
L3 ACL (ipv4acl): 6
L2 ACL(l2acl): 5
IPv6 L3 ACL (ipv6acl): 0
L3 QoS (ipv4qos): 1
L2 QoS (l2qos): 1

l2acl 1-10 ipv4acl 1-10 ipv6acl
0-10 ipv4qos 1-10 l2qos 1-10

Allocate space to support IPv6 ACLs. You must enter all of
the profiles and a range.
Enter the CAM profile name followed by the amount to be
allotted.
The total space allocated must equal 13.
The ipv6acl range must be a factor of 2.

CONFIGURATION
Version 8.3.7.0

Introduced on the S4810

Version 8.4.2.0

Introduced on the E-Series TeraScale

Version 8.2.1.0

Introduced on the S-Series

Version 7.8.1.0

Introduced on the C-Series

You must save the new CAM settings to the startup-config (write-mem or copy run start) then
reload the system for the new settings to take effect.
The total amount of space allowed is 16 FP Blocks. System flow requires 3 blocks and these
cannot be reallocated.
When configuring space for IPv6 ACLs, the total number of Blocks must equal 13.
Ranges for the CAM profiles are 1-10, except for the ipv6acl profile which is 0-10. The
ipv6acl allocation must be a factor of 2 (2, 4, 6, 8, 10).

cam-acl-egress
ces
Syntax

Allocate space for IPv6 egress ACLs.
cam-acl-egress {default | l2acl 1-4 ipv4acl 1-4 ipv6acl 0-4}

IPv6 Access Control Lists (IPv6 ACLs) | 709

www.dell.com | support.dell.com

Parameters

default

Use the default CAM profile settings, and set the CAM as
follows.
L2 ACL(l2acl): 1
L3 ACL (ipv4acl): 1
IPv6 L3 ACL (ipv6acl): 2

l2acl 1-4 ipv4acl 1- 4 ipv6acl

Allocate space to support IPv6 ACLs. You must enter all of the
profiles and a range for each.
Enter the CAM profile name followed by the amount to be
allotted.
The total space allocated must equal 13.
The ipv6acl range must be a factor of 2.

0-4

Command Modes
Command
History

Usage
Information

CONFIGURATION
Version 8.3.7.0

Introduced on the S4810

Version 8.4.2.0

Introduced on the E-Series TeraScale

Version 8.2.1.0

Introduced on the S-Series

Version 7.8.1.0

Introduced on the C-Series

You must save the new CAM settings to the startup-config (write-mem or copy run start) then
reload the system for the new settings to take effect.
The total amount of space allowed is 16 FP Blocks. System flow requires 3 blocks and these
cannot be reallocated.
When configuring space for IPv6 ACLs, the total number of blocks must equal 13.
Ranges for the CAM profiles are 1 to 10, except for the ipv6acl profile which is 0-10. The
ipv6acl allocation must be a factor of 2 (2, 4, 6, 8, 10).

Example

FTOS#
FTOS#configure
FTOS(conf)#cam-acl-egress ?
default
Reset Egress CAM ACL entries to default setting
l2acl
Set L2-ACL entries
FTOS(conf)#cam-acl-egress l2acl ?
<1-4>
Number of FP blocks for l2acl
FTOS(conf)#cam-acl-egress l2acl 1 ?
ipv4acl
Set IPV4-ACL entries
FTOS(conf)#cam-acl-egress l2acl 1 ipv4acl 1 ?
ipv6acl
Set IPV6-ACL entries
FTOS(conf)#cam-acl-egress l2acl 1 ipv4acl 1 ipv6acl ?
<0-4>
Number of FP blocks for IPV6 (multiples of 2)
FTOS(conf)#cam-acl-egress l2acl 1 ipv4acl 1 ipv6acl 2

clear counters ipv6 access-group
ces
Syntax

710

|

Erase all counters maintained for the IPv6 access lists.
clear counters ipv6 access-group [access-list-name]

IPv6 Access Control Lists (IPv6 ACLs)

Parameters

Command Modes

access-list-name

(OPTIONAL) Enter the name of a configured access-list, up to 140
characters.

EXEC
EXEC Privilege

Command
History

Version 8.4.2.1

Introduced on the S-Series

Version 8.2.1.0

Introduced on the E-Series ExaScale

Version 7.8.1.0

Introduced on the C-Series

Version 7.4.1.0

Introduced on the E-Series TeraScale
Added monitor option

deny
ces
Syntax

Configure a filter that drops IPv6 packets that match the filter criteria.
deny {ipv6-protocol-number | icmp | ipv6 | tcp | udp}

To remove this filter, you have two choices:
•
•
Parameters

Use the no seq sequence-number command syntax if you know the filter’s
sequence number or
Use the no deny {ipv6-protocol-number | icmp | ipv6 | tcp | udp} command.

ip-protocol-number

Enter an IPv6 protocol number.
Range: 0 to 255

icmp

Enter the keyword icmp to deny Internet Control Message Protocol
version 6.

ipv6

Enter the keyword ipv6 to deny any Internet Protocol version 6.

tcp

Enter the keyword tcp to deny the Transmission Control protocol.

udp

Enter the keyword udp to deny the User Datagram Protocol.

Defaults

Not configured.

Command Modes

ACCESS-LIST

Command
History

Version 8.4.2.1

Introduced on the S-Series

Version 8.2.1.0

Introduced support on the E-Series ExaScale

Version 7.8.1.0

Introduced support on the C-Series

Version 7.4.1.0

Introduced support on the E-Series TeraScale

deny icmp
IPv6 Access Control Lists (IPv6 ACLs) | 711

www.dell.com | support.dell.com

ces
Syntax

deny icmp {source address mask | any | host ipv6-address} {destination address | any | host
ipv6-address} [message-type] [count [byte]] | [log] [monitor]

To remove this filter, you have two choices:
•
•

Parameters

Use the no seq sequence-number command syntax if you know the filter’s
sequence number or
Use the no deny icmp {source address mask | any | host ipv6-address} {destination
address | any | host ipv6-address} command.

source address

Enter the IPv6 address of the network or host from which the packets
were sent in the x:x:x:x::x format followed by the prefix length in the /x
format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zero.

mask

Enter a network mask in /prefix format (/x).

any

Enter the keyword any to specify that all routes are subject to the filter.

host ipv6-address

Enter the keyword host followed by the IPv6 address of the host in the
x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zero

destination address

Enter the IPv6 address of the network or host to which the packets are
sent in the x:x:x:x::x format followed by the prefix length in the /x
format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zero.

message-type

On the E-Series only, enter an ICMP message type, either with the type
(and code, if necessary) numbers or with the name of the message type.
Range: 0 to 255 for ICMP type; 0 to 255 for ICMP code

count

(OPTIONAL) Enter the keyword count to count packets processed by
the filter.

byte

(OPTIONAL) Enter the keyword byte to count bytes processed by the
filter.

log

(OPTIONAL) Enter the keyword log to have the information kept in an
ACL log file.

monitor

(OPTIONAL) Enter the keyword monitor to monitor traffic on the
monitoring interface specified in the flow-based monitoring session
along with the filter operation.

Defaults

Not configured

Command Modes

ACCESS-LIST

Command
History

712

Configure a filter to drop all or specific ICMP messages.

|

Version 8.4.2.1

Introduced on the S-Series

Version 8.2.1.0

Introduced support on the E-Series ExaScale

IPv6 Access Control Lists (IPv6 ACLs)

Usage
Information

Version 7.8.1.0

Introduced support on the C-Series

Version 7.4.1.0

Introduced support on the E-Series TeraScale
Added monitor option

The C-Series cannot count both packets and bytes, so when you enter the count byte options,
only bytes are incremented.
The following table lists the keywords displayed in the CLI help and their corresponding
ICMP Message Type Name.
Table 24-1.

ICMP Message Type Keywords

Keyword

ICMP Message Type Name

dest-unreachable

Destination unreachable

echo

Echo request (ping)

echo-reply

Echo reply

inverse-nd-na

Inverse neighbor discovery advertisement

inverse-nd-ns

Inverse neighbor discovery solicitation

log

Log matches against this entry

mobile-advertisement

Mobile prefix advertisement

mobile-solicitation

Mobile prefix solicitation

mrouter-advertisement

Multicast router advertisement

mrouter-solicitation

Multicast router solicitation

mrouter-termination

Multicast router termination

nd-na

Neighbor advertisement

nd-ns

Neighbor solicitation

packet-too-big

Packet is too big

parameter-problem

Parameter problems

redirect

Neighbor redirect

router-advertisement

Neighbor discovery router advertisement

router-renumbering

All routers renumbering

router-solicitation

Neighbor discovery router solicitation

time-exceeded

All time exceeded

deny tcp
ces
Syntax

Configure a filter that drops TCP packets that match the filter criteria.
deny tcp {source address mask | any | host ipv6-address} [operator port [port]] {destination address
| any | host ipv6-address} [bit] [operator port [port]] [count [byte]] | [log] [monitor]

To remove this filter, you have two choices:

IPv6 Access Control Lists (IPv6 ACLs) | 713

www.dell.com | support.dell.com

•

714

•

Parameters

|

Use the no seq sequence-number command syntax if you know the filter’s
sequence number or
Use the no deny tcp {source address mask | any | host ipv6-address} {destination
address | any | host ipv6-address} command.

source address

Enter the IPv6 address of the network or host from which the packets
were sent in the x:x:x:x::x format followed by the prefix length in the /x
format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zero.

mask

Enter a network mask in /prefix format (/x).

any

Enter the keyword any to specify that all routes are subject to the filter.

host ipv6-address

Enter the keyword host followed by the IPv6 address of the host in the
x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zero

operator

(OPTIONAL) Enter one of the following logical operand:
• eq = equal to
• neq = not equal to
• gt = greater than
• lt = less than
• range = inclusive range of ports (you must specify two ports for the
port command parameter.

port port

Enter the application layer port number. Enter two port numbers if using
the range logical operand.
Range: 0 to 65535.
The following list includes some common TCP port numbers:
• 23 = Telnet
• 20 and 21 = FTP
• 25 = SMTP
• 169 = SNMP

destination address

Enter the IPv6 address of the network or host to which the packets are
sent in the x:x:x:x::x format followed by the prefix length in the /x
format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zero.

bit

Enter a flag or combination of bits:
ack: acknowledgement field
fin: finish (no more data from the user)
psh: push function
rst: reset the connection
syn: synchronize sequence numbers
urg: urgent field

count

(OPTIONAL) Enter the keyword count to count packets processed by
the filter.

byte

(OPTIONAL) Enter the keyword byte to count bytes processed by the
filter.

IPv6 Access Control Lists (IPv6 ACLs)

log

(OPTIONAL) Enter the keyword log to enter ACL matches in the log.
Supported on Jumbo-enabled line cards only.

monitor

(OPTIONAL) Enter the keyword monitor to monitor traffic on the
monitoring interface specified in the flow-based monitoring session
along with the filter operation.

Defaults

Not configured.

Command Modes

ACCESS-LIST

Command
History

Usage
Information

Version 8.4.2.1

Introduced on the S-Series

Version 8.2.1.0

Introduced on the E-Series ExaScale

Version 7.8.1.0

Introduced on the C-Series

Version 7.4.1.0

Introduced on the E-Series TeraScale
Added monitor option

The C-Series cannot count both packets and bytes, so when you enter the count byte options,
only bytes are incremented.
Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port
operators (gt, lt, range) may require more than one entry. The range of ports is configured in
the CAM based on bitmask boundaries; the space required depends on exactly what ports are
included in the range.
For example, an ACL rule with TCP port range 4000 - 8000 uses 8 entries in the CAM:
Rule#
1
2
3
4
5
6
7
8

Data

Mask

From

To

#Covered

0000111110100000
0000111111000000
0001000000000000
0001100000000000
0001110000000000
0001111000000000
0001111100000000
0001111101000000

1111111111100000
1111111111000000
1111100000000000
1111110000000000
1111111000000000
1111111100000000
1111111111000000
1111111111111111

4000
4032
4096
6144
7168
7680
7936
8000

4031
4095
6143
7167
7679
7935
7999
8000

32
64
2048
1024
512
256
64
1

Total Ports: 4001

But an ACL rule with TCP port lt 1023 takes only one entry in the CAM:
Rule#
1

Data

Mask

From

0000000000000000 1111110000000000 0

To

#Covered

1023

1024

Total Ports: 1024

Related
Commands

deny

Assign a filter to deny IP traffic.

deny udp

Assign a filter to deny UDP traffic.

IPv6 Access Control Lists (IPv6 ACLs) | 715

www.dell.com | support.dell.com

deny udp
ces
Syntax

deny udp {source address mask | any | host ipv6-address} [operator port [port]] {destination
address | any | host ipv6-address} [operator port [port]] [count [byte]] | [log] [monitor]

To remove this filter, you have two choices:

Parameters

716

Configure a filter to drop UDP packets meeting the filter criteria.

|

•

Use the no seq sequence-number command syntax if you know the filter’s
sequence number or

•

Use the no deny udp {source address mask | any | host ipv6-address} {destination
address | any | host ipv6-address} command.

source address

Enter the IPv6 address of the network or host from which the packets
were sent in the x:x:x:x::x format followed by the prefix length in the /x
format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zero.

mask

Enter a network mask in /prefix format (/x).

any

Enter the keyword any to specify that all routes are subject to the filter.

host ipv6-address

Enter the keyword host followed by the IPv6 address of the host in the
x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zero

operator

(OPTIONAL) Enter one of the following logical operand:
• eq = equal to
• neq = not equal to
• gt = greater than
• lt = less than
• range = inclusive range of ports

port port

(OPTIONAL) Enter the application layer port number. Enter two port
numbers if using the range logical operand.
Range: 0 to 65535

destination address

Enter the IPv6 address of the network or host to which the packets are
sent in the x:x:x:x::x format followed by the prefix length in the /x
format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zero.

count

(OPTIONAL) Enter the keyword count to count packets processed by
the filter.

byte

(OPTIONAL) Enter the keyword byte to count bytes processed by the
filter.

log

(OPTIONAL) Enter the keyword log to enter ACL matches in the log.
Supported on Jumbo-enabled line cards only.

monitor

(OPTIONAL) Enter the keyword monitor to monitor traffic on the
monitoring interface specified in the flow-based monitoring session
along with the filter operation.

IPv6 Access Control Lists (IPv6 ACLs)

Defaults

Not configured.

Command Modes

ACCESS-LIST

Command
History

Usage
Information

Version 8.4.2.1

Introduced on the S-Series

Version 8.2.1.0

Introduced on the E-Series ExaScale

Version 7.8.1.0

Introduced on the C-Series

Version 7.4.1.0

Introduced on the E-Series TeraScale
Added monitor option

The C-Series cannot count both packets and bytes, so when you enter the count byte options,
only bytes are incremented.
Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port
operators (gt, lt, range) may require more than one entry. The range of ports is configured in
the CAM based on bitmask boundaries; the space required depends on exactly what ports are
included in the range.
For example, an ACL rule with TCP port range 4000 - 8000 will use 8 entries in the CAM:
Rule#
1
2
3
4
5
6
7
8

Data

Mask

From

To

#Covered

0000111110100000
0000111111000000
0001000000000000
0001100000000000
0001110000000000
0001111000000000
0001111100000000
0001111101000000

1111111111100000
1111111111000000
1111100000000000
1111110000000000
1111111000000000
1111111100000000
1111111111000000
1111111111111111

4000
4032
4096
6144
7168
7680
7936
8000

4031
4095
6143
7167
7679
7935
7999
8000

32
64
2048
1024
512
256
64
1

Total Ports: 4001

But an ACL rule with TCP port lt 1023 takes only one entry in the CAM:
Rule#
1

Data

Mask

From

0000000000000000 1111110000000000 0

To

#Covered

1023

1024

Total Ports: 1024

Related
Commands

deny

Assign a deny filter for IP traffic.

deny tcp

Assign a deny filter for TCP traffic.

ipv6 access-group
ces
Syntax

Assign an IPv6 access-group to an interface.
ipv6 access-group access-list-name {in | out} [implicit-permit] [vlan range]

To delete an IPv6 access-group configuration, use the no ipv6 access-group access-list-name
{in} [implicit-permit] [vlan range] command.

IPv6 Access Control Lists (IPv6 ACLs) | 717

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes
Command
History

Usage
Information

access-list-name

Enter the name of a configured access list, up to 140 characters.

in | out

Enter either the keyword in or out to apply the IPv6 ACL to incoming
traffic (ingress) or outgoing traffic (egress).

implicit-permit

(OPTIONAL) Enter the keyword implicit-permit to change the default
action of the IPv6 ACL from implicit-deny to implicit-permit (that is, if
the traffic does not match the filters in the IPv6 ACL, the traffic is
permitted instead of dropped).

vlan range

(OPTIONAL) Enter the keyword vlan followed by the VLAN range in a
comma separated format.
Range: 1 to 4094

Disabled
INTERFACE
Version 8.4.2.1

Introduced on the S-Series

Version 7.8.1.0

Introduced on the C-Series
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are
up to 16 characters long.

Version 7.4.1.0

Introduced on the E-Series TeraScale

You can assign an IPv6 access group to a physical, LAG, or VLAN interface context.

Example

FTOS(conf-if-gi-9/0)#ipv6 access-group AclList1 in implicit-permit vlan 10-20
FTOS(conf-if-gi-9/0)#show config
!
interface GigabitEthernet 9/0
no ip address
ipv6 access-group AclList1 in implicit-permit Vlan 10-20
no shutdown
FTOS(conf-if-gi-9/0)#

ipv6 access-list
ces
Syntax

Configure an access list based on IPv6 addresses or protocols.
ipv6 access-list access-list-name

To delete an access list, use the no ipv6 access-list access-list-name command.
Parameters

Defaults

Command Modes

718

|

access-list-name

Enter the as the access list name as a string, up to 140 characters.

All access lists contain an implicit “deny any”; that is, if no match occurs, the packet is
dropped.
CONFIGURATION

IPv6 Access Control Lists (IPv6 ACLs)

Command
History

Usage
Information
Related
Commands

Version 8.3.7.0

Introduced support on the S4810

Version 8.4.2.1

Introduced on the S-Series

Version 8.2.1.0

Introduced on the E-Series ExaScale

Version 7.8.1.0

Introduced on the C-Series
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are
up to 16 characters long.

Version 7.4.1.0

Introduced on the E-Series TeraScale

The number of entries allowed per ACL is hardware-dependent. Refer to your line card
documentation for detailed specification on entries allowed per ACL.
show config

View the current configuration.

ipv6 control-plane egress-filter
ces
Syntax
Defaults

Enable egress Layer 3 ACL lookup for IPv6 CPU traffic.
ipv6 control-plane egress-filter
Not enabled

Command Modes

EXEC Privilege

Command
History

Version 8.3.10.0

Introduced support on the S4810

permit
ces
Syntax

Select an IPv6 protocol number, ICMP, IPv6, TCP, or UDP to configure a filter that match the
filter criteria.
permit {ipv6-protocol-number | icmp | ipv6 | tcp | udp}

To remove this filter, you have two choices:
•
•
Parameters

Use the no seq sequence-number command syntax if you know the filter’s
sequence number or
Use the no permit {ipv6-protocol-number | icmp | ipv6 | tcp | udp} command.

ip-protocol-number

Enter an IPv6 protocol number.
Range: 0 to 255

icmp

Enter the keyword icmp to filter Internet Control Message Protocol
version 6.

ipv6

Enter the keyword ipv6 to filter any Internet Protocol version 6.

IPv6 Access Control Lists (IPv6 ACLs) | 719

www.dell.com | support.dell.com

tcp

Enter the keyword tcp to filter the Transmission Control protocol.

udp

Enter the keyword udp to filter the User Datagram Protocol.

Defaults

Not configured.

Command Modes

ACCESS-LIST

Command
History

Version 8.3.7.0

Introduced support on the S4810

permit icmp
ces
Syntax

Configure a filter to allow all or specific ICMP messages.
permit icmp {source address mask | any | host ipv6-address} {destination address | any | host
ipv6-address} [message-type] [count [byte]] | [log] [monitor]

To remove this filter, you have two choices:
•
•
Parameters

720

|

Use the no seq sequence-number command syntax if you know the filter’s
sequence number or
Use the no permit icmp {source address mask | any | host ipv6-address} {destination
address | any | host ipv6-address} command.

source address

Enter the IPv6 address of the network or host from which the packets
were sent in the x:x:x:x::x format followed by the prefix length in the /x
format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zero.

mask

Enter a network mask in /prefix format (/x).

any

Enter the keyword any to specify that all routes are subject to the filter.

host ipv6-address

Enter the keyword host followed by the IPv6 address of the host in the
x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zero

destination address

Enter the IPv6 address of the network or host to which the packets are
sent in the x:x:x:x::x format followed by the prefix length in the /x
format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zero.

message-type

(OPTIONAL) Enter an ICMP message type, either with the type (and
code, if necessary) numbers or with the name of the message type.
Range: 0 to 255 for ICMP type; 0 to 255 for ICMP code

count

(OPTIONAL) Enter the keyword count to count packets processed by
the filter.

byte

(OPTIONAL) Enter the keyword byte to count bytes processed by the
filter.

IPv6 Access Control Lists (IPv6 ACLs)

log

(OPTIONAL) Enter the keyword log to have the information kept in an
ACL log file.

monitor

(OPTIONAL) Enter the keyword monitor to monitor traffic on the
monitoring interface specified in the flow-based monitoring session
along with the filter operation.

Defaults

Not configured

Command Modes

ACCESS-LIST

Command
History

Usage
Information

Version 8.3.7.0

Introduced support on the S4810

Version 8.4.2.1

Introduced on the S-Series

Version 8.2.1.0

Introduced on the E-Series ExaScale

Version 7.8.1.0

Introduced on the C-Series

Version 7.4.1.0

Introduced on the E-Series TeraScale
Added monitor option

The C-Series cannot count both packets and bytes, so when you enter the count byte options,
only bytes are incremented.

permit tcp
ces
Syntax

Configure a filter to pass TCP packets that match the filter criteria.
permit tcp {source address mask | any | host ipv6-address} [operator port [port]] {destination
address | any | host ipv6-address} [bit] [operator port [port]] [count [byte]] | [log] [monitor]

To remove this filter, you have two choices:
•
•
Parameters

Use the no seq sequence-number command syntax if you know the filter’s
sequence number or
Use the no permit tcp {source address mask | any | host ipv6-address} {destination
address | any | host ipv6-address} command.

source address

Enter the IPv6 address of the network or host from which the packets
were sent in the x:x:x:x::x format followed by the prefix length in the /x
format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zero.

mask

Enter a network mask in /prefix format (/x).

any

Enter the keyword any to specify that all routes are subject to the filter.

host ipv6-address

Enter the keyword host followed by the IPv6 address of the host in the
x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zero

IPv6 Access Control Lists (IPv6 ACLs) | 721

www.dell.com | support.dell.com

(OPTIONAL) Enter one of the following logical operand:
• eq = equal to
• neq = not equal to
• gt = greater than
• lt = less than
• range = inclusive range of ports (you must specify two port for the
port parameter.)

port port

Enter the application layer port number. Enter two port numbers if
using the range logical operand.
Range: 0 to 65535.
The following list includes some common TCP port numbers:
23 = Telnet
20 and 21 = FTP
25 = SMTP
169 = SNMP

destination address

Enter the IPv6 address of the network or host to which the packets are
sent in the x:x:x:x::x format followed by the prefix length in the /x
format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zero.

bit

Enter a flag or combination of bits:
ack: acknowledgement field
fin: finish (no more data from the user)
psh: push function
rst: reset the connection
syn: synchronize sequence numbers
urg: urgent field

count

(OPTIONAL) Enter the keyword count to count packets processed by
the filter.

byte

(OPTIONAL) Enter the keyword byte to count bytes processed by the
filter.

log

(OPTIONAL) Enter the keyword log to enter ACL matches in the log.

monitor

(OPTIONAL) Enter the keyword monitor to monitor traffic on the
monitoring interface specified in the flow-based monitoring session
along with the filter operation.

Defaults

Not configured.

Command Modes

ACCESS-LIST

Command
History

Usage
Information

722

operator

|

Version 8.4.2.1

Introduced on the S-Series

Version 8.2.1.0

Introduced on the E-Series ExaScale

Version 7.8.1.0

Introduced on the C-Series

Version 7.4.1.0

Introduced on the E-Series TeraScale
Added monitor option

The C-Series cannot count both packets and bytes, so when you enter the count byte options,
only bytes are incremented.

IPv6 Access Control Lists (IPv6 ACLs)

Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port
operators (gt, lt, range) may require more than one entry. The range of ports is configured in
the CAM based on bitmask boundaries; the space required depends on exactly what ports are
included in the range.
For example, an ACL rule with TCP port range 4000 - 8000 uses 8 entries in the CAM:
Rule#
1
2
3
4
5
6
7
8

Data

Mask

From

To

#Covered

0000111110100000
0000111111000000
0001000000000000
0001100000000000
0001110000000000
0001111000000000
0001111100000000
0001111101000000

1111111111100000
1111111111000000
1111100000000000
1111110000000000
1111111000000000
1111111100000000
1111111111000000
1111111111111111

4000
4032
4096
6144
7168
7680
7936
8000

4031
4095
6143
7167
7679
7935
7999
8000

32
64
2048
1024
512
256
64
1

Total Ports: 4001

But an ACL rule with TCP port lt 1023 takes only one entry in the CAM:
Rule#
1

Data

Mask

From

0000000000000000 1111110000000000 0

To

#Covered

1023

1024

Total Ports: 1024

Related
Commands

permit

Assign a permit filter for IPv6 packets.

permit udp

Assign a permit filter for UDP packets.

permit udp
ces
Syntax

Configure a filter to pass UDP packets meeting the filter criteria.
permit udp {source address mask | any | host ipv6-address} [operator port [port]] {destination
address | any | host ipv6-address} [operator port [port]] [count [byte]] | [log] [monitor]

To remove this filter, you have two choices:
•
•

Parameters

Use the no seq sequence-number command syntax if you know the filter’s
sequence number or
Use the no permit udp {source address mask | any | host ipv6-address} {destination
address | any | host ipv6-address} command.

source address

Enter the IPv6 address of the network or host from which the packets
were sent in the x:x:x:x::x format followed by the prefix length in the /x
format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zero.

mask

Enter a network mask in /prefix format (/x).

IPv6 Access Control Lists (IPv6 ACLs) | 723

www.dell.com | support.dell.com

any

Enter the keyword any to specify that all routes are subject to the filter.

host ipv6-address

Enter the keyword host followed by the IPv6 address of the host in the
x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zero

operator

(OPTIONAL) Enter one of the following logical operand:
• eq = equal to
• neq = not equal to
• gt = greater than
• lt = less than
• range = inclusive range of ports (you must specify two ports for the
port parameter.)

port port

(OPTIONAL) Enter the application layer port number. Enter two port
numbers if using the range logical operand.
Range: 0 to 65535

destination address

Enter the IPv6 address of the network or host to which the packets are
sent in the x:x:x:x::x format followed by the prefix length in the /x
format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zero.

count

(OPTIONAL) Enter the keyword count to count packets processed by
the filter.

byte

(OPTIONAL) Enter the keyword byte to count bytes processed by the
filter.

log

(OPTIONAL) Enter the keyword log to enter ACL matches in the log.

monitor

(OPTIONAL) Enter the keyword monitor to monitor traffic on the
monitoring interface specified in the flow-based monitoring session
along with the filter operation.

Defaults

Not configured.

Command Modes

ACCESS-LIST

Command
History

Usage
Information

Version 8.4.2.1

Introduced on the S-Series

Version 8.2.1.0

Introduced support on the E-Series ExaScale

Version 7.8.1.0

Introduced support on the C-Series

Version 7.4.1.0

Introduced support on the E-Series TeraScale
Added monitor option

The C-Series cannot count both packets and bytes, so when you enter the count byte options,
only bytes are incremented.
Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port
operators (gt, lt, range) may require more than one entry. The range of ports is configured in
the CAM based on bitmask boundaries; the space required depends on exactly what ports are
included in the range.
For example, an ACL rule with TCP port range 4000 - 8000 uses 8 entries in the CAM:

724

|

IPv6 Access Control Lists (IPv6 ACLs)

Rule#
1
2
3
4
5
6
7
8

Data

Mask

From

To

#Covered

0000111110100000
0000111111000000
0001000000000000
0001100000000000
0001110000000000
0001111000000000
0001111100000000
0001111101000000

1111111111100000
1111111111000000
1111100000000000
1111110000000000
1111111000000000
1111111100000000
1111111111000000
1111111111111111

4000
4032
4096
6144
7168
7680
7936
8000

4031
4095
6143
7167
7679
7935
7999
8000

32
64
2048
1024
512
256
64
1

Total Ports: 4001

But an ACL rule with TCP port lt 1023 takes only one entry in the CAM:
Rule#
1

Data

Mask

From

0000000000000000 1111110000000000 0

To

#Covered

1023

1024

Total Ports: 1024

Related
Commands

permit

Assign a permit filter for IP packets.

permit tcp

Assign a permit filter for TCP packets.

remark
ces
Syntax

Enter a description for an IPv6 ACL entry.
remark remark number [description]

To delete the description, use the no remark remark number command (it is not necessary to
include the remark description that you are deleting).
Parameters

remark number

Enter the remark number. Note that the same sequence number can
be used for the remark and an ACL rule.
Range: 0 to 4294967290

description

Enter a description of up to 80 characters.

Defaults

Not configured

Command Modes

ACCESS-LIST

Command
History

Example

Version 8.4.2.1

Introduced on the S-Series

Version 8.2.1.0

Introduced on the E-Series ExaScale

Version 7.8.1.0

Introduced on the C-Series

Version 7.4.1.0

Introduced on the E-Series TeraScale

FTOS(config-ipv6-acl)#remark 10 Remark for Entry # 10
FTOS(config-ipv6-acl)#show config
!
ipv6 access-list Acl1
description IPV6 Access-list
seq 5 permit ipv6 1111::2222/127 host 3333::1111 log count bytes

IPv6 Access Control Lists (IPv6 ACLs) | 725

www.dell.com | support.dell.com

remark 10 Remark for Entry # 10
seq 10 permit icmp host 3333:: any mobile-advertisement log
seq 15 deny tcp any any rst
seq 20 permit udp any any gt 100 count
!FTOS(config-ipv6-acl)#

Usage
Information

Related
Commands

As shown in the example above, the same sequence number is used for the remark and an
ACL rule. The remark will precede the rule in the running-configuration because it is
assumed that the remark is for that rule or that group of rules that follow the remark. You can
configure up to 4294967290 remarks in a given ACL.
show config

Display the current ACL configuration.

resequence access-list
ces
Syntax
Parameters

Defaults
Command Modes

Re-assign sequence numbers to entries of an existing access-list.
resequence access-list {ipv4 | ipv6 | mac} {access-list-name StartingSeqNum Step-to-Increment}
ipv4 | ipv6 | mac

Enter the keyword ipv4, ipv6 or mac to identify the access list type to
resequence.

access-list-name

Enter the name of a configured IP access list, up to 140 characters.
Increased name string to accept up to 140 characters. Prior to 7.8.1.0,
names are up to 16 characters long.

StartingSeqNum

Enter the starting sequence number to resequence.
Range: 0 to 4294967290

Step-to-Increment

Enter the step to increment the sequence number.
Range: 1 to 4294967290

No default values or behavior
EXEC
EXEC Privilege

Command
History

Usage
Information
Related
Commands

726

|

Version 8.4.2.0

Introduced on the S-Series

Version 8.2.1.0

Introduced on the E-Series ExaScale

Version 7.8.1.0

Introduced on the C-Series

Version 7.4.1.0

Introduced on the E-Series TeraScale

When all sequence numbers have been exhausted, this feature permits re-assigning new
sequence number to entries of an existing access-list.
resequence prefix-list ipv6

IPv6 Access Control Lists (IPv6 ACLs)

Resequence a prefix list

resequence prefix-list ipv6
ces
Syntax
Parameters

Defaults
Command Modes

Re-assign sequence numbers to entries of an existing prefix list.
resequence prefix-list ipv6 {prefix-list-name StartingSeqNum Step-to-increment}
prefix-list-name

Enter the name of configured prefix list, up to 140 characters.
Increased name string to accept up to 140 characters. Prior to 7.8.1.0,
names are up to 16 characters long.

StartingSeqNum

Enter the starting sequence number to resequence.
Range: 0 – 65535

Step-to-Increment

Enter the step to increment the sequence number.
Range: 1 – 65535

No default values or behavior
EXEC
EXEC Privilege

Command
History

Usage
Information
Related
Commands

Version 8.4.2.1

Introduced on the S-Series

Version 8.2.1.0

Introduced on the E-Series ExaScale

Version 7.8.1.0

Introduced on the C-Series

Version 7.4.1.0

Introduced on the E-Series TeraScale

When all sequence numbers have been exhausted, this feature permits re-assigning new
sequence number to entries of an existing prefix list.
resequence access-list

Resequence an access-list

seq
ces
Syntax

Assign a sequence number to a deny or permit filter in an IPv6 access list while creating the
filter.
seq sequence-number {deny | permit} {ipv6-protocol-number | icmp | ip | tcp | udp} {source
address mask | any | host ipv6-address} {destination address | any | host ipv6-address} [operator
port [port]] [count [byte]] | [log] [monitor]

To delete a filter, use the no seq sequence-number command.
Parameters

sequence-number

Enter a number from 0 to 4294967290.

deny

Enter the keyword deny to configure a filter to drop packets meeting
this condition.

permit

Enter the keyword permit to configure a filter to forward packets
meeting this criteria.

IPv6 Access Control Lists (IPv6 ACLs) | 727

www.dell.com | support.dell.com
728

|

ipv6-protocol-number

Enter an IPv6 protocol number.
Range: 0 to 255

icmp

Enter the keyword icmp to configure an Internet Control Message
Protocol version 6 filter.

ipv6

Enter the keyword ipv6 to configure any Internet Protocol version 6
filter.

tcp

Enter the keyword tcp to configure a Transmission Control protocol
filter.

udp

Enter the keyword udp to configure a User Datagram Protocol filter.

source address

Enter the IPv6 address of the network or host from which the packets
were sent in the x:x:x:x::x format followed by the prefix length in the /
x format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zero.

mask

Enter a network mask in /prefix format (/x).

any

Enter the keyword any to specify that all routes are subject to the
filter.

host ipv6-address

Enter the keyword host followed by the IPv6 address of the host in the
x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zero

operator

(OPTIONAL) Enter one of the following logical operands:
• eq = equal to
• neq = not equal to
• gt = greater than
• lt = less than
• range = inclusive range of ports (you must specify two ports for
the port parameter.)

port port

(OPTIONAL) Enter the application layer port number. Enter two port
numbers if using the range logical operand.
Range: 0 to 65535
The following list includes some common TCP port numbers:
• 23 = Telnet
• 20 and 21 = FTP
• 25 = SMTP
• 169 = SNMP

destination address

Enter the IPv6 address of the network or host to which the packets are
sent in the x:x:x:x::x format followed by the prefix length in the /x
format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zero.

message-type

(OPTIONAL) Enter an ICMP message type, either with the type (and
code, if necessary) numbers or with the name of the message type .
Range: 0 to 255 for ICMP type; 0 to 255 for ICMP code

count

(OPTIONAL) Enter the keyword count to count packets processed by
the filter.

byte

(OPTIONAL) Enter the keyword byte to count bytes processed by the
filter.

IPv6 Access Control Lists (IPv6 ACLs)

log

(OPTIONAL) Enter the keyword log to enter ACL matches in the log.
Supported on Jumbo-enabled line cards only.

monitor

(OPTIONAL) Enter the keyword monitor to monitor traffic on the
monitoring interface specified in the flow-based monitoring session
along with the filter operation.

Defaults

Not configured.

Command Modes

ACCESS-LIST

Command
History

Related
Commands

Version 8.4.2.1

Introduced on the E-Series TeraScale and S-Series

Version 8.2.1.0

Introduced on the E-Series ExaScale

Version 7.8.1.0

Introduced on the C-Series

Version 7.4.1.0

Added monitor option

deny

Configure a filter to drop packets.

permit

Configure a filter to forward packets.

show cam-acl
ces
Syntax
Command Modes

Show space allocated for IPv6 ACLs.
show cam-acl

EXEC
EXEC Privilege

Command
History

Related
Commands
Example
(default profile)

Version 8.3.7.0

Introduced support on the S4810

Version 8.4.2.1

Introduced on the S-Series

Version 8.4.2.0

Introduced on the E-Series TeraScale

Version 7.8.1.0

Introduced on the C-Series

cam-acl

Configure CAM profiles to support IPv6 ACLs

FTOS#show cam-acl
-- Chassis Cam ACL -Current Settings(in block sizes)
L2Acl
:
5
Ipv4Acl
:
6
Ipv6Acl
:
0
Ipv4Qos
:
1
L2Qos
:
1
-- Line card 4 -Current Settings(in block sizes)
L2Acl
:
5

IPv6 Access Control Lists (IPv6 ACLs) | 729

www.dell.com | support.dell.com

Ipv4Acl
Ipv6Acl
Ipv4Qos
L2Qos

:
:
:
:

6
0
1
1

FTOS#show cam-acl

Example
(manually set
profiles)

FTOS#show cam-acl
-- Chassis Cam ACL -Current Settings(in block sizes)
L2Acl
:
2
Ipv4Acl
:
2
Ipv6Acl
:
4
Ipv4Qos
:
2
L2Qos
:
3
-- Line card 4 -Current Settings(in block sizes)
L2Acl
:
2
Ipv4Acl
:
2
Ipv6Acl
:
4
Ipv4Qos
:
2
L2Qos
:
3
FTOS#show cam-acl

show cam-acl-egress
ces
Syntax
Command Modes

Show information on FP groups allocated for egress ACLs.
show cam-acl-egress

EXEC
EXEC Privilege

Command
History

Related
Commands
Example
(default profile)

Version 8.3.7.0

Introduced support on the S4810

Version 8.4.2.1

Introduced on the S-Series

Version 8.4.2.0

Introduced on the E-Series TeraScale

Version 7.8.1.0

Introduced on the C-Series

cam-acl

Configure CAM profiles to support IPv6 ACLs

FTOS#show cam-acl-egress
-- Chassis Egress Cam ACL -Current Settings(in block sizes)
L2Acl
:
1
Ipv4Acl
:
1
Ipv6Acl
:
2
-- Stack unit 0 -Current Settings(in block sizes)
L2Acl
:
1
Ipv4Acl
:
1
Ipv6Acl
:
2

730

|

IPv6 Access Control Lists (IPv6 ACLs)

FTOS#show cam-acl

show config
ces
Syntax
Command Modes
Command
History

View the current IPv6 ACL configuration.
show config

ACCESS-LIST
Version 8.4.2.1

Introduced on the S-Series

Version 8.4.2.0

Introduced on the E-Series TeraScale

Version 8.2.1.0

Introduced on the E-Series ExaScale

Version 7.8.1.0

Introduced on the C-Series

Example

FTOS(conf-ipv6-acl)#show config
!
ipv6 access-list Acl1
seq 5 permit ipv6 1111::2222/127 host 3333::1111 log count bytes
seq 10 permit icmp host 3333:: any mobile-advertisement log
seq 15 deny tcp any any rst
seq 20 permit udp any any gt 100 count
FTOS(conf-ipv6-acl)#

show ipv6 accounting access-list
ces
Syntax
Parameters

Command Modes

View the IPv6 access-lists created on the E-Series and the sequence of filters.
show ipv6 accounting {access-list access-list-name | cam_count} interface interface
access-list-name

Enter the name of the ACL to be displayed, up to 140 characters.

cam_count

List the count of the CAM rules for this ACL.

interface interface

Enter the keyword interface followed by the interface type and slot/port
or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel
followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a SONET interface, enter the keyword sonet followed by the
slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.

EXEC

IPv6 Access Control Lists (IPv6 ACLs) | 731

www.dell.com | support.dell.com

EXEC Privilege
Command
History

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.4.2.1

Introduced on the S-Series

Version 8.2.1.0

Introduced on the E-Series ExaScale

Version 7.8.1.0

Introduced on the C-Series
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are
up to 16 characters long.

Version 7.4.1.0

Introduced on the E-Series TeraScale

Example

FTOS#show ipv6 accounting access-list
!
Ingress IPv6 access list AclList1 on GigabitEthernet 9/0
Total cam count 15
seq 10 permit icmp host 3333:: any mobile-advertisement log
seq 15 deny tcp any any rst
seq 20 permit udp any any gt 101 count (0 packets)
!
FTOS#

Table 24-2.

show ip accounting access-lists Command Example Field

Field

Description

“Ingress IPv6...”

Displays the name of the IPv6 ACL, in this example “AclList1”.

“seq 10...”

Displays the filter. If the keywords count or byte were configured
in the filter, the number of packets or bytes processed by the filter
is displayed at the end of the line.

show running-config acl
ces
Syntax
Command Modes

Display the ACL running configuration.
show running-config acl

EXEC
EXEC Privilege

Command
History

Example

732

|

Version 8.4.2.1

Introduced on the S-Series

Version 8.2.1.0

Introduced on the E-Series ExaScale

Version 7.8.1.0

Introduced on the C-Series

Version 7.4.1.0

Introduced support on the E-Series TeraScale

FTOS#show running-config acl
!
ip access-list extended ext-acl1
!
ip access-list standard std-acl1
!
ipv6 access-list Acl1

IPv6 Access Control Lists (IPv6 ACLs)

description IPV6 Access-list
seq 5 permit ipv6 1111::2222/127 host 3333::1111 log count bytes
remark 10 Remark for Entry # 10
seq 10 permit icmp host 3333:: any mobile-advertisement log
seq 15 deny tcp any any rst
seq 20 permit udp any any gt 100 count
!FTOS#

test cam-usage
ces
Syntax
Parameters

Defaults
Command Modes
Command
History

Usage
Information

Verify that enough ACL CAM space is available for the IPv6 ACLs you have created.
test cam-usage service-policy input input policy name linecard {number | all}

policy-map name

Enter the name of the policy-map to verify.

number

Enter all to get information for all the linecards, or enter the linecard
number to get information for a specific card.
Range: 0-6 for E-Series, 0-7 for C-Series

None
EXEC Privilege
Version 8.4.2.1

Introduced on the S-Series

Version 8.2.1.0

Introduced on the E-Series ExaScale

Version 7.8.1.0

Introduced on C-Series and E-Series TeraScale

This command applies to both IPv4 and IPv6 CAM Profiles, but is best used when verifying
QoS optimization for IPv6 ACLs.
QoS Optimization for IPv6 ACLs does not impact the CAM usage for applying a policy on a
single (or the first of several) interfaces. It is most useful when a policy is applied across
multiple interfaces; it can reduce the impact to CAM usage across subsequent interfaces.

Example
(C-Series)

The following example shows the output shown when using the test cam-usage command.
FTOS#test cam-usage service-policy input LauraMapTest linecard all
Status

Linecard | Portpipe | CAM Partition | Available CAM | Estimated CAM per Port |

----------------------------------------------------------------------------------------2 |
1 | IPv4Flow
|
232 |
0 |
Allowed
2 |
1 | IPv6Flow
|
0 |
0 |
Allowed
4 |
0 | IPv4Flow
|
232 |
0 |
Allowed
4 |
0 | IPv6Flow
|
0 |
0 |
Allowed
FTOS#

FTOS#test cam-usage service-policy input LauraMapTest linecard 4 port-set 0

IPv6 Access Control Lists (IPv6 ACLs) | 733

www.dell.com | support.dell.com

Status

Linecard | Portpipe | CAM Partition | Available CAM | Estimated CAM per Port |

----------------------------------------------------------------------------------------4 |
0 | IPv4Flow
|
232 |
0 |
Allowed
4 |
0 | IPv6Flow
|
0 |
0 |
Allowed
FTOS#

FTOS#test cam-usage service-policy input LauraMapTest linecard 2 port-set 1
Status

Linecard | Portpipe | CAM Partition | Available CAM | Estimated CAM per Port |

----------------------------------------------------------------------------------------2 |
1 | IPv4Flow
|
232 |
0 |
Allowed
2 |
1 | IPv6Flow
|
0 |
0 |
Allowed
FTOS#)

Table 24-3.

Output Explanations: test cam-usage

Term

Explanation

Linecard

Lists the line card or linecards that are checked. Entering all
shows the status for linecards in the chassis

Portpipe

Lists the portpipe (port-set) or port pipes (port-sets) that are
checked. Entering all shows the status for linecards and
port-pipes in the chassis.

CAM Partition

Shows the CAM profile of the CAM

Available CAM

Identifies the amount of CAM space remaining for that profile

Estimated CAM per Port

Estimates the amount of CAM space the listed policy will
require.

Status

Indicates whether or not the policy will be allowed in the
CAM

IPv6 Route Map Commands
The following commands allow you to configure route maps and their redistribution criteria.
•
•
•
•
•
•
•

match ipv6 address
match ipv6 next-hop
match ipv6 route-source
route-map
set ipv6 next-hop
show config
show route-map

match ipv6 address
734

|

IPv6 Access Control Lists (IPv6 ACLs)

ces
Syntax

Configure a filter to match routes based on IPv6 addresses specified in an access list.
match ipv6 address prefix-list-name

To delete a match, use the no match ipv6 address prefix-list-name command.
Parameters

Defaults

prefix-list-name

Enter the name of IPv6 prefix list, up to 140 characters.

Not configured.

Command Modes

ROUTE-MAP

Command
History

Version 8.4.2.1

Introduced on the S-Series

Version 8.2.1.0

Introduced support on the E-Series ExaScale

Version 7.8.1.0

Introduced support on the C-Series
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are
up to 16 characters long.

Version 7.4.1.0

Introduced support on the E-Series TeraScale

Related
Commands

match ipv6 next-hop

Redistribute routes that match the next-hop IP address.

match ipv6 route-source

Redistribute routes that match routes advertised by other routers.

match ipv6 next-hop
ces
Syntax

Configure a filter which matches based on the next-hop IPv6 addresses specified in the IPv6
prefix list.
match ipv6 next-hop prefix-list prefix-list-name

To delete a match, use the no match ipv6 next-hop prefix-list prefix-list-name command.
Parameters

Defaults

prefix-list prefix-list-name

Enter the keywords prefix-list followed by the name of configured
prefix list, up to 140 characters.

Not configured.

Command Modes

ROUTE-MAP

Command
History

Version 8.4.2.1

Introduced on the S-Series

Version 8.2.1.0

Introduced support on the E-Series ExaScale

Version 7.8.1.0

Introduced support on the C-Series
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are
up to 16 characters long.

Version 7.4.1.0

Introduced support on the E-Series TeraScale

IPv6 Access Control Lists (IPv6 ACLs) | 735

www.dell.com | support.dell.com

Related
Commands

match ipv6 address

Redistribute routes that match an IP address.

match ipv6 route-source

Redistribute routes that match routes advertised by other routers.

match ipv6 route-source
ces
Syntax

Configure a filter which matches based on the routes advertised in the IPv6 prefix lists.
match ipv6 route-source prefix-list prefix-list-name

To delete a match, use the no match ipv6 route-source prefix-list prefix-list-name command.
Parameters

Defaults

prefix-list prefix-list-name

Enter the keywords prefix-list followed by the name of
configured prefix list, up to 140 characters.

Not configured.

Command Modes

ROUTE-MAP

Command
History

Version 8.4.2.1

Introduced on the S-Series

Version 8.2.1.0

Introduced support on the E-Series ExaScale

Version 7.8.1.0

Introduced support on the C-Series
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are
up to 16 characters long.

Version 7.4.1.0

Introduced support on the E-Series TeraScale

Related
Commands

match ipv6 address

Redistribute routes that match an IP address.

match ipv6 next-hop

Redistribute routes that match the next-hop IP address.

route-map
ces
Syntax

Designate a IPv6 route map name and enter the ROUTE-MAP mode.
route-map map-name

To delete a route map, use the no route-map map-name command.
Parameters

Defaults

736

map-name

Enter a text string to name the route map, up to 140 characters.

Not configured

Command Modes

ROUTE-MAP

Command
History

Version 8.4.2.1

Introduced on the S-Series

Version 8.2.1.0

Introduced support on the E-Series ExaScale

|

IPv6 Access Control Lists (IPv6 ACLs)

Example

Version 7.8.1.0

Introduced support on the C-Series
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are
up to 16 characters long.

Version 7.4.1.0

Introduced support on the E-Series TeraScale

FTOS(conf)#route-map Rmap1
FTOS(config-route-map)#match ?
…
ip
IP specific information
ipv6
IPv6 specific information
…

Related
Commands

show config

View the current configuration.

set ipv6 next-hop
ces
Syntax

Configure a filter that specifies IPv6 address as the next hop.
set ipv6 next-hop ipv6-address

To delete the setting, use the no set ipv6 next-hop ipv6-address command.
Parameters

ipv6-address

Enter the IPv6 address in the x:x:x:x::x format.
Note: The :: notation specifies successive hexadecimal fields of zeros

Defaults

Not configured.

Command Modes

ROUTE-MAP

Command
History

Version 8.4.2.1

Introduced on the S-Series

Version 8.2.1.0

Introduced support on the E-Series ExaScale

Version 7.8.1.0

Introduced support on the C-Series

Version 7.4.1.0

Introduced support on the E-Series TeraScale

Usage
Information

The set ipv6 next-hop command is the only way to set an IPv6 Next-Hop.

show config
ces
Syntax
Command Modes

View the current route map configuration.
show config

ROUTE-MAP

IPv6 Access Control Lists (IPv6 ACLs) | 737

www.dell.com | support.dell.com

Command
History

Version 8.4.2.1

Introduced on the S-Series

Version 8.2.1.0

Introduced support on the E-Series ExaScale

Version 7.8.1.0

Introduced support on the C-Series

Version 7.4.1.0

Introduced support on the E-Series TeraScale

Example

FTOS(config-route-map)#show config
!
route-map Rmap1 permit 10
match ip address v4plist
match ipv6 address plist1
match ipv6 next-hop prefix-list plist2
match ipv6 route-source prefix-list plist3
set next-hop 1.1.1.1
set ipv6 next-hop 3333:2222::

show route-map
ces
Syntax
Command Modes

View the current route map configurations.
show route-map

EXEC
EXEC Privilege

Command
History

Example

Related
Commands

738

|

Version 8.4.2.1

Introduced on the S-Series

Version 8.2.1.0

Introduced support on the E-Series ExaScale

Version 7.8.1.0

Introduced support on the C-Series

Version 7.4.1.0

Introduced support on the E-Series TeraScale

FTOS#show route-map
!
route-map Rmap1, permit, sequence 10
Match clauses:
ip address: v4plist
ipv6 address: plist1
ipv6 next-hop prefix-lists: plist2
ipv6 route-source prefix-lists: plist3
Set clauses:
next-hop 1.1.1.1
ipv6 next-hop 3333:2222::

route-map

IPv6 Access Control Lists (IPv6 ACLs)

Configure a route map.

25
IPv6 Basics
Overview
IPv6 Basic Commands are supported on Dell Force10 platforms, as indicated by the
characters that appear under each of the command headings: e E-Series, c C-Series, s
S-Series, or
.
Note: Basic IPv6 basic commands are supported on all platforms. Table 25-2 in IPv6
Basics of the FTOS Configuration Guide for information on the FTOS version and
platform that supports IPv6 in each software feature.

Commands
The IPv6 commands in the chapter are:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

clear ipv6 fib
clear ipv6 route
clear ipv6 mld_host
ipv6 address autoconfig
ipv6 address
ipv6 control-plane icmp error-rate-limit
ipv6 flowlabel-zero
ipv6 host
ipv6 name-server
ipv6 nd dad attempts
ipv6 nd prefix
ipv6 route
ipv6 unicast-routing
show ipv6 cam linecard
show ipv6 cam stack-unit
show ipv6 control-plane icmp
show ipv6 fib linecard
show ipv6 fib stack-unit
show ipv6 flowlabel-zero

IPv6 Basics | 739

www.dell.com | support.dell.com

•
•
•
•

show ipv6 interface
show ipv6 mld_host
show ipv6 route
trust ipv6-diffserv

clear ipv6 fib
ces

Syntax
Parameters

Command Mode
Command
History

Clear (refresh) all FIB entries on a linecard or stack unit.

clear ipv6 fib linecard slot | stack-unit unit-number

slot

Enter the slot number to clear the FIB for a linecard.

unit-number

Enter the stack member number.
Range: 0 to 7 for Z9000, 0-11 for S4810.

EXEC Privilege
Version 8.3.7.0

Introduced on the S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Introduced on C-Series and S-Series

Version 7.4.1.0

Introduced on E-Series TeraScale

clear ipv6 route
ces

Syntax
Parameters

Command Mode
Command
History

740

|

IPv6 Basics

Clear (refresh) all or a specific route from the IPv6 routing table.

clear ipv6 route {* | ipv6-address prefix-length}
*

Enter the * to clear (refresh) all routes from the IPv6 routing table.

ipv6-address
prefix-length

Enter the IPv6 address in the x:x:x:x::x format followed by the prefix length in
the /x format.
Range: /0 to /128
Note: The :: notation specifies successive hexadecimal fields of zeros

EXEC Privilege
Version 8.3.7.0

Introduced on the S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Introduced on C-Series and S-Series

Version 7.4.1.0

Introduced on E-Series TeraScale

clear ipv6 mld_host
Clear the IPv6 MLD host counters and reset the elapsed time.
Syntax
Command Modes

clear ipv6 mld_host

EXEC

Command
History

Version 8.3.12.0

Introduced on the S4810.

ipv6 address autoconfig
Configure IPv6 address auto-configuration for the management interface.
Syntax

ipv6 address autoconfig

Use the no ipv6 address autoconfig command to disable the address autoconfig operation on the
management interface.
Default
Command Modes

Disabled
INTERFACE (management interface only)

Command
History
Usage
Information

Version 8.3.12.0
•

•
•
•
•
•

Introduced on the S4810.

If more than two router advertisements are received, they are ignored and no new auto-configured
addresses are created. If one of the auto-configured addresses times out or is removed, then subsequent router advertisements will add the auto-configured address.
If auto-configuration is enabled, all IPv6 addresses on that management interface are auto-configured. Manual and auto-configurations are not supported on a single management interface.
Removing auto-configuration removes all auto-configured IPv6 addresses and the link-local IPv6
address from that management interface.
IPv6 addresses on a single management interface cannot be members of the same subnet.
IPv6 secondary addresses on management interfaces across a platform must be members of the
same subnet.
IPv6 secondary addresses on management interfaces should not match the virtual IP address and
should not be in the same subnet as the virtual IP.

ipv6 address
ces

Syntax

Configure an IPv6 address to an interface.

ipv6 address {ipv6-address prefix-length}

To remove the IPv6 address, use the no ipv6 address {ipv6-address prefix-length} command.

IPv6 Basics | 741

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes

ipv6-address
prefix-length

No default values or behavior
INTERFACE

Command
History

Example

Usage
Information

Enter the IPv6 address in the x:x:x:x::x format followed by the prefix length in
the /x format.
Range: /0 to /128
Note: The :: notation specifies successive hexadecimal fields of zeros

Version 8.3.7.0

Introduced on the S4810

Version 8.4.1.0

Support added on the management Ethernet port.

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Introduced on C-Series and S-Series

Version 7.4.1.0

Introduced on E-Series TeraScale

FTOS(conf)#interface gigabitethernet 10/0
FTOS(conf-if-gi-10/0)#ipv6 address ?
X:X:X:X::X
IPv6 address
FTOS(conf-if-gi-10/0)#ipv6 address 2002:1:2::3 ?
<0-128>
Prefix length in bits
FTOS(conf-if-gi-10/0)#ipv6 address 2002:1:2::3 /96 ?

FTOS(conf-if-gi-10/0)#ipv6 address 2002:1:2::3 /96
FTOS(conf-if-gi-10/0)#show config
!
interface GigabitEthernet 10/0
no ip address
ipv6 address 2002:1:2::3 /96
no shutdown
FTOS(conf-if-gi-10/0)#

•
•
•
•
•

If two addresses are configured, you must delete an existing address before configuring a new
address.
If the last manually-configured global IPv6 address is removed using the “no” form of the command, the link-local IPv6 address is removed automatically.
IPv6 addresses on a single management interface cannot be members of the same subnet.
IPv6 secondary addresses on management interfaces across a platform must be members of the
same subnet.
IPv6 secondary addresses on management interfaces should not match the virtual IP address and
should not be in the same subnet as the virtual IP.

ipv6 control-plane icmp error-rate-limit
Configure the maximum number of ICMP error packets per second that can be sent per
second.
Syntax

ipv6 control-plane icmp error-rate-limit {1-200}

To restore the default value, use the no ipv6 control-plane icmp error-rate-limit command.
Parameters

742

|

IPv6 Basics

pps

Enter the maximum number of error packets to be generated per second.
Range: 1 to 200, where 0 disables the rate-limiting.

Command Modes
Default
Command
History

CONFIGURATION
100 pps
Version 8.3.12.0

Introduced on the S4810.

ipv6 flowlabel-zero
Configure system to set the flow label field in the packets to zero.
Syntax

ipv6 flowlabel-zero

Use the no ipv6 flowlabel-zero command to disable the 0 from being set in the field and allow
the field to be filled by protocol operations.
Default
Command Modes
Default
Command
History
Usage
Information

Disabled
CONFIGURATION
100 pps
Version 8.3.12.0

Introduced on the S4810.

If the flowlabel value is already set for BGP or SSH, the system defaults to the already
configured value. All packets on the same connection are considered part of the same flow by
the system. For new connections, the new flowlabel is set to zero.

ipv6 host
ces

Syntax
Parameters

Defaults
Command Modes

Assign a name and IPv6 address to be used by the host-to-IP address mapping table.

ipv6 host name ipv6-address

name

Enter a text string to associate with one IP address.

ipv6-address

Enter an IPv6 address (X:X:X:X::X) to be mapped to the name.

Not configured.
CONFIGURATION

IPv6 Basics | 743

www.dell.com | support.dell.com

Command
History

Version 8.3.7.0

Introduced on the S4810

Version 8.4.2.1

Introduced on the C-Series and S-Series

Version 8.4.1.0

Introduced on E-Series TeraScale

ipv6 name-server
ces

Syntax
Parameters

Defaults
Command Modes
Command
History

Usage
Information

Enter up to 6 IPv6 addresses of name servers. The order you enter the addresses determines
the order of their use.
ipv6 name-server ipv6-address [ipv6-address2... ipv6-address6]

ipv6-address

Enter the IPv6 address (X:X:X:X::X) of the name server to be used.

ipv6-address2...
ipv6-address6

Enter up five more IP addresses, in dotted decimal format, of name servers to
be used.
Separate the addresses with a space.

No name servers are configured.
CONFIGURATION
Version 8.3.7.0

Introduced on the S4810

Version 8.4.2.1

Introduced on the C-Series and S-Series

Version 8.4.1.0

Introduced on E-Series TeraScale

You can separately configure both IPv4 and IPv6 domain name servers.

ipv6 nd dad attempts
Configure the number of neighbor solicitation messages that are sent to perform duplicate
address detection (DAD) on the management interface.
Syntax

ipv6 nd dad attempts {number of attempts}

To restore the default value, use the no ipv6 nd dad attempts command.
Parameters

Default
Command Modes
Command
History

744

|

IPv6 Basics

number of
attempts

Enter the number of attempts to be made to detect a duplicate address
Range: 0 to 15.
Setting the value to 0 disables DAD on the interface.

3 attempts
INTERFACE (management interface only)
Version 8.3.12.0

Introduced on the S4810.

ipv6 nd prefix
ces

Syntax

Parameters

Command Mode
Command
History

Usage
Information

Specify which IPv6 prefixes are included in Neighbor Advertisements.

ipv6 nd prefix {ipv6-prefix | prefix-length | default} [no-advertise] | [no-autoconfig]
[no-rtr-address] [off-link] [lifetime {valid | infinite} {preferred | infinite}]

ipv6-prefix

Enter an IPv6 prefix.

prefix-length

Enter the prefix followed by the prefix length.
Range: 0-128

default

Enter this keyword to set default parameters for all prefixes.

no-advertise

Enter this keyword to prevent the specified prefix from being advertised.

no-autoconfig

Enter this keyword to disable Stateless Address Autoconfiguration.

no-rtr-address

Enter this keyword to exclude the full router address from router
advertisements (the R bit is not set).

off-link

Enter this keyword to advertise the prefix without stating to recipients that
the prefix is either on-link or off-link.

valid-lifetime | infinite

Enter the amount of time that the prefix is advertised, or enter the
maximum value for an unlimited amount of time.
Default: 2592000
Range: 0 to 4294967295. The maximum value means that the preferred
lifetime does not expire for the valid-life time parameter.

preferred-lifetime |
infinite

Enter the amount of time that the prefix is preferred, or enter the
maximum value for an unlimited amount of time.
Default: 604800
Range: 0 to 4294967295. The maximum value indicates the preferred
lifetime does not expire.

INTERFACE
Version 8.3.7.0

Introduced on the S4810

Version 8.3.2.0

Introduced on the E-Series TeraScale, C-Series, and S-Series.

By default, all prefixes configured as addresses on the interface are advertised. This
command allows control over the individual parameters per prefix; the default keyword can
be used to use the default parameters for all prefixes. If a prefix has been configured with
lifetime parameter values, the default values cannot be applied using the ipv6 nd prefix default
no-autoconfig command.

ipv6 route
ces

Syntax

Establish a static IPv6 route.

ipv6 route ipv6-address prefix-length {ipv6-address | interface | interface ipv6-address}
[distance] [tag value] [permanent]

IPv6 Basics | 745

www.dell.com | support.dell.com

To remove the IPv6 route, use the no ipv6 route ipv6-address prefix-length {ipv6-address |
interface | interface ipv6-address} [distance] [tag value] [permanent] command.
Parameters

ipv6-address
prefix-length

Enter the IPv6 address in the x:x:x:x::x format followed by the prefix length in
the /x format.
Range: /0 to /128
Note: The :: notation specifies successive hexadecimal fields of zeros

interface

(OPTIONAL) Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a loopback interface, enter the keyword loopback followed by a number
from zero (0) to 16383.
• For the null interface, enter the keyword null followed by zero (0).
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by
the slot/port information.
• For a VLAN interface, enter the keyword VLAN followed by the vlan number.
• For a port channel interface, enter the keyword port-channel followed by the
port channel number.
If you configure a static IPv6 route using an egress interface and enter the ping
command to reach the destination IPv6 address, the ping operation may not work.
Configure the IPv6 route using a next-hop IPv6 address in order for the ping
command to detect the destination address.

ipv6-address

(OPTIONAL) Enter the forwarding router IPv6 address in the x:x:x:x::x format.
Note: The :: notation specifies successive hexadecimal fields of zeros

distance

(OPTIONAL) Enter a number as the metric distance assigned to the route.
Range: 1 to 255

tag value

(OPTIONAL) Enter the keyword tag followed by a tag value number.
Range: 1 to 4294967295

permanent

(OPTIONAL) Enter the keyword permanent to specify that the route is not to be
removed, even if the interface assigned to that route goes down.
Note: If you disable the interface with an IPv6 address associated with the
keyword permanent, the route disappears from the routing table.

Defaults
Command Modes
Command
History

Example

No default values or behavior
CONFIGURATION
Version 8.3.7.0

Introduced on the S4810

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Introduced on C-Series and S-Series

Version 7.4.1.0

Introduced on E-Series TeraScale

FTOS(conf)#ipv6 route 44::0 /64 33::1 ?
<1-255>
Distance metric for this route
permanent
Permanent route
tag
Set tag for this route
FTOS(conf)#ipv6 route 55::0 /64 ?
X:X:X:X::X
Forwarding router's address

746

|

IPv6 Basics

gigabitethernet
loopback
null
port-channel
sonet
tenGigabitethernet
vlan

Gigabit Ethernet interface
Loopback interface
Null interface
Port channel interface
Sonet interface
TenGigabit Ethernet interface
VLAN interface

FTOS(conf)#ipv6 route 55::0 /64 gigabitethernet 9/0 ?
<1-255>
Distance metric for this route
X:X:X:X::X
Forwarding router's address
permanent
Permanent route
tag
Set tag for this route
FTOS(conf)#ipv6 route 55::0 /64 gigabitethernet 9/0 66::1 ?
<1-255>
Distance metric for this route
permanent
Permanent route
tag
Set tag for this route
FTOS#

Usage
Information

When the interface goes down, FTOS withdraws the route. The route is re-installed, by
FTOS, when the interface comes back up. When a recursive resolution is “broken,” FTOS
withdraws the route. The route is re-installed, by FTOS, when the recursive resolution is
satisfied.
After an IPv6 static route interface is created, if an IP address is not assigned to a peer
interface, the peer must be manually pinged to resolve the neighbor information.

Related
Commands

show ipv6 route

View the IPv6 configured routes.

ipv6 unicast-routing
ces

Syntax

Enable IPv6 Unicast routing.

ipv6 unicast-routing

To disable unicast routing, use the no ipv6 unicast-routing command.
Defaults
Command Modes
Command
History

Enabled
CONFIGURATION
Version 8.3.7.0

Introduced on the S4810

Version 8.4.2.1

Introduced on S-Series

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced on E-Series TeraScale

IPv6 Basics | 747

www.dell.com | support.dell.com

Usage
Information

Since this command is enabled by default, it does not appear in the running configuration.
When unicast routing is disabled, the no ipv6 unicast-routing command is included in the
running configuration. Whenever unicast routing is disabled or re-enabled, FTOS generates a
syslog message indicating the action.
Disabling unicast routing on an E-Series chassis causes the following behavior:
•
•
•
•
•

static and protocol learnt routes are removed from RTM and from the CAM;
packet forwarding to these routes is terminated.
connected routes and resolved neighbors remain in the CAM and new IPv6
neighbors are still discoverable
additional protocol adjacencies (OSPFv3 and BGP4) are brought down and no
new adjacencies are formed
the IPv6 address family configuration (under router bgp) is deleted
IPv6 Multicast traffic continues to flow unhindered

show ipv6 cam linecard
ce

Displays the IPv6 CAM entries for the specified line card.

Syntax

show ipv6 cam linecard slot-number port-set {0-1} [summary | index | ipv6 address]

Parameters

Defaults
Command Modes

slot-number

Enter the line card slot ID number.
Range: 0 to 13 on the E1200; 0 on 6 for E600, and 0 to 5 on the E300.

port-set

Set the number of the port to either 0 or 1.

summary

(OPTIONAL) Enter the keyword summary to display a table listing
network prefixes and the total number prefixes which can be entered into the
IPv6 CAM.

index

(OPTIONAL) Enter the index in the IPv6 CAM.

ipv6-address

Enter the IPv6 address in the x:x:x:x::x/n format to display networks that
have more specific prefixes.
Range: /0 to /128
Note: The :: notation specifies successive hexadecimal fields of zeros.

No default values or behavior.
EXEC
EXEC Privilege

Command
History

Usage
Information

748

|

IPv6 Basics

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced on E-Series TeraScale

The forwarding table displays host route first, then displays route originated by routing
protocol including static route.

The egress port section displays the egress port of the forwarding entry which is designated
as:
C for the Control Processor
1 for the Route Processor 1
2 for the Route Processor 2

If a link-local IPv6 address is statically configured and dynamically learned on a C-Series
router, the dynamically-learned IPv6 address is displayed in show ipv6 cam linecard output,
but the statically-configured IPv6 address may not be displayed. Use the show ipv6 fib linecard
or show ipv6 neighbors commands to display statically-configured addresses of IPv6
neighbors.
Note: If a route has a mask greater than 64, no output will be displayed. Similarly, if
there is more than one ECMP object with a destination route that has a mask greater
than 64, if the first 64 bits in the destination routes of the ECMP objects are the same,
only one route is installed in CAM even though multiple ECMP path entries exist.
Example
(show ipv6 cam
linecard fib)

FTOS#show ipv6 cam linecard 13 fib
Neighbor
Mac-Addr
Port
VId
---------------------------------------------- ----------------- --------- ---[

31] 2002:44:1:1::11

Prefix
VId EC

00:00:01:1a:1e:d5 Gi 13/2
Next-Hop

Mac-Addr

0
Port

------------------------------- ------------------------------- ------------------------- ---[ 3147] 100::/64
0
0 1

Example
(show ipv6 cam
linecard)

0

0 1

0

0 1

0

0 1

0

0 1

0
FTOS#

0 1

[

0] 2002:44:1:1::11

-

Gi 0/

[

0] 2002:44:1:24::11

-

Gi 0/

[

0] 2002:44:1:23::11

-

Gi 0/

[

0] 2002:44:1:21::11

-

Gi 0/

[

0] 2002:44:1:20::11

-

Gi 0/

[

0] 2002:44:1:19::11

-

Gi 0/

FTOS#show ipv6 cam linecard 1 port-set 0
Neighbor
--------------------------------------------------[ 1768] 500::1
[ 2724] 700::1
[ 3016] fe80::201:e8ff:fe5a:e59e
[ 3452] fe80::201:e8ff:fe5a:e21f

Mac-Addr
Port
VId
----------------- --------- ---00:00:00:00:00:00
CP
100
00:00:00:00:00:00
CP
0
00:00:00:00:00:00
CP
0
00:00:00:00:00:00
CP
0

Prefix
First-Hop
Mac-Addr
Port
VId EC
------------------------------------ ------------------------ ------------------------- ----

IPv6 Basics | 749

www.dell.com | support.dell.com

[ 4096] 500::/64
CP
0 0

750

[ 4096] 700::/64
CP
0 0
FTOS#

|

IPv6 Basics

::

::

00:00:00:00:00:00

00:00:00:00:00:00

show ipv6 cam stack-unit
Displays the IPv6 CAM entries for the specified stack-unit.

s
Syntax
Parameters

Defaults
Command Modes

show ipv6 cam stack-unit unit-number port-set {0-1} [summary | index | ipv6 address]

unit-number

Enter the stack unit’s ID number.
Range: 0 to 11

port-set

Set the number of the port to either 0 or 1.

summary

(OPTIONAL) Enter the keyword summary to display a table listing
network prefixes and the total number prefixes which can be entered into the
IPv6 CAM.

index

(OPTIONAL) Enter the index in the IPv6 CAM

ipv6-address

Enter the IPv6 address in the x:x:x:x::x/n format to display networks that
have more specific prefixes.
Range: /0 to /128
Note: The :: notation specifies successive hexadecimal fields of zeros.

No default values or behavior.
EXEC
EXEC Privilege

Command
History

Usage
Information

Version 8.3.7.0

Introduced on the S4810

Version 8.4.2.1

Introduced the S-Series

On the S4810, First-Hop information is not shown for installed routes in the IPv6 Content
Addressable Memory (CAM). However, the same is shown in the Forwarding Information
Base (FIB).
Note: If a route has a mask greater than 64, no output will be displayed, no output will
be displayed for “show ipv6 cam stack-unit unit-number port-set {0-1} ipv6-address”
but an equivalent /64 entry would be listed in the “show ipv6 cam stack-unit
unit-number port-set {0-1}” output. Similarly, if there is more than one ECMP object
with a destination route that has a mask greater than 64, if the first 64 bits in the
destination routes of the ECMP objects are the same, only one route is installed in
CAM even though multiple ECMP path entries exist.
Note: On the S4810, the self address will be displayed in the neighbor portion for the
“show ipv6 cam stack-unit unit-number port-set” command.

show ipv6 control-plane icmp
Displays the status of the icmp control-plane setting for the Error Rate limit setting.
Syntax

show ipv6 control-plane icmp

Default

100

IPv6 Basics | 751

www.dell.com | support.dell.com

Command Mode
Command
History
Related
Commands

EXEC
Version 8.3.12.0

Introduced on the S4810.

ipv6 flowlabel-zero

Configure IPv6 address auto-configuration for the management interface.

show ipv6 fib linecard
ce

View all Forwarding Information Base entries.

Syntax

show ipv6 fib linecard slot-number {summary | ipv6-address}

Parameters

Command Mode

slot-number

Enter the number of the line card slot.
E-Series Range: 0 to 13 on a E1200, 0 to 6 on a E600/E600i, and 0 to 5 on a
E300

summary

(OPTIONAL) Enter the keyword summary to view a summary of entries in
IPv6 cam.

ipv6-address

Enter the IPv6 address in the x:x:x:x::x/n format to display networks that have
more specific prefixes.
Range: /0 to /128
Note: The :: notation specifies successive hexadecimal fields of zeros.

EXEC
EXEC Privilege

Command
History

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced on E-Series TeraScale

show ipv6 fib stack-unit
View all Forwarding Information Base entries.

s
Syntax
Parameters

Command Mode

752

|

IPv6 Basics

show ipv6 fib stack-unit unit-number [summary | ipv6-address]

slot-number

Enter the number of the stack unit.
Range: 0 to 11

summary

(OPTIONAL) Enter the keyword summary to view a summary of entries in
IPv6 cam.

ipv6-address

Enter the IPv6 address in the x:x:x:x::x/n format to display networks that have
more specific prefixes.
Range: /0 to /128
Note: The :: notation specifies successive hexadecimal fields of zeros.

EXEC

EXEC Privilege
Command
History

Usage
Information

Version 8.3.7.0

Introduced on the S4810

Version 8.4.2.1

Introduced on S-Series

Host tables are not stored in CAM tables on S-Series platforms. Entries for camIndex will
display as zero (0) on the show ipv6 fib stack-unit output for neighbor entries, such as ARP
entries.

show ipv6 flowlabel-zero
Display the flow label zero setting.
Syntax

show ipv6 flowlabel-zero

Default

Disabled

Command Mode
Command
History
Related
Commands

EXEC
Version 8.3.12.0

Introduced on the S4810.

ipv6 nd dad attempts

Configure system to set the flow label field in the packets to zero.

show ipv6 interface
ces

Syntax

Parameters

Display the status of interfaces configured for IPv6.

show ipv6 interface interface [brief] [configured] [gigabitethernet slot | slot/port] [linecard
slot-number] [loopback interface-number] [managementethernet slot/port] [port-channel number]
[tengigabitethernet slot | slot/port] [fortyGigE slot | slot/port][vlan vlan-id]

interface

(OPTIONAL) Enter the following keywords and slot/port or number
information:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Loopback interface, enter the keyword Loopback followed
by a number from 0 to 16383.
• For the Null interface, enter the keyword null followed by zero
(0).
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.
• For a VLAN interface, enter the keyword VLAN.
• For a port channel interface, enter the keyword port-channel.

brief

(OPTIONAL) View a summary of IPv6 interfaces.

configured

(OPTIONAL) View information on all IPv6 configured interfaces

IPv6 Basics | 753

www.dell.com | support.dell.com

Defaults
Command Modes

gigabitethernet

(OPTIONAL) View information for an IPv6 gigabitethernet
interface.

linecard slot-number

(OPTIONAL) View information for a specific IPv6 linecard or
S-Series stack-unit
Range: 0 to 13 on a E1200, 0 to 6 on a E600, and 0 to 5 on a E300.
Range: 0 to 7 for C-Series
Range: 0 to 7 for S55 only
Range: 0 to 11 for S60 and S4810

managementethernet slot/
port

(OPTIONAL) View information on an IPv6 Management port.
Enter the slot number (0-1) and port number zero (0).

loopback

(OPTIONAL) View information for IPv6 loopback interfaces.

port-channel

(OPTIONAL) View information for IPv6 port channels.

tengigabitethernet

(OPTIONAL) View information for an IPv6 tengigabitethernet
interface.

fortyGigE

(OPTIONAL) View information for an IPv6 fortygigabitethernet
interface.

vlan

(OPTIONAL) View information for IPv6 VLANs.

No default values or behavior
EXEC
EXEC Privilege

Command
History

Usage
Information
Example
(show ipv6
interface)

754

|

IPv6 Basics

Version 8.3.7.0

Introduced on the S4810

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.4.2.1

Introduced on S-Series

Version 8.2.1.0

Introduced on E-Series ExaScale.
Support for the managementethernet slot/port parameter was added.

Version 7.8.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced on E-Series TeraScale

The Management port is enabled by default (no shutdown). If necessary, use the ipv6 address
command to assign an IPv6 address to the Management port.
FTOS#
FTOS#show ipv6 int te 0/5
TenGigabitEthernet 0/5 is up, line protocol is up
IPV6 is enabled
Link Local address: fe80::201:e8ff:fe8a:e8f7
Global Unicast address(es):
2001::1, subnet is 2001::/64
2002::1, subnet is 2002::/120
2003::1, subnet is 2003::/120
2004::1, subnet is 2004::/32
Global Anycast address(es):
Joined Group address(es):
ff02::1
ff02::2
ff02::1:ff00:1
ff02::1:ff8a:e8f7

ND MTU is 0
ICMP redirects are not sent
DAD is enabled, number of DAD attempts: 3
ND reachable time is 0 milliseconds
ND advertised reachable time is 0 milliseconds
ND advertised retransmit interval is 0 milliseconds
ND router advertisements are sent every 200 to 600 seconds
ND router advertisements live for 1800 seconds
FTOS#

Example
(show ipv6 interface
managementethernet)

FTOS#
FTOS#show ipv6 int man 0/0
ManagementEthernet 0/0 is up, line protocol is up
IPV6 is enabled
Link Local address: fe80::201:e8ff:fe8a:e8f7
Global Unicast address(es):
Actual address is 600::1, subnet is 600::/64
Virtual-IP IPv6 address is not set
Global Anycast address(es):
Joined Group address(es):
ff02::1
ff02::1:ff00:1
ff02::1:ff8a:e8f7
ND MTU is 1500
ICMP redirects are not sent
DAD is enabled, number of DAD attempts: 3
ND reachable time is 31000 milliseconds
ND base reachable time is 30000 milliseconds
ND retransmit interval is 1000 milliseconds
ND hop limit is 64
FTOS#

Example
(show ipv6
interface brief)

FTOS#show ipv6 interface brief
GigabitEthernet 0/0
fe80::201:e8ff:fe3a:143e
10::1/64
...
ManagementEthernet 0/0
fe80::201:e8ff:fe5d:b74c
fdaa:bbbb:cccc:1004::50/64
...
Vlan 3
fe80::201:e8ff:fe3a:19b7
7::1/64

[up/up]

[up/up]

[up/up]

show ipv6 mld_host
Display the IPv6 MLD host counters.
Syntax
Command Modes
Example

show ipv6 mld_host

EXEC
MLD Host Traffic Counters
Elapsed time since counters cleared: 0028:33:52
Received
Sent
Valid MLD Packets
97962
18036

IPv6 Basics | 755

www.dell.com | support.dell.com

Reports
Leaves
MLDv2 Queries
MLDv1 Queries
Errors:
Malformed Packets:

Command
History
Usage
Information

Version 8.3.12.0

79962
---18000
0

18034
0
-------

4510

Introduced on the S4810.

The following table describes the information in the output example:
Valid MLD Packets

The total number of packets received and sent from the last time the
elapsed time was cleared.

Reports

The total number of reports (queries and unsolicited reports generated
from joins or leaves) that have been received or sent.

Leaves

The number of Multicast leaves that have been sent.

MLDv1 queries

The number of MLDv1 queries that have been received.

MLDv2 queries

The number of MLDv2 queries that have been received.

Malformed Packets

The number of MLDv1 and MLDv2 packets that do not match the
requirement for a valid MLD packet.

show ipv6 route
ces

Syntax

Parameter

Defaults
Command Modes

756

|

IPv6 Basics

Displays the IPv6 routes.

show ipv6 route [ipv6-address prefix-length] [hostname] [all] [bgp as number] [connected]
[isis tag] [list prefix-list name] [ospf process-id] [rip] [static] [summary]

ipv6-address
prefix-length

(OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format followed by
the prefix length in the /x format.
Range: /0 to /128.
The :: notation specifies successive hexadecimal fields of zeros.

hostname

(OPTIONAL) View information for this IPv6 routes with Host Name

all

(OPTIONAL) View information for all IPv6 routes

bgp

(OPTIONAL) View information for all IPv6 BGP routes

connected

(OPTIONAL) View only the directly connected IPv6 routes.

isis

(OPTIONAL) View information for all IPv6 IS-IS routes

list

(OPTIONAL) View the IPv6 prefix list

ospf

(OPTIONAL) View information for all IPv6 OSPF routes

rip

(OPTIONAL for E-Series only) View information for all IPv6 RIP routes

static

(OPTIONAL) View only routes configured by the ipv6 route command.

summary

(OPTIONAL) View a brief list of the configured IPv6 routes.

No default values or behavior
EXEC

EXEC Privilege
Command
History

Example
(E-Series)

Version 8.3.7.0

Introduced on the S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Introduced on C-Series and S-Series

Version 7.4.1.0

Introduced on E-Series TeraScale

FTOS#show ipv6 route
Codes: C - connected, L - local, S - static, R - RIP,
B - BGP, IN - internal BGP, EX - external BGP,LO - Locally Originated,
O - OSPF, IA - OSPF inter area, N1 - OSPF NSSA external type 1,
N2 - OSPF NSSA external type 2, E1 - OSPF external type 1,
E2 - OSPF external type 2, i - IS-IS, L1 - IS-IS level-1,
L2 - IS-IS level-2, IA - IS-IS inter area, * - candidate default,
Gateway of last resort is not set

C
C
C
C
L

Example
(S-Series)

Destination Dist/Metric,
Gateway,
Last Change
----------------------------------------------------2001::/64 [0/0]
Direct, Gi 1/1, 00:28:49
2002::/120 [0/0]
Direct, Gi 1/1, 00:28:49
2003::/120 [0/0]
Direct, Gi 1/1, 00:28:49
2004::/32 [0/0]
Direct, Gi 1/1, 00:28:49
fe80::/10 [0/0]
Direct, Nu 0, 00:29:09

FTOS#show ipv6 route
Codes: C - connected, L - local, S - static, R - RIP,
B - BGP, IN - internal BGP, EX - external BGP,LO - Locally Originated,
O - OSPF, IA - OSPF inter area, N1 - OSPF NSSA external type 1,
N2 - OSPF NSSA external type 2, E1 - OSPF external type 1,
E2 - OSPF external type 2, i - IS-IS, L1 - IS-IS level-1,
L2 - IS-IS level-2, IA - IS-IS inter area, * - candidate default,
Gateway of last resort is not set

C
C
C
C
L

Destination Dist/Metric,
Gateway,
Last Change
----------------------------------------------------2001::/64 [0/0]
Direct, Gi 1/1, 00:28:49
2002::/120 [0/0]
Direct, Gi 1/1, 00:28:49
2003::/120 [0/0]
Direct, Gi 1/1, 00:28:49
2004::/32 [0/0]
Direct, Gi 1/1, 00:28:49
fe80::/10 [0/0]
Direct, Nu 0, 00:29:09

IPv6 Basics | 757

www.dell.com | support.dell.com

Example
(show ipv6 route
summary)

758

FTOS#show ipv6 route summary
Route Source
Active Routes
connected
5
static
0
Total
5
Total 5 active route(s) using 952 bytes

Table 25-1.

|

IPv6 Basics

Non-active Routes
0
0
0

show ipv6 route Command Example Fields

Field

Description

(undefined)

Identifies the type of route:
• L = Local
• C = connected
• S = static
• R = RIP
• B = BGP
• IN = internal BGP
• EX = external BGP
• LO = Locally Originated
• O = OSPF
• IA = OSPF inter area
• N1 = OSPF NSSA external type 1
• N2 = OSPF NSSA external type 2
• E1 = OSPF external type 1
• E2 = OSPF external type 2
• i = IS-IS
• L1 = IS-IS level-1
• L2 = IS-IS level-2
• IA = IS-IS inter-area
• * = candidate default
• > = non-active route
• + = summary routes

Destination

Identifies the route’s destination IPv6 address.

Gateway

Identifies whether the route is directly connected and on which interface the route
is configured.

Dist/Metric

Identifies if the route has a specified distance or metric.

Last Change

Identifies when the route was last changed or configured.

trust ipv6-diffserv
ces

Syntax

Allows the dynamic classification of IPv6 DSCP.

trust ipv6-diffserv

To remove the definition, use the no trust ipv6-diffserv command.
Defaults
Command Modes
Command
History

Usage
Information

This command has no default behavior or values.
CONFIGURATION-POLICY-MAP-IN
Version 8.3.7.0

Introduced on the S4810

Version 8.4.2.1

Introduced on C-Series and S-Series

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

When trust IPv6 diffserv is configured, matched bytes/packets counters are not incremented
in the show qos statistics command.
Trust diffserv (IPv4) can co-exist with trust ipv6-diffserv in an Input Policy Map. Dynamic
classification happens based on the mapping detailed in the following table.
Table 25-2.

IPv6 -Diffserv Mapping

IPv6 Service Class Field

Queue ID

111XXXXX

7

110XXXXX

6

101XXXXX

5

100XXXXX

4

011XXXXX

3

010XXXXX

2

001XXXXX

1

000XXXXX

0

IPv6 Basics | 759

760

|

IPv6 Basics

www.dell.com | support.dell.com

26
IPv6 Border Gateway Protocol (IPv6
BGP)
Overview
IPv6 Border Gateway Protocol (IPv6 BGP) is supported on all Dell Force10 platforms, as
indicated by the characters that appear under each of the command headings: e E-Series,
c C-Series or
.
This chapter includes the following commands:
•
•

IPv6 BGP Commands
IPv6 MBGP Commands

IPv6 BGP Commands
Border Gateway Protocol (BGP) is an external gateway protocol that transmits interdomain
routing information within and between Autonomous Systems (AS). BGP version 4 (BGPv4)
supports classless interdomain routing and the aggregation of routes and AS paths. Basically,
two routers (called neighbors or peers) exchange information including full routing tables and
periodically send messages to update those routing tables.
The following commands allow you to configure and enable BGP.
•
•
•
•
•
•
•
•
•
•
•

aggregate-address
bgp always-compare-med
bgp bestpath as-path ignore
bgp bestpath med confed
bgp bestpath med missing-as-best
bgp client-to-client reflection
bgp cluster-id
bgp confederation identifier
bgp confederation peers
bgp dampening
bgp default local-preference

IPv6 Border Gateway Protocol (IPv6 BGP) | 761

www.dell.com | support.dell.com

•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

762

|

bgp enforce-first-as
bgp fast-external-fallover
bgp four-octet-as-support
bgp graceful-restart
bgp log-neighbor-changes
bgp non-deterministic-med
bgp recursive-bgp-next-hop
bgp regex-eval-optz-disable
bgp router-id
bgp soft-reconfig-backup
capture bgp-pdu neighbor (ipv6)
capture bgp-pdu max-buffer-size
clear ip bgp as-number
clear ip bgp ipv6-address
clear ip bgp peer-group
clear ip bgp ipv6 dampening
clear ip bgp ipv6 flap-statistics
clear ip bgp ipv6 unicast soft
debug ip bgp
debug ip bgp events
debug ip bgp ipv6 dampening
debug ip bgp ipv6 unicast soft-reconfiguration
debug ip bgp keepalives
debug ip bgp notifications
debug ip bgp updates
default-metric
description
distance bgp
maximum-paths
neighbor activate
neighbor advertisement-interval
neighbor allowas-in
neighbor default-originate
neighbor description
neighbor distribute-list
neighbor ebgp-multihop
neighbor fall-over
neighbor filter-list
neighbor maximum-prefix
neighbor X:X:X::X password

IPv6 Border Gateway Protocol (IPv6 BGP)

•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

neighbor next-hop-self
neighbor peer-group (assigning peers)
neighbor peer-group (creating group)
neighbor peer-group passive
neighbor remote-as
neighbor remove-private-as
neighbor route-map
neighbor route-reflector-client
neighbor send-community
neighbor shutdown
neighbor soft-reconfiguration inbound
neighbor subnet
neighbor timers
neighbor update-source
neighbor weight
network
network backdoor
redistribute
redistribute isis
redistribute ospf
router bgp
show capture bgp-pdu neighbor
show config
show ip bgp ipv6 unicast
show ip bgp ipv6 unicast cluster-list
show ip bgp ipv6 unicast community
show ip bgp ipv6 unicast community-list
show ip bgp ipv6 unicast dampened-paths
show ip bgp ipv6 unicast detail
show ip bgp ipv6 unicast extcommunity-list
show ip bgp ipv6 unicast filter-list
show ip bgp ipv6 unicast flap-statistics
show ip bgp ipv6 unicast inconsistent-as
show ip bgp ipv6 unicast neighbors
show ip bgp ipv6 unicast peer-group
show ip bgp ipv6 unicast summary
show ip bgp next-hop
show ip bgp paths
show ip bgp paths as-path
show ip bgp paths community

IPv6 Border Gateway Protocol (IPv6 BGP) | 763

www.dell.com | support.dell.com

•
•
•

show ip bgp paths extcommunity
show ip bgp regexp
timers bgp

address-family
c et

Syntax

Enable the IPv4 multicast or the IPv6 address family.

address-family [ipv4 multicast| ipv6unicast]

Parameters

ipv4 multicast

Enter BGPv4 multicast mode.

ipv6 unicast

Enter BGPv6 mode.

Defaults

Not configured.

Command Modes

ROUTER BGP

Command
History

Usage
Information

.

Version 8.4.2.1

Introduced on C-Series andS4810.

Version 6.5.1.0

Introduced on E-Series TeraScale

Enter ipv6 unicast to enter the BGP for IPv6 mode (CONF-ROUTER_BGPv6_AF).

aggregate-address
Summarize a range of prefixes to minimize the number of entries in the routing table.

ce
Syntax

Parameters

aggregate-address ipv6-address prefix-length [advertise-map map-name] [as-set] [attribute-map
map-name] [summary-only] [suppress-map map-name]
ipv6-address
prefix-length

Enter the IPv6 address in the x:x:x:x::x format followed by the prefix length
in the /x format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zeros

advertise-map

(OPTIONAL) Enter the keywords advertise-map followed by the name of
a configured route map to set filters for advertising an aggregate route.

map-name

as-set

(OPTIONAL) Enter the keyword as-set to generate path attribute
information and include it in the aggregate.
AS_SET includes AS_PATH and community information from the routes
included in the aggregated route.

attribute-map

(OPTIONAL) Enter the keywords attribute-map followed by the name of a
configured route map to modify attributes of the aggregate, excluding
AS_PATH and NEXT_HOP attributes.

map-name

764

|

IPv6 Border Gateway Protocol (IPv6 BGP)

summary-only

(OPTIONAL) Enter the keyword summary-only to advertise only the
aggregate address. Specific routes will not be advertised.

suppress-map

(OPTIONAL) Enter the keywords suppress-map followed by the name of
a configured route map to identify which more-specific routes in the
aggregate are suppressed.

map-name

Defaults
Command Modes
Command
History

Usage
Information

Not configured.
CONFIGURATION-ROUTER-BGPV6-ADDRESS FAMILY
Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

At least one of the routes included in the aggregate address must be in the BGP routing table
for the configured aggregate to become active.
Do not add the as-set parameter to the aggregate, if routes within the aggregate are constantly
changing as the aggregate will flap to keep track of the changes in the AS_PATH.
In route maps used in the suppress-map parameter, routes meeting the deny clause are not
suppress; in other words, they are allowed. The opposite is true: routes meeting the permit
clause are suppressed.
If the route is injected via the network command, that route will still appear in the routing
table if the summary-only parameter is configured in the aggregate-address command.
The summary-only parameter suppresses all advertisements. If you want to suppress
advertisements to only specific neighbors, use the neighbor distribute-list command.
In the show ip bgp ipv6 unicast command, aggregates contain an ‘a’ in the first column and
routes suppressed by the aggregate contain an ‘s’ in the first column.

bgp always-compare-med
Allows you to enable comparison of the MULTI_EXIT_DISC (MED) attributes in the paths
from different external ASs.

ce
Syntax

bgp always-compare-med

To disable comparison of MED, enter no bgp always-compare-med.
Defaults
Command Modes

Disabled (that is, the software only compares MEDs from neighbors within the same AS).
ROUTER BGP

IPv6 Border Gateway Protocol (IPv6 BGP) | 765

www.dell.com | support.dell.com

Command
History

Usage
Information

Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

Any update without a MED attribute is the least preferred route.
If you enable this command, use the capture bgp-pdu max-buffer-size * command to
recompute the best path.

bgp bestpath as-path ignore
Ignore the AS PATH in BGP best path calculations.

ce
Syntax

bgp bestpath as-path ignore

To return to the default, enter no bgp bestpath as-path ignore.
Defaults

Disabled (that is, the software considers the AS_PATH when choosing a route as best).

Command Modes

ROUTER BGP

Command
History

Version 8.4.2.1

Introduced on C-Series and S4810.

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

Usage
Information

If you enable this command, use the capture bgp-pdu max-buffer-size * command to
recompute the best path.

bgp bestpath med confed
Enable MULTI_EXIT_DISC (MED) attribute comparison on paths learned from BGP
confederations.

ce
Syntax

bgp bestpath med confed

To disable MED comparison on BGP confederation paths, enter no bgp bestpath med confed.
Defaults

766

Disabled.

Command Modes

ROUTER BGP

Command
History

Version 8.4.2.1

Introduced on C-Series and S4810.

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

|

IPv6 Border Gateway Protocol (IPv6 BGP)

Usage
Information

The software compares the MEDs only if the path contains no external autonomous system
numbers.
If you enable this command, use the capture bgp-pdu max-buffer-size * command to
recompute the best path.

bgp bestpath med missing-as-best
During path selection, indicate preference to paths with missing MED (MULTI_EXIT_DISC)
over those paths with an advertised MED attribute.

ce
Syntax

bgp bestpath med missing-as-best

To return to the default selection, use the no bgp bestpath med missing-as-best command.
Defaults

Disabled

Command Modes

ROUTER BGP

Command
History

Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

Usage
Information

The MED is a 4-byte unsigned integer value and the default behavior is to assume a missing
MED as 4294967295. This command causes a missing MED to be treated as 0. During the
path selection, paths with a lower MED are preferred over those with a higher MED.

bgp client-to-client reflection
Allows you to enable route reflection between clients in a cluster.

ce
Syntax

bgp client-to-client reflection

To disable client-to-client reflection, enter no bgp client-to-client reflection.
Defaults

Enabled when a route reflector is configured.

Command Modes

ROUTER BGP

Command
History

Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

Usage
Information

Route reflection to clients is not necessary if all client routers are fully meshed.

IPv6 Border Gateway Protocol (IPv6 BGP) | 767

www.dell.com | support.dell.com

Related
Commands

bgp cluster-id

Assign ID to a BGP cluster with two or more route reflectors.

neighbor route-reflector-client

Configure a route reflector and clients.

bgp cluster-id
Assign a cluster ID to a BGP cluster with more than one route reflector.

ce
Syntax

bgp cluster-id {ip-address | number}

To delete a cluster ID, use the no bgp cluster-id {ip-address | number} command.
Parameters

ip-address

Enter an IP address as the route reflector cluster ID.

number

Enter a route reflector cluster ID as a number from 1 to 4294967295.

Defaults

Not configured.

Command Modes

ROUTER BGP

Command
History

Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

Usage
Information

When a BGP cluster contains only one route reflector, the cluster ID is the route reflector’s
router ID. For redundancy, a BGP cluster may contain two or more route reflectors and you
assign a cluster ID with the bgp cluster-id command. Without a cluster ID, the route reflector
cannot recognize route updates from the other route reflectors within the cluster.
The default format for displaying the cluster-id is dotted decimal, but if you enter the
cluster-id as an integer, it will be displayed as an integer.

Related
Commands

bgp client-to-client reflection

Enable route reflection between route reflector and clients.

neighbor route-reflector-client

Configure a route reflector and clients.

show ip bgp ipv6 unicast
cluster-list

View paths with a cluster ID.

bgp confederation identifier
Configure an identifier for a BGP confederation.

ce
Syntax

bgp confederation identifier as-number

To delete a BGP confederation identifier, use the no bgp confederation identifier as-number
command.

768

|

IPv6 Border Gateway Protocol (IPv6 BGP)

Parameters

as-number

Enter the AS number.
Range: 1 to 65535

Defaults

Not configured.

Command Modes

ROUTER BGP

Command
History

Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

Usage
Information

The autonomous systems configured in this command are visible to the EBGP neighbors.
Each autonomous system is fully meshed and contains a few connections to other
autonomous systems. The next hop, MED, and local preference information is preserved
throughout the confederation.
FTOS accepts confederation EBGP peers without a LOCAL_PREF attribute. The software
sends AS_CONFED_SET and accepts AS_CONFED_SET and AS_CONF_SEQ.

bgp confederation peers
Specify the Autonomous Systems (ASs) that belong to the BGP confederation.

ce
Syntax

bgp confederation peers as-number [...as-number]

To delete a BGP confederation peer, enter no bgp confederation peers as-number
[...as-number].
Parameters

as-number

Enter the AS number.
Range: 1 to 65535

...as-number

(OPTIONAL) Enter up to 16 confederation numbers.
Range: 1 to 65535.

Defaults

Not configured.

Command Modes

ROUTER BGP

Command
History

Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

Usage
Information

The Autonomous Systems configured in this command are visible to the EBGP neighbors.
Each Autonomous System is fully meshed and contains a few connections to other
Autonomous Systems.

IPv6 Border Gateway Protocol (IPv6 BGP) | 769

www.dell.com | support.dell.com

After specifying autonomous systems numbers for the BGP confederation, recycle the peers
to update their configuration.
Related
Commands

Configure a confederation ID.

bgp dampening
Enable BGP route dampening and configure the dampening parameters.

ce
Syntax

bgp dampening [half-life reuse suppress max-suppress-time] [route-map map-name]

To disable route dampening, use the no bgp dampening [half-life reuse suppress
max-suppress-time] [route-map map-name] command.
Parameters

Defaults
Command Modes
Command
History

770

bgp confederation
identifier

|

half-life

(OPTIONAL) Enter the number of minutes after which the Penalty
is decreased. After the router assigns a Penalty of 1024 to a route,
the Penalty is decreased by half after the half-life period expires.
Range: 1 to 45.
Default: 15 minutes

reuse

(OPTIONAL) Enter a number as the reuse value, which is compared
to the flapping route’s Penalty value. If the Penalty value is less than
the reuse value, the flapping route is once again advertised (or no
longer suppressed).
Range: 1 to 20000.
Default: 750

suppress

(OPTIONAL) Enter a number as the suppress value, which is
compared to the flapping route’s Penalty value. If the Penalty value
is greater than the suppress value, the flapping route is no longer
advertised (that is, it is suppressed).
Range: 1 to 20000.
Default: 2000

max-suppress-time

(OPTIONAL) Enter the maximum number of minutes a route can be
suppressed. The default is four times the half-life value.
Range: 1 to 255.
Default: 60 minutes.

route-map map-name

(OPTIONAL) Enter the keyword route-map followed by the name
of a configured route map.
Only match commands in the configured route map are supported.

Disabled.
ROUTER BGPV6-ADDRESS FAMILY
Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

IPv6 Border Gateway Protocol (IPv6 BGP)

Usage
Information

If you enter bgp dampening, the default values for half-life, reuse, suppress, and
max-suppress-time are applied. The parameters are position-dependent, therefore, if you
configure one parameter, you must configure the parameters in the order they appear in the
command.

Related
Commands

show ip bgp ipv6 unicast
dampened-paths

View the BGP paths

bgp default local-preference
Change the default local preference value for routes exchanged between internal BGP peers.

ce
Syntax

bgp default local-preference value

To return to the default value, enter no bgp default local-preference.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

value

Enter a number to assign to routes as the degree of preference for those routes.
When routes are compared, the higher the degree of preference or local
preference value, the more the route is preferred.
Range: 0 to 4294967295
Default: 100

100
ROUTER BGP
=

Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

The bgp default local-preference command setting is applied by all routers within the AS.

bgp enforce-first-as
Disable (or enable) enforce-first-as check for updates received from EBGP peers.

ce
Syntax

bgp enforce-first-as

To turn off the default, use the no bgp enforce-first-as command.
Defaults
Command Modes

Enabled
ROUTER BGP

IPv6 Border Gateway Protocol (IPv6 BGP) | 771

www.dell.com | support.dell.com

Usage
Information

This is enabled by default, that is for all updates received from EBGP peers, BGP ensures that
the first AS of the first AS segment is always the AS of the peer. If not, the update is dropped
and a counter is incremented. Use the show ip bgp ipv6 unicast neighbors command to view
the “failed enforce-first-as check counter.
If enforce-first-as is disabled, it can be viewed via the show ip protocols command.

Related
Commands

Command
History

show ip bgp ipv6 unicast
neighbors

Display IPv6 routing information exchanged by BGP neighbors.

show ip protocols

View Information on routing protocols.

Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

bgp fast-external-fallover
Enable the fast external fallover feature, which immediately resets the BGP session if a link to
a directly connected external peer fails.

ce
Syntax

bgp fast-external-fallover

To disable fast external fallover, enter no bgp fast-external-fallover.
Defaults

Enabled

Command Modes

ROUTER BGP

Command
History

Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

Usage
Information

The bgp fast-external-fallover command appears in the show config command output.

bgp four-octet-as-support
Enable 4-byte support for the BGP process

ce
Syntax

bgp four-octet-as-support

To disable fast external fallover, enter no bgp four-octet-as-support.
Defaults
Command Modes

772

|

Disabled (supports 2-Byte format)
ROUTER BGP

IPv6 Border Gateway Protocol (IPv6 BGP)

Usage
Information

Routers supporting 4-Byte ASNs advertise that function in the OPEN message. The behavior
of a 4-Byte router will be slightly different depending on whether it is speaking to a 2-Byte
router or a 4-Byte router.
When creating Confederations, all the routers in the Confederation must be 4 or 2 byte
identified routers. You cannot mix them.
Where the 2-Byte format is 1-65535, the 4-Byte format is 1-4294967295. Both formats are
accepted, and the advertisements will reflect the entered format.
For more information about using the 2 or 4-Byte format, refer to the FTOS Configuration
Guide.

Command
History

Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

bgp graceful-restart
Enable graceful restart on a BGP neighbor, a BGP node, or designate a local router to support
graceful restart as a receiver only.

ce
Syntax

bgp graceful-restart [restart-time seconds] [stale-path-time seconds] [role receiver-only]

To return to the default, enter the no bgp graceful-restart command.
Parameters

neighbor ip-address |
peer-group-name

Defaults

Enter the keyword neighbor followed by one of the options listed
below:
• ip-address of the neighbor in IP address format of the
neighbor
• peer-group-name of the neighbor peer group.

restart-time seconds

Enter the keyword restart-time followed by the maximum
number of seconds needed to restart and bring up all peers.
Range: 1 to 3600 seconds
Default: 120 seconds

stale-path-time seconds

Enter the keyword stale-path-time followed by the maximum
number of seconds to wait before restarting a peer’s stale paths.
Default: 360 seconds.

role receiver-only

Enter the keyword role receiver-only to designate the local
router to support graceful restart as a receiver only.

As above

Command Modes

ROUTER BGP

Command
History

Version 8.4.2.1

Introduced on C-Series and S4810

IPv6 Border Gateway Protocol (IPv6 BGP) | 773

www.dell.com | support.dell.com

Usage
Information

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

This feature is advertised to BGP neighbors through a capability advertisement. In receiver
only mode, BGP saves the advertised routes of peers that support this capability when they
restart.

bgp log-neighbor-changes
Enable logging of BGP neighbor resets.

ce
Syntax

bgp log-neighbor-changes

To disable logging, enter no bgp log-neighbor-changes.
Defaults

Enabled

Command Modes

ROUTER BGP

Command
History

Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

Usage
Information
Related
Commands

The bgp log-neighbor-changes command appears in the show config command output.

show config

View the current configuration

bgp non-deterministic-med
Compare MEDs of paths from different Autonomous Systems.

ce
Syntax

bgp non-deterministic-med

To return to the default, enter no bgp non-deterministic-med.
Defaults

774

Disabled (that is, paths/routes for the same destination but from different ASs will not have
their MEDs compared).

Command Modes

ROUTER BGP

Command
History

Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

|

IPv6 Border Gateway Protocol (IPv6 BGP)

Usage
Information

In non-deterministic mode, paths are compared in the order in which they arrive. This method
can lead to FTOS choosing different best paths from a set of paths, depending on the order in
which they are received from the neighbors since MED may or may not get compared
between adjacent paths. In deterministic mode (no bgp non-deterministic-med), FTOS
compares MED between adjacent paths within an AS group since all paths in the AS group
are from the same AS.
When you change the path selection from deterministic to non-deterministic, the path
selection for existing paths remains deterministic until you enter capture bgp-pdu
max-buffer-size command to clear existing paths.

bgp recursive-bgp-next-hop
Enable next-hop resolution through other routes learned by BGP.

ce
Syntax

bgp recursive-bgp-next-hop

To disable next-hop resolution, use the no bgp recursive-bgp-next-hop command.
Defaults
Command Modes
Usage
Information

Enabled
ROUTER BGP
This command is a knob to disable BGP next-hop resolution via BGP learned routes. During
the next-hop resolution, only the first route that the next-hop resolves through is verified for
the route’s protocol source and is checked if the route is learned from BGP or not.
The clear ip bgp command is required for this command to take effect and to keep the BGP
database consistent. Execute the clear ip bgp command right after executing this command.

Related
Commands

Command
History

capture bgp-pdu
max-buffer-size

Set the size of the BGP packet capture buffer. This buffer size
pertains to both IPv4 and IPv6 addresses.

Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

bgp regex-eval-optz-disable
Disables the Regex Performance engine that optimizes complex regular expression with BGP.

ce
Syntax

bgp regex-eval-optz-disable

To re-enable optimization engine, use the no bgp regex-eval-optz-disable command.
Defaults

Enabled by default

IPv6 Border Gateway Protocol (IPv6 BGP) | 775

www.dell.com | support.dell.com

Command Modes
Usage
Information

ROUTER BGP (conf-router_bgp)
BGP uses regular expressions (regex) to filter route information. In particular, the use of
regular expressions to filter routes based on AS-PATHs and communities is quite common. In
a large scale configuration, filtering millions of routes based on regular expressions can be
quite CPU intensive, as a regular expression evaluation involves generation and evaluation of
complex finite state machines.
BGP policies, containing regular expressions to match as-path and communities, tend to use a
lot of CPU processing time, which in turn affects the BGP routing convergence. Additionally,
the show bgp commands, which are filtered through regular expressions, use up CPU cycles
particularly with large databases. The Regex Engine Performance Enhancement feature
optimizes the CPU usage by caching and reusing regular expression evaluation results. This
caching and reuse may be at the expensive of RP1 processor memory.

Related
Commands

Command
History

show ip protocols

View information on all routing protocols enabled and active on the
E-Series.

Version 8.4.2.1

Introduced on C-Series and S4810.

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

bgp router-id
Assign a user-given ID to a BGP router.

ce
Syntax

bgp router-id ip-address

To delete a user-assigned IP address, enter no bgp router-id.
Parameters

Defaults

Enter an IP address in dotted decimal format to reset only that BGP neighbor.

The router ID is the highest IP address of the Loopback interface or, if no Loopback
interfaces are configured, the highest IP address of a physical interface on the router.

Command Modes

ROUTER BGP

Command
History

Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

Usage
Information

776

ip-address

|

Peering sessions are reset when you change the router ID of a BGP router.

IPv6 Border Gateway Protocol (IPv6 BGP)

bgp soft-reconfig-backup
c et

Syntax

Use this command only when route-refresh is not negotiated between peers to avoid having a
peer re-send BGP updates.
bgp soft-reconfig-backup

To return to the default setting, use the no bgp soft-reconfig-backup command.
Defaults
Command Modes
Usage
Information

Related
Commands

Command
History

Off
ROUTER BGPV6 ADDRESS FAMILY (conf-router_bgpv6_af)
When soft-reconfiguration is enabled for a neighbor and the clear ip bgp soft in is executed,
the update database stored in the router is replayed and updates are reevaluated. With this
command, the replay and update process is triggered only if route-refresh request is not
negotiated with the peer. If the request is indeed negotiated (upon execution of clear ip bgp
soft in), then BGP sends a route-refresh request to the neighbor and receives all of the peer’s
updates.
clear ip bgp ipv6 unicast
soft in

Activate inbound policies for IPv6 routes without resetting the BGP
TCP session.

Version 8.4.1.0

Added support for IPv4 multicast and IPv6 unicast address families

Version 7.8.1.0

Introduced support on S4810

Version 7.7.1.0

Introduced support on C-Series

Version 7.2.1.0

Introduced on E-Series TeraScale

capture bgp-pdu neighbor (ipv6)
Enable capture of an IPv6 BGP neighbor packet.

ce
Syntax

capture bgp-pdu neighbor ipv6-address direction {both | rx | tx}

To disable capture of the IPv6 BGP neighbor packet, use the no capture bgp-pdu neighbor
ipv6-address command.
Parameters

Defaults
Command Modes

ipv6-address

Enter the IPv6 address of the target BGP neighbor.

direction {both | rx
| tx}

Enter the keyword direction and a direction— either rx for inbound, tx for
outbound, or both.

Not configured.
EXEC
EXEC Privilege

IPv6 Border Gateway Protocol (IPv6 BGP) | 777

www.dell.com | support.dell.com

Command
History

Related
Commands

Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

capture bgp-pdu max-buffer-size

Enable route reflection between route reflector and clients.

show capture bgp-pdu neighbor

Configure a route reflector and clients.

capture bgp-pdu neighbor

Enable capture of an IPv4 BGP neighbor packet.

capture bgp-pdu max-buffer-size
Set the size of the BGP packet capture buffer. This buffer size pertains to both IPv4 and IPv6
addresses.

ce
Syntax
Parameters

Defaults
Command Modes

capture bgp-pdu max-buffer-size 100-102400000
100-102400000

Enter a size for the capture buffer.

40960000 bytes
EXEC
EXEC Privilege

Command
History

Related
Commands

Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

capture bgp-pdu neighbor (ipv6)

Enable capture of an IPv6 BGP neighbor packet.

show capture bgp-pdu neighbor

Configure a route reflector and clients.

clear ip bgp * (asterisk)
Reset all BGP sessions in the specified category on the E-Series. The soft parameter (BGP
Soft Reconfiguration) clears the policies without resetting the TCP connection.

ce
Syntax
Parameters

778

|

clear ip bgp * [ipv4 multicast soft [in | out] | ipv6 unicast soft [in | out] | soft [in | out]]
*

Enter an asterisk ( * ) to reset all BGP sessions.

ipv4 multicast soft [in | out]

(OPTIONAL) This keyword sequence sets options within the
a specified IPv4 address family.

ipv6 unicast soft [in | out]

(OPTIONAL) This keyword sequence sets options within the
a specified IPv6 address family.

IPv6 Border Gateway Protocol (IPv6 BGP)

soft

(OPTIONAL) Enter the keyword soft to configure and
activate policies without resetting the BGP TCP session, that
is, BGP Soft Reconfiguration.
Note: If you enter clear ip bgp ip6-address soft, both inbound
and outbound policies are reset.

Command Modes
Command
History

in

(OPTIONAL) Enter the keyword in to activate only inbound
policies.

out

(OPTIONAL) Enter the keyword out to activate only
outbound policies.

EXEC Privilege
Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

clear ip bgp as-number
Reset BGP sessions on the E-Series. The soft parameter (BGP Soft Reconfiguration) clears
the policies without resetting the TCP connection.

ce
Syntax

Parameters

clear ip bgp as-number [flap-statistics | ipv4 {multicast {flap-statistics | soft {in | out}} | unicast
{flap-statistics | soft {in | out}} | ipv6 unicast {flap-statistics | soft {in | out}| soft [in | out]

as-number

Enter an autonomous system (AS) number to reset neighbors
belonging to that AS. If used without a qualifier, the keyword resets
all neighbors belonging to that AS.
Range: 1 to 65535

flap-statistics

(OPTIONAL) Enter the keyword flap-statistics to clear all flap
statistics belonging to that AS or a specified address family within
that AS.

ipv4

(OPTIONAL) Enter the keyword ipv4 to select options for that
address family.

ipv6

(OPTIONAL) Enter the keyword ipv6 to select options for that
address family.

unicast

(OPTIONAL) Enter the keyword unicast to select the unicast option
within the selected address family.

multicast

(OPTIONAL) Enter the keyword multicast to select the multicast
option within the selected address family.
Multicast is supported on IPv4 only

soft

(OPTIONAL) Enter the keyword soft to configure and activate
policies without resetting the BGP TCP session, that is, BGP Soft
Reconfiguration.
Note: If you enter clear ip bgp ipv6-address soft, both inbound and
outbound policies are reset.

IPv6 Border Gateway Protocol (IPv6 BGP) | 779

www.dell.com | support.dell.com

Command Modes
Command
History

in

(OPTIONAL) Enter the keyword in to activate only inbound
policies.

out

(OPTIONAL) Enter the keyword out to activate only outbound
policies.

EXEC Privilege
Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

clear ip bgp ipv6-address
Reset BGP sessions specific to an IPv6 address on the E-Series. The soft parameter (BGP
Soft Reconfiguration) clears the policies without resetting the TCP connection.

ce
Syntax

Parameters

clear ip bgp ipv6-address [flap-statistics | ipv4 {multicast {flap-statistics | soft {in | out}} | unicast
{flap-statistics | soft {in | out}} | ipv6 unicast {flap-statistics | soft {in | out}| soft [in | out]
ipv6-address

Enter an IPv6 address to reset neighbors belonging to that IP. Used
without a qualifier, the keyword resets all neighbors belonging to
that IP.

flap-statistics

(OPTIONAL) Enter the keyword flap-statistics to clear all flap
statistics belonging to that AS or a specified address family within
that IP.

ipv4

(OPTIONAL) Enter the keyword ipv4 to select options for that
address family.

ipv6

(OPTIONAL) Enter the keyword ipv6 to select options for that
address family.

unicast

(OPTIONAL) Enter the keyword unicast to select the unicast option
within the selected address family.

multicast

(OPTIONAL) Enter the keyword multicast to select the multicast
option within the selected address family.
Multicast is supported on IPv4 only

soft

(OPTIONAL) Enter the keyword soft to configure and activate
policies without resetting the BGP TCP session, that is, BGP Soft
Reconfiguration.
Note: If you enter clear ip bgp ip6-address soft, both inbound and
outbound policies are reset.

Command Modes

780

|

in

(OPTIONAL) Enter the keyword in to activate only inbound
policies.

out

(OPTIONAL) Enter the keyword out to activate only outbound
policies.

EXEC Privilege

IPv6 Border Gateway Protocol (IPv6 BGP)

Command
History

Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

clear ip bgp peer-group
Reset a peer-group’s BGP sessions.

ce
Syntax
Parameters

Command Modes
Command
History

clear ip bgp peer-group peer-group-name
peer-group-name

Enter the peer group name to reset the BGP sessions within that peer
group.

EXEC Privilege
Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

clear ip bgp ipv6 dampening
Clear information on route dampening and return suppressed route to active state.

ce
Syntax
Parameters

Command Modes
Command
History

Usage
Information

clear ip bgp ipv6 unicast dampening [ipv6-address]
ipv6-address

Enter the IPv6 address in the x:x:x:x::x format followed by the prefix
length in the /x format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zeros

EXEC Privilege
Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

After you enter this command, the software deletes history routes and returns suppressed
routes to active state.

clear ip bgp ipv6 flap-statistics
ce

Clear BGP flap statistics, which includes number of flaps and the time of the last flap.

IPv6 Border Gateway Protocol (IPv6 BGP) | 781

www.dell.com | support.dell.com

Syntax

clear ip bgp ipv6 unicast flap-statistics [ipv6-address | filter-list as-path-name | regexp
regular-expression]

Parameters

Command Modes
Command
History

Usage
Information
Related
Commands

ipv6-address

(OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format
followed by the prefix length in the /x format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zeros

filter-list as-path-name

(OPTIONAL) Enter the keyword filter-list followed by the name
of a configured AS-PATH list.

regexp regular-expression

(OPTIONAL) Enter the keyword regexp followed by regular
expressions. Use one or a combination of the following:
. (period) matches on any single character, including white
space
* (asterisk) matches on sequences in a pattern (zero or more
sequences)
+ (plus sign) matches on sequences in a pattern (one or more
sequences)
? (question mark) matches sequences in a pattern (0 or 1
sequences)
[ ] (brackets) matches a range of single-character patterns.
^ (caret) matches the beginning of the input string. (If the caret
is used at the beginning of a sequence or range, it matches on
everything BUT the characters specified.)
$ (dollar sign) matches the end of the output string.

EXEC Privilege
Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

If you enter clear ip bgp ipv6 flap-statistics without any parameters, all statistics are cleared.

show ip bgp ipv6 unicast flap-statistics

View BGP flap statistics.

clear ip bgp ipv6 unicast soft
c et

Syntax

782

|

Clear and reapply policies for IPv6 unicast routes without resetting the TCP connection; that
is, perform BGP soft reconfiguration.
clear ip bgp {* | as-number | ipv4-neighbor-addr | ipv6-neighbor-addr | peer-group name} ipv6
unicast soft [in | out]

IPv6 Border Gateway Protocol (IPv6 BGP)

Parameters

Command Modes
Command
History

*

Clear and reapply policies for all BGP sessions.

as-number

Clear and reapply policies for all neighbors belonging to the AS.
Range: 0-65535 (2-Byte) or
1-4294967295 (4-Byte) or
0.1-65535.65535 (Dotted format)

ipv4-neighbor-addr |
ipv6-neighbor-addr

Clear and reapply policies for a neighbor.

peer-group name

Clear and reapply policies for all BGP routers in the specified peer
group.

ipv6 unicast

Clear and reapply policies for all IPv6 unicast routes.

in

Reapply only inbound policies. Note: If you enter soft, without an in
or out option, both inbound and outbound policies are reset.

out

Reapply only outbound policies. Note: If you enter soft, without an
in or out option, both inbound and outbound policies are reset.

EXEC Privilege
Version 8.4.1.0

Added support for IPv4 multicast and IPv6 unicast routes

Version 7.8.1.0

Introduced support on S4810

Version 7.7.1.0

Introduced support on C-Series

Version 7.2.1.0

Introduced on the E-Series TeraScale

debug ip bgp
Allows you to view all information on BGP, including BGP events, keepalives, notifications,
and updates.

ce
Syntax

debug ip bgp [ipv6-address | peer-group peer-group-name] [in | out]

To disable all BGP debugging, enter no debug ip bgp.
Parameters

Command Modes

ipv6-address

(OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format
followed by the prefix length in the /x format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zeros.

peer-group peer-group-name

Enter the keyword peer-group followed by the name of the peer
group.

in

(OPTIONAL) Enter the keyword in to view only information on
inbound BGP routes.

out

(OPTIONAL) Enter the keyword out to view only information on
outbound BGP routes.

EXEC Privilege

IPv6 Border Gateway Protocol (IPv6 BGP) | 783

www.dell.com | support.dell.com

Command
History

Usage
Information

Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

To view information on both incoming and outgoing routes, do not include the in and out
parameters in the debugging command. The in and out parameters cancel each other; for
example, if you enter debug ip bgp in and then enter debug ip bgp out, you will not
information on the incoming routes.
Entering a no debug ip bgp command removes all configured debug commands for BGP.

Related
Commands

debug ip bgp events

View information about BGP events.

debug ip bgp keepalives

View information about BGP keepalives.

debug ip bgp notifications

View information about BGP notifications.

debug ip bgp updates

View information about BGP updates.

debug ip bgp events
Allows you to view information on local BGP state changes and other BGP events.

ce
Syntax

debug ip bgp [ipv6-address | peer-group peer-group-name] events [in | out]

To disable debugging, use the no debug ip bgp ipv6-address | peer-group peer-group-name]
events command.
Parameters

Command Modes
Command
History

Usage
Information

784

|

ipv6-address

(OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format
followed by the prefix length in the /x format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zeros.

peer-group peer-group-name

(OPTIONAL) Enter the keyword peer-group followed by the
name of the peer group.

in

(OPTIONAL) Enter the keyword in to view only events on
inbound BGP messages.

out

(OPTIONAL) Enter the keyword out to view only events on
outbound BGP messages.

EXEC Privilege
Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

Enter the no debug ip bgp command to remove all configured debug commands for BGP.

IPv6 Border Gateway Protocol (IPv6 BGP)

debug ip bgp ipv6 dampening
View information on IPv6 routes being dampened.

ce
Syntax

debug ip bgp ipv6 unicast dampening [in | out]

To disable debugging, enter no debug ip bgp ipv6 unicast dampening.
Parameters

Command Modes
Command
History

Usage
Information
Related
Commands

in

(OPTIONAL) Enter the keyword in to view only inbound dampened routes.

out

(OPTIONAL) Enter the keyword out to view only outbound dampened
routes.

EXEC Privilege
Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

Enter no debug ip bgp command to remove all configured debug commands for BGP.

show ip bgp ipv6 unicast
dampened-paths

View BGP dampened routes.

debug ip bgp ipv6 unicast soft-reconfiguration
c et

Syntax

Enable soft-reconfiguration debugging for IPv6 unicast routes.

debug ip bgp [ipv4-address | ipv6-address | peer-group-name] ipv6 unicast soft-reconfiguration

To disable debugging, use the no debug ip bgp [ipv4-address | ipv6-address | peer-group-name]
ipv6 unicast soft-reconfiguration command.
Parameters

Defaults
Command Modes
Usage
Information

ipv4-address |
ipv6-address

Enter the IP address of the neighbor on which you want to enable
soft-reconfiguration debugging.

peer-group-name

Enter the name of the peer group on which you want to enable
soft-reconfiguration debugging.

ipv6 unicast

Debug soft reconfiguration for IPv6 unicast routes.

Disabled
EXEC Privilege
This command turns on BGP soft-reconfiguration inbound debugging for IPv6 unicast routes.
If no neighbor is specified, debug is turned on for all neighbors.

IPv6 Border Gateway Protocol (IPv6 BGP) | 785

www.dell.com | support.dell.com

Command
History

Version 8.4.1.0

Added support for IPv4 multicast and IPv6 unicast routes

Version 7.8.1.0

Introduced support on S4810

Version 7.7.1.0

Introduced support on C-Series

Version 7.2.1.0

Introduced on the E-Series TeraScale

debug ip bgp keepalives
Allows you to view information about BGP keepalive messages.

ce
Syntax

debug ip bgp [ipv6-address | peer-group peer-group-name] keepalives [in | out]

To disable debugging, use the no debug ip bgp [ip-address | peer-group peer-group-name]
keepalives [in | out] command.
Parameters

Command Modes
Command
History

Usage
Information

ipv6-address

(OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format
followed by the prefix length in the /x format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zeros.

peer-group peer-group-name

(OPTIONAL) Enter the keyword peer-group followed by the
name of the peer group.

in

(OPTIONAL) Enter the keyword in to view only inbound
keepalive messages.

out

(OPTIONAL) Enter the keyword out to view only outbound
keepalive messages.

EXEC Privilege
Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

Enter the no debug ip bgp command to remove all configured debug commands for BGP.

debug ip bgp notifications
Allows you to view information about BGP notifications received from neighbors.

ce
Syntax

debug ip bgp [ipv6-address | peer-group peer-group-name] notifications [in | out]

To disable debugging, use the no debug ip bgp [ip-address | peer-group peer-group-name]
notifications [in | out] command.

786

|

IPv6 Border Gateway Protocol (IPv6 BGP)

Parameters

Command Modes
Command
History

Usage
Information

ipv6-address

(OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format
followed by the prefix length in the /x format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zeros.

peer-group peer-group-name

(OPTIONAL) Enter the keyword peer-group followed by the
name of the peer group.

in

(OPTIONAL) Enter the keyword in to view BGP notifications
received from neighbors.

out

(OPTIONAL) Enter the keyword out to view BGP notifications
sent to neighbors.

EXEC Privilege
Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

Enter the no debug ip bgp command to remove all configured debug commands for BGP.

debug ip bgp updates
Allows you to view information about BGP updates.

ce
Syntax

debug ip bgp [ipv6-address | peer-group peer-group-name | ipv6 unicast [ipv6-address]] updates
[in | out | prefix-list prefix-list-name]

To disable debugging, use the no debug ip bgp [ip-address | peer-group peer-group-name | ipv6
unicast [ipv6-address]] updates [in | out] command.
Parameters

Command Modes

ipv6-address

(OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format
followed by the prefix length in the /x format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zeros.

peer-group peer-group-name

(OPTIONAL) Enter the keyword peer-group followed by the
name of the peer group.

ipv6 unicast [ipv6-address]

(OPTIONAL) Enter the keyword ipv6 unicast, and, optionally,
an ipv6 address.

in

(OPTIONAL) Enter the keyword in to view only BGP updates
received from neighbors.

out

(OPTIONAL) Enter the keyword out to view only BGP updates
sent to neighbors.

EXEC Privilege

IPv6 Border Gateway Protocol (IPv6 BGP) | 787

www.dell.com | support.dell.com

Command
History

Usage
Information

Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

Enter the no debug ip bgp command to remove all configured debug commands for BGP.

default-metric
Allows you to change the metrics of redistributed routes to locally originated routes. Use this
command with the redistribute command.

ce
Syntax

default-metric number

To return to the default setting, enter no default-metric.
Parameters

Defaults

number

Enter a number as the metric to be assigned to routes from other protocols.
Range: 1 to 4294967295.

0

Command Modes

ROUTER BGP

Command
History

Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

Usage
Information
Related
Commands

The default-metric command in BGP sets the value of the BGP MULTI_EXIT_DISC (MED)
attribute for redistributed routes only.
bgp always-compare-med

Enable comparison of all BGP MED attributes.

redistribute

Redistribute routes from other routing protocols into BGP.

description
Enter a description of the BGP routing protocol

ce
Syntax

description {description}

To remove the description, use the no description {description} command.
Parameters

Defaults

788

|

description

Enter a description to identify the BGP protocol (80 characters maximum).

No default behavior or values

IPv6 Border Gateway Protocol (IPv6 BGP)

Command Modes

ROUTER BGP

Command
History

Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

Related
Commands

router bgp

Enter ROUTER mode on the switch.

distance bgp
Configure three administrative distances for routes.

ce
Syntax

distance bgp external-distance internal-distance local-distance

To return to default values, enter no distance bgp.
Parameters

Defaults
Command Modes
Command
History

external-distance

Enter a number to assign to routes learned from a neighbor external to the
AS.
Range: 1 to 255.
Default: 20

internal-distance

Enter a number to assign to routes learned from a router within the AS.
Range: 1 to 255.
Default: 200

local-distance

Enter a number to assign to routes learned from networks listed in the
network command.
Range: 1 to 255.
Default: 200

external-distance

= 20; internal-distance = 200; local-distance = 200.

ROUTER BGPV6-ADDRESS FAMILY
Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

Caution: Dell Force10 recommends that you do not change the administrative distance of internal
routes. Changing the administrative distances may cause routing table inconsistencies.
Usage
Information

The higher the administrative distance assigned to a route means that your confidence in that
route is low. Routes assigned an administrative distance of 255 are not installed in the routing
table.
Routes from confederations are treated as internal BGP routes.

IPv6 Border Gateway Protocol (IPv6 BGP) | 789

www.dell.com | support.dell.com

maximum-paths
Configure the maximum number of parallel routes (multipath support) BGP supports.

ce
Syntax

maximum-paths {ebgp | ibgp} number

To return to the default values, enter no maximum-paths.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

ebgp

Enter the keyword ebgp to enable multipath support for External BGP routes.

ibgp

Enter the keyword ibgp to enable multipath support for Internal BGP routes.

number

Enter a number as the maximum number of parallel paths.
Range: 1 to 16
Default: 1

1
ROUTER BGPV6-ADDRESS FAMILY
Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

If you enable this command, use the capture bgp-pdu max-buffer-size command to recompute
the best path.

neighbor activate
This command allows the specified neighbor/peer group to be enabled for the current AFI/
SAFI.

ce
Syntax

neighbor {ipv6-address | peer-group-name} activate

To disable, use the no neighbor {ipv6-address | peer-group-name} activate command.
Parameters

Defaults
Command Modes
Command
History

790

|

ipv6-address

Enter the IPv6 address in the x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zeros.

peer-group-name

Identify a peer group by name.

activate

Enter the keyword activate to enable the identified neighbor or
peer group in the new AFI/SAFI.

Disabled
ROUTER BGPV6-ADDRESS FAMILY
Version 8.4.2.1

Introduced on C-Series and S4810

IPv6 Border Gateway Protocol (IPv6 BGP)

Usage
Information

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

By default, when a neighbor/peer group configuration is created in the Router BGP context, it
is enabled for the IPv6/Unicast AFI/SAFI. By using activate in the new context, the neighbor/
peer group is enabled for AFI/SAFI.

neighbor advertisement-interval
Set the advertisement interval between BGP neighbors or within a BGP peer group.

ce
Syntax

neighbor {ipv6-address | peer-group-name} advertisement-interval seconds

To return to the default value, use the no neighbor {ipv6-address | peer-group-name}
advertisement-interval command.
Parameters

Defaults
Command Modes
Command
History

ipv6-address

Enter the IPv6 address in the x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zeros.

peer-group-name

Enter the name of the peer group to set the advertisement interval
for all routers in the peer group.

seconds

Enter a number as the time interval, in seconds, between BGP
advertisements.
Range: 0 to 600 seconds.
Default: 5 seconds for internal BGP peers; 30 seconds for
external BGP peers.

seconds

= 5 seconds (internal peers); seconds = 30 seconds (external peers)

ROUTER BGPV6-ADDRESS FAMILY
Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

neighbor allowas-in
Set the number of times an AS number can occur in the AS path

ce
Syntax

neighbor {ip-address | peer-group-name} allowas-in number

To return to the default value, use the no neighbor {ip-address | peer-group-name} allowas-in
command.

IPv6 Border Gateway Protocol (IPv6 BGP) | 791

www.dell.com | support.dell.com

Parameters

ip-address

Enter the IPv6 address in the x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zeros.

peer-group-name

Enter the name of the peer group to set the advertisement interval for all
routers in the peer group.

number

Enter a number of times to allow this neighbor ID to use the AS path.
Range: 1 to 10.

Defaults

Not configured.

Command Modes

ROUTER BGP

Related
Commands
Command
History

bgp four-octet-as-support

Enable 4-Byte support for the BGP process.

Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

neighbor default-originate
Inject the default route to a BGP peer or neighbor.

ce
Syntax

neighbor {ipv6-address | peer-group-name} default-originate [route-map map-name]

To remove a default route, use the no neighbor {ipv6-address | peer-group-name}
default-originate [route-map map-name] command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

792

|

ipv6-address

Enter the IPv6 address in the x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zeros.

peer-group-name

Enter the name of the peer group to set the default route of all
routers in that peer group.

route-map map-name

(OPTIONAL) Enter the keyword route-map followed by the
name of a configured route map.

Not configured.
ROUTER BGPV6-ADDRESS FAMILY
Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

If you apply a route map to a BGP peer or neighbor with the neighbor default-originate
command configured, the software does not apply the set filters in the route map to that BGP
peer or neighbor.

IPv6 Border Gateway Protocol (IPv6 BGP)

neighbor description
Assign a character string describing the neighbor or group of neighbors (peer group).

ce
Syntax

neighbor {ipv6-address | peer-group-name} description text

To delete a description, use the no neighbor {ipv6-address | peer-group-name} description text
command.
Parameters

ipv6-address

Enter the IPv6 address in the x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zeros.

peer-group-name

Enter the name of the peer group.

text

Enter a continuous text string up to 80 characters.

Defaults

Not configured.

Command Modes

ROUTER BGP

Command
History

Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

neighbor distribute-list
Distribute BGP information via an established prefix list.

ce
Syntax

neighbor {ipv6-address | peer-group-name} distribute-list prefix-list-name {in | out}

To delete a neighbor distribution list, use the no neighbor {ipv6-address | peer-group-name}
distribute-list prefix-list-name {in | out} command.
Parameters

Defaults
Command Modes

ipv6-address

Enter the IPv6 address in the x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zeros.

peer-group-name

Enter the name of the peer group.

prefix-list-name

Enter the name of an established prefix list.
If the prefix list is not configured, the default is permit (to allow
all routes).

in

Enter the keyword in to distribute only inbound traffic.

out

Enter the keyword out to distribute only outbound traffic.

Not configured.
ROUTER BGPV6-ADDRESS FAMILY

IPv6 Border Gateway Protocol (IPv6 BGP) | 793

www.dell.com | support.dell.com

Command
History

Usage
Information
Related
Commands

Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

Other BGP filtering commands include: neighbor filter-list and neighbor route-map.

neighbor filter-list

Assign a AS-PATH list to a neighbor or peer group.

neighbor route-map

Assign a route map to a neighbor or peer group.

neighbor ebgp-multihop
Attempt and accept BGP connections to external peers on networks that are not directly
connected.

ce
Syntax

neighbor {ipv6-address | peer-group-name} ebgp-multihop [ttl]

To disallow and disconnect connections, use the no neighbor {ipv6-address | peer-group-name}
ebgp-multihop [ttl] command.
Parameters

Defaults

ipv6-address

Enter the IPv6 address in the x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zeros.

peer-group-name

Enter the name of the peer group.

ttl

(OPTIONAL) Enter the number of hops as the Time to Live (ttl)
value.
Range: 1 to 255.
Default: 255

Disabled.

Command Modes

ROUTER BGP

Command
History

Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

Usage
Information

To prevent loops, the neighbor ebgp-multihop command will not install default routes of the
multihop peer. Networks not directly connected are not considered valid for best path
selection.

neighbor fall-over
Enable or disable fast fall-over for BGP neighbors.

ce
Syntax

794

|

neighbor {ipv6-address | peer-group-name} fall-over

IPv6 Border Gateway Protocol (IPv6 BGP)

To disable, use the no neighbor {ipv6-address | peer-group-name} fall-over command.
Parameters

Defaults

ipv6-address

Enter the IPv6 address in the x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zeros.

peer-group-name

Enter the name of the peer group.

Disabled

Command Modes

ROUTER BGP

Command
History

Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

Usage
Information

Related
Commands

When fall-over is enabled, BGP keeps track of IP or IPv6 reachability to the peer remote
address and the peer local address. Whenever either address becomes unreachable (i.e, no
active route exists in the routing table for peer IP or IPv6 destination/local address), BGP
brings down the session with the peer.
show ip bgp ipv6 unicast
neighbors

Display IPv6 routing information exchanged by BGP neighbors.

neighbor filter-list
Configure a BGP filter based on the AS-PATH attribute.

ce
Syntax

neighbor {ipv6-address | peer-group-name} filter-list as-path-name {in | out}

To delete a BGP filter, use the no neighbor {ipv6-address | peer-group-name} filter-list
as-path-name {in | out} command.
Parameters

Defaults
Command Modes

ipv6-address

Enter the IPv6 address in the x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zeros.

peer-group-name

Enter the name of the peer group to apply the filter to all routers
in the peer group.

as-path-name

Enter the name of an established AS-PATH access list.
If the AS-PATH access list is not configured, the default is permit
(to allow routes). (16 characters maximum)

in

Enter the keyword in to filter inbound BGP routes.

out

Enter the keyword out to filter outbound BGP routes.

Not configured.
ROUTER BGPV6-ADDRESS FAMILY

IPv6 Border Gateway Protocol (IPv6 BGP) | 795

www.dell.com | support.dell.com

Command
History

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

neighbor maximum-prefix
Control the number of network prefixes received.

ce
Syntax

neighbor {ipv6-address | peer-group-name} maximum-prefix maximum [threshold] [warning-only]

To return to the default values, use the no neighbor {ipv6-address | peer-group-name}
maximum-prefix maximum [threshold] [warning-only] command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

796

Version 8.4.2.1

|

ipv6-address

Enter the IPv6 address in the x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zeros.

peer-group-name

Enter the name of the peer group.

maximum

Enter a number as the maximum number of prefixes allowed for
this BGP router.
Range: 1 to 4294967295.

threshold

(OPTIONAL) Enter a number to be used as a percentage of the
maximum value. When the number of prefixes reaches this
percentage of the maximum value, the E-Series software sends a
message.
Range: 1 to 100 percent.
Default: 75

warning-only

(OPTIONAL) Enter the keyword warning-only to set the router
to send a log message when the maximum value is reached. If this
parameter is not set, the router stops peering when the maximum
number of prefixes is reached.

threshold =

75

ROUTER BGPV6-ADDRESS FAMILY
Version 8.4.2.1

Introduced on C-Series and S4810

Version 8.2.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series TeraScale

If the neighbor maximum-prefix is configured and the neighbor receives more prefixes than
allowed by the neighbor maximum-prefix command configuration, the neighbor goes down
and the show ip bgp ipv6 unicast summary command displays (prfxd) in the State/PfxRcd
column for that neighbor. The neighbor remains down until you enter the capture bgp-pdu
max-buffer-size command for the neighbor or the peer group to which the neighbor belongs
or you enter neighbor shutdown and neighbor no shutdown commands.

IPv6 Border Gateway Protocol (IPv6 BGP)

Related
Commands

show ip bgp ipv6 unicast summary

Displays the current BGP configuration.

neighbor X:X:X::X password
c et

Syntax

Enable TCP MD5 Authentication for an IPv6 BGP peer session.

neighbor x:x:x::x password {7  |  best Path
source: I - internal, a - aggregate, c - confed-external, r - redistributed, n
- network Origin codes: i - IGP, e - EGP, ? - incomplete
Network
Next Hop
Metric
h
dead:1::/100
5ffe:10::3
0
h
5ffe:11::3
0
*> dead:2::/100
5ffe:10::3
0
*
5ffe:11::3
0
*> dead:3::/100
5ffe:10::3
0
*
5ffe:11::3
0
h
dead:4::/100
5ffe:10::3
0
h
5ffe:11::3
0
FTOS#show ip bgp ipv6 unicast dead:3::/100

LocPrf Weight
0
0
0
0
0
0
0
0

Path
1 i
1 i
1 i
1 i
1 i
1 i
1 i
1 i

BGP routing table entry for dead:3::/100, version 3

IPv6 Border Gateway Protocol (IPv6 BGP) | 841

www.dell.com | support.dell.com

Paths: (2 available, table Default-MBGP-Routing-Table.)
Not advertised to any peer
Received from :
5ffe:10::3 (5.5.5.3)
AS_PATH : 1

Best

Next-Hop : 5ffe:10::3, Cost : 0
Origin IGP, Metric 0, LocalPref

100, Weight

0, external

100, Weight

0, external

5ffe:11::3 (5.5.5.3)
AS_PATH : 1
Next-Hop : 5ffe:11::3, Cost : 0
Origin IGP, Metric 0, LocalPref
Inactive reason: Peer IP address
FTOS#

.

Table 26-2.

Related
Commands

show ip bgp Command Example Fields

Field

Description

Network

Displays the destination network prefix of each BGP route.

Next Hop

Displays the next hop address of the BGP router.
If 0::0/0 is listed in this column, then local routes exist in the
routing table.

Metric

Displays the BGP route’s metric, if assigned.

LocPrf

Displays the BGP LOCAL_PREF attribute for the route.

Weight

Displays the route’s weight

Path

Lists all the ASs the route passed through to reach the destination
network.

show ip bgp ipv6 unicast
community

View BGP communities.

show ip bgp ipv6 unicast cluster-list
View BGP neighbors in a specific cluster.

ce
Syntax
Parameters

Command Modes

show ip bgp ipv6 unicast cluster-list [cluster-id]
cluster-id

(OPTIONAL) Enter the cluster id in dotted decimal format.

EXEC
EXEC Privilege

842

|

IPv6 Border Gateway Protocol (IPv6 BGP)

Command
History

Version 8.4.2.1

Introduced on C-Series and S4810

Version 7.4.1.0

Introduced on E-Series TeraScale

show ip bgp ipv6 unicast community
View information on all routes with Community attributes or view specific BGP community
groups.

ce
Syntax
Parameters

Command Modes

show ip bgp ipv6 unicast community [community-number] [local-as] [no-export] [no-advertise]
community-number

Enter the community number in AA:NN format where AA is the AS
number (2 bytes) and NN is a value specific to that autonomous system.
You can specify up to eight community numbers to view information on
those community groups.

local-AS

Enter the keywords local-AS to view all routes with the COMMUNITY
attribute of NO_EXPORT_SUBCONFED.
All routes with the NO_EXPORT_SUBCONFED (0xFFFFFF03)
community attribute must not be advertised to external BGP peers.

no-advertise

Enter the keywords no-advertise to view all routes containing the
well-known community attribute of NO_ADVERTISE.
All routes with the NO_ADVERTISE (0xFFFFFF02) community
attribute must not be advertised to other BGP peers.

no-export

Enter the keywords no-export to view all routes containing the
well-known community attribute of NO_EXPORT.
All routes with the NO_EXPORT (0xFFFFFF01) community attribute
must not be advertised outside a BGP confederation boundary.

EXEC
EXEC Privilege

Command
History

Usage
Information

Version 8.4.2.1

Introduced on C-Series and S4810

Version 7.4.1.0

Introduced on E-Series TeraScale

To view the total number of COMMUNITY attributes found, use the show ip bgp ipv6
unicast summary command. The text line above the route table states the number of
COMMUNITY attributes found.

show ip bgp ipv6 unicast community-list
View routes that are affected by a specific community list.

ce
Syntax
Parameters

show ip bgp ipv6 unicast community-list community-list-name
community-list-name

Enter the name of a configured IP community list.

IPv6 Border Gateway Protocol (IPv6 BGP) | 843

www.dell.com | support.dell.com

Command Modes

EXEC
EXEC Privilege

Command
History

Version 8.4.2.1

Introduced on C-Series and S4810

Version 7.4.1.0

Introduced on E-Series TeraScale

show ip bgp ipv6 unicast dampened-paths
View BGP routes that are dampened (non-active).

ce
Syntax
Command Modes

show ip bgp ipv6 unicast dampened-paths

EXEC
EXEC Privilege

Command
History

Version 8.4.2.1

Introduced on C-Series and S4810

Version 7.4.1.0

Introduced on E-Series TeraScale

show ip bgp ipv6 unicast detail
Display detailed BGP information.

ce
Syntax
Command Modes

show ip bgp ipv6 unicast detail

EXEC
EXEC Privilege

Command
History

Example

Version 8.4.2.1

Introduced on C-Series and S4810

Version 7.4.1.0

Introduced on E-Series TeraScale

R2_Training#show ip bgp ipv6 unicast detail
Detail information for BGP Node
bgpNdP 0x41a17000 : NdTmrP 0x41a17000 : NdKATmrP 0x41a17014 : NdTics 327741 :
NhLocAS 1 : NdState 2 : NdRPMPrim 1 : NdListSoc 13
NdAuto 1 : NdEqCost 1 : NdSync 0 : NdDefOrg 0
NdV6ListSoc 14 NdDefDid 0 : NdConfedId 0 : NdMedConfed 0 : NdMedMissVal -1 :
NdIgnrIllId 0 : NdRRC2C 1 : NdClstId 33686273 : NdPaTblP 0x41a19088
NdASPTblP 0x41a19090 : NdCommTblP 0x41a19098 : NhOptTransTblP 0x41a190a0 :
NdRRClsTblP 0x41a190a8
NdPktPA 0 : NdLocCBP 0x41a6f000 : NdTmpPAP 0x419efc80 : NdTmpASPAP 0x41a25000 :
NdTmpCommP 0x41a25800
NdTmpRRClP 0x41a4b000 : NdTmpOptP 0x41a4b800 : NdTmpNHP : NdOrigPAP 0
NdOrgNHP 0 : NdModPathP 0x419efcc0 : NdModASPAP 0x41a4c000 : NdModCommP
0x41a4c800

844

|

IPv6 Border Gateway Protocol (IPv6 BGP)

NdModOptP 0x41a4d000 : NdModNHP : NdComSortBufP 0x41a19110 : NdComSortHdP
0x41a19d04 : NdUpdAFMsk 0 : AFRstSe
t 0x41a1a298 : NHopDfrdHdP 0x41a1a3e0 : NumNhDfrd 0 : CfgHdrAFMsk 1
AFChkNetTmrP 0x41ee705c : AFRtDamp 0 : AlwysCmpMed 0 : LocrHld 10 : LocrRem 10
: softReconfig 0x41a1a58c
DefMet 0 : AutoSumm 1 : NhopsP 0x41a0d100 : Starts 0 : Stops 0 : Opens 0
Closes 0 : Fails 0 : Fatals 0 : ConnExps 0 : HldExps 0 : KeepExps 0
RxOpens 0 : RxKeeps 0 : RxUpds 0 : RxNotifs 0 : TxUpds 0 : TxNotifs 0
BadEvts 0 : SynFails 0 : RxeCodeP 0x41a1b6b8 : RxHdrCodeP 0x41a1b6d4 :
RxOpCodeP 0x41a1b6e4
RxUpdCodeP 0x41a1b704 : TxEcodeP 0x41a1b734 : TxHdrcodeP 0x41a1b750 :
TxOpCodeP 0x41a1b760
TxUpdCodeP 0x41a1b780 : TrEvt 0 : LocPref 100 : tmpPathP 0x41a1b7b8 :
LogNbrChgs 1
RecursiveNH 1 : PgCfgId 0 : KeepAlive 0 : HldTime 0 : DioHdl 0 : AggrValTmrP
0x41ee7024
UpdNetTmrP 0 : RedistTmrP 0x41ee7094 : PeerChgTmrP 0 : CleanRibTmrP 0x41ee7104
PeerUpdTmrP 0x41ee70cc : DfrdNHTmrP 0x41ee7174 : DfrdRtselTmrP 0x41ee713c :
FastExtFallover 1 : FastIntFallove
r 0 : Enforce1stAS 1
PeerIdBitsP 0x41967120 : softOutSz 16 : RibUpdCtxCBP 0
UpdPeerCtxCBP 0 : UpdPeerCtxAFI 0 : TcpioCtxCB 0 : RedistBlk 1
NextCBPurg 1101119536 : NumPeerToPurge 0 : PeerIBGPCnt 0 : NonDet 0 :
DfrdPathSel 0
BGPRst 0 : NumGrCfg 1 : DfrdTmestmp 0 : SnmpTrps 0 : IgnrBestPthASP 0
RstOn 1 : RstMod 1 : RstRole 2 : AFFalgs 7 : RstInt 120 : MaxeorExtInt 361
FixedPartCrt 1 : VarParCrt 1
Packet Capture max allowed length 40960000 : current length 0
Peer Grp List
Nbr List
Confed Peer List
Address Family specific Information
AFIndex 2
NdSpFlag 0x41a190b2 : AFRttP 0x41a0de00 : NdRTMMkrP 0x41a19d68 : NdRTMAFTblVer
0 : NdRibCtxAddr 1101110720
NdRibCtxAddrLen 255 : NdAFPrefix 0 : NdAfNLRIP 0 : NdAFNLRILen 0 : NdAFWPtrP 0
NdAFWLen 0 : NdAfNH : NdAFRedRttP 0x41a4e000 : NdRecCtxAdd 1101110900
NdRedCtxAddrLen 255 : NdAfRedMkrP 0x41a19ec8 : AFAggRttP 0x41a4e200 :
AfAggCtxAddr 1101111060 : AfAggrCtxAddrLen 255
AfNumAggrPfx 0 : AfNumAggrASSet 0 : AfNumSuppmap 0 : AfNumAggrValidPfx 0 :
AfMPathRttP 0x41a4e300
MpathCtxAddr 1101111172 : MpathCtxAddrlen 255 : AfEorSet 0x41a1a198 :
NumDfrdPfx 0
AfActPeerHd 0x41a1a3cc : AfExtDist 1101112320 : AfIntDist 200 : AfLocDist 200
AfNumRRc 0 : AfRR 0 : AfNetRttP 0x41a0df00 : AfNetCtxAddr 1101112424 :
AfNetCtxAddrlen 255
AfNwCtxAddr 1101112475 : AfNwCtxAddrlen 255 : AfNetBKDrRttP 0x41a4e100 :
AfNetBKDRCnt 0 : AfDampHLife 0
AfDampReuse 0 : AfDampSupp 0 : AfDampMaxHld 0 : AfDampCeiling 0 : AfDampRmapP
0x41a1a548
AfNumDamped 0 : AfNumHist 0 : AfNumTotalHist 0 : AfDfrdRtLstP 0x41a1b624 :
AfDfrdNodeCnt 0 : softRecfgAf 0x41a1b5dc : softRecfgCfgAf 0x41a1b5f8
AfCfgCnt 0 : AfRedistCfg 0 : IBGP_Mpath 0 : EBGP_Mpath 0 : DebugInPfList :
DebugOutPfList

IPv6 Border Gateway Protocol (IPv6 BGP) | 845

www.dell.com | support.dell.com

show ip bgp ipv6 unicast filter-list
View the routes that match the filter lists.

ce
Syntax
Parameters

Command Modes

show ip bgp ipv6 unicast filter-list as-path-name
as-path-name

Enter the name of an AS-PATH.

EXEC
EXEC Privilege

Command
History

Version 8.4.2.1

Introduced on C-Series and S4810

Version 7.4.1.0

Introduced on E-Series TeraScale

show ip bgp ipv6 unicast flap-statistics
View flap statistics on BGP routes.

ce
Syntax

show ip bgp ipv6 unicast flap-statistics [ipv6-address prefix-length] [filter-list as-path-name]

[regexp regular-expression]
Parameters

Command Modes

ipv6-address prefix-length

(OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format
followed by the prefix length in the /x format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zeros.

filter-list as-path-name

(OPTIONAL) Enter the keyword filter-list followed by the name of a
configured AS-PATH ACL.

regexp regular-expression

Enter a regular expression then use one or a combination of the
following characters to match:
• . = (period) any single character (including a white space)
• * = (asterisk) the sequences in a pattern (0 or more sequences)
• + = (plus) the sequences in a pattern (1 or more sequences)
• ? = (question mark) sequences in a pattern (either 0 or 1
sequences). You must enter an escape sequence (CTRL+v)
prior to entering the ? regular expression.
• [ ] = (brackets) a range of single-character patterns.
• ^ = (caret) the beginning of the input string. If the caret is used at
the beginning of a sequence or range, it matches on everything
BUT the characters specified.
• $ = (dollar sign) the end of the output string.

EXEC
EXEC Privilege

846

|

IPv6 Border Gateway Protocol (IPv6 BGP)

Command
History

Version 8.4.2.1

Introduced on C-Series and S4810

Version 7.4.1.0

Introduced on E-Series TeraScale

Example

FTOS#show ip bgp ipv6 unicast flap-statistics
BGP table version is 8, local router ID is 5.5.10.4
Status codes: s suppressed, S stale, d damped, h history, * valid, > best Path
source: I - internal, a - aggregate, c - confed-external, r - redistributed, n
- network Origin codes: i - IGP, e - EGP, ? - incomplete

h
h
h
h

Network
dead:1::/100
dead:1::/100
dead:4::/100
dead:4::/100

From
5ffe:10::3
5ffe:11::3
5ffe:10::3
5ffe:11::3

Flaps
1
1
1
1

Duration Reuse
00:03:20
00:03:20
00:04:39
00:04:39

Path
1 i
1 i
1 i
1 i

FTOS#

show ip bgp ipv6 unicast inconsistent-as
View routes with inconsistent originating Autonomous System (AS) numbers, that is,
prefixes that are announced from the same neighbor AS but with a different AS-Path.

ce
Syntax
Command Modes

show ip bgp ipv6 unicast inconsistent-as

EXEC
EXEC Privilege

Command
History

Version 8.4.2.1

Introduced on C-Series and S4810

Version 7.4.1.0

Introduced on E-Series TeraScale

show ip bgp ipv6 unicast neighbors
Allows you to view the information exchanged by BGP neighbors.

ce
Syntax

Parameters

show ip bgp ipv6 unicast neighbors [ipv6-address prefix-length [advertised-routes |
dampened-routes | detail | flap-statistics | routes]]
ipv6-address
prefix-length

(OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format followed by
the prefix length in the /x format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zeros.

advertised-routes

(OPTIONAL) Enter the keywords advertised-routes to view only the
routes the neighbor sent.

dampened-routes

(OPTIONAL) Enter the keyword dampened-routes to view information
on dampened routes from the BGP neighbor.

flap-statistics

(OPTIONAL) Enter the keyword flap-statistics to view flap statistics on
the neighbor’s routes.

IPv6 Border Gateway Protocol (IPv6 BGP) | 847

www.dell.com | support.dell.com

Command Modes

detail

(OPTIONAL) Display detailed neighbor information.

routes

(OPTIONAL) Enter the keywords routes to view only the neighbor’s
feasible routes.

EXEC
EXEC Privilege

Command
History

Example

Version 8.4.2.1

Introduced on C-Series and S4810

Version 7.5.1.0

Modified: Added detail option; added information to output.

Version 7.4.1.0

Introduced on E-Series TeraScale

FTOS#show ip bgp ipv6 unicast neighbors
BGP neighbor is 5ffe:10::3, remote AS 1, external link
BGP version 4, remote router ID 5.5.5.3
BGP state ESTABLISHED, in this state for 00:00:32
Last read 00:00:32, last write 00:00:32
Hold time is 180, keepalive interval is 60 seconds
Received 1404 messages, 0 in queue
3 opens, 1 notifications, 1394 updates
6 keepalives, 0 route refresh requests
Sent 48 messages, 0 in queue
3 opens, 2 notifications, 0 updates
43 keepalives, 0 route refresh requests
Minimum time between advertisement runs is 30 seconds
Minimum time before advertisements start is 0 seconds
Capabilities received from neighbor for IPv6 Unicast :
MULTIPROTO_EXT(1)
ROUTE_REFRESH(2)
CISCO_ROUTE_REFRESH(128)
Capabilities advertised to neighbor for IPv6 Unicast :
MULTIPROTO_EXT(1)
ROUTE_REFRESH(2)
CISCO_ROUTE_REFRESH(128)
For address family: IPv6 Unicast
BGP table version 12, neighbor version 12
2 accepted prefixes consume 32 bytes
Prefixes accepted 1 (consume 4 bytes), withdrawn 0 by peer
Prefixes advertised 0, rejected 0, withdrawn 0 from peer
Connections established 3; dropped 2
Last reset 00:00:39, due to Closed by neighbor
Notification History
'OPEN error/Bad AS' Sent : 0

Recv: 1

Local host: 5ffe:10::4, Local port: 179
Foreign host: 5ffe:10::3, Foreign port: 35470
BGP neighbor is 5ffe:11::3, remote AS 1, external link
BGP version 4, remote router ID 5.5.5.3
BGP state ESTABLISHED, in this state for 00:00:28
Last read 00:00:28, last write 00:00:28
Hold time is 180, keepalive interval is 60 seconds
Received 27 messages, 3 notifications, 0 in queue

848

|

IPv6 Border Gateway Protocol (IPv6 BGP)

Sent 0 messages, 0 notifications, 0 in queue
Received 8 updates, Sent 0 updates
Route refresh request: received 0, sent 0
Minimum time between advertisement runs is 30 seconds
Minimum time before advertisements start is 0 seconds
Capabilities received from neighbor for IPv6 Unicast :
MULTIPROTO_EXT(1)
ROUTE_REFRESH(2)
CISCO_ROUTE_REFRESH(128)
Capabilities advertised to neighbor for IPv6 Unicast :
MULTIPROTO_EXT(1)
ROUTE_REFRESH(2)
CISCO_ROUTE_REFRESH(128)
For address family: IPv6 Unicast
BGP table version 12, neighbor version 12
2 accepted prefixes consume 32 bytes
Prefix advertised 0, rejected 0, withdrawn 0
Connections established 3; dropped 2
Last reset 00:00:41, due to Closed by neighbor
Notification History
'OPEN error/Bad AS' Sent : 0

Recv: 1

Local host: 5ffe:11::4, Local port: 179
Foreign host: 5ffe:11::3, Foreign port: 36800
FTOS#

Table 26-3.

show ip bgp neighbors Command Fields

Lines beginning with

Description

BGP neighbor

Displays the BGP neighbor address and its AS number. The last
phrase in the line indicates whether the link between the BGP
router and its neighbor is an external or internal one. If they are
located in the same AS, then the link is internal; otherwise the link
is external.

BGP version

Displays the BGP version (always version 4) and the remote router
ID.

BGP state

Displays the neighbor’s BGP state and the amount of time in
hours:minutes:seconds it has been in that state.

Last read

This line displays the following information:
• last read is the time (hours:minutes:seconds) the router read a
message from its neighbor
• hold time is the number of seconds configured between
messages from its neighbor
• keepalive interval is the number of seconds between keepalive
messages to help ensure that the TCP session is still alive.

Received messages

This line displays the number of BGP messages received, the
number of notifications (error messages) and the number of
messages waiting in a queue for processing.

Sent messages

The line displays the number of BGP messages sent, the number of
notifications (error messages) and the number of messages waiting
in a queue for processing.

IPv6 Border Gateway Protocol (IPv6 BGP) | 849

www.dell.com | support.dell.com

Table 26-3.

Related
Commands

show ip bgp neighbors Command Fields (continued)

Lines beginning with

Description

Received updates

This line displays the number of BGP updates received and sent.

Minimum time

Displays the minimum time, in seconds, between advertisements.

(list of inbound and outbound
policies)

Displays the policy commands configured and the names of the
Route map, AS-PATH ACL or Prefix list configured for the policy.

For address family:

Displays IPv6 Unicast as the address family.

BGP table version

Displays the which version of the primary BGP routing table the
router and the neighbor are using.

accepted prefixes

Displays the number of network prefixes accepted by the router
and the amount of memory used to process those prefixes.

Prefix advertised

Displays the number of network prefixes advertised, the number
rejected and the number withdrawn from the BGP routing table.

Connections established

Displays the number of TCP connections established and dropped
between the two peers to exchange BGP information.

Last reset

Displays the amount of time since the peering session was last
reset. Also states if the peer resets the peering session.
If the peering session was never reset, the word never is displayed.

Local host:

Displays the peering address of the local router and the TCP port
number.

Foreign host:

Displays the peering address of the neighbor and the TCP port
number.

show ip bgp ipv6 unicast

View the current BGP routing table.

show ip bgp ipv6 unicast peer-group
Allows you to view information on the BGP peers in a peer group.

ce
Syntax
Parameters

Command Modes

show ip bgp ipv6 unicast peer-group [peer-group-name [summary]]
peer-group-name

(OPTIONAL) Enter the name of a peer group to view information about
that peer group only.

summary

(OPTIONAL) Enter the keyword summary to view status information of
the peers in that peer group.
The output is the same as that found in show ip bgp ipv6 unicast
summary command

EXEC
EXEC Privilege

850

|

IPv6 Border Gateway Protocol (IPv6 BGP)

Command
History

Related
Commands

Version 8.4.2.1

Introduced on C-Series and S4810

Version 7.4.1.0

Introduced on E-Series TeraScale

neighbor peer-group (assigning peers)

Assign peer to a peer-group.

neighbor peer-group (creating group)

Create a peer group.

show ip bgp ipv6 unicast summary
Allows you to view the status of all BGP connections.

ce
Syntax
Command Modes

show ip bgp ipv6 unicast summary

EXEC
EXEC Privilege

Command
History

Version 8.4.2.1

Introduced on C-Series and S4810

Version 7.4.1.0

Introduced on E-Series TeraScale

Example

FTOS#show ip bgp ipv6 unicast summary
BGP router identifier 5.5.10.4, local AS number 100
BGP table version is 12, main routing table version 12
2 network entrie(s) and 4 paths using 536 bytes of memory
1 BGP path attribute entrie(s) using 112 bytes of memory
1 BGP AS-PATH entrie(s) using 39 bytes of memory
Dampening enabled. 0 history paths, 0 dampened paths, 0 penalized paths
Neighbor

AS

5ffe:10::3
5ffe:11::3
FTOS#

1
1

Table 26-4.

MsgRcvd

MsgSent

TblVer

InQ

28
27

0
0

12
12

0
0

OutQ Up/Down

State/Pfx

0 00:01:01
0 00:00:55

2
2

show ip bgp summary Command Fields

Field

Description

BGP router identifier

Displays the local router ID and the AS number.

BGP table version

Displays the BGP table version and the main routing table version.

network entries

Displays the number of network entries and route paths and the
amount of memory used to process those entries.

BGP path attribute entries

Displays the number of BGP path attributes and the amount of
memory used to process them.

BGP AS-PATH entries

Displays the number of BGP AS_PATH attributes processed and
the amount of memory used to process them.

BGP community entries

Displays the number of BGP COMMUNITY attributes processed
and the amount of memory used to process them. The show ip bgp
ipv6 unicast community command provides more details on the
COMMUNITY attributes.

IPv6 Border Gateway Protocol (IPv6 BGP) | 851

www.dell.com | support.dell.com

Table 26-4.

852

|

show ip bgp summary Command Fields

Field

Description

Dampening enabled

Displayed only when dampening is enabled. Displays the number
of paths designated as history, dampened, or penalized.

Neighbor

Displays the BGP neighbor address.

AS

Displays the AS number of the neighbor.

MsgRcvd

Displays the number of BGP messages that neighbor received.

MsgSent

Displays the number of BGP messages that neighbor sent.

TblVer

Displays the version of the BGP table that was sent to that
neighbor.

InQ

Displays the number of messages from that neighbor waiting to be
processed.

OutQ

Displays the number of messages waiting to be sent to that
neighbor.
If a number appears in parentheses, the number represents the
number of messages waiting to be sent to the peer group.

Up/Down

Displays the amount of time (in hours:minutes:seconds) that the
neighbor is in the Established stage.
If the neighbor has never moved into the Established stage, the
word never is displayed.

State/Pfx

If the neighbor is in Established stage, the number of network
prefixes received.
If a maximum limit was configured with the neighbor
maximum-prefix command, (prfxd) appears in this column.
If the neighbor is not in Established stage, the current stage is
displayed (Idle, Connect, Active, OpenSent, OpenConfirm) When
the peer is transitioning between states and clearing the routes
received, the phrase (Purging) may appear in this column.
If the neighbor is disabled, the phrase (Admin shut) appears in this
column.

IPv6 Border Gateway Protocol (IPv6 BGP)

27
iSCSI Optimization
Overview
Internet Small Computer System Interface (iSCSI) optimization enables quality-of-service (QoS)
treatment for iSCSI storage traffic on an
.
The following FTOS commands are used to configure and verify the iSCSI Optimization feature:
•
•
•
•
•
•
•
•
•
•
•

advertise dcbx-app-tlv
iscsi aging time
iscsi cos
iscsi enable
iscsi priority-bits
iscsi profile-compellant
iscsi target port
show iscsi
show iscsi session
show iscsi session detailed
show run iscsi

advertise dcbx-app-tlv
Configure DCBX to send iSCSI TLV advertisements.

Syntax

advertise dcbx-app-tlv iscsi

To disable DCBX iSCSI TLV advertisements, use the no advertise dcbx-app-tlv iscsi command.
Defaults
Command Modes
Command
History

Usage
Information

Enabled.
PROTOCOL LLDP
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

You can configure iSCSI TLVs to be sent either globally or on a specified interface. The interface
configuration takes priority over global configuration.

iSCSI Optimization | 853

www.dell.com | support.dell.com

iscsi aging time
Set the aging time for iSCSI sessions.

iscsi aging time time

Syntax

To remove the iSCSI session aging time, use the no iscsi aging time command.
Parameters

Defaults
Command Mode
Command
History

time

Enter the aging time for the iSCSI session.
Range: 5 to 43,200 minutes.

10 minutes.
CONFIGURATION
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

iscsi cos
Set the QoS policy that will be applied to the iSCSI flows.

Syntax

iscsi cos {enable | disable | dot1p vlan-priority-value [remark] | dscp dscp-value [remark]}

To disable the QoS policy, use the iscsi cos disable command.
Parameters

Defaults
Command Modes

854

|

iSCSI Optimization

enable

Enter the keyword enable to allow the application of preferential QoS treatment to
iSCSI traffic so that the iSCSI packets are scheduled in the switch with a dot1p
priority 4 regardless of the VLAN priority tag in the packet.
Default: iSCSI packets are handled with dotp1 priority 4 without remark.

disable

Enter the keyword disable to disable the application of preferential QoS treatment
to iSCSI frames.

dot1p
vlan-priority-value

Enter the dot1p value of the VLAN priority tag assigned to the incoming packets in
an iSCSI session.
Range: 0 to 7.
Default: The dot1p value in ingress iSCSI frames is not changed and is used in
iSCSI TLV advertisements if you did not enter the iscsi priority-bits command.

dscp dscp-value

Enter the DSCP value assigned to the incoming packets in an iSCSI session.
The valid range is 0 to 63.
Default: The DSCP value in ingress packets is not changed.

remark

Marks the incoming iSCSI packets with the configured dot1p or DSCP value when
they egress to the switch.
Default: The dot1and DSCP values in egress packets are not changed.

See above.
CONFIGURATION

Command
History

Usage
Information

Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

By default, iSCSI flows are assigned to dot1p priority 4. Dell Force10 recommends changing
the dot1p priority-queue setting to 0 (zero).

iscsi enable
Globally enable iSCSI optimization.

Syntax

iscsi enable

To disable iSCSI optimization, use the no iscsi enable command.
Parameters
Defaults
Command Modes
Command
History

Usage
Information

enable

Enter the keyword enable to enable the iSCSI optimization feature.

Enabled.
CONFIGURATION
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

•
•

LLDP must be enabled before using this command.
LLDP cannot be disabled if iSCSI is enabled.

iscsi priority-bits
Configure the priority bitmap to be advertised in iSCSI application TLVs.

Syntax

iscsi priority-bits

To remove the configured priority bitmap, use the no iscsi priority-bits command.
Defaults
Command Modes
Command
History

4 (0x10 in the bitmap)
PROTOCOL LLDP (only on global, not on interface)
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

iSCSI Optimization | 855

www.dell.com | support.dell.com

iscsi profile-compellant
Configure the auto-detection of Compellent arrays on a port.

iscsi profile-compellent

Syntax
Defaults

Compellent disk arrays are not detected.

Command Modes

INTERFACE

Command
History

Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

iscsi target port
Configure the iSCSI target ports and optionally, the IP addresses on which iSCSI communication will
be monitored.
iscsi target port [tcp-port-2...tcp-port-16]ip-address [ip-address]

Syntax

To remove the configured iSCSI target ports or IP addresses, use the no iscsi target port command.
Parameters

Defaults

Enter the tcp-port number of the iSCSI target ports.
The tcp-port-n is the TCP port number or a list of TCP port numbers on which the
iSCSI target listens to requests. Separate port numbers with a comma.
Default: 860, 3260.

ip-address

(Optional) Enter the ip-address that the iSCSI will monitor.
The ip-address specifies the IP address of the iSCSI target.

860, 3260.

Command Modes

CONFIGURATION

Command
History

Usage
Information

tcp-port-2...tcpport-16

Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

You can configure up to 16 target TCP ports on the switch in one command or multiple commands.
When you use the no iscsi target port command and the TCP port to be deleted is one bound to a
specific IP address, the IP address value must be included in the command.

856

|

iSCSI Optimization

show iscsi
Display the currently configured iSCSI settings.

Syntax
Command Mode

show iscsi

EXEC
EXEC Privilege

Command
History

Example

Related
Commands

Version 8.3.12.0

Introduced on the S4810. Support added for cam modification.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

FTOS#show iscsi
iSCSI is enabled
iSCSI session monitoring is disabled
iSCSI COS : dot1p is 4 no-remark
Session aging time: 10
Maximum number of connections is 256
-----------------------------------------------iSCSI Targets and TCP Ports:
-----------------------------------------------TCP Port
Target IP Address
3260
860

show iscsi session

Display information on active iSCSI sessions on the switch.

show iscsi session detailed

Display detailed information on active iSCSI sessions on the switch.

show run iscsi

show run iscsi

show iscsi session
Display information on active iSCSI sessions on the switch.

Syntax
Command Mode

show iscsi session

EXEC
EXEC Privilege

Command
History

Usage
Information

Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

Only sessions observed by the switch will be learnt; sessions flowing through an adjacent switch will
not be learnt. Session monitoring learns sessions that actually flow through the switch, it does not learn
all sessions in the entire topology.
After a switch is reloaded, any information exchanged during the initial handshake is not available. If
the switch picks up the communication after reloading, it would detect a session was in progress but
could not obtain complete information for it. Any incomplete information of this type would not be
available in the “show” commands.

iSCSI Optimization | 857

www.dell.com | support.dell.com

Example

FTOS# show isci session
Session 0:
------------------------------------------------------------------------------------Target: iqn.2001-05.com.equallogic:0-8a0906-0e70c2002-10a0018426a48c94-iom010
Initiator: iqn.1991-05.com.microsoft:win-x9l8v27yajg
ISID: 400001370000
Session 1:
------------------------------------------------------------------------------------Target: iqn.2001-05.com.equallogic:0-8a0906-0f60c2002-0360018428d48c94-iom011
Initiator: iqn.1991-05.com.microsoft:win-x9l8v27yajg
ISID: 400001370000.

Related
Commands

show iscsi

Display the currently configured iSCSI settings.

show iscsi session detailed

Display detailed information on active iSCSI sessions on the switch.

show run iscsi

show run iscsi

show iscsi session detailed
Display detailed information on active iSCSI sessions on the switch.

Syntax
Parameters

Command Mode

show iscsi session detailed [session isid]
isid

Enter the session’s iSCSi ID to display detailed information on specified iSCSi
session.

EXEC
EXEC Privilege

Command
History

Example

858

|

iSCSI Optimization

Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

FTOS# show isci session detailed
Session 0
:
----------------------------------------------------------------------------Target:iqn.2010-11.com.ixia:ixload:iscsi-TG1
Initiator:iqn.2010-11.com.ixia.ixload:initiator-iscsi-2c
Up Time:00:00:01:28(DD:HH:MM:SS)
Time for aging out:00:00:09:34(DD:HH:MM:SS)
ISID:806978696102
Initiator
Initiator
Target
Target
Connection
IP Address
TCP Port
IP Address
TCPPort
ID
10.10.0.44
33345
10.10.0.101
3260
0
Session 1
:
----------------------------------------------------------------------------Target:iqn.2010-11.com.ixia:ixload:iscsi-TG1
Initiator:iqn.2010-11.com.ixia.ixload:initiator-iscsi-35
Up Time:00:00:01:22(DD:HH:MM:SS)
Time for aging out:00:00:09:31(DD:HH:MM:SS)
ISID:806978696102
Initiator
Initiator
Target
Target
Connection

IP Address
10.10.0.53

Related
Commands

TCP Port
33432

IP Address
10.10.0.101

TCPPort
3260

ID
0

show iscsi

Display the currently configured iSCSI settings.

show iscsi session

Display information on active iSCSI sessions on the switch.

show run iscsi

show run iscsi

show run iscsi
Display all globally-configured non-default iSCSI settings in the current FTOS session.

Syntax
Command Mode
Command
History

Example

Related
Commands

show run iscsi

EXEC Privilege
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

FTOS(conf)#do show run isci
!
iscsi target port 860
iscsi target port 3260
iscsi target port 4567 ip-address 19.9.9.0
iscsi cos dscp 63
iscsi aging time 15
FTOS(conf)#

show iscsi

Display the currently configured iSCSI settings.

show iscsi session

Display information on active iSCSI sessions on the switch.

show iscsi session detailed

Display detailed information on active iSCSI sessions on the switch.

iSCSI Optimization | 859

860

|

iSCSI Optimization

www.dell.com | support.dell.com

28
Intermediate System to Intermediate System
(IS-IS)
Overview
Intermediate System to Intermediate System Protocol (IS-IS) for IPv4 and IPv6 is supported on
supported on platforms e and
.
IS-IS is an interior gateway protocol that uses a shortest-path-first algorithm. IS-IS facilitates the
communication between open systems, supporting routers passing both IP and OSI traffic.
A router is considered an intermediate system. Networks are partitioned into manageable routing
domains, called areas. Intermediate systems send, receive, and forward packets to other routers within
their area (Level 1 and Level 1-2 devices). Only Level 1-2 and Level 2 devices communicate with
other areas.
IS-IS protocol standards are listed in the Standard Compliance chapter in the FTOS Configuration
Guide.

Note: The fundamental mechanisms of IS-IS are the same between IPv4 and IPv6. Where
there are differences between the two versions, they are identified and clarified in this chapter.
Except where identified, the information in this chapter applies to both protocol versions.

Commands
The following are the FTOS commands to enable IS-IS.
•
•
•
•
•
•
•
•
•
•
•

adjacency-check
advertise
area-password
clear config
clear isis
clns host
debug isis
debug isis adj-packets
debug isis local-updates
debug isis snp-packets
debug isis spf-triggers

Intermediate System to Intermediate System (IS-IS) | 861

www.dell.com | support.dell.com

•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

862

|

debug isis update-packets
default-information originate
description
distance
distribute-list in
distribute-list out
distribute-list redistributed-override
domain-password
graceful-restart ietf
graceful-restart interval
graceful-restart t1
graceful-restart t2
graceful-restart t3
graceful-restart restart-wait
hello padding
hostname dynamic
ignore-lsp-errors
ip router isis
ipv6 router isis
isis circuit-type
isis csnp-interval
isis hello-interval
isis hello-multiplier
isis hello padding
isis ipv6 metric
isis metric
isis network point-to-point
isis password
isis priority
is-type
log-adjacency-changes
lsp-gen-interval
lsp-mtu
lsp-refresh-interval
max-area-addresses
max-lsp-lifetime
maximum-paths
metric-style
multi-topology
net
passive-interface
redistribute
redistribute bgp
redistribute ospf
router isis
set-overload-bit

Intermediate System to Intermediate System (IS-IS)

•
•
•
•
•
•
•
•
•

show config
show isis database
show isis graceful-restart detail
show isis hostname
show isis interface
show isis neighbors
show isis protocol
show isis traffic
spf-interval

adjacency-check
Verify that the “protocols supported” field of the IS-IS neighbor contains matching values to this
router.

e
Syntax

adjacency-check
To disable adjacency check, use the no adjacency-check command.

Defaults
Command Modes

Enabled
ROUTER ISIS (for IPv4)
CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6)

Command
History

Usage
Information

Version 8.3.12.0

Introduced on S4810

Version 7.5.1.0

Introduced on E-Series

Use this command to perform protocol-support consistency checks on hello packets. The
adjacency-check is enabled by default.

advertise
Leak routes between levels (distribute IP prefixes between Level 1 and Level 2 and vice versa).

e
Syntax

advertise {level1-into-level2 | level2-into-level1} prefix-list-name
To return to the default, use the no advertise {level1-into-level2 |
level2-into-level1}[prefix-list-name] command.

Parameters

level1-into-level2

Enter the keyword level1-into-level2 to advertise Level 1 routes into
Level 2 LSPs.
This is the default.

level2-into-level1

Enter the keyword level2-into-level1 to advertise Level 2 inter-area
routes into Level 1 LSPs.
Described in RFC 2966.

prefix-list-name

Enter the name of a configured IP prefix list. Routes meeting the criteria of the
IP Prefix list are leaked.

Intermediate System to Intermediate System (IS-IS) | 863

www.dell.com | support.dell.com

Defaults
Command Modes

level1-into-level2 (Level 1 to Level 2 leaking enabled.)
ROUTER ISIS (for IPv4)
CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6)

Command
History

Usage
Information

Version 8.3.12.0

Introduced on S4810

Version 7.5.1.0

Introduced IPv6 ISIS support

Version 6.3.1.0

Introduced

You cannot disable leaking from one level to another, however, you can regulate the rate flow from one
level to another via an IP Prefix list. If the IP Prefix list is not configured, all routes are leaked.
Additional information can be found in IETF RFC 2966, Domain-wide Prefix Distribution with
Two-Level IS-IS.

area-password
Configure a Hash Message Authentication Code (HMAC) authentication password for an area.

e
Syntax

area-password [hmac-md5 | encryption-type] password
To delete a password, enter no area-password.

Parameters

Defaults
Command Modes
Command
History

Usage
Information

hmac-md5

(OPTIONAL) Enter the keyword hmac-md5 to encrypt the password.

encryption-type

(OPTIONAL) Enter 7 to encrypt the password using DES.

password

Enter a 1—16-character length alphanumeric string to prevent unauthorized access or
incorrect routing information corrupting the link state database. The password is
processed as plain text which only provides limited security.

Not configured.
ROUTER ISIS
Version 8.3.12.0

Introduced on S4810

Use the area-password command on routers within an area to prevent the link state database from
receiving incorrect routing information from unauthorized routers.
The password configured is injected into Level 1 LSPs, CSNPs, and PSNPs.

Related
Commands

864

|

domain-password

Allows you to set the authentication password for a routing domain.

isis password

Allows you to configure an authentication password for an interface.

Intermediate System to Intermediate System (IS-IS)

clear config
Clear IS-IS configurations that display under the router isis heading of the show
running-config command output.

e
Syntax
Command Modes
Usage
Information
Related
Commands

clear config
ROUTER ISIS
Use caution when you enter this command. Back up your configuration prior to using this command or
your IS-IS configuration will be erased.
copy

Use this command to save the current configuration to another location.

clear isis
Restart the IS-IS process. All IS-IS data is cleared.

e
Syntax
Parameters

clear isis [tag] {* | database | traffic}
tag

(Optional) Enter an alphanumeric string to specify the IS-IS routing tag area.

*

Enter the keyword * to clear all IS-IS information and restarts the IS-IS process. This
command removes IS-IS neighbor information and IS-IS LSP database information and
the full SPF calculation will be done.

database

Clears IS-IS LSP database information.

traffic

Clears IS-IS counters.

Command Modes

EXEC Privilege

Command
History

Version 8.3.12.0

Introduced on S4810

clns host
Define a name-to-network service mapping point (NSAP) mapping that can then be used with
commands that require NSAPs and system IDs.

e
Syntax
Parameters

Defaults
Command Modes
Command
History

clns host name nsap
name

Enter an alphanumeric string to identify the name-to-NSAP mapping.

nsap

Enter a specific NSAP address that will be associated with the name parameter.

Not configured.
ROUTER ISIS

Version 8.3.12.0

Introduced on S4810

Intermediate System to Intermediate System (IS-IS) | 865

www.dell.com | support.dell.com

Related
Commands

Usage
Information

hostname dynamic

Enables dynamic learning of hostnames from routers in the domain and
allows the routers to advertise the hostnames in LSPs.

Use this command to configure a shortcut name that can used instead of entering a long string
of numbers associated with an NSAP address.

debug isis
Enable debugging for all IS-IS operations.

e
Syntax

debug isis
To disable debugging of IS-IS, enter no debug isis.

Command Modes

EXEC Privilege

Command
History

Version 8.3.12.0

Usage
Information

Introduced on S4810

Entering debug isis enables all debugging parameters.
Use this command to display all debugging information in one output. To turn off debugging, you
normally enter separate no forms of each command. Enter the no debug isis command to disable all
debug messages for IS-IS at once.

debug isis adj-packets
Enable debugging on adjacency-related activity such as hello packets that are sent and received on
IS-IS adjacencies.

e
Syntax

debug isis adj-packets [interface]
To turn off debugging, use the no debug isis adj-packets [interface] command.

Parameters

interface

(OPTIONAL) Identifies the interface type slot/port as one of the following:
•
•

•
•
•
Command Modes

866

|

For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by
the slot/port information.
For a Port Channel interface, enter the keyword port-channel followed by a
number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
For a SONET interface, enter the keyword sonet followed by the slot/port
information.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.

EXEC Privilege

Intermediate System to Intermediate System (IS-IS)

Command
History

Version 8.3.12.0

Introduced on S4810

debug isis local-updates
Enables debugging on a specific interface and provides diagnostic information to debug IS-IS local
update packets.

e
Syntax

debug isis local-updates [interface]
To turn off debugging, enter the no debug isis local-updates [interface] command.

Parameters

interface

(OPTIONAL) Identifies the interface type slot/port as one of the following:
For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by
the slot/port information.
For a Port Channel interface, enter the keyword port-channel followed by a
number:
C-Series and S-Series Range: 1-128

•
•

E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
For a SONET interface, enter the keyword sonet followed by the slot/port
information.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.

•
•
•
Command Modes

EXEC Privilege

Command
History

Version 8.3.12.0

Introduced on S4810

Version 6.3.1.0

Introduced

debug isis snp-packets
Enable debugging on a specific interface and provides diagnostic information to debug IS-IS complete
sequence number PDU (CSNP) and partial sequence number PDU (PSNP) packets.

e
Syntax

debug isis snp-packets [interface]
To turn off debugging, enter the no debug isis snp-packets [interface] command.

Intermediate System to Intermediate System (IS-IS) | 867

www.dell.com | support.dell.com

Parameters

interface

(OPTIONAL) Identifies the interface type slot/port as one of the following:
•
•

•
•
•

For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed
by the slot/port information.
For a Port Channel interface, enter the keyword port-channel followed by a
number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
For a SONET interface, enter the keyword sonet followed by the slot/port
information.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.

Command Modes

EXEC Privilege

Command
History

Version 8.3.12.0

Introduced on S4810

Version 6.3.1.0

Introduced

debug isis spf-triggers
Enable debugging on the events that triggered IS-IS shortest path first (SPF) events for debugging
purposes.

e
Syntax

debug isis spf-triggers
To turn off debugging, enter no debug isis spf-triggers.

Command Modes

EXEC Privilege

Command
History

Version 8.3.12.0

Introduced on S4810

Version 6.3.1.0

Introduced

debug isis update-packets
Enable debugging on Link State PDUs (LSPs)

e
Syntax

that are detected by a router.

debug isis update-packets [interface]
To turn off debugging, enter the no debug isis update-packets [interface] command.

868

|

Intermediate System to Intermediate System (IS-IS)

Parameters

interface

(OPTIONAL) Identifies the interface type slot/port as one of the following:
•
•

•
•
•

For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed
by the slot/port information.
For a Port Channel interface, enter the keyword port-channel followed by a
number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
For a SONET interface, enter the keyword sonet followed by the slot/port
information.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.

Command Modes

EXEC Privilege

Command
History

Version 8.3.12.0

Introduced on S4810

Version 6.3.1.0

Introduced

default-information originate
Generate a default route into an IS-IS routing domain and controls the distribution of default
information.

e
Syntax

default-information originate [always] [metric metric] [route-map map-name]
To disable the generation of a default route into the specified IS-IS routing domain, enter the no
default-information originate [always] [metric metric] [route-map map-name] command.

Parameters

Defaults
Command Modes

always

(OPTIONAL) Enter the keyword always to have the default route always
advertised

metric metric

(OPTIONAL) Enter the keyword metric followed by a number to assign to the
route.
Range: 0 to 16777215

route-map
map-name

(OPTIONAL) A default route will be generated by the routing process if the route
map is satisfied.

Not configured.
ROUTER ISIS (for IPv4)
CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6)

Command
History

Usage
Information

Version 8.3.12.0

Introduced on S4810

Version 7.5.1.0

Introduced IPv6 ISIS support

Version 6.3.1.0

Introduced

When you use this command to redistribute routes into a routing domain, the router becomes an
autonomous system (AS) boundary router. An AS boundary router does not always generate a default
route into a routing domain. The router still requires its own default route before it can generate one.

Intermediate System to Intermediate System (IS-IS) | 869

www.dell.com | support.dell.com

How a metric value assigned to a default route is advertised depends on how on the configuration of
the metric-style command. If the metric-style is set for narrow mode and the metric value in the
default-information originate command is set to a number higher than 63, the metric value advertised
in LSPs will be 63. If the metric-style is set for wide mode, their the metric value in the
default-information originate command is advertised.
Related
Commands

redistribute

Redistribute routes from one routing domain to another routing domain.

isis metric

Configure a metric for an interface

metric-style

Set the metric style for the router.

show isis database

Display the IS-IS link state database.

description
ces

Syntax

Enter a description of the IS-IS routing protocol

description {description}
To remove the description, use the no description {description} command.

Parameters

Defaults
Command Modes
Command
History

Related
Commands

description

Enter a description to identify the IS-IS protocol (80 characters maximum).

No default behavior or values
ROUTER ISIS
Version 8.3.12.0

Introduced on S4810

pre-7.7.1.0

Introduced

router isis

Enter ROUTER mode on the switch.

distance
Define the administrative distance for learned routes.

e
Syntax

distance weight [ip-address mask [prefix-list]]
To return to the default values, enter the no distance weight command.

Parameters

870

|

weight

The administrative distance value indicates the reliability of a routing information
source.
Range: 1 to 255. (A higher relative value indicates lower reliability. Routes with
smaller values are given preference.)
Default: 115

Intermediate System to Intermediate System (IS-IS)

Defaults
Command Modes

ip-address mask

(OPTIONAL) Enter an IP address in dotted decimal format and enter a mask in
either dotted decimal or /prefix format.

prefix-list

(OPTIONAL) Enter the name of a prefix list name.

weight = 115
ROUTER ISIS (for IPv4)
CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6)

Command
History

Usage
Information

Version 8.3.12.0

Introduced on S4810

Version 6.3.1.0

Introduced

The administrative distance indicates the trust value of incoming packets. A low administrative
distance indicates a high trust rate. A high value indicates a lower trust rate. For example, a weight of
255 is interpreted that the routing information source is not trustworthy and should be ignored.

distribute-list in
Filter network prefixes received in updates.

e
Syntax

distribute-list prefix-list-name in [interface]
To return to the default values, enter the no distribute-list prefix-list-name in [interface]
command.

Parameters

prefix-list-name

Specify the prefix list to filter prefixes in routing updates.

interface

(OPTIONAL) Identifies the interface type slot/port as one of the following:
•
•

•
•
•
Defaults
Command Modes

For a1- Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
For a Port Channel interface, enter the keyword port-channel followed by a
number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
For a SONET interface, enter the keyword sonet followed by the slot/port
information.
For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.

Not configured.
ROUTER ISIS (for IPv6)
CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6)

Command
History

Version 8.3.12.0

Introduced on S4810

Version 7.5.1.0

Introduced IPv6 ISIS support

Version 6.3.1.0

Introduced

Intermediate System to Intermediate System (IS-IS) | 871

www.dell.com | support.dell.com

Related
Commands

distribute-list out

Suppress networks from being advertised in updates.

redistribute

Redistributes routes from one routing domain to another routing domain.

distribute-list out
Suppress network prefixes from being advertised in outbound updates.

e
Syntax

distribute-list prefix-list-name out [connected | bgp as number | ospf process-id | rip | static]
To return to the default values, enter the no distribute-list prefix-list-name out [bgp as number
connected | ospf process-id | rip | static] command.

Parameters

Defaults
Command Modes

prefix-list-name

Specify the prefix list to filter prefixes in routing updates.

connected

(OPTIONAL) Enter the keyword connected for directly connected routing
process.

ospf process-id

(OPTIONAL) Enter the keyword ospf followed by the OSPF process-ID number.
Range: 1 to 65535

bgp as number

(OPTIONAL) Enter the BGP followed by the AS Number.
Range: 1 to 65535

rip

(OPTIONAL) Enter the keyword rip for RIP routes.

static

(OPTIONAL) Enter the keyword static for user-configured routing process.

Not configured.
ROUTER ISIS (for IPv4)
CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6)

Command
History

Usage
Information
Related
Commands

Version 8.3.12.0

Introduced on S4810

Version 7.5.1.0

Introduced IPv6 ISIS support

Version 6.3.1.0

Introduced

You can assign a name to a routing process so a prefix list will be applied to only the routes derived
from the specified routing process.
distribute-list in

Filters networks received in updates.

redistribute

Redistributes routes from one routing domain to another routing domain.

distribute-list redistributed-override
Suppress flapping of routes when the same route is redistributed into IS-IS from multiple routers in the
network.

e
Syntax

872

|

distribute-list redistributed-override in

Intermediate System to Intermediate System (IS-IS)

To return to the default, use the no distribute-list redistributed-override in command.
Defaults
Command Modes

No default behavior or values
ROUTER ISIS (for IPv4)
CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6)

Command
History

Usage
Information

Version 8.3.12.0

Introduced on S4810

Version 7.8.1.0

Introduced IPv6 ISIS support

Version 6.3.1.0

Introduced

When the command is executed, IS-IS will not download the route to the routing table if the same route
was redistributed into IS-IS routing protocol on the same router.

domain-password
Set the authentication password for a routing domain.

e
Syntax

domain-password [hmac-md5 | encryption-type] password
To disable the password, enter no domain-password.

Parameters

Defaults
Command Modes
Command
History

Usage
Information
Related
Commands

hmac-md5

(OPTIONAL) Enter the keyword hmac-md5 to encrypt the password using
MD5.

encryption-type

(OPTIONAL) Enter 7 to encrypt the password using DES.

password

Enter an alphanumeric string up to 16 characters long.
If you do not specify an encryption type or hmac-md5 keywords, the password is
processed as plain text which provides limited security.

No default password.
ROUTER ISIS
Version 8.3.12.0

Introduced on S4810

Version 6.3.1.0

Introduced

The domain password is inserted in Level 2 link state PDUs (LSPs), complete sequence number PDUs
(CSNPs), and partial sequence number PDUs (PSNPs).
area-password

Configure an IS-IS area authentication password.

isis password

Configure the authentication password for an interface.

graceful-restart ietf
e

Enable Graceful Restart on an IS-IS router.

Intermediate System to Intermediate System (IS-IS) | 873

www.dell.com | support.dell.com

Syntax

graceful-restart ietf
To return to the default, use the no graceful-restart ietf command.

Parameters

Defaults
Command Modes
Command
History

Usage
Information

ietf

Enter ietf to enable Graceful Restart on the IS-IS router.

Default is Graceful Restart disabled.
ROUTER ISIS
Version 8.3.12.0

Introduced on S4810

Version 8.3.1.0

Introduced on the E-Series

A Restart TLV included in every Graceful Restart enabled router’s HELLO PDUs. This enables the
(re)starting as well as the existing ISIS peers to detect the GR capability of the routers on the connected
network. A flag in the Restart TLV contains Restart Request (RR), Restart Acknowledge (RA) and
Suppress Adjacency Advertisement (SA) bit flags.
The ISIS Graceful Restart enabled router can co-exist in mixed topologies where some routers are
Graceful Restart enabled and others are not. For neighbors that are not Graceful Restart enabled, the
restarting router brings up the adjacency per the usual methods.

graceful-restart interval
Set the Graceful Restart grace period, the time during which all Graceful Restart attempts are
prevented.

e
Syntax

graceful-restart interval minutes
To return to the default, use the no graceful-restart interval command.

Parameters

Defaults
Command Modes
Command
History

minutes

Range: 1-20 minutes
Default: 5 minutes

5 minutes
ROUTER ISIS
Version 8.3.12.0

Introduced on S4810

Version 8.3.1.0

Introduced on the E-Series

graceful-restart t1
Set the Graceful Restart wait time before unacknowledged restart requests are generated. This is the
interval before the system sends a Restart Request (an IIH with RR bit set in Restart TLV) until the
CSNP is received from the helping router.

e

Syntax

874

|

graceful-restart t1 {interval seconds | retry-times value}

Intermediate System to Intermediate System (IS-IS)

To return to the default, use the no graceful-restart t1command.
Parameters

Defaults
Command Modes
Command
History

interval

Enter the keyword interval to set the wait time.
Range: 5-120 seconds
Default: 5 seconds

retry-times

Enter the keyword retry-times to set the number of times the
request interval is extended until a CSNP is received from the
helping router.
Range: 1-10 attempts
Default: 1

above
ROUTER ISIS
Version 8.3.12.0

Introduced on S4810

Version 8.3.1.0

Introduced on the E-Series

graceful-restart t2
Configure the wait time for the Graceful Restart timer T2 that a restarting router uses as the wait time
for each database to synchronize.

e
Syntax

graceful-restart t2 {level-1 | level-2} seconds
To return to the default, use the no graceful-restart t2command.

Parameters

Defaults
Command Modes
Command
History

level-1, level-2

Enter the keyword level-1 or level-2 to identify the database
instance type to which the wait interval applies.

seconds

Range: 5-120 seconds
Default: 30 seconds

30 seconds
ROUTER ISIS
Version 8.3.12.0

Introduced on S4810

Version 8.3.1.0

Introduced on the E-Series

graceful-restart t3
Configure the overall wait time before Graceful Restart is completed.

e
Syntax

graceful-restart t3 {adjacency | manual} seconds
To return to the default, use the no graceful-restart t3command.

Intermediate System to Intermediate System (IS-IS) | 875

www.dell.com | support.dell.com

Parameters

adjacency

Enter the keyword adjacency so that the restarting router receives the

remaining time value from its peer and adjusts its T3 value
accordingly if user has configured this option.
Enter the keyword manual to specify a time value that the restarting
router uses.
Range: 50-120 seconds
default: 30 seconds

manual

Defaults
Command Modes
Command
History

Usage
Information

manual, 30 seconds
ROUTER ISIS
Version 8.3.12.0

Introduced on S4810

Version 8.3.1.0

Introduced on the E-Series

The running router sets remaining time value to the current adjacency hold time. This can be
overridden by implementing this command.
Override the default restart-wait time by entering the no graceful-restart restart-wait command.
When restart-wait is disabled, the current adjacency hold time is used.
Be sure to set the t3 timer to adjacency on the restarting router when implementing this command. The
restarting router gets the remaining time value from its peer and adjusts its T3 value accordingly only
when you have configured graceful-restart t3 adjacency.

Related
Commands

Enable the Graceful Restart maximum wait time before a
restarting peer comes up.

graceful-restart restart-wait

graceful-restart restart-wait
Enable the Graceful Restart maximum wait time before a restarting peer comes up.

e

Be sure to set the t3 timer to adjacency on the restarting router when implementing this command.
Syntax

graceful-restart restart-wait seconds
To return to the default, use the no graceful-restart restart-wait command.

Parameters

Defaults
Command Modes
Command
History

876

|

seconds

Range: 5-300 seconds
Default: 30 seconds

30 seconds
ROUTER ISIS
Version 8.3.12.0

Introduced on S4810

Version 8.3.1.0

Introduced on the E-Series

Intermediate System to Intermediate System (IS-IS)

Related
Commands

Configure the overall wait time before Graceful Restart is completed.

graceful-restart t3

hello padding
Use to turn ON or OFF padding for LAN and point-to-point hello PDUs or to selectively turn padding
ON or OFF for LAN or point-to-point hello PDUs.

e
Syntax

hello padding [multi-point | point-to-point]
To return to default, use no hello padding [multi-point | point-to-point].

Parameters

Defaults
Command Modes
Command
History
Usage
Information

Related
Commands

multi-point

(OPTIONAL) Enter the keyword multi-point to pad only LAN hello
PDUs.

point-to-point

(OPTIONAL) Enter the keyword point-to-point to pad only
point-to-point PDUs.

Both LAN and point-to-point hello PDUs are padded.
ROUTER ISIS
Version 8.3.12.0

Introduced on S4810

IS-IS hellos are padded to the full maximum transmission unit (MTU) size. Padding IS-IS Hellos
(IIHS) to the full MTU provides early error detection of large frame transmission problems or
mismatched MTUs on adjacent interfaces.
isis hello padding

Turn ON or OFF hello padding on an interface basis.

hostname dynamic
Enables dynamic learning of hostnames from routers in the domain and allows the routers to advertise
the hostname in LSPs.

e
Syntax

hostname dynamic
To disable this command, enter no hostname dynamic.

Defaults
Command Modes
Command
History
Usage
Information
Related
Commands

Enabled.
ROUTER ISIS
Version 8.3.12.0

Introduced on S4810

Use this command to build name-to-systemID mapping tables through the protocol. All show
commands that display systems also display the hostname.
clns host

Define a name-to-NSAP mapping.

Intermediate System to Intermediate System (IS-IS) | 877

www.dell.com | support.dell.com

ignore-lsp-errors
Ignore LSPs with bad checksums instead of purging those LSPs.

e
Syntax

ignore-lsp-errors
To return to the default values, enter no ignore-lsp-errors.

Defaults
Command Modes

In IS-IS, the default deletes LSPs with internal checksum errors (no ignore-lsp-errors).
ROUTER ISIS

Command
History
Usage
Information

Version 8.3.12.0

Introduced on S4810

IS-IS normally purges LSPs with an incorrect data link checksum, causing the LSP source to
regenerate the message. A cycle of purging and regenerating LSPs can occur when a network link
continues to deliver accurate LSPs even though there is a link causing data corruption. This could
cause disruption to your system operation.

ip router isis
Configure IS-IS routing processes on an interface and attach an area tag name to the routing process.

e
Syntax

ip router isis [tag]
To disable IS-IS on an interface, enter the no ip router isis [tag] command.

Parameters

Defaults
Command Modes
Command
History

Usage
Information
Related
Commands

tag

(OPTIONAL) The tag you specify identifies a specific area routing process. If you do not specify
a tag, a null tag is assigned.

No processes are configured.
INTERFACE
Version 8.3.12.0

Introduced on S4810

Version 7.5.1.0

Introduced

You must use the net command to assign a network entity title to enable IS-IS.

net

Configures an IS-IS network entity title (NET) for the routing process.

router isis

Enables the IS-IS routing protocol.

ipv6 router isis
Enable the IPv6 IS-IS routing protocol and specify an IPv6 IS-IS process.

e
Syntax

878

|

ipv6 router isis [tag]

Intermediate System to Intermediate System (IS-IS)

To disable IS-IS routing, enter no router isis [tag].
Parameters

Defaults
Command Modes
Command
History

Usage
Information

tag

(OPTIONAL) This is a unique name for a routing process. A null tag is assumed if the tag option
is not specified. The tag name must be unique for all IP router processes for a given router.

Not configured.
ROUTER ISIS
Version 8.3.12.0

Introduced on S4810

Version 7.5.1.0

Introduced on E-Series

You must configure a network entity title (the net command) to specify the area address and the router
system ID.
You must enable routing on one or more interfaces to establish adjacencies and establish dynamic
routing.
Only one IS-IS routing process can be configured to perform Level 2 routing. A level-1-2 designation
performs Level 1 and Level 2 routing at the same time.

Related
Commands

net

Configure an IS-IS network entity title (NET) for a routing process.

is-type

Assign a type for a given area.

isis circuit-type
Configure the adjacency type on interfaces.

e
Syntax

isis circuit-type {level-1 | level-1-2 | level-2-only}
To return to the default values, enter no isis circuit-type.

Parameters

Defaults
Command Modes
Command
History

level-1

You can form a Level 1 adjacency if there is at least one common area address between this
system and neighbors.
You cannot form Level 2 adjacencies on this interface.

level-1-2

You can form a Level 1 and Level 2 adjacencies when the neighbor is also configured as
Level-1-2 and there is at least one common area, if not, then a Level 2 adjacency is
established.
This is the default.

level-2-only

You can form a Level 2 adjacencies when other Level 2 or Level 1-2 routers and their
interfaces are configured for Level 1-2 or Level 2. Level 1 adjacencies cannot be
established on this interface.

level-1-2
INTERFACE
Version 8.3.12.0

Introduced on S4810

Intermediate System to Intermediate System (IS-IS) | 879

www.dell.com | support.dell.com

Usage
Information

Because the default establishes Level 1 and Level 2 adjacencies, you do not need to configure this
command. Routers in an IS-IS system should be configured as a Level 1-only, Level 1-2, or Level
2-only system.
Only configure interfaces as Level 1 or Level 2 on routers that are between areas (for example, a Level
1-2 router) to prevent the software from sending unused hello packets and wasting bandwidth.

isis csnp-interval
Configure the IS-IS complete sequence number PDU (CSNP) interval on an interface.

e
Syntax

isis csnp-interval seconds [level-1 | level-2]
To return to the default values, enter the no isis csnp-interval [seconds] [level-1 | level-2]
command.

Parameters

Defaults
Command Modes
Command
History
Usage
Information

seconds

Interval of transmission time between CSNPs on multi-access networks for the designated
intermediate system.
Range: 0 to 65535
Default: 10

level-1

(OPTIONAL) Independently configures the interval of time between transmission of CSNPs
for Level 1.

level-2

(OPTIONAL) Independently configures the interval of time between transmission of CSNPs
for Level 2.

seconds = 10; level-1 (if not otherwise specified)
INTERFACE
Version 8.3.12.0

Introduced on S4810

The default values of this command are typically satisfactory transmission times for a specific interface
on a designated intermediate system. To maintain database synchronization, the designated routers
send CSNPs.
Level 1 and Level 2 CSNP intervals can be configured independently.

isis hello-interval
Specify the length of time between hello packets sent.

e
Syntax

isis hello-interval seconds [level-1 | level-2]
To return to the default values, enter the no isis hello-interval [seconds] [level-1 | level-2]
command.

880

|

Intermediate System to Intermediate System (IS-IS)

Parameters

Defaults
Command Modes
Command
History
Usage
Information

Related
Commands

seconds

Allows you to set the length of time between hello packet transmissions.
Range: 1 to 65535
Default: 10

level-1

(OPTIONAL) Select this value to configure the hello interval for Level 1.
This is the default.

level-2

(OPTIONAL) Select this value to configure the hello interval for Level 2.

seconds = 10; level-1 (if not otherwise specified)
INTERFACE
Version 8.3.12.0

Introduced on S4810

Hello packets are held for a length of three times the value of the hello interval. Use a high hello
interval seconds to conserve bandwidth and CPU usage. Use a low hello interval seconds for faster
convergence (but uses more bandwidth and CPU resources).
isis hello-multiplier

Specifies the number of IS-IS hello packets a neighbor must miss before the
router should declare the adjacency as down.

isis hello-multiplier
Specify the number of IS-IS hello packets a neighbor must miss before the router declares the
adjacency down.

e
Syntax

isis hello-multiplier multiplier [level-1 | level-2]
To return to the default values, enter no isis hello-multiplier [multiplier] [level-1 | level-2].

Parameters

Defaults
Command Modes
Command
History
Usage
Information

multiplier

Specifies an integer that sets the multiplier for hello holding time.
Never configure a hello-multiplier lower then the default (3).
Range: 3 to 1000
Default: 3

level-1

(OPTIONAL) Select this value to configure the hello multiplier independently for Level 1
adjacencies.
This is the default.

level-2

(OPTONAL) Select this value to configure the hello multiplier independently for Level 2
adjacencies.

multiplier =3; level-1 (if not otherwise specified)
INTERFACE
Version 8.3.12.0

Introduced on S4810

The holdtime (the product of the hello-multiplier multiplied by the hello-interval) determines how long
a neighbor waits for a hello packet before declaring the neighbor is down so routes can be recalculated.

Intermediate System to Intermediate System (IS-IS) | 881

www.dell.com | support.dell.com

Related
Commands

isis hello-interval

Specify the length of time between hello packets.

isis hello padding
Turn ON or OFF padding of hello PDUs from the interface mode.

e
Syntax

isis hello padding
To return to the default, use the no isis hello padding.

Defaults
Command Modes
Command
History
Usage
Information
Related
Commands

Padding of hello PDUs is enabled (ON).
INTERFACE
Version 8.3.12.0

Introduced on S4810

Hello PDUs are “padded” only when both the global and interface padding options are ON. Turning
either one OFF will disable padding for the corresponding interface(s).
hello padding

Turn ON or OFF padding for LAN and point-to-point hello PDUs.

isis ipv6 metric
Assign metric to an interface for use with IPv6 information.

e
Syntax

isis ipv6 metric default-metric [level-1 | level-2]
To return to the default values, enter no ipv6 isis metric [default-metric] [level-1 | level-2]
command.

Parameters

Defaults
Command Modes

882

|

default-metric

Metric assigned to the link and used to calculate the cost from each other router via the
links in the network to other destinations.
You can configure this metric for Level 1 or Level 2 routing.
Range:0 to 16777215
Default: 10

level-1

(OPTIONAL) Enter level-1 to configure the shortest path first (SPF) calculation for
Level 1 (intra-area) routing.
This is the default.

level-2

(OPTIONAL) Enter level-2 to configure the SPF calculation for Level 2 (inter-area)
routing.

default-metric = 10; level-1 (if not otherwise specified)
INTERFACE

Intermediate System to Intermediate System (IS-IS)

Command
History

Usage
Information

Version 8.3.12.0

Introduced on S4810

Version 7.5.1.0

Introduced on E-Series

Dell Force10 recommends configuring metrics on all interfaces. Without configuring this command,
the IS-IS metrics are similar to hop-count metrics.

isis metric
Assign a metric to an interface.

e
Syntax

isis metric default-metric [level-1 | level-2]
To return to the default values, enter no isis metric [default-metric] [level-1 | level-2].

Parameters

Defaults
Command Modes
Command
History
Usage
Information

default-metric

Metric assigned to the link and used to calculate the cost from each other router via the
links in the network to other destinations.
You can configure this metric for Level 1 or Level 2 routing.
Range: 0 to 63 for narrow and transition metric styles; 0 to 16777215 for wide metric
styles.
Default: 10

level-1

(OPTIONAL) Enter level-1 to configure the shortest path first (SPF) calculation for
Level 1 (intra-area) routing.
This is the default.

level-2

(OPTIONAL) Enter level-2 to configure the SPF calculation for Level 2 (inter-area)
routing.

default-metric = 10; level-1 (if not otherwise specified)
INTERFACE
Version 8.3.12.0

Introduced on S4810

Dell Force10 recommends configuring metrics on all interfaces. Without configuring this command,
the IS-IS metrics are similar to hop-count metrics.

isis network point-to-point
Enable the software to treat a broadcast interface as a point-to-point interface.

e
Syntax

isis network point-to-point
To disable the feature, enter no isis network point-to-point.

Defaults
Command Modes

Not enabled.
INTERFACE

Intermediate System to Intermediate System (IS-IS) | 883

www.dell.com | support.dell.com

Command
History

Version 8.3.12.0

Introduced on S4810

isis password
Configure an authentication password for an interface.

e
Syntax

isis password [hmac-md5] password [level-1 | level-2]
To delete a password, enter the no isis password [password] [level-1 | level-2] command.

Parameters

Defaults
Command Modes
Command
History
Usage
Information

encryption-type

(OPTIONAL) Enter 7 to encrypt the password using DES.

hmac-md5

(OPTIONAL) Enter the keyword hmac-md5 to encrypt the password using MD5.

password

Assign the interface authentication password.

level-1

(OPTIONAL) Independently configures the authentication password for Level 1. The
router acts as a station router for Level 1 routing.
This is the default.

level-2

(OPTIONAL) Independently configures the authentication password for Level 2. The
router acts as an area router for Level 2 routing.

No default password. level-1 (if not otherwise specified)
INTERFACE
Version 8.3.12.0

Introduced on S4810

To protect your network from unauthorized access, use this command to prevent unauthorized routers
from forming adjacencies.
You can assign different passwords for different routing levels by using the level-1 and level-2
keywords.
The no form of this command disables the password for Level 1 or Level 2 routing, using the
respective keywords level-1 or level-2.
This password provides limited security as it is processed as plain text.

isis priority
Set priority of the designated router you select.

e
Syntax

isis priority value [level-1 | level-2]
To return to the default values, enter the no isis priority [value] [level-1 | level-2] command.

884

|

Intermediate System to Intermediate System (IS-IS)

Parameters

Defaults
Command Modes
Command
History
Usage
Information

value

This value sets the router priority. The higher the value, the higher the priority.
Range: 0 to 127
Default: 64

level-1

(OPTIONAL) Specify the priority for Level 1.
This is the default.

level-2

(OPTIONAL) Specify the priority for Level 2.

value = 64; level-1 (if not otherwise specified)
INTERFACE
Version 8.3.12.0

Introduced on S4810

You can configure priorities independently for Level 1 and Level 2. Priorities determine which router
on a LAN will be the designated router. Priorities are advertised within hellos. The router with the
highest priority will become the designated intermediate system (DIS).
Routers with a priority of 0 cannot be a designated router. Setting the priority to 0 lowers the chance of
this system becoming the DIS, but does not prevent it. If all the routers have priority 0, one with
highest MAC address will become DIS even though its priority is 0.

is-type
Configure IS-IS operating level for a router.

e
Syntax

is-type {level-1 | level-1-2 | level-2-only}
To return to the default values, enter no is-type.

Parameters

Defaults
Command Modes
Command
History
Usage
Information

level-1

Allows a router to act as a Level 1 router.

level-1-2

Allows a router to act as both a Level 1 and Level 2 router.
This is the default.

level-2-only

Allows a router to act as a Level 2 router.

level-1-2
ROUTER ISIS
Version 8.3.12.0

Introduced on S4810

The IS-IS protocol automatically determines area boundaries and are able to keep Level 1 and Level 2
routing separate. Poorly planned use of this feature may cause configuration errors, such as accidental
area partitioning.
If you are configuring only one area in your network, you do not need to run both Level 1 and Level 2
routing algorithms. The IS type can be configured as Level 1.

Intermediate System to Intermediate System (IS-IS) | 885

www.dell.com | support.dell.com

log-adjacency-changes
Generate a log messages for adjacency state changes.

e
Syntax

log-adjacency-changes
To disable this function, enter no log-adjacency-changes.

Defaults
Command Modes
Command
History
Usage
Information

Adjacency changes are not logged.
ROUTER ISIS
Version 8.3.12.0

Introduced on S4810

This command enables you to monitor adjacency state changes, which is useful when you monitor
large networks. Messages are logged in the system error message facility.

lsp-gen-interval
Set the minimum interval between successive generations of link-state packets (LSPs).

e
Syntax

lsp-gen-interval [level-l | level-2] interval seconds [initial_wait_interval seconds
[second_wait_interval seconds]]
To restore default values, use the no lsp-gen-interval [level-l | level-2] interval seconds
[initial_wait_interval seconds [second_wait_interval seconds]] command.

Parameters

Defaults
Command Modes
Command
History

886

|

level-l

(OPTIONAL) Enter the keyword level-1 to apply the configuration to
generation of Level-1 LSPs.

level-2

(OPTIONAL) Enter the keyword level-2 to apply the configuration to
generation of Level-2 LSPs.

interval seconds

Enter the maximum number of seconds between LSP generations.
Range: 0 to 120 seconds
Default: 5 seconds

initial_wait_interval
seconds

(OPTIONAL) Enter the initial wait time, in seconds, before running the first
LSP generation.
Range: 0 to 120 seconds
Default: 1 second

second_wait_interval
seconds

(OPTIONAL) Enter the wait interval, in seconds, between the first and
second LSP generation.
Range: 0 to 120 seconds
Default: 5 seconds

Defaults as above
ROUTER ISIS
Version 8.3.12.0

Introduced on S4810

Version 7.5.1.0

Expanded to support LSP Throttling Enhancement

Intermediate System to Intermediate System (IS-IS)

Usage
Information

LSP throttling slows down the frequency at which LSPs are generated during network instability. Even
though throttling LSP generations slows down network convergence, no throttling can result in a
network not functioning as expected. If network topology is unstable, throttling slows down the
scheduling of LSP generations until the topology regains its stability.
The first generation is controlled by the initial wait interval and the second generation is controlled by
the second wait interval. Each subsequent wait interval is twice as long as the previous one until the
wait interval reaches the maximum wait time specified (interval seconds). Once the network calms
down and there are no triggers for two times the maximum interval, fast behavior is restored (the initial
wait time).

lsp-mtu
Set the maximum transmission unit (MTU) of IS-IS link-state packets (LSPs). This command only
limits the size of LSPs generated by this router.

e
Syntax

lsp-mtu size
To return to the default values, enter no lsp-mtu.

Parameters

Defaults
Command Modes
Command
History

Usage
Information

size

The maximum LSP size, in bytes.
Range: 128 to 1497 for non-jumbo mode; 128 to 9195 for jumbo mode.
Default: 1497

1497 bytes
ROUTER ISIS
Version 8.3.12.0

Introduced on S4810

Version 7.5.1.0

Expanded to support LSP Throttling Enhancement

The link MTU and the LSP MTU size must be the same.
Since each device can generate a maximum of 255 LSPs, consider carefully whether the lsp-mtu
command should be configured.

lsp-refresh-interval
Set the link state PDU (LSP) refresh interval. LSPs must be refreshed before they expire. When the
LSPs are not refreshed after a refresh interval, they are kept in a database until their max-lsp-lifetime
reaches zero and then LSPs will be purged.

e

Syntax

lsp-refresh-interval seconds
To restore the default refresh interval, enter no lsp-refresh-interval.

Intermediate System to Intermediate System (IS-IS) | 887

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes
Command
History

Usage
Information

seconds

The LSP refresh interval, in seconds. This value has to be less than the seconds
value specified with the max-lsp-lifetime command.
Range: 1 to 65535 seconds.
Default: 900

900 seconds
ROUTER ISIS
Version 8.3.12.0

Introduced on S4810

Version 7.5.1.0

Expanded to support LSP Throttling Enhancement

The refresh interval determines the rate at which route topology information is transmitted preventing
the information from becoming obsolete.
The refresh interval must be less than the LSP lifetime specified with the max-lsp-lifetime command.
A low value reduces the amount of time that undetected link state database corruption can persist at the
cost of increased link utilization. A higher value reduces the link utilization caused by the flooding of
refreshed packets.

Related
Commands

max-lsp-lifetime

Sets the maximum interval that LSPs persist without being refreshed

max-area-addresses
Configure manual area addresses.

e
Syntax

max-area-addresses number
To return to the default values, enter no max-area-addresses.

Parameters

Defaults
Command Modes
Command
History

Usage
Information

888

|

number

Set the maximum number of manual area addresses.
Range: 3 to 6.
Default: 3

3 addresses
ROUTER ISIS
Version 8.3.12.0

Introduced on S4810

Version 7.5.1.0

Expanded to support LSP Throttling Enhancement

Use this command to configure the number of area addresses on router. This value should be consistent
with routers in the same area, or else, the router will form only Level 2 adjacencies. The value should
be same among all the routers to form Level 1 adjacencies.

Intermediate System to Intermediate System (IS-IS)

max-lsp-lifetime
Set the maximum time that link-state packets (LSPs) exist without being refreshed.

e
Syntax

max-lsp-lifetime seconds
To restore the default time, enter no max-lsp-lifetime.

Parameters

Defaults
Command Modes

seconds

1200 seconds
ROUTER ISIS

Command
History
Usage
Information

The maximum lifetime of LSP in seconds. This value must be greater than the
lsp-refresh-interval. The higher the value the longer the LSPs are kept.
Range: 1 to 65535
Default: 1200

Version 8.3.12.0

Introduced on S4810

Change the maximum LSP lifetime with this command. The maximum LSP lifetime must always be
greater than the LSP refresh interval.
The seconds parameter enables the router to keep LSPs for the specified length of time. If the value is
higher, the overhead is reduced on slower-speed links.

Related
Commands

lsp-refresh-interval

Use this command to set the link-state packet (LSP) refresh interval.

maximum-paths
Allows you to configure the maximum number of equal cost paths allowed in a routing table.

e
Syntax

maximum-paths number
To return to the default values, enter no maximum-paths.

Parameters

Defaults
Command Mode

number

Enter a number as the maximum number of parallel paths an IP routing installs in a
routing table.
Range: 1 to 16.
Default: 4

4
ROUTER ISIS (for IPv4)
CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6)

Command
History

Version 8.3.12.0

Introduced on S4810

Intermediate System to Intermediate System (IS-IS) | 889

www.dell.com | support.dell.com

Version 7.8.1.0

Introduced multi-topology ISIS support

Version 6.3.1.0

Introduced

metric-style
Configure a router to generate and accept old-style, new-style, or both styles of type, length, and values
(TLV).

e
Syntax

metric-style {narrow [transition] | transition | wide [transition]} [level-1 | level-2]
To return to the default values, enter the no metric-style {narrow [transition] | transition | wide
[transition]} [level-1 | level-2] command.

Parameters

Defaults
Command Modes
Command
History
Usage
Information

narrow

Allows you to configure the E-Series to generate and accept old-style TLVs.
Metric range: 0 to 63

transition

Allows you to configure the E-Series to generate both old-style and new-style TLVs.
Metric range: 0 to 63

wide

Allows you to configure the E-Series to generate and accept only new-style TLVs.
Metric range: 0 to 16777215

level-1

Enables the metric style on Level 1.

level-2

Enables the metric style on Level 2.

narrow; if no Level is specified, Level-1 and Level-2 are configured.
ROUTER ISIS
Version 8.3.12.0

Introduced on S4810

If you enter the metric-style wide command, the FTOS generates and accepts only new-style TLVs.
The router uses less memory and other resources rather than generating both old-style and new-style
TLVs.
The new-style TLVs have wider metric fields than old-style TLVs.

Related
Commands

isis metric

Use this command to configure a metric for an interface.

multi-topology
Enables Multi-Topology IS-IS. It also allows enabling/disabling of old and new style TLVs for IP
prefix information in the LSPs.

e
Syntax

multi-topology [transition]
To return to a single topology configuration, enter no multi-topology [transition].

Parameters

890

|

transition

Intermediate System to Intermediate System (IS-IS)

Defaults
Command Mode
Command
History

Disabled
CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6
Version 8.3.12.0

Introduced on S4810

Version 7.8.1.0

Introduced

net
Use this mandatory command to configure an IS-IS network entity title (NET) for a routing process. If
a NET is not configured, the IS-IS process will not start.

e
Syntax

net network-entity-title
To remove a net, enter no net network-entity-title.

Parameters

Defaults
Command Modes
Command
History

network-entity-title

Specify the area address and system ID for an IS-IS routing process. The first 1
to 13 bytes identify the area address. The next 6 bytes identify the system ID.
The last 1 byte is the selector byte, always identified as zero zero (00). This
argument can be applied to an address or a name.

Not configured.
ROUTER ISIS
Version 8.3.12.0

Introduced on S4810

passive-interface
Suppress routing updates on an interface. This command stops the router from sending updates on that
interface.

e
Syntax

passive-interface interface
To delete a passive interface configuration, enter the no passive-interface interface command.

Intermediate System to Intermediate System (IS-IS) | 891

www.dell.com | support.dell.com

Parameters

interface

Enter the following keywords and slot/port or number information:
•
•
•

•
•
•
Defaults
Command Modes
Command
History
Usage
Information

For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by
the slot/port information.
For Loopback interface, enter the keyword loopback followed by a number from
zero (0) to 16383.
For a Port Channel interface, enter the keyword port-channel followed by a
number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
For a SONET interface, enter the keyword sonet followed by the slot/port
information.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.

Not configured.
ROUTER ISIS
Version 8.3.12.0

Introduced on S4810

Although the passive interface will neither send nor receive routing updates, the network on that
interface will still be included in IS-IS updates sent via other interfaces

redistribute
Redistribute routes from one routing domain to another routing domain.

e
Syntax

redistribute {static | connected | rip} [level-1 | level-1-2 | level-2] [metric metric-value]
[metric-type {external | internal}] [route-map map-name]
To end redistribution or disable any of the specified keywords, enter the
no redistribute {static | connected | rip} [metric metric-value] [metric-type {external |
internal}] [level-1 | level-1-2 | level-2] [route-map map-name] command.

Parameters

connected

Enter the keyword connected redistribute active routes into IS-IS.

rip

Enter the keyword rip to redistribute RIP routes into IS-IS.

static

Enter the keyword static to redistribute user-configured routes into IS-IS.

metric metric-value

(OPTIONAL) Assign a value to the redistributed route.
Range: 0 to 16777215
Default: 0. You should use a value that is consistent with the destination
protocol.

metric-type {external |
internal}

(OPTIONAL) The external link type associated with the default route
advertised into a routing domain. You must specify one of the following:

•
•
level-1

892

|

external
internal

(OPTIONAL) Routes are independently redistributed into IS-IS as Level 1
routes.

Intermediate System to Intermediate System (IS-IS)

Defaults
Command Modes

level-1-2

(OPTIONAL) Routes are independently redistributed into IS-IS as Level-1-2
routes.

level-2

(OPTIONAL) Routes are independently redistributed into IS-IS as Level 2
routes.
This is the default.

route-map map-name

(OPTIONAL) If the route-map argument is not entered, all routes are
redistributed. If a map-name value is not specified, then no routers are
imported.

metric metric-value = 0; metric-type= internal; level-2
ROUTER ISIS (for IPv4)
CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6)

Command
History

Usage
Information

Version 8.3.12.0

Introduced on S4810

Version 7.5.1.0

Introduced IPv6 ISIS support

Version 6.3.1.0

Introduced

To redistribute a default route (0.0.0.0/0), configure the default-information originate command.
Changing or disabling a keyword in this command will not affect the state of the other command
keywords.
When an LSP with an internal metric is received, the FTOS considers the route cost taking into
consideration the advertised cost to reach the destination.
Redistributed routing information is filtered with the distribute-list out command to ensure that the
routes are properly are passed to the receiving routing protocol.
How a metric value assigned to a redistributed route is advertised depends on how on the configuration
of the metric-style command. If the metric-style command is set for narrow or transition mode and the
metric value in the redistribute command is set to a number higher than 63, the metric value advertised
in LSPs will be 63. If the metric-style command is set for wide mode, an the metric value in the
redistribute command is advertised.

Related
Commands

default-information originate

Generate a default route for the IS-IS domain.

distribute-list out

Suppress networks from being advertised in updates. Redistributed
routing information is filtered by this command.

redistribute bgp
Redistribute routing information from a BGP process. (new command in Release 6.3.1)

e
Syntax

redistribute bgp AS number [level-1| level-1-2 | level-2] [metric metric-value] [metric-type
{external| internal}] [route-map map-name]
To return to the default values, enter the no redistribute bgp command with the appropriate
parameters.

Intermediate System to Intermediate System (IS-IS) | 893

www.dell.com | support.dell.com

Parameters

AS number

Enter a number that corresponds to the Autonomous System number.
Range: 1 to 65355

level-1

(OPTIONAL) Routes are independently redistributed into IS-IS Level 1
routes only

level-1-2

(OPTIONAL) Routes are independently redistributed into IS-IS Level 1 and
Level 2 routes.

level-2

(OPTIONAL) Routes are independently redistributed into IS-IS as Level 2
routes only.
This is the default.

metric metric-value

(OPTIONAL) The value used for the redistributed route. You should use a
metric value that is consistent with the destination protocol.
Range: 0 to 16777215
Default: 0.

metric-type {external|
internal}

(OPTIONAL) The external link type associated with the default route
advertised into a routing domain. The two options are:
•
•

route-map map-name

external
internal

map-name is an identifier for a configured route map.
The route map should filter imported routes from the source routing protocol
to the current routing protocol.
If you do not specify a map-name, all routes are redistributed. If you
specify a keyword, but fail to list route map tags, no routes will be imported.

Defaults

IS-IS Level 2 routes only

Command Modes

ROUTER ISIS (for IPv4)
CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6)

Example

Figure 28-1.

redistribute bgp Command Example

FTOS(conf)#router is
FTOS(conf-router_isis)#redistribute bgp 1 level-1 metric 32 metric-type external
route-map rmap-isis-to-bgp
FTOS(conf-router_bgp)#show running-config isis
!
router isis
redistribute bgp 1 level-1 metric 32 metric-type external route-map
rmap-isis-to-bgp

Command
History

Usage
Information

894

|

Version 8.3.12.0

Introduced on S4810

Version 7.5.1.0

Introduced IPv6 ISIS support

Version 6.3.1.0

Introduced

BGP to IS-IS redistribution supports “match” options using route maps. The metric value, level, and
metric-type of redistributed routes can be set by the redistribution command. More advanced “set”
options can be performed using route maps.

Intermediate System to Intermediate System (IS-IS)

redistribute ospf
Redistribute routing information from an OSPF process.

e
Syntax

redistribute ospf process-id [level-1| level-1-2 | level-2] [match {internal | external}]
[metric metric-value] [metric-type {external | internal}] [route-map map-name]
To return to the default values, enter the no redistribute ospf process-id [level-1| level-1-2 |
level-2] [match {internal | external}] [metric metric-value][metric-type {external |
internal}] [route-map map-name] command.

Parameters

process-id

Enter a number that corresponds to the OSPF process ID to be redistributed.
Range: 1 to 65355

metric metric-value

(OPTIONAL) The value used for the redistributed route. You should use a
metric value that is consistent with the destination protocol.
Range: 0 to 16777215
Default: 0.

metric-type {external |
internal}

(OPTIONAL) The external link type associated with the default route
advertised into a routing domain. The two options are:
•
•

external
internal

level-1

(OPTIONAL) Routes are independently redistributed into IS-IS as Level 1
routes.

level-1-2

(OPTIONAL) Routes are independently redistributed into IS-IS as Level-1-2
routes.

level-2

(OPTIONAL) Routes are independently redistributed into IS-IS as Level 2
routes.
This is the default.

match {external |
internal}

(OPTIONAL) The command used for OSPF to route and redistribute into
other routing domains. The values are

•
•
route-map map-name

internal
external

map-name is an identifier for a configured route map.
The route map should filter imported routes from the source routing protocol
to the current routing protocol.
If you do not specify a map-name, all routes are redistributed. If you
specify a keyword, but fail to list route map tags, no routes will be imported.

Defaults
Command Modes

As above
ROUTER ISIS (for IPv4)
CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6)

Command
History

Version 8.3.12.0

Introduced on S4810

Version 7.5.1.0

Introduced IPv6 ISIS support

Version 6.3.1.0

Introduced

Intermediate System to Intermediate System (IS-IS) | 895

www.dell.com | support.dell.com

Usage
Information

How a metric value assigned to a redistributed route is advertised depends on how on the configuration
of the metric-style command. If the metric-style command is set for narrow mode and the metric value
in the redistribute ospf command is set to a number higher than 63, the metric value advertised in LSPs
will be 63. If the metric-style command is set for wide mode, an the metric value in the redistribute
ospf command is advertised.

router isis
Allows you to enable the IS-IS routing protocol and to specify an IP IS-IS process.

e
Syntax

router isis [tag]
To disable IS-IS routing, enter no router isis [tag].

Parameters

Defaults
Command Modes
Command
History
Usage
Information

tag

(OPTIONAL) This is a unique name for a routing process. A null tag is assumed if the tag option
is not specified. The tag name must be unique for all IP router processes for a given router.

Not configured.
ROUTER ISIS
Version 8.3.12.0

Introduced on S4810

You must configure a network entity title (the net command) to specify the area address and the router
system ID.
You must enable routing on one or more interfaces to establish adjacencies and establish dynamic
routing.
Only one IS-IS routing process can be configured to perform Level 2 routing. A level-1-2 designation
performs Level 1 and Level 2 routing at the same time.

Related
Commands

ip router isis

Configure IS-IS routing processes for IP on interfaces and attach an area designator
to the routing process.

net

Configure an IS-IS network entity title (NET) for a routing process.

is-type

Assign a type for a given area.

set-overload-bit
Configure the router to set the overload bit in its non-pseudonode LSPs. This prevents other routers
from using it as an intermediate hop in their shortest path first (SPF) calculations.

e
Syntax

set-overload-bit
To return to the default values, enter no set-overload-bit.

Defaults
Command Mode

896

|

Not set.
ROUTER ISIS (for IPv4)

Intermediate System to Intermediate System (IS-IS)

CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6)
Usage
Information

Set the overload bit when a router experiences problems, such as a memory shortage due to an
incomplete link state database which can result in an incomplete or inaccurate routing table. If you set
the overload bit in its LSPs, other routers ignore the unreliable router in their SPF calculations until the
router has recovered.

Command
History

Version 8.3.12.0

Introduced on S4810

Version 7.8.1.0

Introduced multi-topology ISIS support

Version 6.3.1.0

Introduced

show config
Display the changes you made to the IS-IS configuration. Default values are not shown.

e
Syntax
Command Modes

show config
ROUTER ISIS (for IPv4)
CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6)

Examples

Figure 28-2.

Command Example: show config (router-isis mode)

FTOS(conf-router_isis)#show config
!
router isis
clns host ISIS 49.0000.0001.F100.E120.0013.00
log-adjacency-changes
net 49.0000.0001.F100.E120.0013.00
!
address-family ipv6 unicast
maximum-paths 16
Identifies that Multi-Topology
multi-topology transition
IS-IS is enabled in transition
set-overload-bit
mode
spf-interval level-1 100 15 20
spf-interval level-2 120 20 25
exit-address-family

Figure 28-3.

Command Example: show config (address-family-ipv6 mode)

FTOS(conf-router_isis-af_ipv6)#show conf
!
address-family ipv6 unicast
maximum-paths 16
Identifies that Multi-Topology
multi-topology transition
IS-IS is enabled in transition
set-overload-bit
mode
spf-interval level-1 100 15 20
spf-interval level-2 120 20 25
exit-address-family

show isis database
Display the IS-IS link state database.

e
Syntax

show isis database [level-1 | level-2] [local] [detail | summary] [lspid]

Intermediate System to Intermediate System (IS-IS) | 897

www.dell.com | support.dell.com

Parameters

Command Modes

level-1

(OPTIONAL) Displays the Level 1 IS-IS link-state database.

level-2

(OPTIONAL) Displays the Level 2 IS-IS link-state database.

local

(OPTIONAL) Displays local link-state database information.

detail

(OPTIONAL) Detailed link-state database information of each LSP displays when
specified. If not specified, a summary displays.

summary

(OPTIONAL) Summary of link-state database information displays when specified.

lspid

(OPTIONAL) Display only the specified LSP.

EXEC
EXEC Privilege

Example

Figure 28-4.

Command Example: show isis database

FTOS#show isis database
IS-IS Level-1 Link State Database
LSPID
LSP Seq Num
ISIS.00-00
* 0x00000006

LSP Checksum
0xCF43

LSP Holdtime
580

ATT/P/OL
0/0/0

IS-IS Level-2 Link State Database
LSPID
LSP Seq Num LSP Checksum
ISIS.00-00
* 0x00000006
0xCF43
!
FTOS#show isis database detail ISIS.00-00

LSP Holdtime
580

ATT/P/OL
0/0/0

LSP Holdtime
1075

ATT/P/OL
0/0/0

LSP Holdtime
1075

ATT/P/OL
0/0/0

IS-IS Level-1 Link State Database
LSPID
LSP Seq Num LSP Checksum
ISIS.00-00
* 0x0000002B
0x853B
Area Address: 49.0000.0001
NLPID:
0xCC 0x8E
IP Address: 10.1.1.1
IPv6 Address: 1011::1
Topology:
IPv4 (0x00) IPv6 (0x8002)
Metric: 10
IS OSPF.00
Metric: 10
IS (MT-IPv6) OSPF.00
Metric: 10
IP 15.1.1.0 255.255.255.0
Metric: 10
IPv6 (MT-IPv6) 1511::/64
Metric: 10
IPv6 (MT-IPv6) 2511::/64
Metric: 10
IPv6 (MT-IPv6) 1011::/64
Metric: 10
IPv6 1511::/64
Metric: 10
IP 10.1.1.0 255.255.255.0
Hostname:
ISIS
IS-IS Level-2 Link State Database
LSPID
LSP Seq Num LSP Checksum
ISIS.00-00
* 0x0000002D
0xB2CD
Area Address: 49.0000.0001
NLPID:
0xCC 0x8E
IP Address: 10.1.1.1
IPv6 Address: 1011::1
Topology:
IPv4 (0x00) IPv6 (0x8002)
Metric: 10
IS OSPF.00
Metric: 10
IS (MT-IPv6) OSPF.00
Metric: 10
IP 10.1.1.0 255.255.255.0
Metric: 10
IP 15.1.1.0 255.255.255.0
Metric: 20
IP 10.3.3.0 255.255.255.0
Metric: 10
IPv6 (MT-IPv6) 1011::/64
Metric: 10
IPv6 (MT-IPv6) 1511::/64
Metric: 10
IPv6 (MT-IPv6) 2511::/64
Metric: 20
IPv6 (MT-IPv6) 1033::/64
Metric: 10
IPv6 2511::/64
Metric: 20
IPv6 1033::/64
Hostname:
ISIS
FTOS#

898

|

Intermediate System to Intermediate System (IS-IS)

Multi-Topology
IS-IS is enabled

Table 28-1.

Command Example Fields

Field

Description

IS-IS Level-1/Level-2 Link
State Database

Displays the IS-IS link state database for Level 1 or Level 2.

LSPID

Displays the LSP identifier.
The first six octets are the System ID of the originating router.
The next octet is the pseudonode ID. If this byte is not zero, then the LSP
describes system links. If this byte is zero (0), then the LSP describes the state
of the originating router.
The designated router for a LAN creates and floods a pseudonode LSP and
describes the attached systems.
The last octet is the LSP number. An LSP will be divided into multiple LSP
fragments if there is more data than cannot fit in a single LSP. Each fragment
has a unique LSP number.
An * after the LSPID indicates that an LSP was originated by the system where
this command was issued.

LSP Seq Num

This value is the sequence number for the LSP that allows other systems to
determine if they have received the latest information from the source.

LSP Checksum

This is the checksum of the entire LSP packet.

LSP Holdtime

This value is the amount of time, in seconds, that the LSP remains valid. A zero
holdtime indicates that this is a purged LSP and is being removed from the link
state database. A value between brackets indicates the duration that the purged
LSP stays in the database before being removed.

ATT

This value represents the Attach bit. This indicates that the router is a Level 2
router and can reach other areas. Level 1-only routers and Level 1-2 routers that
have lost connection to other Level 2 routers use the Attach bit to find the
closest Level 2 router. They point a default route to the closest Level 2 router.

P

This value represents the P bit. This bit will always set be zero as Dell Force10
does not support area partition repair.

OL

This value represents the overload bit, determining congestion. If the overload
bit is set, other routers will not use this system as a transit router when
calculating routes.

show isis graceful-restart detail
Display detailed IS-IS Graceful Restart related settings.

e
Syntax
Command Modes

show isis graceful-restart detail
EXEC
EXEC Privilege

Command
History

Version 8.3.12.0

Introduced on S4810

Version 8.3.1.0

Introduced on the E-Series

Intermediate System to Intermediate System (IS-IS) | 899

www.dell.com | support.dell.com

Example

Figure 28-5.

Command Example: show isis graceful-restart detail

FTOS#show isis graceful-restart detail
Configured Timer Value
======================
Graceful Restart
: Enabled
T3 Timer
: Manual
T3 Timeout Value
: 30
T2 Timeout Value
: 30 (level-1), 30 (level-2)
T1 Timeout Value
: 5, retry count: 1
Adjacency wait time
: 30
Operational Timer Value
======================
Current Mode/State
T3 Time left
T2 Time left
Restart ACK rcv count
Restart Req rcv count
Suppress Adj rcv count
Restart CSNP rcv count
Database Sync count

:
:
:
:
:
:
:
:

Normal/RUNNING
0
0 (level-1), 0
0 (level-1), 0
0 (level-1), 0
0 (level-1), 0
0 (level-1), 0
0 (level-1), 0

(level-2)
(level-2)
(level-2)
(level-2)
(level-2)
(level-2)

FTOS#

show isis hostname
Display IS-IS host names configured or learned on the E-Series.

e
Syntax
Command Modes

show isis hostname
EXEC
EXEC Privilege

Command
History

Example

Version 8.3.12.0

Figure 28-6.

Introduced on S4810

Command Example: show isis hostname

FTOS#show isis hostname
System Id
Dynamic Name
*F100.E120.0013 Force10
FTOS#

Static Name
ISIS

show isis interface
Display detailed IS-IS interface status and configuration information.

e
Syntax

900

|

show isis interface [interface]

Intermediate System to Intermediate System (IS-IS)

Parameters

interface

(OPTIONAL) Enter the following keywords and slot/port or number information:
•
•
•

•
•
•
Command Modes

For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed
by the slot/port information.
For Loopback interface, enter the keyword loopback followed by a number from
zero (0) to 16383.
For a Port Channel interface, enter the keyword port-channel followed by a
number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
For a SONET interface, enter the keyword sonet followed by the slot/port
information.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.

EXEC
EXEC Privilege

Command
History
Example

Version 8.3.12.0

Figure 28-7.

Introduced on S4810

Command Example: show isis interface (Partial)

FTOS>show isis int
GigabitEthernet 0/7 is up, line protocol is up
MTU 1497, Encapsulation SAP
Routing Protocol: IS-IS
Circuit Type: Level-1-2
Interface Index 37847070, Local circuit ID 1
Level-1 Metric: 10, Priority: 64, Circuit ID:
Hello Interval: 10, Hello Multiplier:
Number of active level-1 adjacencies: 1
Level-2 Metric: 10, Priority: 64, Circuit ID:
Hello Interval: 10, Hello Multiplier:
Number of active level-2 adjacencies: 1
Next IS-IS LAN Level-1 Hello in 2 seconds
Next IS-IS LAN Level-2 Hello in 1 seconds
LSP Interval: 33
GigabitEthernet 0/8 is up, line protocol is up
MTU 1497, Encapsulation SAP
Routing Protocol: IS-IS
Circuit Type: Level-1-2
Interface Index 38371358, Local circuit ID 2
Level-1 Metric: 10, Priority: 64, Circuit ID:
Hello Interval: 10, Hello Multiplier:
Number of active level-1 adjacencies: 1
Level-2 Metric: 10, Priority: 64, Circuit ID:
Hello Interval: 10, Hello Multiplier:
--More--

systest-3.01
3, CSNP Interval: 10
systest-3.01
3, CSNP Interval: 10

systest-3.02
3, CSNP Interval: 10
systest-3.02
3, CSNP Interval: 10

show isis neighbors
Display information about neighboring (adjacent) routers.

e
Syntax

show isis neighbors [level-1 | level-2] [detail] [interface]

Intermediate System to Intermediate System (IS-IS) | 901

www.dell.com | support.dell.com

Parameters

level-1

(OPTIONAL) Displays information about Level 1 IS-IS neighbors.

level-2

(OPTIONAL) Displays information about Level 2 IS-IS neighbors.

detail

(OPTIONAL) Displays detailed information about neighbors.

interface

(OPTIONAL) Identifies the interface type slot/port as one of the following:
•
•

•
•
•
Command Modes

For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by
the slot/port information.
For a Port Channel interface, enter the keyword port-channel followed by a
number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
For a SONET interface, enter the keyword sonet followed by the slot/port
information.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.

EXEC
EXEC Privilege

Command
History
Example

Version 8.3.12.0

Figure 28-8.

Introduced on S4810

Command Example: show isis neighbors

FTOS#show isis neighbors
System Id
Interface State
Type
Priority
TEST Gi 7/1
Up
L1L2(M)
127
!
FTOS#show isis neighbors detail
System Id
Interface State
Type
Priority
TEST Gi 7/1
Up
L1L2(M)
127
49.0000.0001
IP Address(es): 25.1.1.3*
MAC Address: 0000.0000.0000
Hold Time: 28
Link Local Address: fe80::201:e8ff:fe00:492c
Topology: IPv4 IPv6 , Common (IPv4 IPv6 )
Adjacency being used for MTs: IPv4 IPv6
FTOS#

Table 28-2.

902

|

Uptime
09:28:01

Circuit Id
TEST.02

Uptime
09:28:04

Circuit Id
TEST.02 Area Address(es):

Identified Multi-Topology ISIS enabled

show isis neighbors Command Example Fields

Field

Description

System Id

The value that identifies a system in an area.

Interface

The interface, slot, and port in which the router was discovered.

State

The value providing status about the adjacency state. The range is Up and Init.

Type

This value displays the adjacency type (Layer 2, Layer 2 or both).

Priority

IS-IS priority advertised by the neighbor. The neighbor with highest priority becomes
the designated router for the interface.

Uptime

Displays the interfaces uptime.

Circuit Id

The neighbor’s interpretation of the designated router for the interface.

Intermediate System to Intermediate System (IS-IS)

Usage
Information

Use this command to confirm that the neighbor adjacencies are operating correctly. If you suspect that
they are not, you can verify the specified area addresses of the routers by using the show isis neighbors
command.

show isis protocol
Display IS-IS routing information.

e
Syntax
Command Modes

show isis protocol
EXEC
EXEC Privilege

Command
History
Example

Version 8.3.12.0

Figure 28-9.

Introduced on S4810

Command Example: show isis protocol

FTOS#show isis protocol
IS-IS Router: 
System Id: F100.E120.0013 IS-Type: level-1-2
Manual area address(es):
49.0000.0001
Routing for area address(es):
49.0000.0001
Interfaces supported by IS-IS:
GigabitEthernet 1/0 - IP - IPv6
GigabitEthernet 1/1 - IP - IPv6
GigabitEthernet 1/10 - IP - IPv6
Loopback 0 - IP - IPv6
Redistributing:
Distance: 115
Generate narrow metrics: level-1-2
Identifies that MT IS-IS
Accept narrow metrics:
level-1-2
is enabled.
Generate wide metrics:
none
Accept wide metrics:
none
Multi Topology Routing is enabled in transition mode.
FTOS#

show isis traffic
This command enables you to display IS-IS traffic interface information.

e
Syntax

show isis traffic [interface]

Intermediate System to Intermediate System (IS-IS) | 903

www.dell.com | support.dell.com

Parameters

interface

(OPTIONAL) Identifies the interface type slot/port as one of the following:
For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by
the slot/port information.
For a Port Channel interface, enter the keyword port-channel followed by a
number:
C-Series and S-Series Range: 1-128

•
•

E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
For a SONET interface, enter the keyword sonet followed by the slot/port
information.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.

•
•
•
Command Modes

EXEC
EXEC Privilege

Command
History

Version 8.3.12.0

Example

Figure 28-10.

Introduced on S4810

Command Example: show isis traffic

FTOS#sho is traffic
IS-IS: Level-1 Hellos (sent/rcvd) : 0/721
IS-IS: Level-2 Hellos (sent/rcvd) : 900/943
IS-IS: PTP Hellos (sent/rcvd)
: 0/0
IS-IS: Level-1 LSPs sourced (new/refresh) : 0/0
IS-IS: Level-2 LSPs sourced (new/refresh) : 1/3
IS-IS: Level-1 LSPs flooded (sent/rcvd) : 0/0
IS-IS: Level-2 LSPs flooded (sent/rcvd) : 5934/5217
IS-IS: Level-1 LSPs CSNPs (sent/rcvd) : 0/0
IS-IS: Level-2 LSPs CSNPs (sent/rcvd) : 472/238
IS-IS: Level-1 LSPs PSNPs (sent/rcvd) : 0/0
IS-IS: Level-2 LSPs PSNPs (sent/rcvd) : 10/337
IS-IS: Level-1 DR Elections : 4
IS-IS: Level-2 DR Elections : 4
IS-IS: Level-1 SPF Calculations : 0
IS-IS: Level-2 SPF Calculations : 389
IS-IS: LSP checksum errors received : 0
IS-IS: LSP authentication failures : 0
FTOS#

Table 28-3.

Command Example Fields

Item

Description

Level-1/Level-2 Hellos (sent/rcvd)

Displays the number of Hello packets sent and received.

PTP Hellos (sent/rcvd)

Displays the number of point-to-point Hellos sent and received.

Level-1/Level-2 LSPs sourced
(new/refresh)

Displays the number of new and refreshed LSPs.

Level-1/Level-2 LSPs flooded
(sent/rcvd)

Displays the number of flooded LSPs sent and received.

Level-1/Level-2 LSPs CSNPs (sent/ Displays the number of CSNP LSPs sent and received.
rcvd)
Level-1/Level-2 LSPs PSNPs (sent/ Displays the number of PSNP LPSs sent and received.
rcvd)

904

|

Level-1/Level-2 DR Elections

Displays the number of times designated router elections ran.

Level-1/Level-2 SPF Calculations

Displays the number of shortest path first calculations.

Intermediate System to Intermediate System (IS-IS)

Table 28-3.

Command Example Fields (continued)

Item

Description

LSP checksum errors received

Displays the number of checksum errors LSPs received.

LSP authentication failures

Displays the number of LSP authentication failures.

spf-interval
Specify the minimum interval between Shortest Path First (SPF) calculations.

e
Syntax

spf-interval [level-l | level-2] interval seconds [initial_wait_interval seconds
[second_wait_interval seconds]]
To restore default values, use the no spf-interval [level-l | level-2] interval seconds
[initial_wait_interval seconds [second_wait_interval seconds]] command.

Parameters

Defaults
Command Modes

level-l

(OPTIONAL) Enter the keyword level-1 to apply the configuration to
Level-1 SPF calculations.

level-2

(OPTIONAL) Enter the keyword level-2 to apply the configuration to
Level-2 SPF calculations.

interval seconds

Enter the maximum number of seconds between SPF calculations.
Range: 0 to 120 seconds
Default: 10 seconds

initial_wait_interval
seconds

(OPTIONAL) Enter the initial wait time, in seconds, before running the first
SPF calculations.
Range: 0 to 120 seconds
Default: 5 second

second_wait_interval
seconds

(OPTIONAL) Enter the wait interval, in seconds, between the first and
second SPF calculations.
Range: 0 to 120 seconds
Default: 5 seconds

Defaults as above
ROUTER ISIS (for IPv4)
CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6)

Command
History

Usage
Information

Version 8.3.12.0

Introduced on S4810

Version 7.8.1.0

Introduced to support multi-topology ISIS

Version 7.5.1.0

Expanded to support SPF Throttling Enhancement

This command spf-interval in CONFIG-ROUTER-ISIS-AF-IPV6 mode is used for IPv6
Multi-Topology route computation only. If using single topology mode, use the spf-interval
command in CONFIG-ROUTER-ISIS mode for both IPv4 and IPv6 route computations.

Intermediate System to Intermediate System (IS-IS) | 905

www.dell.com | support.dell.com

SPF throttling slows down the frequency at which route calculation are performed during network
instability. Even though throttling route calculations slows down network convergence, not throttling
can result in a network not functioning as expected. If network topology is unstable, throttling slows
down the scheduling of route calculations until the topology regains its stability.

906

The first route calculation is controlled by the initial wait interval and the second calculation is
controlled by the second wait interval. Each subsequent wait interval is twice as long as the previous
one until the wait interval reaches the maximum wait time specified (interval seconds). Once the
network calms down and there are no triggers for two times the maximum interval, fast behavior is
restored (the initial wait time).

|

Intermediate System to Intermediate System (IS-IS)

29
Link Aggregation Control Protocol
(LACP)
Overview
This chapter contains commands for Dell Force10’s implementation of Link Aggregation
Control Protocol (LACP) for the creation of dynamic link aggregation groups (LAGs —
called port-channels in FTOS parlance). For static LAG commands, the section Port Channel
Commands in the Interfaces chapter), based on the standards specified in the IEEE 802.3
Carrier sense multiple access with collision detection (CSMA/CD) access method and
physical layer specifications.
Commands in this chapter generally are supported by FTOS on all Dell Force10 systems as
indicated by the characters that appear below each command heading: e E-Series, c
C-Series, s S-Series, or
.

Commands
Use the following commands for LACP:
•
•
•
•
•
•
•
•

clear lacp counters
debug lacp
lacp long-timeout
lacp port-priority
lacp system-priority
port-channel mode
port-channel-protocol lacp
show lacp

In addition, an FTOS option provides hitless dynamic LACP states (no noticeable impact to
dynamic LACP states after an RPM failover) on E-Series. Refer to redundancy protocol in the
High Availability chapter.

Link Aggregation Control Protocol (LACP) | 907

www.dell.com | support.dell.com

clear lacp counters
ces

Syntax
Parameters

Defaults
Command Modes

Clear Port Channel counters.

clear lacp port-channel-number counters
port-channel-number

Enter a port-channel number:
C-Series and S-Series Range: 1 to 128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.

Without a Port Channel specified, the command clears all Port Channel counters.
EXEC
EXEC Privilege

Command
History

Related
Commands

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 6.2.1.1

Introduced on E-Series

show lacp

Display the lacp configuration

debug lacp
ces

Syntax

Debug LACP (configuration, events etc.)

debug lacp [config | events | pdu [in | out | [interface [in | out]]]]

To disable LACP debugging, use the no debug lacp [config | events | pdu [in | out | [interface [in
| out]]]] command.
Parameters

908

|

config

(OPTIONAL) Enter the keyword config to debug the LACP configuration.

events

(OPTIONAL) Enter the keyword events to debug LACP event
information.

pdu in | out

(OPTIONAL) Enter the keyword pdu to debug LACP Protocol Data Unit
information. Optionally, enter an in or out parameter to:
• Receive enter in
• Transmit enter out

Link Aggregation Control Protocol (LACP)

interface in | out

Defaults
Command Modes

(OPTIONAL) Enter the following keywords and slot/port or number
information:
• For a 100/1000 Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the slot/
port information.
• For a Ten Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.
Optionally, enter an in or out parameter:
• Receive enter in
• Transmit enter out

This command has no default values or behavior
EXEC
EXEC Privilege

Command
History

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 6.2.1.1

Introduced on E-Series

lacp long-timeout
Configure a long timeout period (30 seconds) for an LACP session.

ce
Syntax

lacp long-timeout

To reset the timeout period to a short timeout (1 second), use the no lacp long-timeout
command.
Defaults
Command Modes
Command
History

1 second
INTERFACE (conf-if-po-number)
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 7.5.1.0

Introduced on E-Series

Link Aggregation Control Protocol (LACP) | 909

www.dell.com | support.dell.com

Usage
Information
Related
Commands

This command applies to dynamic port-channel interfaces only. When applied on a static
port-channel, the command has no effect.
show lacp

Display the lacp configuration

lacp port-priority
ces

Syntax

Configure the port priority to influence which ports will be put in standby mode when there is
a hardware limitation that prevents all compatible ports from aggregating.
lacp port-priority priority-value

To return to the default setting, use the no lacp port-priority priority-value command.
Parameters

Defaults
Command Modes
Command
History

priority-value

Enter the port-priority value. The higher the value number the lower the
priority.
Range: 1 to 65535
Default: 32768

32768
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 6.2.1.1

Introduced on E-Series

lacp system-priority
ces

Syntax
Parameters

Defaults
Command Modes

910

|

Configure the LACP system priority.

lacp system-priority priority-value
priority-value

32768
CONFIGURATION

Link Aggregation Control Protocol (LACP)

Enter the system-priority value. The higher the value, the lower the
priority.
Range: 1 to 65535
Default: 32768

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 6.2.1.1

Introduced on E-Series

port-channel mode
ces
Syntax
Parameters

Configure the LACP port channel mode.
port-channel number mode [active] [passive] [off]
number

Enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1 to 128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.

active

Enter the keyword active to set the mode to the active state.*

passive

Enter the keyword passive to set the mode to the passive state.*

off

Enter the keyword off to set the mode to the off state.*

* The LACP modes are defined in the table below.
Defaults
Command Modes
Command
History

Usage
Information

off

INTERFACE
Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 6.2.1.1

Introduced

The LACP modes are defined in the following table.
Table 29-1.
Mode

LACP Modes

Function

active

An interface is in an active negotiating state in this mode. LACP runs on any link
configured in the active state and also automatically initiates negotiation with other
ports by initiating LACP packets.

passive

An interface is not in an active negotiating state in this mode. LACP runs on any link
configured in the passive state. Ports in a passive state respond to negotiation requests
from other ports that are in active states. Ports in a passive state respond to LACP
packets.

off

An interface can not be part of a dynamic port channel in the off mode. LACP will
not run on a port configured in the off mode.

Link Aggregation Control Protocol (LACP) | 911

www.dell.com | support.dell.com

port-channel-protocol lacp
ces

Syntax

Enable LACP on any LAN port.

port-channel-protocol lacp

To disable LACP on a LAN port, use the no port-channel-protocol lacp command.
Command Modes
Command
History

Related
Commands

INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 6.2.1.1

Introduced

show lacp

Display the LACP information.

show interfaces port-channel

Display information on configured Port Channel groups.

show lacp
ces

Syntax
Parameters

Command Modes

Display the LACP matrix.

show lacp port-channel-number [sys-id | counters]
port-channel-number

Enter a port-channel number:
C-Series and S-Series Range: 1 to 128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.

sys-id

(OPTIONAL) Enter the keyword sys-id and the value that identifies
a system.

counters

(OPTIONAL) Enter the keyword counters to display the LACP
counters.

EXEC
EXEC Privilege

Command
History

Example
(show lacp
port-channel-number)

912

|

Version 8.3.7.0

Introduced n S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 6.2.1.1

Introduced

FTOS#show lacp
Port-channel 1
Actor
System
Partner System

Link Aggregation Control Protocol (LACP)

1
admin up, oper up, mode lacp
ID: Priority 32768, Address 0001.e800.a12b
ID: Priority 32768, Address 0001.e801.45a5
Actor Admin Key 1, Oper Key 1, Partner Oper Key 1
LACP LAG 1 is an aggregatable link

A - Active LACP, B - Passive LACP, C - Short Timeout, D - Long Timeout
E - Aggregatable Link, F - Individual Link, G - IN_SYNC, H - OUT_OF_SYNC
I - Collection enabled, J - Collection disabled, K - Distribution enabled L Distribution disabled,
M - Partner Defaulted, N - Partner Non-defaulted, O - Receiver is in expired
state,
P - Receiver is not in expired state
Port Gi 10/6 is enabled, LACP is enabled and mode is lacp
Actor
Admin: State ACEHJLMP Key 1
Priority 128
Oper: State ACEGIKNP Key 1
Priority 128
Partner Admin: State BDFHJLMP Key 0
Priority 0
Oper: State BCEGIKNP Key 1
Priority 128
FTOS#

Example
(show lacp
sys-id)

FTOS#show lacp 1 sys-id
Actor
System ID: Priority 32768, Address 0001.e800.a12b
Partner System ID: Priority 32768, Address 0001.e801.45a5
FTOS#

Example
(show lacp
counter)

Related
Commands

FTOS#show lacp 1 counters
---------------------------------------------------------------------LACP PDU
Marker PDU
Unknown Illegal
Port
Xmit
Recv
Xmit
Recv
Pkts Rx Pkts Rx
---------------------------------------------------------------------Gi 10/6 200
200
0
0
0
0
FTOS#

clear lacp counters

Clear the LACP counters.

show interfaces port-channel

Display information on configured Port Channel groups.

Link Aggregation Control Protocol (LACP) | 913

www.dell.com | support.dell.com
914

|

Link Aggregation Control Protocol (LACP)

30
Layer 2
Overview
This chapter describes commands to configure Layer 2 features. It contains the following
sections:
•
•
•

MAC Addressing Commands
Virtual LAN (VLAN) Commands
Far-End Failure Detection (FEFD)

Some MAC addressing commands are supported only on the E-Series, some on all three Dell
Force10 platforms, and some on two Dell Force10 platforms.
The VLAN commands are supported on the Dell Force10 platforms as indicated by the
characters that appear under each of the command headings: e E-Series, c C-Series, s
S-Series, or

MAC Addressing Commands
The following commands are related to configuring, managing, and viewing MAC addresses:
•
•
•
•
•
•
•
•
•
•
•
•
•

clear mac-address-table
mac accounting destination
mac-address-table aging-time
mac-address-table static
mac-address-table station-move threshold
mac-address-table station-move time-interval
mac-address-table station-move refresh-arp
mac cam fib-partition
mac learning-limit
mac learning-limit learn-limit-violation
mac learning-limit mac-address-sticky
mac learning-limit station-move-violation
mac learning-limit reset

Layer 2 | 915

www.dell.com | support.dell.com

•
•
•
•
•
•
•
•
•

show cam mac linecard (count)
show cam maccheck linecard
show cam mac linecard (dynamic or static)
show cam mac stack-unit
show mac-address-table
show mac-address-table aging-time
show mac accounting destination
show mac cam
show mac learning-limit

clear mac-address-table
ces

Syntax

Clear the MAC address table of all MAC address learned dynamically.

clear mac-address-table {dynamic | sticky }{address mac-address | all | interface interface | vlan
vlan-id}

Parameters

916

dynamic

Enter the keyword dynamic to specify dynamically-learned MAC
addresses.

sticky

Enter the keyword sticky to specify sticky MAC addresses.

address mac-address

Enter the keyword address followed by a MAC address in
nn:nn:nn:nn:nn:nn format.

all

Enter the keyword all to delete all MAC address entries in the MAC
address table.

interface interface

Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel
followed by a number:
C-Series and S-Series Range: 1 to 128
E-Series Range:1 to 255 for TeraScale and 1 to 512 for
ExaScale.
• For a SONET interface, enter the keyword sonet followed by the
slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.

vlan vlan-id

Enter the keyword vlan followed by a VLAN ID number from 1 to
4094.

Command Modes

EXEC Privilege

Command
History

Version 8.3.12.0

Added support for sticky MAC addresses.

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

|

Layer 2

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

mac accounting destination
e
Syntax

Configure a destination counter for Layer 2 traffic.
mac accounting destination {mac-address vlan vlan-id | vlan} [bytes | packets]

To delete a destination counter, enter no mac accounting destination.
Parameters

Defaults
Command Modes
Command
History
Usage
Information

mac-address

Enter the MAC address in the nn:nn:nn:nn:nn:nn format to count Layer 2
packets or bytes sent to that MAC address.

vlan vlan-id

Enter the keyword vlan followed by the VLAN ID to count Layer 2
packets or bytes sent to the VLAN.
Range: 1 to 4094.

bytes

(OPTIONAL) Enter the keyword bytes to count only bytes

packets

(OPTIONAL) Enter the keyword packets to count only packets.

Not configured.
INTERFACE (available on physical interfaces only)
Version 7.4.1.0

Introduced on E-Series

You must place the interface in Layer 2 mode (using the switchport command) prior to
configuring the mac accounting destination command.

mac-address-table aging-time
ces

Syntax
Parameters

Defaults

Specify an aging time for MAC addresses to be removed from the MAC Address Table.

mac-address-table aging-time seconds
seconds

Enter either zero (0) or a number as the number of seconds before MAC addresses are
relearned. To disable aging of the MAC address table, enter 0.
E-Series Range from CONFIGURATION mode: 10 - 1000000
E-Series Range from INTERFACE VLAN mode: 1 - 1000000
C-Series and S-Series Range: 10 - 1000000
Default: 1800 seconds

1800 seconds

Layer 2 | 917

www.dell.com | support.dell.com

Command Modes

CONFIGURATION
INTERFACE VLAN (E-Series only)

Command
History

Related
Commands

Version 8.3.7.0

Introduced on S4810

Version 8.3.1.0

On the E-Series, available in INTERFACE VLAN context and reduced
minimum aging time in INTERFACE VLAN context from 10 seconds
to 1 second.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

mac learning-limit

Set the MAC address learning limits for a selected interface.

show mac-address-table aging-time

Display the MAC aging time.

mac-address-table static
ces

Syntax

Associate specific MAC or hardware addresses to an interface and VLANs.

mac-address-table static mac-address output interface vlan vlan-id

To remove a MAC address, use the no mac-address-table static mac-address output interface
vlan vlan-id command.
Parameters

Defaults
Command Modes

918

|

Layer 2

mac-address

Enter the 48-bit hexidecimal address in nn:nn:nn:nn:nn:nn format.

output interface

Enter the keyword output followed by one of the following
interfaces:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel
followed by a number:
C-Series and S-Series Range: 1 to 128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for
ExaScale.
• For a SONET interface, enter the keyword sonet followed by the
slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.

vlan vlan-id

Enter the keyword vlan followed by a VLAN ID.
Range:1 to 4094.

Not configured.
CONFIGURATION

Command
History

Related
Commands

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

show mac-address-table

Displays the MAC address table.

mac-address-table station-move threshold
ce

Change the frequency with which the MAC address station-move trap is sent after a MAC
address changes in a VLAN. A trap is sent if a station move is detected above a threshold
number of times in a given interval.

Syntax

[no] mac-address-table station-move threshold number interval count

Parameters

Defaults
Command Modes
Command
History

Usage
Information

threshold number

Enter the keyword threshold followed by the number of times MAC
addresses in VLANs can change before an SNMP trap is sent.
Range: 1 to 10

interval seconds

Enter the keyword interval followed by the number of seconds.
Range: 5 to 60

Not configured.
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

For information on the specific trap sent and the corresponding Syslog refer to Chapter 60,
SNMP Traps.

mac-address-table station-move time-interval
e
Syntax
Parameters

Defaults

Reduce the amount of time FTOS takes to detect aged entries and station moves.
[no] mac-address-table station-move time-interval number
time-interval number

Select the interval of the successive scans of the MAC address table
that are used to detect a aged entries and station moves.
Range: 500 to 5000ms

5000ms

Layer 2 | 919

www.dell.com | support.dell.com

Command Modes
Command
History
Usage
Information

CONFIGURATION
Version 7.8.1.0

Introduced on E-Series

FTOS takes 4 to 5 seconds to detect aged entries and station moves because the MAC address
table scanning routine runs every 5000 ms by default. To achieve faster detection, reduce the
scanning interval.

mac-address-table station-move refresh-arp
ces

Syntax
Defaults
Command Modes
Command
History

Usage
Information

Ensure that ARP refreshes the egress interface when a station move occurs due to a topology
change.
[no] mac-address-table station-move refresh-arp
No default values or behavior
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced on E-Series

Refer to the “NIC Teaming” section of the Layer 2 chapter in the FTOS Configuration Guide for
details on using this command.

mac cam fib-partition
e
Syntax

Reapportion the amount of Content Addressable Memory (CAM) available for MAC address
learning (FIB) versus the amount available for MAC ACLs on a line card.
mac cam fib-partition {25 | 50 | 75 | 100} slot-number

To return to the default setting, enter no mac cam fib-partition.
Parameters

920

|

Layer 2

25

Enter the keyword 25 to set aside 25% of the CAM for MAC address
learning.

50

Enter the keyword 50 to set aside 50% of the CAM for MAC address
learning.

75

Enter the keyword 75 to set aside 75% of the CAM for MAC address
learning.

Defaults
Command Modes
Usage
Information
Related
Commands

100

Enter the keyword 100 to set aside 100% of the MAC CAM for MAC
address learning.
With this configuration, no MAC ACLs are processed.

slot-number

Enter the line card slot number.
Range: 0 to 13 for the E1200
0 to 6 for the E600
0 to 5 for the E300

75 (75% of the MAC CAM for MAC address learning)

CONFIGURATION
After setting the CAM partition size, the line card resets.

show mac cam

Display the current MAC CAM partition values.

mac learning-limit
ces
z
Syntax
Parameters

Defaults

Limit the maximum number of MAC addresses (static + dynamic) learned on a selected
interface.
mac learning-limit address_limit [vlan vlan-id] [dynamic] [station-move]
address_limit

Enter the maximum number of MAC addresses that can be learned
on the interface.
Range: 1 to 1000000

vlan vlan-id

E-Series only: Enter the keyword followed by the VLAN ID.
Range: 1 to 4094

dynamic

(OPTIONAL) Enter the keyword dynamic to allow aging of MACs
even though a learning limit is configured.

station-move

(OPTIONAL) Enter the keyword station-move to allow a station
move on learned MAC addresses.

On C-Series, the default behavior is no-station-move + static.
On E-Series, the default behavior is station-move + static.
On S-Series, the default behavior is dynamic.
“Static” means manually entered addresses, which do not age.

Command Modes
Command
History

INTERFACE
Version 8.3.12.0

Deprecated parameter no-station-move (replaced by mac-learning-limit
mac-address-sticky command).

Version 8.3.7.0

Introduced on S4810

Layer 2 | 921

www.dell.com | support.dell.com

Usage
Information

Version 8.3.1.0

Added vlan option on E-Series.

Version 8.2.1.0

Introduced on S-Series

Version 7.7.1.0

Introduced on C-Series; added station-move option

Version 6.5.1.0

Added support for MAC Learning-Limit on LAG

This command and its options are supported on physical interfaces, static LAGs, LACP
LAGs, and VLANs.
If the vlan option is not specified, then the MAC address counters is not VLAN-based. That
is, the sum of the addresses learned on all VLANs (not having any learning limit
configuration) is counted against the MAC learning limit.
MAC Learning Limit violation logs and actions are not available on a per-VLAN basis.
With the keyword no-station-move option, MAC addresses learned through this feature on the
selected interface will persist on a per-VLAN basis, even if received on another interface.
Enabling or disabling this option has no effect on already learned MAC addresses.
Once the MAC address learning limit is reached, the MAC addresses do not age out unless
you add the dynamic option. To clear statistics on MAC address learning, use the clear
counters command with the learning-limit parameter.
Note: If you configure this command on an interface in a routed VLAN, and once the
MAC addresses learned reaches the limit set in the mac learning-limit command, IP
protocols are affected. For example, VRRP sets multiple VRRP Masters, and OSPF
may not come up.

When a channel member is added to a port-channel and there is not enough ACL CAM space,
then the MAC limit functionality on that port-channel is undefined. When this occurs,
un-configure the existing configuration first and then reapply the limit with a lower value.
Related
Commands

clear counters

Clear counters used in the show interface command

clear mac-address-table

Clear the MAC address table of all MAC address learned
dynamically.

show mac learning-limit

Display MAC learning-limit configuration.

mac learning-limit learn-limit-violation
ces

Configure an action for a MAC address learning-limit violation.

z
Syntax

mac learning-limit learn-limit-violation {log | shutdown}

To return to the default, use the no mac learning-limit learn-limit-violation {log | shutdown}
command.

922

|

Layer 2

Parameters

Defaults
Command Modes
Command
History

Usage
Information
Related
Commands

log

Enter the keyword log to generate a syslog message on a
learning-limit violation.

shutdown

Enter the keyword shutdown to shut down the port on a
learning-limit violation.

No default behavior or values
INTERFACE (conf-if-interface-slot/port)
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduced on S-Series

Version 7.8.1.0

Introduced on C-Series

Version 7.5.1.0

Introduced on E-Series

This is supported on physical interfaces, static LAGs, and LACP LAGs.

show mac learning-limit

Display details of the mac learning-limit

mac learning-limit mac-address-sticky
Maintain the dynamically-learnt mac addresses as sticky MAC addresses on the selected port.
Syntax

mac learning-limit mac-address-sticky
Use the ‘no’ form of this command to convert the sticky MAC addresses to dynamic MAC
addresses.

Parameters

Defaults
Command Modes
Command
History
Usage
Information

Related
Commands

mac-address-sticky

Configures the dynamic MAC addresses as sticky on an interface.

No default behavior or values.
INTERFACE
Version 8.3.12.0

Introduced on S4810

If mac-learn-limit is configured and the sticky MAC feature is enabled, dynamically-learned
MAC addresses are converted to sticky for that port. Any new MAC address that is learned
also becomes sticky for that port.
show mac learning-limit

Display details of the mac learning-limit

Layer 2 | 923

www.dell.com | support.dell.com

mac learning-limit station-move-violation
ces

Syntax

Specify the actions for a station move violation.

mac learning-limit station-move-violation {log | shutdown-both | shutdown-offending |
shutdown-original}

To disable a configuration, use the no mac learning-limit station-move-violation command,
followed by the configured keyword.
Parameters

Defaults
Command Modes
Command
History

Usage
Information
Related
Commands

log

Enter the keyword log to generate a syslog message on a station
move violation.

shutdown-both

Enter the keyword shutdown to shut down both the original and
offending interface and generate a syslog message.

shutdown-offending

Enter the keyword shutdown-offending to shut down the offending
interface and generate a syslog message.

shutdown-original

Enter the keyword shutdown-original to shut down the original
interface and generate a syslog message.

No default behavior or values
INTERFACE (conf-if-interface-slot/port)
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduced on S-Series

Version 7.8.1.0

Introduced on C-Series

Version 7.5.1.0

Introduced on E-Series

This is supported on physical interfaces, static LAGs, and LACP LAGs.

show mac learning-limit

Display details of the mac learning-limit

mac learning-limit reset
ces

Syntax
Defaults
Command Modes

Reset the MAC address learning-limit error-disabled state.

mac learning-limit reset

No default behavior or values
EXEC
EXEC Privilege

924

|

Layer 2

Command
History

Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduced on S-Series

Version 7.7.1.0

Introduced on C-Series

Version 7.5.1.0

Introduced on E-Series

show cam mac linecard (count)
e

Display the

Syntax
Parameters

Command Modes

CAM size and the portions allocated for MAC addresses and for MAC ACLs.

show cam mac linecard slot port-set port-pipe count [vlan vlan-id] [interface interface]
linecard slot

(REQUIRED) Enter the keyword linecard followed by a slot number
to select the linecard for which to gather information.
E-Series range: 0 to 6.

port-set port-pipe

(REQUIRED) Enter the keyword port-set followed by a Port-Pipe
number to select the Port-Pipe for which to gather information.
E-Series range: 0 or 1

count

(REQUIRED) Enter the keyword count to display CAM usage by
interface type.

interface interface

(OPTIONAL) Enter the keyword interface followed by the interface
type, slot and port information:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel
followed by a number:
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for
ExaScale.
• For a SONET interface, enter the keyword sonet followed by the
slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.

vlan vlan-id

(OPTIONAL) Enter the keyword vlan followed by the VLAN ID to
display the MAC address assigned to the VLAN.
Range: 1 to 4094.

EXEC
EXEC Privilege

Command
History

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

pre-Version 6.2.1.1

Introduced on E-Series

Layer 2 | 925

www.dell.com | support.dell.com

show cam maccheck linecard
c
Syntax
Parameters

Command Modes

Display the results of the BCMI2

check command.

show cam maccheck linecard slot port-set port-pipe
linecard slot

(REQUIRED) Enter the keyword linecard followed by a slot number
to select the linecard for which to gather information.
C300 range: 0 to 7; C150 range: 0 to 4

port-set port-pipe

(REQUIRED) Enter the keyword port-set followed by a Port-Pipe
number to select the Port-Pipe for which to gather information.
Range: 0 or 1

EXEC
EXEC Privilege

Command
History
Example

Version 7.6.1.0

Introduced on C-Series

FTOS#show cam maccheck linecard 2 port-set 0
Dumping entries. From 0 to 16383.
Progress . marks 100 memory table entries.
............................Index 5576 (0x15c8) has valid entries (H: 2b9, E:
0)

..........Index 6592 (0x19c0) has valid entries (H: 338, E: 0)

!-------------output truncated-------------------!

Usage
Information

Use this command to check various flags associated with each MAC address in the CAM.
The example above shows information for two MAC addresses. The second entry is for MAC
address 00:00:a0:00:00:00 (leading 0s are not shown), which is shown as learned on VLAN
ID 4094 (0xfff), as shown below in the example for show mac-address-table and the
example for show cam mac linecard. Above, “STATIC_BIT=0” means that the address is
dynamically learned.
When an entry is listed as STATIC_BIT=1, its HIT_SA is 0, which signifies that this
address is not getting continuously learned trough traffic. The HIT_DA is set when a new
learn happens, and after the first age sweep, it gets reset.

Example
(show
mac-address-table)

FTOS#show mac-address-table
VlanId
Mac Address
4094
00:00:a0:00:00:00

Type
Interface
Dynamic Gi 2/0

!-------------output truncated-------------------!

926

|

Layer 2

State
Active

Example
(show cam mac
linecard)

FTOS#show cam mac linecard 2 port-set 0
VlanId
Mac Address
Region
Interface
0
ff:ff:ff:ff:ff:ff
STATIC
00001
4094
00:00:a0:00:00:00
DYNAMIC
Gi 2/0
!-------------output truncated-------------------!

show cam mac linecard (dynamic or static)
ce

Display the

Syntax

show cam mac linecard slot port-set port-pipe [address mac_addr | dynamic | interface interface |
static | vlan vlan-id]

Parameters

Command Modes

CAM size and the portions allocated for MAC addresses and for MAC ACLs.

linecard slot

(REQUIRED) Enter the keyword linecard followed by a slot number
to select the linecard for which to gather information.
C-Series Range: 0 to 4 (C150); 0 to 8 (C300)
E-Series Range: 0 to 6

port-set port-pipe

(REQUIRED) Enter the keyword port-set followed by a Port-Pipe
number to select the Port-Pipe for which to gather information.
Range: 0 or 1

address mac-addr

(OPTIONAL) Enter the keyword address followed by a MAC
address in the nn:nn:nn:nn:nn:nn format to display information on
that MAC address.

dynamic

(OPTIONAL) Enter the keyword dynamic to display only those
MAC addresses learned dynamically by the switch.

interface interface

(OPTIONAL) Enter the keyword interface followed by the interface
type, slot and port information:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel
followed by a number:
C-Series Range: 1 to 128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for
ExaScale.
• For a SONET interface, enter the keyword sonet followed by the
slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.

static

(OPTIONAL) Enter the keyword static to display only those MAC
address specifically configured on the switch.

vlan vlan-id

(OPTIONAL) Enter the keyword vlan followed by the VLAN ID to
display the MAC address assigned to the VLAN.
Range: 1 to 4094.

EXEC
EXEC Privilege

Layer 2 | 927

www.dell.com | support.dell.com

Command
History

Example

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 7.5.1.0

Added support for C-Series

pre-Version 6.2.1.1

Introduced on E-Series

FTOS#show cam mac linecard 1 port-set 0
Port - (TableID) assignments:
00(01) 01(01) 02(01) 03(01) 04(01) 05(01) 06(01) 07(01) 08(01) 09(01) 10(01)
11(01)
12(01) 13(01) 14(01) 15(01) 16(01) 17(01) 18(01) 19(01) 20(01) 21(01) 22(01)
23(01)
Index Table ID VlanId
Mac Address
Region
Interface
0
1
0
00:01:e8:0d:b7:3b
LOCAL_DA
1e000
1
1
0
00:01:e8:0d:b7:3a
LOCAL_DA
1e000
101
0
0
00:01:e8:00:04:00
SYSTEM_STATIC
01c05
102
0
0
01:80:00:00:00:00
SYSTEM_STATIC
01c05
103
0
0
01:00:0c:cc:cc:cc
SYSTEM_STATIC
01c01
104
0
0
01:80:c2:00:00:02
SYSTEM_STATIC
01c02
105
0
0
01:80:c2:00:00:0e
SYSTEM_STATIC
01c01
106
0
0
00:01:e8:0d:b7:68
SYSTEM_STATIC
DROP
107
0
0
00:01:e8:0d:b7:67
SYSTEM_STATIC
DROP
108
0
0
00:01:e8:0d:b7:66
SYSTEM_STATIC
DROP
109
0
0
00:01:e8:0d:b7:65
SYSTEM_STATIC
DROP
110
0
0
00:01:e8:0d:b7:64
SYSTEM_STATIC
DROP
111
0
0
00:01:e8:0d:b7:63
SYSTEM_STATIC
DROP
112
0
0
00:01:e8:0d:b7:62
SYSTEM_STATIC
DROP
113
0
0
00:01:e8:0d:b7:61
SYSTEM_STATIC
DROP
114
0
0
00:01:e8:0d:b7:60
SYSTEM_STATIC
DROP
115
0
0
00:01:e8:0d:b7:5f
SYSTEM_STATIC
DROP
116
0
0
00:01:e8:0d:b7:5e
SYSTEM_STATIC
DROP
117
0
0
00:01:e8:0d:b7:5d
SYSTEM_STATIC
DROP
FTOS#

show cam mac stack-unit
s
Syntax
Parameters

928

|

Layer 2

Display the Content Addressable Memory (CAM) size and the portions allocated for MAC
addresses and for MAC ACLs.
show cam mac stack-unit unit_number port-set port-pipe count [vlan vlan-id] [interface interface]
stack-unit unit_number

(REQUIRED) Enter the keyword linecard followed by a stack
member number to select the linecard for which to gather
information.
S-Series Range: 0 to 1

port-set port-pipe

(REQUIRED) Enter the keyword port-set followed by a Port-Pipe
number to select the Port-Pipe for which to gather information.
S-Series Range: 0 or 1

address mac-addr

(OPTIONAL) Enter the keyword address followed by a MAC
address in the nn:nn:nn:nn:nn:nn format to display information on
that MAC address.

dynamic

(OPTIONAL) Enter the keyword dynamic to display only those
MAC addresses learned dynamically by the switch.

Command Modes

static

(OPTIONAL) Enter the keyword static to display only those MAC
address specifically configured on the switch.

interface interface

(OPTIONAL) Enter the keyword interface followed by the interface
type, slot and port information:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel
followed by a number:
S-Series Range: 1 to 128
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.

vlan vlan-id

(OPTIONAL) Enter the keyword vlan followed by the VLAN ID to
display the MAC address assigned to the VLAN.
Range: 1 to 4094.

EXEC
EXEC Privilege

Command
History

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 7.6.1.0

This version of the command introduced for S-Series

Layer 2 | 929

www.dell.com | support.dell.com

show mac-address-table
ces

Syntax

Parameters

Command Modes

Display the

MAC address table.

show mac-address-table [dynamic | static] [address mac-address | interface interface | vlan
vlan-id] [count [vlan vlan-id] [interface interface-type [slot [/port]]]]
dynamic

(OPTIONAL) Enter the keyword dynamic to display only those
MAC addresses learned dynamically by the switch. Optionally, you
can also add one of these combinations: address/mac-address,
interface/interface, or vlan vlan-id.

static

(OPTIONAL) Enter the keyword static to display only those MAC
address specifically configured on the switch. Optionally, you can
also add one of these combinations: address/mac-address,
interface/interface, or vlan vlan-id.

address mac-address

(OPTIONAL) Enter the keyword address followed by a MAC
address in the nn:nn:nn:nn:nn:nn format to display information on
that MAC address.

interface interface

(OPTIONAL) Enter the keyword interface followed by the interface
type, slot and port information:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel
followed by a number:
C-Series and S-Series Range: 1 to 128
E-Series Range:1 to 255 for TeraScale and 1 to 512 for
ExaScale.
• For a SONET interface, enter the keyword sonet followed by the
slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.

interface interface-type

(OPTIONAL) Instead of entering the keyword interface followed by
the interface type, slot and port information, as above, you can enter
the interface type, followed by just a slot number.

vlan vlan-id

(OPTIONAL) Enter the keyword vlan followed by the VLAN ID to
display the MAC address assigned to the VLAN.
Range: 1 to 4094.

count

(OPTIONAL) Enter the keyword count, followed optionally, by an
interface or VLAN ID, to display total or interface-specific static
addresses, dynamic addresses, and MAC addresses in use.

EXEC
EXEC Privilege

Command
History

930

|

Layer 2

Version 8.3.12.0

Updated output

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version
6.2.1.1

Introduced on E-Series

Example

FTOS#show mac-address-table
VlanId Mac Address
Type
Interface
999
00:00:00:00:00:19
Sticky Gi 0/1
999
00:00:00:00:00:29
Dynamic Gi 0/2
FTOS#

Table 30-1.

State
Active
Active

show mac-address-table Information

Column Heading Description

Example
(show
mac-address-table
count)

VlanId

Displays the VLAN ID number.

Mac Address

Displays the MAC address in nn:nn:nn:nn:nn:nn format.

Type

Lists whether the MAC address was manually configured (Static), learned
dynamically (Dynamic), or associated with a specific port (Sticky).

Interface

Displays the interface type and slot/port information. The following
abbreviations describe the interface types:
• gi — Gigabit Ethernet followed by a slot/port.
• po — Port Channel followed by a number. Range: 1 to 255 for TeraScale
• so — Sonet followed by a slot/port.
• te — 10-Gigabit Ethernet followed by a slot/port.

State

Lists if the MAC address is in use (Active) or not in use (Inactive).
FTOS# show mac-address-table count
MAC Entries for all vlans :
Dynamic Address Count :
Static Address (User-defined) Count :
Sticky Address Count :
Total Synced Mac from Peer(N):
Total MAC Addresses in Use:
FTOS#

Table 30-2.

Related
Commands

110
0
0
100
110

show mac-address-table count Information

Line Beginning with

Description

MAC Entries...

Displays the number of MAC entries learnt per VLAN.

Dynamic Address...

Lists the number of dynamically learned MAC addresses.

Static Address...

Lists the number of user-defined MAC addresses.

Total MAC...

Lists the total number of MAC addresses used by the switch.

show mac-address-table aging-time

Display MAC aging time.

Layer 2 | 931

www.dell.com | support.dell.com

show mac-address-table aging-time
ces

Syntax
Parameters

Command Modes

Display the

aging times assigned to the MAC addresses on the switch.

show mac-address-table aging-time [vlan vlan-id]
vlan vlan-id

On the E-Series, enter the keyword vlan followed by the VLAN ID
to display the MAC address aging time for MAC addresses on the
VLAN.
Range: 1 to 4094.

EXEC
EXEC Privilege

Command
History

Example

8.3.7.0

Introduced on S4810

Version 8.3.1.0

Added the vlan option on the E-Series.

Version 7.7.1.0

Introduced on C-Series and S-Series

pre-Version
6.2.1.1

Introduced on E-Series

FTOS#show mac-address-table aging-time
Mac-address-table aging time : 1800
FTOS#

Related
Commands

show mac-address-table

Display the current MAC address configuration.

show mac accounting destination
Display destination

e
Syntax

Parameters

932

|

Layer 2

counters for Layer 2 traffic (available on physical interfaces only).

show mac accounting destination [mac-address vlan vlan-id] [interface interface [mac-address
vlan vlan-id] [vlan vlan-id]] [vlan vlan-id]
mac-address

(OPTIONAL) Enter the MAC address in the nn:nn:nn:nn:nn:nn
format to display information on that MAC address.

Command Modes

interface interface

(OPTIONAL) Enter the keyword interface followed by the interface
type, slot and port information:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.

vlan vlan-id

(OPTIONAL) Enter the keyword vlan followed by the VLAN ID to
display the MAC address assigned to that VLAN.
Range: 1 to 4094.

EXEC
EXEC Privilege

Command
History

Usage
Information

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

pre-Version
6.2.1.1

Introduced on E-Series

MAC Accounting information can be accessed using SNMP via the Force10 Monitor MIB.
For more information on enabling SNMP, refer to Chapter 3 of the FTOS Configuration
Guide.
Note: Currently, the Force10 MONITOR MIB does not return the MAC addresses in
an increasing order via SNMP. As a workaround, you can use the -C c option in
snmpwalk or snmpbulkwalk to access the Force10 MONITOR MIB. For example:
% snmpwalk -C c -v 2c -c public 133.33.33.131 enterprise.6027.3.3.3

Example

FTOS#sh mac accounting destination interface gigabitethernet 2/1
Destination
Out Port
VLAN
Packets
Bytes
00:44:00:00:00:02
00:44:00:00:00:01
00:22:00:00:00:00
00:44:00:00:00:02
00:44:00:00:00:01

Te
Te
Te
Te
Te

11/0
11/0
11/0
11/0
11/0

1000
1000
1000
2000
2000

10000
10000
10000
10000
10000

5120000
5120000
5120000
5120000
5120000

FTOS#

Related
Commands

show mac accounting access-list

Display MAC access list configurations and counters (if
configured).

Layer 2 | 933

www.dell.com | support.dell.com

show mac cam
e
Syntax
Command Modes

Display the

CAM size and the portions allocated for MAC addresses and for MAC ACLs.

show mac cam

EXEC
EXEC Privilege

Command
History

pre-Version 6.2.1.1

Example

Introduced on E-Series

FTOS#show mac cam
Slot Type
MAC CAM Size
MAC FIB Entries
0
E24PD
64K entries
48K (75%)
2
E24PD2
128K entries
64K (50%)
11
EX2YD
64K entries
16K (25%)
Note: All CAM entries are per portpipe.
FTOS#

Table 30-3.

MAC ACL Entries
8K (25%)
32K (50%)
24K (75%)

show mac cam Information

Field

Description

Slot

Lists the active line card slots.

Type

Lists the type of line card present in the slot.

MAC CAM Size

Displays the total CAM size available.
Note: A portion of the MAC CAM is used for system operations, therefore
adding the MAC FIB and MAC ACL will be less than the MAC CAM.

MAC FIB Entries

Displays the amount and percentage of CAM available for MAC addresses.

MAC ACL Entries

Displays the amount and percentage of CAM available for MAC ACLs.

show mac learning-limit
Display MAC

ce
Syntax
Parameters

934

|

Layer 2

address learning limits set for various interfaces.

show mac learning-limit [violate-action] [detail] [interface interface [vlan vlan-id]]
violate-action

(OPTIONALY) Enter the keyword violate-action to display the MAC
learning limit violation status.

detail

(OPTIONAL) Enter the keyword detail to display the MAC learning limit in
detail.

Command Modes

interface interface

(OPTIONAL) Enter the keyword interface with the following keywords and
slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For SONET interfaces, enter the keyword sonet followed by the slot/port
information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed
by a number:
C-Series Range: 1 to 128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.

vlan vlan-id

On the E-Series, enter the keyword vlan followed by the VLAN ID.
Range: 1-4094

EXEC
EXEC Privilege

Command
History

Example
(E-Series)

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 8.3.1.0

Added vlan option on E-Series.

Version 7.7.1.0

Introduced on C-Series

Version 7.5.1.0

Added support for violate-action and detail options

Version 6.5.1.0

Added support for Port Channel

E-Series output:
FTOS#show mac learning-limit
Interface
Vlan
Learning
Dynamic
Static
Slot/port
Id
Limit
MAC count
MAC count
Gi 5/84
2
2
0
0
Gi 5/84
*
5
0
0
Gi 5/85
3
3
0
0
Gi 5/85
*
10
0
0
FTOS#show mac learning-limit interface gig 5/84
Interface
Vlan
Learning
Dynamic
Static
Slot/port
Id
Limit
MAC count
MAC count
Gi 5/84
2
2
0
0
Gi 5/84
*
5
0
0
FTOS#show mac learning-limit interface gig 5/84 vlan 2
Interface
Vlan
Learning
Dynamic
Static
Slot/port
Id
Limit
MAC count
MAC count
Gi 5/84
2
2
0
0

Unknown SA
Drops
0
0
0
0

Unknown SA
Drops
0
0

Unknown SA
Drops
0

Layer 2 | 935

www.dell.com | support.dell.com

Example
(C-Series &
S-Series)

C-Series/S-Series output:
FTOS#show mac learning-limit
Interface
Learning
Dynamic
Static
Slot/port
Limit
MAC count
MAC count
Gi 1/0
10
0
0
Gi 1/1
5
0
0
FTOS#show mac learning-limit interface gig 1/0
Interface
Learning
Dynamic
Static
Slot/port
Limit
MAC count
MAC count
Gi 1/0
10
0

Unknown SA
Drops
0
0
Unknown SA
Drops
0

0

Virtual LAN (VLAN) Commands
The following commands configure and monitor Virtual LANs (VLANs). VLANs are a
virtual interface and use many of the same commands as physical interfaces.
You can configure an IP address and Layer 3 protocols on a VLAN called Inter-VLAN
routing. FTP, TFTP, ACLs and SNMP are not supported on a VLAN.
Occasionally, while sending broadcast traffic over multiple Layer 3 VLANs, the VRRP state
of a VLAN interface may continually switch between Master and Backup.
•
•
•
•
•
•
•
•
•
•

description
default vlan-id
default-vlan disable
enable vlan-counters
name
show config
show vlan
tagged
track ip
untagged

Refer also to VLAN Stacking and VLAN-related commands, such as portmode hybrid, in the
Interfaces chapter.

description
ces
Syntax

Add a description about the selected VLAN.
description description

To remove the description from the VLAN, use the no description command.
Parameters

936

|

Layer 2

description

Enter a text string description to identify the VLAN (80 characters maximum).

Defaults
Command Modes
Command
History

Related
Commands

No default behavior or values
INTERFACE VLAN
Version 7.6.1.0

Introduced on C-Series and S-Series

Version 6.3.1.0

Introduced on E-Series

show vlan

Display VLAN configuration.

default vlan-id
ces

Syntax

Specify a VLAN as the Default VLAN.

default vlan-id vlan-id

To remove the default VLAN status from a VLAN and VLAN 1 does not exist, use the no
default vlan-id vlan-id syntax.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

vlan-id

Enter the VLAN ID number of the VLAN to become the new Default VLAN.
Range: 1 to 4094.
Default: 1

The Default VLAN is VLAN 1.
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

To return VLAN 1 as the Default VLAN, use this command syntax (default-vlan-id 1).
The Default VLAN contains only untagged interfaces.

Related
Commands

interface vlan

Configure a VLAN.

default-vlan disable
ces

Defaults

Disable the default VLAN so that all switchports are placed in the Null VLAN until they are
explicitly configured as a member of another VLAN.
The default VLAN is enabled.

Layer 2 | 937

www.dell.com | support.dell.com

Command Modes
Command
History

Usage
Information

CONFIGURATION
Version 8.3.7.0

Introduced no S4810

Version 8.3.1.0

Introduced

no default vlan disable is not listed in the running-configuration, but when the default VLAN
is disabled, default-vlan disable is listed in the running-configuration.

enable vlan-counters
ex
Syntax

Display VLAN counters for ingress and/or egress hardware. You must be in restricted mode
to use this command.
enable vlan-output-counters [ingress | egress | all]

To return to the default (disabled), use the no enable vlan-output-counters command.
Defaults
Command Modes
Command
History

Example

Disabled — VLAN counters are disabled in hardware (all linecards/port-pipes) by default.
CONFIGURATION
Version 8.1.1.2

Introduced on E-Series ExaScale E600i

Version 8.1.1.0

Introduced on E-Series ExaScale E1200i

FTOS(conf)#enable vlan-output-counters
FTOS(conf)#exit
FTOS#show interface vlan 101
Vlan 101 is down, line protocol is down
Address is 00:01:e8:26:e0:5b, Current address is 00:01:e8:26:e0:5b
Interface index is 1107787877
Internet address is not set
MTU 1554 bytes, IP MTU 1500 bytes
LineSpeed 1000 Mbit
ARP type: ARPA, ARP Timeout 04:00:00
Last clearing of "show interface" counters 01:12:44
Queueing strategy: fifo
Input Statistics:
0 packets, 0 bytes
Output Statistics:
0 packets, 0 bytes
Time since last interface status change: 01:12:44
FTOS#

FTOS#show interfaces vlan 1
Vlan 1 is down, line protocol is down
Address is 00:01:e8:13:a5:aa, Current address is 00:01:e8:13:a5:aa
Interface index is 1107787777
Internet address is not set
MTU 1554 bytes, IP MTU 1500 bytes
LineSpeed 1000 Mbit
ARP type: ARPA, ARP Timeout 04:00:00
Last clearing of "show interface" counters 01:36:01
Queueing strategy: fifo
Input Statistics:

938

|

Layer 2

100000 packets, 10000000 bytes
Output Statistics:
200000 packets, 20800000 bytes
Time since last interface status change: 01:36:01
FTOS#

Usage
Information

FTOS supports a command to enable viewing of the VLAN input/output counters. This
command also applies to SNMP requests. If the command is not enabled, IFM returns zero
values for VLAN output counters.
SNMP counters differ from show interface counters as SNMP counters must maintain history.
At any point, the value of SNMP counters reflect the amount of traffic being carried on the
VLAN.
VLAN output counters may show higher than expected values because source-suppression
drops are counted.
During an RPM failover event, all SNMP counters remain intact. The counters will sync over
to the secondary RPM.

Layer 2 | 939

www.dell.com | support.dell.com

name
ces

Syntax

Assign a name to the VLAN.

name vlan-name

To remove the name from the VLAN, enter no name.
Parameters

Defaults
Command Modes

Not configured.
INTERFACE VLAN

Command
History

Usage
Information

Enter up to 32 characters as the name of the VLAN.

vlan-name

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

To display information about a named VLAN, enter the show vlan command with the name
parameter or the show interfaces description command.

Related
Commands

description

Assign a descriptive text string to the interface.

interface vlan

Configure a VLAN.

show vlan

Display the current VLAN configurations on the switch.

show config
ces

Syntax
Command Modes
Example

Command
History

940

|

Layer 2

Display the

current configuration of the selected VLAN.

show config

INTERFACE VLAN
FTOS(conf-if-vl-100)#show config
!
interface Vlan 100
no ip address
no shutdown
FTOS(conf-if-vl-100)#

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

show vlan
ces

Syntax
Parameters

Display the

current VLAN configurations on the switch.

show vlan [brief | id vlan-id | name vlan-name]
brief

(OPTIONAL) Enter the keyword brief to display the following information:
• VLAN ID
• VLAN name (left blank if none is configured.)
• Spanning Tree Group ID
• MAC address aging time
• IP address

id vlan-id

(OPTIONAL) Enter the keyword id followed by a number from 1 to 4094. Only
information on the VLAN specified is displayed.

name

(OPTIONAL) Enter the keyword name followed by the name configured for the
VLAN. Only information on the VLAN named is displayed.

vlan-name
Command Modes

EXEC
EXEC Privilege

Command
History

Example

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Augmented to display PVLAN data for C-Series and S-Series; revised
output to include Description field to display user-entered VLAN
description

Version 7.6.1.0

Introduced on S-Series; revised output to display Native VLAN

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

FTOS#show vlan
Codes:
lated
Q: U x G -

* - Default VLAN, G - GVRP VLANs, P - Primary, C - Community, I - Iso-

NUM
*
1
2

Status
Description
Inactive
Active U Po1(Gi 13/0)
T Po20(Gi 13/6), Gi 13/25
T Gi 13/7
Active
T Po20(Gi 13/6)
T Gi 13/7
U Gi 13/1
Active
U Po2(Gi 13/2)

3

4

Untagged, T - Tagged
Dot1x untagged, X - Dot1x tagged
GVRP tagged, M - Vlan-stack
Q Ports

Layer 2 | 941

www.dell.com | support.dell.com

P

5

Active

6

Active

7

Active

100

Active

C
101
I
102
FTOS#

T
T
T
T

Inactive
Inactive

Table 30-4.

Example
(show vlan id)

T Po20(Gi 13/6)
T Gi 13/7
T Po20(Gi 13/6)
T Gi 13/7
U Gi 13/3
U Po3(Gi 13/4)
T Po20(Gi 13/6)
T Gi 13/7
T Po20(Gi 13/6)
T Gi 13/7
U Gi 13/5

show vlan Information

Column Heading

Description

(Column 1 — no heading)

asterisk symbol (*) = Default VLAN
G = GVRP VLAN
P = primary VLAN
C = community VLAN
I = isolated VLAN

NUM

Displays existing VLAN IDs.

Status

Displays the word Inactive for inactive VLANs and the word
Active for active VLANs.

Q

Displays G for GVRP tagged, M for member of a VLAN-Stack
VLAN, T for tagged interface, U (for untagged interface), x
(uncapitalized x) for Dot1x untagged, or X (capitalized X) for
Dot1x tagged.

Ports

Displays the type, slot, and port information. For the type, Po =
port channel, Gi = gigabit ethernet, and Te = ten gigabit ethernet.
FTOS# show vlan id 40
Codes:
Q: U x G -

* - Default VLAN, G - GVRP VLANs
Untagged, T - Tagged
Dot1x untagged, X - Dot1x tagged
GVRP tagged, M - Vlan-stack

NUM
Status
Description
40
Active
FTOS#show vlan id 41
Codes:
Q: U x G -

Status
Active

Description

FTOS#show vlan id 42
Codes: * - Default VLAN, G - GVRP VLANs

|

Layer 2

Q Ports
M Gi 13/47

* - Default VLAN, G - GVRP VLANs
Untagged, T - Tagged
Dot1x untagged, X - Dot1x tagged
GVRP tagged, M - Vlan-stack

NUM
41

942

Po1(Gi 0/1)
Gi 0/2
Gi 0/3
Gi 0/4

Q Ports
T Gi 13/47

Q: U - Untagged, T - Tagged
x - Dot1x untagged, X - Dot1x tagged
G - GVRP tagged, M - Vlan-stack
NUM
42
FTOS#

Example
(show vlan brief)

Example
(Using VLAN
Name)

Status
Active

Description

FTOS#show vlan br
VLAN Name
---- ---------------------- ---1
2
3
FTOS#

Q Ports
U Gi 13/47

STG
--------0
0
0

FTOS(conf)#interface vlan 222
FTOS(conf-if-vl-222)#name test
FTOS(conf-if-vl-222)#do show vlan name test
Codes:
Q: U x G -

* - Default VLAN, G - GVRP VLANs
Untagged, T - Tagged
Dot1x untagged, X - Dot1x tagged
GVRP tagged, M - Vlan-stack

NUM
Status
Description
222
Inactive
FTOS(conf-if-vl-222)#
FTOS#

Related
Commands

MAC Aging IP Address
-----------------1800
unassigned
1800
2.2.2.2/24
1800
3.3.3.2/24

Q Ports
U Gi 1/22

vlan-stack compatible

Enable the Stackable VLAN feature on the selected VLAN.

interface vlan

Configure a VLAN.

Layer 2 | 943

www.dell.com | support.dell.com

tagged
ces

Syntax

Add a Layer 2 interface to a VLAN as a tagged interface.

tagged interface

To remove a tagged interface from a VLAN, use no tagged interface command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

interface

Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by a
number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by
the slot/port information.

All interfaces in Layer 2 mode are untagged.
INTERFACE VLAN
Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

When you use the no tagged command, the interface is automatically placed in the Default
VLAN as an untagged interface unless the interface is a member of another VLAN. If the
interface belongs to several VLANs, you must remove it from all VLANs to change it to an
untagged interface.
Tagged interfaces can belong to multiple VLANs, while untagged interfaces can only belong
to one VLAN at a time.

Related
Commands

944

|

Layer 2

interface vlan

Configure a VLAN.

untagged

Specify which interfaces in a VLAN are untagged.

track ip
ces

Syntax

Track the Layer 3 operational state of a Layer 3 VLAN, using a subset of the VLAN member
interfaces.
track ip interface

To remove the tracking feature from the VLAN, use the no track ip interface command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by
a number:
C-Series and S-Series Range: 1 to 128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a SONET interface, enter the keyword sonet followed by the slot/port
information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed
by the slot/port information.

interface

Not configured
INTERFACE VLAN
Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

When this command is configured, the VLAN is operationally UP if any of the interfaces
specified in the track ip command are operationally UP, and the VLAN is operationally
DOWN if none of the tracking interfaces are operationally UP.
If the track ip command is not configured, the VLAN's Layer 3 operational state depends on
all the members of the VLAN.
The Layer 2 state of the VLAN, and hence the Layer 2 traffic is not affected by the track ip
command configuration.

Related
Commands

interface vlan

Configure a VLAN.

tagged

Specify which interfaces in a VLAN are tagged.

Layer 2 | 945

www.dell.com | support.dell.com

untagged
ces

Syntax

Add a Layer 2 interface to a VLAN as an untagged interface.

untagged interface

To remove an untagged interface from a VLAN, use the no untagged interface command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

interface

Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by a
number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by
the slot/port information.

All interfaces in Layer 2 mode are untagged.
INTERFACE VLAN
Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

Untagged interfaces can only belong to one VLAN.
In the Default VLAN, you cannot use the no untagged interface command. To remove an
untagged interface from all VLANs, including the Default VLAN, enter the INTERFACE
mode and use the no switchport command.

Related
Commands

946

|

Layer 2

interface vlan

Configure a VLAN.

tagged

Specify which interfaces in a VLAN are tagged.

Far-End Failure Detection (FEFD)
Overview
FTOS supports Far-End Failure Detection (FEFD) on the Ethernet interfaces of the following
platforms as indicated by the characters that appear under each of the command headings:
E-Series e, S4810
The FEFD feature detects and reports far-end link failures.
•
•
•

FEFD is not supported on the Management interface.
During an RPM failover, FEFD is operationally disabled for approximately 8-10 seconds.
By default, FEFD is disabled.

Commands
The FEFD commands are:
•
•
•
•
•
•
•
•
•

debug fefd
fefd
fefd reset
fefd reset
fefd reset
fefd reset
fefd mode
fefd reset
show fefd

debug fefd
Enable debugging of FEFD.

e
Syntax

debug fefd {events | packets} [interface]
To disable debugging of FEFD, use the no debug fefd {events | packets} [interface]
command.

Parameters

events

Enter the keyword events to enable debugging of FEFD state changes.

Layer 2 | 947

www.dell.com | support.dell.com

packets

Enter the keyword packets to enable debugging of FEFD to view information on packets
sent and received.

interface

(OPTIONAL) Enter the following keywords and slot/port or number information:
•
•
•
•
•

Command Modes
Related
Commands

Command
History

For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by
the slot/port information.
For a SONET interface, enter the keyword sonet followed by the slot/port information.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by
the slot/port information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by the slot/
port information.

EXEC Privilege
fefd

Enable Far-End Failure Detection on an interface.

fefd reset

Enable FEFD globally on the system.

Version 8.3.12.0

Introduced on S4810.
Legacy E-Series command

fefd
Enable Far-End Failure Detection on an interface.

e
Syntax

fefd
To disable FEFD on an interface, enter no fefd.

Defaults
Command Modes
Usage
Information

Related
Commands

Command
History

Disabled.
INTERFACE
When you enter no fefd for an interface and fefd-global, FEFD is enabled on the interface
because the no fefd command is not retained in the configuration file. To keep the interface
FEFD disabled when the global configuration changes, use the fefd reset command.
fefd disable

Disable Far-End Failure Detection on an interface.

fefd reset

Enable FEFD globally on the system.

fefd mode

Change the FEFD mode on an interface.

Version 8.3.12.0

Introduced on S4810.
Legacy E-Series command

948

|

Layer 2

fefd disable
Disable FEFD on an interface only. This command overrides the fefd reset command for the
interface.

e
Syntax

fefd disable
To re-enable FEFD on an interface, enter no fefd disable.

Default
Command Modes
Related
Commands

Command
History

Not configured.
INTERFACE
fefd disable

Disable Far-End Failure Detection on an interface.

fefd reset

Enable FEFD globally on the system.

Version 8.3.12.0

Introduced on S4810.
Legacy E-Series command

fefd-global
Enable FEFD globally on the system.

e
Syntax

fefd-global [mode {normal | aggressive}]
To disable FEFD globally, use the no fefd-global [mode {normal | aggressive}] command
syntax.

Parameters

Defaults
Command Modes
Related
Commands

normal

(OPTIONAL) Enter the keywords mode normal to change the link state to
“unknown” when a far-end failure is detected by the software on that interface.
When the interface is placed in “unknown” state, the software brings down the line
protocol.
Default: Normal mode

aggressive

(OPTIONAL) Enter the keyword mode aggressive to change the link state to
“error-disabled” when a far-end failure is detected by the software on that interface.
When an interface is placed in “error-disabled” state, you must enter the fefd reset
command to reset the interface state.

Disabled.
CONFIGURATION
fefd

Enable Far-End Failure Detection.

fefd-global interval

Configure an interval between FEFD control packets.

show fefd

Layer 2 | 949

www.dell.com | support.dell.com

Command
History

Version 8.3.12.0

Introduced on S4810.
Legacy E-Series command

Usage
Information

If you enter only the fefd-global syntax, the mode is normal and the default interval is 15
seconds.
If you disable FEFD globally (no fefd-global), the system does not remove the FEFD
interface configuration.

fefd-global interval
Configure an interval between FEFD control packets.

e
Syntax

fefd-global interval seconds
To return to the default value, enter no fefd-global interval.

Parameters

seconds

Defaults

Enter a number as the time between FEFD control packets.
Range: 3 to 300 seconds
Default: 15 seconds

15 seconds

Command Modes

CONFIGURATION

Related
Commands

Command
History

fefd

Enable Far-End Failure Detection.

fefd-global

Enable FEFD globally on the system.

Version 8.3.12.0

Introduced on S4810.
Legacy E-Series command

fefd interval
Set an interval between control packets.

e
Syntax

fefd interval seconds
To return to the default value, enter no fefd interval.

Parameters

Defaults

950

|

Layer 2

seconds

15 seconds

Enter a number as the time between FEFD control packets.
Range: 3 to 300 seconds
Default: 15 seconds

Command Modes
Related
Commands
Command
History

INTERFACE
fefd
Version 8.3.12.0

Enable Far-End Failure Detection.
Introduced on S4810.
Legacy E-Series command

fefd mode
Change the FEFD mode on an interface.

e
Syntax

fefd mode {normal | aggressive}]
To return the FEFD mode to the default of normal, enter no fefd mode.

Parameters

Defaults
Command Modes
Related
Commands
Command
History

normal

(OPTIONAL) Enter the keyword normal to change the link state to “unknown”
when a far-end failure is detected by the software on that interface. When the
interface is placed in “unknown” state, the software brings down the line protocol.

aggressive

(OPTIONAL) Enter the keyword aggressive to change the link state to
“error-disabled” when a far-end failure is detected by the software on that interface.
When an interface is placed in “error-disabled” state, you must enter the fefd reset
command to reset the interface state.

normal
INTERFACE
fefd
Version 8.3.12.0

Enable Far-End Failure Detection.
Introduced on S4810.
Legacy E-Series command

Layer 2 | 951

www.dell.com | support.dell.com

fefd reset
Reset all interfaces or a single interface that was in “error-disabled” mode.

e
Syntax
Parameters

fefd reset [interface]
interface

(OPTIONAL) Enter the following keywords and slot/port or number information:
•
•
•
•
•

Defaults

Not configured.

Command Modes

EXEC Privilege

Related
Commands
Command
History

For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by
the slot/port information.
For a SONET interface, enter the keyword sonet followed by the slot/port information.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by
the slot/port information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by the slot/
port information.

fefd

Enable Far-End Failure Detection.

Introduced on S4810.

Version 8.3.12.0

Legacy E-Series command

show fefd
View FEFD status globally or on a specific interface.

e
Syntax
Parameters

show fefd [interface]
interface

(OPTIONAL) Enter the following keywords and slot/port or number information:
•
•
•
•
•

Command Modes

For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by
the slot/port information.
For a SONET interface, enter the keyword sonet followed by the slot/port information.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed
by the slot/port information.
For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by
the slot/port information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by the slot/
port information.

EXEC
EXEC Privilege

Example

952

|

Layer 2

FTOS#sh fefd
FEFD is globally 'ON', interval is 10 seconds, mode is 'Aggressive'.

INTERFACE

MODE

Gi 5/0
Gi 5/1
Gi 5/2
Gi 5/3
Gi 5/4
Gi 5/5
Gi 5/6
Gi 5/7
Gi 5/8
Gi 5/9
Gi 5/10
Gi 5/11
FTOS#

Aggressive
Aggressive
Aggressive
Aggressive
Aggressive
Aggressive
Aggressive
Aggressive
Aggressive
Aggressive
NA
Aggressive

Table 30-5.

Admin Shutdown
Admin Shutdown
Admin Shutdown
Admin Shutdown
Admin Shutdown
Admin Shutdown
Admin Shutdown
Admin Shutdown
Admin Shutdown
Admin Shutdown
Locally disabled
Err-disabled

Field

Description

Interface

Displays the interfaces type and number.

Mode

Displays the mode (aggressive or normal) or NA if the interface contains fefd reset in its
configuration.

Interval

Displays the interval between FEFD packets.

State

Displays the state of the interface and can be one of the following:

•
•
•

Command
History

STATE

Description of show fefd display

•
•

Related
Commands

INTERVAL
(second)
10
10
10
10
10
10
10
10
10
10
NA
10

bi-directional (interface is up and connected and ing neighbor’s echoes)
err-disabled (only found when the FEFD mode is aggressive and when the interface
has not n its neighbor’s echoes for 3 times the message interval. To reset an interface
in this state, use the fefd reset command.)
unknown (only found when FEFD mode is normal
locally disabled (interface contains the fefd reset command in its configuration)
Admin Shutdown (interface is disabled with the shutdown command)

fefd

Enable Far-End Failure Detection.

fefd disable

Disable FEFD on an interface only.

fefd-global

Enable FEFD globally on the system.

fefd reset

Reset all interfaces or a single interface that was in “error-disabled”
mode.

Version 8.3.12.0

Introduced on S4810.
Legacy E-Series command

Layer 2 | 953

954

|

Layer 2

www.dell.com | support.dell.com

31
Link Layer Discovery Protocol (LLDP)
Overview
Link Layer Discovery Protocol (LLDP) advertises connectivity and management from the
local station to the adjacent stations on an IEEE 802 LAN. LLDP facilitates multi-vendor
interoperability by using standard management tools to discover and make available a
physical topology for network management. The FTOS implementation of LLDP is based on
IEEE standard 801.1ab.
The basic LLDP commands are supported by FTOS on all Dell Force10 systems, as indicated
by the characters that appear below each command heading: e E-Series, c C-Series, s
S-Series, or

Commands
This chapter contains the following commands, in addition to the commands in the related
section — LLDP-MED Commands.
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

advertise dot1-tlv
advertise dot3-tlv
advertise management-tlv
clear lldp counters
clear lldp neighbors
debug lldp interface
disable
hello
mode
multiplier
protocol lldp (Configuration)
protocol lldp (Interface)
show lldp neighbors
show lldp statistics
show running-config lldp

Link Layer Discovery Protocol (LLDP) | 955

www.dell.com | support.dell.com

The starting point for using LLDP is invoking LLDP with the protocol lldp command in either
the CONFIGURATION or INTERFACE mode.
The information distributed by LLDP is stored by its recipients in a standard Management
Information Base (MIB). The information can be accessed by a network management system
through a management protocol such as SNMP.
the Link Layer Discovery Protocol chapter of the FTOS Configuration Guide for details on
implementing LLDP/LLDP-MED.

advertise dot1-tlv
ces

Syntax

Advertise dot1 TLVs (Type, Length, Value).

advertise dot1-tlv {port-protocol-vlan-id | port-vlan-id | vlan-name}

To remove advertised dot1-tlv, use the no advertise dot1-tlv {port-protocol-vlan-id | port-vlan-id |
vlan-name} command.
Parameters

Defaults
Command Modes
Command
History

Related
Commands

956

|

port-protocol-vlan-id

Enter the keyword port-protocol-vlan-id to advertise the port protocol
VLAN identification TLV.

port-vlan-id

Enter the keyword port-vlan-id to advertise the port VLAN
identification TLV.

vlan-name

Enter the keyword vlan-name to advertise the vlan-name TLV. This
keyword is only supported on C-Series and S-Series.

Disabled
CONFIGURATION (conf-lldp) and INTERFACE (conf-if-interface-lldp)
Version 8.3.7.0.

Introduced on S4810

Version 7.7.1.0

Introduced on S-Series, added vlan-name option.

Version 7.6.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced on E-Series

protocol lldp
(Configuration)

Enable LLDP globally.

debug lldp interface

Debug LLDP

show lldp neighbors

Display the LLDP neighbors

show running-config lldp

Display the LLDP running configuration

Link Layer Discovery Protocol (LLDP)

advertise dot3-tlv
ces

Syntax

Advertise dot3 TLVs (Type, Length, Value).

advertise dot3-tlv {max-frame-size}

To remove advertised dot3-tlv, use the no advertise dot3-tlv {max-frame-size} command.
Parameters

Defaults
Command Modes
Command
History

max-frame-size

Enter the keyword max-frame-size to advertise the dot3 maximum frame
size.

No default values or behavior
CONFIGURATION (conf-lldp) and INTERFACE (conf-if-interface-lldp)
Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced on E-Series

advertise management-tlv
ces

Syntax

Advertise management TLVs (Type, Length, Value).

advertise management -tlv {system-capabilities | system-description | system-name}

To remove advertised management TLVs, use the no advertise management -tlv
{system-capabilities | system-description | system-name} command.
Parameters

Defaults
Command Modes
Command
History

system-capabilities

Enter the keyword system-capabilities to advertise the system
capabilities TLVs.

system-description

Enter the keyword system-description to advertise the system
description TLVs.

system-name

Enter the keyword system-description to advertise the system
description TLVs.

No default values or behavior
CONFIGURATION (conf-lldp)
Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Introduced on S-Series

Link Layer Discovery Protocol (LLDP) | 957

www.dell.com | support.dell.com

Usage
Information

Version 7.6.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced on E-Series

All three command options — system-capabilities, system-description, and system-name} —-can
be invoked individually or together, in any sequence.

clear lldp counters
ces

Syntax
Parameters

Defaults
Command Modes
Command
History

Clear LLDP transmitting and receiving counters for all physical interfaces or a specific
physical interface.
clear lldp counters interface
interface

Enter the following keywords and slot/port or number information:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by
the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword gigabitEthernet
followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword tenGigabitEthernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed
by the slot/port information.

No default values or behavior
EXEC Privilege
Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced on E-Series

clear lldp neighbors
ces

Syntax

958

|

Clear LLDP neighbor information for all interfaces or a specific interfaces.

clear lldp neighbors {interface}

Link Layer Discovery Protocol (LLDP)

Parameters

Defaults
Command Modes
Command
History

interface

Enter the following keywords and slot/port or number information:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by
the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword gigabitEthernet
followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword tenGigabitEthernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed
by the slot/port information.

No default values or behavior
EXEC Privilege
Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced on E-Series

debug lldp interface
ces

Syntax

Enable LLDP debugging to display timer events, neighbor additions or deletions, and other
information about incoming and outgoing packets.
debug lldp interface {interface | all}{events | packet {brief | detail} {tx | rx | both}}

To disable debugging, use the no debug lldp interface {interface | all}{events} {packet {brief |
detail} {tx | rx | both}} command.
Parameters

interface

Enter the following keywords and slot/port or number information:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed
by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword gigabitEthernet
followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
tenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.
Note: The FastEthernet option is not supported on S-Series.

all

(OPTIONAL) Enter the keyword all to display information on all interfaces.

events

(OPTIONAL) Enter the keyword events to display major events such as
timer events.

packet

(OPTIONAL) Enter the keyword packet to display information regarding
packets coming in or going out.

brief

(OPTIONAL) Enter the keyword brief to display brief packet information.

Link Layer Discovery Protocol (LLDP) | 959

www.dell.com | support.dell.com

Defaults
Command Modes
Command
History

detail

(OPTIONAL) Enter the keyword detail to display detailed packet
information.

tx

(OPTIONAL) Enter the keyword tx to display transmit only packet
information.

rx

(OPTIONAL) Enter the keyword rx to display receive only packet
information

both

(OPTIONAL) Enter the keyword both to display both receive and transmit
packet information.

No default values or behavior
EXEC Privilege
Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced on E-Series

disable
ces

Syntax

Enable or disable LLDP.

disable

To enable LLDP, use the no disable
Defaults
Command Modes
Command
History

Related
Commands

960

|

Enabled, that is no disable
CONFIGURATION (conf-lldp) and INTERFACE (conf-if-interface-lldp)
Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced on E-Series

protocol lldp
(Configuration)

Enable LLDP globally.

debug lldp interface

Debug LLDP

show lldp neighbors

Display the LLDP neighbors

show running-config lldp

Display the LLDP running configuration

Link Layer Discovery Protocol (LLDP)

hello
ces

Syntax

Configure the rate at which the LLDP control packets are sent to its peer.

hello seconds

To revert to the default, use the no hello seconds command.
Parameters

Defaults
Command Modes
Command
History

seconds

Enter the rate, in seconds, at which the control packets are sent to its peer.
Rate: 5 to 180 seconds
Default: 30 seconds

30 seconds
CONFIGURATION (conf-lldp) and INTERFACE (conf-if-interface-lldp)
Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced on E-Series

mode
ces

Syntax

Set LLDP to receive or transmit.

mode {tx | rx}

To return to the default, use the no mode {tx | rx} command.
Parameters

Defaults
Command Modes
Command
History

tx

Enter the keyword tx to set the mode to transmit.

rx

Enter the keyword rx to set the mode to receive.

Both transmit and receive
CONFIGURATION (conf-lldp) and INTERFACE (conf-if-interface-lldp)
Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced on E-Series

Link Layer Discovery Protocol (LLDP) | 961

www.dell.com | support.dell.com

Related
Commands

protocol lldp
(Configuration)

Enable LLDP globally.

show lldp neighbors

Display the LLDP neighbors

multiplier
ces

Syntax

Set the number of consecutive misses before LLDP declares the interface dead.

multiplier integer

To return to the default, use the no multiplier integer command.
Parameters

Defaults
Command Modes
Command
History

integer

Enter the number of consecutive misses before the LLDP declares the interface dead.
Range: 2 - 10

4 x hello
CONFIGURATION (conf-lldp) and INTERFACE (conf-if-interface-lldp)
Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced on E-Series

protocol lldp (Configuration)
ces

Syntax

Enable LLDP globally on the switch.

protocol lldp

To disable LLDP globally on the chassis, use the no protocol lldp command.
Defaults
Command Modes
Command
History

962

|

Disabled
CONFIGURATION (conf-lldp)
Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced on E-Series

Link Layer Discovery Protocol (LLDP)

protocol lldp (Interface)
ces
Syntax

Enter the LLDP protocol in the INTERFACE mode.
[no] protocol lldp
To return to the global LLDP configuration mode, use the no protocol lldp command from the
Interface mode.

Defaults

LLDP is not enabled on the interface.

Command Modes

INTERFACE (conf-if-interface-lldp)

Command
History

Usage
Information

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced on E-Series

LLDP must be enabled globally from CONFIGURATION mode, before it can be configured
on an interface. This command places you in LLDP mode on the interface; it does not enable
the protocol.
When you enter the LLDP protocol in the Interface context, it overrides global
configurations. When you execute the no protocol lldp from the INTERFACE mode, interfaces
will begin to inherit the configuration from the global LLDP CONFIGURATION mode.

show lldp neighbors
ces

Syntax
Parameters

Defaults
Command Modes

Display LLDP neighbor information for all interfaces or a specified interface.

show lldp neighbors [interface] [detail]
interface

(OPTIONAL) Enter the following keywords and slot/port or number
information:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by
the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword gigabitEthernet
followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword tenGigabitEthernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed
by the slot/port information.

detail

(OPTIONAL) Enter the keyword detail to display all the TLV information,
timers, and LLDP tx and rx counters.

No default values or behavior
EXEC Privilege

Link Layer Discovery Protocol (LLDP) | 963

www.dell.com | support.dell.com

Command
History

Example

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced on E-Series

R1(conf-if-gi-1/31)#do show lldp neighbors
Loc PortID
Rem Host Name
Rem Port Id
Rem Chassis Id
------------------------------------------------------------------------Gi 1/21
Gi 1/31

Usage
Information

R2
R3

GigabitEthernet 2/11
GigabitEthernet 3/11

Omitting the keyword detail displays only the remote chassis ID, Port ID, and Dead Interval.

show lldp statistics
ces

Syntax
Defaults
Command Modes
Command
History

Example

Display the LLDP statistical information.

show lldp statistics

No default values or behavior
EXEC Privilege
Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced on E-Series

FTOS#show lldp statistics
Total number of neighbors:
Last table change time
:
Number of Table Inserts :
Number of Table Deletes :
Number of Table Drops
:
Number of Table Age Outs :
FTOS#

300
Mon Oct 02 16:00:52 2006
1621
200
0
400

show running-config lldp
ces
Syntax
Defaults

964

|

00:01:e8:06:95:3e
00:01:e8:09:c2:4a

Display the current global LLDP configuration.
show running-config lldp

No default values or behavior

Link Layer Discovery Protocol (LLDP)

Command Modes
Command
History

Example

EXEC Privilege
Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced on E-Series

FTOS#show running-config lldp
!
protocol lldp
advertise dot1-tlv port-protocol-vlan-id port-vlan-id
advertise dot3-tlv max-frame-size
advertise management-tlv system-capabilities system-description
hello 15
multiplier 3
no disable
FTOS#

LLDP-MED Commands
The LLDP-MED commands in this section are:
•
•
•
•
•
•
•
•
•
•

advertise med guest-voice
advertise med guest-voice-signaling
advertise med location-identification
advertise med power-via-mdi
advertise med softphone-voice
advertise med streaming-video
advertise med video-conferencing
advertise med video-signaling
advertise med voice
advertise med voice-signaling

FTOS LLDP-MED (Media Endpoint Discovery) commands are an extension of the set of
LLDP TLV advertisement commands. The C-Series and S-Series support all commands, as
indicated by these symbols underneath the command headings: c s
The E-Series generally supports the commands, too, as indicated by the e symbol under
command headings. However, LLDP-MED commands are more useful on the C-Series and
the S50V model of the S-Series, because they support Power over Ethernet (PoE) devices.
As defined by ANSI/TIA-1057, LLDP-MED provides organizationally specific TLVs (Type
Length Value), so that endpoint devices and network connectivity devices can advertise their
characteristics and configuration information. The Organizational Unique Identifier (OUI) for
the Telecommunications Industry Association (TIA) is 00-12-BB.
•

LLDP-MED Endpoint Device — any device that is on an IEEE 802 LAN
network edge, can communicate using IP, and uses the LLDP-MED framework.

Link Layer Discovery Protocol (LLDP) | 965

www.dell.com | support.dell.com

•

LLDP-MED Network Connectivity Device — any device that provides access
to an IEEE 802 LAN to an LLDP-MED endpoint device, and supports IEEE
802.1AB (LLDP) and TIA-1057 (LLDP-MED). The Dell Force10 system is an
LLDP-MED network connectivity device.

With regard to connected endpoint devices, LLDP-MED provides network connectivity
devices with the ability to:
•
•
•
•

manage inventory
manage Power over Ethernet (POE)
identify physical location
identify network policy

advertise med guest-voice
ces

Syntax

Configure the system to advertise a separate limited voice service for a guest user with their
own IP telephony handset or other appliances that support interactive voice services.
advertise med guest-voice {vlan-id layer2_priority DSCP_value} | {priority-tagged number}

To return to the default, use the no advertise med guest-voice {vlan-id layer2_priority DSCP_value}
| {priority-tagged number} command.
Parameters

Defaults
Command Modes
Command
History

Related
Commands

966

|

vlan-id

Enter the VLAN ID.
Range: 1 to 4094

layer2_priority

Enter the Layer 2 priority.
Range: 0 to 7

DSCP_value

Enter the DSCP value.
Range: 0 to 63

priority-tagged number

Enter the keyword priority-tagged followed the Layer 2 priority.
Range: 0 to 7

Unconfigured
CONFIGURATION (conf-lldp)
Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series and E-Series

protocol lldp
(Configuration)

Enable LLDP globally.

debug lldp interface

Debug LLDP.

show lldp neighbors

Display the LLDP neighbors.

show running-config lldp

Display the LLDP running configuration.

Link Layer Discovery Protocol (LLDP)

advertise med guest-voice-signaling
ces

Configure the system to advertise a separate limited voice service for a guest user when the
guest voice control packets use a separate network policy than the voice data.

Syntax

advertise med guest-voice-signaling {vlan-id layer2_priority DSCP_value} | {priority-tagged number}

To return to the default, use the no advertise med guest-voice-signaling {vlan-id layer2_priority
DSCP_value} | {priority-tagged number} command.
Parameters

Defaults
Command Modes
Command
History

Related
Commands

vlan-id

Enter the VLAN ID.
Range: 1 to 4094

layer2_priority

Enter the Layer 2 priority.
Range: 0 to 7

DSCP_value

Enter the DSCP value.
Range: 0 to 63

priority-tagged number

Enter the keyword priority-tagged followed the Layer 2 priority.
Range: 0 to 7

unconfigured
CONFIGURATION (conf-lldp)
\

Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series and E-Series

debug lldp interface

Debug LLDP

show lldp neighbors

Display the LLDP neighbors

show running-config lldp

Display the LLDP running configuration

advertise med location-identification
ces

Syntax

Configure the system to advertise a location identifier.

advertise med location-identification {coordinate-based value | civic-based value | ecs-elin value}

To return to the default, use the no advertise med location-identification {coordinate-based value |
civic-based value | ecs-elin value} command.

Link Layer Discovery Protocol (LLDP) | 967

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes
Command
History

Usage
Information

coordinate-based value

Enter the keyword coordinate-based followed by the coordinated
based location in hexadecimal value of 16 bytes.

civic-based value

Enter the keyword civic-based followed by the civic based location
in hexadecimal format.
Range: 6 to 255 bytes

ecs-elin value

Enter the keyword ecs-elin followed by the Emergency Call Service
(ecs) Emergency Location Identification Number (elin) numeric
location string.
Range: 10 to 25 characters

unconfigured
CONFIGURATION (conf-lldp)
Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series and E-Series

ECS — Emergency Call Service such as defined by TIA or National Emergency Numbering
Association (NENA)
ELIN — Emergency Location Identification Number, a valid North America Numbering
Plan format telephone number supplied for ECS purposes.

Related
Commands

debug lldp interface

Debug LLDP

show lldp neighbors

Display the LLDP neighbors

show running-config lldp

Display the LLDP running configuration

advertise med power-via-mdi
cs

Configure the system to advertise the Extended Power via MDI TLV.

Syntax

advertise med power-via-mdi

To return to the default, use the no advertise med power-via-mdi command.
Defaults
Command Modes
Command
History

968

|

unconfigured
CONFIGURATION (conf-lldp)
Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

Link Layer Discovery Protocol (LLDP)

Usage
Information
Related
Commands

Advertise the Extended Power via MDI on all ports that are connected to an 802.3af powered,
LLDP-MED endpoint device.
debug lldp interface

Debug LLDP

show lldp neighbors

Display the LLDP neighbors

show running-config lldp

Display the LLDP running configuration

advertise med softphone-voice
ces

Syntax

Configure the system to advertise softphone to enable IP telephony on a computer so that the
computer can be used as a phone.
advertise med softphone-voice {vlan-id layer2_priority DSCP_value} | {priority-tagged number}

To return to the default, use the no advertise med softphone-voice {vlan-id layer2_priority
DSCP_value} | {priority-tagged number} command.
Parameters

Defaults
Command Modes
Command
History

Related
Commands

vlan-id

Enter the VLAN ID.
Range: 1 to 4094

layer2_priority

Enter the Layer 2 priority (C-Series and E-Series only).
Range: 0 to 7

DSCP_value

Enter the DSCP value (C-Series and E-Series only).
Range: 0 to 63

priority-tagged number

Enter the keyword priority-tagged followed the Layer 2 priority.
Range: 0 to 7

unconfigured
CONFIGURATION (conf-lldp)
Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series and E-Series

debug lldp interface

Debug LLDP

show lldp neighbors

Display the LLDP neighbors

show lldp neighbors

Display the LLDP running configuration

advertise med streaming-video
ces

Syntax

Configure the system to advertise streaming video services for broadcast or multicast-based
video. This does not include video applications that rely on TCP buffering.
advertise med streaming-video {vlan-id layer2_priority DSCP_value} | {priority-tagged number}

Link Layer Discovery Protocol (LLDP) | 969

www.dell.com | support.dell.com

To return to the default, use the no advertise med streaming-video {vlan-id layer2_priority
DSCP_value} | {priority-tagged number} command.
Parameters

Defaults
Command Modes
Command
History

Related
Commands

vlan-id

Enter the VLAN ID.
Range: 1 to 4094

layer2_priority

Enter the Layer 2 priority (C-Series and E-Series only).
Range: 0 to 7

DSCP_value

Enter the DSCP value (C-Series and E-Series only).
Range: 0 to 63

priority-tagged number

Enter the keyword priority-tagged followed the Layer 2 priority.
Range: 0 to 7

unconfigured
CONFIGURATION (conf-lldp)
Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series and E-Series

debug lldp interface

Debug LLDP

show lldp neighbors

Display the LLDP neighbors

show lldp neighbors

Display the LLDP running configuration

advertise med video-conferencing
ces

Syntax

Configure the system to advertise dedicated video conferencing and other similar appliances
that support real-time interactive video.
advertise med video-conferencing {vlan-id layer2_priority DSCP_value} | {priority-tagged number}

To return to the default, use the no advertise med video-conferencing {vlan-id layer2_priority
DSCP_value} | {priority-tagged number} command.
Parameters

Defaults

970

|

vlan-id

Enter the VLAN ID.
Range: 1 to 4094

layer2_priority

Enter the Layer 2 priority (C-Series and E-Series only).
Range: 0 to 7

DSCP_value

Enter the DSCP value (C-Series and E-Series only).
Range: 0 to 63

priority-tagged number

Enter the keyword priority-tagged followed the Layer 2 priority.
Range: 0 to 7

unconfigured

Link Layer Discovery Protocol (LLDP)

Command Modes
Command
History

Related
Commands

CONFIGURATION (conf-lldp)
Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series and E-Series

debug lldp interface

Debug LLDP

show lldp neighbors

Display the LLDP neighbors

show running-config lldp

Display the LLDP running configuration

advertise med video-signaling
ces

Syntax

Configure the system to advertise video control packets that use a separate network policy
than video data.
advertise med video-signaling {vlan-id layer2_priority DSCP_value} | {priority-tagged number}

To return to the default, use the no advertise med video-signaling {vlan-id layer2_priority
DSCP_value} | {priority-tagged number} command.
Parameters

Defaults
Command Modes
Command
History

Related
Commands

vlan-id

Enter the VLAN ID.
Range: 1 to 4094

layer2_priority

Enter the Layer 2 priority (C-Series and E-Series only).
Range: 0 to 7

DSCP_value

Enter the DSCP value (C-Series and E-Series only).
Range: 0 to 63

priority-tagged number

Enter the keyword priority-tagged followed the Layer 2 priority.
Range: 0 to 7

unconfigured
CONFIGURATION (conf-lldp)
Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series and E-Series

debug lldp interface

Debug LLDP

show lldp neighbors

Display the LLDP neighbors

show lldp neighbors

Display the LLDP running configuration

Link Layer Discovery Protocol (LLDP) | 971

www.dell.com | support.dell.com

advertise med voice
ces

Syntax

Configure the system to advertise a dedicated IP telephony handset or other appliances
supporting interactive voice services.
advertise med voice {vlan-id layer2_priority DSCP_value} | {priority-tagged number}

To return to the default, use the no advertise med voice {vlan-id layer2_priority DSCP_value} |
{priority-tagged number} command.
Parameters

Defaults
Command Modes
Command
History

Related
Commands

vlan-id

Enter the VLAN ID.
Range: 1 to 4094

layer2_priority

Enter the Layer 2 priority (C-Series and E-Series only).
Range: 0 to 7

DSCP_value

Enter the DSCP value (C-Series and E-Series only).
Range: 0 to 63

priority-tagged number

Enter the keyword priority-tagged followed the Layer 2 priority.
Range: 0 to 7

unconfigured
CONFIGURATION (conf-lldp)
Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series and E-Series

debug lldp interface

Debug LLDP

show lldp neighbors

Display the LLDP neighbors

show running-config lldp

Display the LLDP running configuration

advertise med voice-signaling
ces
Syntax

Configure the system to advertise when voice control packets use a separate network policy
than voice data.
advertise med voice-signaling {vlan-id layer2_priority DSCP_value} | {priority-tagged number}

To return to the default, use the no advertise med voice-signaling {vlan-id layer2_priority
DSCP_value} | {priority-tagged number} command.
Parameters

972

|

vlan-id

Enter the VLAN ID.
Range: 1 to 4094

layer2_priority

Enter the Layer 2 priority (C-Series and E-Series only).
Range: 0 to 7

Link Layer Discovery Protocol (LLDP)

Defaults
Command Modes
Command
History

Related
Commands

DSCP_value

Enter the DSCP value (C-Series and E-Series only).
Range: 0 to 63

priority-tagged number

Enter the keyword priority-tagged followed the Layer 2 priority.
Range: 0 to 7

unconfigured
CONFIGURATION (conf-lldp)
Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series and E-Series

debug lldp interface

Debug LLDP

show lldp neighbors

Display the LLDP neighbors

show lldp neighbors

Display the LLDP running configuration

Link Layer Discovery Protocol (LLDP) | 973

www.dell.com | support.dell.com
974

|

Link Layer Discovery Protocol (LLDP)

32
Multicast Source Discovery Protocol
(MSDP)
Overview
MSDP (Multicast Source Discovery Protocol) connects multiple PIM Sparse-Mode (PIM-SM)
domains together. MSDP peers connect using TCP port 639. Peers send keepalives every 60
seconds. A peer connection is reset after 75 seconds if no MSDP packets are received. MSDP
connections are parallel with MBGP connections.
FTOS supports MSDP commands on the Dell Force10 platforms indicated by the characters
that appear under each of the command headings: e E-Series,
, z Z-Series.

Commands
The commands are:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

clear ip msdp peer
clear ip msdp sa-cache
debug ip msdp
ip msdp cache-rejected-sa
ip msdp default-peer
ip msdp log-adjacency-changes
ip msdp mesh-group
ip msdp originator-id
ip msdp peer
ip msdp redistribute
ip msdp sa-filter
ip msdp sa-limit
ip msdp shutdown
ip multicast-msdp
show ip msdp
show ip msdp sa-cache rejected-sa

Multicast Source Discovery Protocol (MSDP) | 975

www.dell.com | support.dell.com

clear ip msdp peer
e
Syntax
Parameters

Defaults
Command Modes
Command
History

Reset the TCP connection to the peer and clear all the peer statistics.
clear ip msdp peer {peer address}
peer address

Enter the peer address in a dotted decimal format (A.B.C.D.)

Not configured
EXEC Privilege
Version 6.2.1.1

Introduced

clear ip msdp sa-cache
e
Syntax
Parameters

Defaults
Command Modes
Command
History

Clears the entire source-active cache, the source-active entries of a particular multicast group,
rejected, or local source-active entries.
clear ip msdp sa-cache [group-address | rejected-sa | local]
group-address

Enter the group IP address in dotted decimal format (A.B.C.D.)

rejected-sa

Enter this keyword to clear the cache source-active entries that are rejected
because the RPF check failed, an SA filter or limit is configured, the RP or
MSDP peer is unreachable, or because of a format error.

local

Enter this keyword to clear out local PIM advertised entries. It applies the
redistribute filter (if present) while adding the local PIM SA entries to the
SA cache.

Without any options, this command clears the entire source-active cache.
EXEC Privilege
Version 7.8.1.0

Added local option.

Version 7.7.1.0

Added rejected-sa option.

Version 6.2.1.1

Introduced

debug ip msdp
e

Turn on MSDP debugging.
Syntax

debug ip msdp {event peer address | packet peer address | pim}

To turn debugging off, use the no debug ip msdp {event peer address | packet peer address | pim}
command.

976

|

Multicast Source Discovery Protocol (MSDP)

Parameters

Defaults
Command Modes
Command
History

event peer address

Enter the keyword event followed by the peer address in a dotted
decimal format (A.B.C.D.).

packet peer address

Enter the keyword packet followed by the peer address in a dotted
decimal format (A.B.C.D.).

pim

Enter the keyword pim to debug advertisement from PIM.

Not configured
EXEC Privilege
Version 8.3.7.0

Introduced on S4810

Version 6.2.1.1

Introduced

ip msdp cache-rejected-sa
e

Enable a MSDP cache for the rejected source-active entries.
Syntax

ip msdp cache-rejected-sa {number}

To clear the MSDP rejected source-active entries, use the no ip msdp cache-rejected-sa
{number} command followed by the ip msdp cache-rejected-sa {number} command.
Parameters

Defaults
Command Modes
Command
History

Related
Commands

number

Enter the number of rejected SA entries to cache.
Range: 0 to 32766

No default values or behavior
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.4.1.0

Introduced

show ip msdp sa-cache rejected-sa

Description.

ip msdp default-peer
e

Define a default peer from which to accept all Source-Active (SA) messages.
Syntax

ip msdp default-peer peer address [list name]

To remove the default peer, use the no ip msdp default-peer {peer address} list name command.

Multicast Source Discovery Protocol (MSDP) | 977

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes
Command
History

Usage
Information

peer address

Enter the peer address in a dotted decimal format (A.B.C.D.)

list name

Enter this keyword and specify a standard access list that contains the RP
address that should be treated as the default peer. If no access list is
specified, then all SAs from the peer are accepted.

Not configured
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Added the list option, and removed the prefix-list option.

Version 6.2.1.1

Introduced

If a list is not specified, all SA messages received from the default peer are accepted. You can
enter multiple default peer commands.

ip msdp log-adjacency-changes
e

Enable logging of MSDP adjacency changes.
Syntax

ip msdp log-adjacency-changes

To disable logging, use the no ip msdp log-adjacency-changes command.
Defaults
Command Modes
Command
History

Not configured
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 6.2.1.1

Introduced

ip msdp mesh-group
e

Configure a peer to be a member of a mesh group.

Syntax

ip msdp mesh-group {name} {peer address}

To remove the peer from a mesh group, use the no ip msdp mesh-group {name} {peer address}
command.
Parameters

Defaults

978

|

name

Enter a string of up to 16 characters long for as the mesh group name.

peer address

Enter the peer address in a dotted decimal format (A.B.C.D.)

Not configured

Multicast Source Discovery Protocol (MSDP)

Command Modes
Command
History

Usage
Information

CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 6.2.1.1

Introduced

A MSDP mesh group is a mechanism for reducing SA flooding, typically in an intra-domain
setting. When some subset of a domain’s MSDP speakers are fully meshed, they can be
configured into a mesh-group. If member X of a mesh-group receives a SA message from an
MSDP peer that is also a member of the mesh-group, member X accepts the SA message and
forwards it to all of its peers that are not part of the mesh-group.However, member X can not
forward the SA message to other members of the mesh-group.

ip msdp originator-id
e

Configure the MSDP Originator ID.
Syntax

ip msdp originator-id {interface}

To remove the originator-id, use the no ip msdp originator-id {interface} command.
Parameters

Defaults
Command Modes
Command
History

interface

Enter the following keywords and slot/port or number information:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by
the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Loopback interface, enter the keyword loopback followed by a number
from 0 to 16383.
• For a Port Channel interface, enter the keyword port-channel followed by a
number:
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a SONET interface, enter the keyword sonet followed by the slot/port
information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed
by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.

Not configured
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 6.2.1.1

Introduced

Multicast Source Discovery Protocol (MSDP) | 979

www.dell.com | support.dell.com

ip msdp peer
e

Configure an MSDP peer.
Syntax

To remove the MSDP peer, use the no ip msdp peer peer address [connect-source interface]
[description name] [sa-limit number] command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

980

ip msdp peer peer address [connect-source] [description] [sa-limit number]

|

peer address

Enter the peer address in a dotted decimal format (A.B.C.D.)

connect-source
interface

(OPTIONAL) Enter the keyword connect-source followed by one of the
interfaces and slot/port or number information:
• For a Fast Ethernet interface, enter the keyword FastEthernet
followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Loopback interface, enter the keyword loopback followed by a
number from 0 to 16383.
• For a Port Channel interface, enter the keyword port-channel
followed by a number:
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a SONET interface, enter the keyword sonet followed by the slot/
port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to
4094.

description name

(OPTIONAL) Enter the keyword description followed by a description
name (max 80 characters) to designate a description for the MSDP peer.

sa-limit number

(OPTIONAL) Enter the maximum number of SA entries in SA-cache.
Range: 1 to 500000
Default: 500000

As above
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 7.5.1.0

Added option for SA upper limit and description option

Version 6.2.1.1

Introduced

The connect-source option is used to supply a source IP address for the TCP connection. When
an interface is specified using the connect-source option, the primary configured address on the
interface is used.

Multicast Source Discovery Protocol (MSDP)

If the total number of SA messages received from the peer is already larger than the limit
when this command is applied, those SA messages will continue to be accepted. To enforce
the limit in such situation, use command clear ip msdp peer command to reset the peer.
Related
Commands

ip msdp sa-limit

Configure the MSDP SA Limit

clear ip msdp peer

Clear the MSDP peer.

show ip msdp

Display the MSDP information

ip msdp redistribute
e

Filter local PIM SA entries in the SA cache. SAs which are denied by the ACL will time out
and not be refreshed. Until they time out, they will continue to reside in the MSDP SA cache.
Syntax

Parameters

Defaults
Command Modes
Command
History

Usage
Information

ip msdp redistribute [list acl-name]
list acl-name

Enter the name of an extended ACL that contains permitted SAs. If you do not
use this option, all local entries are blocked.

Not configured
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced

Modifications to the ACL will not have an immediate affect on the sa-cache.
To apply the redistribute filter to entries already present in the SA cache, use clear ip msdp
sa-cache local.

ip msdp sa-filter
e

Permit or deny MSDP source active (SA) messages based on multicast source and/or group
from the specified peer.
Syntax

ip msdp sa-filter {in | out} peer-address list [access-list name]

Remove this configuration using the command no ip msdp sa-filter {in | out} peer address list
[access-list name]
Parameters

in

Enter the keyword in to enable incoming SA filtering.

out

Enter the keyword out to enable outgoing SA filtering.

Multicast Source Discovery Protocol (MSDP) | 981

www.dell.com | support.dell.com

Defaults
Command Modes
Command
History

peer-address

Enter the peer address of the MSDP peer in a dotted decimal format
(A.B.C.D.)

access-list name

(OPTIONAL) Enter the IP extended access list name that defines
from which peers SAs are to be permitted or denied.

Not configured
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Introduced on E-Series

ip msdp sa-limit
e

Configure the upper limit of SA (Source-Active) entries in SA-cache.
Syntax

ip msdp sa-limit number

To return to the default, use the no ip msdp sa-limit number command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

Related
Commands

number

Enter the maximum number of SA entries in SA-cache.
Range 0 to 40000

Default 50000
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.5.1.0

Introduced

FTOS counts the SA messages originated by itself and those received from the MSDP peers.
When the total SA messages reach this limit, the subsequent SA messages are dropped (even
if they pass RPF checking and policy checking). If the total number of SA messages is
already larger than the limit when this command is applied, those SA messages that are
already in FTOS will continue to be accepted. To enforce the limit in such situation, use the
clear ip msdp sa-cache command.
ip msdp peer

Configure the MSDP peer

clear ip msdp peer

Clear the MSDP peer.

show ip msdp

Display the MSDP information

ip msdp shutdown
e

982

|

Administratively shut down a configured MSDP peer.

Multicast Source Discovery Protocol (MSDP)

Syntax
Parameters

Defaults
Command Modes
Command
History

ip msdp shutdown {peer address}
peer address

Enter the peer address in a dotted decimal format (A.B.C.D.)

Not configured
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 6.2.1.1

Introduced

ip multicast-msdp
e

Enable MSDP.
Syntax

ip multicast-msdp

To exit MSDP, use the no ip multicast-msdp command.
Defaults
Command Modes
Command
History

Not configured
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 6.2.1.1

Introduced

show ip msdp
e

Display the MSDP peer status, SA cache, or peer summary.
Syntax

Parameters

Defaults
Command Modes

show ip msdp {peer peer address | sa-cache | summary}
peer peer address

Enter the keyword peer followed by the peer address in a dotted decimal
format (A.B.C.D.)

sa-cache

Enter the keyword sa-cache to display the Source-Active cache.

summary

Enter the keyword summary to display a MSDP peer summary.

Not configured
EXEC
EXEC Privilege

Multicast Source Discovery Protocol (MSDP) | 983

www.dell.com | support.dell.com

Command
History

Version 8.3.7.0

Introduced on S4810

Version 6.2.1.1

Introduced

Example
(show ip msdp
peer)

FTOS#show ip msdp peer 100.1.1.1

Example
(show ip msdp
sa-cache)

FTOS#show ip msdp sa-cache
MSDP Source-Active Cache - 1 entries
GroupAddr
SourceAddr
RPAddr
224.1.1.1
172.21.220.10
172.21.3.254
FTOS#

Example
(show ip msdp
summary)

FTOS#show
Peer Addr
72.30.1.2
72.30.2.2
72.30.3.2
FTOS#

Peer Addr: 100.1.1.1
Local Addr: 100.1.1.2(639) Connect Source: none
State: Established Up/Down Time: 00:00:08
Timers: KeepAlive 60 sec, Hold time 75 sec
SourceActive packet count (in/out): 0/0
SAs learned from this peer: 0
SA Filtering:
Input (S,G) filter: none
Output (S,G) filter: none
FTOS#

ip msdp summary
Local Addr State
72.30.1.1 Established
72.30.2.1 Established
72.30.3.1 Established

LearnedFrom
172.21.3.254

Source SA Up/Down
none
0 00:00:03
none
0 00:00:03
none
0 00:00:02

Expire UpTime
102 00:02:52

Description
peer1
peer2
test-peer-3

show ip msdp sa-cache rejected-sa
e
Syntax
Defaults
Command Modes

Display the rejected SAs in the SA cache.
show ip msdp sa-cache rejected-sa

No default values or behavior
EXEC
EXEC Privilege

Command
History
Example

984

|

Version 7.4.1.0

Introduced

FTOS#sh ip msdp sa-cache rejected-sa
MSDP Rejected SA Cache 200 rejected SAs received, cache-size 1000
UpTime
GroupAddr
SourceAddr
RPAddr
LearnedFrom
Reason
00:00:13
225.1.2.1
10.1.1.3
110.1.1.1
13.1.1.2
Rpf-Fail
00:00:13
225.1.2.2
10.1.1.4
110.1.1.1
13.1.1.2
Rpf-Fail
00:00:13
225.1.2.3
10.1.1.3
110.1.1.1
13.1.1.2
Rpf-Fail
00:00:13
225.1.2.4
10.1.1.4
110.1.1.1
13.1.1.2
Rpf-Fail
00:00:13
225.1.2.5
10.1.1.3
110.1.1.1
13.1.1.2
Rpf-Fail
00:00:13
225.1.2.6
10.1.1.4
110.1.1.1
13.1.1.2
Rpf-Fail
00:00:13
225.1.2.7
10.1.1.3
110.1.1.1
13.1.1.2
Rpf-Fail
00:00:13
225.1.2.8
10.1.1.4
110.1.1.1
13.1.1.2
Rpf-Fail
00:00:13
225.1.2.9
10.1.1.3
110.1.1.1
13.1.1.2
Rpf-Fail
00:00:13
225.1.2.10
10.1.1.4
110.1.1.1
13.1.1.2
Rpf-Fail

Multicast Source Discovery Protocol (MSDP)

00:00:13
00:00:13
00:00:13
00:00:13
00:00:13
00:00:13
00:00:13
00:00:13
00:00:13
00:00:13
FTOS#

225.1.2.11
225.1.2.11
225.1.2.12
225.1.2.13
225.1.2.14
225.1.2.15
225.1.2.16
225.1.2.17
225.1.2.18
225.1.2.19

10.1.1.3
10.1.1.3
10.1.1.4
10.1.1.3
10.1.1.4
10.1.1.3
10.1.1.4
10.1.1.3
10.1.1.4
10.1.1.3

110.1.1.1
110.1.1.1
110.1.1.1
110.1.1.1
110.1.1.1
110.1.1.1
110.1.1.1
110.1.1.1
110.1.1.1
110.1.1.1

13.1.1.2
13.1.1.2
13.1.1.2
13.1.1.2
13.1.1.2
13.1.1.2
13.1.1.2
13.1.1.2
13.1.1.2
13.1.1.2

Rpf-Fail
Rpf-Fail
Rpf-Fail
Rpf-Fail
Rpf-Fail
Rpf-Fail
Rpf-Fail
Rpf-Fail
Rpf-Fail
Rpf-Fail

Multicast Source Discovery Protocol (MSDP) | 985

www.dell.com | support.dell.com
986

|

Multicast Source Discovery Protocol (MSDP)

33
Multiple Spanning Tree Protocol (MSTP)
Overview
Multiple Spanning Tree Protocol (MSTP), as implemented by FTOS, conforms to IEEE
802.1s.
MSTP is supported by FTOS on all Dell Force10 systems as indicated by the characters that
appear below each command heading: e E-Series, c C-Series, s S-Series, or
.

Commands
The following commands configure and monitor MSTP:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

debug spanning-tree mstp
disable
forward-delay
hello-time
max-age
max-hops
msti
name
protocol spanning-tree mstp
revision
show config
show spanning-tree mst configuration
show spanning-tree msti
spanning-tree
spanning-tree msti
spanning-tree mstp
tc-flush-standard

Multiple Spanning Tree Protocol (MSTP) | 987

www.dell.com | support.dell.com

debug spanning-tree mstp
ces

Syntax

debug spanning-tree mstp [all | bpdu interface {in | out} | events]

To disable debugging, enter no debug spanning-tree mstp.
Parameters

Command Modes
Command
History

Example

988

Enable debugging of Multiple Spanning Tree Protocol and view information on the protocol.

|

all

(OPTIONAL) Enter the keyword all to debug all spanning tree operations.

bpdu interface {in |
out}

(OPTIONAL) Enter the keyword bpdu to debug Bridge Protocol Data Units.
(OPTIONAL) Enter the interface keyword along with the type slot/port of
the interface you want displayed. Type slot/port options are the following:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed
by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed
by a number:
C-Series and S-Series Range: 1 to 128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a SONET interface, enter the keyword sonet followed by the slot/
port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.
Optionally, enter an in or out parameter in conjunction with the optional
interface:
• For Receive, enter in
• For Transmit, enter out

events

(OPTIONAL) Enter the keyword events to debug MSTP events.

EXEC Privilege
Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

pre-Version 6.2.1.1

Introduced on E-Series

FTOS#debug spanning-tree mstp bpdu gigabitethernet 2/0 ?
in Receive (in)
out Transmit (out)

Multiple Spanning Tree Protocol (MSTP)

description
ces

Syntax

Enter a description of the Multiple Spanning Tree

description {description}

To remove the description, use the no description {description} command.
Parameters

Defaults
Command Modes
Command
History
Related
Commands

description

Enter a description to identify the Multiple Spanning Tree (80 characters
maximum).

No default behavior or values
SPANNING TREE (The prompt is “config-mstp”.)
pre-7.7.1.0

Introduced

protocol spanning-tree mstp

Enter Multiple SPANNING TREE mode on the switch.

disable
ces

Syntax

Globally disable Multiple Spanning Tree Protocol on the switch.

disable

To enable Multiple Spanning Tree Protocol, enter no disable.
Defaults
Command Modes
Command
History

Related
Commands

Multiple Spanning Tree Protocol is disabled
MULTIPLE SPANNING TREE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

Version 6.5.1.0

Introduced

protocol spanning-tree mstp

Enter MULTIPLE SPANNING TREE mode.

forward-delay
ces

The amount of time the interface waits in the Blocking State and the Learning State before
transitioning to the Forwarding State.

Multiple Spanning Tree Protocol (MSTP) | 989

www.dell.com | support.dell.com

Syntax

forward-delay seconds

To return to the default setting, enter no forward-delay.
Parameters

Defaults
Command Modes
Command
History

Related
Commands

seconds

Enter the number of seconds the interface waits in the Blocking State and the
Learning State before transiting to the Forwarding State.
Range: 4 to 30
Default: 15 seconds.

15 seconds
MULTIPLE SPANNING TREE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

Version 6.5.1.0

Introduced

max-age

Change the wait time before MSTP refreshes protocol configuration information.

hello-time

Change the time interval between BPDUs.

hello-time
ces

Syntax

Set the time interval between generation of Multiple Spanning Tree Bridge Protocol Data
Units (BPDUs).
hello-time seconds

To return to the default value, enter no hello-time.
Parameters

Defaults
Command Modes
Command
History

990

|

seconds

Enter a number as the time interval between transmission of BPDUs.
Range: 1 to 10.
Default: 2 seconds.

2 seconds
MULTIPLE SPANNING TREE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

Version 6.5.1.0

Introduced

Multiple Spanning Tree Protocol (MSTP)

Related
Commands

forward-delay

The amount of time the interface waits in the Blocking State and the Learning
State before transitioning to the Forwarding State.

max-age

Change the wait time before MSTP refreshes protocol configuration
information.

max-age
ces

Syntax

Set the time interval for the Multiple Spanning Tree bridge to maintain configuration
information before refreshing that information.
max-age seconds

To return to the default values, enter no max-age.
Parameters

Defaults
Command Modes
Command
History

Related
Commands

max-age

Enter a number of seconds the FTOS waits before refreshing configuration
information.
Range: 6 to 40
Default: 20 seconds.

20 seconds
MULTIPLE SPANNING TREE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

Version 6.5.1.0

Introduced

forward-delay

The amount of time the interface waits in the Blocking State and the Learning
State before transitioning to the Forwarding State.

hello-time

Change the time interval between BPDUs.

max-hops
ces
Syntax

Configure the maximum hop count.
max-hops number

To return to the default values, enter no max-hops.
Parameters

Defaults

range

Enter a number for the maximum hop count.
Range: 1 to 40
Default: 20

20 hops

Multiple Spanning Tree Protocol (MSTP) | 991

www.dell.com | support.dell.com

Command Modes
Command
History

Usage
Information

MULTIPLE SPANNING TREE
Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

Version 6.5.1.0

Introduced

The max-hops is a configuration command that applies to both the IST and all MST instances
in the MSTP region. The BPDUs sent out by the root switch set the remaining-hops parameter
to the configured value of max-hops. When a switch receives the BPDU, it decrements the
received value of the remaining hops and uses the resulting value as remaining-hops in the
BPDUs. If the remaining-hops reaches zero, the switch discards the BPDU and ages out any
information that it holds for the port.

msti
ces

Syntax

Configure Multiple Spanning Tree instance, bridge priority, and one or multiple VLANs
mapped to the MST instance.
msti instance {vlan range | bridge-priority priority}

To disable mapping or bridge priority no msti instance {vlan range | bridge-priority priority}
Parameters

Defaults
Command Modes
Command
History

Usage
Information

992

|

msti instance

Enter the Multiple Spanning Tree Protocol Instance
Range: zero (0) to 63

vlan range

Enter the keyword vlan followed by the identifier range value.
Range: 1 to 4094

bridge-priority priority

Enter the keyword bridge-priority followed by a value in
increments of 4096 as the bridge priority.
Range: zero (0) to 61440
Valid priority values are: 0, 4096, 8192, 12288, 16384, 20480,
24576, 28672, 32768, 36864, 40960, 45056, 49152, 53248, 57344,
and 61440. All other values are rejected.

default bridge-priority is 32768
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

pre-Version 6.2.1.1

Introduced on E-Series

By default, all VLANs are mapped to MST instance zero (0) unless you use the vlan range
command to map it to a non-zero instance.

Multiple Spanning Tree Protocol (MSTP)

name
ces

Syntax

The name you assign to the Multiple Spanning Tree region.

name region-name

To remove the region name, enter no name
Parameters

Defaults
Command Modes
Command
History

Usage
Information
Related
Commands

region-name

Enter the MST region name.
Range: 32 character limit

no default name
MULTIPLE SPANNING TREE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

Version 6.5.1.0

Introduced

For two MSTP switches to be within the same MSTP region, the switches must share the
same region name (including matching case).
msti

Map the VLAN(s) to an MST instance

revision

Assign revision number to the MST configuration.

protocol spanning-tree mstp
ces

Syntax

Enter the MULTIPLE SPANNING TREE mode to enable and configure the Multiple
Spanning Tree group.
protocol spanning-tree mstp

To disable the Multiple Spanning Tree group, enter no protocol spanning-tree mstp command.
Defaults
Command Modes
Command
History

Example

Not configured.
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

pre-Version 6.2.1.1

Introduced on E-Series

FTOS(conf)#protocol spanning-tree mstp

Multiple Spanning Tree Protocol (MSTP) | 993

www.dell.com | support.dell.com

FTOS(config-mstp)#no disable

Usage
Information

MSTP is not enabled when you enter the MULTIPLE SPANNING TREE mode. To enable
MSTP globally on the switch, enter no disable while in MULTIPLE SPANNING TREE
mode.
Refer to the FTOS Configuration Guide for more information on Multiple Spanning Tree
Protocol.

Related
Commands
Defaults
Command Modes
Usage
Information

disable

Disable Multiple Spanning Tree.

Disable.
MULTIPLE SPANNING TREE
Refer to the FTOS Configuration Guide for more information on Multiple Spanning Tree
Protocol.

revision
ces

Syntax

The revision number for the Multiple Spanning Tree configuration

revision range

To return to the default values, enter no revision.
Parameters

Defaults
Command Modes
Command
History

Usage
Information
Related
Commands

994

|

range

Enter the revision number for the MST configuration.
Range: 0 to 65535
Default: 0

0
MULTIPLE SPANNING TREE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

Version 6.5.1.0

Introduced

For two MSTP switches to be within the same MST region, the switches must share the same
revision number.
msti

Map the VLAN(s) to an MST instance

name

Assign the region name to the MST region.

Multiple Spanning Tree Protocol (MSTP)

show config
ces

Syntax
Command Modes
Command
History

View the current configuration for the mode. Only non-default values are shown.

show config

MULTIPLE SPANNING TREE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

Version 6.5.1.0

Introduced on E-Series

Example

FTOS(conf-mstp)#show config
!
protocol spanning-tree mstp
no disable
name CustomerSvc
revision 2
MSTI 10 VLAN 101-105
max-hops 5
FTOS(conf-mstp)#

show spanning-tree mst configuration
ces

Syntax

Command Modes

View the Multiple Spanning Tree configuration.

show spanning-tree mst configuration

EXEC
EXEC Privilege

Command
History

Example

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

pre-Version 6.2.1.1

Introduced on E-Series

FTOS#show spanning-tree mst configuration
MST region name: CustomerSvc
Revision: 2
MSTI
VID
10
101-105
FTOS#

Multiple Spanning Tree Protocol (MSTP) | 995

www.dell.com | support.dell.com

Usage
Information

You must enable Multiple Spanning Tree Protocol prior to using this command.

show spanning-tree msti
ces

Syntax
Parameters

Command Modes

View the Multiple Spanning Tree instance.

show spanning-tree msti [instance-number [brief]] [guard]
instance-number

[Optional] Enter the Multiple Spanning Tree Instance number
Range: 0 to 63

brief

[Optional] Enter the keyword brief to view a synopsis of the MST
instance.

guard

[Optional] Enter the keyword guard to display the type of guard enabled
on an MSTP interface and the current port state.

EXEC
EXEC Privilege

Usage
Information
Command
History

Example

You must enable Multiple Spanning Tree Protocol prior to using this command.

Version 8.4.2.1

Support for the optional guard keyword was added on the C-Series, S-Series,
and E-Series TeraScale.

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

Version 6.4.1.0

Expanded to display port error disable state (EDS) caused by loopback BPDU
inconsistency (Refer to the following example.)

FTOS#show spanning-tree msti 10
MSTI 10 VLANs mapped 101-105
Bridge Identifier has priority 32768, Address 0001.e802.3506
Configured hello time 2, max age 20, forward delay 15, max hops 5
Current root has priority 16384, Address 0001.e800.0a5c
Number of topology changes 0, last change occurred 3058087
Port 82 (GigabitEthernet 2/0) is designated Forwarding
Port path cost 0, Port priority 128, Port Identifier 128.82
Designated root has priority 16384, address 0001.e800.0a:5c
Designated bridge has priority 32768, address 0001.e802.35:06
Designated port id is 128.82, designated path cost
Number of transitions to forwarding state 1
BPDU (Mrecords): sent 1109, received 0
The port is not in the portfast mode
Port 88 (GigabitEthernet 2/6) is root Forwarding
Port path cost 0, Port priority 128, Port Identifier 128.88
Designated root has priority 16384, address 0001.e800.0a:5c

996

|

Multiple Spanning Tree Protocol (MSTP)

Designated bridge has priority 16384, address 0001.e800.0a:5c
Designated port id is 128.88, designated path cost
Number of transitions to forwarding state 4
BPDU (Mrecords): sent 19, received 1103
The port is not in the portfast mode
Port 89 (GigabitEthernet 2/7) is alternate Discarding
Port path cost 0, Port priority 128, Port Identifier 128.89
Designated root has priority 16384, address 0001.e800.0a:5c
Designated bridge has priority 16384, address 0001.e800.0a:5c
Designated port id is 128.89, designated path cost
Number of transitions to forwarding state 3
BPDU (Mrecords): sent 7, received 1103
The port is not in the portfast mode

Example
(show
spanning-tree msti
with EDS and LBK)

FTOS#show spanning-tree msti 0 brief
MSTI 0 VLANs mapped 1-4094
Executing IEEE compatible Spanning Tree Protocol
Root ID
Priority 32768, Address 0001.e801.6aa8
Root Bridge hello time 2, max age 20, forward delay 15, max hops 20
Bridge ID
Priority 32768, Address 0001.e801.6aa8
We are the root of MSTI 0 (CIST)
Configured hello time 2, max age 20, forward delay 15, max hops 20
CIST regional root ID Priority 32768, Address 0001.e801.6aa8
CIST external path cost 0
Interface
Designated
Name
PortID
Prio Cost
Sts Cost
Bridge ID
PortID
---------- -------- ---- ------- --- ------- -------------------- -------Gi 0/0
128.257 128 20000
EDS 0
32768 0001.e801.6aa8 128.257
Interface
Name
Role
PortID
Prio Cost
Sts Cost
Link-type Edge Boundary
---------- ------ -------- ---- ------- --- ------- --------- ---- -------Gi 0/0
ErrDis 128.257 128 20000
EDS 0
P2P
No
No
FTOS#show spanning-tree msti 0
MSTI 0 VLANs mapped 1-4094
Root Identifier has priority 32768, Address 0001.e801.6aa8
Root Bridge hello time 2, max age 20, forward delay 15, max hops 20
Bridge Identifier has priority 32768, Address 0001.e801.6aa8
Configured hello time 2, max age 20, forward delay 15, max hops 20
We are the root of MSTI 0 (CIST)
Current root has priority 32768, Address 0001.e801.6aa8
CIST regional root ID Priority 32768, Address 0001.e801.6aa8
CIST external path cost 0
Number of topology changes 1, last change occured 00:00:15 ago on Gi 0/0
Port 257 (GigabitEthernet 0/0) is LBK_INC Discarding
Port path cost 20000, Port priority 128, Port Identifier 128.257
Designated root has priority 32768, address 0001.e801.6aa8
Designated bridge has priority 32768, address 0001.e801.6aa8
Designated port id is 128.257, designated path cost 0
Number of transitions to forwarding state 1
BPDU (MRecords): sent 21, received 9
The port is not in the Edge port mode

Example
(show
spanning-tree msti
guard)

FTOS#show spanning-tree msti 5 guard
Interface
Name
Instance
Sts
Guard type
--------- ------------------------Gi 0/1
5
INCON(Root) Rootguard
Gi 0/2
5
FWD
Loopguard
Gi 0/3
5
EDS(Shut)
Bpduguard

Multiple Spanning Tree Protocol (MSTP) | 997

www.dell.com | support.dell.com

Table 33-1.

show spanning-tree msti guard Command Information

Field

Description

Interface Name

MSTP interface

Instance

MSTP instance

Sts

Port state: root-inconsistent (INCON Root), forwarding (FWD), listening
(LIS), blocking (BLK), or shut down (EDS Shut)

Guard Type

Type of STP guard configured (Root, Loop, or BPDU guard)

spanning-tree
ces

Syntax

Enable Multiple Spanning Tree Protocol on the interface.

spanning-tree

To disable the Multiple Spanning Tree Protocol on the interface, use no spanning-tree
Parameters

Defaults
Command Modes
Command
History

spanning-tree

Enter the keyword spanning-tree to enable the MSTP on the interface.
Default: Enable

Enable
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

pre-Version 6.2.1.0

Introduced on E-Series

spanning-tree msti
ces

Syntax

998

|

Configure Multiple Spanning Tree instance cost and priority for an interface.

spanning-tree msti instance {cost cost | priority priority}

Multiple Spanning Tree Protocol (MSTP)

Parameters

Defaults
Command Modes
Command
History

msti instance

Enter the keyword msti and the MST Instance number.
Range: zero (0) to 63

cost cost

(OPTIONAL) Enter the keyword cost followed by the port cost value.
Range: 1 to 200000
Defaults:
• 100 Mb/s Ethernet interface = 200000
• 1-Gigabit Ethernet interface = 20000
• 10-Gigabit Ethernet interface = 2000
• Port Channel interface with one 100 Mb/s Ethernet = 200000
• Port Channel interface with one 1-Gigabit Ethernet = 20000
• Port Channel interface with one 10-Gigabit Ethernet = 2000
• Port Channel with two 1-Gigabit Ethernet = 18000
• Port Channel with two 10-Gigabit Ethernet = 1800
• Port Channel with two 100-Mbps Ethernet = 180000

priority priority

Enter keyword priority followed by a value in increments of 16 as the
priority.
Range: 0 to 240.
Default: 128

cost

= depends on the interface type; priority = 128

INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

Version 6.5.1.0

Introduced on E-Series

spanning-tree mstp
ces

Syntax
Parameters

Configures a Layer 2 MSTP interface as an edge port with (optionally) a Bridge Protocol
Data Unit (BPDU) guard, or enables the root guard or loop guard feature on the interface.
spanning-tree mstp {edge-port [bpduguard [shutdown-on-violation]] | loopguard | rootguard}
edge-port

Enter the keyword edge-port to configure the interface as a Multiple Spanning
Tree edge port.

bpduguard

(OPTIONAL) Enter the keyword portfast to enable Portfast to move the
interface into forwarding mode immediately after the root fails.
Enter the keyword bpduguard to disable the port when it receives a BPDU.

shutdown-on-vi
olation

(OPTIONAL) Enter the keyword shutdown-on-violation to hardware disable
an interface when a BPDU is received and the port is disabled.

loopguard

(C-, S-, and E-Series TeraScale only) Enter the keyword loopguard to enable
STP loop guard on an MSTP port or port-channel interface.

rootguard

(C-, S-, and E-Series TeraScale only) Enter the keyword rootguard to enable
root guard on an MSTP port or port-channel interface.

Multiple Spanning Tree Protocol (MSTP) | 999

www.dell.com | support.dell.com

Command Modes
Command
History

Usage
Information

INTERFACE
Version 8.4.2.1

Introduced the loopguard and rootguard options on the E-Series TeraScale,
C-Series, and S-Series.

Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduced hardware shutdown-on-violation option

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

Version 6.1.1.0

Support for BPDU guard added

On an MSTP switch, a port configured as an edge port will immediately transition to the
forwarding state. Only ports connected to end-hosts should be configured as an edge port.
Consider an edge port similar to a port with spanning-tree portfast enabled.
If shutdown-on-violation is not enabled, BPDUs will still be sent to the RPM CPU.
Root guard and loop guard cannot be enabled at the same time on a port. For example, if you
configure loop guard on a port on which root guard is already configured, the following error
message is displayed:
% Error: RootGuard is configured. Cannot configure LoopGuard.

When used in an MSTP network, if root guard blocks a boundary port in the CIST, the port is
also blocked in all other MST instances.
Enabling Portfast BPDU guard and loop guard at the same time on a port results in a port that
remains in a blocking state and prevents traffic from flowing through it. For example, when
Portfast BPDU guard and loop guard are both configured:
•
•

If a BPDU is received from a remote device, BPDU guard places the port in an
err-disabled blocking state and no traffic is forwarded on the port.
If no BPDU is received from a remote device, loop guard places the port in a
loop-inconsistent blocking state and no traffic is forwarded on the port.

tc-flush-standard
ces

Syntax

Enable the MAC address flushing upon receiving every topology change notification.

tc-flush-standard

To disable, use the no tc-flush-standard command.
Defaults
Command Modes

1000

|

Disabled
CONFIGURATION

Multiple Spanning Tree Protocol (MSTP)

Command
History

Usage
Information

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Added support for S-Series

Version 7.5.1.0

Added support for C-Series

Version 6.5.1.0

Introduced

By default FTOS implements an optimized flush mechanism for MSTP. This helps in flushing
the MAC addresses only when necessary (and less often) allowing for faster convergence
during topology changes. However, if a standards-based flush mechanism is needed, this knob
command can be turned on to enable flushing MAC addresses upon receiving every topology
change notification.

Multiple Spanning Tree Protocol (MSTP) | 1001

www.dell.com | support.dell.com
1002

|

Multiple Spanning Tree Protocol (MSTP)

34
Multicast
Overview
The multicast commands are supported by FTOS on all Dell Force10 platforms as indicated
by the characters that appear under each of the command headings: e E-Series, c
C-Series, s S-Series, or
.
This chapter contains the following sections:
•
•

IPv4 Multicast Commands
IPv6 Multicast Commands

IPv4 Multicast Commands
The IPv4 Multicast commands are:
•
•
•
•
•
•
•
•
•
•
•
•
•

clear ip mroute
clear ip mroute snooping
ip mroute
ip multicast-lag-hashing
ip multicast-limit
ip multicast-limit
mac-flood-list
mtrace
queue backplane multicast
restrict-flooding
show ip mroute
show ip rpf
show queue backplane multicast

clear ip mroute
ces

Clear learned multicast routes on the multicast forwarding table. To clear the PIM tree
information base, use clear ip pim tib command.

Multicast | 1003

www.dell.com | support.dell.com

Syntax
Parameters

Command Modes
Command
History

clear ip mroute {group-address [source-address]

| *}

group-address
[source-address]

Enter multicast group address and source address (if desired), in dotted
decimal format, to clear information on a specific group.

*

Enter * to clear all multicast routes.

EXEC Privilege
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on C-Series

E-Series legacy command
Related
Commands

show ip pim tib

Show the PIM Tree Information Base.

clear ip mroute snooping
ex

Clear the multicast routes learned through PIM-SM snooping from the IPv4 multicast
snooping table. To clear tree information learned through PIM-SM snooping from the PIM
tree information base, use clear ip pim snooping tib command.

Syntax

clear ip mroute snooping {vlan vlan-id [group-address [source-address]

Parameters

Command Modes
Command
History
Related
Commands

| *}

vlan vlan-id

Enter a VLAN ID to clear information learned through PIM-SM snooping
about a specified VLAN. Valid VLAN IDs: 1 to 4094.

group-address
[source-address]

(OPTIONAL) Enter a group address and, optionally, a source address in
dotted decimal format, to clear information learned through PIM-SM
snooping about a specified multicast group and source.

*

Enter * to clear all multicast routes learned through PIM-SM snooping.

EXEC Privilege
Version 8.4.1.1

Introduced on E-Series ExaScale

show ip pim
snooping tib

Display the information from the PIM tree information base learned
through PIM snooping.

show ip pim tib

Show the PIM Tree Information Base.

ip mroute
ces

Syntax

1004

|

Multicast

Assign a static mroute.

ip mroute destination mask {ip-address | null 0| {{bgp| ospf} process-id | isis | rip | static} {ip-address
| tag | null 0}} [distance]

To delete a specific static mroute, use the command ip mroute destination mask {ip-address | null
0| {{bgp| ospf} process-id | isis | rip | static} {ip-address | tag | null 0}} [distance].
To delete all mroutes matching a certain mroute, use the no ip mroute destination mask
command.
Parameters

Defaults
Command Modes
Command
History

destination

Enter the IP address in dotted decimal format of the destination
device.

mask

Enter the mask in slash prefix formation ( /x ) or in dotted
decimal format.

null 0

(OPTIONAL) Enter the null followed by zero (0).

[protocol [process-id | tag]
ip-address]

(OPTIONAL) Enter one of the routing protocols:
• Enter the BGP as-number followed by the IP address in
dotted decimal format of the reverse path forwarding (RPF)
neighbor.
Range:1-65535
• Enter the OSPF process identification number followed by
the IP address in dotted decimal format of the reverse path
forwarding (RPF) neighbor.
Range: 1-65535
• Enter the IS-IS alphanumeric tag string followed by the IP
address in dotted decimal format of the reverse path
forwarding (RPF) neighbor.
• Enter the RIP IP address in dotted decimal format of the
reverse path forwarding (RPF) neighbor.

static ip-address

(OPTIONAL) Enter the Static IP address in dotted decimal
format of the reverse path forwarding (RPF) neighbor.

ip-address

(OPTIONAL) Enter the IP address in dotted decimal format of
the reverse path forwarding (RPF) neighbor.

distance

(OPTIONAL) Enter a number as the distance metric assigned to
the mroute.
Range: 0 to 255

Not configured.
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

E-Series legacy command
Related
Commands

show ip mroute

View the E-Series routing table.

ip multicast-lag-hashing
e
Syntax

Distribute multicast traffic among Port Channel members in a round-robin fashion.
ip multicast-lag-hashing

Multicast | 1005

www.dell.com | support.dell.com

To revert to the default, enter no ip multicast-lag-hashing.
Defaults
Command Modes
Command
History
Usage
Information

Related
Commands

Disabled
CONFIGURATION
Version 6.3.1.0

Introduced for E-Series

By default, one Port Channel member is chosen to forward multicast traffic. With this feature
turned on, multicast traffic will be distributed among the Port Channel members in a
round-robin fashion. This feature applies to the routed multicast traffic. If IGMP Snooping is
turned on, this feature also applies to switched multicast traffic.
ip multicast-limit

Enable IP multicast forwarding.

ip multicast-limit
ces

Syntax
Parameters

Defaults
Command Modes
Command
History

Usage
Information

1006

|

Multicast

Use this feature to limit the number of multicast entries on the system.

ip multicast-limit limit
limit

Enter the desired maximum number of multicast entries on the system.
E-Series Range: 1 to 50000
E-Series Default: 15000
C-Series Range: 1 to 10000
C-Series Default: 4000
S-Series Range: 1 to 2000
S-Series Default: 400

As above
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on C-Series

Version 7.6.1.0

Introduced on E-Series

This features allows the user to limit the number of multicast entries on the system. This
number is the sum total of all the multicast entries on all line cards in the system. On each line
card, the multicast module will only install the maximum possible number of entries,
depending on the configured CAM profile.

The IN-L3-McastFib CAM partition is used to store multicast routes and is a separate
hardware limit that is exists per port-pipe. Any software-configured limit might be
superseded by this hardware space limitation. The opposite is also true, the CAM partition
might not be exhausted at the time the system-wide route limit set by the ip multicast-limit is
reached.
Related
Commands

show ip igmp groups

View the IGMP groups.

ip multicast-routing
ces

Syntax

Enable IP multicast forwarding.

ip multicast-routing

To disable multicast forwarding, enter no ip multicast-routing.
Defaults
Command Modes
Command
History

Disabled
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

E-Series legacy command
Usage
Information

You must enter this command to enable multicast on the E-Series.
After you enable multicast, you can enable IGMP and PIM on an interface. In the
INTERFACE mode, enter the ip pim sparse-mode command to enable IGMP and PIM on the
interface.

Related
Commands

ip pim sparse-mode

Enable IGMP and PIM on an interface.

mac-flood-list
e
Syntax
Parameters

Provide an exception to the restrict-flood configuration so that multicast frames within a
specified MAC address range to be flooded on all ports in a VLAN.
mac-flood-list mac-address mask vlan vlan-list [min-speed speed]

mac-address

Enter a multicast MAC address in hexadecimal format.

mac-mask

Enter the MAC Address mask.

Multicast | 1007

www.dell.com | support.dell.com

Defaults
Command Modes
Command
History
Usage
Information

vlan vlan-list

Enter the VLAN(s) in which flooding will be restricted. Separate
values by commas — no spaces ( 1,2,3 ) or indicate a list of values
separated by a hyphen (1-3).
Range: 1 to 4094

min-speed min-speed

(OPTIONAL) Enter the minimum link speed that ports must have to
receive the specified flooded multicast traffic.

None
CONFIGURATION
Version 7.7.1.0

Introduced on E-Series

When the mac-flood-list with the min-speed option is used in combination with the restrict-flood
command, mac-flood-list command has higher priority than the restrict-flood command.
Therefore, all multicast frames matching the mac-address range specified using the
mac-flood-list command are flooded according to the mac-flood-list command. Only the
multicast frames not matching the mac-address range specified using the mac-flood-list
command are flooded according to the restrict-flood command.

Related
Commands

restrict-flooding

Prevent Layer 2 multicast traffic from being forwarded on ports below a
specified speed.

mtrace
e
Syntax
Parameters

Command Modes
Command
History

Trace a multicast route from the source to the receiver.
mtrace {source-address/hostname} {destination-address/hostname} {group-address}
source-address/
hostname

Enter the source IP address in dotted decimal format (A.B.C.D).

destination-address/
hostname

Enter the destination (receiver) IP address in dotted decimal format
(A.B.C.D).

group-address

Enter the multicast group address in dotted decimal format (A.B.C.D).

EXEC Privilege
Version 7.5.1.0

Expanded to support originator

Version 7.4.1.0

Expanded to support intermediate (transit) router

E-Series legacy command
Usage
Information

1008

|

Multicast

Mtrace is an IGMP protocol based on the Multicast trace route facility and implemented
according to the IETF draft “A trace route facility for IP Multicast”
(draft-fenner-traceroute-ipm-01.txt). FTOS supports the Mtrace client and transmit
functionality.

As an Mtrace client, FTOS transmits Mtrace queries, receives, parses and prints out the
details in the response packet received.
As an Mtrace transit or intermediate router, FTOS returns the response to Mtrace queries.
Upon receiving the Mtrace request, FTOS computes the RPF neighbor for the source, fills in
the request and the forwards the request to the RPF neighbor. While computing the RPF
neighbor, the static mroute and mBGP route is preferred over the unicast route.

queue backplane multicast
e
Syntax
Parameters

Defaults
Command Modes
Command
History

Reallocate the amount of bandwidth dedicated to multicast traffic.
queue backplane multicast bandwidth-percentage percentage
percentage

80% of the scheduler weight is for unicast traffic and 20% is for multicast traffic by default.
CONFIGURATION
Version 7.7.1.0

Example

Related
Commands

Enter the percentage of backplane bandwidth to be dedicated to
multicast traffic.
Range: 5-95

Introduced on E-Series

FTOS(conf)#queue backplane multicast bandwidth-percent 30
FTOS(conf)#exit
FTOS#00:14:04: %RPM0-P:CP %SYS-5-CONFIG_I: Configured from console by
show run | grep bandwidth
queue backplane multicast bandwidth-percent 30
FTOS#

show queue backplane
multicast

console

Display the backplane bandwidth configuration about how much
bandwidth is dedicated to multicast versus unicast.

restrict-flooding
et
Syntax
Parameters

Defaults
Command Modes

Prevent Layer 2 multicast traffic from being flooded on ports below a specified link speed.
restrict-flooding multicast min-speed speed
min-speed min-speed

Enter the minimum link speed that a port must have to receive
flooded multicast traffic.
Range: 1000

None
INTERFACE VLAN

Multicast | 1009

www.dell.com | support.dell.com

Command
History
Usage
Information

Version 7.7.1.0

Introduced on E-Series TeraScale

This command restricts flooding for all unknown multicast traffic on ports below a certain
speed. If you want some multicast traffic to be flooded on slower ports, use the command
mac-flood-list without the min-speed option, in combination with restrict-flooding. With
mac-flood-list you specify the traffic you want to be flooded using a MAC address range.
You may not use unicast MAC addresses when specifying MAC address ranges, and do not
overlap MAC addresses ranges, when creating multiple mac-flood-list entries for the same
VLAN. Restricted Layer 2 Flooding is not compatible with MAC accounting or VMANs.

Related
Commands

mac-flood-list

Flood multicast frames with specified MAC addresses to all ports in a
VLAN.

show ip mroute
ces

Syntax

Parameters

View the Multicast Routing Table.

show ip mroute [static | group-address [source-address] | active [rate] | count | snooping [vlan vlan-id]
[group-address [source-address]] | summary]
static

(OPTIONAL) Enter the keyword static to view static multicast routes.

group-address
[source-address]

(OPTIONAL) Enter the multicast group-address to view only routes
associated with that group.
Enter the source-address to view routes with that group-address and
source-address.

active [rate]

(OPTIONAL) Enter the keyword active to view only active multicast
routes. Enter a rate to view active routes over the specified rate.
Range: 0 to 10000000

count

(OPTIONAL) Enter the keyword count to view the number of multicast
routes and packets on the E-Series.

snooping
[vlan vlan-id]

(OPTIONAL) E-Series ExaScale and S4810 only:
Enter the keyword snooping to display information on the multicast
routes discovered by PIM-SM snooping.
Enter a VLAN ID to limit the information displayed to the multicast
routes discovered by PIM-SM snooping on a specified VLAN. Valid
VLAN IDs: 1 to 4094.
Enter a multicast group address and, optionally, a source multicast
address in dotted decimal format (A.B.C.D) to limit the information
displayed to the multicast routes discovered by PIM-SM snooping for a
specified multicast group and source.

[group-address
[source-address]]

summary

Command Modes

1010

|

Multicast

EXEC

(OPTIONAL) Enter the keyword summary to view routes in a tabular
format.

EXEC Privilege
Command
History

Version 8.4.1.1

Support for the snooping keyword and optional vlan vlan-id, group-address,
and source-address parameters were added on E-Series ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

E-Series legacy command
Example
(show ip mroute
static)

Example
(show ip mroute
snooping)

FTOS#show ip mroute static
Mroute: 23.23.23.0/24, interface: Lo 2
Protocol: static, distance: 0, route-map: none, last change: 00:00:23
FTOS#show ip mroute snooping
IPv4 Multicast Snooping Table
(*, 224.0.0.0), uptime 17:46:23
Incoming vlan: Vlan 2
Outgoing interface list:
GigabitEthernet 4/13
(*, 225.1.2.1), uptime 00:04:16
Incoming vlan: Vlan 2
Outgoing interface list:
GigabitEthernet 4/11
GigabitEthernet 4/13
(165.87.1.7, 225.1.2.1), uptime 00:03:17
Incoming vlan: Vlan 2
Outgoing interface list:
GigabitEthernet 4/11
GigabitEthernet 4/13
GigabitEthernet 4/20

Example
(show ip mroute)

FTOS#show ip mroute
IP Multicast Routing Table
(*, 224.10.10.1), uptime 00:05:12
Incoming interface: GigabitEthernet 3/12
Outgoing interface list:
GigabitEthernet 3/13
(1.13.1.100, 224.10.10.1), uptime 00:04:03
Incoming interface: GigabitEthernet 3/4
Outgoing interface list:
GigabitEthernet 3/12
GigabitEthernet 3/13
(*, 224.20.20.1), uptime 00:05:12
Incoming interface: GigabitEthernet 3/12
Outgoing interface list:
GigabitEthernet 3/4

Multicast | 1011

www.dell.com | support.dell.com

Table 34-1.

show ip mroute Command Example Fields

Field

Description

(S,G)

Displays the forwarding entry in the multicast route table.

uptime

Displays the amount of time the entry has been in the multicast
forwarding table.

Incoming interface

Displays the reverse path forwarding (RPF) information towards
the source for (S,G) entries and the RP for (*,G) entries.

Outgoing interface list:

Lists the interfaces that meet one of the following:
• a directly connected member of the Group
• statically configured member of the Group
• received a (*,G) or (S,G) Join message

show ip rpf
ces

Syntax
Command Modes

View reverse path forwarding.

show ip rpf

EXEC
EXEC Privilege

Command
History

Version 8.3.7.0

Introduced on S4810

E-Series legacy command
Usage
Information

Static mroutes are used by network administrators to control the reach-ability of the multicast
sources. If a PIM registered multicast source is reachable via static mroute as well as unicast
route, the distance of each route is examined and the route with shorter distance is the one the
PIM selects for reach-ability.
Note: The default distance of mroutes is zero (0) and is CLI configurable on a per route basis.

Example

FTOS#show ip rpf
RPF information for 10.10.10.9
RPF interface: Gi 3/4
RPF neighbor: 165.87.31.4
RPF route/mask: 10.10.10.9/255.255.255.255
RPF type: unicast

show queue backplane multicast
e
Syntax

1012

|

Multicast

Display the backplane bandwidth configuration about how much bandwidth is dedicated to
multicast versus unicast.
show queue backplane multicast bandwidth-percentage

Defaults
Command Modes

None
EXEC
EXEC Privilege

Command
History

Version 7.7.1.0

Example

Related
Commands

Introduced on E-Series

FTOS#show queue backplane multicast bandwidth-percent
Configured multicast bandwidth percentage is 80

queue backplane
multicast

Reallocate the amount of bandwidth dedicated to multicast traffic.

IPv6 Multicast Commands
IPv6 Multicast commands are:
•
•
•
•
•
•
•

clear ipv6 mroute
debug ipv6 mld_host
ipv6 multicast-limit
ip multicast-limit
show ipv6 mroute
show ipv6 mroute mld
show ipv6 mroute summary

clear ipv6 mroute
e
Syntax
Parameters

Defaults
Command Modes
Command
History

Clear learned multicast routes on the multicast forwarding table. To clear the PIM tib, use
clear ip pim tib command.
clear ipv6 mroute {group-address [source-address] | *}
group-address
[source-address]

Enter multicast group address and source address (if desired) to clear
information on a specific group. Enter the addresses in the x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zero.

*

Enter * to clear all multicast routes.

No default behavior or values
EXEC Privilege
Version 7.4.1.0

Introduced

Multicast | 1013

www.dell.com | support.dell.com

Related
Commands

show ipv6 pim tib

Display the IPv6 PIM Tree Information Base.

debug ipv6 mld_host
Enable the collection of debug information for MLD host transactions.
Syntax

[no] debug ipv6 mld_host [int-count | interface type] [slot/port-range]

Use the no debug ipv6 mld_host command to discontinue collection of debug information for
the MLD host transactions.
Parameters

Default
Command Modes
Command
History
Usage
Information

int-count

Enter the keyword count to indicate the number of required debug messages.

interface type

Enter the following keywords and slot/port information:
• For a 1-Gigabit Ethernet interface, enter the keyword gigabitethernet
followed by the slot/port information.
• For a 10G Ethernet interface, enter the keyword tengigabitethernet
followed by the slot/port information.
• For a 40G interface, enter the keyword fortyGigE followed by the slot/port
information.
• For a management interface enter the keyword managementinterface
followed by the slot/port information.
• For a port-channel interface, enter the keyword port-channel followed by
the slot/port information.
• For a VLAN interface, enter the keyword vlan followed by the slot/port
information.

Disabled
EXEC
Version 8.3.12.0

Introduced on the S4810.

Use the debug ipv6 mld_host command to debug the MLD protocol for all ports or for
specified ports. Displayed information includes when a query is received, when a report is
sent, when a mcast joins or leaves a group, and some reasons why a MLD query is rejected.

ipv6 multicast-limit
e
Syntax
Parameters

Defaults

1014

|

Multicast

Limit the number of multicast entries on the system.
ipv6 multicast-limit limit
limit

15000 routes

Enter the desired maximum number of multicast entries on the system.
Range: 1 to 50000
Default: 15000

Command Modes
Command
History
Usage
Information

CONFIGURATION
Version 8.3.1.0

Introduced

The maximum number of multicast entries allowed on each line card is determined by the
CAM profile. Multicast routes are stored in the IN-V6-McastFib CAM region, which has a
fixed number of entries. Any limit configured via the CLI is superseded by this hardware
limit. The opposite is also true; the CAM might not be exhausted at the time the
CLI-configured route limit is reached.

ipv6 multicast-routing
e
Syntax

Enable IPv6 multicast forwarding.
ipv6 multicast-routing

To disable multicast forwarding, enter no ipv6 multicast-routing.
Defaults
Command Modes
Command
History
Related
Commands

Disabled
CONFIGURATION
E-Series legacy command
ipv6 pim sparse-mode

Enable IPv6 PIM sparse mode on the interface.

show ipv6 mroute
e
Syntax

Parameters

Command Modes

View IPv6 multicast routes.
show ipv6 mroute [group-address [source-address]] [active rate] [count group-address [source
source-address]]
group-address [source-address]

(OPTIONAL) Enter the IPv6 multicast group-address to view
only routes associated with that group. Optionally, enter the
IPv6 source-address to view routes with that group-address and
source-address.

active [rate]

(OPTIONAL) Enter the keyword active to view active
multicast sources. Enter a rate to view active routes over the
specified rate.
Range: 0 to 10000000 packets/second

count group-address [source
source-address]}

(OPTIONAL) Enter the keyword count to view the number of
IPv6 multicast routes and packets on the E-Series. Optionally,
enter the IPv6 source-address count information.

EXEC

Multicast | 1015

www.dell.com | support.dell.com

EXEC Privilege
Command
History
Example

Version 7.4.1.0

Introduced

FTOS#show ipv6 mroute
IP Multicast Routing Table
(165:87:32::30, ff05:100::1), uptime 00:01:11
Incoming interface: Vlan 200
Outgoing interface list:
GigabitEthernet 2/14
(165:87:37::30, ff05:200::1), uptime 00:01:04
Incoming interface: Port-channel 200
Outgoing interface list:
Vlan 200
(165:87:31::30, ff05:300::1), uptime 00:01:19
Incoming interface: GigabitEthernet 2/14
Outgoing interface list:
Port-channel 200
(165:87:32::30, ff05:1100::1), uptime 00:01:08
Incoming interface: Vlan 200
Outgoing interface list:
GigabitEthernet 2/14
(165:87:37::30, ff05:2200::1), uptime 00:01:01
Incoming interface: Port-channel 200
Outgoing interface list:
Vlan 200
FTOS#

Example
(show ipv6
mroute active)

FTOS#show ipv6 mroute active 10
Active Multicast Sources - sending >= 10 pps
Group: ff05:300::1
Source: 165:87:31::30
Rate: 100 pps
Group: ff05:3300::1
Source: 165:87:31::30
Rate: 100 pps
Group: ff3e:300::4000:1
Source: 165:87:31::20
Rate: 100 pps
Group: ff3e:3300::4000:1
Source: 165:87:31::20
Rate: 100 pps
FTOS#

Example
(show ipv6
mroute count
group)

FTOS#show ipv6 mroute count group ff05:3300::1
IP Multicast Statistics
1 routes using 648 bytes of memory
1 groups, 1.00 average sources per group
Forwarding Counts: Pkt Count/Pkts per second
Group: ff05:3300::1, Source count: 1

1016

|

Multicast

Source: 165:87:31::30, Forwarding: 3997/0
FTOS#

Example
(show ipv6
mroute count
source)

FTOS#show ipv6 mroute count source 165:87:31::30
IP Multicast Statistics
2 routes using 1296 bytes of memory
2 groups, 1.00 average sources per group
Forwarding Counts: Pkt Count/Pkts per second
Group: ff05:300::1, Source count: 1
Source: 165:87:31::30, Forwarding: 3993/0
Group: ff05:3300::1, Source count: 1
Source: 165:87:31::30, Forwarding: 3997/0
FTOS#

show ipv6 mroute mld
e
Syntax
Parameters

Defaults
Command Modes

Display the Multicast MLD information.
show ipv6 mroute [mld [group-address | all | vlan vlan-id]]
mld

(OPTIONAL) Enter the keyword mld to display Multicast MLD
information.

group-address

(OPTIONAL) Enter the multicast group address in the x:x:x:x::x
format.
The :: notation specifies successive hexadecimal fields of zero.

all

(OPTIONAL) Enter the keyword all to view all the MLD
information.

vlan vlan-id

(OPTIONAL) Enter the keyword vlan followed by the VLAN ID to
view MLD VLAN information.

No default values or behavior
EXEC
EXEC Privilege

Command
History
Example

Version 7.4.1.0

Introduced

FTOS#show ipv6 mroute mld all
MLD SNOOPING MRTM Table
(*, ff05:100::1), uptime 00:04:21
Incoming vlan: Vlan 200
Outgoing interface list:
GigabitEthernet 2/15
GigabitEthernet 2/16

Multicast | 1017

www.dell.com | support.dell.com

(*, ff05:200::1), uptime 00:04:15
Incoming vlan: Vlan 200
Outgoing interface list:
GigabitEthernet 2/15
GigabitEthernet 2/16
(*, ff05:1100::1), uptime 00:04:18
Incoming vlan: Vlan 200
Outgoing interface list:
GigabitEthernet 2/15
GigabitEthernet 2/16
FTOS#

show ipv6 mroute summary
e
Syntax
Defaults
Command Modes

Display a summary of the Multicast routing table.
show ipv6 mroute summary
No default values or behavior
EXEC
EXEC Privilege

Command
History
Example

Version 7.4.1.0

Introduced

FTOS#show ipv6 mroute summary
IP Multicast Routing Table
12 groups, 12 routes
(165:87:32::30,
(165:87:37::30,
(165:87:31::30,
(165:87:32::30,
(165:87:37::30,
(165:87:31::30,
(165:87:32::20,
FTOS#

1018

|

Multicast

ff05:100::1), 00:00:24
ff05:200::1), 00:00:24
ff05:300::1), 00:00:24
ff05:1100::1), 00:00:21
ff05:2200::1), 00:00:21
ff05:3300::1), 00:00:21
ff3e:100::4000:1), 00:00:41

35
Neighbor Discovery Protocol (NDP)
Network Discovery Protocol for IPv6 is supported by FTOS on all Dell Force10 platforms, as
indicated by the characters that appear under each of the command headings: e E-Series,
c C-Series, s S-Series or
.

Overview
Neighbor Discovery Protocol for IPv6 is defined in RFC 2461 as part of the Stateless Address
Autoconfiguration protocol. It replaces the Address Resolution Protocol used with IPv4. It
defines mechanisms for solving the following problems:
•
•
•
•
•
•
•
•
•

Router discovery: Hosts can locate routers residing on a link.
Prefix discovery: Hosts can discover address prefixes for the link.
Parameter discovery
Address autoconfiguration — configuration of addresses for an interface
Address resolution — mapping from IP address to link-layer address
Next-hop determination
Neighbor Unreachability Detection (NUD): Determine that a neighbor is no
longer reachable on the link.
Duplicate Address Detection (DAD): Allow a node to check whether a proposed
address is already in use.
Redirect: The router can inform a node about a better first-hop.

NDP makes use of the following five ICMPv6 packet types in its implementation:
•
•
•
•
•

Router Solicitation
Router Advertisement
Neighbor Solicitation
Neighbor Advertisement
Redirect

Commands
The Neighbor Discovery Protocol (NDP) commands in this chapter are:
•

clear ipv6 neighbors

Neighbor Discovery Protocol (NDP) | 1019

www.dell.com | support.dell.com

•
•
•
•
•
•
•
•
•
•

ipv6 nd managed-config-flag
ipv6 nd max-ra-interval
ipv6 nd mtu
ipv6 nd other-config-flag
ipv6 nd prefix
ipv6 nd ra-lifetime
ipv6 nd reachable-time
ipv6 nd suppress-ra
ipv6 neighbor
show ipv6 neighbors

clear ipv6 neighbors
Delete all entries in the IPv6 neighbor discovery cache, or neighbors of a specific interface.
Static entries will not be removed using this command.

e
Syntax
Parameters

Command Modes

clear ipv6 neighbors [ipv6-address] [interface]
ipv6-address

Enter the IPv6 address of the neighbor in the x:x:x:x::x format to
remove a specific IPv6 neighbor.
The :: notation specifies successive hexadecimal fields of zero.

interface interface

To remove all neighbor entries learned on a specific interface, enter
the keyword interface followed by the interface type and slot/port or
number information of the interface:
• For a Fast Ethernet interface, enter the keyword fastEthernet
followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel
followed by a number:
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for
ExaScale.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by the VLAN ID.
The range is from 1 to 4094.

EXEC
EXEC Privilege

Command
History

1020

|

Version 8.3.7.0

Neighbor Discovery Protocol (NDP)

Introduced on S4810

ipv6 nd managed-config-flag
e

Set the managed address configuration flag in the IPv6 router advertisement. The description
of this flag from RFC 2461 (http://tools.ietf.org/html/rfc2461) is:
M: 1-bit “Managed address configuration” flag. When set, hosts use the administered
(stateful) protocol for address autoconfiguration in addition to any addresses autoconfigured
using stateless address autoconfiguration. The use of this flag is described in:
Thomson, S. and T. Narten, “IPv6 Address Autoconfiguration”, RFC 2462, December 1998.

Syntax

ipv6 nd managed-config-flag

To clear the flag from the IPv6 router advertisements, use the no ipv6 nd managed-config-flag
command.
Defaults
Command Modes

The default flag is 0.
INTERFACE

ipv6 nd max-ra-interval
e
Syntax

Configure the interval between the IPv6 router advertisement (RA) transmissions on an
interface.
ipv6 nd max-ra-interval {interval} min-ra-interval {interval}

To restore the default interval, use the no ipv6 nd max-ra-interval command.
Parameters

Defaults
Command Modes

max-ra-interval {interval}

Enter the keyword max-ra-interval followed by the interval in
seconds.
Range: 4 to 1800 seconds

min-ra-interval {interval}

Enter the keyword min-ra-interval followed by the interval in
seconds.
Range: 3 to 1350 seconds

Max RA interval: 600 seconds, Min RA interval: 200 seconds
INTERFACE

ipv6 nd mtu
ces
Syntax
Parameters

Configure an IPv6 neighbor discovery.
ipv6 nd mtu number
mtu number

Set the MTU advertisement value in Routing Prefix
Advertisement packets. Range: 1280 to 9234

Neighbor Discovery Protocol (NDP) | 1021

www.dell.com | support.dell.com

Defaults
Command Modes
Command
History
Usage
Information

No default values or behavior
INTERFACE
Version 8.3.1.0

Introduced

The ip nd mtu command sets the value advertised to routers. It does not set the actual MTU
rate. For example, if ip nd mtu is set to 1280, the interface will still pass 1500-byte packets.
The mtu command sets the actual frame size passed, and can be larger than the advertised
MTU. If the mtu setting is larger than the ip nd mtu, an error message is sent, but the
configuration is accepted.
% Error: nd ra mtu is greater than link mtu, link mtu will be used.

Related
Commands

mtu

Set the maximum link MTU (frame size) for an Ethernet interface.

ipv6 nd other-config-flag
e

Set the other stateful configuration flag in the IPv6 router advertisement. The description of
this flag from RFC 2461 (http://tools.ietf.org/html/rfc2461) is:
O: 1-bit “Other stateful configuration” flag. When set, hosts use the administered (stateful)
protocol for autoconfiguration of other (non-address) information. The use of this flag is
described in:
Thomson, S. and T. Narten, “IPv6 Address Autoconfiguration”, RFC 2462, December 1998.

Syntax

ipv6 nd other-config-flag

To clear the flag from the IPv6 router advertisements, use the no ipv6 nd other-config-flag
command.
Defaults
Command Modes

The default flag is 0.
INTERFACE

ipv6 nd prefix

1022

|

e

Configure how IPv6 prefixes are advertised in the IPv6 router advertisements. The
description of an IPv6 prefix from RFC 2461(http://tools.ietf.org/html/rfc2461) is a bit string
that consists of some number of initial bits of an address.

Syntax

ipv6 nd prefix {ipv6-address prefix-length | default} [no-advertise] | [no-autoconfig | no-rtr-address
| off-link]

Neighbor Discovery Protocol (NDP)

Parameters

Defaults
Command Modes

ipv6-address prefix-length

Enter the IPv6 address in the x:x:x:x::x format followed by the
prefix length in the /x format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of
zeros

default

(OPTIONAL) Enter the keyword default to specify the prefix
default parameters.

no-advertise

(OPTIONAL) Enter the keyword no-advertise to not
advertise prefixes.

no-autoconfig

(OPTIONAL) Enter the keyword no-autoconfig to not use
prefixes for auto-configuration.

no-rtr-address

(OPTIONAL) Enter the keyword no-rtr-address to not send
full router addresses in prefix advertisement.

off-link

(OPTIONAL) Enter the keyword off-link to not use prefixes
for on-link determination.

Not configured
INTERFACE

ipv6 nd ra-lifetime
e

Configure the router lifetime value in the IPv6 router advertisements on an interface. The
description of router lifetime from RFC 2461(http://tools.ietf.org/html/rfc2461) is:
Router Lifetime: 16-bit unsigned integer. The lifetime associated with the default router in
units of seconds. The maximum value corresponds to 18.2 hours. A Lifetime of 0 indicates
that the router is not a default router and SHOULD NOT appear on the default router list. The
Router Lifetime applies only to the router's usefulness as a default router; it does not apply to
information contained in other message fields or options. Options that need time limits for
their information include their own lifetime fields.

Syntax

ipv6 nd ra-lifetime seconds

To restore the default values, use the no ipv6 nd ra-lifetime command.
Parameters

seconds

Defaults

9000 seconds

Command Modes

INTERFACE

Enter the lifetime value in seconds.
Range: 0 to 9000

Neighbor Discovery Protocol (NDP) | 1023

www.dell.com | support.dell.com

ipv6 nd reachable-time
e

Configure the amount of time that a remote IPv6 node is considered available after a
reachability confirmation event has occurred. The description of reachable time from RFC
2461 (http://tools.ietf.org/html/rfc2461) is:
Reachable Time: 32-bit unsigned integer. The time, in milliseconds, that a node assumes a
neighbor is reachable after having received a reachability confirmation. Used by the Neighbor
Unreachability Detection algorithm. A value of zero means unspecified (by this router).

Syntax

ipv6 nd reachable-time {milliseconds}

To restore the default time, use the no ipv6 nd reachable-time command.
Parameters

Defaults
Command Modes

milliseconds

Enter the leachability time in milliseconds.
Range: 0 to 3600000

3600000 milliseconds
INTERFACE

ipv6 nd suppress-ra
e
Syntax

Suppress the IPv6 router advertisement transmissions on an interface.
ipv6 nd suppress-ra

To enable the sending of IPv6 router advertisement transmissions on an interface, use the no
ipv6 nd suppress-ra command.
Defaults
Command Modes

Enabled
INTERFACE

ipv6 neighbor
Configure a static entry in the IPv6 neighbor discovery.

e
Syntax

ipv6 neighbor {ipv6-address} {interface interface} {hardware_address}

To remove a static IPv6 entry from the IPv6 neighbor discovery, use the no ipv6 neighbor
{ipv6-address} {interface interface} command.

1024

|

Neighbor Discovery Protocol (NDP)

Parameters

Defaults
Command Modes
Command
History

ipv6-address

Enter the IPv6 address of the neighbor in the x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zero

interface interface

Enter the keyword interface followed by the interface type and slot/
port or number information:
• For a Fast Ethernet interface, enter the keyword fastEthernet
followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel
followed by a number:
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for
ExaScale.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.

hardware_address

Enter a 48-bit hardware MAC address in nn:nn:nn:nn:nn:nn format.

No default behavior or values
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

show ipv6 neighbors
Display IPv6 discovery information. Entering the command without options shows all IPv6
neighbor addresses stored on the CP (control processor).

e
Syntax

show ipv6 neighbors [ipv6-address] [cpu {rp1 [ipv6-address] | rp2 [ipv6-address]}] [interface
interface]

Parameters

ipv6-address

Enter the IPv6 address of the neighbor in the x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zero

cpu

Enter the keyword cpu followed by either rp1 or rp2 (Route
Processor 1 or 2), optionally followed by an IPv6 address to display
the IPv6 neighbor entries stored on the designated RP.

interface interface

•
•
•
•
•
•

For a Fast Ethernet interface, enter the keyword fastEthernet
followed by the slot/port information.
For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
For a Port Channel interface, enter the keyword port-channel
followed by a number from 1 to 255.
For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.
For a VLAN, enter the keyword vlan followed by the VLAN ID.
The range is from 1 to 4094.

Neighbor Discovery Protocol (NDP) | 1025

www.dell.com | support.dell.com
1026

Defaults
Command Modes

No default behavior or values
EXEC
EXEC Privilege

Command
History
Example

Version 8.3.7.0

Introduced on S4810

FTOS#show ipv6 neighbors
IPv6 Address
Expires(min)
Hardware Address
State
Interface VLAN
CPU
-----------------------------------------------------------------------------fe80::201:e8ff:fe17:5bc6
1439
00:01:e8:17:5b:c6 STALE
Gi 1/9
CP
fe80::201:e8ff:fe17:5bc7
1439
00:01:e8:17:5b:c7 STALE
Gi 1/10
CP
fe80::201:e8ff:fe17:5bc8
1439
00:01:e8:17:5b:c8 STALE
Gi 1/11
CP
fe80::201:e8ff:fe17:5caf
0.3
00:01:e8:17:5c:af REACH
Po 1
CP
fe80::201:e8ff:fe17:5cb0
1439
00:01:e8:17:5c:b0 STALE
Po 32
CP
fe80::201:e8ff:fe17:5cb1
1439
00:01:e8:17:5c:b1 STALE
Po 255
CP
fe80::201:e8ff:fe17:5cae
1439
00:01:e8:17:5c:ae STALE
Gi 1/3
Vl 100 CP
fe80::201:e8ff:fe17:5cae
1439
00:01:e8:17:5c:ae STALE
Gi 1/5
Vl 1000 CP
fe80::201:e8ff:fe17:5cae
1439
00:01:e8:17:5c:ae STALE
Gi 1/7
Vl 2000 CP
FTOS#

|

Neighbor Discovery Protocol (NDP)

36
Object Tracking
Object Tracking supports IPv4 and IPv6, and is available on platforms:

ces

Overview
Object tracking allows you to define objects of interest, monitor their state, and report to a client when
a change in an object’s state occurs. The following tracked objects are supported:
•
•
•
•

Link status of Layer 2 interfaces
Routing status of Layer 3 interfaces (IPv4 and IPv6)
Reachability of IPv4 and IPv6 routes
Metric thresholds of IPv4 and IPv6 routes

You can configure client applications, such VRRP, to receive a notification when the state of a tracked
object changes.
This chapter has the following sections:
•
•

IPv4 Object Tracking Commands
IPv6 Object Tracking Commands

IPv4 Object Tracking Commands
The IPv4 VRRP commands are:
•
•
•
•
•
•
•
•
•
•
•

debug track
delay
description
show running-config track
show track
threshold metric
track interface ip routing
track interface line-protocol
track ip route metric threshold
track ip route reachability
track resolution ip route

Object Tracking | 1027

www.dell.com | support.dell.com

debug track
ces

Syntax
Parameters

Defaults
Command Modes

Enables debugging for tracked objects.

debug track [all | notifications | object-id]
all

Enables debugging on the state and notifications of all tracked objects.

notifications

Enables debugging on the notifications of all tracked objects.

object-id

Enables debugging on the state and notifications of the specified tracked object. Range:
1 to 65535.

Enable debugging on the state and notifications of all tracked objects (debug track all).

EXEC
EXEC Privilege

Command
History

Example

Version 8.3.12.0

Introduced on the S4810.

Version 8.4.1.0

Introduced

FTOS#debug track all
04:35:04: %RPM0-P:RP2 %OTM-5-STATE: track 6 - Interface GigabitEthernet 0/2
line-protocol DOWN
04:35:04: %RPM0-P:RP2 %OTM-5-NOTIF: VRRP notification: resource ID 6 DOWN

delay
ces

Syntax

Configure the time delay used before communicating a change in the status of a tracked object to
clients.
delay {[up seconds] [down seconds]}
To return to the default setting, enter no delay.

Parameters

Defaults
Command Modes
Command
History

1028

|

Object Tracking

seconds

Enter the number of seconds the object tracker waits before sending a notification about
the change in the UP and/or DOWN state of a tracked object to clients.
Range: 0 to 180
Default: 0 seconds.

0 seconds
OBJECT TRACKING (conf_track_object-id)
Version 8.3.12.0

Introduced on the S4810.

Version 8.4.1.0

Introduced

Related
Commands

Usage
Information

track interface ip
routing

Configure object tracking on the routing status of an IPv4 Layer 3 interface.

track interface
line-protocol

Configure object tracking on the line-protocol state of a Layer 2 interface.

track ip route
metric threshold

Configure object tracking on the threshold of an IPv4 route metric.

track ip route
reachability

Configure object tracking on the reachability of an IPv4 route.

You can configure an UP and/or DOWN timer for each tracked object to set the time delay before a
change in the state of a tracked object is communicated to clients. The configured time delay starts
when the state changes from UP to DOWN or vice-versa.
If the state of an object changes back to its former UP/DOWN state before the timer expires, the timer
is cancelled and the client is not notified. For example, if the DOWN timer is running when an
interface goes down and comes back up, the DOWN timer is cancelled and the client is not notified of
the event.
If the timer expires and an object’s state has changed, a notification is sent to the client. If no delay is
configured, a notification is sent immediately as soon as a change in the state of a tracked object is
detected. The time delay in communicating a state change is specified in seconds.

description
ces

Syntax

Enter a description of a tracked object.

description {text}
To remove the description, enter the no description {text} command.

Parameters

Defaults
Command Modes
Command
History

Related
Commands

text

Enter a description to identify a tracked object (80 characters maximum).

No default behavior or values
OBJECT TRACKING (conf_track_object-id)
Version 8.3.12.0

Introduced on the S4810.

Version 8.4.1.0

Introduced

track interface ip routing

Configure object tracking on the routing status of an IPv4 Layer 3
interface.

track interface line-protocol

Configure object tracking on the line-protocol state of a Layer 2
interface.

track ip route metric threshold

Configure object tracking on the threshold of an IPv4 route metric.

track ip route reachability

Configure object tracking on the reachability of an IPv4 route.

Object Tracking | 1029

www.dell.com | support.dell.com

show running-config track
ces
Syntax
Parameters

Command Modes
Command
History

Related
Commands

Example

Display the current configuration of tracked objects.

show running-config track [object-id]
object-id

(OPTIONAL) Display information on the specified tracked object. Range: 1
to 65535.

EXEC Privilege
Version 8.3.12.0

Introduced on the S4810.

Version 8.4.1.0

Introduced

show track

Display information about tracked objects, including configuration, current
state, and clients which track the object.

track interface ip routing

Configure object tracking on the routing status of an IPv4 Layer 3
interface.

track interface line-protocol

Configure object tracking on the line-protocol state of a Layer 2 interface.

track ip route metric threshold

Configure object tracking on the threshold of an IPv4 route metric.

track ip route reachability

Configure object tracking on the reachability of an IPv4 route.

FTOS#show running-config track
track 1 ip route 23.0.0.0/8 reachability
track 2 ipv6 route 2040::/64 metric threshold
delay down 3
delay up 5
threshold metric up 200
track 3 ipv6 route 2050::/64 reachability
track 4 interface GigabitEthernet 13/4 ip routing
track 5 ip route 192.168.0.0/24 reachability vrf red
track resolution ip route isis 20
track resolution ip route ospf 10

Example
(object-id)

FTOS#show running-config track 300
track 300 ip route 10.0.0.0/8 metric threshold
delay down 3
delay up 5
threshold metric up 100

show track
ces

Syntax

1030

|

Object Tracking

Display information about tracked objects, including configuration, current tracked state (UP or
DOWN), and the clients which are tracking an object.
show track [object-id [brief] | interface [brief] [vrf vrf-name] | ip route [brief] [vrf vrf-name]
| resolution | vrf vrf-name [brief] | brief]

Parameters

object-id

(OPTIONAL) Display information on the specified tracked object.
Range: 1 to 65535.

interface

(OPTIONAL) Display information on all tracked interfaces (Layer 2 and IPv4 Layer 3).

ip route

(OPTIONAL) Display information on all tracked IPv4 routes.

resolution

(OPTIONAL) Display information on the configured resolution values used to scale
protocol-specific route metrics to the range 0 to 255.

brief

(OPTIONAL) Display a single line summary of the tracking information for a specified
object, object type, or all tracked objects.

vrf vrf-name

(OPTIONAL) E-Series only: Display information on only the tracked objects that are
members of the specified VRF instance. Maximum: 32 characters.
If you do not enter a VRF name, information on the tracked objects from all VRFs is
displayed.

Command Modes

EXEC Privilege

Command
History

Version 8.3.12.0

Introduced on the S4810.

Version 8.4.1.0

Introduced

Related
Commands

Example

show running-config track

Display configuration information about tracked objects.

track interface ip routing

Configure object tracking on the routing status of an IPv4 Layer 3
interface.

track interface line-protocol

Configure object tracking on the line-protocol state of a Layer 2 interface.

track ip route metric threshold

Configure object tracking on the threshold of an IPv4 route metric.

track ip route reachability

Configure object tracking on the reachability of an IPv4 route.

FTOS#show track
Track 1
IP route 23.0.0.0/8 reachability
Reachability is Down (route not in route table)
2 changes, last change 00:16:08
Tracked by:
Track 2
IPv6 route 2040::/64 metric threshold
Metric threshold is Up (STATIC/0/0)
5 changes, last change 00:02:16
Metric threshold down 255 up 254
First-hop interface is GigabitEthernet 13/2
Tracked by:
VRRP GigabitEthernet 7/30 IPv6 VRID 1
Track 3
IPv6 route 2050::/64 reachability
Reachability is Up (STATIC)
5 changes, last change 00:02:16
First-hop interface is GigabitEthernet 13/2
Tracked by:
VRRP GigabitEthernet 7/30 IPv6 VRID 1

Table 36-1.

Command Example Description: show track

show track Output

Description

Track object-id

Displays the number of the tracked object.

Object Tracking | 1031

www.dell.com | support.dell.com

Table 36-1.

Example
(brief)

Command Example Description: show track

Interface type slot/port
IP route ip-address
IPv6 route ipv6-address

Displays the interface type and slot/port number or address of the
IPv4/IPv6 route that is being tracked.

object is Up/Down

Up/Down state of tracked object; for example, IPv4 interface, reachability or
metric threshold of an IP route.

number changes,
last change time

Number of times that the state of the tracked object has changed and the time since
the last change in hours:minutes:seconds

First hop interface

Displays the type and slot/port number of the first-hop interface of the tracked
route.

Tracked by

Client that is tracking an object’s state; for example, VRRP.

FTOS>show track brief
ResId
1
2
3

Resource
IP route reachability
Interface line-protocol
Interface ip routing

Table 36-2.

Parameter
10.16.0.0/16
Ethernet0/2
VLAN100

State
Up
Down
Up

LastChange
00:01:08
00:05:00
01:10:05

Command Example Description: show track brief

show track Output

Description

ResID

Number of the tracked object

Resource

Type of tracked object

Parameter

Detailed description of the tracked object

State

Up or Down state of the tracked object

Last Change

Time since the last change in the state of the tracked object

threshold metric
ces

Syntax

Configure the metric threshold used to determine the UP and/or DOWN state of a tracked IPv4 or IPv6
route.
threshold metric {up number | down number}
To return to the default setting, enter no threshold metric {up number | down number}.

Parameters

Defaults

1032

|

Object Tracking

object-id

Enter the ID number of the tracked object. Range: 1 to 65535.

up number

Enter a number for the UP threshold to be applied to the scaled metric of an IPv4 or
IPv6 route.
Default UP threshold: 254. The routing state is UP if the scaled route metric is less
than or equal to the UP threshold.

down number

Enter a number for the DOWN threshold to be applied to the scaled metric of an IPv4
or IPv6 route
Default DOWN threshold: 255. The routing state is DOWN if the scaled route metric
is greater than or equal to the DOWN threshold.

None

Command Modes

OBJECT TRACKING (conf_track_object-id)

Command
History

Related
Commands

Usage
Information

Version 8.3.12.0

Introduced on the S4810.

Version 8.4.1.0

Introduced

track ip route
metric threshold

Configure object tracking on the threshold of an IPv4 route metric.

track resolution ip
route

Configure the protocol-specific resolution value used to scale an IPv4 route metric.

Use this command to configure the UP and/or DOWN threshold for the scaled metric of a tracked IPv4
or IPv6 route.
The UP/DOWN state of a tracked route is determined by the threshold for the current value of the route
metric in the routing table. To provide a common tracking interface for different clients, route metrics
are scaled in the range 0 to 255, where 0 is connected and 255 is inaccessible. The scaled metric value
communicated to a client always considers a lower value to have priority over a higher value.
The resulting scaled value is compared against the configured threshold values to determine the state of
a tracked route as follows:
•
•

If the scaled metric for a route entry is less than or equal to the UP threshold, the state of a route is
UP.
If the scaled metric for a route is greater than or equal to the DOWN threshold or the route is not
entered in the routing table, the state of a route is DOWN.

You configure the UP and DOWN thresholds for each tracked route with the threshold metric
command. The default UP threshold is 254; the default DOWN threshold is 255. The notification of a
change in the state of a tracked object is sent when a metric value crosses a configured threshold.
The tracking process uses a protocol-specific resolution value to convert the actual metric in the
routing table to a scaled metric in the range 0 to 255. You can configure the resolution value used to
scale route metrics for supported protocols with the track resolution ip route and track resolution ipv6
route commands.

track
ces

Syntax
Parameters

Defaults
Command Modes
Command
History

Enter Object Tracking command mode to modify the configuration of a tracked object.

track object-id
object-id

Enter the ID number of the tracked object. Range: 1 to 65535.

None
CONFIGURATION
Version 8.3.12.0

Introduced on the S4810.

Version 8.4.1.0

Introduced

Object Tracking | 1033

www.dell.com | support.dell.com

Related
Commands
Usage
Information

show track

Display information about tracked objects, including configuration, current state, and
clients which track the object.

Use this command to enter the Object Tracking mode to edit an existing configuration of a tracked
object. For example, after you enter the track object-id command, you can modify or add a delay
timer (delay command) or a metric threshold (threshold metric command) for the UP or DOWN
state of the tracked object.

track ip route metric threshold
ces

Syntax

Configure object tracking on the threshold of an IPv4 route metric.

track object-id ip route ip-address/prefix-len metric threshold [vrf vrf-name]
To return to the default setting, enter no track object-id.

Parameters

Defaults
Command Modes
Command
History

Related
Commands

Usage
Information

object-id

Enter the ID number of the tracked object. Range: 1 to 65535.

ip-address/
prefix-len

Enter an IPv4 address in dotted decimal format. Valid IPv4 prefix lengths are from /0 to
/32.

vrf vrf-name

(Optional) E-Series only: You can configure a VPN routing and forwarding (VRF)
instance to specify the virtual routing table to which the tracked route belongs.

None
CONFIGURATION
Version 8.3.12.0

Introduced on the S4810.

Version 8.4.1.0

Introduced

show track

Display information about tracked objects, including configuration, current state, and
clients which track the object.

threshold metric

Configure the metric threshold used to determine the UP and/or DOWN state of a tracked
route.

track resolution
ip route

Configure the protocol-specific resolution value used to scale an IPv4 route metric.

Use this command to create an object that tracks the UP and/or DOWN threshold of an IPv4 route
metric. In order for a route’s metric to be tracked, the route must appear as an entry in the routing table.
A tracked IPv4 route is considered to match an entry in the routing table only if the exact IPv4 address
and prefix length match a table entry. For example, when configured as a tracked route, 10.0.0.0/24
does not match the routing table entry 10.0.0.0/8. If no route-table entry has the exact IPv4 address and
prefix length, the status of the tracked route is considered to be DOWN.
When you configure the threshold of an IPv4 route metric as a tracked object, the UP/DOWN state of
the tracked route is also determined by the current metric for the route in the routing table.

1034

|

Object Tracking

To provide a common tracking interface for different clients, route metrics are scaled in the range 0 to
255, where 0 is connected and 255 is inaccessible. The scaled metric value communicated to a client
always considers a lower value to have priority over a higher value. The resulting scaled value is
compared against the configured threshold values to determine the state of a tracked route as follows:
•
•

If the scaled metric for a route entry is less than or equal to the UP threshold, the state of a route is
UP.
If the scaled metric for a route is greater than or equal to the DOWN threshold or the route is not
entered in the routing table, the state of a route is DOWN.

You configure the UP and DOWN thresholds for each tracked route by using the threshold metric
command. The default UP threshold is 254; the default DOWN threshold is 255. The notification of a
change in the state of a tracked object is sent when a metric value crosses a configured threshold.

track ip route reachability
ces

Syntax

Configure object tracking on the reachability of an IPv4 route.

track object-id ip route ip-address/prefix-len reachability [vrf vrf-name]
To return to the default setting, enter no track object-id.

Parameters

Defaults
Command Modes
Command
History

Related
Commands

Usage
Information

object-id

Enter the ID number of the tracked object. Range: 1 to 65535.

ip-address/
prefix-len

Enter an IPv4 address in dotted decimal format. Valid IPv4 prefix lengths are from /0 to /
32.

vrf vrf-name

(Optional) E-Series only: You can configure a VPN routing and forwarding (VRF)
instance to specify the virtual routing table to which the tracked route belongs.

None
CONFIGURATION
Version 8.3.12.0

Introduced on the S4810.

Version 8.4.1.0

Introduced

show track

Display information about tracked objects, including configuration, current state, and
clients which track the object.

track ip route
metric threshold

Configure object tracking on the threshold of an IPv4 route metric.

Use this command to create an object that tracks the reachability of an IPv4 route. In order for a route’s
reachability to be tracked, the route must appear as an entry in the routing table.
A tracked IPv4 route is considered to match an entry in the routing table only if the exact IPv4 address
and prefix length match a table entry. For example, when configured as a tracked route, 10.0.0.0/24
does not match the routing table entry 10.0.0.0/8. If no route-table entry has the exact IPv4 address and
prefix length, the status of the tracked route is considered to be DOWN.

Object Tracking | 1035

www.dell.com | support.dell.com

When you configure IPv4 route reachability as a tracked object, the UP/DOWN state of the tracked
route is also determined by the entry of the next-hop address in the ARP cache. A tracked route is
considered to be reachable if there is an ARP cache entry for the route's next-hop address.
If the next-hop address in the ARP cache ages out for a route tracked for its reachability, an attempt is
made to regenerate the ARP cache entry to if the next-hop address appears before considering the
route DOWN.

track interface ip routing
ces

Syntax

Configure object tracking on the routing status of an IPv4 Layer 3 interface.

track object-id interface interface ip routing
To return to the default setting, enter no track object-id.

Parameters

object-id

Enter the ID number of the tracked object. Range: 1 to 65535.

interface

Enter one of the following values:
•
•
•

•
•
•
Defaults
Command Modes

CONFIGURATION

Related
Commands

|

Object Tracking

Version 8.3.12.0

Introduced on the S4810.

Version 8.4.1.0

Introduced

show track

Display information about tracked objects, including configuration, current state, and
clients which track the object.

track interface
line-protocol

Configure object tracking on the line-protocol state of a Layer 2 interface.

Use this command to create an object that tracks the routing state of an IPv4 Layer 2 interface:
•

1036

E-Series: 1 to 255 for TeraScale; 1 to 512 for ExaScale.
For SONET interfaces, enter the sonet slot-number/port-number.
For a 10-Gigabit Ethernet interface, enter tengigabitethernet slot-number/
port-number
For a VLAN interface, enter vlan number, where number is from 1 to 4094.

None

Command
History

Usage
Information

For a 1-Gigabit Ethernet interface, enter gigabitethernet slot-number/
port-number.
For a Loopback interface, enter loopback number, where number is from 0 to
16383.
For a Port Channel interface, enter port-channel number, where the range is:
C-Series and S-Series: 1 to 128

The status of the IPv4 interface is UP only if the Layer 2 status of the interface is UP and the
interface has a valid IP address.

•

The Layer 3 status of an IPv4 interface goes DOWN when its Layer 2 status goes down (for a
Layer 3 VLAN, all VLAN ports must be down) or the IP address is removed from the routing
table.

track interface line-protocol
ces

Syntax

Configure object tracking on the line-protocol state of a Layer 2 interface.

track object-id interface interface line-protocol
To return to the default setting, enter no track object-id.

Parameters

object-id

Enter the ID number of the tracked object. Range: 1 to 65535.

interface

Enter one of the following values:
•
•
•

•
•
•
Defaults
Command Modes
Command
History

Related
Commands

Usage
Information

For a 1-Gigabit Ethernet interface, enter gigabitethernet slot-number/
port-number.
For a Loopback interface, enter loopback number, where number is from 0 to
16383.
For a Port Channel interface, enter port-channel number, where the range is:
C-Series and S-Series: 1 to 128
E-Series: 1 to 255 for TeraScale; 1 to 512 for ExaScale.
For SONET interfaces, enter the sonet slot-number/port-number.
For a 10-Gigabit Ethernet interface, enter tengigabitethernet slot-number/
port-number
For a VLAN interface, enter vlan number, where number is from 1 to 4094.

None
CONFIGURATION
Version 8.3.12.0

Introduced on the S4810.

Version 8.4.1.0

Introduced

show track

Display information about tracked objects, including configuration, current state, and
clients which track the object.

track interface ip
routing

Configure object tracking on the routing status of an IPv4 Layer 3 interface.

Use this command to create an object that tracks the line-protocol state of a Layer 2 interface by
monitoring its operational status (UP or DOWN).
When the link-level status goes down, the tracked object status is considered to be DOWN; if the
link-level status is up, the tracked object status is considered to be UP.

Object Tracking | 1037

www.dell.com | support.dell.com

track resolution ip route
ces

Syntax

Configure the protocol-specific resolution value used to scale an IPv4 route metric.

track resolution ip route {isis resolution-value | ospf resolution-value}
To return to the default setting, enter no track object-id.

Parameters

Defaults
Command Modes

Enter the ID number of the tracked object. Range: 1 to 65535.

isis
resolution-value

Enter the resolution used to convert the metric in the routing table for ISIS routes to a
scaled metric.

ospf
resolution-value

Enter the resolution used to convert the metric in the routing table for OSPF routes to
a scaled metric.

None
CONFIGURATION

Command
History

Related
Commands

Usage
Information

object-id

Version 8.3.12.0

Introduced on the S4810.

Version 8.4.1.0

Introduced

threshold metric

Configure the metric threshold used to determine the UP and/or DOWN state of a
tracked route.

track ip route
metric threshold

Configure object tracking on the threshold of an IPv4 route metric.

Use this command to configure the protocol-specific resolution value that converts the actual metric of
an IPv4 route in the routing table to a scaled metric in the range 0 to 255.
The UP/DOWN state of a tracked IPv4 route is determined by a user-configurable threshold (threshold
metric command) for the route’s metric in the routing table. To provide a common tracking interface
for different clients, route metrics are scaled in the range 0 to 255, where 0 is connected and 255 is
inaccessible.
The protocol-specific resolution value calculates the scaled metric by dividing a route's cost by the
resolution value set for the route protocol:
•
•
•
•

1038

|

Object Tracking

For ISIS, you can set the resolution in the range 1 to 1000, where the default is 10.
For OSPF, you can set the resolution in the range 1 to 1592, where the default is 1.
The resolution value used to map static routes is not configurable. By default, FTOS assigns a
metric of 0 to static routes.
The resolution value used to map RIP routes is not configurable. The RIP hop-count is
automatically multiplied by 16 to scale it. For example, a RIP metric of 16 (unreachable) scales to
256, which considers the route to be DOWN.

IPv6 Object Tracking Commands
The IPv6 object tracking commands are:
•
•
•
•
•

show track ipv6 route
track interface ipv6 routing
track ipv6 route metric threshold
track ipv6 route reachability
track resolution ipv6 route

The following object tracking commands apply to IPv4 and IPv6:
•
•
•
•
•
•

debug track
delay
description
show running-config track
threshold metric
track interface line-protocol

show track ipv6 route
ces

Syntax
Parameters

Command Modes

Display information about all tracked IPv6 routes, including configuration, current tracked state (UP or
DOWN), and the clients which are tracking an object.
show track ipv6 route [brief]
brief

(OPTIONAL) Display a single line summary of information for tracked IPv6 routes.

EXEC
EXEC Privilege

Command
History

Related
Commands

Example

Version 8.3.12.0

Introduced on the S4810.

Version 8.4.1.0

Introduced

show running-config track

Display configuration information about tracked objects.

show track

Display information about tracked objects, including configuration,
current state, and clients which track the object.

track interface ipv6 routing

Configure object tracking on the routing status of an IPv6 Layer 3
interface.

track ipv6 route metric threshold

Configure object tracking on the threshold of an IPv6 route metric.

track ipv6 route reachability

Configure object tracking on the reachability of an IPv6 route.

FTOS#show track ipv6 route
Track 2
IPv6 route 2040::/64 metric threshold
Metric threshold is Up (STATIC/0/0)
5 changes, last change 00:02:30
Metric threshold down 255 up 254

Object Tracking | 1039

www.dell.com | support.dell.com

First-hop interface is GigabitEthernet 13/2
Tracked by:
VRRP GigabitEthernet 7/30 IPv6 VRID 1
Track 3
IPv6 route 2050::/64 reachability
Reachability is Up (STATIC)
5 changes, last change 00:02:30
First-hop interface is GigabitEthernet 13/2
Tracked by:
VRRP GigabitEthernet 7/30 IPv6 VRID 1

Table 36-3.

Example
(brief)

Command Example Description: show track ipv6 route

show track ipv6
route Output

Description

Track object-id

Displays the number of the tracked object.

Interface type slot/port
IP route ip-address
IPv6 route ipv6-address

Displays the interface type and slot/port number or address of the
IPv4/IPv6 route that is being tracked.

object is Up/Down

Up/Down state of tracked object; for example, IPv4 interface, reachability or
metric threshold of an IP route.

number changes,
last change time

Number of times that the state of the tracked object has changed and the time since
the last change in hours:minutes:seconds

First hop interface

Displays the type and slot/port number of the first-hop interface of the tracked
route.

Tracked by

Client that is tracking an object’s state; for example, VRRP.

FTOS#show track ipv6 route brief
ResId
2
3

Resource
IPv6 route metric threshold
IPv6 route reachability

Table 36-4.

Parameter
2040::/64
2050::/64

State
Up
Up

Command Example Description: show track ipv6 route brief

show track ipv6
route brief Output

Description

ResID

Number of the tracked object

Resource

Type of tracked object

Parameter

Detailed description of the tracked object

State

Up or Down state of the tracked object

Last Change

Time since the last change in the state of the tracked object

track interface ipv6 routing
ces

Syntax

Configure object tracking on the routing status of an IPv6 Layer 3 interface.

track object-id interface interface ipv6 routing
To return to the default setting, enter no track object-id.

1040

|

Object Tracking

LastChange
00:02:36
00:02:36

Parameters

object-id

Enter the ID number of the tracked object. Range: 1 to 65535.

interface

Enter one of the following values:
•
•
•

•
•
•
Defaults
Command Modes

E-Series: 1 to 255 for TeraScale; 1 to 512 for ExaScale.
For SONET interfaces, enter the sonet slot-number/port-number.
For a 10-Gigabit Ethernet interface, enter tengigabitethernet slot-number/
port-number
For a VLAN interface, enter vlan number, where number is from 1 to 4094.

None
CONFIGURATION

Command
History

Related
Commands

Usage
Information

For a 1-Gigabit Ethernet interface, enter gigabitethernet slot-number/
port-number.
For a Loopback interface, enter loopback number, where number is from 0 to
16383.
For a Port Channel interface, enter port-channel number, where the range is:
C-Series and S-Series: 1 to 128

Version 8.3.12.0

Introduced on the S4810.

Version 8.4.1.0

Introduced

show track ipv6
route

Display information about tracked IPv6 routes, including configuration, current state, and
clients which track the route.

track interface ip
routing

Configure object tracking on the routing status of an IPv4 Layer 3 interface.

Use this command to create an object that tracks the routing state of an IPv6 Layer 3 interface:
•
•

The status of the IPv6 interface is UP only if the Layer 2 status of the interface is UP and the
interface has a valid IP address.
The Layer 3 status of an IPv6 interface goes DOWN when its Layer 2 status goes down (for a
Layer 3 VLAN, all VLAN ports must be down) or the IP address is removed from the routing
table.

track ipv6 route metric threshold
ces

Syntax

Configure object tracking on the threshold of an IPv4 route metric.

track object-id ipv6 route ipv6-address/prefix-len metric threshold
To return to the default setting, enter no track object-id.

Parameters

Defaults

object-id

Enter the ID number of the tracked object. Range: 1 to 65535.

ipv6-address/
prefix-len

Enter an IPv6 address in X:X:X:X::X format. Valid IPv6 prefix lengths are from /0 to /
128.

None

Object Tracking | 1041

www.dell.com | support.dell.com

Command Modes

CONFIGURATION

Command
History

Related
Commands

Usage
Information

Version 8.3.12.0

Introduced on the S4810.

Version 8.4.1.0

Introduced

show track ipv6
route

Display information about tracked IPv6 routes, including configuration, current state, and
clients which track the route.

threshold metric

Configure the metric threshold used to determine the UP and/or DOWN state of a tracked
route.

track resolution
ipv6 route

Configure the protocol-specific resolution value used to scale an IPv6 route metric.

Use this command to create an object that tracks the UP and/or DOWN threshold of an IPv6 route
metric. In order for a route’s metric to be tracked, the route must appear as an entry in the routing table.
A tracked IPv6 route is considered to match an entry in the routing table only if the exact IPv6 address
and prefix length match a table entry. For example, when configured as a tracked route,
3333:100:200:300:400::/80 does not match routing table entry 3333:100:200:300::/64. If no route-table
entry has the exact IPv6 address and prefix length, the status of the tracked route is considered to be
DOWN.
When you configure the threshold of an IPv6 route metric as a tracked object, the UP/DOWN state of
the tracked route is also determined by the current metric for the route in the routing table.
To provide a common tracking interface for different clients, route metrics are scaled in the range 0 to
255, where 0 is connected and 255 is inaccessible. The scaled metric value communicated to a client
always considers a lower value to have priority over a higher value. The resulting scaled value is
compared against the configured threshold values to determine the state of a tracked route as follows:
•
•

If the scaled metric for a route entry is less than or equal to the UP threshold, the state of a route is
UP.
If the scaled metric for a route is greater than or equal to the DOWN threshold or the route is not
entered in the routing table, the state of a route is DOWN.

You configure the UP and DOWN thresholds for each tracked IPv6 route by using the threshold metric
command. The default UP threshold is 254; the default DOWN threshold is 255. The notification of a
change in the state of a tracked object is sent when a metric value crosses a configured threshold.

track ipv6 route reachability
ces

Syntax

Configure object tracking on the reachability of an IPv6 route.

track object-id ipv6 route ip-address/prefix-len reachability
To return to the default setting, enter no track object-id.

Parameters

1042

|

Object Tracking

object-id

Enter the ID number of the tracked object. Range: 1 to 65535.

ipv6-address/
prefix-len

Enter an IPv6 address in X:X:X:X::X format. Valid IPv6 prefix lengths are from /0 to /
128.

Defaults
Command Modes
Command
History

Related
Commands

Usage
Information

None
CONFIGURATION
Version 8.3.12.0

Introduced on the S4810.

Version 8.4.1.0

Introduced

show track ipv6
route

Display information about tracked IPv6 routes, including configuration, current state, and
clients which track the route.

track ip route
reachability

Configure object tracking on the reachability of an IPv4 route.

Use this command to create an object that tracks the reachability of an IPv6 route. In order for a route’s
reachability to be tracked, the route must appear as an entry in the routing table.
A tracked route is considered to match an entry in the routing table only if the exact IPv6 address and
prefix length match a table entry. For example, when configured as a tracked route,
3333:100:200:300:400::/80 does not match routing table entry 3333:100:200:300::/64. If no route-table
entry has the exact IPv6 address and prefix length, the tracked route is considered to be DOWN.
When you configure IPv6 route reachability as a tracked object, the UP/DOWN state of the tracked
route is also determined by the entry of the next-hop address in the ARP cache. A tracked route is
considered to be reachable if there is an ARP cache entry for the route's next-hop address.
If the next-hop address in the ARP cache ages out for a route tracked for its reachability, an attempt is
made to regenerate the ARP cache entry to if the next-hop address appears before considering the
route DOWN.

track resolution ipv6 route
ces

Syntax

Configure the protocol-specific resolution value used to scale an IPv6 route metric.

track resolution ipv6 route {isis resolution-value | ospf resolution-value}
To return to the default setting, enter no track object-id.

Parameters

Defaults
Command Modes
Command
History

object-id

Enter the ID number of the tracked object. Range: 1 to 65535.

isis
resolution-value

Enter the resolution used to convert the metric in the routing table for ISIS routes to a
scaled metric.

ospf
resolution-value

Enter the resolution used to convert the metric in the routing table for OSPF routes to
a scaled metric.

None
CONFIGURATION
Version 8.3.12.0

Introduced on the S4810.

Version 8.4.1.0

Introduced

Object Tracking | 1043

www.dell.com | support.dell.com

Related
Commands

Usage
Information

Configure the metric threshold used to determine the UP and/or DOWN state of a tracked
route.

track ipv6 route
metric threshold

Configure object tracking on the threshold of an IPv6 route metric.

Use this command to configure the protocol-specific resolution value that converts the actual metric of
an IPv6 route in the routing table to a scaled metric in the range 0 to 255.
The UP/DOWN state of a tracked IPv6 route is determined by the user-configurable threshold
(threshold metric command) for a route’s metric in the routing table. To provide a common tracking
interface for different clients, route metrics are scaled in the range 0 to 255, where 0 is connected and
255 is inaccessible.
The protocol-specific resolution value calculates the scaled metric by dividing a route's cost by the
resolution value set for the route protocol:
•
•
•
•

1044

threshold metric

|

Object Tracking

For ISIS, you can set the resolution in the range 1 to 1000, where the default is 10.
For OSPF, you can set the resolution in the range 1 to 1592, where the default is 1.
The resolution value used to map static routes is not configurable. By default, FTOS assigns a
metric of 0 to static routes.
The resolution value used to map RIP routes is not configurable. The RIP hop-count is
automatically multiplied by 16 to scale it. For example, a RIP metric of 16 (unreachable) scales to
256, which considers the route to be DOWN.

37
Open Shortest Path First (OSPFv2)
Overview
The
platform supports Open Shortest Path First (OSPFv2) only. Up to 16 OSPF
instances can be run simultaneously on the
.
OSPF is an Interior Gateway Protocol (IGP), which means that it distributes routing
information between routers in a single Autonomous System (AS). OSPF is also a link-state
protocol in which all routers contain forwarding tables derived from information about their
links to their neighbors.

OSPFv2 Commands
The Dell Force10 implementation of OSPFv2 is based on IETF RFC 2328. The following
commands enable you to configure and enable OSPFv2.
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

area default-cost
area nssa
area range
area stub
area virtual-link
auto-cost
clear ip ospf
clear ip ospf statistics
debug ip ospf
default-information originate
default-metric
description
distance
distance ospf
distribute-list in
distribute-list out
enable inverse mask
fast-convergence

Open Shortest Path First (OSPFv2) | 1045

www.dell.com | support.dell.com

•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

1046

|

flood-2328
graceful-restart grace-period
graceful-restart helper-reject
graceful-restart mode
graceful-restart role
ip ospf auth-change-wait-time
ip ospf authentication-key
ip ospf cost
ip ospf dead-interval
ip ospf hello-interval
ip ospf message-digest-key
ip ospf mtu-ignore
ip ospf network
ip ospf priority
ip ospf retransmit-interval
ip ospf transmit-delay
log-adjacency-changes
maximum-paths
mib-binding
network area
passive-interface
redistribute
redistribute bgp
redistribute isis
router-id
router ospf
show config
show ip ospf
show ip ospf asbr
show ip ospf database
show ip ospf database asbr-summary
show ip ospf database external
show ip ospf database network
show ip ospf database nssa-external
show ip ospf database opaque-area
show ip ospf database opaque-as
show ip ospf database opaque-link
show ip ospf database router
show ip ospf database summary
show ip ospf interface

Open Shortest Path First (OSPFv2)

•
•
•
•
•
•
•
•
•
•

show ip ospf neighbor
show ip ospf routes
show ip ospf statistics
show ip ospf timers rate-limit
show ip ospf topology
show ip ospf virtual-links
summary-address
timers spf
timers throttle lsa all
timers throttle lsa arrival

area default-cost
ces
Syntax

Set the metric for the summary default route generated by the area border router (ABR) into
the stub area. Use this command on the border routers at the edge of a stub area.
area area-id default-cost cost

To return default values, use the no area area-id default-cost command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information
Related
Commands

area-id

Specify the OSPF area in dotted decimal format (A.B.C.D.) or enter a number
from zero (0) to 65535.

cost

Specifies the stub area’s advertised external route metric.
Range: zero (0) to 65535.

cost

= 1; no areas are configured.

ROUTER OSPF
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support for Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

In FTOS, cost is defined as reference bandwidth/bandwidth.

area stub

Create a stub area.

area nssa
ces

Specify an area as a Not So Stubby Area (NSSA).

Open Shortest Path First (OSPFv2) | 1047

www.dell.com | support.dell.com

Syntax

area area-id nssa [default-information-originate] [no-redistribution] [no-summary]

To delete an NSSA, enter no area area-id nssa.
Parameters

Defaults
Command Mode
Command
History

area-id

Specify the OSPF area in dotted decimal format (A.B.C.D) or enter a
number from 0 and 65535.

no-redistribution

(OPTIONAL) Specify that the redistribute command should not
distribute routes into the NSSA. You should only use this command in
a NSSA Area Border Router (ABR).

default-information-ori
ginate

(OPTIONAL) Allows external routing information to be imported
into the NSSA by using Type 7 default.

no-summary

(OPTIONAL) Specify that no summary LSAs should be sent into the
NSSA.

Not configured
ROUTER OSPF
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support for Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

area range
ces
Syntax

Summarize routes matching an address/mask at an area border router (ABR).
area area-id range ip-address mask [not-advertise]

To disable route summarization, use the no area area-id range ip-address mask command.
Parameters

Defaults
Command Modes

1048

|

area-id

Specify the OSPF area in dotted decimal format (A.B.C.D.) or enter a number
from zero (0) to 65535.

ip-address

Specify an IP address in dotted decimal format.

mask

Specify a mask for the destination prefix. Enter the full mask (for example,
255.255.255.0).

not-advertise

(OPTIONAL) Enter the keyword not-advertise to set the status to
DoNotAdvertise (that is, the Type 3 summary-LSA is suppressed and the
component networks remain hidden from other areas.)

No range is configured.
ROUTER OSPF

Open Shortest Path First (OSPFv2)

Command
History

Usage
Information
Related
Commands

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support for Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

Only the routes within an area are summarized, and that summary is advertised to other areas
by the ABR. External routes are not summarized.
area stub

Create a stub area.

router ospf

Enter the ROUTER OSPF mode to configure an OSPF instance.

area stub
ces
Syntax

Configure a stub area, which is an area not connected to other areas.
area area-id stub [no-summary]

To delete a stub area, enter no area area-id stub.
Parameters

Defaults
Command Modes
Command
History

Usage
Information
Related
Commands

area-id

Specify the stub area in dotted decimal format (A.B.C.D.) or enter a number
from zero (0) to 65535.

no-summary

(OPTIONAL) Enter the keyword no-summary to prevent the ABR from
sending summary Link State Advertisements (LSAs) into the stub area.

Disabled
ROUTER OSPF
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support for Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

Use this command to configure all routers and access servers within a stub.

router ospf

Enter the ROUTER OSPF mode to configure an OSPF instance.

area virtual-link
ces

Set a virtual link and its parameters.

Open Shortest Path First (OSPFv2) | 1049

www.dell.com | support.dell.com

Syntax

area area-id virtual-link router-id [[authentication-key [encryption-type] key] |
[message-digest-key keyid md5 [encryption-type] key]] [dead-interval seconds]
[hello-interval seconds] [retransmit-interval seconds] [transmit-delay seconds]

To delete a virtual link, use the no area area-id virtual-link router-id command.
To delete a parameter of a virtual link, use the no area area-id virtual-link router-id
[[authentication-key [encryption-type] key] | [message-digest-key keyid md5 [encryption-type]
key]] [dead-interval seconds] [hello-interval seconds] [retransmit-interval seconds]
[transmit-delay seconds] command syntax.
Parameters

area-id

Specify the transit area for the virtual link in dotted decimal
format (A.B.C.D.) or enter a number from zero (0) to 65535.

router-id

Specify an ID (IP address in dotted decimal format) associated
with a virtual link neighbor.

authentication-key

(OPTIONAL) Choose between two authentication methods:
• Enter the keyword authentication-key to enable simple
authentication followed by an alphanumeric string up to 8
characters long. Optionally, for the encryption-type variable,
enter the number 7 before entering the key string to indicate
that an encrypted password will follow.
• Enter the keyword message-digest-key followed by a
number from 1 to 255 as the keyid. After the keyid, enter the
keyword md5 followed by the key. The key is an
alphanumeric string up to 16 characters long. Optionally, for
the encryption-type variable, enter the number 7 before
entering the key string to indicate that an encrypted
password will follow.

[encryption-type] key |
message-digest-key keyid
md5 [encryption-type] key

Defaults

Command Modes

1050

|

dead-interval seconds

(OPTIONAL) Enter the keyword dead-interval followed by a
number as the number of seconds for the interval.
Range: 1 to 8192.
Default: 40 seconds.

hello-interval seconds

(OPTIONAL) Enter the keyword hello-interval followed by
the number of seconds for the interval.
Range: 1 to 8192.
Default: 10 seconds.

retransmit-interval seconds

(OPTIONAL) Enter the keyword retransmit-interval
followed by the number of seconds for the interval.
Range: 1 to 8192.
Default: 5 seconds.

transmit-delay seconds

(OPTIONAL) Enter the keyword transmit-delay followed by
the number of seconds for the interval.
Range: 1 to 8192.
Default: 1 second.

dead-interval seconds = 40 seconds; hello-interval seconds = 10 seconds; retransmit-interval
seconds = 5 seconds; transmit-delay seconds = 1 second

ROUTER OSPF

Open Shortest Path First (OSPFv2)

Command
History

Usage
Information

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support for Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

All OSPF areas must be connected to a backbone area (usually Area 0). Virtual links connect
broken or discontiguous areas.
You cannot enable both authentication options. Choose either the authentication-key or
message-digest-key option.

auto-cost
ces
Syntax

Specify how the OSPF interface cost is calculated based on the reference bandwidth method.
auto-cost [reference-bandwidth ref-bw]

To return to the default bandwidth or to assign cost based on the interface type, use the no
auto-cost [reference-bandwidth] command.
Parameters

Defaults
Command Modes

ref-bw

(OPTIONAL) Specify a reference bandwidth in megabits per second.
Range: 1 to 4294967
Default: 100 megabits per second.

100 megabits per second.
ROUTER OSPF

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support for Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

clear ip ospf
ces
Syntax
Parameters

Clear all OSPF routing tables.
clear ip ospf process-id [process]

process-id

Enter the OSPF Process ID to clear a specific process.
If no Process ID is entered, all OSPF processes are cleared.

process

(OPTIONAL) Enter the keyword process to reset the OSPF process.

Open Shortest Path First (OSPFv2) | 1051

www.dell.com | support.dell.com

Command Modes
Command
History

EXEC Privilege
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support for Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

clear ip ospf statistics
ces
Syntax
Parameters

Clear the packet statistics in interfaces and neighbors.
clear ip ospf process-id statistics [interface name {neighbor router-id}]

process-id

Enter the OSPF Process ID to clear statistics for a specific process.
If no Process ID is entered, all OSPF processes are cleared.

interface name

(OPTIONAL) Enter the keyword interface followed by one of the
following interface keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For Port Channel groups, enter the keyword port-channel
followed by a number:
•
•

•
•
•
•

Command Modes
Command
History

Related
Commands

1052

|

For a SONET interface, enter the keyword sonet followed by
the slot/port information.
For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
For a VLAN, enter the keyword vlan followed by a number from
1 to 4094.
For a 40-Gigabit Ethernet interface, enter the keyword
fortyGigE followed by the slot/port information.

(OPTIONAL) Enter the keyword neighbor followed by the
neighbor’s router-id in dotted decimal format (A.B.C.D.).

neighbor router-id

Defaults

C-Series and S-Series Range: 1-128
E-Series Range: 1-255 for TeraScale

No defaults values or behavior
EXEC Privilege
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support for Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced on E-Series

show ip ospf statistics

Open Shortest Path First (OSPFv2)

Display the OSPF statistics

debug ip ospf
ces
Syntax

Display debug information on OSPF. Entering debug ip ospf enables OSPF debugging for
the first OSPF process,.
debug ip ospf process-id [bfd |event | packet | spf | database-timer rate-limit]

To cancel the debug command, enter no debug ip ospf.
Parameters

Command Modes
Command
History

process-id

Enter the OSPF Process ID to debug a specific process.
If no Process ID is entered, command applies only to the first OSPF process.

bfd

(OPTIONAL) Enter the keyword bfd to debug only OSPF BFD information.

event

(OPTIONAL) Enter the keyword event to debug only OSPF event information.

packet

(OPTIONAL) Enter the keyword packet to debug only OSPF packet information.

spf

(OPTIONAL) Enter the keyword spf to display the Shortest Path First information.

database-t
imer
rate-limit

(OPTIONAL) Enter the keyword database-timer rate-limit to display the LSA
throttling timer information.
Applies to the S4810 only.

EXEC Privilege
Version 8.3.8.0

Added database-timer rate-limit option for the S4810.

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support for Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

Example

FTOS#debug ip ospf 1 packet
OSPF process 90, packet debugging is on
FTOS#
08:14:24 : OSPF(100:00):
Xmt. v:2 t:1(HELLO) l:44 rid:192.1.1.1
aid:0.0.0.1 chk:0xa098 aut:0 auk: keyid:0 to:Gi 4/3 dst:224.0.0.5
netmask:255.255.255.0 pri:1 N-, MC-, E+, T-,
hi:10 di:40 dr:90.1.1.1 bdr:0.0.0.0

Table 37-1.

Output Descriptions for debug ip ospf process-id packet

Field

Description

8:14

Displays the time stamp.

OSPF

Displays the OSPF process ID: instance ID.

v:

Displays the OSPF version. FTOS supports version 2 only.

Open Shortest Path First (OSPFv2) | 1053

www.dell.com | support.dell.com

Table 37-1.

1054

|

Output Descriptions for debug ip ospf process-id packet

Field

Description

t:

Displays the type of packet sent:
• 1 - Hello packet
• 2 - database description
• 3 - link state request
• 4 - link state update
• 5 - link state acknowledgement

l:

Displays the packet length.

rid:

Displays the OSPF router ID.

aid:

Displays the Autonomous System ID.

chk:

Displays the OSPF checksum.

aut:

States if OSPF authentication is configured. One of the following is listed:
• 0 - no authentication configured
• 1 - simple authentication configured using the ip ospf authentication-key
command)
• 2 - MD5 authentication configured using the ip ospf message-digest-key
command.

auk:

If the ip ospf authentication-key command is configured, this field displays the key
used.

keyid:

If the ip ospf message-digest-key command is configured, this field displays the
MD5 key

to:

Displays the interface to which the packet is intended.

dst:

Displays the destination IP address.

netmask:

Displays the destination IP address mask.

pri:

Displays the OSPF priority

N, MC, E, T

Displays information available in the Options field of the HELLO packet:
• N + (N-bit is set)
• N - (N-bit is not set)
• MC+ (bit used by MOSPF is set and router is able to forward IP multicast
packets)
• MC- (bit used by MOSPF is not set and router cannot forward IP multicast
packets)
• E + (router is able to accept AS External LSAs)
• E - (router cannot accept AS External LSAs)
• T + (router can support TOS)
• T - (router cannot support TOS)

hi:

Displays the amount of time configured for the HELLO interval.

di:

Displays the amount of time configured for the DEAD interval.

dr:

Displays the IP address of the designated router.

bdr:

Displays the IP address of the Border Area Router.

Open Shortest Path First (OSPFv2)

default-information originate
ces
Syntax

Configure the FTOS to generate a default external route into an OSPF routing domain.
default-information originate [always] [metric metric-value] [metric-type type-value]
[route-map map-name]

To return to the default values, enter no default-information originate.
Parameters

Defaults
Command Modes
Command
History

Related
Commands

always

(OPTIONAL) Enter the keyword always to specify that default
route information must always be advertised.

metric metric-value

(OPTIONAL) Enter the keyword metric followed by a number to
configure a metric value for the route.
Range: 1 to 16777214

metric-type type-value

(OPTIONAL) Enter the keyword metric-type followed by an OSPF
link state type of 1 or 2 for default routes. The values are:
• 1 = Type 1 external route
• 2 = Type 2 external route.

route-map map-name

(OPTIONAL) Enter the keyword route-map followed by the name
of an established route map.

Disabled.
ROUTER OSPF
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support for Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

redistribute

Redistribute routes from other routing protocols into OSPF.

default-metric
ces
Syntax

Change the metrics of redistributed routes to a value useful to OSPF. Use this command with
the redistribute command.
default-metric number

To return to the default values, enter no default-metric [number].
Parameters

Defaults

number

Enter a number as the metric.
Range: 1 to 16777214.

Disabled.

Open Shortest Path First (OSPFv2) | 1055

www.dell.com | support.dell.com

Command Modes
Command
History

Related
Commands

ROUTER OSPF
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support for Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

redistribute

Redistribute routes from other routing protocols into OSPF.

description
ces
Syntax

Add a description about the selected OSPF configuration.
description description

To remove the OSPF description, use the no description command.
Parameters

Defaults
Command Modes
Command
History

Related
Commands

description

Enter a text string description to identify the OSPF configuration (80 characters
maximum).

No default behavior or values
ROUTER OSPF
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support for Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

show ip ospf asbr

Display VLAN configuration.

distance
ces
Syntax

Define an administrative distance for particular routes to a specific IP address.
distance weight [ip-address mask access-list-name]

To delete the settings, use the no distance weight [ip-address mask access-list-name] command.

1056

|

Open Shortest Path First (OSPFv2)

Parameters

Defaults
Command Modes
Command
History

weight

Specify an administrative distance.
Range: 1 to 255.
Default: 110

ip-address

(OPTIONAL) Enter a router ID in the dotted decimal format.
If you enter a router ID, you must include the mask for that router
address.

mask

(OPTIONAL) Enter a mask in dotted decimal format or /n format.

access-list-name

(OPTIONAL) Enter the name of an IP standard access list, up to 140
characters.

110
ROUTER OSPF
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support for Multi-Process OSPF.
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names
are up to 16 characters long.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

distance ospf
ces

Configure an OSPF distance metric for different types of routes.

Syntax

distance ospf [external dist3] [inter-area dist2] [intra-area dist1]

To delete these settings, enter no distance ospf.
Parameters

Defaults
Command Modes

external dist3

(OPTIONAL) Enter the keyword external followed by a number to
specify a distance for external type 5 and 7 routes.
Range: 1 to 255
Default: 110.

inter-area dist2

(OPTIONAL) Enter the keyword inter-area followed by a number to
specify a distance metric for routes between areas.
Range: 1 to 255
Default: 110.

intra-area dist1

(OPTIONAL) Enter the keyword intra-area followed by a number to
specify a distance metric for all routes within an area.
Range: 1 to 255
Default: 110.

external dist3 = 110; inter-area dist2 = 110; intra-area dist1 = 110.

ROUTER OSPF

Open Shortest Path First (OSPFv2) | 1057

www.dell.com | support.dell.com

Command
History

Usage
Information

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support for Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

To

specify a distance for routes learned from other routing domains, use the redistribute
command.

distribute-list in
ces
Syntax

Apply a filter to incoming routing updates from OSPF to the routing table.
distribute-list prefix-list-name in [interface]

To delete a filter, use the no distribute-list prefix-list-name in [interface] command.
Parameters

Defaults
Command Modes
Command
History

1058

|

prefix-list-name

Enter the name of a configured prefix list.

interface

(OPTIONAL) Enter one of the following keywords and slot/port or
number information:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For Port Channel groups, enter the keyword port-channel followed by
a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1-255 for TeraScale
• For a SONET interface, enter the keyword sonet followed by the slot/
port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to
4094.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.

Not configured.
ROUTER OSPF
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support for Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

Open Shortest Path First (OSPFv2)

distribute-list out
ces
Syntax

Apply a filter to restrict certain routes destined for the local routing table after the SPF
calculation.
distribute-list prefix-list-name out [bgp | connected | isis | rip | static]

To remove a filter, use the no distribute-list prefix-list-name out [bgp | connected | isis | rip |
static] command.
Parameters

prefix-list-name

Enter the name of a configured prefix list.

bgp

(OPTIONAL) Enter the keyword bgp to specify that BGP routes are
distributed.*

connected

(OPTIONAL) Enter the keyword connected to specify that connected routes
are distributed.

isis

(OPTIONAL) Enter the keyword isis to specify that IS-IS routes are
distributed.*

rip

(OPTIONAL) Enter the keyword rip to specify that RIP routes are
distributed.*

static

(OPTIONAL) Enter the keyword static to specify that only manually
configured routes are distributed.

* BGP and ISIS routes are not available on the C-Series.
BGP, ISIS, and RIP routes are not available on the S-Series.
Defaults
Command Modes
Command
History

Usage
Information

Not configured.
ROUTER OSPF
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support for Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

The distribute-list out command applies to routes being redistributed by autonomous system
boundary routers (ASBRs) into OSPF. It can be applied to external type 2 and external type 1
routes, but not to intra-area and inter-area routes.

enable inverse mask
ce

FTOS, by default, permits the user to input OSPF network command with a net-mask. This
command provides a choice between inverse-mask or net-mask (the default).

Syntax

enable inverse mask

To return to the default net-mask, enter no enable inverse mask.

Open Shortest Path First (OSPFv2) | 1059

www.dell.com | support.dell.com

Defaults
Command Modes
Command
History

net-mask
CONFIGURATION
Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

fast-convergence
ces
Syntax

This command sets the minimum LSA origination and arrival times to zero (0), allowing
more rapid route computation so that convergence takes less time.
fast-convergence {number}

To cancel fast-convergence, enter no fast convergence.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

number

Enter the convergence level desired. The higher this parameter is set,
the faster OSPF converge takes place.
Range: 1-4

None.
ROUTER OSPF
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on all platforms.

The higher this parameter is set, the faster OSPF converge takes place. Note that the faster the
convergence, the more frequent the route calculations and updates. This will impact CPU
utilization and may impact adjacency stability in larger topologies.
Generally, convergence level 1 meets most convergence requirements. Higher convergence
levels should only be selected following consultation with Dell Force10 technical support.

flood-2328
ces
Syntax

Enable RFC-2328 flooding behavior.
flood-2328

To disable, use the no flood-2328 command.
Defaults
Command Modes

1060

|

Disabled
ROUTER OSPF

Open Shortest Path First (OSPFv2)

Command
History

Usage
Information

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support for Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series and E-Series

In OSPF, flooding is the most resource-consuming task. The flooding algorithm, described in
RFC-2328, requires that OSPF flood LSAs (Link State Advertisements) on all interfaces, as
governed by LSA’s flooding scope ( Section 13 of the RFC). When multiple direct links
connect two routers, the RFC-2328 flooding algorithm generates significant redundant
information across all links.
By default, FTOS implements an enhanced flooding procedure that dynamically and
intelligently determines when to optimize flooding. Whenever possible, the OSPF task
attempts to reduce flooding overhead by selectively flooding on a subset of the interfaces
between two routers.
When flood-2328 is enabled, this command configures FTOS to flood LSAs on all interfaces.

graceful-restart grace-period
ces

Syntax

Specifies the time duration, in seconds, that the router’s neighbors will continue to advertise
the router as fully adjacent regardless of the synchronization state during a graceful restart.

graceful-restart grace-period seconds

To disable the grace period, enter no graceful-restart grace-period.
Parameters

Defaults
Command Modes
Command
History

seconds

Time duration, in seconds, that specifies the duration of the restart
process before OSPF terminates the process.
Range: 40 to 1800 seconds

Not Configured
ROUTER OSPF
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced for S-Series
Introduced support for Multi-Process OSPF.

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

Open Shortest Path First (OSPFv2) | 1061

www.dell.com | support.dell.com

graceful-restart helper-reject
ces

Syntax

Specify the OSPF router to not act as a helper during graceful restart.

graceful-restart helper-reject ip-address

To return to default value, enter no graceful-restart helper-reject.
Parameters

Defaults
Command Modes
Command
History

ip-address

Enter the OSPF router-id, in IP address format, of the restart router
that will not act as a helper during graceful restart.

Not Configured
ROUTER OSPF
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support for Multi-Process OSPF.
Restart role enabled on S-Series (Both Helper and Restart roles now
supported on S-Series.

Version 7.7.1.0

Helper-Role supported on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

graceful-restart mode
ces

Syntax

Enable the graceful restart mode.

graceful-restart mode [planned-only | unplanned-only]

To disable graceful restart mode, enter no graceful-restart mode.
Parameters

Defaults
Command Modes

1062

|

planned-only

(OPTIONAL) Enter the keywords planned-only to indicate
graceful restart is supported in a planned restart condition only.

unplanned-only

(OPTIONAL) Enter the keywords unplanned-only to indicate
graceful restart is supported in an unplanned restart condition only.

Support for both planned and unplanned failures.
ROUTER OSPF

Open Shortest Path First (OSPFv2)

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

graceful-restart role
ces

Syntax

Specify the role for your OSPF router during graceful restart.

graceful-restart role [helper-only | restart-only]

To disable graceful restart role, enter no graceful-restart role.
Parameters

Defaults
Command Modes
Command
History

role helper-only

(OPTIONAL) Enter the keywords helper-only to specify the OSPF
router is a helper only during graceful restart.

role restart-only

(OPTIONAL) Enter the keywords restart-only to specify the OSPF
router is a restart only during graceful-restart.

OSPF routers are, by default, both helper and restart routers during a graceful restart.
ROUTER OSPF
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support for Multi-Process OSPF.
Restart and helper roles supported on S-Series

Version 7.7.1

Helper-Role supported on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

ip ospf auth-change-wait-time
ces

Syntax

OSPF provides a grace period while OSPF changes its interface authentication type. During
the grace period, OSPF sends out packets with new and old authentication scheme till the
grace period expires.
ip ospf auth-change-wait-time seconds

To return to the default, enter no ip ospf auth-change-wait-time.
Parameters

seconds

Enter seconds
Range: 0 to 300

Open Shortest Path First (OSPFv2) | 1063

www.dell.com | support.dell.com

Defaults
Command Modes
Command
History

zero (0) seconds
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

ip ospf authentication-key
ces
Syntax

Enable authentication and set an authentication key on OSPF traffic on an interface.
ip ospf authentication-key [encryption-type] key

To delete an authentication key, enter no ip ospf authentication-key.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

encryption-type

(OPTIONAL) Enter 7 to encrypt the key.

key

Enter an 8 character string. Strings longer than 8 characters are truncated.

Not configured.
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

All neighboring routers in the same network must use the same password to exchange OSPF
information.

ip ospf cost
ces
Syntax

Change the cost associated with the OSPF traffic on an interface.
ip ospf cost cost

To return to default value, enter no ip ospf cost.
Parameters

Defaults

1064

|

cost

Enter a number as the cost.
Range: 1 to 65535.

The default cost is based on the reference bandwidth.

Open Shortest Path First (OSPFv2)

Command Modes
Command
History

Usage
Information

INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

If this command is not configured, cost is based on the auto-cost command.
When you configure OSPF over multiple vendors, use the ip ospf cost command to ensure
that all routers use the same cost. Otherwise, OSPF routes improperly.

Related
Commands

auto-cost

Control how the OSPF interface cost is calculated.

ip ospf dead-interval
ces
Syntax

Set the time interval since the last hello-packet was received from a router. After the interval
elapses, the neighboring routers declare the router dead.
ip ospf dead-interval seconds

To return to the default values, enter no ip ospf dead-interval.
Parameters

Defaults
Command Modes
Command
History

Usage
Information
Related
Commands

seconds

Enter the number of seconds for the interval.
Range: 1 to 65535. Default: 40 seconds.

40 seconds
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

By default, the dead interval is four times the default hello-interval.

ip ospf hello-interval

Set the time interval between hello packets.

ip ospf hello-interval
ces
Syntax

Specify the time interval between the hello packets sent on the interface.
ip ospf hello-interval seconds

Open Shortest Path First (OSPFv2) | 1065

www.dell.com | support.dell.com

To return to the default value, enter no ip ospf hello-interval.
Parameters

Defaults
Command Modes
Command
History

Usage
Information
Related
Commands

seconds

Enter a the number of second as the delay between hello packets.
Range: 1 to 65535.
Default: 10 seconds.

10 seconds
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

The time interval between hello packets must be the same for routers in a network.

ip ospf dead-interval

Set the time interval before a router is declared dead.

ip ospf message-digest-key
ces
Syntax

Enable OSPF MD5 authentication and send an OSPF message digest key on the interface.
ip ospf message-digest-key keyid md5 key

To delete a key, use the no ip ospf message-digest-key keyid command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

1066

|

keyid

Enter a number as the key ID.
Range: 1 to 255.

key

Enter a continuous character string as the password.

No MD5 authentication is configured.
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

To change to a different key on the interface, enable the new key while the old key is still
enabled. The FTOS will send two packets: the first packet authenticated with the old key, and
the second packet authenticated with the new key. This process ensures that the neighbors
learn the new key and communication is not disrupted by keeping the old key enabled.

Open Shortest Path First (OSPFv2)

After the reply is received and the new key is authenticated, you must delete the old key. Dell
Force10 recommends keeping only one key per interface.
Note: The MD5 secret is stored as plain text in the configuration file with service
password encryption.

ip ospf mtu-ignore
ces
Syntax

Disable OSPF MTU mismatch detection upon receipt of database description (DBD) packets.
ip ospf mtu-ignore

To return to the default, enter no ip ospf mtu-ignore.
Defaults
Command Modes
Command
History

Enabled
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

ip ospf network
ces
Syntax

Set the network type for the interface.
ip ospf network {broadcast | point-to-point}

To return to the default, enter no ip ospf network.
Parameters

Defaults
Command Modes
Command
History

broadcast

Enter the keyword broadcast to designate the interface as part of a
broadcast network.

point-to-point

Enter the keyword point-to-point to designate the interface as part of a
point-to-point network.

Not configured.
ROUTER OSPF
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support for Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Open Shortest Path First (OSPFv2) | 1067

www.dell.com | support.dell.com

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

ip ospf priority
ces
Syntax

Set the priority of the interface to determine the Designated Router for the OSPF network.
ip ospf priority number

To return to the default setting, enter no ip ospf priority.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

number

Enter a number as the priority.
Range: 0 to 255.
The default is 1.

1
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

Setting a priority of 0 makes the router ineligible for election as a Designated Router or
Backup Designated Router.
Use this command for interfaces connected to multi-access networks, not point-to-point
networks.

ip ospf retransmit-interval
ces
Syntax

Set the retransmission time between lost link state advertisements (LSAs) for adjacencies
belonging to the interface.
ip ospf retransmit-interval seconds

To return to the default values, enter no ip ospf retransmit-interval.
Parameters

Defaults

1068

|

seconds

5 seconds

Open Shortest Path First (OSPFv2)

Enter the number of seconds as the interval between retransmission.
Range: 1 to 3600.
Default: 5 seconds.
This interval must be greater than the expected round-trip time for a packet to
travel between two routers.

Command Modes
Command
History

Usage
Information

INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

Set the time interval to a number large enough to prevent unnecessary retransmissions. For
example, the interval should be larger for interfaces connected to virtual links.

ip ospf transmit-delay
ces
Syntax

Set the estimated time elapsed to send a link state update packet on the interface.
ip ospf transmit-delay seconds

To return to the default value, enter no ip ospf transmit-delay.
Parameters

Defaults
Command Modes
Command
History

seconds

Enter the number of seconds as the transmission time. This value should be
greater than the transmission and propagation delays for the interface.
Range: 1 to 3600.
Default: 1 second.

1 second
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

log-adjacency-changes
ces
Syntax

Set FTOS to send a Syslog message about changes in the OSPF adjacency state.
log-adjacency-changes

To disable the Syslog messages, enter no log-adjacency-changes.
Defaults
Command Mode

Disabled.
ROUTER OSPF

Open Shortest Path First (OSPFv2) | 1069

www.dell.com | support.dell.com

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support for Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

maximum-paths
ces
Syntax

Enable the software to forward packets over multiple paths.
maximum-paths number

To disable packet forwarding over multiple paths, enter no maximum-paths.
Parameters

Defaults
Command Modes
Command
History

number

Specify the number of paths.
Range: 1 to 16.
Default: 4 paths.

4
ROUTER OSPF
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support for Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

mib-binding
ces
Syntax

Enable this OSPF process ID to manage the SNMP traps and process SNMP queries.
mib-binding

To mib-binding on this OSPF process, enter no mib-binding.
Defaults
Command Modes
Command
History

1070

|

None.
ROUTER OSPF
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced to all platforms.

Open Shortest Path First (OSPFv2)

Usage
Information

This command is either enabled or disabled. If no OSPF process is identified as the MIB
manager, the first OSPF process will be used.
If an OSPF process has been selected, it must be disabled prior to assigning new process ID
the MIB responsibility.

network area
ces
Syntax

Define which interfaces run OSPF and the OSPF area for those interfaces.
network ip-address mask area area-id

To disable an OSPF area, use the no network ip-address mask area area-id command.
Parameters

Command Modes
Command
History

Usage
Information

ip-address

Specify a primary or secondary address in dotted decimal format. The primary
address is required before adding the secondary address.

mask

Enter a network mask in /prefix format. (/x)

area-id

Enter the OSPF area ID as either a decimal value or in a valid IP address.
Decimal value range: 0 to 65535
IP address format: dotted decimal format A.B.C.D.
Note: If the area ID is smaller than 65535, it will be converted to a decimal
value. For example, if you use an area ID of 0.0.0.1, it will be converted to 1.

ROUTER OSPF
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support for Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

To enable OSPF on an interface, the network area command must include, in its range of
addresses, the primary IP address of an interface.
Note: An interface can be attached only to a single OSPF area.

If you delete all the network area commands for Area 0, the show ip ospf command output
will not list Area 0.

passive-interface
ces
Syntax

Suppress both receiving and sending routing updates on an interface.
passive-interface {default | interface}

Open Shortest Path First (OSPFv2) | 1071

www.dell.com | support.dell.com

To enable both the receiving and sending routing, enter the no passive-interface interface
command.
To return all OSPF interfaces (current and future) to active, enter the no passive-interface
default command.
Parameters

Command Modes
Command
History

Usage
Information

default

Enter the keyword default to make all OSPF interfaces (current and future)
passive.

interface

Enter the following keywords and slot/port or number information:
• For a Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For Port Channel groups, enter the keyword port-channel followed by a
number:
C-Series and S-Series Range: 1-128
E-Series Range: 1-255 for TeraScale
• For a SONET interface, enter the keyword sonet followed by the slot/port
information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed
by the slot/port information.

ROUTER OSPF
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support for Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 7.4.1.0

Modified to include the default keyword.

pre-Version 6.1.1.1

Introduced on E-Series

Although the passive interface will neither send nor receive routing updates, the network on
that interface will still be included in OSPF updates sent via other interfaces.
The default keyword sets all interfaces as passive. You can then configure individual
interfaces, where adjacencies are desired, using the no passive-interface interface command.
The no form of this command is inserted into the configuration for individual interfaces when
the no passive-interface interface command is issued while passive-interface default is
configured.
This command behavior has changed as follows:
passive-interface interface

•
•

1072

|

The previous no passive-interface interface is removed from the running
configuration.
The ABR status for the router is updated.

Open Shortest Path First (OSPFv2)

•

Save passive-interface interface into the running configuration.

passive-interface default

•
•
•
•

All present and future OSPF interface are marked as passive.
Any adjacency are explicitly terminated from all OSPF interfaces.
All previous passive-interface interface commands are removed from the running
configuration.
All previous no passive-interface interface commands are removed from the
running configuration.

no passive-interface interface

•
•
•

Remove the interface from the passive list.
The ABR status for the router is updated.
If passive-interface default is specified, then save no passive-interface interface
into the running configuration.

No passive-interface default

•
•
•

Clear everything and revert to the default behavior.
All previously marked passive interfaces are removed.
May update ABR status.

redistribute
ces
Syntax

Redistribute information from another routing protocol throughout the OSPF process.
redistribute {connected | rip | static} [metric metric-value | metric-type type-value]
[route-map map-name] [tag tag-value]

To disable redistribution, use the no redistribute {connected | isis | rip | static} command.
Parameters

connected

Enter the keyword connected to specify that information from active
routes on interfaces is redistributed.

rip

Enter the keyword rip to specify that RIP routing information is
redistributed.

static

Enter the keyword static to specify that information from static routes is
redistributed.

metric metric-value

(OPTIONAL) Enter the keyword metric followed by a number.
Range: 0 (zero) to 16777214.

metric-type type-value

(OPTIONAL) Enter the keyword metric-type followed by one of the
following:
• 1 = OSPF External type 1
• 2 = OSPF External type 2

Open Shortest Path First (OSPFv2) | 1073

www.dell.com | support.dell.com

Defaults
Command Modes
Command
History

Usage
Information
Related
Commands

route-map map-name

(OPTIONAL) Enter the keyword route-map followed by the name of
the route map.

tag tag-value

(OPTIONAL) Enter the keyword tag followed by a number.
Range: 0 to 4294967295

Not configured.
ROUTER OSPF
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support for Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

To redistribute the default route (0.0.0.0/0), configure the default-information originate
command.
default-information
originate

Generate a default route into the OSPF routing domain.

redistribute bgp
ces
Syntax

Redistribute BGP routing information throughout the OSPF instance.
redistribute bgp as number [metric metric-value] | [metric-type type-value] | [tag tag-value]

To disable redistribution, use the no redistribute bgp as number [metric metric-value] |
[metric-type type-value] [route-map map-name] [tag tag-value] command.
Parameters

Defaults

1074

|

as number

Enter the autonomous system number.
Range: 1 to 65535

metric metric-value

(OPTIONAL) Enter the keyword metric followed by the
metric-value number.
Range: 0 to16777214

metric-type type-value

(OPTIONAL) Enter the keyword metric-type followed by one of
the following:
• 1 = for OSPF External type 1
• 2 = for OSPF External type 2

route-map map-name

(OPTIONAL) Enter the keyword route-map followed by the name
of the route map.

tag tag-value

(OPTIONAL) Enter the keyword tag to set the tag for routes
redistributed into OSPF.
Range: 0 to 4294967295

No default behavior or values

Open Shortest Path First (OSPFv2)

Command Modes
Command
History

ROUTER OSPF
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.3

Introduced Route Map for BGP Redistribution to OSPF

Version 7.8.1.0

Introduced support for Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 7.4.1.0

Modified to include the default keyword.

pre-Version 6.1.1.1

Introduced on E-Series

redistribute isis
ces
Syntax

Redistribute IS-IS routing information throughout the OSPF instance.
redistribute isis [tag] [level-1 | level-1-2 | level-2] [metric metric-value | metric-type
type-value] [route-map map-name] [tag tag-value]

To disable redistribution, use the no redistribute isis [tag] [level-1 | level-1-2 | level-2]
[metric metric-value | metric-type type-value] [route-map map-name] [tag tag-value] command.
Parameters

Defaults
Command Modes
Command
History

tag

(OPTIONAL) Enter the name of the IS-IS routing process.

level-1

(OPTIONAL) Enter the keyword level-1 to redistribute only IS-IS
Level-1 routes.

level-1-2

(OPTIONAL) Enter the keyword level-1-2 to redistribute both IS-IS
Level-1 and Level-2 routes.

level-2

(OPTIONAL) Enter the keyword level-2 to redistribute only IS-IS
Level-2 routes.

metric metric-value

(OPTIONAL) Enter the keyword metric followed by a number.
Range: 0 (zero) to 4294967295.

metric-type type-value

(OPTIONAL) Enter the keyword metric-type followed by one of the
following:
• 1 = for OSPF External type 1
• 2 = for OSPF External type 2

route-map map-name

(OPTIONAL) Enter the keyword route-map followed by the name of
the route map.

tag tag-value

(OPTIONAL) Enter the keyword tag followed by a number.
Range: 0 to 4294967295

Not configured.
ROUTER OSPF
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support for Multi-Process OSPF.

Open Shortest Path First (OSPFv2) | 1075

www.dell.com | support.dell.com

Usage
Information

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

IS-IS is not supported on S-Series platforms.

router-id
ces
Syntax

Use this command to configure a fixed router ID.
router-id ip-address

To remove the fixed router ID, use the no router-id ip-address command.
Parameters

Defaults
Command Modes
Command
History

Example

ip-address

Enter the router ID in the IP address format

This command has no default behavior or values.
ROUTER OSPF
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support for Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

FTOS(conf)#router ospf 100
FTOS(conf-router_ospf)#router-id 1.1.1.1
Changing router-id will bring down existing OSPF adjacency [y/n]:

FTOS(conf-router_ospf)#show config
!
router ospf 100
router-id 1.1.1.1
FTOS(conf-router_ospf)#no router-id
Changing router-id will bring down existing OSPF adjacency [y/n]:
FTOS#

Usage
Information

You can configure an arbitrary value in the IP address format for each router. However, each
router ID must be unique. If this command is used on an OSPF router process, which is
already active (that is, has neighbors), a prompt reminding you that changing router-id will
bring down the existing OSPF adjacency. The new router ID is effective at the next reload

router ospf
ces

1076

|

Enter the ROUTER OSPF mode to configure an OSPF instance.

Open Shortest Path First (OSPFv2)

Syntax

router ospf process-id [vrf {vrf name}]

To clear an OSPF instance, enter no router ospf process-id.
Parameters

Defaults
Command Modes

Enter a number for the OSPF instance.
Range: 1 to 65535.

vrf name

(Optional) E-Series Only: Enter the VRF process identifier to tie the OSPF
instance to the VRF. All network commands under this OSPF instance are
subsequently tied to the VRF instance.

Not configured.
CONFIGURATION

Command
History

Example
Usage
Information

process-id

Version 8.3.7.0

Introduced on S4810

Version 7.9.1.0

Introduced VRF

Version 7.8.1.0

Introduced support of Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

FTOS(conf)#router ospf 2
FTOS(conf-router_ospf)#

You must have an IP address assigned to an interface to enter the ROUTER OSPF mode and
configure OSPF.
Once the OSPF process and the VRF are tied together, the OSPF Process ID cannot be used
again in the system.

show config
ces
Syntax
Command Modes
Command
History

Example

Display the non-default values in the current OSPF configuration.
show config

ROUTER OSPF
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

FTOS(conf-router_ospf)#show config
!
router ospf 3
passive-interface FastEthernet 0/1
FTOS(conf-router_ospf)#

Open Shortest Path First (OSPFv2) | 1077

www.dell.com | support.dell.com

show ip ospf
ces
Syntax
Parameters

Command Modes

Display information on the OSPF process configured on the switch.
show ip ospf process-id [vrf vrf name]

process-id

Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF process.

vrf name

E-Series Only: Show only the OSPF information tied to the VRF process.

EXEC
EXEC Privilege

Command
History

Usage
Information
Example

Version 8.3.8.0

Added output for LSA throttling timers

Version 8.3.7.0

Introduced on S4810

Version 7.9.1.0

Introduced VRF

Version 7.9.1.0

Introduced VRF

Version 7.8.1.0

Introduced support of Multi-Process OSPF.

Version 7.8.1.0

Introduced process-id option, in support of Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

If you delete all the network area commands for Area 0, the show ip ospf command output
will not list Area 0.
FTOS#show ip ospf 10
Routing Process ospf 10 with ID 1.1.1.1 Virtual router default-vrf
Supports only single TOS (TOS0) routes
SPF schedule delay 5 secs, Hold time between two SPFs 10 secs
Convergence Level 0
Min LSA origination 0 msec, Min LSA arrival 1000 msec
Min LSA hold time 5000 msec, Max LSA wait time 5000 msec
Number of area in this router is 1, normal 1 stub 0 nssa 0
Area BACKBONE (0)
Number of interface in this area is 1
SPF algorithm executed 205 times
Area ranges are
FTOS#

Table 37-2.

1078

|

Command Output Descriptions: show ip ospf process-id

Line Beginning with

Description

“Routing Process...”

Displays the OSPF process ID and the IP address associated with
the process ID.

“Supports only...”

Displays the number of Type of Service (TOS) rouse supported.

Open Shortest Path First (OSPFv2)

Table 37-2.

Command Output Descriptions: show ip ospf process-id

Line Beginning with

Description

“SPF schedule...”

Displays the delay and hold time configured for this process ID.

“Convergence Level”

Related
Commands

“Min LSA....”

Displays the intervals set for LSA transmission and acceptance.

“Number of...”

Displays the number and type of areas configured for this process
ID.

show ip ospf database

Displays information about the OSPF routes configured.

show ip ospf interface

Displays the OSPF interfaces configured.

show ip ospf neighbor

Displays the OSPF neighbors configured.

show ip ospf virtual-links

Displays the OSPF virtual links configured.

show ip ospf asbr
ces
Syntax
Parameters

Defaults
Command Modes

Display all ASBR routers visible to OSPF.
show ip ospf process-id asbr

process-id

Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF process.

No default values or behavior
EXEC
EXEC Privilege

Command
History

Usage
Information

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support of Multi-Process OSPF.

Version 7.8.1.0

Introduced process-id option, in support of Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series and E-Series

Use this command to isolate problems with external routes. In OSPF, external routes are
calculated by adding the LSA cost to the cost of reaching the ASBR router. If an external
route does not have the correct cost, use this command to determine if the path to the
originating router is correct. The display output is not sorted in any order.
Note: ASBRs that are not in directly connected areas are also displayed.

Example

FTOS#show ip ospf 1asbr

Open Shortest Path First (OSPFv2) | 1079

www.dell.com | support.dell.com

RouterID
3.3.3.3
1.1.1.1
FTOS#

Flags
-/-/-/
E/-/-/

Cost
2
0

Nexthop
10.0.0.2
0.0.0.0

Interface
Gi 0/1
-

Area
1
0

You can determine if an ASBR is in a directly connected area (or not) by the flags. For
ASBRs in a directly connected area, E flags are set. In the figure above, router 1.1.1.1 is in a
directly connected area since the Flag is E/-/-/. For remote ASBRs, the E flag is clear (-/-/-/)

show ip ospf database
ces
Syntax
Parameters

Command Modes

Display all LSA information. If OSPF is not enabled on the switch, no output is generated.
show ip ospf process-id database [database-summary]

process-id

Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF
process.

database-summary

(OPTIONAL) Enter the keywords database-summary to the display
the number of LSA types in each area and the total number of LSAs.

EXEC
EXEC Privilege

Command
History

Example

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support of Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

FTOS>show ip ospf 1 database
OSPF Router with ID (11.1.2.1) (Process ID 1)
Router (Area 0.0.0.0)
Link ID
ADV Router
Age
Seq#
Checksum
11.1.2.1
11.1.2.1
673
0x80000005
0x707e
13.1.1.1
13.1.1.1
676
0x80000097
0x1035
192.68.135.2
192.68.135.2
1419
0x80000294
0x9cbd

1080

|

Link ID
10.2.3.2
10.2.4.2

Network (Area 0.0.0.0)
ADV Router
Age
13.1.1.1
676
192.68.135.2
908

Seq#
0x80000003
0x80000055

Checksum
0x6592
0x683e

Link ID
0.0.0.0
1.1.1.1
10.1.1.0
10.1.2.0
10.2.2.0
10.2.3.0
10.2.4.0

Type-5 AS External
ADV Router
Age
192.68.135.2
908
192.68.135.2
908
11.1.2.1
718
11.1.2.1
718
11.1.2.1
718
11.1.2.1
718
13.1.1.1
1184

Seq#
0x80000052
0x8000002a
0x80000002
0x80000002
0x80000002
0x80000002
0x80000068

Checksum
0xeb83
0xbd27
0x9012
0x851c
0x7927
0x6e31
0x45db

Open Shortest Path First (OSPFv2)

Link count
2
2
1

Tag
100
0
0
0
0
0
0

11.1.1.0
11.1.2.0
12.1.2.0
13.1.1.0
13.1.2.0
172.16.1.0
FTOS>

Table 37-3.

Related
Commands

11.1.2.1
11.1.2.1
192.68.135.2
13.1.1.1
13.1.1.1
13.1.1.1

718
718
1663
1192
1184
148

0x80000002
0x80000002
0x80000054
0x8000006b
0x8000006b
0x8000006d

0x831e
0x7828
0xd8d6
0x2718
0x1c22
0x533b

0
0
0
0
0
0

Command Output Description: show ip ospf process-id database

Field

Description

Link ID

Identifies the router ID.

ADV Router

Identifies the advertising router’s ID.

Age

Displays the link state age.

Seq#

Identifies the link state sequence number. This number enables you to identify old
or duplicate link state advertisements.

Checksum

Displays the Fletcher checksum of an LSA’s complete contents.

Link count

Displays the number of interfaces for that router.

show ip ospf database asbr-summary

Displays only ASBR summary LSA information.

show ip ospf database asbr-summary
ces
Syntax
Parameters

Display information about AS Boundary LSAs.
show ip ospf process-id database asbr-summary [link-state-id] [adv-router ip-address]

process-id

Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF process.

link-state-id

(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value
depends on the LSA type, and it can be one of the following:
• the network’s IP address for Type 3 LSAs or Type 5 LSAs
• the router’s OSPF router ID for Type 1 LSAs or Type 4 LSAs
• the default destination (0.0.0.0) for Type 5 LSAs

adv-router

(OPTIONAL) Enter the keywords adv-router ip-address to display only the
LSA information about that router.

ip-address
Command Modes

EXEC
EXEC Privilege

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support of Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Open Shortest Path First (OSPFv2) | 1081

www.dell.com | support.dell.com

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

Example

FTOS#show ip ospf 100 database asbr-summary
OSPF Router with ID (1.1.1.10) (Process ID 100)
Summary Asbr (Area 0.0.0.0)
LS age: 1437
Options: (No TOS-capability, No DC, E)
LS type: Summary Asbr
Link State ID: 103.1.50.1
Advertising Router: 1.1.1.10
LS Seq Number: 0x8000000f
Checksum: 0x8221
Length: 28
Network Mask: /0
TOS: 0 Metric: 2
LS age: 473
Options: (No TOS-capability, No DC, E)
LS type: Summary Asbr
Link State ID: 104.1.50.1
Advertising Router: 1.1.1.10
LS Seq Number: 0x80000010
Checksum: 0x4198
Length: 28
--More--

Table 37-4. Command Output Descriptions: show ip ospf database
asbr-summary

1082

|

Item

Description

LS Age

Displays the LSA’s age.

Options

Displays the optional capabilities available on router. The following
options can be found in this item:
• TOS-capability or No TOS-capability is displayed depending on
whether the router can support Type of Service.
• DC or No DC is displayed depending on whether the originating router
can support OSPF over demand circuits.
• E or No E is displayed on whether the originating router can accept AS
External LSAs.

LS Type

Displays the LSA’s type.

Link State ID

Displays the Link State ID.

Advertising Router

Identifies the advertising router’s ID.

Checksum

Displays the Fletcher checksum of the an LSA’s complete contents.

Length

Displays the length in bytes of the LSA.

Network Mask

Displays the network mask implemented on the area.

TOS

Displays the Type of Service (TOS) options. Option 0 is the only option.

Metric

Displays the LSA metric.

Open Shortest Path First (OSPFv2)

Related
Commands

show ip ospf database

Displays OSPF database information.

show ip ospf database external
ces
Syntax
Parameters

Display information on the AS external (type 5) LSAs.
show ip ospf process-id database external [link-state-id] [adv-router ip-address]

process-id

Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF process.

link-state-id

(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value
depends on the LSA type, and it can be one of the following:
• the network’s IP address for Type 3 LSAs or Type 5 LSAs
• the router’s OSPF router ID for Type 1 LSAs or Type 4 LSAs
• the default destination (0.0.0.0) for Type 5 LSAs

adv-router

(OPTIONAL) Enter the keywords adv-router ip-address to display only the
LSA information about that router.

ip-address
Command Modes

EXEC
EXEC Privilege

Command
History

Example

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support of Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

FTOS#show ip ospf 1 database external
OSPF Router with ID (20.20.20.5) (Process ID 1)
Type-5 AS External
LS age: 612
Options: (No TOS-capability, No DC, E)
LS type: Type-5 AS External
Link State ID: 12.12.12.2
Advertising Router: 20.31.3.1
LS Seq Number: 0x80000007
Checksum: 0x4cde
Length: 36
Network Mask: /32
Metrics Type: 2
TOS: 0
Metrics: 25
Forward Address: 0.0.0.0
External Route Tag: 43
LS age: 1868
Options: (No TOS-capability, DC)
LS type: Type-5 AS External

Open Shortest Path First (OSPFv2) | 1083

www.dell.com | support.dell.com

Link State ID: 24.216.12.0
Advertising Router: 20.20.20.8
LS Seq Number: 0x80000005
Checksum: 0xa00e
Length: 36
Network Mask: /24
Metrics Type: 2
TOS: 0
Metrics: 1
Forward Address: 0.0.0.0
External Route Tag: 701
FTOS#

Table 37-5.
external

Related
Commands

1084

|

Command Example Descriptions: show ip ospf process-id database

Item

Description

LS Age

Displays the LSA age.

Options

Displays the optional capabilities available on router. The following
options can be found in this item:
• TOS-capability or No TOS-capability is displayed depending on
whether the router can support Type of Service.
• DC or No DC is displayed depending on whether the originating
router can support OSPF over demand circuits.
• E or No E is displayed on whether the originating router can accept
AS External LSAs.

LS Type

Displays the LSA’s type.

Link State ID

Displays the Link State ID.

Advertising Router

Identifies the router ID of the LSA’s originating router.

LS Seq Number

Identifies the link state sequence number. This number enables you to
identify old or duplicate LSAs.

Checksum

Displays the Fletcher checksum of an LSA’s complete contents.

Length

Displays the length in bytes of the LSA.

Network Mask

Displays the network mask implemented on the area.

Metrics Type

Displays the external type.

TOS

Displays the TOS options. Option 0 is the only option.

Metrics

Displays the LSA metric.

Forward Address

Identifies the address of the forwarding router. Data traffic is forwarded
to this router. If the forwarding address is 0.0.0.0, data traffic is
forwarded to the originating router.

External Route Tag

Displays the 32-bit field attached to each external route. This field is not
used by the OSPF protocol, but can be used for external route
management.

show ip ospf database

Open Shortest Path First (OSPFv2)

Displays OSPF database information.

show ip ospf database network
ces
Syntax
Parameters

Display the network (type 2) LSA information.
show ip ospf process-id database network [link-state-id] [adv-router ip-address]

process-id

Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF process.

link-state-id

(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value
depends on the LSA type, and it can be one of the following:
• the network’s IP address for Type 3 LSAs or Type 5 LSAs
• the router’s OSPF router ID for Type 1 LSAs or Type 4 LSAs
• the default destination (0.0.0.0) for Type 5 LSAs

adv-router

(OPTIONAL) Enter the keywords adv-router ip-address to display only the
LSA information about that router.

ip-address
Command Modes

EXEC
EXEC Privilege

Command
History

Example

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support of Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

FTOS#show ip ospf 1 data network
OSPF Router with ID (20.20.20.5) (Process ID 1)
Network (Area 0.0.0.0)
LS age: 1372
Options: (No TOS-capability, DC, E)
LS type: Network
Link State ID: 202.10.10.2
Advertising Router: 20.20.20.8
LS Seq Number: 0x80000006
Checksum: 0xa35
Length: 36
Network Mask: /24
Attached Router: 20.20.20.8
Attached Router: 20.20.20.9
Attached Router: 20.20.20.7
Network (Area 0.0.0.1)
LS age: 252
Options: (TOS-capability, No DC, E)
LS type: Network
Link State ID: 192.10.10.2
Advertising Router: 192.10.10.2
LS Seq Number: 0x80000007
Checksum: 0x4309
Length: 36

Open Shortest Path First (OSPFv2) | 1085

www.dell.com | support.dell.com

Network Mask: /24
Attached Router: 192.10.10.2
Attached Router: 20.20.20.1
Attached Router: 20.20.20.5
FTOS#

Table 37-6.
network

Related
Commands

Command Example Descriptions: show ip ospf process-id database

Item

Description

LS Age

Displays the LSA age.

Options

Displays the optional capabilities available on router. The following options
can be found in this item:
• TOS-capability or No TOS-capability is displayed depending on whether
the router can support Type of Service.
• DC or No DC is displayed depending on whether the originating router can
support OSPF over demand circuits.
• E or No E is displayed on whether the originating router can accept AS
External LSAs.

LS Type

Displays the LSA’s type.

Link State ID

Displays the Link State ID.

Advertising Router

Identifies the router ID of the LSA’s originating router.

Checksum

Identifies the link state sequence number. This number enables you to identify
old or duplicate LSAs.

Length

Displays the Fletcher checksum of an LSA’s complete contents.

Network Mask

Displays the length in bytes of the LSA.

Attached Router

Identifies the IP address of routers attached to the network.

show ip ospf database

Displays OSPF database information.

show ip ospf database nssa-external
ces
Syntax
Parameters

Display NSSA-External (type 7) LSA information.
show ip ospf database nssa-external [link-state-id] [adv-router ip-address]
link-state-id

(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value
depends on the LSA type, and it can be one of the following:
• the network’s IP address for Type 3 LSAs or Type 5 LSAs
• the router’s OSPF router ID for Type 1 LSAs or Type 4 LSAs
• the default destination (0.0.0.0) for Type 5 LSAs

adv-router

(OPTIONAL) Enter the keywords adv-router ip-address to display only the
LSA information about that router.

ip-address
Command Modes

EXEC
EXEC Privilege

1086

|

Open Shortest Path First (OSPFv2)

Command
History

Related
Commands

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support of Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

show ip ospf database

Displays OSPF database information.

show ip ospf database opaque-area
ces
Syntax
Parameters

Display the opaque-area (type 10) LSA information.
show ip ospf process-id database opaque-area [link-state-id] [adv-router ip-address]

process-id

Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF process.

link-state-id

(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value
depends on the LSA type, and it can be one of the following:
• the network’s IP address for Type 3 LSAs or Type 5 LSAs
• the router’s OSPF router ID for Type 1 LSAs or Type 4 LSAs
• the default destination (0.0.0.0) for Type 5 LSAs

adv-router

(OPTIONAL) Enter the keywords adv-router ip-address to display only the
LSA information about that router.

ip-address
Command Modes

EXEC
EXEC Privilege

Command
History

Example

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support of Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

FTOS>show ip ospf 1 database opaque-area
OSPF Router with ID (3.3.3.3) (Process ID 1)
Type-10 Opaque Link Area (Area 0)
LS age: 1133
Options: (No TOS-capability, No DC, E)
LS type: Type-10 Opaque Link Area
Link State ID: 1.0.0.1
Advertising Router: 10.16.1.160
LS Seq Number: 0x80000416
Checksum: 0x376
Length: 28
Opaque Type: 1

Open Shortest Path First (OSPFv2) | 1087

www.dell.com | support.dell.com

Opaque ID: 1
Unable to display opaque data
LS age: 833
Options: (No TOS-capability, No DC, E)
LS type: Type-10 Opaque Link Area
Link State ID: 1.0.0.2
Advertising Router: 10.16.1.160
LS Seq Number: 0x80000002
Checksum: 0x19c2
--More--

Table 37-7. Command Example Descriptions: show ip ospf process-id database
opaque-area

Related
Commands

Item

Description

LS Age

Displays the LSA’s age.

Options

Displays the optional capabilities available on router. The
following options can be found in this item:
• TOS-capability or No TOS-capability is displayed depending
on whether the router can support Type of Service.
• DC or No DC is displayed depending on whether the
originating router can support OSPF over demand circuits.
• E or No E is displayed on whether the originating router can
accept AS External LSAs.

LS Type

Displays the LSA’s type.

Link State ID

Displays the Link State ID.

Advertising Router

Identifies the advertising router’s ID.

Checksum

Displays the Fletcher checksum of the an LSA’s complete contents.

Length

Displays the length in bytes of the LSA.

Opaque Type

Displays the Opaque type field (the first 8 bits of the Link State
ID).

Opaque ID

Displays the Opaque type-specific ID (the remaining 24 bits of the
Link State ID).

show ip ospf database

Displays OSPF database information.

show ip ospf database opaque-as
ces
Syntax

1088

|

Display the opaque-as (type 11) LSA information.
show ip ospf process-id database opaque-as [link-state-id] [adv-router ip-address]

Open Shortest Path First (OSPFv2)

Parameters

process-id

Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF process.

link-state-id

(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value
depends on the LSA type, and it can be one of the following:
• the network’s IP address for Type 3 LSAs or Type 5 LSAs
• the router’s OSPF router ID for Type 1 LSAs or Type 4 LSAs
• the default destination (0.0.0.0) for Type 5 LSAs

adv-router

(OPTIONAL) Enter the keywords adv-router ip-address to display only the
LSA information about that router.

ip-address
Command Modes

EXEC
EXEC Privilege

Command
History

Related
Commands

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support of Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

show ip ospf database

Displays OSPF database information.

show ip ospf database opaque-link
ces
Syntax
Parameters

Display the opaque-link (type 9) LSA information.
show ip ospf process-id database opaque-link [link-state-id] [adv-router ip-address]

process-id

Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF process.

link-state-id

(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value
depends on the LSA type, and it can be one of the following:
• the network’s IP address for Type 3 LSAs or Type 5 LSAs
• the router’s OSPF router ID for Type 1 LSAs or Type 4 LSAs
• the default destination (0.0.0.0) for Type 5 LSAs

adv-router

(OPTIONAL) Enter the keyword adv-router followed by the IP address of
an Advertising Router to display only the LSA information about that router.

ip-address
Command Modes

EXEC
EXEC Privilege

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support of Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Open Shortest Path First (OSPFv2) | 1089

www.dell.com | support.dell.com

Related
Commands

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

show ip ospf database

Displays OSPF database information.

show ip ospf database router
ces
Syntax
Parameters

Display the router (type 1) LSA information.
show ip ospf process-id database router [link-state-id] [adv-router ip-address]

process-id

Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF process.

link-state-id

(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value
depends on the LSA type, and it can be one of the following:
• the network’s IP address for Type 3 LSAs or Type 5 LSAs
• the router’s OSPF router ID for Type 1 LSAs or Type 4 LSAs
• the default destination (0.0.0.0) for Type 5 LSAs

adv-router

(OPTIONAL) Enter the keywords adv-router ip-address to display only the
LSA information about that router.

ip-address
Command Modes

EXEC
EXEC Privilege

Command
History

Example

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support of Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

FTOS#show ip ospf 100 database router
OSPF Router with ID (1.1.1.10) (Process ID 100)
Router (Area 0)
LS age: 967
Options: (No TOS-capability, No DC, E)
LS type: Router
Link State ID: 1.1.1.10
Advertising Router: 1.1.1.10
LS Seq Number: 0x8000012f
Checksum: 0x3357
Length: 144
AS Boundary Router
Area Border Router
Number of Links: 10
Link connected to: a Transit Network
(Link ID) Designated Router address: 192.68.129.1

1090

|

Open Shortest Path First (OSPFv2)

(Link Data) Router Interface address: 192.68.129.1
Number of TOS metric: 0
TOS 0 Metric: 1
Link connected to: a Transit Network
(Link ID) Designated Router address: 192.68.130.1
(Link Data) Router Interface address: 192.68.130.1
Number of TOS metric: 0
TOS 0 Metric: 1
Link connected to: a Transit Network
(Link ID) Designated Router address: 192.68.142.2
(Link Data) Router Interface address: 192.68.142.2
Number of TOS metric: 0
TOS 0 Metric: 1
Link connected to: a Transit Network
(Link ID) Designated Router address: 192.68.141.2
(Link Data) Router Interface address: 192.68.141.2
Number of TOS metric: 0
TOS 0 Metric: 1
Link connected to: a Transit Network
(Link ID) Designated Router address: 192.68.140.2
(Link Data) Router Interface address: 192.68.140.2
Number of TOS metric: 0
TOS 0 Metric: 1
Link connected to: a Stub Network
(Link ID) Network/subnet number: 11.1.5.0
--More--

Table 37-8.
router

Command Example Descriptions: show ip ospf process-id database

Item

Description

LS Age

Displays the LSA age.

Options

Displays the optional capabilities available on router. The following
options can be found in this item:
• TOS-capability or No TOS-capability is displayed depending on
whether the router can support Type of Service.
• DC or No DC is displayed depending on whether the originating
router can support OSPF over demand circuits.
• E or No E is displayed on whether the originating router can accept
AS External LSAs.

LS Type

Displays the LSA type.

Link State ID

Displays the Link State ID.

Advertising Router

Identifies the router ID of the LSA’s originating router.

LS Seq Number

Displays the link state sequence number. This number detects duplicate
or old LSAs.

Checksum

Displays the Fletcher checksum of an LSA’s complete contents.

Length

Displays the length in bytes of the LSA.

Number of Links

Displays the number of active links to the type of router (Area Border
Router or AS Boundary Router) listed in the previous line.

Link connected to:

Identifies the type of network to which the router is connected.

Open Shortest Path First (OSPFv2) | 1091

www.dell.com | support.dell.com

Table 37-8.
router

Related
Commands

Command Example Descriptions: show ip ospf process-id database

Item

Description

(Link ID)

Identifies the link type and address.

(Link Data)

Identifies the router interface address.

Number of TOS Metric

Lists the number of TOS metrics.

TOS 0 Metric

Lists the number of TOS 0 metrics.

show ip ospf database

Displays OSPF database information.

show ip ospf database summary
ces
Syntax
Parameters

Display the network summary (type 3) LSA routing information.
show ip ospf process-id database summary [link-state-id] [adv-router ip-address]

process-id

Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF process.

link-state-id

(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value
depends on the LSA type, and it can be one of the following:
• the network’s IP address for Type 3 LSAs or Type 5 LSAs
• the router’s OSPF router ID for Type 1 LSAs or Type 4 LSAs
• the default destination (0.0.0.0) for Type 5 LSAs

adv-router

(OPTIONAL) Enter the keywords adv-router ip-address to display only the
LSA information about that router.

ip-address
Command Modes

EXEC
EXEC Privilege

Command
History

Example

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support of Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

FTOS#show ip ospf 100 database summary
OSPF Router with ID (1.1.1.10) (Process ID 100)
Summary Network (Area 0.0.0.0)
LS age: 1551
Options: (No TOS-capability, DC, E)
LS type: Summary Network
Link State ID: 192.68.16.0

1092

|

Open Shortest Path First (OSPFv2)

Advertising Router: 192.168.17.1
LS Seq Number: 0x80000054
Checksum: 0xb5a2
Length: 28
Network Mask: /24
TOS: 0 Metric: 1
LS age: 9
Options: (No TOS-capability, No DC, E)
LS type: Summary Network
Link State ID: 192.68.32.0
Advertising Router: 1.1.1.10
LS Seq Number: 0x80000016
Checksum: 0x987c
Length: 28
Network Mask: /24
TOS: 0 Metric: 1
LS age: 7
Options: (No TOS-capability, No DC, E)
LS type: Summary Network
Link State ID: 192.68.33.0
Advertising Router: 1.1.1.10
LS Seq Number: 0x80000016
Checksum: 0x1241
Length: 28
Network Mask: /26
TOS: 0 Metric: 1
FTOS#

Table 37-9.
summary

Command Example Descriptions: show ip ospf process-id database

Items

Description

LS Age

Displays the LSA age.

Options

Displays the optional capabilities available on router. The following options
can be found in this item:
• TOS-capability or No TOS-capability is displayed depending on whether
the router can support Type of Service.
• DC or No DC is displayed depending on whether the originating router can
support OSPF over demand circuits.
• E or No E is displayed on whether the originating router can accept AS
External LSAs.

LS Type

Displays the LSA’s type.

Link State ID

Displays the Link State ID.

Advertising Router

Identifies the router ID of the LSA’s originating router.

LS Seq Number

Identifies the link state sequence number. This number enables you to identify
old or duplicate LSAs.

Checksum

Displays the Fletcher checksum of an LSA’s complete contents.

Length

Displays the length in bytes of the LSA.

Network Mask

Displays the network mask implemented on the area.

TOS

Displays the TOS options. Option 0 is the only option.

Metric

Displays the LSA metrics.

Open Shortest Path First (OSPFv2) | 1093

www.dell.com | support.dell.com

Related
Commands

show ip ospf database

Displays OSPF database information.

show ip ospf interface
ces
Syntax
Parameters

Command Modes

Display the OSPF interfaces configured. If OSPF is not enabled on the switch, no output is
generated.
show ip ospf process-id interface [interface]

process-id

Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF process.

interface

(OPTIONAL) Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For the null interface, enter the keyword null followed by zero (0).
• For loopback interfaces, enter the keyword loopback followed by a number
from 0 to 16383.
• For Port Channel groups, enter the keyword port-channel followed by a
number:
C-Series and S-Series Range: 1-128
E-Series Range: 1-255 for TeraScale
• For a SONET interface, enter the keyword sonet followed by the slot/port
information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by the VLAN ID. The range is
from 1 to 4094.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed
by the slot/port information.

EXEC
EXEC Privilege

Command
History

Example

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced process-id option, in support of Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

FTOS>show ip ospf int
GigabitEthernet 13/17 is up, line protocol is up
Internet Address 192.168.1.2/30, Area 0.0.0.1
Process ID 1, Router ID 192.168.253.2, Network Type BROADCAST, Cost: 1
Transmit Delay is 1 sec, State DR, Priority 1
Designated Router (ID) 192.168.253.2, Interface address 192.168.1.2
Backup Designated Router (ID) 192.168.253.1, Interface address 192.168.1.1
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
Hello due in 00:00:02
Neighbor Count is 1, Adjacent neighbor count is 1

1094

|

Open Shortest Path First (OSPFv2)

Adjacent with neighbor 192.168.253.1 (Backup Designated Router)
GigabitEthernet 13/23 is up, line protocol is up
Internet Address 192.168.0.1/24, Area 0.0.0.1
Process ID 1, Router ID 192.168.253.2, Network Type BROADCAST, Cost: 1
Transmit Delay is 1 sec, State DROTHER, Priority 1
Designated Router (ID) 192.168.253.5, Interface address 192.168.0.4
Backup Designated Router (ID) 192.168.253.3, Interface address 192.168.0.2
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
Hello due in 00:00:08
Neighbor Count is 3, Adjacent neighbor count is 2
Adjacent with neighbor 192.168.253.5 (Designated Router)
Adjacent with neighbor 192.168.253.3 (Backup Designated Router)
Loopback 0 is up, line protocol is up
Internet Address 192.168.253.2/32, Area 0.0.0.1
Process ID 1, Router ID 192.168.253.2, Network Type LOOPBACK, Cost: 1
Loopback interface is treated as a stub Host.
FTOS>

Table 37-10.
interface

Command Example Descriptions: show ip ospf process-id

Line beginning with

Description

GigabitEthernet...

This line identifies the interface type slot/port and the status of the OSPF
protocol on that interface.

Internet Address...

This line displays the IP address, network mask and area assigned to this
interface.

Process ID...

This line displays the OSPF Process ID, Router ID, Network type and
cost metric for this interface.

Transmit Delay...

This line displays the interface’s settings for Transmit Delay, State, and
Priority. In the State setting, BDR is Backup Designated Router.

Designated Router...

This line displays the ID of the Designated Router and its interface
address.

Backup Designated...

This line displays the ID of the Backup Designated Router and its
interface address.

Timer intervals...

This line displays the interface’s timer settings for Hello interval, Dead
interval, Transmit Delay (Wait), and Retransmit Interval.

Hello due...

This line displays the amount time till the next Hello packet is sent out
this interface.

Neighbor Count...

This line displays the number of neighbors and adjacent neighbors. Listed
below this line are the details about each adjacent neighbor.

show ip ospf neighbor
ces
Syntax

Display the OSPF neighbors connected to the local router.
show ip ospf process-id neighbor

Open Shortest Path First (OSPFv2) | 1095

www.dell.com | support.dell.com

Parameters

Command Modes
Command
History

process-id

Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF process.

EXEC Privilege
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support of Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

Example

FTOS#show ip ospf 34 neighbor
Neighbor ID
20.20.20.7
192.10.10.2
20.20.20.1
FTOS#

Table 37-11.
neighbor

Pri
1
1
1

State
Dead Time
FULL/DR
00:00:32
FULL/DR
00:00:37
FULL/DROTHER00:00:36

Address
182.10.10.3
192.10.10.2
192.10.10.4

Interface Area
Gi 0/0
0.0.0.2
Gi 0/1
0.0.0.1
Gi 0/1
0.0.0.1

Command Example Descriptions: show ip ospf process-id

Row Heading

Description

Neighbor ID

Displays the neighbor router ID.

Pri

Displays the priority assigned neighbor.

State

Displays the OSPF state of the neighbor.

Dead Time

Displays the expected time until FTOS declares the neighbor dead.

Address

Displays the IP address of the neighbor.

Interface

Displays the interface type slot/port information.

Area

Displays the neighbor’s area (process ID).

show ip ospf routes
ces
Syntax
Parameters

Defaults
Command Modes

Display routes as calculated by OSPF and stored in OSPF RIB.
show ip ospf process-id routes

process-id

No default values or behavior
EXEC
EXEC Privilege

1096

|

Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF process.

Open Shortest Path First (OSPFv2)

Command
History

Usage
Information

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support of Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series and E-Series

This command is useful in isolating routing problems between OSPF and RTM. For example,
if a route is missing from the RTM/FIB but is visible from the display output of this
command, then likely the problem is with downloading the route to the RTM.
This command has the following limitations:
•
•

Example

The display output is sorted by prefixes; intra-area ECMP routes are not
displayed together.
For Type 2 external routes, type1 cost is not displayed.

FTOS#show ip ospf 100 route
Prefix
1.1.1.1
3.3.3.3
13.0.0.0
150.150.150.0
172.30.1.0
FTOS#

Cost
1
2
1
2
2

Nexthop
0.0.0.0
13.0.0.3
0.0.0.0
13.0.0.3
13.0.0.3

Interface
Lo 0
Gi 0/47
Gi 0/47
Gi 0/47
Gi 0/47

Area
0
1
0
1

Type
Intra-Area
Intra-Area
Intra-Area
External
Intra-Area

show ip ospf statistics
ces
Syntax
Parameters

Display OSPF statistics.
show ip ospf process-id statistics global | [interface name {neighbor router-id}]

process-id

Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF
process.

global

Enter the keyword global to display the packet counts received on all
running OSPF interfaces and packet counts received and transmitted by
all OSPF neighbors.

Open Shortest Path First (OSPFv2) | 1097

www.dell.com | support.dell.com

Defaults
Command Modes

interface name

(OPTIONAL) Enter the keyword interface followed by one of the
following interface keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For Port Channel groups, enter the keyword port-channel followed
by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1-255 for TeraScale
• For a SONET interface, enter the keyword sonet followed by the
slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to
4094.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.

neighbor router-id

(OPTIONAL) Enter the keyword neighbor followed by the neighbor’s
router-id in dotted decimal format (A.B.C.D.).

No default behavior or values
EXEC
EXEC Privilege

Command
History

Example

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support of Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced on E-Series

FTOS#show ip ospf 1 statistics global
OSPF Packet Count
Total
Error
RX
10
0
TX
10
0

Hello
8
10

OSPF Global Queue Length
TxQ-Len
Hello-Q
0
LSR-Q
0
Other-Q
0

DDiscr
2
0

RxQ-Len
0
0
0

LSReq
0
0

Tx-Mark
0
0
0

LSUpd
0
0

LSAck
0
0

Rx-Mark
2
0
0

Error packets (Only for RX)
Intf-Down
Wrong-Len
Auth-Err
Version
No-Buffer
Q-OverFlow

0
0
0
0
0
0

Non-Dr
Invld-Nbr
MD5-Err
AreaMis
Seq-No
Unkown-Pkt

Error packets (Only for TX)

1098

|

Open Shortest Path First (OSPFv2)

0
0
0
0
0
0

Self-Org
Nbr-State
Chksum
Conf-Issues
Socket

0
0
0
0
0

Socket Errors
FTOS#

0

Table 37-12. Command Example Descriptions: show ip ospf statistics
process-id global
Row Heading Description
Total

Displays the total number of packets received/transmitted by the OSPF process

Error

Displays the error count while receiving and transmitting packets by the OSPF
process

Hello

Number of OSPF Hello packets

DDiscr

Number of database description packets

LSReq

Number of link state request packets

LSUpd

Number of link state update packets

LSAck

Number of link state acknowledgement packets

TxQ-Len

The transmission queue length

RxQ-Len

The reception queue length

Tx-Mark

The highest number mark in the transmission queue

Rx-Mark

The highest number mark in the reception queue

Hello-Q

The queue, for transmission or reception, for the hello packets

LSR-Q

The queue, for transmission or reception, for the link state request packets.

Other-Q

The queue, for transmission or reception, for the link state acknowledgement,
database description, and update packets.

Table 37-13.

Error Definitions: show ip ospf statistics process-id global

Error Type

Description

Intf_Down

Received packets on an interface that is either down or OSPF is not enabled.

Non-Dr

Received packets with a destination address of ALL_DRS even though SELF is
not a designated router

Self-Org

Receive the self originated packet

Wrong_Len

The received packet length is different to what was indicated in the OSPF header

Invld-Nbr

LSA, LSR, LSU, and DDB are received from a peer which is not a neighbor peer

Nbr-State

LSA, LSR, and LSU are received from a neighbor with stats less than the loading
state

Auth-Error

Simple authentication error

MD5-Error

MD5 error

Cksum-Err

Checksum Error

Version

Version mismatch

AreaMismatch

Area mismatch

Conf-Issue

The received hello packet has a different hello or dead interval than the
configuration

Open Shortest Path First (OSPFv2) | 1099

www.dell.com | support.dell.com

Table 37-13.

Error Definitions: show ip ospf statistics process-id global

Error Type

Description

No-Buffer

Buffer allocation failure

Seq-no

A sequence no errors occurred during the database exchange process

Socket

Socket Read/Write operation error

Q-overflow

Packet(s) dropped due to queue overflow

Unknown-Pkt

Received packet is not an OSPF packet

The show ip ospf process-id statistics command displays the error packet count received on
each interface as:
•
•
•
•
•
•
•
•
Example

The hello-timer remaining value for each interface
The wait-timer remaining value for each interface
The grace-timer remaining value for each interface
The packet count received and transmitted for each neighbor
Dead timer remaining value for each neighbor
Transmit timer remaining value for each neighbor
The LSU Q length and its highest mark for each neighbor
The LSR Q length and its highest mark for each neighbor

FTOS#show ip ospf 100 statistics
Interface GigabitEthernet 0/8
Hello-Timer 9, Wait-Timer 0, Grace-Timer 0
Error packets (Only for RX)
Intf-Down
Wrong-Len
Auth-Error
Version
SeqNo-Err

0
0
0
0
0

Non-Dr
Invld-Nbr
MD5-Error
AreaMisMatch
Unkown-Pkt

0
0
0
0
0

Self-Org
Nbr-State
Cksum-Err
Conf-Issue

0
0
0
0

Neighbor ID 9.1.1.2

RX
TX

Hello
59
62

Dead-Timer
LSU-Q-Len
LSR-Q-Len

Related
Commands

1100

|

clear ip ospf statistics

Open Shortest Path First (OSPFv2)

DDiscr
3
2

LSReq
1
1

37, Transmit-Timer
0, LSU-Q-Wmark
0, LSR-Q-Wmark

LSUpd
1
0

LSAck
1
0
0
0
1

Clear the packet statistics in all interfaces and neighbors

show ip ospf timers rate-limit
Show the LSA currently in the queue waiting for timers to expire.

Syntax
Parameters

Defaults
Command Modes

show ip ospf process-id timers rate-limit

process-id

Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF
process.

No default values or behavior
EXEC
EXEC Privilege

Command
History

Version 8.3.8.0

Example

Introduced on S4810

FTOS#show ip ospf 10 timers rate-limit
List of LSAs in rate limit Queue
LSA id: 1.1.1.0 Type: 3 Adv Rtid: 3.3.3.3 Expiry time: 00:00:09.111
LSA id: 3.3.3.3 Type: 1 Adv Rtid: 3.3.3.3 Expiry time: 00:00:23.96
FTOS#

show ip ospf topology
ces
Syntax
Parameters

Defaults
Command Modes

Display routers in directly connected areas.
show ip ospf process-id topology

process-id

Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF
process.

No default values or behavior
EXEC
EXEC Privilege

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support of Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series and E-Series

Open Shortest Path First (OSPFv2) | 1101

www.dell.com | support.dell.com

Usage
Information

This command can be used to isolate problems with inter-area and external routes. In OSPF
inter-area and external routes are calculated by adding LSA cost to the cost of reaching the
router. If an inter-area or external route is not of correct cost, the display can determine if the
path to the originating router is correct or not.

Example

FTOS#show ip ospf 1 topology
Router ID
3.3.3.3
1.1.1.1
FTOS#

Flags
E/B/-/
E/-/-/

Cost
1
1

Nexthop
20.0.0.3
10.0.0.1

Interface
Gi 13/1
Gi 7/1

Area
0
1

show ip ospf virtual-links
ces
Syntax
Parameters

Command Modes

Display the OSPF virtual links configured and is useful for debugging OSPF routing
operations. If no OSPF virtual-links are enabled on the switch, no output is generated.
show ip ospf process-id virtual-links

process-id

Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF
process.

EXEC
EXEC Privilege

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support of Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

Example

FTOS#show ip ospf 1 virt
Virtual Link to router 192.168.253.5 is up
Run as demand circuit
Transit area 0.0.0.1, via interface GigabitEthernet 13/16, Cost of using 2
Transmit Delay is 1 sec, State POINT_TO_POINT,
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
Hello due in 00:00:02
FTOS#

Table 37-14.
virtual-links

1102

|

Command Example Descriptions: show ip ospf process-id

Items

Description

“Virtual Link...”

This line specifies the OSPF neighbor to which the virtual link was
created and the link’s status.

“Run as...”

This line states the nature of the virtual link.

Open Shortest Path First (OSPFv2)

Table 37-14.
virtual-links

Command Example Descriptions: show ip ospf process-id

Items

Description

“Transit area...”

This line identifies the area through which the virtual link was
created, the interface used, and the cost assigned to that link.

“Transmit Delay...”

This line displays the transmit delay assigned to the link and the
State of the OSPF neighbor.

“Timer intervals...”

This line displays the timer values assigned to the virtual link. The
timers are Hello is hello-interval, Dead is dead-interval, Wait is
transmit-delay, and Retransmit is retransmit-interval.

“Hello due...”

This line displays the amount of time until the next Hello packet is
expected from the neighbor router.

“Adjacency State...”

This line displays the adjacency state between neighbors.

summary-address
ces
Syntax

Set the OSPF ASBR to advertise one external route.
summary-address ip-address mask [not-advertise] [tag tag-value]

To disable summary address, use the no summary-address ip-address mask command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

ip-address

Specify the IP address in dotted decimal format of the address to be
summarized.

mask

Specify the mask in dotted decimal format of the address to be summarized.

not-advertise

(OPTIONAL) Enter the keyword not-advertise to suppress that match the
network prefix/mask pair.

tag tag-value

(OPTIONAL) Enter the keyword tag followed by a value to match on routes
redistributed through a route map.
Range: 0 to 4294967295

Not configured.
ROUTER OSPF
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support of Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

The command area range summarizes routes for the different areas.

Open Shortest Path First (OSPFv2) | 1103

www.dell.com | support.dell.com

With "not-advertise" parameter configured, this command can be used to filter out some
external routes. For example, you want to redistribute static routes to OSPF, but you don't
want OSPF to advertise routes with prefix 1.1.0.0. Then you can configure
summary-address 1.1.0.0 255.255.0.0 not-advertise to filter out all the
routes fall in range 1.1.0.0/16.
Related
Commands

area range

Summarizes routes within an area.

timers spf
ces
Syntax

Set the time interval between when the switch receives a topology change and starts a shortest
path first (SPF) calculation.
timers spf delay holdtime

To return to the default, enter no timers spf.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

delay

Enter a number as the delay.
Range: 0 to 4294967295.
Default: 5 seconds

holdtime

Enter a number as the hold time.
Range: 0 to 4294967295.
Default: 10 seconds.

delay

= 5 seconds; holdtime = 10 seconds

ROUTER OSPF
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced support of Multi-Process OSPF.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1

Introduced on E-Series

Setting the delay and holdtime parameters to a low number enables the switch to switch to an
alternate path quickly but requires more CPU usage.

timers throttle lsa all
Configure LSA transmit intervals.

Syntax

timers throttle lsa all {start-interval | hold-interval | max-interval}

To return to the default, enter no timers throttle lsa.

1104

|

Open Shortest Path First (OSPFv2)

Parameters

Defaults

Command Modes
Command
History
Usage
Information

start-interval

Set the minimum interval between initial sending and resending the same
LSA.
Range: 0-600,000 milliseconds

hold-interval

Set the next interval to send the same LSA. This is the time between sending
the same LSA after the start-interval has been attempted.
Range: 1-600,000 milliseconds

max-interval

Set the maximum amount of time the system waits before sending the LSA.
Range: 1-600,000 milliseconds

start-interval : 0 msec
hold-interval : 5000 msec
max-interval: 5000 msec
ROUTER OSPF
Version 8.3.8.0

Introduced on S4810

LSAs are sent after the start-interval and then after hold-interval until the maximum interval
is reached. In throttling, exponential backoff is used when sending same LSA, so that the
interval is multiplied until the maximum time is reached. For example, if the start-interval
5000 and hold-interval 1000 and max-interval 100,000, the LSA is sent at 5000 msec, then 1000
msec, then 2000 msec, them 4000 until 100,000 msec is reached.

timers throttle lsa arrival
Configure the LSA acceptance intervals.

Syntax

timers throttle lsa arrival arrival-time

To return to the default, enter no timers throttle lsa.
Parameters

Defaults
Command Modes
Command
History

arrival-time

Set the interval between receiving the same LSA repeatedly, to allow
sufficient time for the system to accept the LSA.
Range: 0-600,000 milliseconds

1000 msec
ROUTER OSPF
Version 8.3.8.0

Introduced on S4810

Open Shortest Path First (OSPFv2) | 1105

www.dell.com | support.dell.com
1106

|

Open Shortest Path First (OSPFv2)

38
PIM-Sparse Mode (PIM-SM)
Overview
The PIM commands are supported by FTOS on all Dell Force10 platforms, as indicated by
the characters that appear under each of the command headings: e E-Series, c C-Series,
s S-Series, or
.
This chapter contains the following sections:
•
•

IPv4 PIM-Sparse Mode Commands
IPv6 PIM-Sparse Mode Commands

IPv4 PIM-Sparse Mode Commands
The IPv4 PIM-Sparse Mode (PIM-SM) commands are:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

clear ip pim rp-mapping
clear ip pim tib
clear ip pim snooping tib
debug ip pim
ip pim bsr-border
ip pim bsr-candidate
ip pim dr-priority
ip pim graceful-restart
ip pim join-filter
ip pim ingress-interface-map
ip pim neighbor-filter
ip pim query-interval
ip pim register-filter
ip pim rp-address
ip pim rp-candidate
ip pim snooping
ip pim sparse-mode
ip pim sparse-mode sg-expiry-timer

PIM-Sparse Mode (PIM-SM) | 1107

www.dell.com | support.dell.com

•
•
•
•
•
•
•
•
•
•
•
•

ip pim spt-threshold
no ip pim snooping dr-flood
show ip pim bsr-router
show ip pim interface
show ip pim neighbor
show ip pim rp
show ip pim snooping interface
show ip pim snooping neighbor
show ip pim snooping tib
show ip pim summary
show ip pim tib
show running-config pim

clear ip pim rp-mapping
ces

Syntax
Parameters

Command Modes
Command
History

Used by the bootstrap router (BSR) to remove all or particular Rendezvous Point (RP)
Advertisement.
clear ip pim rp-mapping rp-address
rp-address

(OPTIONAL) Enter the RP address in dotted decimal format (A.B.C.D)

EXEC Privilege
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Introduced on S-Series

clear ip pim tib
ces

Syntax
Parameters

Command Modes
Command
History

1108

|

Clear PIM tree information from the PIM database.

clear ip pim tib [group]
group

(OPTIONAL) Enter the multicast group address in dotted decimal format
(A.B.C.D)

EXEC Privilege
Version 8.3.7.0

PIM-Sparse Mode (PIM-SM)

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Introduced on S-Series

clear ip pim snooping tib
ces

Syntax
Parameters

Command Modes
Command
History

Related
Commands

Clear tree information discovered by PIM-SM snooping from the PIM database.

clear ip pim snooping tib [vlan vlan-id] [group-address]
vlan vlan-id

(OPTIONAL) Enter a VLAN ID to clear TIB information learned through
PIM-SM snooping about a specified VLAN. Valid VLAN IDs: 1 to 4094.

group-address

(OPTIONAL) Enter a multicast group address in dotted decimal format
(A.B.C.D) to clear TIB information learned through PIM-SM snooping
about a specified multicast group.

EXEC Privilege
Version 8.4.1.1

Introduced on E-Series ExaScale

Version 8.3.7.0

Introduced on S4810

show ip pim snooping tib

Display TIB information learned through PIM-SM snooping.

debug ip pim
ces

Syntax

View IP PIM debugging messages.

debug ip pim [bsr | events | group | packet [in | out] | register | state | timer [assert | hello | joinprune
register]]

|

To disable PIM debugging, enter no debug ip pim, or enter undebug all to disable all debugging.
Parameters

bsr

(OPTIONAL) Enter the keyword bsr to view PIM Candidate RP/BSR
activities.

events

(OPTIONAL) Enter the keyword events to view PIM events.

group

(OPTIONAL) Enter the keyword group to view PIM messages for a
specific group.

packet [in | out]

(OPTIONAL) Enter the keyword packet to view PIM packets. Enter one
of the optional parameters
• in: to view incoming packets
• out: to view outgoing packets.

register

(OPTIONAL) Enter the keyword register to view PIM register address
in dotted decimal format (A.B.C.D).

PIM-Sparse Mode (PIM-SM) | 1109

www.dell.com | support.dell.com

Defaults

state

(OPTIONAL) Enter the keyword state to view PIM state changes.

timer [assert | hello |
joinprune | register]

(OPTIONAL) Enter the keyword timer to view PIM timers. Enter one of
the optional parameters:
• assert: to view the assertion timer.
• hello: to view the PIM neighbor keepalive timer.
• joinprune: to view the expiry timer (join/prune timer)
• register: to view the register suppression timer.

Disabled

Command Modes

EXEC Privilege

Command
History

Version 8.3.12.0

Introduced on the S4810.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Introduced on S-Series

ip pim bsr-border
ces

Syntax

Define the border of PIM domain by filtering inbound and outbound PIM-BSR messages per
interface.
ip pim bsr-border

To return to the default value, enter no ip pim bsr-border.
Defaults
Command Modes
Command
History

Usage
Information

Disabled
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Introduced on C-Series on port-channels and S-Series.

This command is applied to the subsequent PIM-BSR. Existing BSR advertisements are
cleaned up by time out. Candidate RP advertisements can be cleaned using the clear ip pim
rp-mapping command.

ip pim bsr-candidate
ces

Syntax

Configure the PIM router to join the Bootstrap election process.

ip pim bsr-candidate interface [hash-mask-length] [priority]

To return to the default value, enter no ip pim bsr-candidate.

1110

|

PIM-Sparse Mode (PIM-SM)

Parameters

Defaults
Command Modes
Command
History

interface

Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Loopback interface, enter the keyword loopback followed by a
number from 0 to 16383.
• For a Port Channel interface, enter the keyword port-channel followed
by a number:
C-Series and S-Series Range: 1 to 128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a SONET interface, enter the keyword sonet followed by the slot/
port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to
4094.

hash-mask-length

(OPTIONAL) Enter the hash mask length.
Range: zero (0) to 32
Default: 30

priority

(OPTIONAL) Enter the priority used in Bootstrap election process.
Range: zero (0) to 255
Default: zero (0)

Not configured.
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 6.1.1.0

Added support for VLAN interface

ip pim dr-priority
ces

Syntax

Change the Designated Router (DR) priority for the interface.

ip pim dr-priority priority-value

To remove the DR priority value assigned, use the no ip pim dr-priority command.
Parameters

Defaults
Command Modes

priority-value

Enter a number. Preference is given to larger/higher number.
Range: 0 to 4294967294
Default: 1

1
INTERFACE

PIM-Sparse Mode (PIM-SM) | 1111

www.dell.com | support.dell.com

Command
History

Usage
Information

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Introduced on C-Series on port-channels and S-Series

The router with the largest value assigned to an interface becomes the Designated Router. If
two interfaces contain the same DR priority value, the interface with the largest interface IP
address becomes the Designated Router.

ip pim graceful-restart
e
Syntax
Parameters

This feature permits configuration of Non-stop Forwarding (NFS or graceful restart)
capability of a PIM router to its neighbors.
[ipv6] ip pim graceful-restart {helper-only | nsf [restart-time | stale-entry-time]}
ipv6

Enter this keyword to enable graceful-restart for IPv6 Multicast Routes.

helper-only

Enter the keyword helper-only to configure as a receiver (helper) only by
preserving the PIM status of a graceful restart PIM neighboring router.

nsf

Defaults
Command Modes
Command
History

Usage
Information

Enter the keyword nfs to configure the Non-stop Forwarding capability.

restart-time

(OPTIONAL) Enter the keyword restart-time followed by the number of
seconds estimated for the PIM speaker to restart.
Range: 30 to 300 seconds
Default: 180 seconds

stale-entry-time

(OPTIONAL) Enter the keyword stale-entry-time followed by the
number of seconds for which entries are kept alive after restart.
Range: 30 to 300 seconds
Default: 60 seconds

as above
CONFIGURATION
Version 8.2.1.0

Introduced on E-Series ExaScale. Added the ipv6 option for E-Series.

Version 7.6.1.0

Introduced on E-Series

When an NSF-capable router comes up, it announces the graceful restart capability and restart
duration as a Hello option. The receiving router notes the Hello option. Routers not NSF
capable will discard the unknown Hello option and adjacency is not affected.
When an NSF-capable router goes down, neighboring PIM speaker preserves the states and
continues the forwarding of multicast traffic while the neighbor router restarts.

1112

|

PIM-Sparse Mode (PIM-SM)

ip pim join-filter
ces

Syntax

Permit or deny PIM Join/Prune messages on an interface using an extended IP access list.
This command prevents the PIM SM router from creating state based on multicast source
and/or group.
ip pim join-filter ext-access-list {in | out}

Remove the access list using the command no ip pim join-filter ext-access-list {in | out}
Parameters

Defaults
Command Modes
Command
History

ext-access-list

Enter the name of an extended access list.

in

Enter this keyword to apply the access list to inbound traffic.

out

Enter this keyword to apply the access list to outbound traffic.

None
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Introduced on C-Series on port-channels and S-Series

Version 7.7.1.0

Introduced on E-Series.

Example

Related
Commands

FTOS(conf)# ip access-list extended iptv-channels
FTOS(config-ext-nacl)# permit ip 10.1.2.3/24 225.1.1.0/24
FTOS(config-ext-nacl)# permit ip any 232.1.1.0/24
FTOS(config-ext-nacl)# permit ip 100.1.1.0/16 any
FTOS(config-if-gi-1/1)# ip pim join-filter iptv-channels in
FTOS(config-if-gi-1/1)# ip pim join-filter iptv-channels out

ip access-list
extended

Configure an access list based on IP addresses or protocols.

ip pim ingress-interface-map
ces

Syntax
Parameters

Defaults
Command Modes

When the Dell Force10 system is the RP, statically map potential incoming interfaces to (*,G)
entries to create a lossless multicast forwarding environment.
ip pim ingress-interface-map std-access-list

std-access-list

Enter the name of an standard access list that permits the

None
INTERFACE

PIM-Sparse Mode (PIM-SM) | 1113

www.dell.com | support.dell.com

Command
History

Example

Version 8.3.12.0

Introduced on the S4810.

Version 8.4.1.0

Introduced

FTOS(conf)# ip access-list standard map1
FTOS(config-std-nacl)# permit 224.0.0.1/24
FTOS(config-std-nacl)#exit
FTOS(conf)#int gig 1/1
FTOS(config-if-gi-1/1)# ip pim ingress-interface-map map1

ip pim neighbor-filter
ces

Syntax

Configure this feature to prevent a router from participating in protocol independent
Multicast (PIM).
ip pim neighbor-filter {access-list}

To remove the restriction, use the no ip pim neighbor-filter {access-list} command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

access-list

Enter the name of a standard access list. Maximum 16 characters.

Defaults.
CONFIGURATION.
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Introduced on C-Series and S-Series

Version 7.6.1.0

Introduced on the E-Series

Do not enter this command before creating the access-list.

ip pim query-interval
ces

Syntax

Change the frequency of PIM Router-Query messages.

ip pim query-interval seconds

To return to the default value, enter no ip pim query-interval seconds command.
Parameters

Defaults

1114

|

seconds

30 seconds

PIM-Sparse Mode (PIM-SM)

Enter a number as the number of seconds between router query messages.
Default: 30 seconds
Range: 0 to 65535

Command Modes
Command
History

INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Introduced on C-Series on port-channels and S-Series

ip pim register-filter
ces

Syntax

Use this feature to prevent a PIM source DR from sending register packets to an RP for the
specified multicast source and group.
ip pim register-filter access-list

To return to the default, use the no ip pim register-filter access-list command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

access-list

Enter the name of an extended access list. Maximum 16 characters.

Not configured
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on C-Series and S-Series

Version 7.6.1.0

Introduced

The access name is an extended IP access list that denies PIM register packets to RP at the
source DR based on the multicast and group addresses. Do not enter this command before
creating the access-list.

ip pim rp-address
ces

Syntax

Configure a static PIM Rendezvous Point (RP) address for a group or access-list.

ip pim rp-address address {group-address group-address mask} override

To remove an RP address, use the no ip pim rp-address address {group-address group-address
mask} override command.
Parameters

address

Enter the RP address in dotted decimal format (A.B.C.D).

PIM-Sparse Mode (PIM-SM) | 1115

www.dell.com | support.dell.com

Defaults
Command Modes
Command
History

Usage
Information

group-address
group-address mask

Enter the keyword group-address followed by a group-address mask,
in dotted decimal format (/xx), to assign that group address to the RP.

override

Enter the keyword override to override the BSR updates with static
RP. The override will take effect immediately during enable/disable.
Note: This option is applicable to multicast group range.

Not configured
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Introduced on S-Series

pre-Version 6.1.1.1

Introduced on E-Series

This address is used by first-hop routers to send Register packets on behalf of source
multicast hosts. The RP addresses are stored in the order in which they are entered. RP
addresses learned via BSR take priority over static RP addresses. Without the override option,
RPs advertised by the BSR updates take precedence over the statically configured RPs.

ip pim rp-candidate
ces

Syntax

Configure a PIM router to send out a Candidate-RP-Advertisement message to the Bootstrap
(BS) router or define group prefixes that are defined with the RP address to PIM BSR.
ip pim rp-candidate {interface [priority]

To return to the default value, enter no ip pim rp-candidate {interface [priority] command.
Parameters

1116

|

interface

Enter the following keywords and slot/port or number information:
• For a Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Loopback interface, enter the keyword loopback followed
by a number from 0 to 16383.
• For a Port Channel interface, enter the keyword port-channel
followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for
ExaScale.
• For a SONET interface, enter the keyword sonet followed by the
slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from
1 to 4094.

priority

(OPTIONAL) Enter the priority used in Bootstrap election process.
Range: zero (0) to 255
Default: 192

PIM-Sparse Mode (PIM-SM)

Defaults
Command Modes
Command
History

Usage
Information

Not configured.
CONFIGURATION
Version 8.3.7.0

Introduced on S4810 Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Introduced on S-Series

pre-Version 6.1.1.1

Introduced on E-Series

Priority is stored at BSR router when receiving a Candidate-RP-Advertisement.

ip pim snooping
Enable PIM-SM snooping globally on a switch or on a VLAN interface.

ex
Syntax

ip pim snooping [enable]

To disable PIM-SM snooping enter the no form of the command.
Defaults
Command Modes

Disabled.
CONFIGURATION: To configure PIM-SM snooping globally, enter the ip pim snooping enable
command in global configuration mode.
VLAN INTERFACE: To configure PIM-SM snooping on a VLAN interface, enter the ip pim
snooping command in VLAN interface configuration mode.

Command
History

Usage
Information

Version 8.3.12.0

Introduced on the S4810.

Version 8.4.1.1

Introduced on E-Series ExaScale

Because PIM-SM snooping is used in a Layer 2 environment, PIM-SM snooping and PIM
multicast routing are mutually exclusive. PIM-SM snooping cannot be enabled on a switch/
router if PIM-SM or PIM-DM is enabled.
If enabled at the global level, PIM-SM snooping is automatically enabled on all VLANs
unless the no ip pim snooping command has been entered on a VLAN.
If enabled at the VLAN level, PIM-SM snooping requires that you also enter the no
shutdown command to enable the interface.
PIM-SM snooping is supported with IGMP snooping, and forwards the IGMP report on the
port that connects to the PIM DR. It is recommended that you do not enable IGMP snooping
on a PIM-SM snooping-enabled VLAN interface unless until it is necessary for VLAN
operation.

PIM-Sparse Mode (PIM-SM) | 1117

www.dell.com | support.dell.com

PIM-SM snooping listens to PIM hello and PIM-SM join and prune messages while
maintaining the VLAN- and port-specific information in multicast packets that are snooped.
To display information about the operation of PIM-SM snooping on a switch, enter the show ip
pim summary command.
Related
Commands

show ip pim snooping tib

Display TIB information learned through PIM-SM snooping.

ip pim sparse-mode
ces

Syntax

Enable PIM sparse mode and IGMP on the interface.

ip pim sparse-mode

To disable PIM sparse mode and IGMP, enter no ip pim sparse-mode.
Defaults
Command Modes
Command
History

Usage
Information

Disabled.
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Introduced on C-Series on port-channels and S-Series

C-Series supports a maximum of 31 PIM interfaces.
The interface must be enabled (no shutdown command) and not have the switchport command
configured. Multicast must also be enabled globally (using the ip multicast-lag-hashing
command). PIM is supported on the port-channel interface.

Related
Commands

ip multicast-lag-hashing

Enable multicast globally.

ip pim sparse-mode sg-expiry-timer
ces

Syntax

Enable expiry timers globally for all sources, or for a specific set of (S,G) pairs defined by an
access list.
ip pim sparse-mode sg-expiry-timer seconds [access-list name]

To disable configured timers and return to default mode, enter no ip pim sparse-mode
sg-expiry-timer.

1118

|

PIM-Sparse Mode (PIM-SM)

Parameters

Defaults
Command Modes
Command
History

Usage
Information

seconds

Enter the number of seconds the S, G entries will be retained.
Range 211-86400

access-list name

(OPTIONAL) Enter the name of a previously configured Extended ACL to
enable the expiry time to specified S,G entries

Disabled. The default expiry timer (with no times configured) is 210 sec.
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Introduced

Version 7.7.1.1

Introduced

This command configures an expiration timer for all S.G entries, unless they are assigned to
an Extended ACL.

ip pim spt-threshold
Configure PIM router to switch to shortest path tree when the traffic reaches the specified
threshold value.

ce
Syntax

ip pim spt-threshold value | infinity

To return to the default value, enter no ip pim spt-threshold.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

value

(OPTIONAL) Enter the traffic value in kilobits per second.
Default: 10 packets per second. A value of zero (0) will cause a switchover on
the first packet.

infinity

(OPTIONAL) To never switch to the source-tree, enter the keyword infinity.

Not configured.
CONFIGURATION
Version 8.3.12.0

Introduced on the S4810.

Version 8.1.1.0

Introduced on E-Series ExaScale

This is applicable to last hop routers on the shared tree towards the Rendezvous Point (RP).

no ip pim snooping dr-flood
ex

Disable the flooding of multicast packets to the PIM designated router.

PIM-Sparse Mode (PIM-SM) | 1119

www.dell.com | support.dell.com

Syntax

no ip pim snooping dr-flood

To re-enable the flooding of multicast packets to the PIM designated router, enter the ip pim
snooping dr-flood command.
Defaults
Command Modes
Command
History

Usage
Information

Enabled.
CONFIGURATION
Version 8.3.12.0

Introduced on the S4810.

Version 8.4.1.1

Introduced on E-Series ExaScale

By default, when you enable PIM-SM snooping, a switch floods all multicast traffic to the
PIM designated router (DR), including unnecessary multicast packets. To minimize the traffic
sent over the network to the designated router, you can disable designated-router flooding.
When designated-router flooding is disabled, PIM-SM snooping only forwards the multicast
traffic, which belongs to a multicast group for which the switch receives a join request, on the
port connected towards the designated router.
If the PIM DR flood is not disabled (default setting):
•
•

Related
Commands

Multicast traffic is transmitted on the egress port towards the PIM DR if the port
is not the incoming interface.
Multicast traffic for an unknown group is sent on the port towards the PIM DR.
When DR flooding is disabled, multicast traffic for an unknown group is
dropped.

ip pim snooping

Enable PIM-SM snooping.

show ip pim bsr-router
ces

Syntax
Command Modes

View information on the Bootstrap router.

show ip pim bsr-router

EXEC
EXEC Privilege

Command
History

Example

1120

|

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Introduced on S-Series

E600-7-rpm0#show ip pim bsr-router
PIMv2 Bootstrap information

PIM-Sparse Mode (PIM-SM)

This system is the Bootstrap Router (v2)
BSR address: 7.7.7.7 (?)
Uptime: 16:59:06, BSR Priority: 0, Hash mask length: 30
Next bootstrap message in 00:00:08
This system is a candidate BSR
Candidate BSR address: 7.7.7.7, priority: 0, hash mask length: 30

show ip pim interface
ces

Syntax
Command Modes

View information on the interfaces with IP PIM enabled.

show ip pim interface

EXEC
EXEC Privilege

Command
History

Version 8.3.12.0

Introduced on the S4810.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Introduced on S-Series

Example

E600-7-RPM0#show ip pim interface
Address Interface Ver/
Nbr
Query DR DR
Mode
Count Intvl Prio
172.21.200.254 Gi 7/9 v2/S
0
30
1 172.21.200.254
172.60.1.2 Gi 7/11 v2/S
0
30
1 172.60.1.2
192.3.1.1Gi 7/16 v2/S
1
30
1 192.3.1.1
192.4.1.1 Gi 13/5 v2/S
0
30
1 192.4.1.1
172.21.110.1 Gi 13/6 v2/S
0
30
1 172.21.110.1
172.21.203.1 Gi 13/7 v2/S
0
30
1 172.21.203.1

Table 38-1.

show ip pim interface Command Example Fields

Field

Description

Address

Lists the IP addresses of the interfaces participating in PIM.

Interface

List the interface type, with either slot/port information or ID
(VLAN or Port Channel), of the interfaces participating in PIM.

Ver/Mode

Displays the PIM version number and mode for each interface
participating in PIM.
• v2 = PIM version 2
• S = PIM Sparse mode

Nbr Count

Displays the number of PIM neighbors discovered over this
interface.

Query Intvl

Displays the query interval for Router Query messages on that
interface (configured with ip pim query-interval command).

PIM-Sparse Mode (PIM-SM) | 1121

www.dell.com | support.dell.com

Table 38-1.

show ip pim interface Command Example Fields

Field

Description

DR Prio

Displays the Designated Router priority value configured on the
interface (ip pim dr-priority command).

DR

Displays the IP address of the Designated Router for that interface.

show ip pim neighbor
ces

Syntax
Command Modes

View PIM neighbors.

show ip pim neighbor

EXEC
EXEC Privilege

Command
History

Version 8.3.12.0

Introduced on the S4810.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Introduced on S-Series

Example

FTOS#show ip pim neighbor
Neighbor
Interface
Address
127.87.3.4
Gi 7/16
FTOS#

Table 38-2.

1122

|

Uptime/Expires

Ver

09:44:58/00:01:24

v2

DR
Prio/Mode
1 / S

show ip pim neighbor Command Example Fields

Field

Description

Neighbor address

Displays the IP address of the PIM neighbor.

Interface

List the interface type, with either slot/port information or ID
(VLAN or Port Channel), on which the PIM neighbor was found.

Uptime/expires

Displays the amount of time the neighbor has been up followed by
the amount of time until the neighbor is removed from the multicast
routing table (that is, until the neighbor hold time expires).

Ver

Displays the PIM version number.
• v2 = PIM version 2

DR prio/Mode

Displays the Designated Router priority and the mode.
• 1 = default Designated Router priority (use ip pim dr-priority)
• DR = Designated Router
• S = Sparse mode

PIM-Sparse Mode (PIM-SM)

show ip pim rp
ces

Syntax
Parameters

Command Modes

View all multicast groups-to-RP mappings.

show ip pim rp [mapping | group-address]
mapping

(OPTIONAL) Enter the keyword mapping to display the multicast
groups-to-RP mapping and information on how RP is learnt.

group-address

(OPTIONAL) Enter the multicast group address mask in dotted
decimal format to view RP for a specific group.

EXEC
EXEC Privilege

Command
History

Example
(show ip pim rp)

Example
(show ip pim rp
mapping)

Version 8.3.12.0

Introduced on the S4810.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Introduced on S-Series

FTOS#sh ip pim rp
Group
RP
224.2.197.115
165.87.20.4
224.2.217.146
165.87.20.4
224.3.3.3
165.87.20.4
225.1.2.1
165.87.20.4
225.1.2.2
165.87.20.4
229.1.2.1
165.87.20.4
229.1.2.2
165.87.20.4
FTOS#
FTOS#sh ip pim rp mapping
Group(s): 224.0.0.0/4
RP: 165.87.20.4, v2
Info source: 165.87.20.5, via bootstrap, priority 0
Uptime: 00:03:11, expires: 00:02:46
RP: 165.87.20.3, v2
Info source: 165.87.20.5, via bootstrap, priority 0
Uptime: 00:03:11, expires: 00:03:03
FTOS#

Example
(show ip pim rp
group-address)

FTOS#sh ip pim rp 229.1.2.1
Group
RP
229.1.2.1
165.87.20.4
FTOS#

show ip pim snooping interface
Display information on VLAN interfaces with PIM-SM snooping enabled.

ex
Syntax

show ip pim snooping interface [vlan vlan-id]

PIM-Sparse Mode (PIM-SM) | 1123

www.dell.com | support.dell.com

Parameters

Command Modes

vlan vlan-id

(OPTIONAL) Enter a VLAN ID to display information about a specified
VLAN configured for PIM-SM snooping. Valid VLAN IDs: 1 to 4094.

EXEC
EXEC Privilege

Command
History

Version 8.3.12.0

Introduced on the S4810.

Version 8.4.1.1

Introduced on E-Series ExaScale

Example

FTOS#show ip pim snooping interface
Interface

Vlan 2

Table 38-3.

Ver

v2

Nbr

DR

Count

Prio

3

1

DR

165.87.32.2

show ip pim snooping interface Command Example Fields

Field

Description

Interface

Displays the VLAN interfaces with PIM-SM snooping enabled.

Ver/Mode

Displays the PIM version number for each VLAN interface with
PIM-SM snooping enabled:
• v2 = PIM version 2
• S = PIM Sparse mode

Nbr Count

Displays the number of neighbors learned through PIM-SM
snooping on the interface.

DR Prio

Displays the Designated Router priority value configured on the
interface (ip pim dr-priority command).

DR

Displays the IP address of the Designated Router for that interface.

show ip pim snooping neighbor
Display information on PIM neighbors learned through PIM-SM snooping.

ex
Syntax
Parameters

Command Modes

show ip pim snooping neighbor [vlan vlan-id]
vlan vlan-id

(OPTIONAL) Enter a VLAN ID to display information about PIM neighbors
that was discovered by PIM-SM snooping on a specified VLAN.
Valid VLAN IDs: 1 to 4094.

EXEC
EXEC Privilege

Command
History

1124

|

Version 8.3.12.0

Introduced on the S4810.

Version 8.4.1.1

Introduced on E-Series ExaScale

PIM-Sparse Mode (PIM-SM)

Example

FTOS#show ip pim snooping neighbor

Neighbor

Interface

Uptime/Expires

Ver

DR Prio

165.87.32.2

Vl 2 [Gi 4/13 ]

00:04:03/00:01:42

v2

1

165.87.32.10

Vl 2 [Gi 4/11 ]

00:00:46/00:01:29

v2

0

165.87.32.12

Vl 2 [Gi 4/20 ]

00:00:51/00:01:24

v2

0

Address

Table 38-4.

show ip pim snooping neighbor Command Example Fields

Field

Description

Neighbor address

Displays the IP address of the neighbor learned through PIM-SM
snooping.

Interface

Displays the VLAN ID number and slot/port on which the
PIM-SM-enabled neighbor was discovered.

Uptime/expires

Displays the amount of time the neighbor has been up followed by
the amount of time until the neighbor is removed from the multicast
routing table (that is, until the neighbor hold time expires).

Ver

Displays the PIM version number.
• v2 = PIM version 2

DR prio/Mode

Displays the Designated Router priority and the mode.
• 1 = default Designated Router priority (use ip pim dr-priority)
• DR = Designated Router
• S = Sparse mode

show ip pim snooping tib
Display information from the tree information base (TIB) discovered by PIM-SM snooping
about multicast group members and states.

ex
Syntax
Parameters

Command Modes

show ip pim snooping tib [vlan vlan-id] [group-address [source-address]]
vlan vlan-id

(OPTIONAL) Enter a VLAN ID to display TIB information discovered by
PIM-SM snooping on a specified VLAN. Valid VLAN IDs: 1 to 4094.

group-address

(OPTIONAL) Enter the group address in dotted decimal format (A.B.C.D) to
display TIB information discovered by PIM-SM snooping for a specified
multicast group.

source-address

(OPTIONAL) Enter the source address in dotted decimal format (A.B.C.D) to
display TIB information discovered by PIM-SM snooping for a specified
multicast source.

EXEC
EXEC Privilege

Command
History

Version 8.3.12.0

Introduced on the S4810.

Version 8.4.1.1

Introduced on E-Series ExaScale

PIM-Sparse Mode (PIM-SM) | 1125

www.dell.com | support.dell.com

Example

FTOS#show ip pim snooping tib

PIM Multicast Snooping Table
Flags: J/P - (*,G) Join/Prune, j/p - (S,G) Join/Prune
SGR-P - (S,G,R) Prune
Timers: Uptime/Expires
* : Inherited port

(*, 225.1.2.1), uptime 00:00:01, expires 00:02:59, RP 165.87.70.1, flags: J
Incoming interface: Vlan 2, RPF neighbor 0.0.0.0
Outgoing interface list:
GigabitEthernet 4/11

RPF 165.87.32.2

00:00:01/00:02:59

GigabitEthernet 4/13

Upstream Port

-/-

FTOS#show ip pim snooping tib vlan 2 225.1.2.1 165.87.1.7

PIM Multicast Snooping Table
Flags: J/P - (*,G) Join/Prune, j/p - (S,G) Join/Prune
SGR-P - (S,G,R) Prune
Timers: Uptime/Expires
* : Inherited port

(165.87.1.7, 225.1.2.1), uptime 00:00:08, expires 00:02:52, flags: j
Incoming interface: Vlan 2, RPF neighbor 0.0.0.0
Outgoing interface list:
GigabitEthernet 4/11

Upstream Port

-/-

GigabitEthernet 4/13

DR Port

-/-

GigabitEthernet 4/20

RPF 165.87.32.10

00:00:08/00:02:52

Table 38-5.

1126

|

show ip pim snooping tib Command Example Fields

Field

Description

(S, G)

Displays the entry in the PIM multicast snooping database.

uptime

Displays the amount of time the entry has been in the PIM
multicast route table.

expires

Displays the amount of time until the entry expires and is removed
from the database.

RP

Displays the IP address of the RP/source for this entry.

PIM-Sparse Mode (PIM-SM)

Table 38-5.

show ip pim snooping tib Command Example Fields (continued)

Field

Description

flags

List the flags to define the entries:
• S = PIM Sparse Mode
• C = directly connected
• L = local to the multicast group
• P = route was pruned
• R = the forwarding entry is pointing toward the RP
• F = FTOS is registering this entry for a multicast source
• T = packets were received via Shortest Tree Path
• J = first packet from the last hop router is received and the entry
is ready to switch to SPT
• K= acknowledge pending state

Incoming interface

Displays the reverse path forwarding (RPF) interface towards the
RP/source.

RPF neighbor

Displays the next hop from this interface towards the RP/source.

Outgoing interface list:

Lists the interfaces that meet one of the following criteria:
• a directly connect member of the Group.
• statically configured member of the Group.
• received a (*,G) Join message.

show ip pim summary
ces

Syntax
Command Modes

View information about PIM-SM operation.

show ip pim summary

EXEC
EXEC Privilege

Command
History

Example

Version 8.3.12.0

Introduced on the S4810.

Version 8.4.1.1

Support for the display of PIM-SM snooping status was added on
E-Series ExaScale

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Introduced on S-Series

FTOS#show ip pim summary
PIM TIB version 495
Uptime 22:44:52
Entries in PIM-TIB/MFC : 2/2
Active Modes :
PIM-SNOOPING
Interface summary:
1 active PIM interface

PIM-Sparse Mode (PIM-SM) | 1127

www.dell.com | support.dell.com

0 passive PIM interfaces
3 active PIM neighbors
TIB summary:
1/1 (*,G) entries in PIM-TIB/MFC
1/1 (S,G) entries in PIM-TIB/MFC
0/0 (S,G,Rpt) entries in PIM-TIB/MFC
0
0
0
0

PIM nexthops
RPs
sources
Register states

Message summary:
2582/2583 Joins sent/received
5/0 Prunes sent/received
0/0 Candidate-RP advertisements sent/received
0/0 BSR messages sent/received
0/0 State-Refresh messages sent/received
0/0 MSDP updates sent/received
0/0 Null Register messages sent/received
0/0 Register-stop messages sent/received
Data path event summary:
0 no-cache messages received
0 last-hop switchover messages received
0/0 pim-assert messages sent/received
0/0 register messages sent/received
Memory usage:
TIB
Nexthop cache
Interface table
Neighbor table
RP Mapping

:
:
:
:
:

3768 bytes
0 bytes
992 bytes
528 bytes
0 bytes

show ip pim tib
ces

Syntax
Parameters

Command Modes

View the PIM tree information base (TIB).

show ip pim tib [group-address [source-address]]
group-address

(OPTIONAL) Enter the group address in dotted decimal format (A.B.C.D).

source-address

(OPTIONAL) Enter the source address in dotted decimal format (A.B.C.D).

EXEC
EXEC Privilege

Command
History

Example

1128

|

Version 8.3.12.0

Introduced on the S4810.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.8.1.0

Introduced on S-Series

FTOS#show ip pim tib

PIM-Sparse Mode (PIM-SM)

PIM Multicast Routing Table
Flags: D - Dense, S - Sparse, C - Connected, L - Local, P - Pruned,
R - RP-bit set, F - Register flag, T - SPT-bit set, J - Join SPT,
M - MSDP created entry, A - Candidate for MSDP Advertisement,
K - Ack-Pending State
Timers: Uptime/Expires
Interface state: Interface, next-Hop, State/Mode
(*, 226.1.1.1), uptime 01:29:19, expires 00:00:52, RP 10.211.2.1, flags: SCJ
Incoming interface: GigabitEthernet 4/23, RPF neighbor 10.211.1.2
Outgoing interface list:
GigabitEthernet 8/0
(*, 226.1.1.2), uptime 00:18:08, expires 00:00:52, RP 10.211.2.1, flags: SCJ
Incoming interface: GigabitEthernet 4/23, RPF neighbor 10.211.1.2
Outgoing interface list:
GigabitEthernet 8/0
(*, 226.1.1.3), uptime 00:18:08, expires 00:00:52, RP 10.211.2.1, flags: SCJ
Incoming interface: GigabitEthernet 4/23, RPF neighbor 10.211.1.2
Outgoing interface list:
GigabitEthernet 8/0
(*, 226.1.1.4), uptime 00:18:08, expires 00:00:52, RP 10.211.2.1, flags: SCJ
Incoming interface: GigabitEthernet 4/23, RPF neighbor 10.211.1.2
Outgoing interface list:
GigabitEthernet 8/0

Table 38-6.

show ip pim tib Command Example Fields

Field

Description

(S, G)

Displays the entry in the multicast PIM database.

uptime

Displays the amount of time the entry has been in the PIM route
table.

expires

Displays the amount of time until the entry expires and is removed
from the database.

RP

Displays the IP address of the RP/source for this entry.

flags

List the flags to define the entries:
• D = PIM Dense Mode
• S = PIM Sparse Mode
• C = directly connected
• L = local to the multicast group
• P = route was pruned
• R = the forwarding entry is pointing toward the RP
• F = FTOS is registering this entry for a multicast source
• T = packets were received via Shortest Tree Path
• J = first packet from the last hop router is received and the entry
is ready to switch to SPT
• K = acknowledge pending state

Incoming interface

Displays the reverse path forwarding (RPF) interface towards the
RP/source.

PIM-Sparse Mode (PIM-SM) | 1129

www.dell.com | support.dell.com

Table 38-6.

show ip pim tib Command Example Fields (continued)

Field

Description

RPF neighbor

Displays the next hop from this interface towards the RP/source.

Outgoing interface list:

Lists the interfaces that meet one of the following criteria:
• a directly connect member of the Group.
• statically configured member of the Group.
• received a (*,G) Join message.

show running-config pim
ex

Display the current configuration of PIM-SM snooping.
Syntax

show running-config pim

Command Modes

EXEC Privilege

Command
History

Version 8.3.12.0

Introduced on the S4810.

Version 8.4.1.0

Introduced on E-Series ExaScale.

Related
Commands
Example

ip pim snooping

Enable PIM-SM snooping.

FTOS#show running-config pim
!
ip pim snooping enable

IPv6 PIM-Sparse Mode Commands
The IPv6 PIM-SM commands are:
•
•
•
•
•
•
•
•
•
•
•
•

1130

|

PIM-Sparse Mode (PIM-SM)

ipv6 pim bsr-border
ipv6 pim bsr-candidate
ipv6 pim dr-priority
ipv6 pim join-filter
ipv6 pim query-interval
ipv6 pim neighbor-filter
ipv6 pim register-filter
ipv6 pim rp-address
ipv6 pim rp-candidate
ip pim sparse-mode
ipv6 pim spt-threshold
show ipv6 pim bsr-router

•
•
•
•

show ipv6 pim interface
show ipv6 pim neighbor
show ipv6 pim rp
show ipv6 pim tib

clear ipv6 pim tib
Clear the IPv6 PIM multicast-routing database (tree information base—tib).

e
Syntax
Parameters

Defaults

clear ipv6 pim tib [group-address]
group-address

(OPTIONAL) Enter the multicast group address in the x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zero.

No default values or behavior

Command Modes

EXEC Privilege

Command
History

Version 8.3.12.0

Introduced on the S4810.

Version 7.4.1.0

Introduced

show ipv6 pim tib

Display the IPv6 PIM tree information base (tib)

Related
Commands

debug ipv6 pim
Invoke IPv6 PIM debugging.

e
Syntax

debug ipv6 pim [bsr | events | group group | packet | register [group] | state | | timer [assert | hello
| joinprune | register]]

To disable IPv6 PIM debugging, enter no debug ipv6 pim.
Parameters

bsr

(OPTIONAL) Enter the keyword bsr to invoke debugging of IPv6 PIM
Candidate RP/BSR activities.

events

(OPTIONAL) Enter the keyword events to invoke debugging of IPv6
PIM events.

group group

(OPTIONAL) Enter the keyword group followed by the group address
to invoke debugging on that specific group.

packet

(OPTIONAL) Enter the keyword packet to invoke debugging of IPv6
PIM packets.

register [group]

(OPTIONAL) Enter the keyword register and optionally the group
address to invoke debugging of IPv6 PIM register messages for a
particular group.

PIM-Sparse Mode (PIM-SM) | 1131

www.dell.com | support.dell.com

Defaults

state

(OPTIONAL) Enter the keyword state to view IPv6 PIM state changes.

timer [assert | hello |
joinprune | register]

(OPTIONAL) Enter the keyword timer to view IPv6 PIM timers. Enter
one of the optional parameters:
• assert: to view the assertion timer.
• hello: to view the IPv6 PIM neighbor keepalive timer.
• joinprune: to view the expiry timer (join/prune timer)
• register: to view the register suppression timer.

Disabled

Command Modes

EXEC Privilege

Command
History

Version 8.3.12.0

Introduced on the S4810.

Version 7.4.1.0

Introduced

ipv6 pim bsr-border
Define the border of PIM domain by filtering inbound and outbound PIM-BSR messages per
interface.

e
Syntax
Defaults
Command Modes
Command
History

Usage
Information

ipv6 pim bsr-border

Disabled
INTERFACE
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.1.0

Introduced

This command is applied to the subsequent PIM-BSR messages. Existing BSR
advertisements are cleaned up by time-out.

ipv6 pim bsr-candidate
Configure the router as a bootstrap (bsr) candidate.

e
Syntax

ipv6 pim bsr-candidate interface [hash-mask-length] [priority]

To disable the bootstrap candidate, use the no ipv6 pim bsr-candidate command.

1132

|

PIM-Sparse Mode (PIM-SM)

Parameters

Defaults
Command Modes
Command
History

interface

Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Loopback interface, enter the keyword loopback followed by a
number from 0 to 16383.
• For a Port Channel interface, enter the keyword port-channel followed
by a number:
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to
4094.

hash-mask-length

(OPTIONAL) Enter the hash mask length for RP selection.
Range: 0 to 128
Default: 126

priority

(OPTIONAL) Enter the priority value for Bootstrap election process.
Range: 0 to 255
Default: 0

As above
CONFIGURATION
Version 8.3.12.0

Introduced on the S4810.

Version 7.4.1.0

Introduced

ipv6 pim dr-priority
Change the Designated Router (DR) priority for the IPv6 interface.

e
Syntax

ipv6 pim dr-priority priority-value

To remove the DR priority value assigned, use the no ipv6 pim dr-priority command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

priority-value

Enter a number. Preference is given to larger/higher number.
Range: 0 to 4294967294
Default: 1

1
INTERFACE
Version 8.3.12.0

Introduced on the S4810.

Version 7.4.1.0

Introduced

The router with the largest value assigned to an interface becomes the Designated Router. If
two interfaces contain the same DR priority value, the interface with the largest interface IP
address becomes the Designated Router.

PIM-Sparse Mode (PIM-SM) | 1133

www.dell.com | support.dell.com

ipv6 pim join-filter
Permit or deny PIM Join/Prune messages on an interface using an access list. This command
prevents the PIM-SM router from creating state based on multicast source and/or group.

e
Syntax
Parameters

Defaults
Command Modes
Command
History

Example

ipv6 pim join-filter access-list

access-list

Enter the name of an extended access list.

in

Enter this keyword to apply the access list to inbound traffic.

out

Enter this keyword to apply the access list to outbound traffic.

None
INTERFACE
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.1.0

Introduced

FTOS(conf)#ipv6 access-list JOIN-FIL_ACL
FTOS(conf-ipv6-acl)#permit ipv6 165:87:34::0/112 ff0e::225:1:2:0/112
FTOS(conf-ipv6-acl)#permit ipv6 any ff0e::230:1:2:0/112
FTOS(conf-ipv6-acl)#permit ipv6 165:87:32::0/112 any
FTOS(conf-ipv6-acl)#exit
FTOS(conf)#interface gigabitethernet 0/84
FTOS(conf-if-gi-0/84)#ipv6 pim join-filter JOIN-FIL_ACL in
FTOS(conf-if-gi-0/84)#ipv6 pim join-filter JOIN-FIL_ACL out

ipv6 pim query-interval
Change the frequency of IPv6 PIM Router-Query messages.

e
Syntax

ipv6 pim query-interval seconds

To return to the default value, enter no ipv6 pim query-interval seconds command.
Parameters

Defaults
Command Modes
Command
History

1134

|

seconds

Enter a number as the number of seconds between router query messages.
Default: 30 seconds
Range: 0 to 65535

30 seconds
INTERFACE
Version 8.3.12.0

Introduced on the S4810.

Version 7.4.1.0

Introduced

PIM-Sparse Mode (PIM-SM)

ipv6 pim neighbor-filter
Prevent the system from forming a PIM adjacency with a neighboring system.

e
Syntax
Parameters

Defaults
Command Modes
Command
History

Usage
Information

ipv6 pim neighbor-filter {access-list}
access-list

Enter the name of a standard access list. Maximum 16 characters.

None
CONFIGURATION
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.1.0

Introduced

Do not enter this command before creating the access-list.

ipv6 pim register-filter
Configure the source DR so that it does not send register packets to the RP for the specified
sources and groups.

e
Syntax
Parameters

Defaults
Command Modes
Command
History

Example

ipv6 pim register-filter access-list
access-list

Enter the name of the extended ACL that contains the sources and groups
to be filtered.

None
CONFIGURATION
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.1.0

Introduced

FTOS(conf)#ipv6 pim register-filter REG-FIL_ACL
FTOS(conf)#ipv6 access-list REG-FIL_ACL
FTOS(conf-ipv6-acl)#deny ipv6 165:87:34::10/128 ff0e::225:1:2:0/112
FTOS(conf-ipv6-acl)#permit ipv6 any any
FTOS(conf-ipv6-acl)#exit

ipv6 pim rp-address
e

Configure a static PIM Rendezvous Point (RP) address for a group. This address is used by
first-hop routers to send Register packets on behalf of the source multicast host.

PIM-Sparse Mode (PIM-SM) | 1135

www.dell.com | support.dell.com

Syntax

ipv6 pim rp-address address group-address group-address mask override

To remove an RP address, use the no ipv6 pim re-address address group-address mask
override.
Parameters

address

Enter the IPv6 RP address in the x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zero.

group-address

Enter the keyword group-address followed by the group address in
the x:x:x:x::x format and then the mask in /nn format to assign that
group address to the RP.
The :: notation specifies successive hexadecimal fields of zero.

group-address mask

override

Defaults
Command Modes
Command
History

Usage
Information

Enter the keyword override to override the BSR updates with static
RP. The override will take effect immediately during enable/disable.
Note: This option is applicable to multicast group range.

No default values or behavior
CONFIGURATION
Version 8.3.12.0

Introduced on the S4810.

Version 7.4.1.0

Introduced

The RP addresses are stored in the order in which they are entered. RP addresses learnt via
BSR take priority over static RP addresses.
Without the override option, RPs advertised by the BSR updates take precedence over the
statically configured RPs.

ipv6 pim rp-candidate
Specify an interface as an RP candidate.

e
Syntax

1136

|

ipv6 pim rp-candidate interface [priority-value]

PIM-Sparse Mode (PIM-SM)

Parameters

Defaults
Command Modes
Command
History

interface

Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Loopback interface, enter the keyword loopback followed by a
number from 0 to 16383.
• For a Port Channel interface, enter the keyword port-channel followed by
a number:
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to
4094.

priority-value

(OPTIONAL) Enter a number as the priority of this RP Candidate, which is
included in the Candidate-RP-Advertisements.
Range: 0 (highest) to 255 (lowest)

No default values or behavior
CONFIGURATION
Version 8.3.12.0

Introduced on the S4810.

Version 7.4.1.0

Introduced

ipv6 pim sparse-mode
Enable IPv6 PIM sparse mode on the interface.

e
Syntax

ipv6 pim sparse-mode

To disable IPv6 PIM sparse mode, enter no ipv6 pim sparse-mode.
Defaults
Command Modes
Command
History

Usage
Information

Disabled
INTERFACE
Version 8.3.12.0

Introduced on the S4810.

Version 7.4.1.0

Introduced

The interface must be enabled (no shutdown command) and not have the switchport command
configured. Multicast must also be enabled globally. PIM is supported on the port-channel
interface.

ipv6 pim spt-threshold
Specifies when a PIM leaf router should join the shortest path tree.

e
Syntax

ipv6 pim spt-threshold {kbps | infinity}

PIM-Sparse Mode (PIM-SM) | 1137

www.dell.com | support.dell.com

To return to the default value, enter no ipv6 pim spt-threshold.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

kbps

Enter a traffic rate in kilobytes per second.
Range: 0 to 4294967 kbps
Default: 10 kbps

infinity

Enter the keyword infinity to have all sources for the specified group use the shared
tree and never join shortest path tree (SPT).

10 kbps
CONFIGURATION
Version 8.3.12.0

Introduced on the S4810.

Version 7.4.1.0

Introduced

PIM leaf routers join the shortest path tree immediately after the first packet arrives from a
new source.

show ipv6 pim bsr-router
View information on the bootstrap router (v2).

e
Syntax
Command Modes

show ipv6 pim bsr-router

EXEC
EXEC Privilege

Command
History

Example

Version 8.3.12.0

Introduced on the S4810.

Version 7.4.1.0

Introduced

FTOS#show ipv6 pim bsr-router
PIMv2 Bootstrap information
This system is the Bootstrap Router (v2)
BSR address: 14::2
Uptime:
00:02:54, BSR Priority: 0, Hash mask length: 126
Next bootstrap message in 00:00:06
This system is a candidate BSR
Candidate BSR address: 14::2, priority: 0, hash mask length: 126
FTOS#

show ipv6 pim interface
Display IPv6 PIM enabled interfaces.

e
Syntax

1138

|

show ipv6 pim interface

PIM-Sparse Mode (PIM-SM)

Command Modes

EXEC
EXEC Privilege

Command
History

Version 8.3.12.0

Introduced on the S4810.

Version 7.4.1.0

Introduced

Example

FTOS#show ipv6 pim interface
Interface Ver/
Nbr
Query
Mode
Count Intvl

DR
Prio

Gi 10/3
v2/S
1
30
1
Address : fe80::201:e8ff:fe02:140f
DR
: this router
Gi 10/11 v2/S
0
30
1
Address : fe80::201:e8ff:fe02:1417
DR
: this router
FTOS#

show ipv6 pim neighbor
DisplaysIPv6 PIM neighbor information.

e
Syntax
Parameters

Command Modes

show ipv6 pim neighbor [detail]
detail

(OPTIONAL) Enter the keyword detail to displayed PIM neighbor detailed
information.

EXEC
EXEC Privilege

Command
History

Example

Version 8.3.12.0

Introduced on the S4810.

Version 7.4.1.0

Introduced

FTOS##show ipv6 pim neighbor detail
Neighbor
Interface
Address
fe80::201:e8ff:fe00:6265 Gi 10/3
165:87:50::6
FTOS##

Uptime/Expires

Ver

00:07:39/00:01:42

v2

DR
Prio/Mode
1 / S

show ipv6 pim rp
View all IPv6 multicast groups-to-rendezvous point (RP) mappings.

e
Syntax

show ipv6 pim rp [mapping | group-address]

PIM-Sparse Mode (PIM-SM) | 1139

www.dell.com | support.dell.com

Parameters

Command Modes

mapping

(OPTIONAL) Enter the keyword mapping to display the multicast
groups-to-RP mapping and information on how RP is learnt.

group-address

(OPTIONAL) Enter the multicast group address in the x:x:x:x::x format to
view RP mappings for a specific group.
The :: notation specifies successive hexadecimal fields of zero.

EXEC
EXEC Privilege

Command
History

Version 8.3.12.0

Introduced on the S4810.

Version 7.4.1.0

Introduced

Example
(show ipv6 pim
rp)

FTOS##show ipv6 pim rp
Group
RP
ff0e::225:1:2:1 14::1
ff0e::225:1:2:2 14::1
ff0e::226:1:2:1 14::1
ff0e::226:1:2:2 14::1
FTOS#

Example
(show ipv6 pim
rp mapping)

FTOS#show ipv6 pim rp mapping
PIM Group-to-RP Mappings
Group(s): ff00::/8
RP: 14::1, v2
Info source: 14::1, via bootstrap, priority 192
Uptime: 00:03:37, expires: 00:01:53
Group(s): ff00::/8, Static
RP: 14::2, v2
FTOS#

show ipv6 pim tib
View the IPv6 PIM multicast-routing database (tree information base—tib).

e
Syntax
Parameters

Command Modes

show ipv6 pim tib [group-address [source-address]]
group-address

(OPTIONAL) Enter the IPv6 group address in the x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zero

source-address

(OPTIONAL) Enter the source address in the x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zero

EXEC
EXEC Privilege

Command
History

Example

1140

|

Version 8.3.12.0

Introduced on the S4810.

Version 7.4.1.0

Introduced

FTOS#show ipv6 pim tib

PIM-Sparse Mode (PIM-SM)

PIM Multicast Routing Table
Flags: D - Dense, S - Sparse, C - Connected, L - Local, P - Pruned,
R - RP-bit set, F - Register flag, T - SPT-bit set, J - Join SPT,
M - MSDP created entry, A - Candidate for MSDP Advertisement
K - Ack-Pending State
Timers: Uptime/Expires
Interface state: Interface, next-Hop, State/Mode
(25::1, ff0e::225:1:2:1), uptime 00:09:53, expires 00:00:00,flags: CJ
RPF neighbor: GigabitEthernet 10/3, fe80::201:e8ff:fe00:6265
Outgoing interface list:
GigabitEthernet 10/11
(25::1, ff0e::225:1:2:2), uptime 00:09:54, expires 00:00:00,flags: CJ
RPF neighbor: GigabitEthernet 10/3, fe80::201:e8ff:fe00:6265
Outgoing interface list:
GigabitEthernet 10/11
(25::2, ff0e::225:1:2:2), uptime 00:09:54, expires 00:00:00,flags: CJ
RPF neighbor: GigabitEthernet 10/3, fe80::201:e8ff:fe00:6265
Outgoing interface list:
GigabitEthernet 10/11
(25::1, ff0e::226:1:2:1), uptime 00:09:54, expires 00:00:00,flags: CJ
RPF neighbor: GigabitEthernet 10/3, fe80::201:e8ff:fe00:6265
Outgoing interface list:
GigabitEthernet 10/11
FTOS#

PIM-Sparse Mode (PIM-SM) | 1141

1142

|

PIM-Sparse Mode (PIM-SM)

www.dell.com | support.dell.com

39
Port Monitoring
Overview
The Port Monitoring feature enables you to monitor network traffic by forwarding a copy of
each incoming or outgoing packet from one port to another port.
The commands in this chapter are generally supported on the C-Series, E-Series, and
S-Series, with one exception, as noted in the Command History fields and by these symbols
under the command headings: e E-Series, c C-Series, s S-Series, or
.

Commands
•
•
•
•
•
•
•

description
flow-based enable
monitor session
show config
show monitor session
show running-config monitor session
source (port monitoring)

Important Points to Remember
•
•
•
•
•
•

On the E-Series, Port Monitoring is supported on TeraScale and ExaScale
platforms.
Port Monitoring is supported on physical ports only. Logical interfaces, such as
Port Channels and VLANs, are not supported.
A SONET port can only be configured as a monitored port.
FTOS supports as many monitor sessions on a system as the number of
port-pipes.
The monitoring (destination, “MG”) and monitored (source, “MD”) ports must
be on the same switch.
In general, a monitoring port should have no ip address and no shutdown as the
only configuration; FTOS permits a limited set of commands for monitoring
ports; display them using the command ?. A monitoring port also may not be a
member of a VLAN.

Port Monitoring | 1143

www.dell.com | support.dell.com

•
•
•
•
•
•

A monitoring port can monitor any physical port in the chassis.
Only one MG and one MD may be in a single port-pipe.
A monitoring port can monitor more than one port.
There may only be one destination port in a monitoring session.
FTOS on the S-Series supports multiple source ports to be monitored by a single
destination port in one monitor session.
On the S-Series, one monitor session can have only one MG port. There is no
restriction on the number of source ports, or destination ports on the chassis.

Note: The monitoring port should not be a part of any other configuration.

description
ces
Syntax

Enter a description of this monitoring session.
description {description}

To remove the description, use the no description {description} command.
Parameters

Defaults
Command Modes
Command
History

Related
Commands

description

Enter a description regarding this session(80 characters maximum).

No default behavior or values
MONITOR SESSION (conf-mon-sess-session-ID)
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.7.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-7.7.1.0

Introduced on E-Series

monitor session

Enable a monitoring session.

flow-based enable
e
Syntax

Enable flow-based monitoring.
flow-based enable

To disable flow-based monitoring, use the no flow-based enable command.
Defaults
Command Modes

1144

|

Port Monitoring

Disabled, that is flow-based monitoring is not applied
MONITOR SESSION (conf-mon-sess-session-ID)

Command
History

Usage
Information

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series

To monitoring traffic with particular flows ingressing/egressing the interface, appropriate
ACLs can be applied in both ingress and egress direction.

Related
Commands

monitor session

Create a monitoring session.

monitor session
ces

Syntax

Create a session for monitoring traffic with port monitoring.

monitor session session-ID

To delete a session, use the no monitor session session-ID command.
To delete all monitor sessions, use the no monitor session all command.
Parameters

Defaults
Command Modes

session-ID

No default values or behaviors
MONITOR SESSION (conf-mon-sess-session-ID)

Command
History

Example
Usage
Information

Enter a session identification number.
Range: 0 to 65535

Version 8.3.7.0

Introduced on S4810

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.7.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced on E-Series

FTOS(conf)# monitor session 60
FTOS(conf-mon-sess-60)

The monitor command is saved in the running configuration at the Monitor Session mode level
and can be restored after a chassis reload.

Related
Commands

show monitor session

Display the monitor session

show running-config monitor session

Display the running configuration of a monitor session

show config
ces

Display the current monitor session configuration.

Port Monitoring | 1145

www.dell.com | support.dell.com

Syntax
Defaults
Command Modes
Command
History

show config

No default values or behavior
MONITOR SESSION (conf-mon-sess-session-ID)
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.7.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced on E-Series

Example

FTOS(conf-mon-sess-11)#show config
!
monitor session 11
source GigabitEthernet 10/0 destination GigabitEthernet 10/47 direction rx
FTOS#

show monitor session
ces
Syntax

Display the monitor information of a particular session or all sessions.
show monitor session {session-ID}

To display monitoring information for all sessions, use the show monitor session command.
Parameters

Defaults
Command Modes

session-ID

(OPTIONAL) Enter a session identification number.
Range: 0 to 65535

No default values or behavior
EXEC
EXEC Privilege

Command
History

Example

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.7.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced on E-Series

FTOS#show monitor session 11
SessionID
--------11

Related
Commands

1146

|

Port Monitoring

monitor session

Source
-----Gi 10/0

Destination
------------Gi 10/47

Direction
--------rx

Create a session for monitoring.

Mode
------interface

show running-config monitor session
ces
Syntax

Display the running configuration of all monitor sessions or a specific session.
show running-config monitor session {session-ID}

To display the running configuration for all monitor sessions, use just the show running-config
monitor session command.
Parameters

Defaults
Command Modes

session-ID

(OPTIONAL) Enter a session identification number.
Range: 0 to 65535

No default values or behavior
EXEC
EXEC Privilege

Command
History

Example

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.7.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced on E-Series

FTOS#show running-config monitor session
!
monitor session 8
source GigabitEthernet 10/46 destination GigabitEthernet 10/1 direction rx
!
monitor session 11
source GigabitEthernet 10/0 destination GigabitEthernet 10/47 direction rx
FTOS#show running-config monitor session 11
!
monitor session 11
source GigabitEthernet 10/0 destination GigabitEthernet 10/47 direction rx

Usage
Information
Related
Commands

The monitoring command is saved in the running configuration at the Monitor Session mode
level and can be restored after a chassis reload.
monitor session

Create a session for monitoring.

show monitor session

Display a monitor session.

source (port monitoring)
ces
Syntax

Configure a port monitor source.
source interface destination interface direction {rx | tx | both}

To disable a monitor source, use the no source interface destination interface direction {rx | tx |
both} command.

Port Monitoring | 1147

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes
Command
History

Example
Usage
Information

1148

|

Port Monitoring

interface

Enter the one of the following keywords and slot/port
information:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword
fortyGigE followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by
the slot/port information.

destination

Enter the keyword destination to indicate the interface
destination.

direction {rx | tx | both}

Enter the keyword direction followed by one of the packet
directional indicators.
rx: to monitor receiving packets only
tx: to monitor transmitting packets only
both: to monitor both transmitting and receiving packets

No default behavior or values
MONITOR SESSION (conf-mon-sess-session-ID)
Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.7.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced on E-Series

FTOS(conf-mon-sess-11)#source gi 10/0 destination gi 10/47 direction rx
FTOS(conf-mon-sess-11)#

Note: A SONET port can only be configured as a monitored port.

40
Private VLAN (PVLAN)
Overview
The Private VLAN (PVLAN) feature of FTOS is supported on Dell Force10 platforms as
indicated by the characters that appear under each of the command headings: c C-Series,
s S-Series, or
.

Commands
•
•
•
•
•
•
•

ip local-proxy-arp
private-vlan mode
private-vlan mapping secondary-vlan
show interfaces private-vlan
show vlan private-vlan
show vlan private-vlan mapping
switchport mode private-vlan

Refer also to the following commands. The command output is augmented in FTOS 7.8.1.0 to
provide PVLAN data:
•
•

show arp in IPv4 Routing
show vlan in Layer 2

Private VLANs extend the FTOS security suite by providing Layer 2 isolation between ports
within the same private VLAN. A private VLAN partitions a traditional VLAN into
subdomains identified by a primary and secondary VLAN pair.
The FTOS private VLAN implementation is based on RFC 3069.

Private VLAN Concepts
Primary VLAN:
The primary VLAN is the base VLAN and can have multiple secondary VLANs. There are
two types of secondary VLAN — community VLAN and isolated VLAN:

Private VLAN (PVLAN) | 1149

www.dell.com | support.dell.com

•
•

A primary VLAN can have any number of community VLANs and isolated
VLANs.
Private VLANs block all traffic to isolated ports except traffic from promiscuous
ports. Traffic received from an isolated port is forwarded only to promiscuous
ports or trunk ports.

Community VLAN:
A community VLAN is a secondary VLAN of the primary VLAN:
•

•

Ports in a community VLAN can talk to each other. Also, all ports in a
community VLAN can talk to all promiscuous ports in the primary VLAN and
vice-versa.
Devices on a community VLAN can communicate with each other via member
ports, while devices in an isolated VLAN cannot.

Isolated VLAN:
An isolated VLAN is a secondary VLAN of the primary VLAN:
•
•

Ports in an isolated VLAN cannot talk to each other. Servers would be mostly
connected to isolated VLAN ports.
Isolated ports can talk to promiscuous ports in the primary VLAN, and
vice-versa.

Port types:
•

•
•
•
•
•
•

Community port: A community port is, by definition, a port that belongs to a
community VLAN and is allowed to communicate with other ports in the same
community VLAN and with promiscuous ports.
Isolated port: An isolated port is, by definition, a port that, in Layer 2, can only
communicate with promiscuous ports that are in the same PVLAN.
Promiscuous port: A promiscuous port is, by definition, a port that is allowed to
communicate with any other port type.
Trunk port: A trunk port, by definition, carries VLAN traffic across switches:

A trunk port in a PVLAN is always tagged.
Primary or secondary VLAN traffic is carried by the trunk port in tagged mode. The tag on the
packet helps identify the VLAN to which the packet belongs.
A trunk port can also belong to a regular VLAN (non-private VLAN).

ip local-proxy-arp
Enable/disable Layer 3 communication between secondary VLANs in a private VLAN.

cs
Syntax

1150

|

[no] ip local-proxy-arp

Private VLAN (PVLAN)

To disable Layer 3 communication between secondary VLANs in a private VLAN, use the no
ip local-proxy-arp command in the INTERFACE VLAN mode for the primary VLAN.
To disable Layer 3 communication in a particular secondary VLAN, use the no ip
local-proxy-arp command in the INTERFACE VLAN mode for the selected secondary
VLAN.
Note: Even after ip-local-proxy-arp is disabled (no ip-local-proxy-arp) in a secondary VLAN,
Layer 3 communication may happen between some secondary VLAN hosts, until the ARP
timeout happens on those secondary VLAN hosts.
Defaults
Command Modes
Command
History

Related
Commands

Layer 3 communication is disabled between secondary VLANs in a private VLAN.
INTERFACE VLAN
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on C-Series and S-Series

private-vlan mode

Set the mode of the selected VLAN to community, isolated, or
primary.

private-vlan mapping
secondary-vlan

Map secondary VLANs to the selected primary VLAN.

show arp

Display the ARP table.

show interfaces private-vlan

Display type and status of PVLAN interfaces.

show vlan private-vlan

Display PVLANs and/or interfaces that are part of a PVLAN.

switchport mode
private-vlan

Set the PVLAN mode of the selected port.

private-vlan mode
Set the PVLAN mode of the selected VLAN to community, isolated, or primary.

cs
Syntax

[no] private-vlan mode {community | isolated | primary}

To remove the PVLAN configuration, use the no private-vlan mode {community | isolated |
primary} command syntax.
Parameters

Defaults
Command Modes

community

Enter community to set the VLAN as a community VLAN, as described above.

isolated

Enter isolated to configure the VLAN as an isolated VLAN, as described above.

primary

Enter primary to configure the VLAN as a primary VLAN, as described above.

none
INTERFACE VLAN

Private VLAN (PVLAN) | 1151

www.dell.com | support.dell.com

Command
History

Usage
Information

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on C-Series and S-Series

The VLAN:
•
•

•

Can be in only one mode, either community, isolated, or primary.
Mode can be set to community or isolated even before associating it to a primary
VLAN. This secondary VLAN will continue to work normally as a normal
VLAN even though it is not associated to a primary VLAN. (A syslog message
indicates this.)
Must not have a port in it when the VLAN mode is being set.

Only ports (and port channels) configured as promiscuous, host, or PVLAN trunk ports (as
described above) can be added to the PVLAN. No other regular ports can be added to the
PVLAN.
After using this command to configure a VLAN as a primary VLAN, use the private-vlan
mapping secondary-vlan command to map secondary VLANs to this VLAN.
Related
Commands

private-vlan mapping
secondary-vlan

Set the mode of the selected VLAN to primary and then
associate secondary VLANs to it.

show interfaces private-vlan

Display type and status of PVLAN interfaces.

show vlan private-vlan

Display PVLANs and/or interfaces that are part of a PVLAN.

show vlan private-vlan
mapping

Display primary-secondary VLAN mapping.

switchport mode private-vlan

Set the PVLAN mode of the selected port.

private-vlan mapping secondary-vlan
Map secondary VLANs to the selected primary VLAN.

cs
Syntax

[no] private-vlan mapping secondary-vlan vlan-list
To remove specific secondary VLANs from the configuration, use the no private-vlan
mapping secondary-vlan vlan-list command syntax.

Parameters

Defaults
Command Modes

1152

|

vlan-list

Enter the list of secondary VLANs to associate with the selected primary VLAN, as
described above. The list can be in comma-delimited or hyphenated-range format,
following the convention for range input.

none
INTERFACE VLAN

Private VLAN (PVLAN)

Command
History

Usage
Information

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on C-Series and S-Series

The list of secondary VLANs can be:
•
•
•

Related
Commands

Specified in comma-delimited or hyphenated-range format.
Specified with this command even before they have been created.
Amended by specifying the new secondary VLAN to be added to the list.

private-vlan mode

Set the mode of the selected VLAN to community, isolated, or
primary.

show interfaces private-vlan

Display type and status of PVLAN interfaces.

show vlan private-vlan

Display PVLANs and/or interfaces that are part of a PVLAN.

show vlan private-vlan
mapping

Display primary-secondary VLAN mapping.

switchport mode
private-vlan

Set the PVLAN mode of the selected port.

show interfaces private-vlan
cs

Display type and status of PVLAN interfaces.

Syntax

show interfaces private-vlan [interface interface]

Parameters

Defaults
Command Modes

interface interface

(OPTIONAL) Enter the keyword interface, followed by the ID of the
specific interface for which to display PVLAN status.

none
EXEC
EXEC Privilege

Command
History
Usage
Information
Example
(all PVLAN
interfaces)

Version 7.8.1.0

Introduced on C-Series and S-Series

This command has two types of display — a list of all PVLAN interfaces or for a specific
interface. Examples of both types of output are shown below.
FTOS# show interfaces private-vlan
Interface Vlan PVLAN-Type Interface Type
--------- ---- ---------- -------------Gi 2/1
10
Primary
Promiscuous
Gi 2/2
100 Isolated
Host
Gi 2/3
10
Primary
Trunk
Gi 2/4
101 Community Host

Status
-------Up
Down
Up
Up

Private VLAN (PVLAN) | 1153

www.dell.com | support.dell.com

Example
(specific
interface)

FTOS# show interfaces private-vlan Gi 2/2
Interface Vlan PVLAN-Type Interface Type Status
--------- ---- ---------- -------------- -------Gi 2/2
100 Isolated
Host
Up

The table below defines the fields in the output example above.
Table 40-1.

Related
Commands

show interfaces description Command Example Fields

Field

Description

Interface

Displays type of interface and associated slot and port number

Vlan

Displays the VLAN ID of the designated interface

PVLAN-Type

Displays the type of VLAN in which the designated interface resides

Interface Type

Displays the PVLAN port type of the designated interface.

Status

States whether the interface is operationally up or down.

private-vlan mode

Set the mode of the selected VLAN to community, isolated, or
primary.

show vlan private-vlan

Display PVLANs and/or interfaces that are part of a PVLAN.

show vlan private-vlan
mapping

Display primary-secondary VLAN mapping.

switchport mode
private-vlan

Set the PVLAN mode of the selected port.

show vlan private-vlan
cs

Display PVLANs and/or interfaces that are part of a PVLAN.

Syntax

show vlan private-vlan [community | interface | isolated | primary | primary_vlan | interface
interface]

Parameters

Defaults

1154

|

community

(OPTIONAL) Enter the keyword community to display VLANs
configured as community VLANs, along with their interfaces.

interface

(OPTIONAL) Enter the keyword community to display VLANs
configured as community VLANs, along with their interfaces.

isolated

(OPTIONAL) Enter the keyword isolated to display VLANs
configured as isolated VLANs, along with their interfaces.

primary

(OPTIONAL) Enter the keyword primary to display VLANs
configured as primary VLANs, along with their interfaces.

primary_vlan

(OPTIONAL) Enter a private VLAN ID or secondary VLAN ID to
display interface details about the designated PVLAN.

interface interface

(OPTIONAL) Enter the keyword interface and an interface ID to
display the PVLAN configuration of the designated interface.

none

Private VLAN (PVLAN)

Command Modes

EXEC
EXEC Privilege

Command
History
Usage
Information

Example
(show vlan
private-vlan)

Version 7.8.1.0

Introduced on C-Series and S-Series

Examples of all types of command output are shown below. The first type of output is the
result of not entering an optional keyword. It displays a detailed list of all PVLANs and their
member VLANs and interfaces. The other types of output show details about PVLAN
subsets.
FTOS# show vlan private-vlan
Primary Secondary Type
Active
------- --------- --------- -----10
primary
Yes
100
isolated Yes
101
community Yes
20
primary
Yes
Gi 3/1
200
isolated Yes
201
community No
202
community Yes

Ports
-----------------------Gi 2/1,3
Gi 2/2
Gi 2/10
Po 10, 12-13
Gi 3/2,4-6
Gi 3/11-12

Example
(show vlan
private-vlan
primary)

FTOS# show vlan private-vlan primary
Primary Secondary Type
Active Ports
------- --------- --------- ------ -----------------------10
primary
Yes
Gi 2/1,3
20
primary
Yes
Gi 3/1,3

Example
(show vlan
private-vlan
isolated)

FTOS# show vlan private-vlan isolated
Primary Secondary Type
Active Ports
------- --------- --------- ------ -----------------------10
primary
Yes
Gi 2/1,3
100
isolated Yes
Gi 2/2,4-6
200
isolated Yes
Gi 3/2,4-6

Example
(show vlan
private-vlan
community)

FTOS# show vlan private-vlan community
Primary Secondary Type
Active Ports
------- --------- --------- ------ -----------------------10
primary
Yes
Gi 2/1,3
101
community Yes
Gi 2/7-10
20
primary
Yes
Po 10, 12-13
Gi 3/1
201
community No
202
community Yes
Gi 3/11-12

Example
(show vlan
private-vlan
interface)

FTOS# show vlan private-vlan interface Gi 2/1
Primary Secondary Type
Active Ports
------- --------- --------- ------ -----------------------10
primary
Yes
Gi 2/1

If the VLAN ID is that of a primary VLAN, then the entire private VLAN output will be
displayed, as shown in the first figure below. If the VLAN ID is a secondary VLAN, only its
primary VLAN and its particular secondary VLAN properties will be displayed, as shown in
the second figure below.

Private VLAN (PVLAN) | 1155

www.dell.com | support.dell.com

Example
(primary)

FTOS# show vlan private-vlan 10
Primary Secondary Type
Active Ports
------- --------- --------- ------ -----------------------10
primary
Yes
Gi 2/1,3
1020 isolated Yes
Gi 0/4
101 community Yes
Gi 2/7-10

Example
(secondary)

FTOS#show vlan private-vlan 102
Primary Secondary Type
Active Ports
------- --------- --------- ------ -----------------------------------------10
Primary
Yes
Po 1
Gi 0/2
102 Isolated Yeso Gi 0/4

The table, below, defines the fields in the output, above.
Table 40-2.

Related
Commands

show interfaces description Command Example Fields

Field

Description

Primary

Displays the VLAN ID of the designated or associated primary VLAN(s)

Secondary

Displays the VLAN ID of the designated or associated secondary VLAN(s

Type

Displays the type of VLAN in which the listed interfaces reside

Active

States whether the interface is operationally up or down

Ports

Displays the interface IDs in the listed VLAN.

private-vlan mode

Set the mode of the selected VLAN to either community or isolated.

show interfaces private-vlan

Display type and status of PVLAN interfaces.

show vlan private-vlan
mapping

Display primary-secondary VLAN mapping.

switchport mode
private-vlan

Set the PVLAN mode of the selected port.

show vlan private-vlan mapping
cs

Display primary-secondary VLAN mapping.

Syntax

show vlan private-vlan mapping

Defaults
Command Modes

none
EXEC
EXEC Privilege

Command
History

1156

|

Version 7.8.1.0

Private VLAN (PVLAN)

Introduced on C-Series and S-Series

Usage
Information

The output of this command, shown below, displays the community and isolated VLAN IDs
that are associated with each primary VLAN.
FTOS# show vlan private-vlan mapping
Private Vlan:
Primary
: 100
Isolated : 102
Community : 101
Unknown
: 200

Related
Commands

private-vlan mode

Set the mode of the selected VLAN to either community or isolated.

show interfaces private-vlan

Display type and status of PVLAN interfaces.

show vlan private-vlan
mapping

Display primary-secondary VLAN mapping.

switchport mode
private-vlan

Set the PVLAN mode of the selected port.

switchport mode private-vlan
Set the PVLAN mode of the selected port.

cs
Syntax

[no] switchport mode private-vlan {host | promiscuous | trunk}
To remove the PVLAN mode from the selected port, use the no switchport mode private-vlan
command.

Parameters

Defaults
Command Modes
Command
History

Usage
Information

host

Enter host to configure the selected port or port channel as an isolated
interface in a PVLAN, as described above.

promiscuous

Enter promiscuous to configure the selected port or port channel as an
promiscuous interface, as described above.

trunk

Enter trunk to configure the selected port or port channel as a trunk port in a
PVLAN, as described above.

disabled
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on C-Series and S-Series

The assignment of the various PVLAN port types to port and port channel (LAG) interfaces is
demonstrated below.

Private VLAN (PVLAN) | 1157

www.dell.com | support.dell.com

Example

1158

FTOS#conf
FTOS(conf)#interface GigabitEthernet 2/1
FTOS(conf-if-gi-2/1)#switchport mode private-vlan promiscuous
FTOS(conf)#interface GigabitEthernet 2/2
FTOS(conf-if-gi-2/2)#switchport mode private-vlan host
FTOS(conf)#interface GigabitEthernet 2/3
FTOS(conf-if-gi-2/3)#switchport mode private-vlan trunk
FTOS(conf)#interface port-channel 10
FTOS(conf-if-gi-2/3)#switchport mode private-vlan promiscuous

Related
Commands

|

private-vlan mode

Set the mode of the selected VLAN to either community or isolated.

private-vlan mapping
secondary-vlan

Set the mode of the selected VLAN to primary and then associate
secondary VLANs to it.

show interfaces private-vlan

Display type and status of PVLAN interfaces.

show vlan private-vlan
mapping

Display primary-secondary VLAN mapping.

Private VLAN (PVLAN)

41
Per-VLAN Spanning Tree Plus (PVST+)
Overview
The FTOS implementation of PVST+ (Per-VLAN Spanning Tree plus) is based on the IEEE
802.1d standard Spanning Tree Protocol, but it creates a separate spanning tree for each
VLAN configured.
PVST+ (Per-VLAN Spanning Tree plus) is supported by FTOS on all Dell Force10 systems,
as indicated by the characters that appear below each command heading: e E-Series, c
C-Series, s S-Series or
.

Commands
The FTOS PVST+ commands are:
•
•
•
•
•
•
•
•
•
•
•
•

disable
description
extend system-id
protocol spanning-tree pvst
show spanning-tree pvst
spanning-tree pvst
spanning-tree pvst err-disable
tc-flush-standard
vlan bridge-priority
vlan forward-delay
vlan hello-time
vlan max-age

Note: For easier command line entry, the plus (+) sign is not used at the command
line.

Per-VLAN Spanning Tree Plus (PVST+) | 1159

www.dell.com | support.dell.com

disable
ces

Syntax

Disable PVST+ globally.

disable

To enable PVST+, enter no disable.
Defaults
Command Modes
Command
History

Related
Commands

PVST+ is disabled
CONFIGURATION (conf-pvst)
version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.2.1.1

Introduced on E-Series

protocol spanning-tree pvst

Enter PVST+ mode.

description
ces

Syntax

Enter a description of the PVST+

description {description}

To remove the description, use the no description {description} command.
Parameters

Defaults
Command Modes
Command
History

Related
Commands

1160

|

description

Enter a description to identify the Spanning Tree (80 characters maximum).

No default behavior or values
SPANNING TREE PVST+ (The prompt is “config-pvst”.)
Version 8.3.7.0

Introduced on S4810

pre-7.7.1.0

Introduced

protocol spanning-tree pvst

Per-VLAN Spanning Tree Plus (PVST+)

Enter SPANNING TREE mode on the switch.

extend system-id
ces

Syntax
Defaults
Command Modes
Command
History

Example

Use Extend System ID to augment the Bridge ID with a VLAN ID so that PVST+
differentiate between BPDUs for each VLAN. If for some reason on VLAN receives a BPDU
meant for another VLAN, PVST+ will then not detect a loop, and both ports can remain in
forwarding state.
extend system-id

Disabled
PROTOCOL PVST
Version 8.3.7.0

Introduced on S4810

Version 8.3.1.0

Introduced

FTOS(conf-pvst)#do show spanning-tree pvst vlan 5 brief
VLAN 5
Executing IEEE compatible Spanning Tree Protocol
Root ID
Priority 32773, Address 0001.e832.73f7
Root Bridge hello time 2, max age 20, forward delay 15
Bridge ID
Priority 32773 (priority 32768 sys-id-ext 5), Address 0001.e832.73f7
We are the root of Vlan 5
Configured hello time 2, max age 20, forward delay 15
Interface
Name
---------Gi 0/10
Gi 0/12

PortID
-------128.140
128.142

Prio
---128
128

Cost
-----200000
200000

Interface
Name
Role
PortID
---------- ------ ------------------------------Gi 0/10
Desg
128.140
Gi 0/12
Dis
128.142

Related
Commands

protocol spanning-tree pvst

Sts
--FWD
DIS

Designated
Cost
Bridge ID
PortID
------- -------------------- -------0
32773 0001.e832.73f7 128.140
0
32773 0001.e832.73f7 128.142

Prio Cost
Sts Cost
Link-type Edge
---- ------- --- ------- --------128
128

200000
200000

FWD 0
DIS 0

P2P
P2P

No
No

Enter SPANNING TREE mode on the switch.

protocol spanning-tree pvst
ces

Syntax

Enter the PVST+ mode to enable PVST+ on a device.

protocol spanning-tree pvst

To disable PVST+, use the disable command.
Defaults

This command has no default value or behavior.

Per-VLAN Spanning Tree Plus (PVST+) | 1161

www.dell.com | support.dell.com

Command Modes
Command
History

CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 6.2.1.1

Introduced

Example

Usage
Information
Related
Commands

FTOS#conf
FTOS(conf)#protocol spanning-tree pvst
FTOS(conf-pvst)#no disable
FTOS(conf-pvst)#vlan 2 bridge-priority 4096
FTOS(conf-pvst)#vlan 3 bridge-priority 16384
FTOS(conf-pvst)#
FTOS(conf-pvst)#show config
!
protocol spanning-tree pvst
no disable
vlan 2 bridge-priority 4096
vlan 3 bridge-priority 16384
FTOS#

Once PVST+ is enabled, the device runs an STP instance for each VLAN it supports.

disable

Disable PVST+.

show spanning-tree pvst

Display the PVST+ configuration.

show spanning-tree pvst
ces
Syntax
Parameters

1162

|

View the Per-VLAN Spanning Tree configuration.
show spanning-tree pvst [vlan vlan-id] [brief] [guard]
vlan vlan-id

(OPTIONAL) Enter the keyword vlan followed by the VLAN ID.
Range: 1 to 4094

brief

(OPTIONAL) Enter the keyword brief to view a synopsis of the PVST+
configuration information.

Per-VLAN Spanning Tree Plus (PVST+)

Defaults
Command Modes

Interface

(OPTIONAL) Enter one of the interface keywords along with the slot/port
information:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by
the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by a
number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed
by the slot/port information.

guard

(OPTIONAL) Enter the keyword guard to display the type of guard enabled on a
PVST interface and the current port state.

No default behavior or values
EXEC
EXEC Privilege

Command
History

Example
(brief)

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.4.2.1

Support for the optional guard keyword was added on the C-Series, S-Series,
and E-Series TeraScale.

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 6.4.1.0

Expanded to display port error disable state (EDS) caused by loopback BPDU
inconsistency and Port VLAN ID inconsistency.

Version 6.2.1.1

Introduced

FTOS#show spanning-tree pvst vlan 3 brief
VLAN 3
Executing IEEE compatible Spanning Tree Protocol
Root ID
Priority 4096, Address 0001.e801.6aa8
Root Bridge hello time 2, max age 20, forward delay 15
Bridge ID
Priority 16384, Address 0001.e805.e306
Configured hello time 2, max age 20, forward delay 15
Interface
Name
---------Gi 1/0
Gi 1/1
Gi 1/16
Gi 1/17

PortID
-------128.130
128.131
128.146
128.147

Interface
Name
---------Gi 1/0
Gi 1/1
Gi 1/16

Role
-----Root
Altr
Desg

Prio
---128
128
128
128

Cost
-----20000
20000
20000
20000

PortID
-------128.130
128.131
128.146

Prio
---128
128
128

Sts
--FWD
BLK
FWD
FWD

Designated
Bridge ID
PortID
-------------------- -------4096 0001.e801.6aa8 128.426
4096 0001.e801.6aa8 128.427
16384 0001.e805.e306 128.146
16384 0001.e805.e306 128.147

Cost
------20000
20000
20000
20000

Cost
------20000
20000
20000

Sts
--FWD
BLK
FWD

Cost
------20000
20000
20000

Link-type
--------P2P
P2P
P2P

Edge
---No
No
Yes

Per-VLAN Spanning Tree Plus (PVST+) | 1163

www.dell.com | support.dell.com

Gi 1/17

Example
(vlan)

Desg

128.147

128

20000

FWD 20000

P2P

Yes

FTOS#show spanning-tree pvst vlan 2
VLAN 2
Root Identifier has priority 4096, Address 0001.e805.e306
Root Bridge hello time 2, max age 20, forward delay 15
Bridge Identifier has priority 4096, Address 0001.e805.e306
Configured hello time 2, max age 20, forward delay 15
We are the root of VLAN 2
Current root has priority 4096, Address 0001.e805.e306
Number of topology changes 3, last change occured 00:57:00
Port 130 (GigabitEthernet 1/0) is designated Forwarding
Port path cost 20000, Port priority 128, Port Identifier 128.130
Designated root has priority 4096, address 0001.e805.e3:06
Designated bridge has priority 4096, address 0001.e805.e3:06
Designated port id is 128.130, designated path cost 0
Number of transitions to forwarding state 1
BPDU sent 1567, received 3
The port is not in the Edge port mode
Port 131 (GigabitEthernet 1/1) is designated Forwarding
Port path cost 20000, Port priority 128, Port Identifier 128.131
Designated root has priority 4096, address 0001.e805.e3:06
Designated bridge has priority 4096, address 0001.e805.e3:06
Designated port id is 128.131, designated path cost 0
Number of transitions to forwarding state 1
BPDU sent 1567, received 0
The port is not in the Edge port mode
Port 146 (GigabitEthernet 1/16) is designated Forwarding
Port path cost 20000, Port priority 128, Port Identifier 128.146
Designated root has priority 4096, address 0001.e805.e3:06
Designated bridge has priority 4096, address 0001.e805.e3:06
Designated port id is 128.146, designated path cost 0
Number of transitions to forwarding state 1
BPDU sent 1578, received 0
The port is in the Edge port mode
Port 147 (GigabitEthernet 1/17) is designated Forwarding
Port path cost 20000, Port priority 128, Port Identifier 128.147
Designated root has priority 4096, address 0001.e805.e3:06
Designated bridge has priority 4096, address 0001.e805.e3:06
Designated port id is 128.147, designated path cost 0
Number of transitions to forwarding state 1
BPDU sent 1579, received 0
The port is in the Edge port mode

Example
(with EDS & LBK)

FTOS#show spanning-tree pvst vlan 2 interface gigabitethernet 1/0
GigabitEthernet 1/0 of VLAN 2 is LBK_INC discarding
Edge port:no (default) port guard :none (default)
Link type: point-to-point (auto) bpdu filter:disable (default)
Bpdu guard :disable (default)
Bpdus sent 152, received 27562
Interface
Designated
Name
PortID
Prio Cost
Sts Cost
Bridge ID
PortID
--------- -------- ---- ------- --- ------- -------------------- -------Gi 1/0
128.1223 128 20000
EDS 0
32768 0001.e800.a12b 128.1223

1164

|

Per-VLAN Spanning Tree Plus (PVST+)

Example
(with EDS &
PVID)

FTOS#show spanning-tree pvst vlan 2 interface gigabitethernet 1/0
GigabitEthernet 1/0 of VLAN 2 is PVID_INC discarding
Edge port:no (default) port guard :none (default)
Link type: point-to-point (auto) bpdu filter:disable (default)
Bpdu guard :disable (default)
Bpdus sent 1, received 0
Interface
Designated
Name
PortID
Prio Cost
Sts Cost
Bridge ID
PortID
--------- -------- ---- ------- --- ------- -------------------- -------Gi 1/0
128.1223 128 20000
EDS 0
32768 0001.e800.a12b 128.1223

Example
(guard)

FTOS#show spanning-tree pvst vlan 5 guard
Interface
Name
Instance
Sts
Guard type
--------- ------------------------Gi 0/1
5
INCON(Root) Rootguard
Gi 0/2
5
FWD
Loopguard
Gi 0/3
5
EDS(Shut)
Bpduguard

Table 41-1.

Related
Commands

show spanning-tree pvst guard Command Information

Field

Description

Interface Name

PVST interface

Instance

PVST instance

Sts

Port state: root-inconsistent (INCON Root), forwarding (FWD), listening
(LIS), blocking (BLK), or shut down (EDS Shut)

Guard Type

Type of STP guard configured (Root, Loop, or BPDU guard)

spanning-tree pvst

Configure PVST+ on an interface.

spanning-tree pvst
ces

Syntax

Parameters

Configure a PVST+ interface with one of these settings: edge port with optional Bridge Port
Data Unit (BPDU) guard, port disablement if an error condition occurs, port priority or cost
for a VLAN range, loop guard, or root guard.
spanning-tree pvst {edge-port [bpduguard [shutdown-on-violation]] | err-disable | vlan
vlan-range {cost number | priority value} | loopguard | rootguard}
edge-port

Enter the keyword edge-port to configure the interface as a PVST+ edge port.

bpduguard

Enter the keyword portfast to enable Portfast to move the interface into
forwarding mode immediately after the root fails.
Enter the keyword bpduguard to disable the port when it receives a BPDU.

shutdown-on-vi
olation

(OPTIONAL) Enter the keyword shutdown-on-violation to hardware disable
an interface when a BPDU is received and the port is disabled.

Per-VLAN Spanning Tree Plus (PVST+) | 1165

www.dell.com | support.dell.com

Defaults
Command Modes
Command
History

Usage
Information

err-disable

Enter the keyword err-disable to enable the port to be put into error-disable
state (EDS) if an error condition occurs.

vlan vlan-range

Enter the keyword vlan followed by the VLAN number(s).
Range: 1 to 4094

cost number

Enter the keyword cost followed by the port cost value.
Range: 1 to 200000
Defaults:
100 Mb/s Ethernet interface = 200000
1-Gigabit Ethernet interface = 20000
10-Gigabit Ethernet interface = 2000
Port Channel interface with one 100 Mb/s Ethernet = 200000
Port Channel interface with one 1-Gigabit Ethernet = 20000
Port Channel interface with one 10-Gigabit Ethernet = 2000
Port Channel with two 1-Gigabit Ethernet = 18000
Port Channel with two 10-Gigabit Ethernet = 1800
Port Channel with two 100-Mbps Ethernet = 180000

priority value

Enter the keyword priority followed the Port priority value in increments of
16.
Range: 0 to 240. Default: 128

loopguard

(C-, S-, and E-Series TeraScale only) Enter the keyword loopguard to enable
loop guard on a PVST+ port or port-channel interface.

rootguard

(C-, S-, and E-Series TeraScale only) Enter the keyword rootguard to enable
root guard on a PVST+ port or port-channel interface.

Not Configured
INTERFACE
Version 8.4.2.1

Introduced the loopguard and rootguard options on the E-Series TeraScale,
C-Series, and S-Series.

Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduced hardware shutdown-on-violation option

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 7.4.1.0

Added the optional Bridge Port Data Unit (BPDU) guard

Version 6.2.1.1

Introduced

The BPDU guard option prevents the port from participating in an active STP topology in
case a BPDU appears on a port unintentionally, or is misconfigured, or is subject to a DOS
attack. This option places the port into an error disable state if a BPDU appears, and a
message is logged so that the administrator can take corrective action.
Note: A port configured as an edge port, on a PVST switch, will immediately
transition to the forwarding state. Only ports connected to end-hosts should be
configured as an edge port. Consider an edge port similar to a port with a
spanning-tree portfast enabled.

1166

|

Per-VLAN Spanning Tree Plus (PVST+)

If shutdown-on-violation is not enabled, BPDUs will still be sent to the RPM CPU.
Root guard and loop guard cannot be enabled at the same time on a port. For example, if you
configure loop guard on a port on which root guard is already configured, the following error
message is displayed:
% Error: RootGuard is configured. Cannot configure LoopGuard.

When used in a PVST+ network, loop guard is performed per-port or per-port channel at a
VLAN level. If no BPDUs are received on a VLAN interface, the port or port-channel
transitions to a loop-inconsistent (blocking) state only for this VLAN.
Enabling Portfast BPDU guard and loop guard at the same time on a port results in a port that
remains in a blocking state and prevents traffic from flowing through it. For example, when
Portfast BPDU guard and loop guard are both configured:
•
•
Example

If a BPDU is received from a remote device, BPDU guard places the port in an
err-disabled blocking state and no traffic is forwarded on the port.
If no BPDU is received from a remote device, loop guard places the port in a
loop-inconsistent blocking state and no traffic is forwarded on the port.

FTOS(conf-if-gi-1/1)#spanning-tree pvst vlan 3 cost 18000
FTOS(conf-if-gi-1/1)#end
FTOS(conf-if-gi-1/1)#show config
!
interface GigabitEthernet 1/1
no ip address
switchport
spanning-tree pvst vlan 3 cost 18000
no shutdown
FTOS(conf-if-gi-1/1)#end
FTOS#

Related
Commands

show spanning-tree pvst

View PVST+ configuration

spanning-tree pvst err-disable
ces

Syntax
Defaults

Command Modes

Place ports in an err-disabled state if they receive a PVST+ BPDU when they are members an
untagged VLAN.
spanning-tree pvst err-disable cause invalid-pvst-bpdu

Enabled; ports are placed in err-disabled state if they receive a PVST+ BPDU when they are
members of an untagged VLAN.
INTERFACE

Per-VLAN Spanning Tree Plus (PVST+) | 1167

www.dell.com | support.dell.com

Command
History

Usage
Information

Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduced

Some non-Dell Force10 systems which have hybrid ports participating in PVST+ transmit
two kinds of BPDUs: an 802.1D BPDU and an untagged PVST+ BPDU.
Dell Force10 systems do not expect PVST+ BPDU on an untagged port. If this happens,
FTOS places the port in error-disable state. This behavior might result in the network not
converging. To prevent FTOS from executing this action, use the command no spanning-tree
pvst err-disable cause invalid-pvst-bpdu.

Related
Commands

show spanning-tree pvst

View the PVST+ configuration.

tc-flush-standard
ces

Syntax

Enable the MAC address flushing upon receiving every topology change notification.

tc-flush-standard

To disable, use the no tc-flush-standard command.
Defaults
Command Modes
Command
History

Usage
Information

Disabled
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 6.5.1.0

Introduced

By default FTOS implements an optimized flush mechanism for PVST+. This helps in
flushing the MAC addresses only when necessary (and less often) allowing for faster
convergence during topology changes. However, if a standards-based flush mechanism is
needed, this knob command can be turned on to enable flushing MAC addresses upon
receiving every topology change notification.

vlan bridge-priority
ces

1168

|

Set the PVST+ bridge-priority for a VLAN or a set of VLANs.

Per-VLAN Spanning Tree Plus (PVST+)

Syntax

vlan vlan-range bridge-priority value

To return to the default value, enter no vlan bridge-priority command.
Parameters

Defaults
Command Modes
Command
History

Related
Commands

vlan vlan-range

Enter the keyword vlan followed by the VLAN number(s).
Range: 1 to 4094

bridge-priority value

Enter the keyword bridge-priority followed by the bridge priority
value in increments of 4096.
Range: 0 to 61440
Default: 32768

32768
CONFIGURATION (conf-pvst)
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 6.2.1.1

Introduced

vlan forward-delay

Change the time interval before FTOS transitions to the forwarding
state

vlan hello-time

Change the time interval between BPDUs

vlan max-age

Change the time interval before PVST+ refreshes

show spanning-tree pvst

Display the PVST+ configuration

vlan forward-delay
ces

Syntax

Set the amount of time the interface waits in the Listening State and the Learning State before
transitioning to the Forwarding State.
vlan vlan-range forward-delay seconds

To return to the default setting, enter no vlan forward-delay command.
Parameters

vlan vlan-range

Enter the keyword vlan followed by the VLAN number(s).
Range: 1 to 4094

forward-delay

Enter the keyword forward-delay followed by the time interval, in seconds,
that FTOS waits before transitioning PVST+ to the forwarding state.
Range: 4 to 30 seconds
Default: 15 seconds

seconds

Defaults

15 seconds

Per-VLAN Spanning Tree Plus (PVST+) | 1169

www.dell.com | support.dell.com

Command Modes
Command
History

Related
Commands

CONFIGURATION (conf-pvst)
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 6.2.1.1

Introduced

vlan bridge-priority

Set the bridge-priority value

vlan hello-time

Change the time interval between BPDUs

vlan max-age

Change the time interval before PVST+ refreshes

show spanning-tree pvst

Display the PVST+ configuration

vlan hello-time
ces

Syntax

Set the time interval between generation of PVST+ 7Bridge Protocol Data Units (BPDUs).

vlan vlan-range hello-time seconds

To return to the default value, enter no vlan hello-time command.
Parameters

Defaults
Command Modes
Command
History

Related
Commands

1170

|

vlan vlan-range

Enter the keyword vlan followed by the VLAN number(s).
Range: 1 to 4094

hello-time seconds

Enter the keyword hello-time followed by the time interval, in
seconds, between transmission of BPDUs.
Range: 1 to 10 seconds
Default: 2 seconds

2 seconds
CONFIGURATION (conf-pvst)
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 6.2.1.1

Introduced

vlan bridge-priority

Set the bridge-priority value

vlan forward-delay

Change the time interval before FTOS transitions to the forwarding
state

vlan max-age

Change the time interval before PVST+ refreshes

show spanning-tree pvst

Display the PVST+ configuration

Per-VLAN Spanning Tree Plus (PVST+)

vlan max-age
ces

Syntax

Set the time interval for the PVST+ bridge to maintain configuration information before
refreshing that information.
vlan vlan-range max-age seconds

To return to the default, use the no vlan max-age command.
Parameters

Defaults
Command Modes
Command
History

Related
Commands

vlan vlan-range

Enter the keyword vlan followed by the VLAN number(s).
Range: 1 to 4094

max-age seconds

Enter the keyword max-age followed by the time interval, in
seconds, that FTOS waits before refreshing configuration
information.
Range: 6 to 40 seconds
Default: 20 seconds

20 seconds
CONFIGURATION (conf-pvst)
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 6.2.1.1

Introduced

vlan bridge-priority

Set the bridge-priority value

vlan forward-delay

Change the time interval before FTOS transitions to the forwarding
state

vlan hello-time

Change the time interval between BPDUs

show spanning-tree pvst

Display the PVST+ configuration

Per-VLAN Spanning Tree Plus (PVST+) | 1171

www.dell.com | support.dell.com
1172

|

Per-VLAN Spanning Tree Plus (PVST+)

42
Quality of Service (QoS)
Overview
FTOS commands for Quality of Service (QoS) include traffic conditioning and congestion
control. QoS commands are supported on all Dell Force10 platforms, as indicated by the
characters that appear under each of the command headings: c C-Series, s S-Series,
or Z Z-Series.
This chapter contains the following sections:
•
•
•
•

Global Configuration Commands
Per-Port QoS Commands
Policy-Based QoS Commands
Queue-Level Debugging (E-Series Only)

Global Configuration Commands
•

qos-rate-adjust

qos-rate-adjust
ces

Syntax
Parameters

Defaults

By default, while rate limiting, policing, and shaping, FTOS does not include the Preamble,
SFD, or the IFG fields. These fields are overhead; only the fields from MAC Destination
Address to the CRC are used for forwarding and are included in these rate metering
calculations. You can optionally include overhead fields in rate metering calculations by
enabling QoS Rate Adjustment.
qos-rate-adjustment overhead-bytes
overhead-bytes

Include a specified number of bytes of packet overhead to include in rate
limiting, policing, and shaping calculations.
C-Series and S-Series Range: 1-31
E-Series Range: 1-144

QoS Rate Adjustment is disabled by default, and no qos-rate-adjust is listed in the
running-configuration

Quality of Service (QoS) | 1173

www.dell.com | support.dell.com

Command Modes
Command
History

CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 8.3.1.0

Introduced

Per-Port QoS Commands
Per-port QoS (“port-based QoS”) allows users to defined QoS configuration on a
per-physical-port basis. The commands include:
•
•
•
•
•
•
•
•

dot1p-priority
rate limit
rate police
rate shape
service-class dot1p-mapping
service-class dynamic dot1p
show interfaces rate
strict-priority unicast queue

dot1p-priority
ces

Syntax

Assign a value to the IEEE 802.1p bits on the traffic received by this interface.

dot1p-priority priority-value

To delete the IEEE 802.1p configuration on the interface, enter no dot1p-priority.

1174

|

Quality of Service (QoS)

Parameters

priority-value

Enter a value from 0 to 7.
dot1p
Queue Number
0
2
1
0
2
1
3
3
4
4
5
5
6
6
7
7
For the C-Series and S-Series, enter a value 0, 2, 4, or 6
dot1p
Queue Number
0
1
1
0
2
0
3
1
4
2
5
2
6
3
7
3

Defaults

No default behavior or values

Command Modes

INTERFACE

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series
Usage
Information

The dot1p-priority command changes the priority of incoming traffic on the interface. The
system places traffic marked with a priority in the correct queue and processes that traffic
according to its queue.
When you set the priority for a Port Channel, the physical interfaces assigned to the Port
Channel are configured with the same value. You cannot assign dot1p-priority command to
individual interfaces in a Port Channel.

rate limit
e
Syntax

Limit the outgoing traffic rate on the selected interface.
rate limit [kbps] committed-rate [burst-KB] [peak [kbps] peak-rate [burst-KB]] [vlan vlan-id]

Quality of Service (QoS) | 1175

www.dell.com | support.dell.com

Parameters

Defaults

kbps

Enter this keyword to specify the rate limit in Kilobits per second (Kbps).
On the E-Series, Force10 recommends using a value greater than or equal to
512 as lower values does not yield accurate results.The default granularity
is Megabits per second (Mbps).
Range: 0 to 10000000

committed-rate

Enter the bandwidth in Mbps
Range: 0 to 10000

burst-KB

(OPTIONAL) Enter the burst size in KB.
Range: 16 to 200000
Default: 50

peak peak-rate

(OPTIONAL) Enter the keyword peak followed by a number to specify the
peak rate in Mbps.
Range: 0 to 10000

vlan vlan-id

(OPTIONAL) Enter the keyword vlan followed by a VLAN ID to limit
traffic to those specific VLANs.
Range: 1 to 4094

Granularity for committed-rate and peak-rate is Mbps unless the kbps option is used.

Command Modes

INTERFACE

Command
History

Version 8.2.1.0

Added kbps option on E-Series.

Version 7.7.1.0

Removed from C-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series
Usage
Information

Note: Per Port rate limit and rate police is supported for Layer 2 tagged and
untagged switched traffic and for Layer 3 traffic. Per VLAN rate limit and rate police is
supported on only tagged ports with Layer 2 switched traffic.

On one interface, you can configure the rate limit or rate police command for a VLAN or you
can configure the rate limit or the rate police command for the interface. For each physical
interface, you can configure six rate limit commands specifying different VLANS.
If you receive the error message:
%Error: Specified VLANs overlap with existing config.
After configuring VLANs in the rate police command, check to see if the same VLANs are
used in rate limit command on other interfaces. To clear the problem, remove the rate limit
configuration(s), and re-configure the rate police command. After the rate police command is
configured, return to the other interfaces and re-apply the rate limit configuration.

1176

|

Quality of Service (QoS)

rate police
ces

Syntax
Parameters

Defaults

Police the incoming traffic rate on the selected interface.

rate police [kbps] committed-rate [burst-KB] [peak [kbps] peak-rate [burst-KB]] [vlan vlan-id]
kbps

Enter this keyword to specify the rate limit in Kilobits per second (Kbps).
On C-Series, S-Series and S4810, make the following value a multiple of
64. On the E-Series, Force10 recommends using a value greater than or
equal to 512 as lower values does not yield accurate results. The default
granularity is Megabits per second (Mbps).
Range: 0 to 10000000

committed-rate

Enter a number as the bandwidth in Mbps.
Range: 0 to 10000

burst-KB

(OPTIONAL) Enter a number as the burst size in KB.
Range: 16 to 200000
Default: 50

peak peak-rate

(OPTIONAL) Enter the keyword peak followed by a number to specify
the peak rate in Mbps.
Range: 0 to 10000

vlan vlan-id

(OPTIONAL) Enter the keyword vlan followed by a VLAN ID to police
traffic to those specific VLANs.
Range: 1 to 4094

Granularity for commit ed-rate and peak-rate is Mbps unless the kbps option is used.

Command Mode

INTERFACE

Command
History

version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Added kbps option on C-Series, E-Series, and S-Series.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series
Usage
Information

Note: Per Port rate limit and rate police is supported for Layer 2 tagged and
untagged switched traffic and for Layer 3 traffic. Per VLAN rate limit and rate police is
supported on only tagged ports with Layer 2 switched traffic.

C-Series and S-Series
On one interface, you can configure the rate police command for a VLAN or you can
configure the rate police command for an interface. For each physical interface, you can
configure three rate police commands specifying different VLANS.

Quality of Service (QoS) | 1177

www.dell.com | support.dell.com

E-Series
On one interface, you can configure the rate limit or rate police command for a VLAN or you
can configure the rate limit or the rate police command for the interface.
For each physical interface, you can configure six rate police commands specifying different
VLANS.
After configuring VLANs in the rate police command, if this error message appears:
%Error: Specified VLANs overlap with existing config.
Check to if the same VLANs are used with the rate limit command on other interfaces. To
clear the problem, remove the rate limit configuration(s), and re-configure the rate police
command. After the rate police command is configured, return to the other interfaces and
re-apply the rate limit configuration.
Related
Commands

rate-police

Police traffic output as part of the designated policy.

rate shape
ces

Syntax
Parameters

Defaults

Shape the traffic output on the selected interface.

rate shape [kbps] rate [burst-KB]
kbps

Enter this keyword to specify the rate limit in Kilobits per second (Kbps).
On C-Series and S-Series make the following value a multiple of 64. The
default granularity is Megabits per second (Mbps).
Range: 0-10000000

rate

Enter the outgoing rate in multiples of 10 Mbps.
Range: 10 to 10000

burst-KB

(OPTIONAL) Enter a number as the burst size in KB.
Range: 0 to 10000
Default: 10

Granularity for rate is Mbps unless the kbps option is used.

Command Modes

INTERFACE

Command
History

Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Added kbps option on C-Series, E-Series, and Series.

Version 7.6.1.0

Introduced on S-Series and on C-Series

pre-Version 6.1.1.1 Introduced on E-Series

1178

|

Quality of Service (QoS)

Usage
Information

Related
Commands

On 40-port 10G linecards, if the traffic is shaped between 64 and 1000kbs, for some values
the shaped rate is much less than the value configured. Do not use values in this range for 10G
interfaces.
rate-shape

Shape traffic output as part of the designated policy.

service-class dot1p-mapping
Map the service class dot1p value to a CoS queue value.
Syntax

Parameters

Defaults

Command Modes
Command
History

Related
Commands

Usage
Information

service-class dot1p-mapping {dot1p0 value | dot1p1 value | dot1p2 value | dot1p3 value |
dot1p4 value| dot1p5 value | dot1p6 value | dot1p7 value}
dot1p value

Enter the keyword dot1p value followed by the CoS queue value that will be mapped.
dot1p Range: 0 to 7.
CoS queue value Range 0 to 3.

For each dot1p Priority, the default CoS queue value is shown below:
dot1p Priority

0

1

2

3

4

5

6

7

CoS Queue

0

0

0

1

2

3

3

3

CONFIGURATION
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

show qos
dot1p-queue-mapping

Displays the dot1p priority to queue mapping on the switch.

To apply dot1p-queue-mapping, use the service-class dynamic dot1p command.

service-class dynamic dot1p
ces

Syntax

Honor all 802.1p markings on incoming switched traffic on an interface (from INTERFACE
mode) or on all interfaces (from CONFIGURATION mode). A CONFIGURATION mode
entry supersedes INTERFACE mode entries.
service-class dynamic dot1p

To return to the default setting, enter no service-class dynamic dot1p.

Quality of Service (QoS) | 1179

www.dell.com | support.dell.com

Defaults

Command Modes

All dot1p traffic is mapped to Queue 0 unless service-class dynamic dot1p is enabled. Then
the default mapping is as follows:
Table 42-1.

Default dot1p to Queue Mapping

dot1p

E-Series
Queue ID

C-Series
Queue ID

S-Series
Queue ID

0

2

1

0

1

0

0

0

2

1

0

0

3

3

1

1

4

4

2

2

5

5

2

3

6

6

3

3

7

7

3

3

INTERFACE
CONFIGURATION (C-Series and S-Series only)

Command
History

Usage
Information

Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Available globally on the C-Series and S-Series so that the configuration
applies to all ports.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 6.5.1.0

Expanded command to permit configuration on port channels

pre-Version 6.1.1.1

Introduced on E-Series

Enter this command to honor all incoming 802.1p markings, on incoming switched traffic, on
the interface. By default, this facility is not enabled (that is, the 802.1p markings on incoming
traffic are not honored).
This command can be applied on both physical interfaces and port channels. When you set
the service-class dynamic for a port channel, the physical interfaces assigned to the port
channel are automatically configured; you cannot assign the service-class dynamic command
to individual interfaces in a port channel.
On the C-Series and S-Series all traffic is by default mapped to the same queue, Queue 0. If
you honor dot1p on ingress, then you can create service classes based the queueing strategy
using the command service-class dynamic dot1p from INTERFACE mode. You may apply this
queuing strategy to all interfaces by entering this command from CONFIGURATION mode.
•
•

1180

|

Quality of Service (QoS)

All dot1p traffic is mapped to Queue 0 unless service-class dynamic dot1p is
enabled on an interface or globally.
Layer 2 or Layer 3 service policies supercede dot1p service classes.

service-class bandwidth-weight
cs

Specify a minimum bandwidth for queues

Syntax

service-class bandwidth-weight queue0 number queue1 number queue2 number queue3 number

Parameters

Defaults
Command Modes
Command
History
Usage
Information

number

Enter the bandwidth-weight. The value must be a power of 2.
Range 1-1024.

None
CONFIGURATION
Version 8.2.1.0

Introduced on C-Series and S-Series.

Guarantee a minimum bandwidth to different queues globally using the command
service-class bandwidth-weight from CONFIGURATION mode. The command is applied in the
same way as the bandwidth-weight command in an output QoS policy. The bandwidth-weight
command in QOS-POLICY-OUT mode super cedes the service-class bandwidth-weight
command.

show interfaces rate
e
Syntax
Parameters

Command Mode

Display information of either rate limiting or rate policing on the interface.
show interfaces [interface] rate [limit | police]
interface

(OPTIONAL) Enter the following keywords and slot/port or number
information:
• For a 100/1000 Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the slot/port
information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.

limit

(OPTIONAL) Enter the keyword limit to view the outgoing traffic rate.

police

(OPTIONAL) Enter the keyword police to view the incoming traffic rate.

EXEC
EXEC Privilege

Command
History
Example
(rate limit)

pre-Version 6.1.1.1 Introduced on E-Series
FTOS#show interfaces gigabitEthernet 1/1 rate limit
Rate limit 300 (50) peak 800 (50)
Traffic Monitor 0: normal 300 (50) peak 800 (50)

Quality of Service (QoS) | 1181

www.dell.com | support.dell.com

Out of profile yellow 23386960 red 320605113
Traffic Monitor 1: normal NA peak NA
Out of profile yellow 0 red 0
Traffic Monitor 2: normal NA peak NA
Out of profile yellow 0 red 0
Traffic Monitor 3: normal NA peak NA
Out of profile yellow 0 red 0
Traffic Monitor 4: normal NA peak NA
Out of profile yellow 0 red 0
Traffic Monitor 5: normal NA peak NA
Out of profile yellow 0 red 0
Traffic Monitor 6: normal NA peak NA
Out of profile yellow 0 red 0
Traffic Monitor 7: normal NA peak NA
Out of profile yellow 0 red 0
Total: yellow 23386960 red 320605113

Table 42-2.
Field

Description

Rate limit

Committed rate (Mbps) and burst size (KB) of the committed rate

peak

Peak rate (Mbps) and burst size (KB) of the peak rate

Traffic monitor 0

Traffic coming to class 0

Normal

Committed rate (Mbps) and burst size (KB) of the committed rate

peak

Peak rate (Mbps) and burst size (KB) of the peak rate

Out of profile Yellow

Number of packets that have exceeded the configured committed rate

Out of profile Red

Number of packets that have exceeded the configured peak rate

Traffic monitor 1

Traffic coming to class 1

Traffic monitor 2

Traffic coming to class 2

Traffic monitor 3

Traffic coming to class 3

Traffic monitor 4

Traffic coming to class 4

Traffic monitor 5

Traffic coming to class 5

Traffic monitor 6

Traffic coming to class 6

Traffic monitor 7

Traffic coming to class 7

Total: yellow

Total number of packets that have exceeded the configured committed rate

Total: red

Total number of packets that have exceeded the configured peak rate

Example
(rate police)

1182

|

show interfaces Command Example Fields

Quality of Service (QoS)

FTOS#show interfaces gigabitEthernet 1/2 rate police
Rate police 300 (50) peak 800 (50)
Traffic Monitor 0: normal 300 (50) peak 800 (50)
Out of profile yellow 23386960 red 320605113
Traffic Monitor 1: normal NA peak NA
Out of profile yellow 0 red 0
Traffic Monitor 2: normal NA peak NA
Out of profile yellow 0 red 0
Traffic Monitor 3: normal NA peak NA
Out of profile yellow 0 red 0
Traffic Monitor 4: normal NA peak NA
Out of profile yellow 0 red 0
Traffic Monitor 5: normal NA peak NA
Out of profile yellow 0 red 0

Traffic Monitor 6: normal NA peak NA
Out of profile yellow 0 red 0
Traffic Monitor 7: normal NA peak NA
Out of profile yellow 0 red 0
Total: yellow 23386960 red 320605113

Table 42-3.

show interfaces police Command Example Fields

Field

Description

Rate police

Committed rate (Mbps) and burst size (KB) of the committed rate

peak

Peak rate (Mbps) and burst size (KB) of the peak rate

Traffic monitor 0

Traffic coming to class 0

Normal

Committed rate (Mbps) and burst size (KB) of the committed rate

peak

Peak rate (Mbps) and burst size (KB) of the peak rate

Out of profile Yellow

Number of packets that have exceeded the configured committed rate

Out of profile Red

Number of packets that have exceeded the configured peak rate

Traffic monitor 1

Traffic coming to class 1

Traffic monitor 2

Traffic coming to class 2

Traffic monitor 3

Traffic coming to class 3

Traffic monitor 4

Traffic coming to class 4

Traffic monitor 5

Traffic coming to class 5

Traffic monitor 6

Traffic coming to class 6

Traffic monitor 7

Traffic coming to class 7

Total: yellow

Total number of packets that have exceeded the configured committed
rate

Total: red

Total number of packets that have exceeded the configured peak rate

strict-priority unicast queue
ces

Syntax
Parameters

Defaults
Command Modes
Command
History

Configure a unicast queue as a strict-priority (SP) queue.

strict-priority unicast queue number
queue number

Enter the keyword unicast followed by the queue number.
C-Series, S-Series, S4810 Range: 1 to 3
E-Series Range: 1 to 7

No default behavior or value
CONFIGURATION
Version 8.3.12.0

Introduced on S4810.

Version 7.6.1.0

Introduced on S-Series

Quality of Service (QoS) | 1183

www.dell.com | support.dell.com

Version 7.5.1.0

pre-Version 6.1.1.1 Introduced on E-Series
Usage
Information

Once a unicast queue is configured as strict-priority, that particular queue, on the entire
chassis, is treated as strict-priority queue. Traffic for a strict priority is scheduled before any
other queues are serviced. For example, if you send 100% line rate traffic over the SP queue,
it will starve all other queues on the ports on which this traffic is flowing.

Policy-Based QoS Commands
Policy-based traffic classification is handled with class maps. These maps classify unicast
traffic into one of eight classes in E-Series and one of four classes in C-Series, S-Series and
. FTOS enables you to match multiple class maps and specify multiple match criteria.
Policy-based QoS is not supported on logical interfaces, such as port-channels, VLANS, or
loopbacks. The commands are:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

1184

Introduced on C-Series

|

Quality of Service (QoS)

bandwidth-percentage
bandwidth-weight
class-map
clear qos statistics
description
match ip access-group
match ip dscp
match ip precedence
match mac access-group
match mac dot1p
match mac vlan
policy-aggregate
policy-map-input
policy-map-output
qos-policy-input
qos-policy-output
queue backplane ignore-backpressure
queue egress
queue ingress
rate-limit
rate-police
rate-shape
service-policy input
service-policy output
service-queue

•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

set
show cam layer2-qos
show cam layer3-qos
show qos class-map
show qos dot1p-queue-mapping
show qos policy-map
show qos policy-map-input
show qos policy-map-output
show qos qos-policy-input
show qos qos-policy-output
show qos statistics
show qos wred-profile
test cam-usage
threshold
trust
wred
wred-profile

bandwidth-percentage
Assign a percentage of weight to class/queue.

e
Syntax

bandwidth-percentage percentage

To remove the bandwidth percentage, use the no bandwidth-percentage command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

Related
Commands

percentage

Enter the percentage assignment of weight to class/queue.
Range: 0 to 100% (granularity 1%)

No default behavior or values
CONFIGURATION (conf-qos-policy-out)
Version 8.3.7.0

Introduced on S4810

Version 6.2.1.1

Introduced on E-Series

The unit of bandwidth percentage is 1%. A bandwidth percentage of 0 is allowed and will
disable the scheduling of that class. If the sum of the bandwidth percentages given to all eight
classes exceeds 100%, the bandwidth percentage will automatically scale down to 100%.
qos-policy-output

Create a QoS output policy.

Quality of Service (QoS) | 1185

www.dell.com | support.dell.com

bandwidth-weight
cs

Assign a priority weight to a queue.

Syntax

bandwidth-weight weight

To remove the bandwidth weight, use the no bandwidth-weight command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

weight

Enter the weight assignment to queue.
Range: 1 to 1024 (in increments of powers of 2: 2, 4, 8, 16, 32, 64,
128, 256, 512, or 1024)

No default behavior or values
CONFIGURATION (conf-qos-policy-out)
Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

This command provides a minimum bandwidth guarantee to traffic flows in a particular
queue. The minimum bandwidth is provided by scheduling packets from that queue a certain
number of times relative to scheduling packets from the other queues using the Deficit Round
Robin method.
Note: This command is not available on the S4810. Use the command
bandwidth-percentage.

Related
Commands

qos-policy-output

Create a QoS output policy.

class-map
ces

Syntax
Parameters

1186

|

Create/access a class map. Class maps differentiate traffic so that you can apply separate
quality of service policies to each class.
class-map {match-all | match-any} class-map-name [layer2]
match-all

Determines how packets are evaluated when multiple match criteria
exist. Enter the keyword match-all to determine that the packets
must meet all the match criteria in order to be considered a member
of the class.

match-any

Determines how packets are evaluated when multiple match criteria
exist. Enter the keyword match-any to determine that the packets
must meet at least one of the match criteria in order to be considered
a member of the class.

Quality of Service (QoS)

Defaults
Command Modes
Command
History

Usage
Information

Related
Commands

class-map-name

Enter a name of the class for the class map in a character format (32
character maximum).

layer2

Enter the keyword layer2 to specify a Layer 2 Class Map.
Default: Layer 3

Layer 3
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Class-map names can be 32 characters. layer2 available on C-Series and
S-Series.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 7.4.1.0

E-Series Only: Expanded to add support for Layer 2

Packets arriving at the input interface are checked against the match criteria, configured using
this command, to determine if the packet belongs to that class. This command accesses the
CLASS-MAP mode, where the configuration commands include match ip and match mac
options.
ip access-list extended

Configure an extended IP ACL.

ip access-list standard

Configure a standard IP ACL.

match ip access-group

Configure the match criteria based on the access control list (ACL)

match ip precedence

Identify IP precedence values as match criteria

match ip dscp

Configure the match criteria based on the DSCP value

match mac access-group

Configure a match criterion for a class map, based on the contents of
the designated MAC ACL.

match mac dot1p

Configure a match criterion for a class map, based on a dot1p value.

match mac vlan

Configure a match criterion for a class map based on VLAN ID.

service-queue

Assign a class map and QoS policy to different queues.

show qos class-map

View the current class map information.

clear qos statistics
ces

Syntax

Clears Matched Packets, Matched Bytes, and Dropped Packets. For TeraScale, clears
Matched Packets, Matched Bytes, Queued Packets, Queued Bytes, and Dropped Packets.
clear qos statistics interface-name.

Quality of Service (QoS) | 1187

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes

interface-name

Enter one of the following keywords:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.

No default behavior or values
EXEC
EXEC Privilege

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series
Usage
Information

E-Series Only Behavior
If a Policy QoS is applied on an interface when clear qos statistics is issued, it will clear the
egress counters in show queue statistics and vice versa. This behavior is due to the values
being read from the same hardware registers.
The clear qos statistics command clears both the queued and matched byte and packet
counters if the queued counters incremented based on classification of packets to the queues
because of policy-based QoS. If the queued counters were incremented because of some other
reason and do not reflect a matching QoS entry in CAM, then this command clears the
matched byte and packet counters only.

Related
Commands

show qos statistics

Display qos statistics.

match ip access-group
ces

Syntax

Configure match criteria for a class map, based on the access control list (ACL).

match ip access-group access-group-name [set-ip-dscp value]

To remove ACL match criteria from a class map, enter no match ip access-group
access-group-name [set-ip-dscp value] command.
Parameters

1188

|

access-group-name

Enter the ACL name whose contents are used as the match criteria in
determining if packets belong to the class specified by class-map.

set-ip-dscp value

(OPTIONAL) Enter the keyword set-ip-dscp followed by the IP DSCP
value. The matched traffic will be marked with the DSCP value.
Range: 0 to 63

Quality of Service (QoS)

Defaults
Command Modes
Command
History

Usage
Information

Related
Commands

No default behavior or values
CLASS-MAP CONFIGURATION (config-class-map)
Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Added DSCP Marking option support on S-Series

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 7.5.1.0

Added support for DSCP Marking option

pre-Version 6.1.1.1

Introduced on E-Series

You must enter the class-map command in order to access this command. Once the class map
is identified, you can configure the match criteria. For class-map match-any, a maximum of
five ACL match criteria are allowed. For class-map match-all, only one ACL match criteria is
allowed.
class-map

Identify the class map.

description
ces

Syntax

Add a description to the selected policy map or QOS policy.

description {description}

To remove the description, use the no description {description} command.
Parameters

Defaults
Command Modes

Command
History

Related
Commands

description

Enter a description to identify the policies (80 characters maximum).

No default behavior or values
CONFIGURATION (policy-map-input and policy-map-output; conf-qos-policy-in and
conf-qos-policy-out; wred)
Version 8.3.7.0

Introduced on S4810

pre-Version 7.7.1.0

Introduced

policy-map-input

Create an input policy map.

policy-map-output

Create an output policy map.

qos-policy-input

Create an input QOS-policy on the router.

qos-policy-output

Create an output QOS-policy on the router.

wred-profile

Create a WRED profile.

Quality of Service (QoS) | 1189

www.dell.com | support.dell.com

match ip dscp
ces

Syntax

Use a DSCP (Differentiated Services Code Point) value as a match criteria.

match ip dscp dscp-list [[multicast] set-ip-dscp value]

To remove a DSCP value as a match criteria, enter no match ip dscp dscp-list [[multicast]
set-ip-dscp value] command.
Parameters

dscp-list

Enter the IP DSCP value(s) that is to be the match criteria. Separate values
by commas — no spaces ( 1,2,3 ) or indicate a list of values separated by a
hyphen (1-3).
Range: 0 to 63

multicast

(OPTIONAL) Enter the keyword multicast to match against multicast
traffic.
Note: This option is not supported on C-Series or S-Series.

set-ip-dscp value

(OPTIONAL) Enter the keyword set-ip-dscp followed by the IP DSCP
value. The matched traffic will be marked with the DSCP value.
Range: 0 to 63
Note: This option is not supported on S-Series.

Defaults
Command Modes
Command
History

Usage
Information

No default behavior or values
CLASS-MAP CONFIGURATION (config-class-map)
Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Added keyword multicast.
Added DSCP Marking option support on S-Series

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series
Added support for DSCP Marking option

Version 6.2.1.1

Introduced on E-Series

You must enter the class-map command in order to access this command. Once the class map
is identified, you can configure the match criteria.
The match ip dscp and match ip precedence commands are mutually exclusive.
Up to 64 IP DSCP values can be matched in one match statement. For example, to indicate IP
DCSP values 0 1 2 3 4 5 6 7, enter either the command match ip dscp 0,1,2,3,4,5,6,7 or match
ip dscp 0-7.

Note: Only one of the IP DSCP values must be a successful match criterion, not all of
the specified IP DSCP values need to match.
Related
Commands

1190

|

class-map

Quality of Service (QoS)

Identify the class map.

match ip precedence
ces

Syntax

Use IP precedence values as a match criteria.

match ip precedence ip-precedence-list [[multicast] set-ip-dscp value]

To remove IP precedence as a match criteria, enter no match ip precedence ip-precedence-list
[[multicast] set-ip-dscp value] command.
Parameters

ip-precedence-list

Enter the IP precedence value(s) as the match criteria. Separate
values by commas — no spaces ( 1,2,3 ) or indicate a list of values
separated by a hyphen (1-3).
Range: 0 to 7

multicast

(OPTIONAL) Enter the keyword multicast to match against
multicast traffic.
Note: This option is not supported on C-Series or S-Series.

set-ip-dscp value

(OPTIONAL) Enter the keyword set-ip-dscp followed by the IP
DSCP value. The matched traffic will be marked with the DSCP
value.
Range: 0 to 63
Note: This option is not supported on S-Series.

Defaults
Command Modes
Command
History

Usage
Information

No default behavior or values
CLASS-MAP CONFIGURATION (conf-class-map)
Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Added keyword multicast.
Added DSCP marking option support for S-Series

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series
Added support for DSCP Marking option

Version 6.2.1.1

Introduced on E-Series

You must enter the class-map command in order to access this command. Once the class map
is identified, you can configure the match criteria.The match ip precedence command and the
match ip dscp command are mutually exclusive.
Up to eight precedence values can be matched in one match statement. For example, to
indicate the IP precedence values 0 1 2 3 enter either the command match ip precedence 0-3
or match ip precedence 0,1,2,3.
Note: Only one of the IP precedence values must be a successful match criterion,
not all of the specified IP precedence values need to match.

Related
Commands

class-map

Identify the class map.

Quality of Service (QoS) | 1191

www.dell.com | support.dell.com

match mac access-group
ces

Syntax
Parameters

Defaults
Command Modes
Command
History

Usage
Information
Related
Commands

Configure a match criterion for a class map, based on the contents of the designated MAC
ACL.
match mac access-group {mac-acl-name}
mac-acl-name

Enter a MAC ACL name. Its contents will be used as the match criteria in the
class map.

No default values or behavior
class-map
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Available on the C-Series and S-Series.

Version 7.5.1.0

Added support for DSCP Marking option

Version 7.4.1.0

Introduced

You must enter the class-map command in order to access this command. Once the class map
is identified, you can configure the match criteria.
class-map

Identify the class map.

match mac dot1p
ces

Syntax
Parameters

Defaults
Command Modes
Command
History

Usage
Information

1192

|

Configure a match criterion for a class map, based on a dot1p value.

match mac dot1p {dot1p-list}
dot1p-list

Enter a dot1p value.
Range: 0 to 7

No default values or behavior
class-map
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Available on the C-Series and S-Series.

Version 7.5.1.0

Added support for DSCP Marking option

Version 7.4.1.0

Introduced

You must enter the class-map command in order to access this command. Once the class map
is identified, you can configure the match criteria.

Quality of Service (QoS)

Related
Commands

class-map

Identify the class map.

match mac vlan
ces

Syntax
Parameters

Defaults
Command Modes
Command
History

Usage
Information
Related
Commands

Configure a match criterion for a class map based on VLAN ID.

match mac vlan number
number

Enter the VLAN ID.
Range: 1 to 4094

None
class-map
Version 8.3.7.0

Introduced on S4810

Version 8.2.0.1

Introduced

You must first enter the class-map command in order to access this command. You can match
against only one VLAN ID.
class-map

Create/access a class map.

policy-aggregate
ces

Syntax

Allow an aggregate method of configuring per-port QoS via policy maps. An aggregate QoS
policy is part of the policy map (input/output) applied on an interface.
policy-aggregate qos-policy-name

To remove a policy aggregate configuration, use no policy-aggregate qos-policy-name
command.
Parameters

Defaults
Command Modes
Command
History

qos-policy-name

Enter the name of the policy map in character format (32 characters
maximum)

No default behavior or values
CONFIGURATION (policy-map-input and policy-map-output)
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Policy name character limit increased from 16 to 32.

Version 7.6.1.0

Introduced on S-Series

Quality of Service (QoS) | 1193

www.dell.com | support.dell.com

Usage
Information

Version 7.5.1.0

Introduced on C-Series

pre-Version
6.1.1.1

Introduced on E-Series

C-Series and S-Series
Aggregate input/output QoS policy applies to all the port ingoing/outgoing traffic. Aggregate
input/output QoS policy can co-exist with per queue input/output QoS policies.
1.
2.

If only aggregate input QoS policy exists, input traffic conditioning configurations (rate-police)
will apply. Any marking configurations in aggregate input QoS policy will be ignored.
If aggregate input QoS policy and per class input QoS policy co-exist, then aggregate input QoS
policy will preempt per class input QoS policy on input traffic conditioning (rate-police). In other
words, if rate police configuration exists in aggregate QoS policy, the rate police configurations in
per class QoS are ignored. Marking configurations in per class input QoS policy still apply to each
queue.

E-Series
Aggregate input/output QoS policy applies to all the port ingoing/outgoing traffic. Aggregate
input/output QoS policy can co-exist with per queue input/output QoS policies.
1.
2.

3.

4.

Related
Commands

1194

|

If only an aggregate input QoS policy exists, input traffic conditioning configurations (rate-police)
will apply. Any marking configurations in the aggregate input QoS policy will be ignored.
If an aggregate input QoS policy and a per-class input QoS policy co-exist, then the aggregate
input QoS policy will preempt the per-class input QoS policy on input traffic conditioning
(rate-police). In other words, if a rate police configuration exists in the aggregate QoS policy, the
rate police configurations in the per-class QoS are ignored. Marking configurations in the per-class
input QoS policy still apply to each queue.
If only an aggregate output QoS policy exists, egress traffic conditioning configurations (rate-limit
and rate-shape) in the aggregate output QoS policy will apply. Scheduling and queuing configurations in the aggregate output QoS policy (if existing) are ignored. Each queue will use default
scheduling and queuing configuration (Weighted Random Early Detection (WRED) and Bandwidth).
If the aggregate output QoS policy and per-queue output QoS policy co-exist, the aggregate output
QoS policy will preempt a per-queue output QoS policy on egress traffic conditioning (rate-limit).
In other words, if a rate limit configuration exists in the aggregate output QoS policy, the rate limit
configurations in per-queue output QoS policies are ignored. Scheduling and queuing configurations (WRED and Bandwidth) in the per-queue output QoS policy still apply to each queue.

policy-map-input

Create an input policy map

policy-map-output

Create an output policy map (E-Series Only)

Quality of Service (QoS)

policy-map-input
ces

Syntax

Create an input policy map.

policy-map-input policy-map-name [layer2]

To remove an input policy map, use the no policy-map-input policy-map-name [layer2]
command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

Related
Commands

policy-map-name

Enter the name for the policy map in character format (32 characters
maximum).

layer2

(OPTIONAL) Enter the keyword layer2 to specify a Layer 2 Class Map.
Default: Layer 3

Layer 3
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Policy name character limit increased from 16 to 32.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 7.4.1.0

Expanded to add support for Layer 2

pre-Version 6.1.1.1

Introduced on E-Series

Input policy map is used to classify incoming traffic to different flows using class-map, QoS
policy, or simply using incoming packets DSCP. This command enables policy-map-input
configuration mode (conf-policy-map-in).
service-queue

Assign a class map and QoS policy to different queues.

policy-aggregate

Allow an aggregate method of configuring per-port QoS via policy maps.

service-policy input

Apply an input policy map to the selected interface.

policy-map-output
ces

Syntax

Create an output policy map.

policy-map-output policy-map-name

To remove a policy map, use the no policy-map-output policy-map-name command.
Parameters

policy-map-name

Enter the name for the policy map in character format (16 characters
maximum).

Quality of Service (QoS) | 1195

www.dell.com | support.dell.com

Defaults
Command Modes
Command
History

Usage
Information
Related
Commands

No default behavior or values
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Policy name character limit increased from 16 to 32.

Version 7.6.1.0

Introduced on C-Series and S-Series

pre-Version 6.1.1.1

Introduced on E-Series

Output policy map is used to assign traffic to different flows using QoS policy. This command
enables the policy-map-output configuration mode (conf-policy-map-out).
service-queue

Assign a class map and QoS policy to different queues.

policy-aggregate

Allow an aggregate method of configuring per-port QoS via policy maps.

service-policy output

Apply an output policy map to the selected interface.

qos-policy-input
ces

Create a QoS input policy on the router.

Syntax

qos-policy-input qos-policy-name [layer2]

To remove an existing input QoS policy from the router, use no qos-policy-input
qos-policy-name [layer2] command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

1196

|

qos-policy-name

Enter your input QoS policy name in character format (32 character
maximum).

layer2

(OPTIONAL) Enter the keyword layer2 to specify a Layer 2 Class
Map.
Default: Layer 3

Layer 3
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Policy name character limit increased from 16 to 32.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 7.4.1.0

E-Series Only: Expanded to add support for Layer 2

Use this command to specify the name of the input QoS policy. Once input policy is
specified, rate-police can be defined. This command enables the qos-policy-input
configuration mode—(conf-qos-policy-in).

Quality of Service (QoS)

When changing a “service-queue” configuration in a QoS policy map, all QoS rules are
deleted and re-added automatically to ensure that the order of the rules is maintained. As a
result, the Matched Packets value shown in the “show qos statistics” command is reset.
Note: On ExaScale, FTOS cannot classify IGMP packets on a Layer 2 interface using
Layer 3 policy map. The packets always take the default queue, Queue 0, and cannot
be rate-policed.
Related
Commands

rate-police

Incoming traffic policing function

qos-policy-output
ces

Syntax

Create a QoS output policy.

qos-policy-output qos-policy-name

To remove an existing output QoS policy, use no qos-policy-output qos-policy-name command.
Parameters

Defaults
Command Modes
Command
History

qos-policy-name

Enter your output QoS policy name in character format (32 character
maximum).

No default behavior or values
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Policy name character limit increased from 16 to 32.

Version 7.6.1.0

Introduced on C-Series and S-Series

pre-Version 6.1.1.1 Introduced on E-Series
Usage
Information

Use this command to specify the name of the output QoS policy. Once output policy is
specified, rate-limit, bandwidth-percentage, and WRED can be defined. This command
enables the qos-policy-output configuration mode—(conf-qos-policy-out).
When changing a “service-queue” configuration in a QoS policy map, all QoS rules are
deleted and re-added automatically to ensure that the order of the rules is maintained. As a
result, the Matched Packets value shown in the “show qos statistics” command is reset.

Related
Commands

rate-limit

Outgoing traffic rate-limit functionality

bandwidth-percentage

Assign weight to class/queue percentage

bandwidth-weight

Assign a priority weight to a queue.

wred

Assign yellow or green drop precedence

Quality of Service (QoS) | 1197

www.dell.com | support.dell.com

queue backplane ignore-backpressure
e
Syntax

Reduce egress pressure by ignoring the ingress backpressure
queue backplane ignore-backpressure

To return to the default, use the no queue backplane ignore-backpressure command.
Defaults
Command Modes
Command
History

No default behavior or values
CONFIGURATION
Version 7.7.1.0

Introduced on E-Series

queue egress
e
Syntax

Assign a WRED Curve to all eight egress Multicast queues or designate the percentage for
the Multicast bandwidth queue.
queue egress multicast linecard {slot number port-set number | all} [wred-profile name |
multicast-bandwidth percentage]

To return to the default, use the no queue egress multicast linecard {slot number port-set
number | all} [wred-profile name | multicast-bandwidth percentage] command.
Parameters

linecard number

Enter the keyword linecard followed by the line card slot number.
E-Series Range: 0 to 13 on a E1200, 0 to 6 on a E600/E600i, and 0 to
5 on a E300.

port-set number

Enter the keyword port-set followed by the line card’s port pipe.
Range: 0 or 1

all

Enter the keyword all to apply to all line cards.

wred-profile name

(OPTIONAL) Enter the keyword wred-profile followed by your
WRED profile name in character format (16 character maximum). Or
use one of the pre-defined WRED profile names.
Pre-defined Profiles:
wred_drop, wred-ge_y, wred_ge_g, wred_teng_y, wred_teng_g

multicast-bandwidth

(OPTIONAL) Enter the keyword multicast-bandwidth followed by
the bandwidth percentage.
Range: 0 to 100%

percentage

Defaults
Command Modes
Command
History

1198

|

No default behavior or values
CONFIGURATION
Version 7.5.1.0

Added support for multicast-bandwidth

Version 7.4.1.0 and 6.5.3.0

Introduced on E-Series

Quality of Service (QoS)

Usage
Information

This command does not uniquely identify a queue, but rather identifies only a set of queues.
The WRED curve is applied to all eight egress Multicast queues.

Important Points to Remember —
multicast-bandwidth option
•

•
•
•
•
•

Related
Commands

A unique Multicast Weighted Fair Queuing (WFQ) setting can be applied only
on a per port-pipe basis. The minimum percentage of the multicast bandwidth
assigned to any of the ports in the port-pipe will take effect for the entire
port-pipe.
If the percentage of multicast bandwidth is 0, control traffic going through
multicast queues are dropped.
The no form of the command without multicast-bandwidth and wred-profile, will
remove both the wred-profile and multicast-bandwidth configuration.
On 10 Gigabit ports only, the multicast bandwidth option will work only if the
total unicast bandwidth is more than the multicast bandwidth.
If strict priority is applied along with multicast-bandwidth, the effect of strict
priority is on all ports where unicast and multicast bandwidth are applied.
When multicast bandwidth is assigned along with unicast bandwidth, first
multicast bandwidth will be reserved for that port, then the remaining unicast
bandwidth configured is adjusted according to the bandwidth available after
reserving for multicast bandwidth.

show queue statistics egress

Display the egress queue statistics

queue ingress
e
Syntax

Assign a WRED Curve to all eight ingress Multicast queues or designate the percentage for
the Multicast bandwidth queue.
queue ingress multicast {linecard slot number port-set number | all} [wred-profile name]

To return to the default, use the no queue ingress multicast {linecard slot number port-set
number | all} [wred-profile name] command.
Parameters

linecard number

Enter the keyword linecard followed by the line card slot number.
E-Series Range: 0 to 13 on a E1200, 0 to 6 on a E600/E600i, and 0 to
5 on a E300.

port-set number

Enter the keyword port-set followed by the line card’s port pipe.
Range: 0 or 1

all

Enter the keyword all to apply to all line cards.

wred-profile name

(OPTIONAL) Enter the keyword wred-profile followed by your
WRED profile name in character format (16 character maximum).
Or use one of the pre-defined WRED profile names.
Pre-defined Profiles:
wred_drop, wred-ge_y, wred_ge_g, wred_teng_y, wred_teng_g

Quality of Service (QoS) | 1199

www.dell.com | support.dell.com

Defaults
Command Modes
Command
History
Usage
Information

No default behavior or values
CONFIGURATION
Version 7.4.1.0 and 6.5.3.0

Introduced on E-Series

This command does not uniquely identify a queue, but rather identifies only a set of queues.
The WRED Curve is applied to all eight ingress Multicast queues.
Note: The multicast-bandwidth option is not supported on queue ingress. If you
attempt to use the multicast-bandwidth option, the following reject error message is
generated:
% Error:Bandwidth-percent is not allowed for ingress multicast

Related
Commands

show queue statistics ingress

Display the ingress queue statistics

rate-limit
e
Syntax
Parameters

Defaults

Command Modes
Command
History

1200

|

Specify the rate-limit functionality on outgoing traffic as part of the selected policy.
rate-limit [kbps] committed-rate [burst-KB] [peak [kbps] peak-rate [burst-KB]]
kbps

Enter this keyword to specify the rate limit in Kilobits per second
(Kbps). On the E-Series, Force10 recommends using a value greater
than or equal to 512 as lower values does not yield accurate results.
The default granularity is Megabits per second (Mbps).
Range: 0-10000000

committed-rate

Enter the committed rate in Mbps.
Range: 0 to 10000 Mbps

burst-KB

(OPTIONAL) Enter the burst size in KB.
Range: 16 to 200000 KB
Default: 50 KB

peak peak-rate

(OPTIONAL) Enter the keyword peak followed by the peak rate in
Mbps.
Range: 0 to 10000 Mbps
Default: Same as designated for committed-rate

Burst size is 50 KB. peak-rate is by default the same as committed-rate. Granularity for
committed-rate and peak-rate is Mbps unless the kbps option is used.
QOS-POLICY-OUT
Version 8.2.1.0

Added kbps option on E-Series.

Version 7.7.1.0

Removed from C-Series

Quality of Service (QoS)

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series
Related
Commands

rate limit

Specify rate-limit functionality on the selected interface.

qos-policy-output

Create a QoS output policy.

rate-police
ces

Syntax
Parameters

Defaults

Command Modes
Command
History

Specify the policing functionality on incoming traffic.

rate-police [kbps] committed-rate [burst-KB] [peak [kbps] peak-rate [burst-KB]]
kbps

Enter this keyword to specify the rate limit in Kilobits per second (Kbps).
On C-Series and S-Series make the following value a multiple of 64. On the
E-Series, Force10 recommends using a value greater than or equal to 512 as
lower values does not yield accurate results. The default granularity is
Megabits per second (Mbps).
Range: 0 to 40000000

committed-rate

Enter the committed rate in Mbps.
Range: 0 to 10000 Mbps

burst-KB

(OPTIONAL) Enter the burst size in KB.
Range: 16 to 200000 KB
Default: 50 KB

peak peak-rate

(OPTIONAL) Enter the keyword peak followed by the peak rate in Mbps.
Range: 0 to 10000 Mbps
Default: Same as designated for committed-rate

Burst size is 50 KB. peak-rate is by default the same as committed-rate. Granularity for
committed-rate and peak-rate is Mbps unless the kbps option is used.
QOS-POLICY-IN
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Added kbps option on C-Series, E-Series, and Series.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series
Related
Commands

rate police

Specify traffic policing on the selected interface.

qos-policy-input

Create a QoS output policy.

Quality of Service (QoS) | 1201

www.dell.com | support.dell.com

rate-shape
ces

Syntax
Parameters

Defaults
Command Modes
Command
History

Shape traffic output as part of the designated policy.

rate-shape [kbps] rate [burst-KB]
kbps

Enter this keyword to specify the rate limit in Kilobits per second (Kbps).
On C-Series and S-Series make the following value a multiple of 64. The
default granularity is Megabits per second (Mbps).
Range: 0-10000000

rate

Enter the outgoing rate in multiples of 10 Mbps.
Range: 10 to 10000

burst-KB

(OPTIONAL) Enter a number as the burst size in KB.
Range: 0 to 10000
Default: 10

Burst size is 10 KB. Granularity for rate is Mbps unless the kbps option is used.
QOS-POLICY-OUT
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Added kbps option on C-Series, E-Series, and Series.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series
Usage
Information

rate-shape can be applied only as an aggregate policy. If it is applied as a class-based policy,
then rate-shape will not take effect.

On 40-port 10G linecards, if the traffic is shaped between 64 and 1000kbs, for some values
the shaped rate is much less than the value configured. Do not use values in this range for 10G
interfaces.
Related
Commands

rate shape

Shape the traffic output of the selected interface.

qos-policy-output

Create a QoS output policy.

service-class dot1p-mapping
Configure a service-class criterion, based on a dot1p value.
Syntax

1202

|

service-class dot1p-mapping {dot1p0 value | dot1p1 value | dot1p2 value | dot1p3 value | dot1p4
value | dot1p5value | dot1p6  | dot1p7 value}

Quality of Service (QoS)

Parameters

Command Mode

dot1p0 value ...
dot1p7 value

Enter a dot1p list number and value
List number Range: 0 to 7
Range: 0 to 33

INTERFACE

service-policy input
ces

Syntax

Apply an input policy map to the selected interface.

service-policy input policy-map-name [layer2]

To remove the input policy map from the interface, use the no service-policy input
policy-map-name [layer2] command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

policy-map-name

Enter the name for the policy map in character format (16 characters
maximum). You can identify an existing policy map or name one
that does not yet exist.

layer2

(OPTIONAL) Enter the keyword layer2 to specify a Layer 2 Class
Map.
Default: Layer 3

Layer 3
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 7.4.1.0

E-Series Only: Expanded to add support for Layer 2

pre-Version 6.1.1.1

Introduced on E-Series

A single policy-map can be attached to one or more interfaces to specify the service-policy
for those interfaces. A policy map attached to an interface can be modified.
Note: The service-policy commands are not allowed on a port channel.
The service-policy input policy-map-name command and the service-class dynamic
dot1p command are not allowed simultaneously on an interface. However, the
service-policy input command (without the policy-map-name option) and the service-class
dynamic dot1p command are allowed on an interface.

Related
Commands

policy-map-input

Create an input policy map.

Quality of Service (QoS) | 1203

www.dell.com | support.dell.com

service-policy output
ces

Syntax

Apply an output policy map to the selected interface.

service-policy output policy-map-name

To remove the output policy map from the interface, use the no service-policy output
policy-map-name command.
Parameters

Defaults

policy-map-name

Enter the name for the policy map in character format (16 characters
maximum). You can identify an existing policy map or name one
that does not yet exist.

No default behavior or values

Command Modes

INTERFACE

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on C-Series and S-Series

pre-Version 6.1.1.1 Introduced on E-Series
Usage
Information
Related
Commands

A single policy-map can be attached to one or more interfaces to specify the service-policy
for those interfaces. A policy map attached to an interface can be modified.
policy-map-output

Create an output policy map.

service-queue
ces

Syntax

Assign a class map and QoS policy to different queues.

service-queue queue-id [class-map class-map-name] [qos-policy qos-policy-name]

To remove the queue assignment, use the no service-queue queue-id [class-map
class-map-name] [qos-policy qos-policy-name] command.
Parameters

1204

|

queue-id

Quality of Service (QoS)

Enter the value used to identify a queue.
Range: 0 to 7 on E-Series (eight queues per interface), 0-3 on
C-Series and S-Series (four queues per interface; four queues are
reserved for control traffic.)

(OPTIONAL) Enter the keyword class-map followed by the class
map name assigned to the queue in character format (16 character
maximum).

class-map
class-map-name

Note: This option is available under policy-map-input only.

(OPTIONAL) Enter the keyword qos-policy followed by the QoS
policy name assigned to the queue in text format (16 characters
maximum). This specifies the input QoS policy assigned to the
queue under policy-map-input and output QoS policy under
policy-map-output context.

qos-policy
qos-policy-name

Defaults
Command Modes
Command
History

No default behavior or values
CONFIGURATION (conf-policy-map-in and conf-policy-map-out)
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series
Usage
Information

Related
Commands

There are eight (8) queues per interface on the E-Series and four (4) queues per interface on
the C-Series and S-Series. This command assigns a class map or QoS policy to different
queues.
class-map

Identify the class map.

service-policy input

Apply an input policy map to the selected interface.

service-policy output

Apply an output policy map to the selected interface.

set
ces

Syntax
Parameters

Defaults
Command Modes

Mark outgoing traffic with a Differentiated Service Code Point (DSCP) or dot1p value.

set {ip-dscp value | mac-dot1p value}
ip-dscp value

(OPTIONAL) Enter the keyword ip-dscp followed by the IP DSCP
value.
Range: 0 to 63

mac-dot1p value

Enter the keyword mac-dot1p followed by the dot1p value.
Range: 0 to 7
On the C-Series and S-Series allowed values are:0,2,4,6

No default behavior or values
CONFIGURATION (conf-qos-policy-in)

Quality of Service (QoS) | 1205

www.dell.com | support.dell.com

Command
History

Usage
Information

Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

mac-dot1p available on the C-Series and S-Series

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 7.4.1.0

E-Series Only: Expanded to add support for mac-dot1p

pre-Version 6.1.1.1

Introduced on E-Series

C-Series and S-Series
Once the IP DSCP bit is set, other QoS services can then operate on the bit settings.
E-Series
Once the IP DSCP bit is set, other QoS services can then operate on the bit settings. WRED
(Weighted Random Early Detection) ensures that high-precedence traffic has lower loss rates
than other traffic during times of congestion.

show cam layer2-qos
e
Syntax
Parameters

Defaults
Command Modes
Command
History

1206

|

Display the Layer 2 QoS CAM entries.
show cam layer2-qos {[linecard number port-set number] | [interface interface]} [summary]
linecard number

Enter the keyword linecard followed by the line card slot number.
E-Series Range: 0 to 13 on a E1200, 0 to 6 on a E600/E600i, and 0 to
5 on a E300.

port-set number

Enter the keyword port-set followed by the line card’s port pipe.
Range: 0 or 1

interface interface

Enter the keyword interface followed by one of the keywords below
and slot/port or number information:
• For a Fast Ethernet interface, enter the keyword FastEthernet
followed by the slot/port information.
• For a Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the
slot/port information.
• For a Ten Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.

summary

(OPTIONAL) Enter the keyword summary to display only the total
number of CAM entries.

No default behavior or values
EXEC
Version 7.4.1.0

Quality of Service (QoS)

Introduced on E-Series

Example
(interface)

FTOS#show cam layer2-qos interface gigabitethernet 2/0
Cam Port Dot1p Proto
SrcMac
SrcMask
DstMac
DstMask
Dot1p
DSCP
Queue
Index
Marking Marking
-------------------------------------------------------------------------------------------------------------------------------01817 0 0
00:00:00:00:cc:cc 00:00:00:00:ff:ff 00:00:00:00:dd:dd 00:00:00:00:ff:ff 7
01818 0 0
00:00:00:00:00:c0 00:00:00:00:00:f0 00:00:00:00:00:d0 00:00:00:00:00:f0 45
5
01819 0 4
0
00:00:00:a0:00:00 00:00:00:ff:00:00 00:00:00:b0:00:00 00:00:00:ff:00:00 4
4
01820 0 0x2000
00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:b0 ff:ff:ff:ff:ff:ff 1
02047 0 0
00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:00 0
FTOS#

Example
(linecard)

FTOS#show cam layer2-qos linecard 2 port-set 0
Cam Port Dot1p Proto
SrcMac
SrcMask
DstMac
DstMask
Dot1p
DSCP
Queue
Index
Marking Marking
----------------------------------------------------------------------------------------------------------------------=-01817 0 0
00:00:00:00:cc:cc 00:00:00:00:ff:ff 00:00:00:00:dd:dd 00:00:00:00:ff:ff 7
01818 0 0
00:00:00:00:00:c0 00:00:00:00:00:f0 00:00:00:00:00:d0 00:00:00:00:00:f0 45
5
01819 0 4
0
00:00:00:a0:00:00 00:00:00:ff:00:00 00:00:00:b0:00:00 00:00:00:ff:00:00 4
4
01820 0 0x2000
00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:b0 ff:ff:ff:ff:ff:ff 1
02047 0 0
00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:00 0
FTOS#

show cam layer3-qos
e
Syntax
Parameters

Defaults
Command Modes
Command
History
Example

Display the Layer 3 QoS CAM entries.
show cam layer3-qos {[linecard number port-set number] | [interface interface]} [summary]
linecard number

Enter the keyword linecard followed by the line card slot number.
E-Series Range: 0 to 13 on a E1200, 0 to 6 on a E600/E600i, and 0
to 5 on a E300.

port-set number

Enter the keyword port-set followed by the line card’s port pipe.
Range: 0 or 1

interface interface

Enter the keyword interface followed by one of the keywords below
and slot/port or number information:
• For a Fast Ethernet interface, enter the keyword FastEthernet
followed by the slot/port information.
• For a Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the
slot/port information.
• For a Ten Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.

summary

(OPTIONAL) Enter the keyword summary to display only the total
number of CAM entries.

No default behavior or values
EXEC
Version 6.5.1.0

Introduced on E-Series

FTOS#sh cam layer3-qos interface gigabitethernet 2/1

Quality of Service (QoS) | 1207

www.dell.com | support.dell.com

Cam Port Dscp Proto Tcp Src Dst SrcIp
DstIp
DSCP
Queue
Index
Flag Port Port
Marking
-----------------------------------------------------------------------------------------------23488 1
0 0
0x0 0
0
0.0.0.0/0
0.0.0.0/0
TRUST-DSCP
FTOS#

In these output examples, note that:
•
•
•
Example
(linecard
port-set)

The entry TRUST-DSCP in the Queue column indicates that the trust diffserv is
configured on the policy-map.
A hyphen (-) entry in the DSCP Marking column indicates that there is no DSCP
marking.
In the Proto column (Protocol), IP, ICMP, UDP, and TCP strings are displayed.
For other protocols, the corresponding protocol number is displayed.

FTOS#show cam layer3-qos linecard 13 port-set 0
Cam
Port
Dscp Proto Tcp Src
Dst
SrcIp
DstIp
DSCP
Queue
Index
Flag Port Port
Marking
---------------------------------------------------------------------------------------24511 1
0
TCP
0x5 2
5
1.0.0.1/24
2.0.0.2/24
TRUST-DSCP
24512 1
0
UDP
0x2 2
5
8.0.0.8/24
8.0.0.8/24
23
3
FTOS#

Example
(linecard
interface without
trust output)

FTOS#sh cam layer3-qos interface gigabitethernet 2/1
Cam Port Dscp Proto Tcp Src Dst SrcIp
DstIp
DSCP
Queue
Index
Flag Port Port
Marking
-----------------------------------------------------------------------------------------------23488 1
56 0
0x0 0
0
0.0.0.0/0
0.0.0.0/0
7
23489 1
48 0
0x0 0
0
0.0.0.0/0
0.0.0.0/0
6
23490 1
40 0
0x0 0
0
0.0.0.0/0
0.0.0.0/0
5
23491 1
0 IP
0x0 0
0
10.1.1.1/32
20.1.1.1/32
0
23492 1
0 IP
0x0 0
0
10.1.1.1/32
20.1.1.2/32
0
24511 1
0 0
0x0 0
0
0.0.0.0/0
0.0.0.0/0
0
FTOS#

Example
(summary)

FTOS#show cam layer3-qos linecard 13 port-set 0 summary
Total number of CAM entries for Port-Set 0 is 100
FTOS#

show qos class-map
ces

Syntax
Parameters

Defaults
Command Modes

1208

|

View the current class map information.

show qos class-map [class-name]
class-name

(Optional) Enter the name of a configured class map.

No default behavior or values
EXEC

Quality of Service (QoS)

EXEC Privilege
Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series
Example

FTOS#show qos class-map
Class-map match-any CM
Match ip access-group ACL

Related
Commands

class-map

Identify the class map

show qos dot1p-queue-mapping
Displays the dot1p priority to queue mapping on the switch.
Syntax
Defaults

Command Modes
Command
History

Related
Commands

show qos dot1p-queue-mapping
dot1p Priority

0

1

2

3

4

5

6

7

Queue

0

0

0

1

2

3

3

3

EXEC Privilege
Version 8.3.12.0

Introduced on the S4810.

Version 8.3.16.0

Introduced on MXL 10/40GbE Switch IO Module

service-class
dot1p-mapping

Identify the class map

show qos policy-map
ces

Syntax

View the QoS policy map information.

show qos policy-map {summary [interface] | detail [interface]}

Quality of Service (QoS) | 1209

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes

summary interface

To view a policy map interface summary, enter the keyword summary
and optionally one of the following keywords and slot/port or number
information:
• For a Fast Ethernet interface, enter the keyword FastEthernet
followed by the slot/port information.
• For a Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the slot/
port information.
• For a Ten Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.

detail interface

To view a policy map interface in detail, enter the keyword detail and
optionally one of the following keywords and slot/port or number
information:
• For a Fast Ethernet interface, enter the keyword FastEthernet
followed by the slot/port information.
• For a Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the slot/
port information.
• For a Ten Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.

No default behavior or values
EXEC
EXEC Privilege

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 7.4.1.0

E-Series only: Added Trust IPv6 diffserv

Version 6.2.1.1

Introduced on E-Series

Example
(IPv4)

FTOS#show qos policy-map detail gigabitethernet 0/0
Interface GigabitEthernet 4/1
Policy-map-input policy
Trust diffserv
Queue#
Class-map-name
0 - q0
1 CM1q1
2 CM2q2
3 CM3q3
4 CM4q4
5 CM5q5
6 CM6q6
7 CM7q7
FTOS#

Example
(IPv6)

FTOS# show qos policy-map detail gigabitethernet 0/0
Interface GigabitEthernet 8/29

1210

|

Quality of Service (QoS)

Qos-policy-name

Policy-map-input pmap1
Trust ipv6-diffserv
Queue#
Class-map-name
0
c0
1
c1
2
c2
3
c3
4
c4
5
c5
6
c6
7
c7
FTOS#

Example
(summary IPv4)

Qos-policy-name
q0
q1
q2
q3
q4
q6
q7

FTOS#sho qos policy-map summary
Interface
Gi 4/1
Gi 4/2
FTOS#

policy-map-input
PM1
PM2
PMOut

policy-map-output
-

show qos policy-map-input
ces

Syntax

View the input QoS policy map details.

show qos policy-map-input [policy-map-name] [class class-map-name] [qos-policy-input
qos-policy-name]

Parameters

policy-map-name

Enter the policy map name.

class class-map-name

Enter the keyword class followed by the class map name.

qos-policy-input

Enter the keyword qos-policy-input followed by the QoS policy
name.

qos-policy-name
Defaults
Command Modes

No default behavior or values
EXEC
EXEC Privilege

Command
History

Example
(IPv4)

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 7.4.1.0

E-Series Only: Added Trust IPv6 diffserv

Version 6.2.1.1

Introduced on E-Series

FTOS#show qos policy-map-input
Policy-map-input PolicyMapInput
Aggregate Qos-policy-name AggPolicyIn
Queue#
Class-map-name
Qos-policy-name
0
ClassMap1
qosPolicyInput

Quality of Service (QoS) | 1211

www.dell.com | support.dell.com

FTOS#

Example
(IPv6)

FTOS# show qos policy-map-input
Policy-map-input pmap1
Trust ipv6-diffserv
Queue#
Class-map-name
0
c0
1
c1
2
c2
3
c3
4
c4
5
c5
6
c6
7
c7
FTOS#

Qos-policy-name
q0
q1
q2
q3
q4
q6
q7

show qos policy-map-output
ces

Syntax
Parameters

Defaults
Command Modes

View the output QoS policy map details.

show qos policy-map-output [policy-map-name] [qos-policy-output qos-policy-name]
policy-map-name

Enter the policy map name.

qos-policy-output qos-policy-name

Enter the keyword qos-policy-output followed by
the QoS policy name.

No default behavior or values
EXEC
EXEC Privilege

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on C-Series and S-Series

pre-Version 6.1.1.1 Introduced on E-Series
Example

FTOS#show qos policy-map-output
Policy-map-output PolicyMapOutput
Aggregate Qos-policy-name AggPolicyOut
Queue#
Qos-policy-name
0
qosPolicyOutput
FTOS#

show qos qos-policy-input
ces

Syntax

1212

|

View the input QoS policy details.

show qos qos-policy-input [qos-policy-name]

Quality of Service (QoS)

Parameters

Defaults
Command Modes

qos-policy-name

Enter the QoS policy name.

No default behavior or values
EXEC
EXEC Privilege

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series
Example

FTOS#show qos qos-policy-input
Qos-policy-input QosInput
Rate-police 100 50 peak 100 50
Dscp 32
FTOS#

show qos qos-policy-output
ces

Syntax
Parameters

Defaults
Command Modes

View the output QoS policy details.

show qos qos-policy-output [qos-policy-name]
qos-policy-name

Enter the QoS policy name.

No default behavior or values
EXEC
EXEC Privilege

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on C-Series and S-Series

pre-Version 6.1.1.1 Introduced on E-Series
Example

FTOS#show qos qos-policy-output
Qos-policy-output qosOut
Rate-limit 50 50 peak 50 50
Wred yellow 1
Wred green 1

Quality of Service (QoS) | 1213

www.dell.com | support.dell.com

show qos statistics
ces

Syntax
Parameters

Defaults
Command Modes

View QoS statistics.

show qos statistics {wred-profile [interface]} | [interface]
wred-profile interface

Platform—E-Series Only: Enter the keyword wred-profile and
optionally one of the following keywords and slot/port or number
information:
• For a Fast Ethernet interface, enter the keyword FastEthernet
followed by the slot/port information.
• For a Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the
slot/port information.
• For a Ten Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.

interface

Enter one of the following keywords and slot/port or number
information:
• On the C-Series and E-Series, For a Fast Ethernet interface, enter
the keyword FastEthernet followed by the slot/port information.
• For a Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the
slot/port information.
• For a Ten Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.

No default behavior or values
EXEC
EXEC Privilege

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.7.1.1

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series

1214

|

Quality of Service (QoS)

Usage
Information

The show qos statistics command can be used on the C-Series, but the wred-profile keyword
must be omitted in the syntax. The show qos statistics output differs from the ED and EE
series line cards and the EF series line cards. The QoS statistics for the EF series generates
two extra columns, Queued Pkts and Dropped Pkts, Example 2.
Note: The show qos statistics command displays Matched Packets and Matched
Bytes. The show queue statistics egress command (E-Series only) displays Queued
Packets and Queued Bytes. The following example explains how these two displays
relate to each other.
• 9000 byte size packets are sent from Interface A to Interface B.
• The Matched Packets on Interface A are equal to the Queued Packets on Interface B.
• Matched bytes on Interface A = matched packets *9000
• Queued bytes on Interface B = queued packets *(9020)—Each packet has an additional
header of 20 bytes.

Example
(ED and EE
series of
E-Series)

FTOS#show qos statistics
Interface Gi 0/0
Queue# Queued Bytes
0
0
1
0
2
0
3
0
4
0
5
0
6
0
7
0

Matched Pkts
0
0
0
0
0
0
0
0

Matched Bytes
0
0
0
0
0
0
0
0

Interface Gi 0/1
Queue# Queued Bytes
0
0
1
0
2
0
3
0
4
0
5
0
6
0
7
0

Matched Pkts
0
0
0
0
0
0
0
0

Matched Bytes
0
0
0
0
0
0
0
0

Table 42-4.

show qos statistics Command Example Fields (ED and EE Series)

Field

Description

Queue #

Queue Number

Queued Bytes

Snapshot of the byte count in that queue.

Matched Pkts

The number of packets that matched the class-map criteria.
Note: When trust is configured, matched packet counters are not
incremented in this field.

Matched Bytes

The number of bytes that matched the class-map criteria.
Note: When trust is configured, matched byte counters are not
incremented in this field.

Example
(EF series of
E-Series)

FTOS#show qos statistics gig 0/1
Queue#

Queued
Bytes
(Cumulative)

Queued
Pkts
(Cumulative)

Matched
Pkts

Matched
Bytes

Dropped
Pkts

Quality of Service (QoS) | 1215

www.dell.com | support.dell.com

0
1
2
3
4
5
6
7

0
0
0
0
0
0
0
0

0
0
0
0
0
0
0
0

1883725
1883725
1883725
1883725
1883725
1883724
1883720
1883720

1883725000
1883725000
1883725000
1883725000
1883725000
1883724000
1883720000
1883720000

0
0
0
0
0
0
0
0

FTOS#

Table 42-5.

show qos statistics Command Example Fields (EF Series)

Field

Description

Queue #

Queue Number

Queued Bytes

Cumulative byte count in that queue

Queued Pkts

Cumulative packet count in that queue.

Matched Pkts

The number of packets that matched the class-map criteria.
Note: When trust is configured, matched packet counters are not incremented in
this field.

Matched Bytes

The number of bytes that matched the class-map criteria.
Note: When trust is configured, matched byte counters are not incremented in this
field.

Dropped Pkts
Example
(wred-profile: ED,
EE, & EF Series)

FTOS#show qos statistics wred-profile
Interface Gi 5/11
Queue# Drop-statistic WRED-name
0

1

2

3

4

5

6

7

FTOS#

1216

|

Quality of Service (QoS)

The total of the number of packets dropped for green, yellow and out-of-profile.

Green
Yellow
Out of
Green
Yellow
Out of
Green
Yellow
Out of
Green
Yellow
Out of
Green
Yellow
Out of
Green
Yellow
Out of
Green
Yellow
Out of
Green
Yellow
Out of

WRED1
WRED2
Profile
WRED1
WRED2
Profile
WRED1
WRED2
Profile
WRED1
WRED2
Profile
WRED1
WRED2
Profile
WRED1
WRED2
Profile
WRED1
WRED2
Profile
WRED1
WRED2
Profile

Dropped Pkts
51623
51300
0
52082
51004
0
50567
49965
0
50477
49815
0
50695
49476
0
50245
49535
0
50033
49595
0
50474
49522
0

Table 42-6.

Related
Commands

show qos statistics wred-profile Command Example Fields (ED, EE, and EF Series)

Field

Description

Queue #

Queue Number

Drop-statistic

Drop statistics for green, yellow and out-of-profile packets

WRED-name

WRED profile name

Dropped Pkts

The number of packets dropped for green, yellow and
out-of-profile

clear qos statistics

Clears counters as shown in show qos statistics

show qos wred-profile
View the WRED profile details.

e
Syntax
Parameters

Defaults
Command Modes

show qos wred-profile wred-profile-name
wred-profile-name

Enter the WRED profile name to view the profile details.

No default behavior or values
EXEC
EXEC Privilege

Command
History

Version 8.3.7.0

Introduced on S4810

pre-Version 6.1.1.1 Introduced on E-Series
Example

FTOS#show qos wred-profile
Wred-profile-name
wred_drop
wred_ge_y
wred_ge_g
wred_teng_y
wred_teng_g
WRED1

min-threshold
0
1024
2048
4096
8192
2000

max-threshold
0
2048
4096
8192
16384
7000

test cam-usage
ces

Syntax

Check the Input Policy Map configuration for the CAM usage.

test cam-usage service-policy input policy-map linecard {[number port-set portpipe number] | [all]}

Quality of Service (QoS) | 1217

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes
Command
History

Enter the policy map name.

policy-map

linecard number

(OPTIONAL) Enter the keyword linecard followed by the line
card slot number.

port-set portpipe number

Enter the keyword port-set followed by the line card’s port pipe
number.
Range: 0 or 1

linecard all

(OPTIONAL) Enter the keywords linecard all to indicate all line
cards.

No default values or behavior
EXEC
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on C-Series and S-Series

Version 7.4.1.0

Introduced on E-Series

Example

FTOS# test cam-usage service-policy input pmap_l2 linecard all
For a L2 Input Policy Map pmap_l2, the output must be as follows,
Linecard | Portpipe | CAM Partition | Available CAM | Estimated CAM | Status
|
|
|
| per Port
| (Allowed ports)
0
0
1
1

0
1
0
1

13
FTOS#

1

L2ACL
L2ACL
L2ACL
L2ACL
…
…
…
L2ACL

500
100
1000
0

200
200
200
200

Allowed (2)
Exception
Allowed (5)
Exception

400

200

Allowed (2)

Note: In a Layer 2 Policy Map, IPv4/IPv6 rules are not allowed and hence the output
contains only L2ACL CAM partition entries.
Table 42-7.

test cam-usage Command Example Fields

Field

Description

Linecard

Indicates the line card slot number.

Portpipe

Indicates the portpipe number.

CAM Partition

The CAM space where the rules are added.

Available CAM

Indicates the free CAM space, in the partition, for the
classification rules.
Note: The CAM entries reserved for the default rules are not
included in the Available CAM column; free entries, from the
default rules space, can not be used as a policy map for the
classification rules.

1218

|

Quality of Service (QoS)

Table 42-7.

test cam-usage Command Example Fields

Field

Description

Estimated CAM per Port

Indicates the number of free CAM entries required (for the
classification rules) to apply the input policy map on a single
interface.
Note: The CAM entries for the default rule are not included in this
column; a CAM entry for the default rule is always dedicated to a
port and is always available for that interface.

Status (Allowed ports)

Usage
Information

Indicates if the input policy map configuration on an interface
belonging to a linecard/port-pipe is successful—Allowed (n)—or
not successful—Exception.
The allowed number (n) indicates the number of ports in that
port-pipe on which the Policy Map can be applied successfully.

This features allows you to determine if the CAM has enough space available before applying
the configuration on an interface.
An input policy map with both Trust and Class-map configuration, the Class-map rules are
ignored and only the Trust rule is programmed in the CAM. In such an instance, the
Estimated CAM output column will contain the size of the CAM space required for the Trust
rule and not the Class-map rule.

threshold
e
Syntax

Specify the minimum and maximum threshold values for the configured WRED profiles.
threshold min number max number

To remove the threshold values, use the no threshold min number max number command.
Parameters

Defaults
Command Modes
Command
History

min number

Enter the keyword min followed by the minimum threshold number
for the WRED profile.
Range: 1024 to 77824 KB

max number

Enter the keyword max followed by the maximum threshold number
for the WRED profile.
Range: 1024 to 77824 KB

No default behavior or values
CONFIGURATION (config-wred)
pre-Version 6.1.1.1 Introduced on E-Series

Quality of Service (QoS) | 1219

www.dell.com | support.dell.com

Usage
Information

Use this command to configure minimum and maximum threshold values for user defined
profiles. Additionally, use this command to modify the minimum and maximum threshold
values for the pre-defined WRED profiles. If you delete threshold values of the pre-defined
WRED profiles, the profiles will revert to their original default values.
Table 42-8. Pre-defined WRED Profile Threshold Values
Pre-defined WRED Profile Name
Minimum Threshold
Maximum Threshold

Related
Commands

wred_drop

0

0

wred_ge_y

1024

2048

wred_ge_g

2048

4096

wred_teng_y

4096

8192

wred_teng_g

8192

16384

wred-profile

Create a WRED profile.

trust
ces

Syntax
Parameters

Defaults
Command Modes
Command
History

Usage
Information

1220

|

Specify dynamic classification (DSCP) or dot1p to trust.

trust {diffserv [fallback]| dot1p [fallback]| ipv6-diffserv}
diffserv

Enter the keyword diffserv to specify trust of DSCP markings.

dot1p

Enter the keyword dot1p to specify trust dot1p configuration.

fallback

Enter this keyword to classify packets according to their DSCP value as a
secondary option in case no match occurs against the configured class maps.

ipv6-diffserv

On E-Series only, enter the keyword ipv6-diffserv to specify trust configuration
of IPv6 DSCP.

No default behavior or values
CONFIGURATION (conf-policy-map-in)
Version 8.3.7.0

Introduced on S4810

Version 8.3.1.0

fallback available on the E-Series.

Version 8.2.1.0

dot1p available on the C-Series and S-Series.

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 7.4.1.0

Expanded to add support for dot1p and IPv6 DSCP

pre-Version
6.1.1.1

Introduced on E-Series

When trust is configured, matched bytes/packets counters are not incremented in the show
qos statistics command.

Quality of Service (QoS)

The trust diffserv feature is not supported on E-Series ExaScale when an IPv6 microcode is
enabled.
Dynamic mapping honors packets marked according to the standard definitions of DSCP. The
default mapping table is detailed in the following table.
Table 42-9.
DSCP/CP
hex range
(XXX)

Standard Default DSCP Mapping Table

DSCP Definition

Traditional IP
Precedence

E-Series
Internal
Queue ID

C-Series and
DSCP/CP
S-Series
decimal
Internal Queue
ID

111XXX

Network Control

7

3

110XXX

Internetwork Control

6

3

101XXX

EF (Expedited
Forwarding)

CRITIC/ECP

5

2

100XXX

AF4 (Assured
Forwarding)

Flash Override

4

2

011XXX

AF3

Flash

3

1

010XXX

AF2

Immediate

2

1

001XXX

AF1

Priority

1

0

000XXX

BE (Best Effort)

Best Effort

0

0

48–63

32–47

16–31
0–15

wred
Designate the WRED profile to yellow or green traffic.

e
Syntax

wred {yellow | green} profile-name

To remove the WRED drop precedence, use the no wred {yellow | green} [profile-name]
command.
Parameters

Defaults
Command Modes

yellow | green

Enter the keyword yellow for yellow traffic. DSCP value of xxx110
and xxx100 maps to yellow.
Enter the keyword green for green traffic. DSCP value of xxx010
maps to green.

profile-name

Enter your WRED profile name in character format (16 character
maximum). Or use one of the 5 pre-defined WRED profile names.
Pre-defined Profiles:
wred_drop, wred-ge_y, wred_ge_g, wred_teng_y, wred_teng_

No default behavior or values
CONFIGURATION (conf-qos-policy-out)

Quality of Service (QoS) | 1221

www.dell.com | support.dell.com

Command
History

Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Profile name character limit increased from 16 to 32.

pre-Version 6.1.1.1 Introduced on E-Series
Usage
Information

Use this command to assign drop precedence to green or yellow traffic. If there is no honoring
enabled on the input, all the traffic defaults to green drop precedence.

Related
Commands

wred-profile

Create a WRED profile and name that profile

trust

Define the dynamic classification to trust DSCP

wred-profile
Create a WRED profile and name that profile.

e
Syntax

wred-profile wred-profile-name

To remove an existing WRED profile, use the no wred-profile command.
Parameters

Defaults

Command Modes
Command
History

wred-profile-name

Enter your WRED profile name in character format (16 character
maximum). Or use one of the pre-defined WRED profile names. You can
configure up to 26 WRED profiles plus the 5 pre-defined profiles, for a
total of 31 WRED profiles.
Pre-defined Profiles:
wred_drop, wred-ge_y, wred_ge_g, wred_teng_y, wred_teng_g

The five pre-defined WRED profiles. When a new profile is configured, the minimum and
maximum threshold defaults to predefined wred_ge_g values
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

pre-Version 6.1.1.1 Introduced on E-Series
Usage
Information

Related
Commands

1222

|

Use the default pre-defined profiles or configure your own profile. You can not delete the
pre-defined profiles or their default values. This command enables the WRED configuration
mode—(conf-wred).
threshold

Quality of Service (QoS)

Specify the minimum and maximum threshold values of the WRED profile

Queue-Level Debugging
Queue-Level Debugging is an E-Series-only feature, as indicated by the e character that
appears below each command heading.
The following queuing statistics are available on TeraScale versions of E-Series systems.
•
•
•
•

clear queue statistics egress
clear queue statistics ingress
show queue statistics egress
show queue statistics ingress

clear queue statistics egress
e
Syntax
Parameters

Clear egress queue statistics.
clear queue statistics egress [unicast | multicast] [Interface]
unicast | multicast

(OPTIONAL) Enter the keyword multicast to clear only Multicast queue
statistics. Enter the keyword unicast to clear only Unicast queue
statistics.
Default: Both Unicast and Multicast queue statistics are cleared.

Interface

(OPTIONAL) Enter one of the following interfaces to display the
interface specific queue statistics.
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the
slot/port information.
Note: Fast Ethernet is not supported.

Defaults
Command Modes

No default behavior or values
EXEC
EXEC Privilege

Command
History
Usage
Information

Related
Commands

Version 6.2.1.1

Introduced

If a Policy QoS is applied on an interface when clear queue statistics egress is issued, it will
clear the egress counters in show queue statistics and vice-versa. This behavior is due to the
values being read from the same hardware registers.
clear queue statistics egress

Clear ingress queue statistics

Quality of Service (QoS) | 1223

www.dell.com | support.dell.com

show queue statistics egress

Display egress queue statistics

show queue statistics ingress

Display ingress queue statistics

clear queue statistics ingress
e
Syntax
Parameters

Defaults
Command Modes

Clear ingress queue statistics.
clear queue statistics ingress [unicast [src-card ID [dst-card ID]] | [multicast] [src-card ID]]
unicast [src-card ID
[dst-card ID]]

(OPTIONAL) Enter the keyword unicast to clear Unicast queue
statistics. Optionally, enter the source card identification (src-card
ID) and the destination card identification (dst-card ID ) to clear the
unicast statistics from the source card to the destination card.

multicast [src-card ID]

(OPTIONAL) Enter the keyword multicast to clear only Multicast
queue statistics. Optionally, enter the source card identification
(src-card ID) to clear the multicast statistics from the source card.
Default: Both Unicast and Multicast queue statistics are cleared.

No default behavior or values
EXEC
EXEC Privilege

Command
History
Related
Commands

Version 6.2.1.1

Introduced

clear queue statistics egress

Clear egress queue statistics

show queue statistics egress

Display egress queue statistics

show queue statistics ingress

Display ingress queue statistics

show queue statistics egress
e
Syntax

1224

|

Display the egress queue statistics.
show queue statistics egress [unicast | multicast] [Interface] [brief]

Quality of Service (QoS)

Parameters

Defaults
Command Modes

unicast | multicast

(OPTIONAL) Enter the keyword multicast to display only Multicast
queue statistics. Enter the keyword unicast to display only Unicast
queue statistics.
Default: Both Unicast and Multicast queue statistics are displayed.

Interface

(OPTIONAL) Enter one of the following interfaces to display the
interface specific queue statistics.
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the
slot/port information.
• Fast Ethernet is not supported.

brief

(OPTIONAL) Enter the keyword brief to display only ingress per
link buffering and egress per port buffering statistics.

No default behavior or values
EXEC
EXEC Privilege

Command
History
Usage
Information

Version 6.2.1.1

Introduced for E-Series

TeraScale systems display cumulative queued bytes (in KB), cumulative queued packets (in
KB), and cumulative dropped packets (in KB).
The display area is limited to 80 spaces to accommodate the screen and for optimal
readability. Numbers, that is values, are limited to 12 characters. The numbering conventions
are detailed in the table below.
Table 42-10.
Value

Numbering Conventions for show queue egress statistics Output
Divide the number by
Quotient Display
Examples

(10^11) - (10^14)

1024

K

12345678901K

(10^14) - (10^17)

1024*1024

M

12345678901M

> (10^17)

1024*1024*1024

T

12345678901T

Note: The show queue statistics command displays Queued Packets and Queued
Bytes. The show qos statistics command displays Matched Packets and Matched
Bytes. The following example explains how these two outputs relate to each other.
• 9000 byte size packets are sent from Interface A to Interface B.
• The Matched Packets on Interface A are equal to the Queued Packets on Interface B.
• Matched bytes on Interface A = matched packets *9000
• Queued bytes on Interface B = queued packets *(9020)—Each packet has an additional
header of 20 bytes.
Example
(TeraScale)

FTOS#show queue statistics egress unicast gigabitethernet 9/1
Interface Gi 9/1
Egress Queued
Port
bytes

Queued
packets

Packet Type

Min
KB

Max
KB

Dropped
packets

Quality of Service (QoS) | 1225

www.dell.com | support.dell.com

Queue#
0
281513847K

31959000

1

99281660K

11271000

2

99281660K

11271000

3

38984440000

4322000

4

99281660K

11271000

5

39760160000

4408000

6

39642900000

4395000

7

99274410K

11270177

Green
Yellow
Out of
Green
Yellow
Out of
Green
Yellow
Out of
Green
Yellow
Out of
Green
Yellow
Out of
Green
Yellow
Out of
Green
Yellow
Out of
Green
Yellow
Out of

2048
1024

4096
2048

2048
1024

4096
2048

2048
1024

4096
2048

2048
1024

4096
2048

2048
1024

4096
2048

2048
1024

4096
2048

2048
1024

4096
2048

2048
1024

4096
2048

Profile

Profile

Profile

Profile

Profile

Profile

Profile

Profile

0
0
30385770
0
0
9886100
0
0
9784600
0
0
3053753
0
0
9581600
0
0
3070671
0
0
3026100
0
0
9273402

FTOS#

Table 42-11.

show queue statistics egress Command Fields

Field

Description

Egress Port Queue#

Egress Port Queue Number

Queued bytes

Cumulative byte count in that queue

Queued packets

Cumulative packet count in that queue.

Packet type

Green, yellow, and out-of-profile packets

Min KB

Minimum threshold for WRED queue

Max KB

Maximum threshold for WRED queue

Dropped Pkts

The number of packets dropped for green, yellow and out-of-profile

Example

FTOS#sho queue statistics egress multicast
Linecard 3 port pipe 0, multicast
Packet Type
Green
Yellow
Out of Profile

Min
KB
8192
4096

Max
KB
16384
8192

Dropped
packets
0
0
0

Linecard 3 port pipe 1, multicast
Packet Type
Green
Yellow
Out of Profile

Min
KB
8192
4096

Max
KB
16384
8192

Linecard 7 port pipe 0, multicast

1226

|

Quality of Service (QoS)

Dropped
packets
0
0
0

Packet Type
Green
Yellow
Out of Profile

Min
KB
2048
1024

Max
KB
4096
2048

Dropped
packets
0
0
0

Linecard 7 port pipe 1, multicast
Packet Type
Green
Yellow
Out of Profile
FTOS#

Table 42-12.

Example
(brief)

Min
KB
2048
1024

Max
KB
4096
2048

Dropped
packets
0
0
0

show queue statistics egress multicast Command Fields

Field

Description

Packet type

Green, yellow, and out-of-profile packets

Min KB

Minimum threshold for WRED queue

Max KB

Maximum threshold for WRED queue

Dropped Pkts

The number of packets dropped for green, yellow and
out-of-profile

FTOS#show queue statistics egress brief
LC
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
1
FTOS#

Portpipe
PortPipe
0
0
0
0
0
0
0
0
0
0
0
0
0
1
1
1
1
1
1
1
1
1
1
1
1
1
0

Port
0
1
2
3
4
5
6
7
8
9
10
11
M
0
1
2
3
4
5
6
7
8
9
10
11
M
0

Dropped
packets
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

Quality of Service (QoS) | 1227

www.dell.com | support.dell.com

Table 42-13.

Related
Commands

show queue statistics egress brief Command Fields

Field

Description

LC

Line Card

Portpipe

Portpipe number

Port

Port Queue. Where M is Multicast queue

Dropped Pkts

The number of packets dropped for green, yellow and
out-of-profile

clear queue statistics egress

Clear egress queue statistics.

clear queue statistics ingress

Clear ingress queue statistics.

show queue statistics ingress

Display ingress queue statistics

show queue statistics ingress
e
Syntax
Parameters

Defaults
Command Modes

Display the ingress queue statistics.
show queue statistics ingress [unicast [src-card ID [dst-card ID]] | [multicast] [src-card ID]] [brief]
unicast [src-card ID
[dst-card ID]]

(OPTIONAL) Enter the keyword unicast to display Unicast queue
statistics. Optionally, enter the source card identification (src-card
ID) and the destination card identification (dst-card ID) to display
the unicast statistics from the source card to the destination card.
Destination card Identification: Range 0 to 13 or RPM

multicast [src-card ID]

(OPTIONAL) Enter the keyword multicast to display only
Multicast queue statistics. Optionally, enter the source card
identification (src-card ID) to display the multicast statistics from
the source card. Default: Both Unicast and Multicast queue
statistics are displayed.

brief

(OPTIONAL) Enter the keyword brief to display only ingress per
link buffering and egress per port buffering statistics.

No default behavior or values
EXEC
EXEC Privilege

Command
History
Usage
Information

1228

|

Version 6.2.1.1

Introduced

TeraScale systems display cumulative queued bytes (in KB), cumulative queued packets (in
KB), and cumulative dropped packets (in KB).

Quality of Service (QoS)

The display area is limited to 80 spaces to accommodate the screen and for optimal
readability. Numbers, that is values, are limited to 12 characters. The conventions are detailed
in the following table.
Table 42-14.
Output

Numbering Conventions for show queue statistics ingress

Value

Divide the number by

Quotient Display

Examples

(10^11) - (10^14)

1024

K

12345678901K

(10^14) - (10^17)

1024*1024

M

12345678901M

> (10^17)

1024*1024*1024

T

12345678901T

Note: The show queue statistics command displays Queued Packets and Queued
Bytes. The show qos statistics command displays Matched Packets and Matched
Bytes. The following example explains how these two displays relate to each other.
• 9000 byte size packets are sent from Interface A to Interface B.
• The Matched Packets on Interface A are equal to the Queued Packets on Interface B.
• Matched bytes on Interface A = matched packets *9000
• Queued bytes on Interface B = queued packets *(9020)—Each packet has an additional
header of 20 bytes.
Example

FTOS#show queue statistics ingress unicast src-card 7 dst-card 3
Linecard 7 port pipe 0, to linecard 3 port pipe 0, unicast
SF
Ingress
Queue#
0

Packet Type

Min
KB

Max
KB

Dropped
packets

Green
4096
4096
0
Yellow
3276
3276
0
Out of Profile
0
1
Green
4096
4096
0
Yellow
3276
3276
0
Out of Profile
0
2
Green
4096
4096
0
Yellow
3276
3276
0
Out of Profile
0
3
Green
4096
4096
0
Yellow
3276
3276
0
Out of Profile
0
4
Green
4096
4096
0
Yellow
3276
3276
0
Out of Profile
0
5
Green
4096
4096
0
Yellow
3276
3276
0
Out of Profile
0
6
Green
4096
4096
0
Yellow
3276
3276
0
Out of Profile
0
7
Green
4096
4096
0
Yellow
3276
3276
0
Out of Profile
0
Linecard 7 port pipe 0, to linecard 3 port pipe 1, unicast
SF
Packet Type
Min
Max
Dropped
Ingress
KB
KB
packets
Queue#
0
Green
4096
4096
0
Yellow
3276
3276
0
Out of Profile
0

Quality of Service (QoS) | 1229

www.dell.com | support.dell.com

1

Green
Yellow
Out of
Green
Yellow
Out of
Green
Yellow
Out of
Green
Yellow
Out of
Green
Yellow
Out of
Green
Yellow
Out of
Green
Yellow
Out of
Green
Yellow
Out of
Green
Yellow
Out of
Green
Yellow
Out of
Green
Yellow
Out of

2

3

4

5

6

7

4

5

6

7

Table 42-15.

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

Profile

Profile

Profile

Profile

Profile

Profile

Profile

Profile

Profile

Profile

0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

Profile 0

show queue statistics Command Fields

Field

Description

SF Ingress Queue #

Switch Fabric Queue Number

Packet type

Green, yellow, and out-of-profile packets

Min KB

Minimum threshold for WRED queue

Max KB

Maximum threshold for WRED queue

Dropped Pkts

The number of packets dropped for green, yellow and
out-of-profile

Example
(Multicast)

FTOS#show queue statistics ingress multicast src-card 7
Linecard 7 port pipe 0, multicast
SF
Ingress
Queue#
0

1

2

1230

|

Quality of Service (QoS)

Packet Type

Min
KB

Max
KB

Dropped
packets

Green
Yellow
Out of Profile
Green
Yellow
Out of Profile
Green
Yellow

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

0
0
0
0
0
0
0
0

Out of
Green
Yellow
Out of
Green
Yellow
Out of
Green
Yellow
Out of
Green
Yellow
Out of
Green
Yellow
Out of

3

4

5

6

7

Profile
4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

Profile

Profile

Profile

Profile

Profile

0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

Linecard 7 port pipe 1, multicast
SF
Ingress
Queue#
0

1

2

3

4

5

6

7

Packet Type

Min
KB

Max
KB

Dropped
packets

Green
Yellow
Out of
Green
Yellow
Out of
Green
Yellow
Out of
Green
Yellow
Out of
Green
Yellow
Out of
Green
Yellow
Out of
Green
Yellow
Out of
Green
Yellow
Out of

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

4096
3276

0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

Profile

Profile

Profile

Profile

Profile

Profile

Profile

Profile

FTOS#

Table 42-16.

Example
(brief)

show queue statistics ingress Multicast Command Fields

Field

Description

SF Ingress Queue #

Switch Fabric Queue Number

Packet type

Green, yellow, and out-of-profile packets

Min KB

Minimum threshold for WRED queue

Max KB

Maximum threshold for WRED queue

Dropped Pkts

The number of packets dropped for green, yellow and
out-of-profile

FTOS#show queue statistics ingress src-card 0 brief
Source Linecard 0

Quality of Service (QoS) | 1231

www.dell.com | support.dell.com

Dest LC
0
0
0
0
1
1
1
1
2
2
2
2
3
3
3
3
4
4
4
4
5
5
5
5
6
6
6
6
RPM
RPM
Multicast
Multicast

Src
Port set
0
0
1
1
0
0
1
1
0
0
1
1
0
0
1
1
0
0
1
1
0
0
1
1
0
0
1
1
0
1
0
1

Dest
Port set
0
1
0
1
0
1
0
1
0
1
0
1
0
1
0
1
0
1
0
1
0
1
0
1
0
1
0
1

Dropped
packets
0
100
0
100
0
100
0
100
0
100
0
100
0
100
0
100
0
100
0
100
0
100
0
100
0
100
0
100
0
100
0
0

FTOS#

Table 42-17.

Related
Commands

1232

|

show queue statistics ingress brief Command Fields

Field

Description

Dest LC

Destination Line Card

Src Port Set

Source PortPipe Number

Dest Port Set

Destination PortPipe Number

Dropped Pkts

The number of packets dropped

clear queue statistics egress

Clear egress queue statistics.

clear queue statistics ingress

Clear ingress queue statistics.

show queue statistics ingress

Display egress queue statistics

Quality of Service (QoS)

43
Routing Information Protocol (RIP)
Overview
Routing Information Protocol (RIP) is a Distance Vector routing protocol. FTOS supports
both RIP version 1 (RIPv1) and RIP version 2 (RIPv2) on all Dell Force10 platforms, as
indicated by the characters that appear under each of the command headings: e E-Series,
c C-Series, s S-Series, or
.
Note: The C-Series platform supports RIP with FTOS version 7.6.1.0 and later. The
S-Series platform supports RIP with FTOS version 7.8.1.0 and later. Prior to 7.6.1.0,
only the E-Series platform supported RIP.

The FTOS implementation of RIP is based on IETF RFCs 2453 and RFC 1058. For more
information on configuring RIP, refer to FTOS Configuration Guide.

Commands
The following commands enable you to configure RIP:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

auto-summary
clear ip rip
debug ip rip
default-information originate
default-metric
description
distance
distribute-list in
distribute-list out
ip poison-reverse
ip rip receive version
ip rip send version
ip split-horizon
maximum-paths
neighbor

Routing Information Protocol (RIP) | 1233

www.dell.com | support.dell.com

•
•
•
•
•
•
•
•
•
•
•
•
•

network
offset-list
output-delay
passive-interface
redistribute
redistribute isis
redistribute ospf
router rip
show config
show ip rip database
show running-config rip
timers basic
version

auto-summary
ces

Syntax

Restore the default behavior of automatic summarization of subnet routes into network
routes. This command applies only to RIP version 2.
auto-summary

To send sub-prefix routing information, enter no auto-summary.
Default

Enabled.

Command Modes

ROUTER RIP

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

clear ip rip
ces

Syntax
Command Modes

1234

|

Update all the RIP routes in the FTOS routing table.

clear ip rip

EXEC Privilege

Routing Information Protocol (RIP)

Command
History

Usage
Information

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

This command triggers updates of the main RIP routing tables.

debug ip rip
ces

Syntax

Examine RIP routing information for troubleshooting.

debug ip rip [interface | database | events [interface] | packet [interface] | trigger]

To turn off debugging output, use the no debug ip rip command.
Parameters

interface

(OPTIONAL) Enter the interface type and ID as one of the following:
• For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed
by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by a
number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a SONET interface, enter the keyword sonet followed by the slot/port
information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by
the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.
Note: This option is available only on E-Series when entered as a standalone
option. It is available on both C-Series and E-Series as a sub-option.

database

(OPTIONAL) Enter the keyword database to display messages when there is a
change to the RIP database.

events

(OPTIONAL) Enter the keyword events to debug only RIP protocol changes.

packet

(OPTIONAL) Enter the keyword events to debug only RIP protocol packets.
Note: This option is available only on C-Series.

trigger
Command Modes
Command
History

(OPTIONAL) Enter the keyword trigger to debug only RIP trigger extensions.

EXEC Privilege
Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

Routing Information Protocol (RIP) | 1235

www.dell.com | support.dell.com

default-information originate
ces

Syntax

Generate a default route for the RIP traffic.

default-information originate [always] [metric metric-value] [route-map map-name]

To return to the default values, enter no default-information originate.
Parameters

Defaults

always

(OPTIONAL) Enter the keyword always to enable the switch
software to always advertise the default route.

metric metric-value

(OPTIONAL) Enter the keyword metric followed by a number as
the metric value.
Range: 1 to 16
Default: 1

route-map map-name

(OPTIONAL) Enter the keyword route-map followed by the name
of a configured route-map.

Disabled
metric: 1

Command Modes

ROUTER RIP

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

Usage
Information

The default route must be present in the switch routing table for the default-information
originate command to take effect.

default-metric
ces

Syntax

Change the default metric for routes. Use this command with the redistribute command to
ensure that all redistributed routes use the same metric value.
default-metric number

To return the default metric to the original values, enter no default-metric.
Parameters

Default

1236

|

number

1

Routing Information Protocol (RIP)

Specify a number.
Range: 1 to 16.
The default is 1.

Command Modes

ROUTER RIP

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

Usage
Information
Related
Commands

This command ensures that route information being redistributed is converted to the same
metric value.
redistribute

Allows you to redistribute routes learned by other methods.

description
ces

Syntax

Enter a description of the RIP routing protocol

description {description}

To remove the description, use the no description {description} command.
Parameters

Defaults

description

Enter a description to identify the RIP protocol (80 characters maximum).

No default behavior or values

Command Modes

ROUTER RIP

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

pre-7.7.1.0

Introduced on E-Series

router rip

Enter ROUTER mode on the switch.

Related
Commands

distance
ces

Syntax

Assign a weight (for prioritization) to all routes in the RIP routing table or to a specific route.
Lower weights (“administrative distance”) are preferred.
distance weight [ip-address mask [prefix-name]]

To return to the default values, use the no distance weight [ip-address mask] command.

Routing Information Protocol (RIP) | 1237

www.dell.com | support.dell.com

Parameters

Defaults

weight

Enter a number from 1 to 255 for the weight (for prioritization).
The default is 120.

ip-address

(OPTIONAL) Enter the IP address, in dotted decimal format (A.B.C.D), of the
host or network to receive the new distance metric.

mask

If you enter an IP address, you must also enter a mask for that IP address, in
either dotted decimal format or /prefix format (/x)

prefix-name

(OPTIONAL) Enter a configured prefix list name.

weight

= 120

Command Modes

ROUTER RIP

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

Related
Commands

default-metric

Assign one distance metric to all routes learned using the redistribute
command.

distribute-list in
ces

Syntax

Configure a filter for incoming routing updates.

distribute-list prefix-list-name in [interface]

To delete the filter, use the no distribute-list prefix-list-name in command.
Parameters

Defaults

1238

|

prefix-list-name

Enter the name of a configured prefix list.

interface

(OPTIONAL) Identifies the interface type slot/port as one of the following:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed
by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a SONET interface, enter the keyword sonet followed by the slot/
port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to
4094.

Not configured.

Routing Information Protocol (RIP)

Command Modes

ROUTER RIP

Command
History

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

Related
Commands

ip prefix-list

Enter the PREFIX-LIST mode and configure a prefix list.

distribute-list out
ces

Syntax

Configure a filter for outgoing routing updates.

distribute-list prefix-list-name out [interface | bgp | connected | isis | ospf | static]

To delete the filter, use the no distribute-list prefix-list-name out command.
Parameters

prefix-list-name

Enter the name of a configured prefix list.

interface

(OPTIONAL) Identifies the interface type slot/port as one of the following:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed
by a number:
C-Series and S-Series Range: 1 to 128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a SONET interface, enter the keyword sonet followed by the slot/
port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to
4094.

connected

(OPTIONAL) Enter the keyword connected to filter only directly
connected routes.

isis

(OPTIONAL) Enter the keyword isis to filter only IS-IS routes.
Note: This option is only available on E-Series.

Defaults
Command Modes

ospf

(OPTIONAL) Enter the keyword ospf to filter all OSPF routes.

static

(OPTIONAL) Enter the keyword static to filter manually configured routes.

Not configured.
ROUTER RIP

Routing Information Protocol (RIP) | 1239

www.dell.com | support.dell.com

Command
History

Related
Commands

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

ip prefix-list

Enter the PREFIX-LIST mode and configure a prefix list.

ip poison-reverse
ces

Syntax

Set the prefix of the RIP routing updates to the RIP infinity value.

ip poison-reverse

To disable poison reverse, enter no ip poison-reverse.
Defaults
Command Modes
Command
History

Related
Commands

Disabled.
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

ip split-horizon

Set RIP routing updates to exclude routing prefixes.

ip rip receive version
ces

Syntax

Set the interface to receive specific versions of RIP. The RIP version you set on the interface
overrides the version command in the ROUTER RIP mode.
ip rip receive version [1] [2]

To return to the default, enter no ip rip receive version.
Parameters

Defaults
Command Modes

1240

|

1

(OPTIONAL) Enter the number 1 for RIP version 1.

2

(OPTIONAL) Enter the number 2 for RIP version 2.

RIPv1 and RIPv2
INTERFACE

Routing Information Protocol (RIP)

Command
History

Usage
Information
Related
Commands

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

If you want the interface to receive both versions of RIP, enter ip rip receive version 1 2.

ip rip send version

Sets the RIP version to be used for sending RIP traffic on an interface.

version

Sets the RIP version to be used for the switch software.

ip rip send version
ces

Syntax

Set the interface to send a specific version of RIP. The version you set on the interface
overrides the version command in the ROUTER RIP mode.
ip rip send version [1] [2]

To return to the default value, enter no ip rip send version.
Parameters

Defaults
Command Modes
Command
History

Usage
Information
Related
Commands

1

(OPTIONAL) Enter the number 1 for RIP version 1.
The default is RIPv1.

2

(OPTIONAL) Enter the number 2 for RIP version 2.

RIPv1
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

To enable the interface to send both version of RIP packets, enter ip rip send version 1 2.

ip rip receive version

Sets the RIP version for the interface to receive traffic.

version

Sets the RIP version to be used for the switch software.

ip split-horizon
ces

Enable split-horizon for RIP data on the interface. As described in RFC 2453, the
split-horizon scheme prevents any routes learned over a specific interface to be sent back out
that interface.

Routing Information Protocol (RIP) | 1241

www.dell.com | support.dell.com

Syntax

ip split-horizon

To disable split-horizon, enter no ip split-horizon.
Defaults
Command Modes

Enabled
INTERFACE

Command
History

Related
Commands

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

ip poison-reverse

Set the prefix for RIP routing updates.

maximum-paths
ces

Syntax

Set RIP to forward packets over multiple paths.

maximum-paths number

To return to the default values, enter no maximum-paths.
Parameters

Defaults

number

Enter the number of paths.
Range: 1 to 16.
The default is 4 paths.

4

Command Modes

ROUTER RIP

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

Usage
Information

RIP supports a maximum of 16 ECMP paths.

neighbor
ces

1242

|

Define a neighbor router with which to exchange RIP information.

Routing Information Protocol (RIP)

Syntax

neighbor ip-address

To delete a neighbor setting, use the no neighbor ip-address command.
Parameters

Defaults

ip-address

Enter the IP address, in dotted decimal format, of a router with which to exchange
information.

Not configured.

Command Modes

ROUTER RIP

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

Usage
Information

When a neighbor router is identified, unicast data exchanges occur. Multiple neighbor routers
are possible.
Use the passive-interface command in conjunction with the neighbor command to ensure that
only specific interfaces are receiving and sending data.

Related
Commands

passive-interface

Sets the interface to only listen to RIP broadcasts.

network
ces

Syntax

Enable RIP for a specified network. Use this command to enable RIP on all networks
connected to the switch.
network ip-address

To disable RIP for a network, use the no network ip-address command.
Parameter

Defaults

ip-address

Specify an IP network address in dotted decimal format. You cannot specify a
subnet.

No RIP network is configured.

Command Modes

ROUTER RIP

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

Routing Information Protocol (RIP) | 1243

www.dell.com | support.dell.com

Usage
Information

RIP operates over interfaces configured with any address specified by the network command.

offset-list
ces

Syntax

Specify a number to add to the incoming or outgoing route metrics learned via RIP.

offset-list prefix-list-name {in | out} offset [interface]

To delete an offset list, use the no offset-list prefix-list-name {in | out} offset [interface] command.
Parameters

Defaults

prefix-list-name

Enter the name of an established Prefix list to determine which incoming
routes will be modified.

offset

Enter a number from zero (0) to 16 to be applied to the incoming route
metric matching the access list specified.
If you set an offset value to zero (0), no action is taken.

interface

(OPTIONAL) Enter the following keywords and slot/port or number
information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed
by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a SONET interface, enter the keyword sonet followed by the slot/
port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to
4094.

Not configured.

Command Modes

ROUTER RIP

Command
History

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

Usage
Information

1244

You can enable an unlimited number of RIP networks.

|

When the offset metric is applied to an interface, that value takes precedence over an offset
value that is not extended to an interface.

Routing Information Protocol (RIP)

Related
Commands

ip prefix-list

Enter the PREFIX-LIST mode and configure a prefix list.

output-delay
ces

Syntax

Set the interpacket delay of successive packets to the same neighbor.

output-delay delay

To return to the switch software defaults for interpacket delay, enter no output-delay.
Parameters

Default

delay

Specify a number of milliseconds as the delay interval.
Range: 8 to 50

Not configured.

Command Modes

ROUTER RIP

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

Usage
Information

This command is intended for low-speed interfaces.

passive-interface
ces

Syntax

Suppress routing updates on a specified interface.

passive-interface interface

To delete a passive interface, use the no passive-interface interface command.

Routing Information Protocol (RIP) | 1245

www.dell.com | support.dell.com

Parameters

Defaults

interface

Enter the following information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by a
number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a SONET interface, enter the keyword sonet followed by the slot/port
information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by
the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.

Not configured.

Command Modes

ROUTER RIP

Command
History

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

Usage
Information
Related
Commands

Although the passive interface will neither send nor receive routing updates, the network on
that interface will still be included in RIP updates sent via other interfaces.
neighbor

Enable RIP for a specified network.

network

Define a neighbor.

redistribute
ces

Syntax

Redistribute information from other routing instances.

redistribute {connected | static}

To disable redistribution, use the no redistribute {connected | static} command.
Parameters

Defaults

1246

|

connected

Enter the keyword connected to specify that information from active routes on
interfaces is redistributed.

static

Enter the keyword static to specify that information from static routes is
redistributed.

Not configured.

Routing Information Protocol (RIP)

Command Modes

ROUTER RIP

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

Usage
Information
Related
Commands

To redistribute the default route (0.0.0.0/0), configure the default-information originate
command.
default-information
originate

Generate a default route for RIP traffic.

redistribute isis
Redistribute routing information from an IS-IS instance.

e
Syntax

redistribute isis [tag] [level-1 | level-1-2 | level-2] [metric metric-value] [route-map map-name]

To disable redistribution, use the no redistribute isis [tag] [level-1 | level-1-2 | level-2] [metric
metric-value] [route-map map-name] command.
Parameters

Defaults

tag

(OPTIONAL) Enter the name of the IS-IS routing process.

level-1

(OPTIONAL) Enter the keyword level-1 to redistribute only IS-IS
Level-1 routes.

level-1-2

(OPTIONAL) Enter the keyword level-1-2 to redistribute both IS-IS
Level-1 and Level-2 routes.

level-2

(OPTIONAL) Enter the keyword level-2 to redistribute only IS-IS
Level-2 routes.

metric metric-value

(OPTIONAL) Enter the keyword metric followed by a number as the
metric value.
Range: 0 to16

route-map map-name

(OPTIONAL) Enter the keyword route-map followed by the name of a
configured route map.

Not configured.

Command Modes

ROUTER RIP

Command
History

Version 8.3.7.0

Introduced on S4810

pre-Version 6.2.1.1

Introduced on E-Series

Usage
Information

IS-IS is not supported on S-Series systems.

Routing Information Protocol (RIP) | 1247

www.dell.com | support.dell.com

redistribute ospf
ces

Syntax

Redistribute routing information from an OSPF process.

redistribute ospf process-id [match external {1 | 2} | match internal | metric metric-value]
[route-map map-name]

To disable redistribution, enter no redistribute ospf process-id [match external {1 | 2} | match
internal | metric metric-value] [route-map map-name] command.
Parameters

process-id

Enter a number that corresponds to the OSPF process ID to be
redistributed.
Range: 1 to 65355.

match external {1 |
2}

(OPTIONAL) Enter the keywords match external followed by the
numbers 1 or 2 to indicated that external 1 routes or external 2 routes
should be redistributed.

match internal

(OPTIONAL) Enter the keywords match internal to indicate that internal
routes should be redistributed.

metric metric-value

(OPTIONAL) Enter the keyword metric followed by a number as the
metric value.
Range: 0 to 16

route-map

(OPTIONAL) Enter the keyword route-map followed by the name of a
configured route map.

map-name
Defaults

Not configured.

Command Modes

ROUTER RIP

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

router rip
ces

Syntax

Enter the ROUTER RIP mode to configure and enable RIP.

router rip

To disable RIP, enter no router rip.
Defaults
Command Modes

1248

|

Disabled.
CONFIGURATION

Routing Information Protocol (RIP)

Command
History

Usage
Information

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

To enable RIP, you must assign a network address using the network command.

Example

FTOS(conf)#router rip
FTOS(conf-router_rip)#

Related
Commands

network

Enable RIP.

exit

Return to the CONFIGURATION mode.

show config
ces

Syntax

Display the changes you made to the RIP configuration. Default values are not shown.

show config

Command Modes

ROUTER RIP

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

Example

FTOS(conf-router_rip)#show config
!
router rip
network 172.31.0.0
passive-interface GigabitEthernet 0/1
FTOS(conf-router_rip)#

show ip rip database
ces

Syntax
Parameters

Display the routes learned by RIP. If the switch learned no RIP routes, no output is generated.

show ip rip database [ip-address mask]
ip-address

(OPTIONAL) Specify an IP address in dotted decimal format to view RIP
information on that network only.
If you enter an IP address, you must also enter a mask for that IP address.

mask

(OPTIONAL) Specify a mask, in /network format, for the IP address.

Routing Information Protocol (RIP) | 1249

www.dell.com | support.dell.com

Command Modes
Command
History

EXEC Privilege
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

Example

FTOS#show ip rip database
Total number of routes in RIP database: 1624
204.250.54.0/24
[50/1] via 192.14.1.3, 00:00:12, GigabitEthernet 9/15
204.250.54.0/24
auto-summary
203.250.49.0/24
[50/1] via 192.13.1.3, 00:00:12, GigabitEthernet 9/14
203.250.49.0/24
auto-summary
210.250.40.0/24
[50/2] via 1.1.18.2, 00:00:14, Vlan 18
[50/2] via 1.1.130.2, 00:00:12, Port-channel 30
210.250.40.0/24
auto-summary
207.250.53.0/24
[50/2] via 1.1.120.2, 00:00:55, Port-channel 20
[50/2] via 1.1.130.2, 00:00:12, Port-channel 30
[50/2] via 1.1.10.2, 00:00:18, Vlan 10
207.250.53.0/24
auto-summary
208.250.42.0/24
[50/2] via 1.1.120.2, 00:00:55, Port-channel 20
[50/2] via 1.1.130.2, 00:00:12, Port-channel 30
[50/2] via 1.1.10.2, 00:00:18, Vlan 10
208.250.42.0/24
auto-summary

Table 43-1.

Fields in show ip rip database Command Output

Field

Description

Total number of routes in
RIP database

Displays the number of RIP routes stored in the RIP database.

100.10.10.0/24 directly
connected

Lists the route(s) directly connected.

150.100.0.0 redistributed

Lists the routes learned through redistribution.

209.9.16.0/24...

Lists the routes and the sources advertising those routes.

show running-config rip
ces

Syntax
Defaults
Command Modes
Example

1250

|

Use this feature to display the current RIP configuration.

show running-config rip

No default values or behavior
EXEC Privilege
show running-config rip

Routing Information Protocol (RIP)

!
router rip
distribute-list Test1 in
distribute-list Test21 out
network 10.0.0.0
passive-interface GigabitEthernet 2/0
neighbor 20.20.20.20
redistribute ospf 999
version 2

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.7.1.0

Introduced on C-Series

Version 7.6.1.0

Introduced on E-Series

timers basic
ces

Syntax

Manipulate the RIP timers for routing updates, invalid, holddown times and flush time.

timers basic update invalid holddown flush

To return to the default settings, enter no timers basic.
Parameters

Defaults
Command Modes

update

Enter the number of seconds to specify the rate at which RIP routing updates are
sent.
Range: zero (0) to 4294967295.
Default: 30 seconds.

invalid

Enter the number of seconds to specify the time interval before routing updates
are declared invalid or expired. The invalid value should be at least three times the
update timer value.
Range: zero (0) to 4294967295.
Default: 180 seconds.

holddown

Enter the number of seconds to specify a time interval during which the route is
marked as unreachable but still sending RIP packets. The holddown value should
be at least three times the update timer value.
Range: zero (0) to 4294967295.
Default: 180 seconds.

flush

Enter the number of seconds to specify the time interval during which the route is
advertised as unreachable. When this interval expires, the route is flushed from
the routing table. The flush value should be greater than the update value.
Range: zero (0) to 4294967295.
Default is 240 seconds.

update

= 30 seconds; invalid = 180 seconds; holddown = 180 seconds; flush = 240 seconds.

ROUTER RIP

Routing Information Protocol (RIP) | 1251

www.dell.com | support.dell.com

Command
History

Usage
Information

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

If the timers on one router are changed, the timers on all routers in the RIP domain must also
be synchronized.

version
ces

Syntax

Specify either RIP version 1 or RIP version 2.

version {1 | 2}

To return to the default version setting, enter no version.
Parameters

Default

Enter the keyword 1 to specify RIP version 1.

2

Enter the keyword 2 to specify RIP version 2.

The FTOS sends RIPv1 and receives RIPv1 and RIPv2.

Command Modes

ROUTER RIP

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

Related
Commands

1252

1

|

ip rip receive version

Set the RIP version to be received on the interface.

ip rip send version

Set the RIP version to be sent out the interface.

Routing Information Protocol (RIP)

44
Remote Monitoring (RMON)
Overview
FTOS RMON is implemented on all Dell Force10 switching platforms as indicated by the
characters that appear below each command heading: e E-Series, c C-Series, s
S-Series,
or Z Z-Series.
FTOS RMON is based on IEEE standards, providing both 32-bit and 64-bit monitoring, and
long-term statistics collection. FTOS RMON supports the following RMON groups, as
defined in RFC-2819, RFC-3273, and RFC-3434:
•
•
•
•
•
•
•
•
•

Ethernet Statistics Table
RFC-2819
Ethernet Statistics High-Capacity Table RFC-3273, 64bits
Ethernet History Control Table
RFC-2819
Ethernet History Table
RFC-2819
Ethernet History High-Capacity TableRFC-3273, 64bits
Alarm Table
RFC-2819
High-Capacity Alarm Table (64bits)RFC-3434, 64bits
Event Table
RFC-2819
Log Table
RFC-2819

FTOS RMON does not support the following statistics:
•
•
•

etherStatsCollisions
etherHistoryCollisions
etherHistoryUtilization

Note: Only SNMP GET/GETNEXT access is supported. Configure RMON using the
RMON commands. Collected data is lost during a chassis reboot.

Commands
The FTOS Remote Network Monitoring RMON commands are:
•
•
•

rmon alarm
rmon collection history
rmon collection statistics

Remote Monitoring (RMON) | 1253

www.dell.com | support.dell.com

•
•
•
•
•
•
•
•
•

rmon event
rmon hc-alarm
show rmon
show rmon alarms
show rmon events
show rmon hc-alarm
show rmon history
show rmon log
show rmon statistics

rmon alarm
cesz

Syntax

Set an alarm on any MIB object.

rmon alarm number variable interval {delta | absolute} rising-threshold value event-number
falling-threshold value event-number [owner string]

To disable the alarm, use the no rmon alarm number command.
Parameters

number

Enter the alarm integer number from 1 to 65535. The value must be
unique in the RMON Alarm Table.

variable

The MIB object to monitor. The variable must be in the SNMP OID
format, for example, 1.3.6.1.2.1.1.3 The object type must be a 32 bit
integer.

interval

Time, in seconds, the alarm monitors the MIB variables; this is the
alarmSampleType in the RMON Alarm table.
Range: 5 to 3600 seconds

delta

Enter the keyword delta to test the change between MIB variables.
This is the alarmSampleType in the RMON Alarm table.

absolute

Enter the keyword absolute to test each MIB variable directly. This
is the alarmSampleType in the RMON Alarm table.

rising-threshold value

Enter the keyword rising-threshold followed by the value (32bit)
the rising-threshold alarm is either triggered or reset. Then
enter the event-number to trigger when the rising threshold
exceeds its limit. This value is the same as the
alarmRisingEventIndex or alarmTable of the RMON MIB. If
there is no corresponding rising-threshold event, the value is
zero.

event-number

1254

|

Remote Monitoring (RMON)

falling-threshold value
event-number

(OPTIONAL) Enter the keyword owner followed by the owner
name to specify an owner for the alarm. This is the alarmOwner
object in the alarmTable of the RMON MIB.

owner string

Default
Command Modes
Command
History

Enter the keyword falling-threshold followed by the value (32bit)
the falling-threshold alarm is either triggered or reset. Then
enter the event-number to trigger when the falling threshold
exceeds its limit.
This value is the same as the alarmFallingEventIndex or the
alarmTable of the RMON MIB. If there is no corresponding
falling-threshold event, the value is zero.

owner
CONFIGURATION
Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 6.1.1.0

Introduced for E-Series

rmon collection history
cesz

Syntax

Enable the RMON MIB history group of statistics collection on an interface.

rmon collection history {controlEntry integer} [owner name] [buckets number] [interval seconds]

To remove a specified RMON history group of statistics collection, use the no rmon collection
history {controlEntry integer} command.
Parameters

Defaults

controlEntry integer

Enter the keyword controlEntry to specify the RMON group of
statistics using a value. Then enter an integer value from 1 to 65535
that identifies the RMON group of statistics. The integer value must
be a unique index in the RMON History Table.

owner name

(OPTIONAL) Enter the keyword owner followed by the owner
name to record the owner of the RMON group of statistics.

buckets number

(OPTIONAL) Enter the keyword buckets followed the number of
buckets for the RMON collection history group of statistics.
Bucket Range: 1 to 1000
Default: 50

interval seconds

(OPTIONAL) Enter the keyword interval followed the number of
seconds in each polling cycle.
Range: 5 to 3600 seconds
Default: 1800 seconds

No default behavior

Remote Monitoring (RMON) | 1255

www.dell.com | support.dell.com

Command Modes
Command
History

CONFIGURATION INTERFACE (config-if)
Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 6.1.1.0

Introduced for E-Series

rmon collection statistics
cesz

Syntax

Enable RMON MIB statistics collection on an interface.

rmon collection statistics {controlEntry integer} [owner name]

To remove RMON MIB statistics collection on an interface, use the no rmon collection
statistics {controlEntry integer} command.
Parameters

Defaults
Command Modes
Command
History

controlEntry integer

Enter the keyword controlEntry to specify the RMON group of
statistics using a value. Then enter an integer value from 1 to 65535
that identifies the RMON Statistic Table. The integer value must be a
unique in the RMON Statistic Table.

owner name

(OPTIONAL) Enter the keyword owner followed by the owner
name to record the owner of the RMON group of statistics.

No default behavior
CONFIGURATION INTERFACE (config-if)
Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 6.1.1.0

Introduced for E-Series

rmon event
cesz

Syntax

Add an event in the RMON event table.

rmon event number [log] [trap community] [description string] [owner name]

To disable RMON on an interface, use the no rmon event number [log] [trap community]
[description string] command.

1256

|

Remote Monitoring (RMON)

Parameters

Defaults
Command Modes
Command
History

number

Assign an event number in integer format from 1 to 65535. The
number value must be unique in the RMON Event Table.

log

(OPTIONAL) Enter the keyword log to generate an RMON log
entry. The log entry is triggered and sets the eventType in the RMON
MIB to log or log-and-trap.
Default: No log

trap community

(OPTIONAL) Enter the keyword trap followed by an SNMP
community string to configure the eventType setting in the RMON
MIB. This sets either snmp-trap or log-and-trap.
Default: public

description string

(OPTIONAL) Enter the keyword description followed by a string
describing the event.

owner name

(OPTIONAL) Enter the keyword owner followed by the name of the
owner of this event.

as described above
CONFIGURATION
Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 6.1.1.0

Introduced for E-Series

rmon hc-alarm
cesz

Syntax

Set an alarm on any MIB object.

rmon hc-alarm number variable interval {delta | absolute} rising-threshold value event-number
falling-threshold value event-number [owner string]

To disable the alarm, use the no rmon hc-alarm number command.
Parameters

number

Enter the alarm integer number from 1 to 65535. The value must be
unique in the RMON Alarm Table.

variable

The MIB object to monitor. The variable must be in the SNMP OID
format, for example, 1.3.6.1.2.1.1.3 The object type must be a 64 bit
integer.

interval

Time, in seconds, the alarm monitors the MIB variables; this is the
alarmSampleType in the RMON Alarm table.
Range: 5 to 3600 seconds

delta

Enter the keyword delta to test the change between MIB variables.
This is the alarmSampleType in the RMON Alarm table.

Remote Monitoring (RMON) | 1257

www.dell.com | support.dell.com

absolute

Enter the keyword absolute to test each MIB variable directly. This
is the alarmSampleType in the RMON Alarm table.

rising-threshold value

Enter the keyword rising-threshold followed by the value (64 bit)
the rising-threshold alarm is either triggered or reset. Then enter the
event-number to trigger when the rising threshold exceeds its limit.
This value is the same as the alarmRisingEventIndex or alarmTable
of the RMON MIB. If there is no corresponding rising-threshold
event, the value is zero.

event-number

falling-threshold value
event-number

(OPTIONAL) Enter the keyword owner followed the owner name to
specify an owner for the alarm. This is the alarmOwner object in the
alarmTable of the RMON MIB.

owner string

Defaults
Command Modes
Command
History

Enter the keyword falling-threshold followed by the value (64 bit)
the falling-threshold alarm is either triggered or reset. Then enter the
event-number to trigger when the falling threshold exceeds its limit.
This value is the same as the alarmFallingEventIndex or the
alarmTable of the RMON MIB. If there is no corresponding
falling-threshold event, the value is zero.

owner
CONFIGURATION
Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 6.1.1.0

Introduced for E-Series

show rmon
cesz

Syntax
Defaults
Command Modes
Command
History

Example

1258

|

Display the RMON running status including the memory usage.

show rmon

No default behavior
EXEC
Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 6.1.1.0

Introduced for E-Series

FTOS# show rmon
RMON status

Remote Monitoring (RMON)

total memory used 218840 bytes.
ether statistics table: 8 entries, 4608 bytes
ether history table: 8 entries, 6000 bytes
alarm table: 390 entries, 102960 bytes
high-capacity alarm table: 5 entries, 1680 bytes
event table: 500 entries, 206000 bytes
log table: 2 entries, 552 bytes
FTOS#

show rmon alarms
cesz

Syntax
Parameters

Defaults
Command Modes
Command
History

Display the contents of the RMON Alarm Table.

show rmon alarms [index] [brief]
index

(OPTIONAL) Enter the table index number to display just that entry.

brief

(OPTIONAL) Enter the keyword brief to display the RMON Alarm
Table in an easy-to-read format.

No default behavior
EXEC
Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 6.1.1.0

Introduced for E-Series

Example
(index)

FTOS#show rmon alarm 1
RMON alarm entry 1
sample Interval: 5
object: 1.3.6.1.2.1.1.3
sample type: absolute value.
value: 255161
alarm type: rising or falling alarm.
rising threshold: 1, RMON event index: 1
falling threshold: 501, RMON event index: 501
alarm owner: 1
alarm status: OK
FTOS#

Example
(brief)

FTOS#show rmon alarm br
index
SNMP OID
--------------------------------------------------------------------1
1.3.6.1.2.1.1.3
2
1.3.6.1.2.1.1.3
3
1.3.6.1.2.1.1.3
4
1.3.6.1.2.1.1.3
5
1.3.6.1.2.1.1.3
6
1.3.6.1.2.1.1.3
7
1.3.6.1.2.1.1.3

Remote Monitoring (RMON) | 1259

www.dell.com | support.dell.com

8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
FTOS#

1.3.6.1.2.1.1.3
1.3.6.1.2.1.1.3
1.3.6.1.2.1.1.3
1.3.6.1.2.1.1.3
1.3.6.1.2.1.1.3
1.3.6.1.2.1.1.3
1.3.6.1.2.1.1.3
1.3.6.1.2.1.1.3
1.3.6.1.2.1.1.3
1.3.6.1.2.1.1.3
1.3.6.1.2.1.1.3
1.3.6.1.2.1.1.3
1.3.6.1.2.1.1.3
1.3.6.1.2.1.1.3
1.3.6.1.2.1.1.3

show rmon events
cesz

Syntax
Parameters

Defaults
Command Modes
Command
History

1260

|

Display the contents of RMON Event Table.

show rmon events [index] [brief]
index

(OPTIONAL) Enter the table index number to display just that entry.

brief

(OPTIONAL) Enter the keyword brief to display the RMON Event
Table in an easy-to-read format.

No default behavior
EXEC
Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 6.1.1.0

Introduced for E-Series

Example
(index)

FTOS#show rmon event 1
RMON event entry 1
description: 1
event type: LOG and SNMP TRAP.
event community: public
event last time sent: none
event owner: 1
event status: OK
FTOS#

Example
(brief)

FTOS#show rmon event br
index
description
-------------------------------------------------------------------1
1
2
2
3
3
4
4
5
5

Remote Monitoring (RMON)

6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
FTOS#

6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22

show rmon hc-alarm
cesz

Syntax
Parameters

Defaults
Command Modes
Command
History

Display the contents of RMON High-Capacity Alarm Table.

show rmon hc-alarm [index] [brief]
index

(OPTIONAL) Enter the table index number to display just that entry.

brief

(OPTIONAL) Enter the keyword brief to display the RMON
High-Capacity Alarm Table in an easy-to-read format.

No default behavior
EXEC
Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 6.1.1.0

Introduced for E-Series

Example
(brief)

FTOS#show rmon hc-alarm brief
index
SNMP OID
-------------------------------------------------------------------1
1.3.6.1.2.1.1.3
2
1.3.6.1.2.1.1.3
3
1.3.6.1.2.1.1.3
4
1.3.6.1.2.1.1.3
5
1.3.6.1.2.1.1.3
FTOS#

Example
(index)

FTOS#show rmon hc-alarm 1
RMON high-capacity alarm entry 1

Remote Monitoring (RMON) | 1261

www.dell.com | support.dell.com

object: 1.3.6.1.2.1.1.3
sample interval: 5
sample type: absolute value.
value: 185638
alarm type: rising or falling alarm.
alarm rising threshold value: positive.
rising threshold: 1001, RMON event index: 1
alarm falling threshold value: positive.
falling threshold: 999, RMON event index: 6
alarm sampling failed 0 times.
alarm owner: 1
alarm storage type: non-volatile.
alarm status: OK
FTOS#

show rmon history
cesz

Syntax
Parameters

Defaults
Command Modes
Command
History

1262

|

Display the contents of the RMON Ethernet History table.

show rmon history [index] [brief]
index

(OPTIONAL) Enter the table index number to display just that entry.

brief

(OPTIONAL) Enter the keyword brief to display the RMON
Ethernet History table in an easy-to-read format.

No default behavior
EXEC
Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 6.1.1.0

Introduced for E-Series

Example
(index)

FTOS#show rmon history 6001
RMON history control entry 6001
interface: ifIndex.100974631 GigabitEthernet 2/0
bucket requested: 1
bucket granted: 1
sampling interval: 5 sec
owner: 1
status: OK
FTOS#

Example
(brief)

FTOS#show rmon history brief
index
ifIndex
interface
--------------------------------------------------------------------6001
100974631
GigabitEthernet 2/0
6002
100974631
GigabitEthernet 2/0
6003
101236775
GigabitEthernet 2/1
6004
101236775
GigabitEthernet 2/1
9001
134529054
GigabitEthernet 3/0
9002
134529054
GigabitEthernet 3/0
9003
134791198
GigabitEthernet 3/1

Remote Monitoring (RMON)

9004
FTOS#

134791198

GigabitEthernet 3/1

show rmon log
cesz

Syntax
Parameters

Defaults
Command Modes
Command
History

Display the contents of RMON Log Table.

show rmon log [index] [brief]
index

(OPTIONAL) Enter the log index number to display just that entry.

brief

(OPTIONAL) Enter the keyword brief to display the RMON Log
Table in an easy-to-read format.

No default behavior
EXEC
Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 6.1.1.0

Introduced for E-Series

Example
(index)

FTOS#show rmon log 2
RMON log entry, alarm table index 2, log index 1
log time: 14638 (THU AUG 12 22:10:40 2004)
description: 2
FTOS#

Example
(brief)

FTOS#show rmon log br
eventIndex
description
--------------------------------------------------------------------2
2
4
4
FTOS#

Usage
Information

The log table has a maximum of 500 entries. If the log exceeds that maximum, the oldest log
entry is purged to allow room for the new entry.

show rmon statistics
cesz

Syntax
Parameters

Display the contents of RMON Ethernet Statistics table.

show rmon statistics [index] [brief]
index

(OPTIONAL) Enter the index number to display just that entry.

brief

(OPTIONAL) Enter the keyword brief to display the RMON
Ethernet Statistics table in an easy-to-read format.

Remote Monitoring (RMON) | 1263

www.dell.com | support.dell.com
1264

Defaults
Command Modes
Command
History

|

No default behavior
EXEC
Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 6.1.1.0

Introduced for E-Series

Example
(index)

FTOS#show rmon statistics 6001
RMON statistics entry 6001
interface: ifIndex.100974631 GigabitEthernet 2/0
packets dropped: 0
bytes received: 0
packets received: 0
broadcast packets: 0
multicast packets: 0
CRC error: 0
under-size packets: 0
over-size packets: 0
fragment errors: 0
jabber errors: 0
collision: 0
64bytes packets: 0
65-127 bytes packets: 0
128-255 bytes packets: 0
256-511 bytes packets: 0
512-1023 bytes packets: 0
1024-1518 bytes packets: 0
owner: 1
status: OK

HC packets received overflow: 0
HC packets received: 0
HC bytes received overflow: 0
HC bytes received: 0
HC 64bytes packets overflow: 0
HC 64bytes packets: 0
HC 65-127 bytes packets overflow: 0
HC 65-127 bytes packets: 0
HC 128-255 bytes packets overflow: 0
HC 128-255 bytes packets: 0
HC 256-511 bytes packets overflow: 0
HC 256-511 bytes packets: 0
HC 512-1023 bytes packets overflow: 0
HC 512-1023 bytes packets: 0
HC 1024-1518 bytes packets overflow: 0
HC 1024-1518 bytes packets: 0
FTOS#

Example
(brief)

FTOS#show rmon statistics br
index
ifIndex
interface
-------------------------------------------------------------------6001
100974631
GigabitEthernet 2/0
6002
100974631
GigabitEthernet 2/0
6003
101236775
GigabitEthernet 2/1
6004
101236775
GigabitEthernet 2/1

Remote Monitoring (RMON)

9001
9002
9003
9004
FTOS#

134529054
134529054
134791198
134791198

GigabitEthernet
GigabitEthernet
GigabitEthernet
GigabitEthernet

3/0
3/0
3/1
3/1

Remote Monitoring (RMON) | 1265

1266

|

Remote Monitoring (RMON)

www.dell.com | support.dell.com

45
Rapid Spanning Tree Protocol (RSTP)
Overview
The FTOS implementation of RSTP (Rapid Spanning Tree Protocol) is based on the IEEE
802.1w standard spanning-tree protocol. The RSTP algorithm configures connectivity
throughout a bridged LAN that is comprised of LANs interconnected by bridges.
RSTP is supported by FTOS on all Dell Force10 systems, as indicated by the characters that
appear below each command heading: C-Series: c, E-Series: e, S-Series: s, or
.

Commands
The FTOS RSTP commands are:
•
•
•
•
•
•
•
•
•
•
•
•

bridge-priority
debug spanning-tree rstp
description
description
forward-delay
hello-time
max-age
protocol spanning-tree rstp
show config
show spanning-tree rstp
spanning-tree rstp
tc-flush-standard

bridge-priority
ces

Syntax

Set the bridge priority for RSTP.

bridge-priority priority-value

Rapid Spanning Tree Protocol (RSTP) | 1267

www.dell.com | support.dell.com

To return to the default value, enter no bridge-priority.
Parameters

Defaults
Command Modes
Command
History

Related
Commands

priority-value

Enter a number as the bridge priority value in increments of 4096.
Range: 0 to 61440
Default: 32768

32768
CONFIGURATION RSTP (conf-rstp)
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 6.2.1.1

Introduced for E-Series

protocol spanning-tree rstp

Enter the Rapid Spanning Tree mode

debug spanning-tree rstp
ces

Syntax

Enable debugging of RSTP and view information on the protocol.

debug spanning-tree rstp [all | bpdu interface {in | out} | events]

To disable debugging, enter no debug spanning-tree rstp.

1268

|

Rapid Spanning Tree Protocol (RSTP)

Parameters

Command Modes
Command
History

Example

all

(OPTIONAL) Enter the keyword all to debug all spanning tree operations.

bpdu interface {in |
out}

(OPTIONAL) Enter the keyword bpdu to debug Bridge Protocol Data Units.
(OPTIONAL) Enter the interface keyword along with the type slot/port of the
interface you want displayed. Type slot/port options are the following:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by
the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by
a number:
C-Series and S-Series Range: 1 to 128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a SONET interface, enter the keyword sonet followed by the slot/port
information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed
by the slot/port information.
Optionally, enter an in or out parameter in conjunction with the optional
interface:
• For Receive, enter in
• For Transmit, enter out

events

(OPTIONAL) Enter the keyword events to debug RSTP events.

EXEC Privilege
Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 6.2.1.1

Introduced for E-Series

FTOS#debug spanning-tree rstp bpdu gigabitethernet 2/0 ?in Receive (in) out Transmit (out)

description
ces

Syntax

Enter a description of the Rapid Spanning Tree

description {description}

To remove the description, use the no description {description} command.
Parameters

Defaults

description

Enter a description to identify the Rapid Spanning Tree (80 characters
maximum).

No default behavior or values

Rapid Spanning Tree Protocol (RSTP) | 1269

www.dell.com | support.dell.com

Command Modes
Command
History

Related
Commands

SPANNING TREE (The prompt is “config-rstp”.)
Version 8.3.7.0

Introduced on S4810

pre-7.7.1.0

Introduced

protocol spanning-tree rstp

Enter SPANNING TREE mode on the switch.

disable
ces

Syntax

Disable RSTP globally on the system.

disable

To enable Rapid Spanning Tree Protocol, enter no disable.
Defaults
Command Modes
Command
History

Related
Commands

RSTP is disabled
CONFIGURATION RSTP (conf-rstp)
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 6.2.1.1

Introduced for E-Series

protocol spanning-tree rstp

Enter the Rapid Spanning Tree mode

forward-delay
ces

Syntax

Configure the amount of time the interface waits in the Listening State and the Learning State
before transitioning to the Forwarding State.
forward-delay seconds

To return to the default setting, enter no forward-delay.
Parameters

Defaults
Command Modes

1270

|

seconds

Enter the number of seconds that FTOS waits before transitioning RSTP to the
forwarding state.
Range: 4 to 30
Default: 15 seconds

15 seconds
CONFIGURATION RSTP (conf-rstp)

Rapid Spanning Tree Protocol (RSTP)

Command
History

Related
Commands

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 6.2.1.1

Introduced for E-Series

hello-time

Change the time interval between BPDUs.

max-age

Change the wait time before RSTP refreshes protocol configuration information.

hello-time
ces

Syntax

Set the time interval between generation of RSTP Data Units (BPDUs).

hello-time [milli-second] seconds

To return to the default value, enter no hello-time.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

seconds

Enter a number as the time interval between transmission of BPDUs.
Range: 1 to 10 seconds
Default: 2 seconds.

milli-second

Enter this keyword to configure a hello time on the order of milliseconds.
Range: 50 - 950 milliseconds

2 seconds
CONFIGURATION RSTP (conf-rstp)
Version 8.3.7.0

Introduced on S4810

Version 8.3.1.0

Added milli-second to S-Series.

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 6.2.1.1

Introduced for E-Series

The hello time is encoded in BPDUs in increments of 1/256ths of a second. The standard
minimum hello time in seconds is 1 second, which is encoded as 256. Millisecond hello times
are encoded using values less than 256; the millisecond hello time equals (x/1000)*256.
When millisecond hellos are configured, the default hello interval of 2 seconds is still used for
edge ports; the millisecond hello interval is not used.

Related
Commands

forward-delay

Change the wait time before RSTP transitions to the Forwarding state.

max-age

Change the wait time before RSTP refreshes protocol configuration information.

Rapid Spanning Tree Protocol (RSTP) | 1271

www.dell.com | support.dell.com

max-age
ces

Syntax

Set the time interval for the RSTP bridge to maintain configuration information before
refreshing that information.
max-age seconds

To return to the default values, enter no max-age.
Parameters

Defaults
Command Modes
Command
History

Related
Commands

max-age

Enter a number of seconds the FTOS waits before refreshing configuration
information.
Range: 6 to 40 seconds
Default: 20 seconds

20 seconds
CONFIGURATION RSTP (conf-rstp)
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 6.2.1.1

Introduced for E-Series

max-age

Change the wait time before RSTP transitions to the Forwarding state.

hello-time

Change the time interval between BPDUs.

protocol spanning-tree rstp
ces

Syntax

Enter the RSTP mode to configure RSTP.

protocol spanning-tree rstp

To exit the RSTP mode, enter exit.
Defaults
Command Modes
Command
History

Example

1272

|

Not configured
CONFIGURATION RSTP (conf-rstp)
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 6.2.1.1

Introduced for E-Series

FTOS(conf)#protocol spanning-tree rstp
FTOS(config-rstp)##no disable

Rapid Spanning Tree Protocol (RSTP)

Usage
Information

RSTP is not enabled when you enter the RSTP mode. To enable RSTP globally on the
system, enter no disable from the RSTP mode.

Related
Commands

disable

Disable RSTP globally on the system.

show config
ces

Syntax
Command Modes
Command
History

View the current configuration for the mode. Only non-default values are displayed.

show config

CONFIGURATION RSTP (conf-rstp)
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 6.2.1.1

Introduced for E-Series

Example

FTOS(conf-rstp)#show config
!
protocol spanning-tree rstp
no disable
bridge-priority 16384

show spanning-tree rstp
ces

Syntax
Parameters

Command Modes

Display the RSTP configuration.

show spanning-tree rstp [brief] [guard]
brief

(OPTIONAL) Enter the keyword brief to view a synopsis of the
RSTP configuration information.

guard

(OPTIONAL) Enter the keyword guard to display the type of guard
enabled on an RSTP interface and the current port state.

EXEC
EXEC Privilege

Command
History

Version 8.4.2.1

Support for the optional guard keyword was added on the C-Series, S-Series,
and E-Series TeraScale.

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Rapid Spanning Tree Protocol (RSTP) | 1273

www.dell.com | support.dell.com

Example
(brief)

Version 7.5.1.0

Support added for C-Series

Version 6.4.1.0

Expanded to display port error disable state (EDS) caused by loopback BPDU
inconsistency

Version 6.2.1.1

Introduced for E-Series

FTOS#show spanning-tree rstp brief
Executing IEEE compatible Spanning Tree Protocol
Root ID
Priority 8192, Address 0001.e805.e306
Root Bridge hello time 4, max age 20, forward delay 15
Bridge ID
Priority 16384, Address 0001.e801.6aa8
Configured hello time 2, max age 20, forward delay 15
Interface
Name
---------Gi 4/0
Gi 4/1
Gi 4/8
Gi 4/9
Interface
Name
---------Gi 4/0
Gi 4/1
Gi 4/8
Gi 4/9
FTOS#

Example
(with EDS & LBK)

PortID
-------128.418
128.419
128.426
128.427

Role
-----Desg
Desg
Root
Altr

Prio
---128
128
128
128

Cost
------20000
20000
20000
20000

PortID
-------128.418
128.419
128.426
128.427

Prio
---128
128
128
128

Sts
--FWD
FWD
FWD
BLK

Designated
Bridge ID
-------------------16384 0001.e801.6aa8
16384 0001.e801.6aa8
8192 0001.e805.e306
8192 0001.e805.e306

Cost
------20000
20000
20000
20000

Cost
------20000
20000
20000
20000

Sts
--FWD
FWD
FWD
BLK

Cost
------20000
20000
20000
20000

Link-type
--------P2P
P2P
P2P
P2P

PortID
-------128.418
128.419
128.130
128.131

Edge
---Yes
Yes
No
No

FTOS#show spanning-tree rstp br
Executing IEEE compatible Spanning Tree Protocol
Root ID
Priority 32768, Address 0001.e801.6aa8
Root Bridge hello time 2, max age 20, forward delay 15
Bridge ID
Priority 32768, Address 0001.e801.6aa8
We are the root
Configured hello time 2, max age 20, forward delay 15
Interface
Designated
Name
PortID
Prio Cost
Sts Cost
Bridge ID
PortID
---------- -------- ---- ------- --- ------- -------------------- -------Gi 0/0
128.257 128 20000
EDS 0
32768 0001.e801.6aa8 128.257
Interface
Name
Role
PortID
Prio Cost
Sts Cost
Link-type Edge
---------- ------ -------- ---- ------- --- ------- --------- ---Gi 0/0
ErrDis 128.257 128 20000
EDS 0
P2P
No
FTOS#show spanning-tree rstp
Root Identifier has priority 32768, Address 0001.e801.6aa8
Root Bridge hello time 2, max age 20, forward delay 15, max hops 0
Bridge Identifier has priority 32768, Address 0001.e801.6aa8
Configured hello time 2, max age 20, forward delay 15, max hops 0
We are the root
Current root has priority 32768, Address 0001.e801.6aa8
Number of topology changes 1, last change occurred 00:00:31 ago on Gi 0/0
Port 257 (GigabitEthernet 0/0) is LBK_INC Discarding
Port path cost 20000, Port priority 128, Port Identifier 128.257
Designated root has priority 32768, address 0001.e801.6aa8
Designated bridge has priority 32768, address 0001.e801.6aa8

1274

|

Rapid Spanning Tree Protocol (RSTP)

Designated port id is 128.257, designated path cost 0
Number of transitions to forwarding state 1
BPDU : sent 27, received 9
The port is not in the Edge port mode

Example
(guard)

FTOS#show spanning-tree rstp guard
Interface
Name
Instance
Sts
--------- ---------------Gi 0/1
0
INCON(Root)
Gi 0/2
0
FWD
Gi 0/3
0
BLK

Table 45-1.

Guard type
---------Rootguard
Loopguard
Bpduguard

show spanning-tree rstp guard Command Information

Field

Description

Interface Name

RSTP interface

Instance

RSTP instance

Sts

Port state: root-inconsistent (INCON Root), forwarding (FWD), listening
(LIS), blocking (BLK), disabled (DIS), or shut down (EDS Shut)

Guard Type

Type of STP guard configured (Root, Loop, or BPDU guard)

spanning-tree rstp
ces

Syntax

Parameters

Configure an RSTP interface with one of these settings: port cost, edge port with optional
Bridge Port Data Unit (BPDU) guard, port priority, loop guard, or root guard.
spanning-tree rstp {cost port-cost | edge-port [bpduguard [shutdown-on-violation]] | priority
priority | {loopguard | rootguard}}
cost port-cost

Enter the keyword cost followed by the port cost value.
Range: 1 to 200000
Defaults:
100 Mb/s Ethernet interface = 200000
1-Gigabit Ethernet interface = 20000
10-Gigabit Ethernet interface = 2000
Port Channel interface with one 100 Mb/s Ethernet = 200000
Port Channel interface with one 1-Gigabit Ethernet = 20000
Port Channel interface with one 10-Gigabit Ethernet = 2000
Port Channel with two 1-Gigabit Ethernet = 18000
Port Channel with two 10-Gigabit Ethernet = 1800
Port Channel with two 100-Mbps Ethernet = 180000

edge-port

Enter the keyword edge-port to configure the interface as a Rapid Spanning
Tree edge port.

bpduguard

(OPTIONAL) Enter the keyword portfast to enable Portfast to move the
interface into forwarding mode immediately after the root fails.
Enter the keyword bpduguard to disable the port when it receives a BPDU.

Rapid Spanning Tree Protocol (RSTP) | 1275

www.dell.com | support.dell.com

Defaults
Command Modes
Command
History

Usage
Information

shutdown-on-vi
olation

(OPTIONAL) Enter the keyword shutdown-on-violation to hardware
disable an interface when a BPDU is received and the port is disabled.

priority priority

Enter keyword priority followed by a value in increments of 16 as the
priority.
Range: 0 to 240
Default: 128

loopguard

(C-, S-, and E-Series TeraScale only) Enter the keyword loopguard to
enable loop guard on an RSTP port or port-channel interface.

rootguard

(C-, S-, and E-Series TeraScale only) Enter the keyword rootguard to
enable root guard on an RSTP port or port-channel interface.

Not configured
INTERFACE
Version 8.4.2.1

Introduced the loopguard and rootguard options on the E-Series TeraScale,
C-Series, and S-Series.

version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduced hardware shutdown-on-violation options

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 7.4.1.0

Added the optional Bridge Port Data Unit (BPDU) guard.

Version 6.2.1.1

Introduced for E-Series

The BPDU guard option prevents the port from participating in an active STP topology in
case a BPDU appears on a port unintentionally, or is mis-configured, or is subject to a DOS
attack. This option places the port into an error disable state if a BPDU appears, and a
message is logged so that the administrator can take corrective action.
Note: A port configured as an edge port, on an RSTP switch, will immediately
transition to the forwarding state. Only ports connected to end-hosts should be
configured as edge ports. Consider an edge port similar to a port with a
spanning-tree portfast enabled.

If shutdown-on-violation is not enabled, BPDUs will still be sent to the RPM CPU.
STP root guard and loop guard cannot be enabled at the same time on a port. For example, if
you configure loop guard on a port on which root guard is already configured, the following
error message is displayed:
% Error: RootGuard is configured. Cannot configure LoopGuard.

Enabling Portfast BPDU guard and loop guard at the same time on a port results in a port that
remains in a blocking state and prevents traffic from flowing through it. For example, when
Portfast BPDU guard and loop guard are both configured:
•

1276

|

If a BPDU is received from a remote device, BPDU guard places the port in an
err-disabled blocking state and no traffic is forwarded on the port.

Rapid Spanning Tree Protocol (RSTP)

•
Example

If no BPDU is received from a remote device, loop guard places the port in a
loop-inconsistent blocking state and no traffic is forwarded on the port.

FTOS(conf)#interface gigabitethernet 4/0
FTOS(conf-if-gi-4/0)#spanning-tree rstp edge-port
FTOS(conf-if-gi-4/0)#show config
!
interface GigabitEthernet 4/0
no ip address
switchport
spanning-tree rstp edge-port
no shutdown
FTOS#

tc-flush-standard
ces

Syntax

Enable the MAC address flushing upon receiving every topology change notification.

tc-flush-standard

To disable, use the no tc-flush-standard command.
Defaults
Command Modes
Command
History

Usage
Information

Disabled
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 6.5.1.0

Introduced for E-Series

By default FTOS implements an optimized flush mechanism for RSTP. This helps in flushing
MAC addresses only when necessary (and less often), allowing for faster convergence during
topology changes. However, if a standards-based flush mechanism is needed, this knob
command can be turned on to enable flushing MAC addresses upon receiving every topology
change notification.

Rapid Spanning Tree Protocol (RSTP) | 1277

www.dell.com | support.dell.com
1278

|

Rapid Spanning Tree Protocol (RSTP)

46
Security
Overview
Except for the Trace List feature (E-Series only), most of the commands in this chapter are
available on all Dell Force10 platforms, as indicated by the characters that appear under each
of the command headings: e E-Series, c C-Series, s S-Series, or
.

Commands
This chapter contains various types of security commands in FTOS, in the following sections:
•
•
•
•
•
•
•
•
•

AAA Accounting Commands
Authorization and Privilege Commands
Authentication and Password Commands
RADIUS Commands
TACACS+ Commands
Port Authentication (802.1X) Commands
SSH Server and SCP Commands
Trace List Commands
Secure DHCP Commands

For configuration details, refer to the Security chapter in the FTOS Configuration Guide.
Note: Starting with FTOS v7.2.1.0, LEAP with MSCHAP v2 supplicant is implemented.

AAA Accounting Commands
AAA Accounting enables tracking of services that users are accessing and the amount of
network resources being consumed by those services.When AAA Accounting is enabled, the
network server reports user activity to the TACACS+ security server in the form of
accounting records. Each accounting record is comprised of accounting AV pairs and is stored
on the access control server.

Security | 1279

www.dell.com | support.dell.com

As with authentication and authorization, you must configure AAA Accounting by defining
named list of accounting methods, and then apply that list to various interfaces. The
commands are:
•
•
•
•

aaa accounting
aaa accounting suppress
accounting
show accounting

aaa accounting
ces

Syntax

Enable AAA Accounting and create a record for monitoring the accounting function.

aaa accounting {system | exec | commands level} {name | default} {start-stop | wait-start | stop-only}

{tacacs+}
To disable AAA Accounting, use the no aaa accounting {system | exec | command level} {name |
default} {start-stop | wait-start | stop-only} {tacacs+} command.
Parameters

Defaults
Command Modes
Command
History

1280

|

Security

system

Enter the keyword system to send accounting information of any other AAA
configuration.

exec

Enter the keyword exec to send accounting information when a user has
logged in to the EXEC mode.

commands level

Enter the keyword command followed by a privilege level for accounting of
commands executed at that privilege level.

name | default

Enter one of the following:
• For name, a user-defined name of a list of accounting methods
• default for the default accounting methods

start-stop

Enter the keyword start-stop to send a “start accounting” notice at the
beginning of the requested event and a “stop accounting” notice at the end of
the event.

wait-start

Enter the keyword wait-start to ensure that the TACACS+ security server
acknowledges the start notice before granting the user’s process request.

stop-only

Enter the keyword stop-only to instruct the TACACS+ security server to
send a “stop record accounting” notice at the end of the requested user
process.

tacacs+

Enter the keyword tacacs+ to use TACACS+ data for accounting. FTOS
currently only supports TACACS+ accounting.

No default configuration or behavior
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

Version 6.3.1.0

Introduced for E-Series

Example

FTOS(conf)# aaa accounting exec default start-stop tacacs+
FTOS(conf)# aaa accounting command 15 default start-stop tacacs+
FTOS (config)#

Usage
Information

In the example above, TACACS+ accounting is used to track all usage of EXEC command
and commands on privilege level 15.
Privilege level 15 is the default. If you want to track usage at privilege level 1, for example,
use aaa accounting command 1.

Related
Commands

enable password

Change the password for the enable command.

login authentication

Enable AAA login authentication on terminal lines.

password

Create a password.

tacacs-server host

Specify a TACACS+ server host.

aaa accounting suppress
ces

Syntax

Prevent the generation of accounting records of users with user name value of NULL.

aaa accounting suppress null-username

To permit accounting records to users with user name value of NULL, use the no aaa
accounting suppress null-username command
Defaults
Command Modes
Command
History

Usage
Information

Accounting records are recorded for all users.
CONFIGURATION
Version

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

Version 6.3.1.0

Introduced

FTOS issues accounting records for all users on the system, including users whose username
string, due to protocol translation, is NULL. For example, a user who comes on line with the
aaa authentication login method-list none command is applied. Use aaa accounting suppress
command to prevent accounting records from being generated for sessions that do not have
user names associated to them.

Security | 1281

www.dell.com | support.dell.com

accounting
ces
Syntax
Parameters

Apply an accounting method list to terminal lines.
accounting {exec | commands level} method-list
exec

Enter this keyword to apply an EXEC level accounting method list.

commands level

Enter this keyword to apply an EXEC and CONFIGURATION level
accounting method list.

method-list

Enter a method list that you defined using the command aaa
accounting exec or aaa accounting commands.

Defaults

None

Command Modes

LINE

Command
History

Usage
Information

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

Version 6.3.1.0

Introduced on E-Series

aaa accounting

Enable AAA Accounting and create a record for monitoring the accounting
function.

show accounting
ces

Syntax
Defaults
Command Modes
Command
History

Example

Display the active accounting sessions for each online user.

show accounting

No default configuration or behavior
EXEC
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

Version 6.3.1.0

Introduced

FTOS#show accounting
Active accounted actions on tty2, User admin Priv 1
Task ID 1, EXEC Accounting record, 00:00:39 Elapsed, service=shell
Active accounted actions on tty3, User admin Priv 1
Task ID 2, EXEC Accounting record, 00:00:26 Elapsed, service=shell
FTOS#

1282

|

Security

Usage
Information

This command steps through all active sessions and then displays the accounting records for
the active account functions.

Authorization and Privilege Commands
Set command line authorization and privilege levels with the following commands:
•
•
•
•
•
•

authorization
aaa authorization commands
aaa authorization config-commands
aaa authorization exec
privilege level (CONFIGURATION mode)
privilege level (LINE mode)

authorization
ces

Syntax
Parameters

Apply an authorization method list to terminal lines.

authorization {exec | commands level} method-list
exec

Enter this keyword to apply an EXEC level authorization method
list.

commands level

Enter this keyword to apply an EXEC and CONFIGURATION level
authorization method list.

method-list

Enter a method list that you defined using the command aaa
authorization exec or aaa authorization commands.

Defaults

None

Command Modes

LINE

Command
History

Usage
Information

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

Version 6.3.1.0

Introduced on E-Series

aaa authorization commands

Set parameters that restrict (or permit) a user’s access to EXEC and
CONFIGURATION level commands

aaa authorization exec

Set parameters that restrict (or permit) a user’s access to EXEC
level commands.

Security | 1283

www.dell.com | support.dell.com

aaa authorization commands
ces

Syntax

Set parameters that restrict (or permit) a user’s access to EXEC and CONFIGURATION level
commands
aaa authorization commands level {name | default} {local

|| tacacs+ || none}

Undo a configuration with the no aaa authorization commands level {name | default} {local ||
|| none} command syntax.

tacacs+
Parameters

Defaults
Command Modes
Command
History

commands level

Enter the keyword commands followed by the command
privilege level for command level authorization.

name

Define a name for the list of authorization methods.

default

Define the default list of authorization methods.

local

Use the authorization parameters on the system to perform
authorization.

tacacs+

Use the TACACS+ protocol to perform authorization.

none

Enter this keyword to apply no authorization.

None
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

Version 6.1.1.0

Added support for RADIUS

aaa authorization config-commands
Set parameters that restrict (or permit) a user’s access to EXEC level commands.

e
Syntax

aaa authorization config-commands

Disable authorization checking for CONFIGURATION level commands using the command
no aaa authorization config-commands.
Defaults
Command Modes
Command
History

1284

|

Security

Enabled when you configure aaa authorization commands
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.5.1.0

Introduced for E-Series

Usage
Information

By default, the command aaa authorization commands configures the system to check both
EXEC level and CONFIGURATION level commands. Use the command no aaa authorization
config-commands to enable only EXEC-level command checking.

aaa authorization exec
ces

Syntax

Set parameters that restrict (or permit) a user’s access to EXEC-level commands.

aaa authorization exec {name | default} {local

|| tacacs+ || if-authenticated || none}

Disable authorization checking for EXEC level commands using the command no aaa
authorization exec.
Parameters

Defaults
Command Modes
Command
History

name

Define a name for the list of authorization methods.

default

Define the default list of authorization methods.

local

Use the authorization parameters on the system to perform
authorization.

tacacs+

Use the TACACS+ protocol to perform authorization.

none

Enter this keyword to apply no authorization.

None
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

Version 6.1.1.0

Added support for RADIUS

privilege level (CONFIGURATION mode)
ces

Syntax

Change the access or privilege level of one or more commands.

privilege mode {level level command | reset command}

To delete access to a level and command, use the no privilege mode level level command
command.

Security | 1285

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes
Command
History

Usage
Information

mode

Enter one of the following keywords as the mode for which you are controlling
access:
• configure for the CONFIGURATION mode
• exec for the EXEC mode
• interface for the INTERFACE modes
• line for the LINE mode
• route-map for the ROUTE-MAP
• router for the ROUTER OSPF, ROUTER RIP, ROUTER ISIS and ROUTER
BGP modes.

level level

Enter the keyword level followed by a number for the access level.
Range: 0 to 15.
Level 1 is the EXEC mode and Level 15 allows access to all CLI modes and
commands.

reset

Enter the keyword reset to return the security level to the default setting.

command

Enter the command’s keywords to assign the command to a certain access level.
You can enter one or all of the keywords

Not configured.
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Use the enable password command to define a password for the level to which you are
assigning privilege or access.

privilege level (LINE mode)
ces

Syntax

Change the access level for users on the terminal lines.

privilege level level

To delete access to a terminal line, use the no privilege level level command.
Parameters

Defaults
Command Modes

1286

|

Security

level level

level

= 15

LINE

Enter the keyword level followed by a number for the access level.
Range: 0 to 15.
Level 1 is the EXEC mode and Level 15 allows access to all CLI modes.

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Authentication and Password Commands
This section contains the following commands controlling management access to the system:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

aaa authentication enable
aaa authentication login
access-class
enable password
enable restricted
enable secret
login authentication
password
password-attributes
privilege level (CONFIGURATION mode)
privilege level (LINE mode)
service password-encryption
show privilege
show users
timeout login response
username

aaa authentication enable
ces

Syntax

Configure AAA Authentication method lists for user access to the EXEC privilege mode (the
“Enable” access).
aaa authentication enable {default | method-list-name} method [... method2]

To return to the default setting, use the no aaa authentication enable {default | method-list-name}
method [... method2] command.

Security | 1287

www.dell.com | support.dell.com

Parameters

default

Enter the keyword default followed by the authentication methods to
use as the default sequence of methods to be used for the Enable
log-in.
Default: default enable

method-list-name

Enter a text string (up to 16 characters long) to name the list of enabled
authentication methods activated at log in.

method

Enter one of the following methods:
•

enable - use the password defined by the enable password

command in the CONFIGURATION mode.
line - use the password defined by the password command in the
LINE mode.
none - no authentication.
radius - use the RADIUS server(s) configured with the
radius-server host command.
tacacs+ - use the TACACS+ server(s) configured with the
tacacs-server host command.

•
•
•
•
... method2

Defaults
Command Modes
Command
History

Usage
Information

(OPTIONAL) In the event of a “no response” from the first method,
FTOS applies the next configured method.

Use the enable password.
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

Version 6.2.1.1

Introduced

By default, the Enable password is used. If aaa authentication enable default is configured,
FTOS will use the methods defined for Enable access instead.
Methods configured with the aaa authentication enable command are evaluated in the order
they are configured. If authentication fails using the primary method, FTOS employs the
second method (or third method, if necessary) automatically. For example, if the TACACS+
server is reachable, but the server key is invalid, FTOS proceeds to the next authentication
method. The TACACS+ is incorrect, but the user is still authenticated by the secondary
method.

Related
Commands

1288

|

Security

enable password

Change the password for the enable command.

login authentication

Enable AAA login authentication on terminal lines.

password

Create a password.

radius-server host

Specify a RADIUS server host.

tacacs-server host

Specify a TACACS+ server host.

aaa authentication login
ces

Syntax

Configure AAA Authentication method lists for user access to the EXEC mode (Enable
log-in).
aaa authentication login {method-list-name | default} method [... method4]

To return to the default setting, use the no aaa authentication login {method-list-name | default}
command.
Parameters

method-list-name

Enter a text string (up to 16 characters long) as the name of a
user-configured method list that can be applied to different lines.

default

Enter the keyword default to specify that the method list specified is the
default method for all terminal lines.

method

Enter one of the following methods:
•
•
•
•
•
•

... method4

Default
Command Modes
Command
History

Usage
Information

enable - use the password defined by the enable password command

in the CONFIGURATION mode.
line - use the password defined by the password command in the
LINE mode.
local - use the user name/password defined by the in the local
configuration.
none - no authentication.
radius - use the RADIUS server(s) configured with the radius-server
host command.
tacacs+ - use the TACACS+ server(s) configured with the
tacacs-server host command.

(OPTIONAL) Enter up to four additional methods. In the event of a “no
response” from the first method, FTOS applies the next configured
method (up to four configured methods).

Not configured (that is, no authentication is performed)
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

pre-Version 6.2.1.0

Introduced on E-Series

By default, the locally configured username password will be used. If aaa authentication login
is configured, FTOS will use the methods defined by this command for login instead.

default

Security | 1289

www.dell.com | support.dell.com

Methods configured with the aaa authentication login command are evaluated in the order
they are configured. If users encounter an error with the first method listed, FTOS applies the
next method configured. If users fail the first method listed, no other methods are applied.
The only exception is the local method. If the user’s name is not listed in the local database,
the next method is applied. If the correct user name/password combination are not entered,
the user is not allowed access to the switch.
Note: If authentication fails using the primary method, FTOS employs the second
method (or third method, if necessary) automatically. For example, if the TACACS+
server is reachable, but the server key is invalid, FTOS proceeds to the next
authentication method. The TACACS+ is incorrect, but the user is still authenticated
by the secondary method.

After configuring the aaa authentication login command, configure the login authentication
command to enable the authentication scheme on terminal lines.
Connections to the SSH server will work with the following login mechanisms: local, radius
and tacacs.
Related
Commands

login authentication

Apply an authentication method list to designated terminal lines.

password

Create a password.

radius-server host

Specify a RADIUS server host.

tacacs-server host

Specify a TACACS+ server host.

access-class
ces

Syntax

Restrict incoming connections to a particular IP address in a defined IP access control list
(ACL).
access-class access-list-name

To delete a setting, use the no access-class command.
Parameters

Defaults
Command Modes
Command
History

1290

|

Security

access-list-name

Enter the name of an established IP Standard ACL.

Not configured.
LINE
Version 8.3.7.0

Introduced for S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

pre-Version 6.2.1.1

Introduced on E-Series

Related
Commands

line

Apply an authentication method list to designated terminal lines.

ip access-list standard

Name (or select) a standard access list to filter based on IP address.

ip access-list extended

Name (or select) an extended access list based on IP addresses or
protocols.

enable password
ces

Syntax

Change the password for the enable command.

enable password [level level] [encryption-type] password

To delete a password, use the no enable password [encryption-type] password [level level]
command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

level level

(OPTIONAL) Enter the keyword level followed by a number as the
level of access.
Range: 1 to 15

encryption-type

(OPTIONAL) Enter the number 7 or 0 as the encryption type.
Enter a 7 followed by a text string as the hidden password. The text
string must be a password that was already encrypted by a Dell Force10
router.
Use this parameter only with a password that you copied from the show
running-config file of another Dell Force10 router.

password

Enter a text string, up to 32 characters long, as the clear text password.

No password is configured. level = 15
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Use this command to define a password for a level and use the privilege level
(CONFIGURATION mode) command to control access to command modes.
Passwords must meet the following criteria:
•

Start with a letter, not a number.

Security | 1291

www.dell.com | support.dell.com

•

Passwords can have a regular expression as the password. To create a password
with a regular expression in it, you must use CNTL + v prior to entering regular
expression. For example, to create the password abcd]e, you type “abcd
CNTL v ]e”. When the password is created, you do not use the CNTL + v key
combination and enter “abcd]e”.
Note: The question mark (?) and the tilde (~) are not supported characters.

Related
Commands

show running-config

View the current configuration.

privilege level (CONFIGURATION
mode)

Control access to command modes within the switch.

enable restricted
ces

Syntax

Allows Dell Force10 technical support to access restricted commands.

enable restricted [encryption-type] password

To disallow access to restricted commands, enter no enable restricted.
Parameters

Command Modes
Command
History

Usage
Information

encryption-type

(OPTIONAL) Enter the number 7 as the encryption type.
Enter 7 followed a text string as the hidden password. The text string must be
a password that was already encrypted by a Dell Force10 router.
Use this parameter only with a password that you copied from the show
running-config file of another Dell Force10 router.

password

Enter a text string, up to 32 characters long, as the clear text password.

Not configured.
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Only Dell Force10 Technical Support staff use this command.

enable secret
ces

Syntax

1292

|

Security

Change the password for the enable command.

enable secret [level level] [encryption-type] password

To delete a password, use the no enable secret [encryption-type] password [level level] command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

level level

(OPTIONAL) Enter the keyword level followed by a number as the
level of access.
Range: 1 to 15

encryption-type

(OPTIONAL) Enter the number 5 or 0 as the encryption type.
Enter a 5 followed by a text string as the hidden password. The text
string must be a password that was already encrypted by a Dell Force10
router.
Use this parameter only with a password that you copied from the show
running-config file of another Dell Force10 router.

password

Enter a text string, up to 32 characters long, as the clear text password.

No password is configured. level = 15
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Use this command to define a password for a level and use the privilege level
(CONFIGURATION mode) command to control access to command modes.
Passwords must meet the following criteria:
•
•

Start with a letter, not a number.
Passwords can have a regular expression as the password. To create a password
with a regular expression in it, you must use CNTL + v prior to entering regular
expression. For example, to create the password abcd]e, you type abcd CNTL
v]e and when the password is created, you do not use the CNTL + v key
combination and enter abcd]e.
Note: The question mark (?) and the tilde (~) are not supported characters.

Related
Commands

show running-config

View the current configuration.

privilege level (CONFIGURATION
mode)

Control access to command modes within the
E-Series.

login authentication
ces

Syntax

Apply an authentication method list to designated terminal lines.

login authentication {method-list-name | default}

Security | 1293

www.dell.com | support.dell.com

To use the local user/password database for login authentication, enter no login authentication.
Parameters

Defaults

Command Modes
Command
History

Usage
Information
Related
Commands

method-list-name

Enter the method-list-name to specify that method list, created in the aaa
authentication login command, to be applied to the designated terminal
line.

default

Enter the keyword default to specify that the default method list, created
in the aaa authentication login command, is applied to the terminal line.

No authentication is performed on the console lines, and local authentication is performed on
the virtual terminal and auxiliary lines.
LINE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

pre-Version 6.2.1.0

Introduced on E-Series

If you configure the aaa authentication login default command, then the login authentication
default command automatically is applied to all terminal lines.
aaa authentication login

Select login authentication methods.

password
ces

Syntax

Specify a password for users on terminal lines.

password [encryption-type] password

To delete a password, use the no password password command.
Parameters

Defaults
Command Modes

1294

|

Security

encryption-type

(OPTIONAL) Enter either zero (0) or 7 as the encryption type for the
password entered. The options are:
• 0 is the default and means the password is not encrypted and stored as
clear text.
• 7 means that the password is encrypted and hidden.

password

Enter a text string up to 32 characters long. The first character of the
password must be a letter.
You cannot use spaces in the password.

No password is configured.
LINE

Command
History

Usage
Information
Related
Commands

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

FTOS prompts users for these passwords when the method for authentication or authorization
used is “line.”
enable password

Set the password for the enable command.

login authentication

Configure an authentication method to log in to the switch.

service
password-encryption

Encrypt all passwords configured in FTOS.

radius-server key

Configure a key for all RADIUS communications between the switch and
the RADIUS host server.

tacacs-server key

Configure a key for communication between a TACACS+ server and
client.

username

Establish an authentication system based on user names.

password-attributes
ces

Syntax

Configure the password attributes (strong password).

password-attributes [min-length number] [max-retry number] [character-restriction [upper number]
[lower number] [numeric number] [special-char number]]

To return to the default, use the no password-attributes [min-length number] [max-retry number]
[character-restriction [upper number] [lower number] [numeric number] [special-char number]]
command.
Parameters

min-length number

(OPTIONAL) Enter the keyword min-length followed by the number
of characters.
Range: 0 - 32 characters

max-retry number

(OPTIONAL) Enter the keyword max-retry followed by the number
of maximum password retries.
Range: 0 - 16

character-restriction

(OPTIONAL) Enter the keyword character-restriction to indicate a
character restriction for the password.

upper number

(OPTIONAL) Enter the keyword upper followed the upper number.
Range: 0 - 31

lower number

(OPTIONAL) Enter the keyword lower followed the lower number.
Range: 0 - 31

Security | 1295

www.dell.com | support.dell.com

Defaults
Command Modes
Command
History

Related
Commands

numeric number

(OPTIONAL) Enter the keyword numeric followed the numeric
number.
Range: 0 - 31

special-char number

(OPTIONAL) Enter the keyword special-char followed the number
of special characters permitted.
Range: 0 - 31

No default values or behavior
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

Version 7.4.1.0

Introduced

password

Specify a password for users on terminal lines.

service password-encryption
ces

Syntax

Encrypt all passwords configured in FTOS.

service password-encryption

To store new passwords as clear text, enter no service password-encryption.
Defaults
Command Modes
Command
History

Enabled.
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Caution: Encrypting passwords with this command does not provide a high level of security.
When the passwords are encrypted, you cannot return them to plain text unless you re-configure
them. To remove an encrypted password, use the no password password command.
Usage
Information

1296

|

Security

To keep unauthorized people from viewing passwords in the switch configuration file, use the
service password-encryption command. This command encrypts the clear-text passwords
created for user name passwords, authentication key passwords, the privileged command
password, and console and virtual terminal line access passwords.

To view passwords, use the show running-config command.

show privilege
ces

Syntax
Command Modes

View your access level.

show privilege

EXEC
EXEC Privilege

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Example

FTOS#show privilege
Current privilege level is 15
FTOS#

Related
Commands

privilege level (CONFIGURATION
mode)

Assign access control to different command modes.

show users
ces

Syntax
Parameters

Command Modes
Command
History

View information on all users logged into the switch.

show users [all]
all

(OPTIONAL) Enter the keyword all to view all terminal lines in the switch.

EXEC Privilege
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Security | 1297

www.dell.com | support.dell.com

Example

FTOS#show user

*

Line

User

Host(s)

0 console 0

admin

idle

3 vty 1

admin

idle

Location
172.31.1.4

FTOS#

Table 1 describes the information in the show users command example.
Table 1 show users Command Example Fields

Related
Commands

Field

Description

(untitled)

Indicates with am asterisk (*) which terminal
line you are using.

Line

Displays the terminal lines currently in use.

User

Displays the user name of all users logged in.

Host(s)

Displays the terminal line status.

Location

Displays the IP address of the user.

username

Enable a user.

timeout login response
ces

Syntax

Specify how long the software will wait for login input (for example, user name and
password) before timing out.
timeout login response seconds

To return to the default values, enter no timeout login response.
Parameters

Defaults
Command Modes
Command
History

1298

|

Security

seconds

Enter a number of seconds the software will wait before logging you out.
Range:
VTY: 1 to 30 seconds, default: 30 seconds.
Console: 1 to 300 seconds, default: 0 seconds (no timeout).
AUX: 1 to 300 seconds, default: 0 seconds (no timeout).

above
LINE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Usage
Information

The software measures the period of inactivity defined in this command as the period
between consecutive keystrokes. For example, if your password is “password” you can enter
“p” and wait 29 seconds to enter the next letter.

username
ces

Syntax

Establish an authentication system based on user names.

username name [access-class access-list-name] [nopassword | {password | secret} [encryption-type]
password] [privilege level]

If you do not want a specific user to enter a password, use the nopassword option.
To delete authentication for a user, use the no username name command.
Parameters

Defaults

Command Modes
Command
History

name

Enter a text string for the name of the user up to 63 characters.

access-class
access-list-name

Enter the keyword access-class followed by the name of a configured
access control list (either a IP access control list or MAC access control list).

nopassword

Enter the keyword nopassword to specify that the user should not enter a
password.

password

Enter the keyword password followed by the encryption-type or the
password.

secret

Enter the keyword secret followed by the encryption-type or the password.

encryption-type

Enter an encryption type for the password that you will enter.
• 0 directs FTOS to store the password as clear text. It is the default
encryption type when using the password option.
• 7 to indicate that a password encrypted using a DES hashing algorithm
will follow. This encryption type is available with the password option
only.
• 5 to indicate that a password encrypted using an MD5 hashing algorithm
will follow. This encryption type is available with the secret option only,
and is the default encryption type for this option.

password

Enter a string up to 32 characters long.

privilege level

Enter the keyword privilege followed by a number from zero (0) to 15.

secret

Enter the keyword secret followed by the encryption type.

The default encryption type for the password option is 0. The default encryption type for the
secret option is 0.
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Added support for secret option and MD5 password encryption. Extended
name from 25 characters to 63.

Version 7.6.1.0

Introduced for S-Series

Security | 1299

www.dell.com | support.dell.com

Version 7.5.1.0

Introduced for C-Series

E-Series original Command
Usage
Information
Related
Commands

To view the defined user names, use the show running-config user command.

password

Specify a password for users on terminal lines.

show running-config

View the current configuration.

RADIUS Commands
The RADIUS commands supported by FTOS. are:
•
•
•
•
•
•
•

debug radius
ip radius source-interface
radius-server deadtime
radius-server host
radius-server key
radius-server retransmit
radius-server timeout

debug radius
ces

Syntax

View RADIUS transactions to assist with troubleshooting.

debug radius

To disable debugging of RADIUS, enter no debug radius.
Defaults
Command Modes
Command
History

1300

|

Security

Disabled.
EXEC Privilege
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.2.1.1

Introduced on E-Series

ip radius source-interface
ces

Syntax

Specify an interface’s IP address as the source IP address for RADIUS connections.

ip radius source-interface interface

To delete a source interface, enter no ip radius source-interface.
Parameters

Defaults
Command Mode
Command
History

interface

Enter the following keywords and slot/port or number information:
• For a 100/1000 Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed
by the slot/port information.
• For Loopback interfaces, enter the keyword loopback followed by a number
from zero (0) to 16838.
• For the Null interface, enter the keywords null 0.
• For a Port Channel interface, enter the keyword port-channel followed by a
number:
C-Series and S-Series Range: 1 to 128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a SONET interface, enter the keyword sonet followed by the slot/port
information.
• For a Ten Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by
the slot/port information.
• For VLAN interface, enter the keyword vlan followed by a number from 1 to
4094.

Not configured.
CONFIGURATION
Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.2.1.1

Introduced on E-Series

radius-server deadtime
ces

Syntax

Configure a time interval during which non-responsive RADIUS servers to authentication
requests are skipped.
radius-server deadtime seconds

To disable this function or return to the default value, enter no radius-server deadtime.

Security | 1301

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes
Command
History

seconds

Enter a number of seconds during which non-responsive RADIUS servers are
skipped.
Range: 0 to 2147483647 seconds.
Default: 0 seconds.

0 seconds
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

radius-server host
ces

Syntax

Parameters

1302

|

Security

Configure a RADIUS server host.

radius-server host {hostname | ipv4-address | ipv6-address} [auth-port port-number] [retransmit
retries] [timeout seconds] [key [encryption-type] key]
hostname

Enter the name of the RADIUS server host.

ipv4-address | ipv6-address

Enter the IPv4 address (A.B.C.D) or IPv6 address
(X:X:X:X::X), of the RADIUS server host.

auth-port port-number

(OPTIONAL) Enter the keyword auth-port followed by a
number as the port number.
Range: zero (0) to 65535
The default port-number is 1812.

retransmit retries

(OPTIONAL) Enter the keyword retransmit followed by a
number as the number of attempts. This parameter overwrites the
radius-server retransmit command.
Range: zero (0) to 100
Default: 3 attempts

Defaults
Command Modes
Command
History

Usage
Information

timeout seconds

(OPTIONAL) Enter the keyword timeout followed by the
seconds the time interval the switch waits for a reply from the
RADIUS server. This parameter overwrites the radius-server
timeout command.
Range: 0 to 1000
Default: 5 seconds

key [encryption-type] key

(OPTIONAL) Enter the keyword key followed by an optional
encryption-type and a string up to 42 characters long as the
authentication key. This authentication key is used by the
RADIUS host server and the RADIUS daemon operating on this
switch.
For the encryption-type, enter either zero (0) or 7 as the
encryption type for the key entered. The options are:
• 0 is the default and means the password is not encrypted and
stored as clear text.
• 7 means that the password is encrypted and hidden.
Configure this parameter last because leading spaces are
ignored.

Not configured.
CONFIGURATION
Version 8.4.1.0

Added support for IPv6

Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Authentication key length increased to 42 characters

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.2.1.1

Introduced on E-Series

Use this command to configure any number of RADIUS server hosts for each server host that
is configured. FTOS searches for the RADIUS hosts in the order they are configured in the
software.
The global default values for timeout, retransmit, and key optional parameters are applied,
unless those values are specified in the radius-server host or other commands. If you
configure timeout, retransmit, or key values, you must include those keywords when entering
the no radius-server host command syntax to return to the global default values.

Related
Commands

login authentication

Set the database to be checked when a user logs in.

radius-server key

Set a authentication key for RADIUS communications.

radius-server retransmit

Set the number of times the RADIUS server will attempt to send
information.

radius-server timeout

Set the time interval before the RADIUS server times out.

Security | 1303

www.dell.com | support.dell.com

radius-server key
ces

Syntax

Configure a key for all RADIUS communications between the switch and the RADIUS host
server.
radius-server key [encryption-type] key

To delete a password, enter no radius-server key.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

encryption-type

(OPTIONAL) Enter either zero (0) or 7 as the encryption type for the key
entered. The options are:
• 0 is the default and means the key is not encrypted and stored as clear
text.
• 7 means that the key is encrypted and hidden.

key

Enter a string that is the key to be exchanged between the switch and
RADIUS servers. It can be up to 42 characters long.

Not configured.
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Authentication key length increased to 42 characters

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.2.1.1

Introduced on E-Series

The key configured on the switch must match the key configured on the RADIUS server
daemon.
If the key parameter in the radius-server host command is configured, the key configured with
the radius-server key command is the default key for all RADIUS communications.

Related
Commands

radius-server host

Configure a RADIUS host.

radius-server retransmit
ces

Syntax

Configure the number of times the switch attempts to connect with the configured RADIUS
host server before declaring the RADIUS host server unreachable.
radius-server retransmit retries

To configure zero retransmit attempts, enter no radius-server retransmit. To return to the default
setting, enter radius-server retransmit 3.

1304

|

Security

Parameters

Defaults
Command Modes
Command
History

Related
Commands

retries

Enter a number of attempts that FTOS tries to locate a RADIUS server.
Range: zero (0) to 100.
Default: 3 retries.

3 retries
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.2.1.1

Introduced on E-Series

radius-server host

Configure a RADIUS host.

radius-server timeout
ces

Syntax

Configure the amount of time the RADIUS client (the switch) waits for a RADIUS host
server to reply to a request.
radius-server timeout seconds

To return to the default value, enter no radius-server timeout.
Parameters

Defaults
Command Modes
Command
History

Related
Commands

seconds

Enter the number of seconds between an unsuccessful attempt and the FTOS
times out.
Range: zero (0) to 1000 seconds.
Default: 5 seconds.

5 seconds
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.2.1.1

Introduced on E-Series

radius-server host

Configure a RADIUS host.

Security | 1305

www.dell.com | support.dell.com

TACACS+ Commands
FTOS supports TACACS+ as an alternate method for login authentication.
•
•
•
•

debug tacacs+
ip tacacs source-interface
tacacs-server host
tacacs-server key

debug tacacs+
ces

Syntax

View TACACS+ transactions to assist with troubleshooting.

debug tacacs+

To disable debugging of TACACS+, enter no debug tacacs+.
Defaults
Command Modes
Command
History

Disabled.
EXEC Privilege
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

pre-Version 6.2.1.1

Introduced on E-Series

ip tacacs source-interface
ces

Syntax

Specify an interface’s IP address as the source IP address for TACACS+ connections.

ip tacacs source-interface interface

To delete a source interface, enter no ip tacacs source-interface.

1306

|

Security

Parameters

Defaults
Command Mode
Command
History

interface

Enter the following keywords and slot/port or number information:
• For a 100/1000 Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For Loopback interfaces, enter the keyword loopback followed by a
number from zero (0) to 16838.
• For the Null interface, enter the keywords null 0.
• For a Port Channel interface, enter the keyword port-channel followed
by a number:
C-Series and S-Series Range: 1 to 128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a SONET interface, enter the keyword sonet followed by the slot/
port information.
• For a Ten Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.
• For VLAN interface, enter the keyword vlan followed by a number from
1 to 4094.

Not configured.
CONFIGURATION
Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

pre-Version 6.2.1.1

Introduced on E-Series

tacacs-server host
ces

Syntax

Parameters

Specify a TACACS+ host.

tacacs-server host {hostname | ipv4-address | ipv6-address} [port number] [timeout seconds] [key
key]
hostname

Enter the name of the TACACS+ server host.

ipv4-address |
ipv6-address

Enter the IPv4 address (A.B.C.D) or IPv6 address (X:X:X:X::X), of the
TACACS+ server host.

port number

(OPTIONAL) Enter the keyword port followed by a number as the port
to be used by the TACACS+ server.
Range: zero (0) to 65535
Default: 49

Security | 1307

www.dell.com | support.dell.com

Defaults
Command Modes
Command
History

Usage
Information

timeout seconds

(OPTIONAL) Enter the keyword timeout followed by the number of
seconds the switch waits for a reply from the TACACS+ server.
Range: 0 to 1000
Default: 10 seconds

key key

(OPTIONAL) Enter the keyword key followed by a string up to 42
characters long as the authentication key. This authentication key must
match the key specified in the tacacs-server key for the TACACS+
daemon.
Configure this parameter last because leading spaces are ignored.

Not configured.
CONFIGURATION
Version 8.4.1.0

Added support for IPv6

Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Authentication key length increased to 42 characters

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

pre-Version 6.2.1.1

Introduced on E-Series

To list multiple TACACS+ servers to be used by the aaa authentication login command,
configure this command multiple times.
If you are not configuring the switch as a TACACS+ server, you do not need to configure the
port, timeout and key optional parameters. If you do not configure a key, the key assigned in
the tacacs-server key command is used.

Related
Commands

aaa authentication login

Specify the login authentication method.

tacacs-server key

Configure a TACACS+ key for the TACACS server.

tacacs-server key
ces

Syntax

Configure a key for communication between a TACACS+ server and client.

tacacs-server key [encryption-type] key

To delete a key, use the no tacacs-server key key

1308

|

Security

Parameters

Defaults
Command Modes
Command
History

Usage
Information

encryption-type

(OPTIONAL) Enter either zero (0) or 7 as the encryption type for the key
entered. The options are:
• 0 is the default and means the key is not encrypted and stored as clear
text.
• 7 means that the key is encrypted and hidden.

key

Enter a text string, up to 42 characters long, as the clear text password.
Leading spaces are ignored.

Not configured.
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Authentication key length increased to 42 characters

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

pre-Version 6.2.1.1

Introduced on E-Series

The key configured with this command must match the key configured on the TACACS+
daemon.

Port Authentication (802.1X) Commands
The 802.1X Port Authentication commands are:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

dot1x authentication (Configuration)
dot1x authentication (Interface)
dot1x auth-fail-vlan
dot1x auth-server
dot1x guest-vlan
dot1x mac-auth-bypass
dot1x max-eap-req
dot1x port-control
dot1x quiet-period
dot1x reauthentication
dot1x reauth-max
dot1x server-timeout
dot1x supplicant-timeout
dot1x tx-period
show dot1x interface

Security | 1309

www.dell.com | support.dell.com

An authentication server must authenticate a client connected to an 802.1X switch port. Until
the authentication, only EAPOL (Extensible Authentication Protocol over LAN) traffic is
allowed through the port to which a client is connected. Once authentication is successful,
normal traffic passes through the port.
FTOS supports RADIUS and Active Directory environments using 802.1X Port
Authentication.

Important Points to Remember
FTOS limits network access for certain users by using VLAN assignments. 802.1X with
VLAN assignment has these characteristics when configured on the switch and the RADIUS
server.
•
•
•

•

•
•
•
•
•
•

802.1X is supported on C-Series, E-Series, and S-Series.
802.1X is not supported on the LAG or the channel members of a LAG.
If no VLAN is supplied by the RADIUS server or if 802.1X authorization is
disabled, the port is configured in its access VLAN after successful
authentication.
If 802.1X authorization is enabled but the VLAN information from the RADIUS
server is not valid, the port returns to the unauthorized state and remains in the
configured access VLAN. This prevents ports from appearing unexpectedly in an
inappropriate VLAN due to a configuration error. Configuration errors create an
entry in Syslog.
If 802.1X authorization is enabled and all information from the RADIUS server
is valid, the port is placed in the specified VLAN after authentication.
If port security is enabled on an 802.1X port with VLAN assignment, the port is
placed in the RADIUS server assigned VLAN.
If 802.1X is disabled on the port, it is returned to the configured access VLAN.
When the port is in the force authorized, force unauthorized, or shutdown state, it
is placed in the configured access VLAN.
If an 802.1X port is authenticated and put in the RADIUS server assigned
VLAN, any change to the port access VLAN configuration will not take effect.
The 802.1X with VLAN assignment feature is not supported on trunk ports,
dynamic ports, or with dynamic-access port assignment through a VLAN
membership.

dot1x authentication (Configuration)
ces

Syntax

Enable dot1x globally; dot1x must be enabled both globally and at the interface level.

dot1x authentication

To disable dot1x on an globally, use the no dot1x authentication command.

1310

|

Security

Defaults
Command Modes
Command
History

Related
Commands

Disabled
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on C-Series and S-Series

Version 7.4.1.0

Introduced on E-Series

dot1x authentication (Interface)

Enable dot1x on an interface

dot1x authentication (Interface)
ces

Syntax

Enable dot1x on an interface; dot1x must be enabled both globally and at the interface level.

dot1x authentication

To disable dot1x on an interface, use the no dot1x authentication command.
Defaults
Command Modes
Command
History

Related
Commands

Disabled
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on C-Series and S-Series

Version 7.4.1.0

Introduced on E-Series

dot1x authentication (Configuration)

Enable dot1x globally

dot1x auth-fail-vlan
ces

Syntax

Configure a authentication failure VLAN for users and devices that fail 802.1X
authentication.
dot1x auth-fail-vlan vlan-id [max-attempts number]

To delete the authentication failure VLAN, use the no dot1x auth-fail-vlan vlan-id [max-attempts
number] command.

Security | 1311

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes
Command
History

Usage
Information

vlan-id

Enter the VLAN Identifier.
Range: 1 to 4094

max-attempts number

(OPTIONAL) Enter the keyword max-attempts followed number of
attempts desired before authentication fails.
Range: 1 to 5
Default: 3

3 attempts
CONFIGURATION (conf-if-interface-slot/port)
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on C-Series, E-Series and S-Series

If the host responds to 802.1X with an incorrect login/password, the login fails. The switch
will attempt to authenticate again until the maximum attempts configured is reached. If the
authentication fails after all allowed attempts, the interface is moved to the authentication
failed VLAN.
Once the authentication VLAN is assigned, the port-state must be toggled to restart
authentication. Authentication will occur at the next re-authentication interval (dot1x
reauthentication).

Related
Commands

dot1x port-control

Enable port-control on an interface

dot1x guest-vlan

Configure a guest VLAN for non-dot1x devices

show dot1x interface

Display the 802.1X information on an interface

dot1x auth-server
ces

Syntax
Defaults
Command Modes
Command
History

1312

|

Security

Configure the authentication server to RADIUS.

dot1x auth-server radius

No default behavior or values
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on C-Series and S-Series

Version 7.4.1.0

Introduced on E-Series

dot1x guest-vlan
ces

Syntax

Configure a guest VLAN for limited access users or for devices that are not 802.1X capable.

dot1x guest-vlan vlan-id

To disable the guest VLAN, use the no dot1x guest-vlan vlan-id command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

vlan-id

Enter the VLAN Identifier.
Range: 1 to 4094

Not configured
CONFIGURATION (conf-if-interface-slot/port)
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on C-Series, E-Series, and S-Series

802.1X authentication is enabled when an interface is connected to the switch. If the host fails
to respond within a designated amount of time, the authenticator places the port in the guest
VLAN.
If a device does not respond within 30 seconds, it is assumed that the device is not 802.1X
capable. Therefore, a guest VLAN is allocated to the interface and authentication, for the
device, will occur at the next re-authentication interval (dot1x reauthentication).
If the host fails authentication for the designated amount of times, the authenticator places the
port in authentication failed VLAN (dot1x auth-fail-vlan).
Note: Layer 3 portion of guest VLAN and authentication fail VLANs can be created
regardless if the VLAN is assigned to an interface or not. Once an interface is
assigned a guest VLAN (which has an IP address), then routing through the guest
VLAN is the same as any other traffic. However, interface may join/leave a VLAN
dynamically.

Related
Commands

dot1x auth-fail-vlan

Configure a VLAN for authentication failures

dot1x reauthentication

Enable periodic re-authentication

show dot1x interface

Display the 802.1X information on an interface

dot1x mac-auth-bypass
cs

Enable MAC authentication bypass. If 802.1X times out because the host did not respond to
the Identity Request frame, FTOS attempts to authenticate the host based on its MAC address.

Security | 1313

www.dell.com | support.dell.com

Syntax
Defaults
Command Modes
Command
History
Usage
Information

[no] dot1x mac-auth-bypass

Disabled
INTERFACE
Version 8.4.1.0

Introduced on C-Series and S-Series

To disable MAC authentication bypass on a port, enter the no dot1x mac-auth-bypass
command.

dot1x max-eap-req
ces

Syntax

Configure the maximum number of times an EAP (Extensive Authentication Protocol)
request is transmitted before the session times out.
dot1x max-eap-req number

To return to the default, use the no dot1x max-eap-req command.
Parameters

Defaults
Command Modes
Command
History

Related
Commands

number

Enter the number of times an EAP request is transmitted before a session
time-out.
Range: 1 to 10
Default: 2

2
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on C-Series and S-Series

Version 7.4.1.0

Introduced on E-Series

interface range

Configure a range of interfaces

dot1x port-control
ces

Syntax

1314

|

Security

Enable port control on an interface.

dot1x port-control {force-authorized | auto | force-unauthorized}

Parameters

Defaults
Command Modes
Command
History

Usage
Information

force-authorized

Enter the keyword force-authorized to forcibly authorize a port.

auto

Enter the keyword auto to authorize a port based on the 802.1X
operation result.

force-unauthorized

Enter the keyword force-unauthorized to forcibly de-authorize a port.

No default behavior or values
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on C-Series and S-Series

Version 7.4.1.0

Introduced on E-Series

The authenticator performs authentication only when port-control is set to auto.

dot1x quiet-period
ces

Syntax

Set the number of seconds that the authenticator remains quiet after a failed authentication
with a client.
dot1x quiet-period seconds

To disable quiet time, use the no dot1x quiet-time command.
Parameters

Defaults
Command Modes
Command
History

seconds

Enter the number of seconds.
Range: 1 to 65535
Default: 30

30 seconds
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on C-Series and S-Series

Version 7.4.1.0

Introduced on E-Series

dot1x reauthentication
ces

Syntax

Enable periodic re-authentication of the client.

dot1x reauthentication [interval seconds]

To disable periodic re-authentication, use the no dot1x reauthentication command.

Security | 1315

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes
Command
History

Related
Commands

(Optional) Enter the keyword interval followed by the interval time, in
seconds, after which re-authentication will be initiated.
Range: 1 to 31536000 (1 year)
Default: 3600 (1 hour)

interval seconds

3600 seconds (1 hour)
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on C-Series and S-Series

Version 7.4.1.0

Introduced on E-Series

interface range

Configure a range of interfaces

dot1x reauth-max
ces

Syntax

Configure the maximum number of times a port can re-authenticate before the port becomes
unauthorized.
dot1x reauth-max number

To return to the default, use the no dot1x reauth-max command.
Parameters

Defaults
Command Modes
Command
History

number

Enter the permitted number of re-authentications.
Range: 1 - 10
Default: 2

2
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on C-Series and S-Series

Version 7.4.1.0

Introduced on E-Series

dot1x server-timeout
ces

Syntax

Configure the amount of time after which exchanges with the server time out.

dot1x server-timeout seconds

To return to the default, use the no dot1x server-timeout command.

1316

|

Security

Parameters

Defaults
Command Modes
Command
History

seconds

Enter a time-out value in seconds.
Range: 1 to 300, where 300 is implementation dependant.
Default: 30

30 seconds
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on C-Series and S-Series

Version 7.4.1.0

Introduced on E-Series

dot1x supplicant-timeout
ces

Syntax

Configure the amount of time after which exchanges with the supplicant time out.

dot1x supplicant-timeout seconds

To return to the default, use the no dot1x supplicant-timeout command.
Parameters

Defaults
Command Modes
Command
History

seconds

Enter a time-out value in seconds.
Range: 1 to 300, where 300 is implementation dependant.
Default: 30

30 seconds
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on C-Series and S-Series

Version 7.4.1.0

Introduced on E-Series

dot1x tx-period
ces

Syntax

Configure the intervals at which EAPOL PDUs are transmitted by the Authenticator PAE.

dot1x tx-period seconds

To return to the default, use the no dot1x tx-period command.
Parameters

seconds

Enter the interval time, in seconds, that EAPOL PDUs are transmitted.
Range: 1 to 31536000 (1 year)
Default: 30

Security | 1317

www.dell.com | support.dell.com

Defaults
Command Modes
Command
History

30 seconds
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on C-Series and S-Series

Version 7.4.1.0

Introduced on E-Series

show dot1x interface
ces

Syntax
Parameters

Display the 802.1X information on an interface.

show dot1x interface interface
interface

Enter one of the following keywords and slot/port or number information:
• For a Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by
the slot/port information.
• For a Ten Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by the
slot/port information.

Defaults
Command Modes

No default values or behavior
EXEC
EXEC privilege

Command
History

1318

|

Security

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on C-Series, E-Series, and S-Series

Example

FTOS#show dot1x int Gi 2/32
802.1x information on Gi 2/32:
----------------------------Dot1x Status:

Enable

Port Control:

AUTO

Port Auth Status:

UNAUTHORIZED

Re-Authentication:

Disable

Untagged VLAN id:

None

Guest VLAN:

Enable

Guest VLAN id:

10

Auth-Fail VLAN:

Enable

Auth-Fail VLAN id:

11

Auth-Fail Max-Attempts: 3
Tx Period:

30 seconds

Quiet Period:

60 seconds

ReAuth Max:

2

Supplicant Timeout:

30 seconds

Server Timeout:

30 seconds

Re-Auth Interval:

3600 seconds

Max-EAP-Req:

2

Auth Type:

SINGLE_HOST

Auth PAE State:

Initialize

Backend State:

Initialize

FTOS#

SSH Server and SCP Commands
FTOS supports SSH Protocol versions 1.5 and 2.0. Secure Shell (SSH) is a protocol for
secure remote login over an insecure network. SSH sessions are encrypted and use
authentication.
•
•
•
•
•
•
•
•
•
•
•

crypto key generate
debug ip ssh
ip scp topdir
ip ssh authentication-retries
ip ssh connection-rate-limit
ip ssh hostbased-authentication
ip ssh key-size
ip ssh password-authentication
ip ssh pub-key-file
ip ssh rhostsfile
ip ssh rsa-authentication (Config)

Security | 1319

www.dell.com | support.dell.com

•
•
•
•
•
•
•

ip ssh rsa-authentication (EXEC)
ip ssh server
show crypto
show ip ssh
show ip ssh client-pub-keys
show ip ssh rsa-authentication
ssh

crypto key generate
ces

Generate keys for the SSH server.
Note: Some of the parameters in this command require licensing to access. For more
information, please contact your Dell Force10 representative.

Syntax
Parameters

crypto key generate {rsa | rsa1}

Enter the keyword rsa followed by the key size to generate a SSHv2
RSA host keys.
Range: 1024 to 2048 if FIPS mode not enabled; if FIPS mode is
enabled, only a 2048-bit key can be generated.
Default: 1024

rsa

Note: You must have a license to access the FIPS mode. For more
information, please contact your Dell Force10 representative.
rsa1

Enter the keyword rsa1 followed by the key size to generate a
SSHv1 RSA host keys.
Range: 1024 to 2048
Default: 1024
Note: This option is not available in FIPS mode.

Defaults
Command Modes
Command
History

Example

Key size 1024; If FIPS mode is enabled, the key size is 2048.
CONFIGURATION
Version 8.3.12.0

Added support for FIPS mode on S4810.

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

FTOS#conf
FTOS(conf)#crypto key generate rsa1
Enter key size <1024-2048>. Default<1024>: 1024
Host key already exists. Do you want to replace. [y/n]
FTOS(conf)#

1320

|

Security

:y

Usage
Information

The host keys are required for key-exchange by the SSH server. If the keys are not found
when the server is enabled (ip ssh server enable), the keys are automatically generated.
This command requires user interaction and will generate a prompt prior to overwriting any
existing host keys.
Note: Only a user with superuser permissions should generate host-keys.

Related
Commands

ip ssh server

Enable the SSH server.

show crypto

Display SSH host public keys

debug ip ssh
ces

Syntax

Enables collecting SSH debug information.

debug ip ssh {client | server}

To disable debugging, use the no debug ip ssh {client | server} command.
Parameters

Defaults
Command Modes

Enter the keyword client to enable collecting debug information on
the client.

server

Enter the keyword server to enable collecting debug information on
the server.

Disabled on both client and server
EXEC

Command
History

Usage
Information

client

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Debug information includes details for key-exchange, authentication, and established session
for each connection.

ip scp topdir
ces

Syntax

Identify a location for files used in secure copy transfer.

ip scp topdir directory

Security | 1321

www.dell.com | support.dell.com

To return to the default setting, enter no ip scp topdir command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

directory

Enter a directory name.

The internal flash (flash:) is the default directory.
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

To configure the switch as a SCP server, use the ip ssh server command.

Related
Commands

ip ssh server

Enable SSH and SCP server on the switch.

ip ssh authentication-retries
ces

Syntax

Configure the maximum number of attempts that should be used to authenticate a user.

ip ssh authentication-retries 1-10

Parameters

Defaults
Command Modes
Command
History

Usage
Information

1322

|

Security

1-10

Enter the number of maximum retries to authenticate a user.
Range: 1 to 10
Default: 3

3
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

This command specifies the maximum number of attempts to authenticate a user on a SSH
connection with the remote host for password authentication. SSH will disconnect when the
number of password failures exceeds authentication-retries.

ip ssh connection-rate-limit
ces

Syntax
Parameters

Defaults
Command Modes
Command
History

Configure the maximum number of incoming SSH connections per minute.

ip ssh connection-rate-limit 1-10
1-10

Enter the number of maximum number of incoming SSH connections
allowed per minute.
Range: 1 to 10 per minute
Default: 10 per minute

10 per minute
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

ip ssh hostbased-authentication
ces

Syntax

Enable hostbased-authentication for the SSHv2 server.

ip ssh hostbased-authentication enable

To disable hostbased-authentication for SSHv2 server, use the no ip ssh
hostbased-authentication enable command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

enable

Enter the keyword enable to enable hostbased-authentication for SSHv2 server.

Disable by default
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

If this command is enabled, clients can login without a password prompt. This provides two
levels of authentication:
•

rhost-authentication is done with the file specified in the ip ssh rhostfile command

Security | 1323

www.dell.com | support.dell.com

•

checking client host-keys is done with the file specified in the ip ssh pub-key-file
command

If no ip ssh rsa-authentication enable is executed, host-based authentication is disabled.
Note: Administrators must specify the two files (rhosts and pub-key-file) to configure
host-based authentication.
Related
Commands

ip ssh pub-key-file

Public keys of trusted hosts from a file.

ip ssh rhostsfile

Trusted hosts and users for rhost authentication.

ip ssh key-size
ces

Syntax
Parameters

Defaults
Command Modes
Command
History

Usage
Information

Configure the size of the server-generated RSA SSHv1 key.

ip ssh key-size 512-869
512-869

Enter the key-size number for the server-generated RSA SSHv1 key.
Range: 512 to 869
Default: 768

Key size 768
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

The server-generated key is used for SSHv1 key-exchange.

ip ssh password-authentication
ces

Syntax

Enable password authentication for the SSH server.

ip ssh password-authentication enable

To disable password-authentication, use the no ip ssh password-authentication enable.
Parameters

1324

|

Security

enable

Enter the keyword enable to enable password-authentication for the SSH server.

Defaults
Command Modes
Command
History

Usage
Information

enabled
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

With password authentication enabled, users can authenticate using local, RADIUS, or
TACACS+ password fallback order as configured.

ip ssh pub-key-file
ces

Syntax
Parameters

Defaults
Command Modes
Command
History

Example

Specify the file to be used for host-based authentication.

ip ssh pub-key-file {WORD}
WORD

Enter the file name for the host-based authentication.

No default behavior or values
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

FTOS#conf
FTOS(conf)# ip ssh pub-key-file flash://knownhosts
FTOS(conf)#

Usage
Information

This command specifies the file to be used for the host-based authentication. The file creates/
overwrites the file flash://ADMIN_DIR/ssh/knownhosts and deletes the user specified file.
Even though this is a global configuration command, it will not appear in the running
configuration since this command needs to be run just once.
The file contains the OpenSSH compatible public keys of the host for which host-based
authentication is allowed. An example known host file format:

Security | 1325

www.dell.com | support.dell.com

poclab4,123.12.1.123 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAox/
QQp8xYhzOxn07yh4VGPAoUfgKoieTHO9G4sNV+ui+DWEc3cgYAcU5Lai1MU2ODrzh
CwyDNp05tKBU3tReG1o8AxLi6+S4hyEMqHzkzBFNVqHzpQc+Rs4p2urzV0F4pRKnaX
dHf3Lk4D460HZRhhVrxqeNxPDpEnWIMPJi0ds= ashwani@poclab4
Note: For rhostfile and pub-key-file, the administrator must FTP the file to the chassis.
Related
Commands

show ip ssh
client-pub-keys

Display the client-public keys used for the host-based authentication.

ip ssh rhostsfile
ces

Syntax
Parameters

Defaults
Command Modes
Command
History

Example

Specify the rhost file to be used for host-based authorization.

ip ssh rhostsfile {WORD}
WORD

Enter the rhost file name for the host-based authentication.

No default behavior or values
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

FTOS#conf
FTOS(conf)# ip ssh rhostsfile flash://shosts
FTOS(conf)#

Usage
Information

This command specifies the rhost file to be used for host-based authentication. This file
creates/overwrites the file flash:/ADMIN_DIR/ssh/shosts and deletes the user specified file.
Even though this is a global configuration command, it will not appear in the running
configuration since this command needs to be run just once.
This file contains hostnames and usernames, for which hosts and users, rhost-authentication
can be allowed.
Note: For rhostfile and pub-key-file, the administrator must FTP the file to the switch.

1326

|

Security

ip ssh rsa-authentication (Config)
ces

Syntax

Enable RSA authentication for the SSHv2 server.

ip ssh rsa-authentication enable

To disable RSA authentication, use the no ip ssh rsa-authentication enable command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

Related
Commands

enable

Enter the keyword enable to enable RSA authentication for the SSHv2 server.

RSA authentication is disabled by default
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Enabling RSA authentication allows the user to login without being prompted for a password.
In addition, the OpenSSH compatible SSHv2 RSA public key must be added to the list of
authorized keys (ip ssh rsa-authentication my-authorized-keys device://filename command).
ip ssh rsa-authentication (EXEC)

Add keys for RSA authentication.

ip ssh rsa-authentication (EXEC)
ces
Syntax

Add keys for the RSA authentication.
ip ssh rsa-authentication {my-authorized-keys WORD}

To delete the authorized keys, use the no ip ssh rsa-authentication {my-authorized-keys}
command.
Parameters

Defaults
Command Modes
Command
History

my-authorized-keys WORD

Enter the keyword my-authorized-keys followed by the file
name of the RSA authorized-keys.

No default behavior or values
EXEC
Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Security | 1327

www.dell.com | support.dell.com

Usage
Information

If you want to log in without being prompted for a password, log in through RSA
authentication. To do that, you must first add the SSHv2 RSA public keys to the list of
authorized keys. This command adds the specified RSA keys to the following file:
flash://ADMIN_DIR/ssh/authorized-keys-username (where username is the user associated
with this terminal).
Note: The no form of this command deletes the file flash://ADMIN_DIR/ssh/
authorized-keys-username

Related
Commands

show ip ssh rsa-authentication

Display RSA authorized keys.

ip ssh rsa-authentication (Config)

Enable RSA authentication.

ip ssh server
ces

Configure an SSH server.
Note: Some of the parameters in this command require licensing to access. For more
information, please contact your Dell Force10 representative.

Syntax

ip ssh server {enable | port port-number} [version {1 | 2}]

To disable SSH server functions, enter no ip ssh server enable command.
Parameters

enable

Enter the key word enable to start the SSH server.

port port-number

(OPTIONAL) Enter the keyword port followed by the port number
of the listening port of the SSH server.
Range: 1 to 65535
Default: 22
(OPTIONAL) Enter the keyword version followed by the SSH
version 1 or 2 to specify only SSHv1 or SSHv2.
Note: If FIPS mode is enabled, only version 2 can be selected.

[version {1 | 2}]

Defaults
Command Modes
Command
History

Usage
Information

1328

|

Security

Default listening port is 22
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Expanded to include specifying SSHv1 or SSHv2; Introduced for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

This command enables the SSH server and begins listening on a port. If a port is not
specified, listening is on SSH default port 22.

Example

FTOS# conf
FTOS(conf)# ip ssh server port 45
FTOS(conf)# ip ssh server enable
FTOS#

Related
Commands

show ip ssh

Display the ssh information

show crypto
ces

Display the public part of the SSH host-keys.
Note: Some of the parameters in this command require licensing to access. For more
information, please contact your Dell Force10 representative.

Syntax
Parameters

show crypto key mypubkey {rsa | rsa1}
Key

Enter the keyword key to display the host public key.

mypubkey

Enter the keyword mypubkey to display the host public key.

rsa

Enter the keyword rsa to display the host SSHv2 RSA public key.

rsa1

Enter the keyword rsa1 to display the host SSHv1 RSA public key.
Note: If FIPS mode is enabled, this parameter is not available.

Defaults
Command Modes
Command
History

Example

No default behavior or values
EXEC
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

FTOS#show crypto key mypubkey rsa
ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAtzkZME/
e8V8smnXR22EJGQhCMkEOkuisa+OILVoMYU1ZKGfj0W5BPCSvF/
x5ifqYFFwUzJNOcsJK7vjSsnmMhChF2YSvXlvTJ6h971FJAQlOsgd0ycpocsF+DNLKfJnx7SAjhakF
QMwGg/g78ZkDT3Ydr8KKjfSI4Bg/WS8B740=
FTOS#show crypto key mypubkey rsa1
1024 35
131060015480873398953257515397249657850072206444294963674080935683088961020317
226679889567549667652650063796221897799276092785236388392230550818191660099281
326164086643457746022192295189039929663345791173742247431553750501676929660273
790601494434050000015179864425629613385774919236081771341059533760063913083
FTOS#

Usage
Information

This command is useful if the remote SSH client implements Strict Host Key Checking. You
can copy the host key to your list of known hosts.

Security | 1329

www.dell.com | support.dell.com

Related
Commands

crypto key generate

Generate SSH keys.

show ip ssh
ces

Display information about established SSH sessions.
Note: Some of the parameters in this command require licensing to access. For more
information, please contact your Dell Force10 representative.

Syntax
Command Modes

show ip ssh

EXEC
EXEC Privilege

Example

Related
Commands

FTOS#sh ip ssh
SSH server

: enabled.

SSH server version

: v1 and v2.

Password Authentication

: enabled.

Hostbased Authentication

: disabled.

RSA

: disabled.

Authentication
Vty

Encryption

HMAC

Remote IP

1

3des-cbc

hmac-md5

10.1.20.48

2

3des-cbc

hmac-md5

10.1.20.48

ip ssh server

Configure an SSH server.

show ip ssh
client-pub-keys

Display the client-public keys.

show ip ssh client-pub-keys
ces

Syntax
Defaults
Command Modes
Command
History

1330

|

Security

Display the client public keys used in host-based authentication.

show ip ssh client-pub-keys

No default behavior or values
EXEC
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Example

FTOS#show ip ssh client-pub-keys
poclab4,123.12.1.123 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAox/
QQp8xYhzOxn07yh4VGPAoUfgKoieTHO9G4sNV+ui+DWEc3cgYAcU5Lai1MU2ODrzhCwyDNp05tKBU3
tReG1o8AxLi6+S4hyEMqHzkzBFNVqHzpQc+Rs4p2urzV0F4pRKnaXdHf3Lk4D460HZRhhVrxqeNxPD
pEnWIMPJi0ds= ashwani@poclab4
FTOS#

Usage
Information
Related
Commands

This command displays the contents of the file flash://ADMIN_DIRssh/knownhosts

ip ssh pub-key-file

Configure the file name for the host-based authentication

show ip ssh rsa-authentication
ces
Syntax
Parameters

Defaults
Command Modes
Command
History

Example

Display the authorized-keys for the RSA authentication.
show ip ssh rsa-authentication {my-authorized-keys}
my-authorized-keys

Display the RSA authorized keys.

No default behavior or values
EXEC
Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

FTOS#show ip ssh rsa-authentication my-authorized-keys
ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEAyB17l4gFp4r2DRHIvMc1VZd0Sg5GQxRV1y1X1JOMeO6Nd0WuYy
zrQMM4qJAoBwtneOXfLBcHF3V2hcMIqaZN+CRCnw/
zCMlnCf0+qVTd1oofsea5r09kS0xTp0CNfHXZ3NuGCq9Ov33m9+U9tMwhS8vy8AVxdH4x4km3c3t5J
vc= freedom@poclab4
FTOS#

Usage
Information
Related
Commands

This command displays the contents of the file flash:/ADMIN_DIR/ssh/
authorized-keys.username.
ip ssh rsa-authentication
(Config)

Configure the RSA authorized keys.

Security | 1331

www.dell.com | support.dell.com

ssh
ces

Open an SSH connection specifying the hostname, username, port number and version of the
SSH client.
FTOS supports both inbound and outbound SSH sessions using IPv4 or IPv6 addressing.
Inbound SSH supports accessing the system through the management interface as well as
through a physical Layer 3 interface.
Note: Some of the parameters in this command require licensing to access. For more
information, please contact your Dell Force10 representative.

Syntax

Parameters

ssh {hostname | ipv4 address | ipv6 address} [-c encryption cipher | -l username | -m HMAC algorithm
| -p port-number | -v {1 | 2}]
hostname

(OPTIONAL) Enter the IP address or the hostname of the remote device.

vrf instance

(OPTIONAL) E-Series Only: Enter the keyword vrf following by the
VRF Instance name to open a SSH connection to that instance.

ipv4 address

(OPTIONAL) Enter the IP address in dotted decimal format A.B.C.D.

ipv6-address
prefix-length

(OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format followed by
the prefix length in the /x format.
Range: /0 to /128
Note: The :: notation specifies successive hexadecimal fields of zeros

-c encryption cipher

Enter the following encryption cipher to use. (For v2 clients only.):
• 3des-cbc: Force ssh to use 3des-cbc encryption cipher.

-l username

(OPTIONAL) Enter the keyword -l followed by the user name used in this
SSH session.
Default: The user name of the user associated with the terminal.

-m HMAC algorithm

Enter one of the following HMAC algorithms to use. (For v2 clients
only.):
• hmac-sha1: Force ssh to use the hmac-sha1 HMAC algorithm.
• hmac-sha1-96: Force ssh to use the hmac-sha1-96 HMAC algorithm.
• hmac-md5: Force ssh to use the hmac-md5 HMAC algorithm.
• hmac-md5-96: Force ssh to use the hmac-md5-96 HMAC algorithm.

-p port-number

(OPTIONAL) Enter the keyword -p followed by the port number.
Range: 1 to 65536
Default: 22

-v {1 | 2}

(OPTIONAL) Enter the keyword -v followed by the SSH version 1 or 2.
Default: The version from the protocol negotiation.
Note: If FIPS mode is enabled, only version 2 can be selected.

Defaults

1332

As indicated above.

Command Modes

EXEC Privilege

Command
History

Version 8.3.12.0

Added support for the -c and -m parameters on the S4810.

Version 8.3.7.0

Introduced on S4810

|

Security

Example

Version 7.9.1.0

Introduced VRF

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Added IPv6 support; Introduced for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

FTOS#ssh 10.11.8.12 ?
-c

Encryption cipher to use (for v2 clients only)

-l

User name option

-m

HMAC algorithm to use (for v2 clients only)

-p

SSH server port option (default 22)

-v

SSH protocol version


FTOS#ssh 10.11.8.12 -c ?
3des-cbc

Force ssh to use 3des-cbc encryption cipher

FTOS#ssh 10.11.8.12 -m ?
hmac-sha1

Force ssh to use hmac-sha1 HMAC algorithm

hmac-sha1-96

Force ssh to use hmac-sha1-96 HMAC algorithm

hmac-md5

Force ssh to use hmac-md5 HMAC algorithm

hmac-md5-96

Force ssh to use hmac-md5-96 HMAC algorithm

Security | 1333

www.dell.com | support.dell.com

Trace List Commands
IP trace lists create an Access Control List (ACLs) to trace all traffic into the E-Series switch.
This feature is useful for tracing Denial of Service (DOS) attacks.
Note: For other Access Control List commands, the chapter Chapter 7, Access
Control Lists (ACL).

•
•
•
•
•
•
•
•
•
•
•
•

clear counters ip trace-group
deny
deny tcp
deny udp
ip trace-group
ip trace-list
permit
permit tcp
permit udp
seq
show config
show ip accounting trace-lists

clear counters ip trace-group
e
Syntax
Parameters

Command Modes

Erase all counters maintained for trace lists.
clear counters ip trace-group [trace-list-name]
trace-list-name

(OPTIONAL) Enter the name of a configured trace list.

EXEC Privilege

deny
e
Syntax

Configure a filter that drops IP packets meeting the filter criteria.
deny {ip | ip-protocol-number} {source mask | any | host ip-address} {destination mask | any | host
ip-address} [count [byte]] | log] [order number]

To remove this filter, you have two choices:
•

1334

|

Security

Use the no seq sequence-number command syntax if you know the filter’s
sequence number or

•
Parameters

Defaults
Command Modes
Related
Commands

Use the no deny {ip | ip-protocol-number} {source mask | any | host ip-address}
{destination mask | any | host ip-address} command.

ip

Enter the keyword ip to configure a generic IP access list. The keyword
ip specifies that the access list will deny all IP protocols.

ip-protocol-number

Enter a number from 0 to 255 to deny based on the protocol identified
in the IP protocol header.

source

Enter the IP address of the network or host from which the packets were
sent.

mask

(OPTIONAL) Enter a network mask in /prefix format (/x).

any

Enter the keyword any to specify that all routes are subject to the filter.

host ip-address

Enter the keyword host followed by the IP address to specify a host IP
address.

destination

Enter the IP address of the network or host to which the packets are
sent.

count

(OPTIONAL) Enter the keyword count to count packets processed by
the filter.

bytes

(OPTIONAL) Enter the keyword bytes to count only bytes processed
by the filter.

log

(OPTIONAL) Enter the keyword log to have the information kept in a
Trace-list log file.

order number

(OPTIONAL) Enter the keyword order followed by a number from 0 to
7 as the order number.

Not configured.
TRACE LIST
deny tcp

Assign a trace list filter to deny TCP packets.

deny udp

Assign a trace list filter to deny UDP packets.

ip trace-group

Create a trace list.

deny tcp
e
Syntax

Configure a filter that drops TCP packets meeting the filter criteria.
deny tcp {source address mask | any | host ip-address} [operator port [port]] {destination mask | any
| host ip-address} [operator port [port]] [count [byte]] | log] [order number]

To remove this filter, you have two choices:
•
•

Use the no seq sequence-number command syntax if you know the filter’s
sequence number or
Use the no deny tcp {source mask | any | host ip-address} {destination mask | any | host
ip-address} command.

Security | 1335

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes
Related
Commands

source

Enter the IP address of the network or host from which the packets were sent.

mask

(OPTIONAL) Enter a network mask in /prefix format (/x).

any

Enter the keyword any to specify that all routes are subject to the filter.

host ip-address

Enter the keyword host followed by the IP address to specify a host IP
address.

operator

(OPTIONAL) Enter one of the following logical operand:
• eq = equal to
• neq = not equal to
• gt = greater than
• lt = less than
• range = inclusive range of ports (you must specify two ports for the port
command parameter.)

port port

Enter the application layer port number. Enter two port numbers if using the
range logical operand.
Range: 0 to 65535.
The following list includes some common TCP port numbers:
• 23 = Telnet
• 20 and 21 = FTP
• 25 = SMTP
• 169 = SNMP

destination

Enter the IP address of the network or host to which the packets are sent.

count

(OPTIONAL) Enter the keyword count to count packets processed by the
filter.

byte

(OPTIONAL) Enter the keyword byte to count only bytes processed by the
filter.

log

(OPTIONAL) Enter the keyword log to have the information kept in a
Trace-list log file.

order number

(OPTIONAL) Enter the keyword order followed by a number from 0 to 7 as
the order number.

Not configured.
TRACE LIST
deny

Assign a trace list filter to deny IP traffic.

deny udp

Assign a trace list filter to deny UDP traffic.

deny udp
e
Syntax

1336

|

Security

Configure a filter to drop UDP packets meeting the filter criteria.
deny udp {source mask | any | host ip-address} [operator port [port]] {destination mask | any | host
ip-address} [operator port [port]] [count [byte]] | log] [order number]

To remove this filter, you have two choices:
•
•
Parameters

Defaults
Command Modes
Related
Commands

Use the no seq sequence-number command syntax if you know the filter’s
sequence number or
Use the no deny udp {source mask | any | host ip-address} {destination mask | any |
host ip-address} command.

source

Enter the IP address of the network or host from which the packets were
sent.

mask

(OPTIONAL) Enter a network mask in /prefix format (/x).

any

Enter the keyword any to specify that all routes are subject to the filter.

host ip-address

Enter the keyword host followed by the IP address to specify a host IP
address.

operator

(OPTIONAL) Enter one of the following logical operand:
• eq = equal to
• neq = not equal to
• gt = greater than
• lt = less than
• range = inclusive range of ports

port port

(OPTIONAL) Enter the application layer port number. Enter two port
numbers if using the range logical operand.
Range: 0 to 65535

destination

Enter the IP address of the network or host to which the packets are sent.

mask

(OPTIONAL) Enter a network mask in /prefix format (/x).

count

(OPTIONAL) Enter the keyword count to count packets processed by the
filter.

byte

(OPTIONAL) Enter the keyword byte to count only bytes

log

(OPTIONAL) Enter the keyword log to have the information kept in a
Trace-list log file.

order number

(OPTIONAL) Enter the keyword order followed by a number from 0 to 7 as
the order number.

Not configured.
TRACE LIST
deny

Assign a trace list filter to deny IP traffic.

deny tcp

Assign a trace list filter to deny TCP traffic.

ip trace-group
e
Syntax

Assign a trace list globally to process all incoming packets to the switch.
ip trace-group trace-list-name

To delete an trace list configuration, use the no ip trace-group trace-list-name command.

Security | 1337

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes
Usage
Information

trace-list-name

Enter the name of a configured trace list.

Not enabled.
CONFIGURATION
You can assign one Trace list to the chassis.
If there are unresolved next-hops and a Trace-list is enabled, there is a possibility that the
traffic hitting the CPU will not be rate-limited.

Related
Commands

ip trace-list

Configure a trace list ACL.

ip trace-list
e
Syntax

Configure a trace list, based on IP addresses or protocols, to filter all traffic on the E-Series.
ip trace-list trace-list-name

To delete a trace list, use the no ip trace-list trace-list-name command.
Parameters

Defaults
Example

trace-list-name

Enter a string up to 16 characters long as the access list name.

Not configured
FTOS(conf)#ip trace-list suzanne
FTOS(config-trace-acl)#

Command Modes
Usage
Information
Related
Commands

CONFIGURATION
After you create a trace list, you must apply it to the E-Series using the ip trace-group
command in the CONFIGURATION mode.
ip trace-group

View the current configuration.

permit
e
Syntax

Configure a filter to pass IP packets meeting the filter criteria.
permit {ip | ip-protocol-number} {source mask | any | host ip-address} {destination mask | any
host ip-address} [count [byte]| log]

To remove this filter, you have two choices:
•

1338

|

Security

Use the no seq sequence-number command syntax if you know the filter’s
sequence number or

|

•
Parameters

Defaults
Command Modes
Related
Commands

Use the no deny {ip | ip-protocol-number} {source mask | any | host ip-address}
{destination mask | any | host ip-address} command.

ip

Enter the keyword ip to configure a generic IP access list. The keyword
ip specifies that the access list will permit all IP protocols.

ip-protocol-number

Enter a number from 0 to 255 to permit based on the protocol identified
in the IP protocol header.

source

Enter the IP address of the network or host from which the packets
were sent.

mask

(OPTIONAL) Enter a network mask in /prefix format (/x).

any

Enter the keyword any to specify that all routes are subject to the filter.

host ip-address

Enter the keyword host followed by the IP address to specify a host IP
address.

destination

Enter the IP address of the network or host to which the packets are
sent.

count

(OPTIONAL) Enter the keyword count to count packets processed by
the filter.

byte

(OPTIONAL) Enter the keyword byte to count only bytes processed by
the filter.

log

(OPTIONAL) Enter the keyword log to have the information kept in a
Trace-list log file.

Not configured.
TRACE LIST
ip trace-list

Create a trace list.

permit tcp

Assign a trace list filter to forward TCP packets.

permit udp

Assign a trace list filter to forward UDP packets.

permit tcp
e
Syntax

Configure a filter to pass TCP packets meeting the filter criteria.
permit tcp {source mask | any | host ip-address} [operator port [port]] {destination mask | any | host
ip-address} [operator port [port]] [count [byte]] | log] [order number]

To remove this filter, you have two choices:
•
•

Use the no seq sequence-number command syntax if you know the filter’s
sequence number or
Use the no permit tcp {source mask | any | host ip-address} {destination mask | any |
host ip-address} command.

Security | 1339

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes
Related
Commands

source

Enter the IP address of the network or host from which the packets were
sent.

mask

(OPTIONAL) Enter a network mask in /prefix format (/x).

any

Enter the keyword any to specify that all routes are subject to the filter.

host ip-address

Enter the keyword host followed by the IP address to specify a host IP
address.

operator

(OPTIONAL) Enter one of the following logical operand:
eq = equal to
neq = not equal to
gt = greater than
lt = less than
range = inclusive range of ports (you must specify two port for the port
parameter.)

port port

Enter the application layer port number. Enter two port numbers if
using the range logical operand.
Range: 0 to 65535.
The following list includes some common TCP port numbers:
23 = Telnet
20 and 21 = FTP
25 = SMTP
169 = SNMP

destination

Enter the IP address of the network or host to which the packets are
sent.

count

(OPTIONAL) Enter the keyword count to count packets processed by
the filter.

byte

(OPTIONAL) Enter the keyword byte to count only bytes processed by
the filter.

log

(OPTIONAL) Enter the keyword log to have the information kept in a
Trace-list log file.

order number

(OPTIONAL) Enter the keyword order followed by a number from 0 to
7 as the order number.

Not configured.
TRACE LIST
ip trace-list

Create a trace list.

permit

Assign a trace list filter to forward IP packets.

permit udp

Assign a trace list filter to forward UDP packets.

permit udp
e
Syntax

1340

|

Security

Configure a filter to pass UDP packets meeting the filter criteria.
permit udp {source mask | any | host ip-address} [operator port [port]] {destination mask | any | host
ip-address} [operator port [port]] [count [byte]] | log] [order number]

To remove this filter, you have two choices:
•
•

Parameters

Defaults
Command Modes
Related
Commands

Use the no seq sequence-number command syntax if you know the filter’s
sequence number or
Use the no permit udp {source mask | any | host ip-address} {destination mask | any |
host ip-address} command.

source

Enter the IP address of the network or host from which the packets were
sent.

mask

(OPTIONAL) Enter a network mask in /prefix format (/x).

any

Enter the keyword any to specify that all routes are subject to the filter.

host ip-address

Enter the keyword host followed by the IP address to specify a host IP
address.

operator

(OPTIONAL) Enter one of the following logical operand:
• eq = equal to
• neq = not equal to
• gt = greater than
• lt = less than
• range = inclusive range of ports (you must specify two ports for the
port parameter.)

port port

(OPTIONAL) Enter the application layer port number. Enter two port
numbers if using the range logical operand.
Range: 0 to 65535

destination

Enter the IP address of the network or host to which the packets are
sent.

count

(OPTIONAL) Enter the keyword count to count packets processed by
the filter.

byte

(OPTIONAL) Enter the keyword byte to count only bytes processed by
the filter.

log

(OPTIONAL) Enter the keyword log to have the information kept in a
Trace-list log file.

order number

(OPTIONAL) Enter the keyword order followed by a number from 0 to
7 as the order number.

Not configured.
TRACE LIST
ip trace-list

Configure a trace list.

permit

Assign a trace list filter to forward IP packets.

permit tcp

Assign a trace list filter to forward TCP packets.

seq
e

Assign a sequence number to a deny or permit filter in a trace list while creating the filter.

Security | 1341

www.dell.com | support.dell.com

Syntax

1342

seq sequence-number {deny | permit} {ip-protocol-number | ip | tcp | udp} {source mask | any | host
ip-address} {destination mask | any | host ip-address} [operator port [port]] [precedence precedence]
[tos tos-value] [count [byte] | log]

To delete a filter, use the no seq sequence-number command.
Parameters

|

Security

sequence-number

Enter a number from 0 to 65535.

deny

Enter the keyword deny to configure a filter to drop packets
meeting this condition.

permit

Enter the keyword permit to configure a filter to forward packets
meeting this criteria.

ip-protocol-number

Enter a number from 0 to 255 to filter based on the protocol
identified in the IP protocol header.

ip

Enter the keyword ip to configure a generic IP access list. The
keyword ip specifies that the access list will permit all IP
protocols.

tcp

Enter the keyword tcp to configure a TCP access list filter.

udp

Enter the keyword udp to configure a UDP access list filter.

source

Enter the IP address of the network or host from which the
packets were sent.

mask

(OPTIONAL) Enter a network mask in /prefix format (/x).

any

Enter the keyword any to specify that all routes are subject to the
filter.

host ip-address

Enter the keyword host followed by the IP address to specify a
host IP address.

operator

(OPTIONAL) Enter one of the following logical operands:
• eq = equal to
• neq = not equal to
• gt = greater than
• lt = less than
• range = inclusive range of ports (you must specify two ports
for the port parameter.)

port port

(OPTIONAL) Enter the application layer port number. Enter two
port numbers if using the range logical operand.
Range: 0 to 65535
The following list includes some common TCP port numbers:
• 23 = Telnet
• 20 and 21 = FTP
• 25 = SMTP
• 169 = SNMP

destination

Enter the IP address of the network or host to which the packets
are sent.

precedence precedence

Enter the keyword precedence followed by a number from 0 to 7
as the precedence value.

tos tos-value

Enter the keyword tos followed by a number from 0 to 15 as the
TOS value.

Defaults
Command Modes

count

(OPTIONAL) Enter the keyword count to count packets
processed by the filter.

byte

(OPTIONAL) Enter the keyword byte to count only bytes
processed by the filter.

log

(OPTIONAL) Enter the keyword log to have the information kept
in a Trace-list log file.

Not configured.
TRACE LIST

Command
History

Related
Commands

Version 7.4.1.0

Deprecated established keyword — not supported on TeraScale
line cards.

deny

Configure a filter to drop packets.

permit

Configure a filter to forward packets.

show config
e
Syntax
Command Modes

View the current IP trace list configuration.
show config

TRACE LIST

Example

FTOS(config-trace-acl)#show config
!
ip trace-list suzanne
seq 5 deny tcp any any
FTOS(config-trace-acl)#

show ip accounting trace-lists
e
Syntax
Parameters

Command Modes

View the trace lists created on the switch and the sequence of filters.
show ip accounting trace-lists [trace-list-name [linecard number]]
trace-list-name

(OPTIONAL) Enter the name of the trace list to be displayed.

linecard number

(OPTIONAL) Enter the keyword linecard followed by the line card number
to view the Trace list information on that line card.
C-Series and S-Series Range: 0 to 7 on the C300
E-Series Range: 0 to 13 on a E1200, 0 to 6 on a E600, and 0 to 5 on a E300.

EXEC

Security | 1343

www.dell.com | support.dell.com

EXEC Privilege
Command
History

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Example

FTOS#show ip accounting trace-list suzanne
Trace List suzanne
seq 5 deny ip any any count (0x00 packets)
seq 10 permit tcp 10.1.1.0 /24 any count bytes (0x00 bytes)
FTOS#

Secure DHCP Commands
DHCP as defined by RFC 2131 provides no authentication or security mechanisms. Secure
DHCP is a suite of features that protects networks that use dynamic address allocation from
spoofing and attacks.
•
•
•
•
•
•
•
•
•
•

clear ip dhcp snooping
ip dhcp relay
ip dhcp snooping
ip dhcp snooping database
ip dhcp snooping binding
ip dhcp snooping database renew
ip dhcp snooping trust
ip dhcp source-address-validation
ip dhcp snooping vlan
show ip dhcp snooping

clear ip dhcp snooping
cs

Clear the DHCP binding table.

Syntax

clear ip dhcp snooping binding

Command Modes
Default
Command
History
Related
Commands

1344

|

Security

EXEC Privilege
None
Version 7.8.1.0
show ip dhcp snooping

Introduced on C-Series and S-Series
Display the contents of the DHCP binding table.

ip dhcp relay
Enable Option 82.

cs
Syntax
Parameters

Command Modes
Default
Command
History

ip dhcp relay information-option [trust-downstream]
trust-downstream

Configure the system to trust Option 82 when it is received from the
previous-hop router.

CONFIGURATION
Disabled
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on C-Series and S-Series

ip dhcp snooping
Enable DHCP Snooping globally.

cs
Syntax

[no] ip dhcp snooping

Command Modes

CONFIGURATION

Default
Command
History

Usage
Information

Related
Commands

Disabled
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on C-Series and S-Series

When enabled, no learning takes place until snooping is enabled on a VLAN. Upon disabling
DHCP Snooping the binding table is deleted, and Option 82, IP Source Guard, and Dynamic
ARP Inspection are disabled.
ip dhcp snooping vlan

Enable DHCP Snooping on one or more VLANs.

ip dhcp snooping database
Delay writing the binding table for a specified time.

cs
Syntax
Parameters

Command Modes

ip dhcp snooping database write-delay minutes
minutes

Range: 5 to 21600

CONFIGURATION

Security | 1345

www.dell.com | support.dell.com

Default
Command
History

None
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on C-Series and S-Series

ip dhcp snooping binding
Create a static entry in the DHCP binding table.

cs
Syntax

[no] ip dhcp snooping binding mac address vlan-id vlan-id ip ip-address interface type slot/port lease
number

Parameters

mac address

Enter the keyword mac followed by the MAC address of the host to which
the server is leasing the IP address.

vlan-id vlan-id

Enter the keyword vlan-id followed by the VLAN to which the host
belongs.
Range: 2 to 4094

ip ip-address

Enter the keyword ip followed by the IP address that the server is leasing.

interface type

Enter the keyword interface followed by the type of interface to which the
host is connected.

•
•
•
•
•

Command Modes

For an 10/100 Ethernet interface, enter the keyword
fastethernet.
For a Gigabit Ethernet interface, enter the keyword
gigabitethernet.
For a SONET interface, enter the keyword sonet.
For a Ten Gigabit Ethernet interface, enter the keyword
tengigabitethernet.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE.

slot/port

Enter the slot and port number of the interface.

lease time

Enter the keyword lease followed by the amount of time the IP address will
be leased.
Range: 1-4294967295

EXEC
EXEC Privilege

Default
Command
History

Related
Commands

1346

|

Security

None
Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on C-Series and S-Series

show ip dhcp snooping

Display the contents of the DHCP binding table.

ip dhcp snooping database renew
Renew the binding table.

cs
Syntax
Command Modes

ip dhcp snooping database renew

EXEC
EXEC Privilege

Default
Command
History

None
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on C-Series and S-Series

ip dhcp snooping trust
Configure an interface as trusted.

cs
Syntax
Command Modes
Default
Command
History

[no] ip dhcp snooping trust
INTERFACE
Untrusted
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on C-Series and S-Series

ip dhcp source-address-validation
Enable IP Source Guard.

cs
Syntax
Command Modes
Default
Command
History

[no] ip dhcp source-address-validation
INTERFACE
Disabled
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on C-Series and S-Series

ip dhcp snooping vlan
cs

Enable DHCP Snooping on one or more VLANs.

Security | 1347

www.dell.com | support.dell.com

Syntax
Parameters

Command Modes
Default
Command
History

Usage
Information
Related
Commands

[no] ip dhcp snooping vlan name
name

Enter the name of a VLAN on which to enable DHCP Snooping.

CONFIGURATION
Disabled
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on C-Series and S-Series

When enabled the system begins creating entries in the binding table for the specified
VLAN(s). Note that learning only happens if there is a trusted port in the VLAN.
ip dhcp snooping trust

Configure an interface as trusted.

show ip dhcp snooping
Display the contents of the DHCP binding table.

cs
Syntax
Command Modes

show ip dhcp snooping binding

EXEC
EXEC Privilege

Default
Command
History

Related
Commands

1348

|

Security

None
Version 8.3.7.0

Introduced on S4810

Version 7.8.1.0

Introduced on C-Series and S-Series

clear ip dhcp snooping

Clear the contents of the DHCP binding table.

47
Service Provider Bridging
Overview
Service Provider Bridging is composed of VLAN Stacking, Layer 2 Protocol Tunneling, and
Provider Backbone Bridging as described in the FTOS Configuration Guide Service Provider
Bridging chapter.
This chapter includes CLI information for FTOS Layer 2 Protocol Tunneling (L2PT). L2PT
enables protocols to tunnel through an 802.1q tunnel.
L2PT is supported by FTOS on all Dell Force10 systems as indicated by the characters that
appear below each command heading: e E-Series, c C-Series, s S-Series, or
.
L2PT is supported on E-Series ExaScale ex with FTOS 8.2.1.0. and later.
Refer to Chapter 54, VLAN Stacking or Chapter 52, Spanning Tree Protocol (STP) and
Chapter 18, GARP VLAN Registration (GVRP) for further information related to those
features.

Commands
The L2PT commands are:
•
•
•
•
•
•

debug protocol-tunnel
protocol-tunnel
protocol-tunnel destination-mac
protocol-tunnel enable
protocol-tunnel rate-limit
show protocol-tunnel

Important Points to Remember
•

L2PT is enabled at the interface VLAN-Stack VLAN level. For details on
Stackable VLAN (VLAN-Stacking) commands, refer to Chapter 54, VLAN
Stacking.

Service Provider Bridging | 1349

www.dell.com | support.dell.com

•
•
•
•
•
•

The default behavior is to disable protocol packet tunneling through the 802.1q
tunnel.
Rate-limiting is required to protect against BPDU attacks.
A port channel (including through LACP) can be configured as a VLAN-Stack
access or trunk port.
ARP packets work as expected across the tunnel.
FEFD works the same as with Layer 2 links.
Protocols that use Multicast MAC addresses (OSPF for example) work as
expected and carry over to the other end of the VLAN-Stack VLAN.

debug protocol-tunnel
ces

Syntax

Enable debugging to ensure incoming packets are received and rewritten to a new MAC
address.
debug protocol-tunnel interface {in | out | both} [vlan vlan-id] [count value]

To disable debugging, use the no debug protocol-tunnel interface {in | out | both} [vlan vlan-id]
[count value] command.
Parameters

1350

interface

Enter one of the following interfaces and slot/port information:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed
by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed
by a number:
C-Series and S-Series Range: 1 to 128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a SONET interface, enter the keyword sonet followed by the slot/
port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.

in | out | both

Enter the keyword in, out, or both to debug incoming interfaces, outgoing
interfaces, or both incoming and outgoing interfaces.

vlan vlan-id

Enter the keyword vlan followed by the VLAN ID.
Range: 1 to 4094

count value

Enter the keyword count followed by the number of debug outputs.
Range: 1 to 100

Defaults

Debug Disabled

Command Modes

EXEC Privilege

|

Service Provider Bridging

Command
History

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduced on the C-Series, E-Series and E-Series ExaScale.

Version 7.4.1.0

Introduced

protocol-tunnel
ces
Syntax

Enable protocol tunneling on a stacked (Q-in-Q) VLAN for specified protocol packets.
protocol-tunnel {dot1x | e-lmi | gmrp | gvrp | lldp | lacp | mmrp | mvrp | oam | stp}

To disable protocol tunneling for a Layer 2 protocol, use the no protocol-tunnel command.
Parameters

Defaults
Command Modes
Command
History

dot1x

E-Series ExaScale only: Enter dot1x to enable protocol tunneling for 802.1x
authentication.

e-lmi

E-Series ExaScale only: Enter e-lmi to enable protocol tunneling for the Ethernet local
management interface (E-LMI).

gmrp

E-Series ExaScale only: Enter gmrp to enable protocol tunneling for the GARP
Multicast Registration protocol (GMRP).

gvrp

E-Series ExaScale only: Enter gvrp to enable protocol tunneling for the GARP VLAN
Registration protocol (GVRP).

lldp

E-Series ExaScale only: Enter lldp to enable protocol tunneling for the Link Layer
Discovery protocol (LLDP).

lacp

E-Series ExaScale only: Enter lacp to enable protocol tunneling for the Link
Aggregation Control protocol (LACP).

mmrp

E-Series ExaScale only: Enter mmrp to enable protocol tunneling for the Multiple MAC
Registration protocol (MMRP).

mvrp

E-Series ExaScale only: Enter mvrp to enable protocol tunneling for the Multiple
VLAN Registration protocol (MVRP).

oam

E-Series ExaScale only: Enter oam to enable protocol tunneling for Link-Layer
Ethernet Operations, Administration, and Maintenance functions (Ethernet in the First
Mile - EFM - OAM 802.3ah).

stp

Enter stp to enable protocol tunneling on a spanning tree, including STP, MSTP, RSTP,
and PVST.

No default values or behavior
CONF-IF-VLAN
Version 8.5.1.1

Support for 802.1X, E-LMI, GMRP, GVRP, LLDP, LACP, MMRP, MVRP, and
OAM 802.3ah protocol traffic was added to the E-Series ExaScale.

Version 8.2.1.0

Introduced on the C-Series, E-Series and E-Series ExaScale.

Version 7.4.1.0

Introduced

Service Provider Bridging | 1351

www.dell.com | support.dell.com

Example

Related
Commands

FTOS#conf
FTOS(conf)#interface vlan 2
FTOS(conf-if-vl-2)#vlan-stack compatible
FTOS(conf-if-vl-2)#member Gi1/2-3
FTOS(conf-if-vl-2)#protocol-tunnel stp
FTOS(conf-if-vl-2)#protocol-tunnel enable

show protocol-tunnel

Display tunneling information for all VLANs

protocol-tunnel destination-mac
ces

Syntax
Parameters

Defaults
Command Modes
Command
History

Usage
Information
Related
Commands

Overwrite the BPDU destination MAC address with a specific value.

protocol-tunnel destination-mac xstp address
stp

Change the default destination MAC address used for L2PT to another value.

The default destination MAC is 01:01:e8:00:00:00.
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduced on the C-Series and S-Series.

Version 7.4.1.0

Introduced

When VLAN-Stacking is enabled, no protocol packets are tunneled.

show protocol-tunnel

Display tunneling information for all VLANs

protocol-tunnel enable
ces

Syntax

Enable protocol tunneling globally on the system.

protocol-tunnel enable

To disable protocol tunneling, use the no protocol-tunnel enable command.
Defaults
Command Modes
Command
History

1352

|

Disabled
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.4.1.0

Introduced

Service Provider Bridging

Usage
Information

FTOS must have the default CAM profile with the default microcode before you enable
L2PT.

protocol-tunnel rate-limit
ces

Syntax

Enable traffic rate limiting per box.

protocol-tunnel rate-limit rate

To reset the rate limit to the default, use the no protocol-tunnel rate-limit rate command.
Parameters

Defaults
Command Modes
Command
History

rate

75 Frames per second
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduced on the C-Series, E-Series Terascale, and E-Series ExaScale.
Maximum rate limit on E-Series reduced from 4000 to 3000.

Version 7.4.1.0

Introduced

Example

Related
Commands

Enter the rate in frames per second.
Range: 75 to 3000
Default: 75

FTOS#
FTOS#conf
FTOS(conf)#protocol-tunnel rate-limit 1000
FTOS(conf)#

show protocol-tunnel

Display tunneling information for all VLANs

show running-config

Display the current configuration.

show protocol-tunnel
ces

Syntax
Parameters

Defaults
Command Modes

Display protocol tunnel information for all or a specified VLAN-Stack VLAN.

show protocol-tunnel [vlan vlan-id]
vlan vlan-id

(OPTIONAL) Enter the keyword vlan followed by the VLAN ID to display
information for the one VLAN.
Range: 1 to 4094

No default values or behavior
EXEC

Service Provider Bridging | 1353

www.dell.com | support.dell.com

Command
History

Introduced on S4810

Version 8.2.1.0

Introduced on the C-Series, E-Series and E-Series ExaScale.

Version 7.4.1.0

Introduced

Example

FTOS#show protocol-tunnel
System Rate-Limit: 75 frames/second
VLAN Protocols
Interface
1000 STP,PVST
Gi 5/7,Gi 5/6
1001 LLDP,GVRP
Gi 5/7,Gi 5/6
1002 MMRP,MVRP
Gi 5/7,Gi 5/6
1003 LACP,DOT1X
Gi 5/7,Gi 5/6
1004 OAM,PAUSE
Gi 5/7,Gi 5/6
1005 E-LMI
Gi 5/7,Gi 5/6

Example
(specific VLAN)

Related
Commands

1354

Version 8.3.7.0

|

FTOS#show protocol-tunnel vlan 2
System Rate-Limit: 1000 Frames/second
Interface
Vlan
Protocol(s)
Gi1/2
2
STP, PVST
FTOS#

show running-config

Service Provider Bridging

Display the current configuration.

48
sFlow
Overview
sFlow commands are supported by FTOS on all Dell Force10 platforms as indicated by the
characters that appear under each of the command headings: e E-Series, c C-Series, s
S-Series, or
.
FTOS sFlow monitoring system includes an sFlow Agent and an sFlow Collector. The sFlow
Agent combines the flow samples and interface counters into sFlow datagrams and forwards
them to the sFlow Collector. The sFlow Collector analyses the sFlow Datagrams received
from the different devices and produces a network-wide view of traffic flows.

Important Points to Remember
•

•

•
•
•
•
•
•
•

Dell Force10 recommends that the sFlow Collector be connected to the Dell
Force10 chassis through a line card port rather than the RPM Management
Ethernet port.
FTOS exports all sFlow packets to the sFlow Collector. A small sampling rate
can equate to a large number of exported packets. A backoff mechanism will
automatically be applied to reduce this amount. Some sampled packets may be
dropped when the exported packet rate is high and the backoff mechanism is
about to or is starting to take effect. The dropEvent counter, in the sFlow packet,
will always be zero.
sFlow sampling is done on a per-port basis.
Community list and local preference fields are not filled up in the extended
gateway element in the sFlow datagram.
The 802.1P source priority field is not filled up in the extended switch element in
the sFlow datagram.
Only Destination and Destination Peer AS numbers are packed in the dst-as-path
field in the extended gateway element.
If the packet being sampled is redirected using PBR (Policy-Based Routing), the
sFlow datagram may contain incorrect extended gateway/router information.
sFlow does not support packing extended information for IPv6 packets. Only the
first 128 bytes of the IPv6 packet is shipped in the datagram.
The source VLAN field in the extended switch element will not be packed in case
of a routed packet.

sFlow | 1355

www.dell.com | support.dell.com

•
•

The destination VLAN field in the extended switch element will not be packed in
case of a multicast packet.
The maximum number of packets that can be sampled and processed per second
is:
• 7500 packets when no extended information packing is enabled
• 7500 packets when only extended-switch information packing is enabled (
sflow extended-switch enable)
• 1600 packets when extended-router and/or extended-gateway information
packing is enabled ( Figure and sflow extended-gateway enable)

Commands
The sFlow commands are:
•
•
•
•
•
•
•
•
•
•
•
•

sflow collector
sflow enable (Global)
sflow enable (Interface)
sflow extended-gateway enable
sflow extended-router enable
sflow extended-switch enable
sflow polling-interval (Global)
sflow polling-interval (Interface)
sflow sample-rate (Global)
sflow sample-rate (Interface)
show sflow
show sflow linecard

sflow collector
ces

Syntax

Parameters

Configure a collector device to which sFlow datagrams are forwarded.

sflow collector {ipv4-address | ipv6-address} agent-addr {ipv4-address | ipv6-address} [number
[max-datagram-size number]] | [max-datagram-size number]
sflow collector ipv4-address |
ipv6-address

agent-addr ipv4-address |
ipv6-address

1356

|

sFlow

Enter the IPv4 (A.B.C.D) or IPv6 address (X:X:X:X::X) of
the sFlow collector device.
Enter the IPv4 (A.B.C.D) or IPv6 address (X:X:X:X::X) of
the sFlow agent in the router.

Defaults
Command Modes
Command
History

Usage
Information

number

(OPTIONAL) Enter the UDP port number (User Datagram
Protocol).
Range: 0 to 65535
Default: 6343

max-datagram-size number

(OPTIONAL) Enter the keyword max-datagram-size
followed by the size number in bytes.
Range: 400 to 1500
Default: 1400

Not configured
CONFIGURATION
Version 8.4.2.3

Support for IPv6 sFlow collectors and agents was added on the E-series
TeraScale, C-Series, and S-Series.

Version 8.4.1.1

Support for IPv6 sFlow collectors and agents was added on the E-series
ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduces on S-Series Stacking

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

Version 6.5.1.0

Expanded the no form of the command to mirror the syntax used to configure

Version 6.2.1.1

Introduced on E-Series

You can configure up to two sFlow collectors (IPv4 or IPv6). If two collectors are configured,
traffic samples are sent to both.
The sFlow agent address is carried in a field in SFlow packets and is used by the collector to
identify the sFlow agent.
IPv6 sFlow collectors and agents are supported on E-Series (ExaScale and TeraScale),
C-Series, and S-Series routers.
To delete a configured collector, enter the no sflow collector {ipv4-address | ipv6-address}
agent-addr {ipv4-address | ipv6-address} [number [max-datagram-size number]] |
[max-datagram-size number] command.
As part of the sFlow-MIB, if the SNMP request originates from a configured collector, FTOS
will return the corresponding configured agent IP in MIB requests. FTOS checks to ensure
that two entries are not configured for the same collector IP with a different agent IP. Should
that happen, FTOS generates the following error:
%Error: Different agent-addr attempted for an existing collector

sFlow | 1357

www.dell.com | support.dell.com

sflow enable (Global)
ces

Syntax

Enable sFlow globally.

sflow enable

To disable sFlow, use the no sflow enable command.
Defaults
Command Modes
Command
History

Usage
Information
Related
Commands

Disabled.
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduces on S-Series Stacking

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

Version 6.2.1.1

Introduced on E-Series

sFlow is disabled by default. In addition to this command, sFlow needs to be enabled on
individual interfaces where sFlow sampling is desired.
sflow enable (Interface)

Enable sFlow on Interfaces.

sflow enable (Interface)
ces

Syntax

Enable sFlow on Interfaces.

sflow enable

To disable sFlow, use the no sflow enable command.
Defaults
Command Modes
Command
History

1358

|

sFlow

Disabled.
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduces on S-Series Stacking

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

Version 6.2.1.1

Introduced on E-Series

Usage
Information

When sFlow is enabled on an interface, flow sampling is done on any traffic going out of the
interface.
Note: After a physical port is a member of a LAG, it inherits the sFlow configuration
from the LAG port.

Related
Commands

sflow enable (Global)

Turn sFlow on globally

sflow extended-gateway enable
e
Syntax

Enable packing information on an extended gateway.
sflow extended-gateway [extended-router] [extended-switch] enable

To disable packing information, use the no sflow extended-gateway [extended-router]
[extended-switch] enable command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

extended-router

Enter the keyword extended-router to collect extended router
information.

extended-switch

Enter the keyword extended-switch to collect extended switch
information.

enable

Enter the keyword enable to enable global extended information.

Disabled.
CONFIGURATION
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series

The show sflow command displays the configured global extended information.

FTOS 7.8.1.0 and later enhances the sFlow implementation for real time traffic analysis on
the E-Series to provide extended gateway information in cases where the destination IP
addresses are learned by different routing protocols and for cases where the destination is
reachable over ECMP.
Example

FTOS#show sflow
sFlow services are enabled
Global default sampling rate: 64
Global default counter polling interval: 1000
Global extended information enabled: gateway, router, switch
1 collectors configured
Collector IP addr: 20.20.20.2, Agent IP addr: 10.11.201.7, UDP port: 6343
1732336 UDP packets exported
0 UDP packets dropped
12510225 sFlow samples collected
0 sFlow samples dropped due to sub-sampling
FTOS#

sFlow | 1359

www.dell.com | support.dell.com

Related
Commands

show sflow

Display the sFlow configuration

sflow extended-router enable
e
Syntax

Enable packing information on a router and switch.
sflow extended-router [extended-switch] enable

To disable packing information, use the no sflow extended-router [extended-switch] enable
command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

Related
Commands

extended-switch

Enter the keyword extended-switch to collect extended switch
information.

enable

Enter the keyword enable to enable global extended information.

Disabled.
CONFIGURATION
Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.4.1.0

Introduced on E-Series

FTOS 7.8.1.0 and later enhances the sFlow implementation for real time traffic analysis on
the E-Series to provide extended gateway information in cases where the destination IP
addresses are learned by different routing protocols and for cases where the destination is
reachable over ECMP.
sflow extended-gateway enable

Enable packing information on an extended gateway

sflow extended-switch enable

Enable packing information on a switch.

show sflow

Display the sFlow configuration

sflow extended-switch enable
ces

Syntax

Enable packing information on a switch only.

sflow extended-switch enable

To disable packing information, use the no sflow extended-switch [enable] command.
Parameters

Defaults

1360

|

sFlow

enable

Disabled.

Enter the keyword enable to enable global extended information.

Command Modes
Command
History

Usage
Information

Related
Commands

CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduces on S-Series Stacking

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced on E-Series

FTOS 7.8.1.0 and later enhances the sFlow implementation for real time traffic analysis on
the E-Series to provide extended gateway information in cases where the destination IP
addresses are learned by different routing protocols, and for cases where the destination is
reachable over ECMP.
sflow extended-gateway enable

Enable packing information on an extended gateway.

sflow extended-router enable

Enable packing information on a router.

show sflow

Display the sFlow configuration

sflow polling-interval (Global)
ces

Syntax

Set the sFlow polling interval at a global level.

sflow polling-interval interval value

To return to the default, use the no sflow polling-interval interval command.
Parameters

Defaults
Command Modes
Command
History

interval value

Enter the interval value in seconds.
Range: 15 to 86400 seconds
Default: 20 seconds

20 seconds
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduces on S-Series Stacking

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

Version 6.2.1.1

Introduced on E-Series

sFlow | 1361

www.dell.com | support.dell.com

Usage
Information

Related
Commands

The polling interval for an interface is the maximum number of seconds between successive
samples of counters to be sent to the collector. This command changes the global default
counter polling (20 seconds) interval. You can configure an interface to use a different polling
interval.
sflow polling-interval (Interface)

Set the polling interval for an interface

sflow polling-interval (Interface)
ces

Syntax

Set the sFlow polling interval at an interface (overrides the global-level setting.)

sflow polling-interval interval value

To return to the default, use the no sflow polling-interval interval command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information
Related
Commands

interval value

Enter the interval value in seconds.
Range: 15 to 86400 seconds
Default: The global counter polling interval

The same value as the current global default counter polling interval
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduces on S-Series Stacking

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

Version 6.2.1.1

Introduced on E-Series

This command sets the counter polling interval for an interface.

sflow polling-interval (Global)

Globally set the polling interval

sflow sample-rate (Global)
ces

Syntax

Change the global default sampling rate.

sflow sample-rate value

To return to the default sampling rate, enter the no sflow sample-rate command.

1362

|

sFlow

Parameters

Defaults
Command Modes
Command
History

Usage
Information

Related
Commands

value

Enter the sampling rate value.
Range: C-Series and S-Series: 256 to 8388608 packets
E-Series TeraScale and ExaScale: 2 to 8388608
Enter values in powers of 2 only; for example 4096, 8192, 16384, etc.
Default: 32768 packets

32768
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduces on S-Series Stacking

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

Version 6.2.1.1

Introduced on E-Series

Sample-rate is the average number of packets skipped before the sample is taken. This
command changes the global default sampling rate. You can configure an interface to use a
different sampling rate than the global sampling rate. If the value entered is not a correct
power of 2, the command generates an error message with the previous and next power of 2
value. Select one of these two packet numbers and re-enter the command.
sflow sample-rate (Interface)

Change the Interface sampling rate.

sflow sample-rate (Interface)
ces

Syntax

Change the Interface default sampling rate.

sflow sample-rate value

To return to the default sampling rate, enter the no sflow sample-rate.
Parameters

Defaults
Command Modes

value

Enter the sampling rate value.
Range: C-Series and S-Series: 256 to 8388608 packets
E-Series TeraScale and ExaScale: 2 to 8388608 packets
Enter values in powers of 2 only, for example 4096, 8192, 16384 etc.
Default: 32768 packets

The Global default sampling
CONFIGURATION

sFlow | 1363

www.dell.com | support.dell.com

Command
History

Usage
Information

Related
Commands

Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduces on S-Series Stacking

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

Version 6.2.1.1

Introduced on E-Series

This command changes the sampling rate for an Interface. By default, the sampling rate of an
interface is set to the same value as the current global default sampling rate. If the value
entered is not a correct power of 2, the command generates an error message with the
previous and next power-of-2 value. Select one of these two numbers and re-enter the
command.
sflow sample-rate (Global)

Change the sampling rate globally.

show sflow
ces

Syntax
Parameters

Command Modes

Display the current sFlow configuration

show sflow [interface]
interface

(OPTIONAL) Enter the following keywords and slot/port or number information:
• For an 100/1000 Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed
by the slot/port information.
• For a Loopback interface, enter the keyword loopback followed by a number
from 0 to 16383.
• For a SONET interface, enter the keyword sonet followed by the slot/port
information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.

EXEC
EXEC Privilege

Command
History

1364

|

sFlow

Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduces on S-Series Stacking

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

Version 6.2.1.1

Introduced on E-Series

Usage
Information

The dropEvent counter (sFlow samples dropped due to sub-sampling) shown in red in the
example above will always display a value of zero.

Example

FTOS#show sflow
sFlow services are enabled
Global default sampling rate: 32768
Global default counter polling interval: 20
1 collectors configured
Collector IP addr: 133.33.33.53, Agent IP addr: 133.33.33.116, UDP port: 6343
0 UDP packets exported
0 UDP packets dropped
165 sFlow samples collected
0 sFlow samples dropped due to sub-sampling

Linecard 1 Port set 0 H/W sampling rate 8192
Gi 1/16: configured rate 8192, actual rate 8192, sub-sampling rate 1
Gi 1/17: configured rate 16384, actual rate 16384, sub-sampling rate 2
Linecard 3 Port set 1 H/W sampling rate 16384
Gi 3/40: configured rate 16384, actual rate 16384, sub-sampling rate 1
FTOS#

show sflow linecard
ces
Syntax
Parameters

Command Modes

Display the sFlow information on a line card.
show sflow linecard {slot number}
slot number

(OPTIONAL) Enter a slot number to view information on the line card in that
slot.
Range: 0 to 13 on a E1200, 0 to 6 on a E600/E600i, and 0 to 5 on a E300.

EXEC
EXEC Privilege

Command
History

Usage
Information
Example

Version 8.2.1.0

Introduces on S-Series Stacking

Version 8.1.1.0

Introduced on E-Series ExaScale

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

Version 6.2.1.1

Introduced on E-Series

The dropEvent counter (sFlow samples dropped due to sub-sampling) shown in the Example
below always displays a value of zero.
FTOS#show sflow linecard 1
Linecard 1
Samples rcvd from h/w
Samples dropped for sub-sampling
Total UDP packets exported
UDP packets exported via RPM
UDP packets dropped
FTOS#

:165
:0
:0
:77
:

sFlow | 1365

1366

|

sFlow

www.dell.com | support.dell.com

Simple Network Management Protocol
and Syslog
Overview
This chapter contains commands to configure and monitor SNMP v1/v2/v3 and Syslog. Both
features are supported on the C-Series, E-Series, S-Series, and Z-Series platforms, as
indicated by the following symbols under each of the command headings: e E-Series, c
C-Series, s S-Series,
. or z Z-Series.
The chapter contains the following sections:
•
•

SNMP Commands
Syslog Commands

SNMP Commands
The SNMP commands available in FTOS are:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

show snmp
show snmp engineID
show snmp group
show snmp user
snmp ifmib ifalias long
snmp-server community
snmp-server contact
snmp-server enable traps
snmp-server engineID
snmp-server group
snmp-server host
snmp-server location
snmp-server packetsize
snmp-server trap-source
snmp-server user
snmp-server view
snmp trap link-status

The Simple Network Management Protocol (SNMP) is used to communicate management
information between the network management stations and the agents in the network
elements. FTOS supports SNMP versions 1, 2c, and 3, supporting both read-only and
read-write modes. FTOS sends SNMP traps, which are messages informing an SNMP
management system about the network. FTOS supports up to 16 SNMP trap receivers.

Simple Network Management Protocol and Syslog | 1367

www.dell.com | support.dell.com

Important Points to Remember
•

•
•
•
•
•

Typically, 5-second timeout and 3-second retry values on an SNMP server are
sufficient for both LAN and WAN applications. If you experience a timeout with
these values, the recommended best practice on Dell Force10 switches (to
accommodate their high port density) is to increase the timeout and retry values
on your SNMP server to the following:
• SNMP Timeout—greater than 3 seconds
• SNMP Retry count—greater than 2 seconds
If you want to query an E-Series switch using SNMP v1/v2/v3 with an IPv6
address, configure the IPv6 address on a non-management port on the switch.
If you want to send SNMP v1/v2/v3 traps from an E-Series using an IPv6
address, use a non-management port.
SNMP v3 informs are not currently supported with IPv6 addresses.
If you are using ACLs in SNMP v3 configuration, group ACL overrides user
ACL if the user is part of that group.
SNMP operations are not supported on a VLAN.

show snmp
cesz
Syntax
Command Modes

Display the status of SNMP network elements.
show snmp

EXEC
EXEC Privilege

Command
History

Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

E-Series legacy command

1368

|

Simple Network Management Protocol and Syslog

Example

Related
Commands

FTOS#show snmp
32685 SNMP packets input
0 Bad SNMP version errors
0 Unknown community name
0 Illegal operation for community name supplied
0 Encoding errors
96988 Number of requested variables
0 Number of altered variables
31681 Get-request PDUs
968 Get-next PDUs
0 Set-request PDUs
61727 SNMP packets output
0 Too big errors (Maximum packet size 1500)
9 No such name errors
0 Bad values errors
0 General errors
32649 Response PDUs
29078 Trap PDUs
FTOS#

snmp-server community

Enable SNMP and set community string.

show snmp engineID
cesz
Syntax
Command Modes

Display the identification of the local SNMP engine and all remote engines that are
configured on the router.
show snmp engineID

EXEC
EXEC Privilege

Command
History

Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series
E-Series legacy command

Example

FTOS#show snmp engineID
Local SNMP engineID: 0000178B02000001E80214A8
Remote Engine ID
IP-addr
80001F88043132333435
172.31.1.3
80001F88043938373635
172.31.1.3

Port
5009
5008

FTOS#

Related
Commands

snmp-server engineID

Configure local and remote SNMP engines on the router

Simple Network Management Protocol and Syslog | 1369

www.dell.com | support.dell.com

show snmp group
cesz
Syntax
Command Modes

Display the group name, security model, status, and storage type of each group.
show snmp group

EXEC
EXEC Privilege

Command
History

Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series
E-Series legacy command

Usage
Information

The following example displays a group named ngroup. The ngroup has a security model of
version 3 (v3) with authentication (auth), the read and notify name is nview with no write
view name specified, and finally the row status is active.

Example

FTOS#show snmp group
groupname: ngroup
readview : nview
notifyview: nview
row status: active

security model: v3 auth
writeview: no write view specified

FTOS#

Related
Commands

snmp-server group

Configure an SNMP server group

show snmp user
cesz
Syntax
Command Modes

Display the information configured on each SNMP user name.
show snmp user

EXEC
EXEC Privilege

Example

FTOS#show snmp user
User name: v1v2creadu
Engine ID: 0000178B02000001E80214A8
storage-type: nonvolatile
active
Authentication Protocol: None
Privacy Protocol: None
FTOS#

1370

|

Simple Network Management Protocol and Syslog

Command
History

Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series
E-Series legacy command

snmp ifmib ifalias long
cesz
Syntax
Defaults
Command Modes
Command
History

Example

Display the entire description string through the Interface MIB, which would otherwise be
truncated to 63 characters.
snmp ifmib ifalias long

Interface description truncated beyond 63 characters
CONFIGURATION
Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced for S-Series

Version 7.5.1.0

Introduced for C-Series

unknown

Introduced for E-Series

!------command run on host connected to switch: --------------!
> snmpwalk -c public 10.10.10.130 .1.3.6.1.2.1.31 | grep -i alias | more
IF-MIB::ifAlias.134530304 = STRING: This is a port connected to Router2. This
is a port connected to
IF-MIB::ifAlias.134792448 = STRING:
!------command run on Force10 switch: --------------!
FTOS#snmp ifmib ifalias long
!------command run on server connected to switch: --------------!
> snmpwalk -c public 10.10.10.130 .1.3.6.1.2.1.31 | grep -i alias | more
IF-MIB::ifAlias.134530304 = STRING: This is a port connected to Router2. This
is a port connected to Router2. This is a port connected to Router2. This is a
port connected to Router2. This is a port connected to Router2.
IF-MIB::ifAlias.134792448 = STRING:

snmp-server community
cesz
Syntax

Configure a new community string access for SNMPv1, v2, and v3.
snmp-server community community-name {ro | rw} [ipv6 ipv6-access-list-name [ipv6
ipv6-access-list-name | access-list-name | security-name name] | security-name name [ipv6
ipv6-access-list-name | access-list-name | security-name name] | access-list-name [ipv6
ipv6-access-list-name | access-list-name | security-name name]]]

Simple Network Management Protocol and Syslog | 1371

www.dell.com | support.dell.com

To remove access to a community, use the no snmp-server community community-string {ro |
rw} [security-name name [access-list-name | ipv6 access-list-name | access-list-name ipv6
access-list-name]] command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information
Example

community-name

Enter a text string (up to 20 characters long) to act as a password for
SNMP.

ro

Enter the keyword ro to specify read-only permission.

rw

Enter the keyword rw to specify read-write permission.

ipv6 access-list-name

(Optional) Enter the keyword ipv6 followed by a an IPv6 ACL
name (a string up to 16 characters long).

security-name name

(Optional) Enter the keyword security-name followed by the
security name as defined by the community MIB.

access-list-name

(Optional) Enter a standard IPv4 access list name (a string up to 16
characters long).

No default behavior or values
CONFIGURATION
Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.2.1.1

Introduced on E-Series

The example below configures a community named public that is mapped to the security
named guestuser with Read Only (ro) permissions.
FTOS#config
FTOS(conf)# snmp-server community public ro
FTOS(conf)# snmp-server community guest ro security-name guestuser
FTOS(conf)#

The security-name parameter maps the community string to an SNMPv3 user/security name
as defined by the community MIB.
If a community string is configured without a security-name (for example, snmp-server
community public ro), the community is mapped to a default security-name/group:
•
•

v1v2creadu / v1v2creadg — maps to a community with ro (read-only)
permissions
v1v2cwriteu/ v1v2cwriteg — maps to a community with rw
(read-write) permissions

This command is indexed by the community-name parameter.
If the snmp-server community command is not configured, you cannot query SNMP data.
Only Standard IPv4 ACL and IPv6 ACL is supported in the optional access-list-name.

1372

|

Simple Network Management Protocol and Syslog

The command options ipv6, security-name, and access-list-name are recursive. In other words,
each option can, in turn, accept any of the three options as a sub-option, and each of those
sub-options can accept any of the three sub-options as a sub-option, and so forth. The
following example demonstrates the creation of a standard IPv4 ACL called “snmp-ro-acl”
and then assigning it to the SNMP community “guest”:
Example

FTOS(conf)# ip access-list standard snmp-ro-acl
FTOS(config-std-nacl)#seq 5 permit host 10.10.10.224
FTOS(config-std-nacl)#seq 10 deny any count
!
FTOS(conf)#snmp-server community guest ro snmp-ro-acl
FTOS(conf)#

Note: For IPv6 ACLs, only IPv6 and UDP types are valid for SNMP; TCP, ICMP rules
are not valid for SNMP. In IPv6 ACLs port rules are not valid for SNMP.
Related
Commands

ip access-list standard

Name (or select) a standard access list to filter based on IP address.

ipv6 access-list

Configure an access list based on IPv6 addresses or protocols.

show running-config
snmp

Display the current SNMP configuration and defaults.

snmp-server contact
cesz
Syntax

Configure contact information for troubleshooting this SNMP node.
snmp-server contact text

To delete the SNMP server contact information, use the no snmp-server contact command.
Parameters

Defaults
Command Modes
Command
History

text

Enter an alphanumeric text string, up to 55 characters long.

No default values or behavior
CONFIGURATION
Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series
E-Series legacy command

snmp-server enable traps
cesz

Enable SNMP traps.

Simple Network Management Protocol and Syslog | 1373

www.dell.com | support.dell.com

Syntax

snmp-server enable traps [notification-type] [notification-option]

To disable traps, use the no snmp-server enable traps [notification-type] [notification-option]
command.
Parameters

Defaults
Command Modes
Command
History

notification-type

Enter the type of notification from the list below:
• bgp—Notification of changes in BGP process
• ecfm — Notification of changes to ECFM
• envmon—For Dell Force10, device notifications when an
environmental threshold is exceeded
• isis — Notification of intermediate service traps.
• lacp — Notification of changes to
• snmp—Notification of RFC 1157 traps.
• stp —Notification of state change in Spanning Tree protocol (RFC
1493)
• vlt—Notification of virtual link trunking
• vrrp—Notification of state change in a VRRP group
• xstp—Notification of state change in MSTP (802.1s), RSTP
(802.1w), and PVST+

notification-option

For the envmon notification-type, enter one of the following optional
parameters:
• cam-utilization
• fan
• supply
• temperature
For the snmp notification-type, enter one of the following optional
parameters:
• authentication
• coldstart
• linkdown
• linkup

Not enabled.
CONFIGURATION
Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 8.4.1.0

Support was added for VRRP traps.

Version 7.6.1.0

Support added for S-Series; Added support for STP and xSTP traps.

Version 7.5.1.0

Support added for C-Series

E-Series legacy command
Usage
Information

FTOS supports up to 16 SNMP trap receivers.
For the cam-utilization notification option, the system will generate syslogs and SNMP traps
when the L3 host table or route table utilization goes above the threshold. This applies to the
S4810 only.

1374

|

Simple Network Management Protocol and Syslog

If this command is not configured, no traps controlled by this command are sent. If you do not
specify a notification-type and notification-option, all traps are enabled.
Related
Commands

snmp-server
community

Enable SNMP and set the community string.

snmp-server engineID
cesz
Syntax

Configure name for both the local and remote SNMP engines on the router.
snmp-server engineID [local engineID] [remote ip-address udp-port port-number engineID]

To return to the default, use the no snmp-server engineID [local engineID] [remote ip-address
udp-port port-number engineID] command
Parameters

local engineID

Enter the keyword local followed by the engine ID number that
identifies the copy of the SNMP on the local device.
Format (as specified in RFC 3411): 12 octets.
• The first 4 octets are set to the private enterprise number.
• The remaining 8 octets are the MAC address of the chassis.

remote ip-address

Enter the keyword remote followed by the IP address that identifies
the copy of the SNMP on the remote device.

udp-port port-number

Enter the keyword udp-port followed by the UDP (User Datagram
Protocol) port number on the remote device.
Range: 0 to 65535
Default: 162

engineID

Defaults
Command Modes
Command
History

As above
CONFIGURATION
Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

E-Series legacy command
Usage
Information

Changing the value of the SNMP Engine ID has important side effects. A user's password
(entered on the command line) is converted to an MD5 (Message Digest Algorithm) or SHA
(Secure Hash Algorithm) security digest. This digest is based on both the password and the
local Engine ID. The command line password is then destroyed, as required by RFC 2274.
Because of this deletion, if the local value of the Engine ID changes, the security digests of
SNMPv3 users will be invalid, and the users will have to be reconfigured.
For the remote Engine ID, the host IP and UDP port are the indexes to the command that are
matched to either overwrite or remove the configuration.

Simple Network Management Protocol and Syslog | 1375

www.dell.com | support.dell.com

Related
Commands

show snmp engineID

Display SNMP engine and all remote engines that are configured on
the router

show running-config snmp

Display the SNMP running configuration

snmp-server group
cesz
Syntax

Configure a new SNMP group or a table that maps SNMP users to SNMP views.
snmp-server group [group_name {1 | 2c | 3 {auth | noauth | priv}}] [read name] [write name]
[notify name] [access access-list-name | ipv6 access-list-name | access-list-name ipv6
access-list-name]]

To remove a specified group, use the no snmp-server group [group_name {1 | 2c | 3 {auth |
noauth | priv}}] [read name] [write name] [notify name] [access access-list name | ipv6
access-list-name | access-list-name ipv6 access-list-name]] command.
Parameters

group_name

Enter a text string (up to 20 characters long) as the name of the
group.
Defaults: The following groups are created for mapping to read/write
community/security-names.
• v1v2creadg — maps to a community/security-name with ro
permissions
• 1v2cwriteg — maps to a community/security-name rw
permissions

1 | 2c | 3

(OPTIONAL) Enter the security model version number (1, 2c, or 3).
• 1 is the least secure version
• 3 is the most secure of the security modes.
• 2c allows transmission of informs and counter 64, which allows
for integers twice the width of what is normally allowed.
Default: 1

auth

(OPTIONAL) Enter the keyword auth to specify authentication of a
packet without encryption.

noauth

(OPTIONAL) Enter the keyword noauth to specify no
authentication of a packet.

priv

(OPTIONAL) Enter the keyword priv to specify both authentication
and then scrambling of the packet.

read name

(OPTIONAL) Enter the keyword read followed by a name (a string
of up to 20 characters long) as the read view name.
Default: GlobalView is set by default and is assumed to be every
object belonging to the Internet (1.3.6.1) OID space.

write name

(OPTIONAL) Enter the keyword write followed by a name (a string
of up to 20 characters long) as the write view name.

notify name

(OPTIONAL) Enter the keyword notify followed by a name (a string
of up to 20 characters long) as the notify view name.
Note: This parameter must be enabled on the receiver for traps to be
received.

access access-list name

1376

|

Simple Network Management Protocol and Syslog

(Optional) Enter the standard IPv4 access list name (a string up to 16
characters long).

Defaults
Command Modes
Command
History

ipv6 access-list -name

(Optional) Enter the keyword ipv6 followed by the IPv6 access list
name (a string up to 16 characters long)

access-list-name ipv6
access-list-name

(Optional) Enter both an IPv4 and IPv6 access list name.

As defined above
CONFIGURATION
Version 8.3.11.1

Introduced on Z9000

Version 8.3.10.2

Added access parameter support

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

E-Series legacy command
Usage
Information

The following example specifies the group named harig as a version 3 user requiring both
authentication and encryption and read access limited to the read named rview.
Note: For IPv6 ACLs, only IPv6 and UDP types are valid for SNMP; TCP, ICMP rules
are not valid for SNMP. In IPv6 ACLs port rules are not valid for SNMP.

Example

FTOS#conf
FTOS(conf)# snmp-server group harig 3 priv read rview
FTOS#

Note: The number of configurable groups is limited to 16 groups.
Related
Commands

show snmp group

Display the group name, security model, view status, and storage
type of each group.

show running-config snmp

Display the SNMP running configuration

snmp-server host
cesz
Syntax

Configure the recipient of an SNMP trap operation.
snmp-server host ip-address | ipv6-address [traps | informs] [version 1 | 2c | 3] [auth | no auth |
priv] [community-string] [udp-port port-number] [notification-type]

To remove the SNMP host, use the no snmp-server host ip-address [traps | informs] [version 1 |
2c | 3] [auth | noauth | priv] [community-string] [udp-port number] [notification-type] command.

Simple Network Management Protocol and Syslog | 1377

www.dell.com | support.dell.com

Parameters

ip-address

Enter the keyword host followed by the IP address of the host
(configurable hosts is limited to 16).

ipv6-address

Enter the keyword host followed by the IPv6 address of the host in the
x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zero

traps

(OPTIONAL) Enter the keyword traps to send trap notifications to the
specified host.
Default: traps

informs

(OPTIONAL) Enter the keyword informs to send inform notifications to
the specified host.
Default: traps

version 1 | 2c | 3

(OPTIONAL) Enter the keyword version to specify the security model
followed by the security model version number 1, 2c, or 3.
• Version 1 is the least secure version
• version 3 is the most secure of the security modes.
• Version 2c allows transmission of informs and counter 64, which
allows for integers twice the width of what is normally allowed.
Default: Version 1

auth

(OPTIONAL) Enter the keyword auth to specify authentication of a
packet without encryption.

noauth

(OPTIONAL) Enter the keyword noauth to specify no authentication of
a packet.

priv

(OPTIONAL) Enter the keyword priv to specify both authentication and
then scrambling of the packet.

community-string

Enter a text string (up to 20 characters long) as the name of the SNMP
community.
Note: For version 1 and version 2c security models, this string represents
the name of the SNMP community. The string can be set using this
command, however it is recommended that you set the community string
using the snmp-server community command before executing this
command. For version 3 security model, this string is the USM user
security name.

Defaults
Command Modes

1378

|

udp-port port-number

(OPTIONAL) Enter the keywords udp-port followed by the port number
of the remote host to use.
Range: 0 to 65535.
Default: 162

notification-type

(OPTIONAL) Enter one of the following keywords for the type of trap
to be sent to the host:
• bgp - BGP state change
• envmon - Environment monitor trap
• snmp - SNMP notification (RFC 1157)
• stp - Spanning Tree protocol notification (RFC 1493)
• vrrp - State change in a VRRP group
• xstp - State change in MSTP (802.1s), RSTP (802.1w), and PVST+
Default: All trap types are sent to host.

As shown
CONFIGURATION

Simple Network Management Protocol and Syslog

Command
History

Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 8.4.1.0

Support was added for VRRP traps.

Version 7.6.1.0

Support added for S-Series; Added support for STP and xSTP notification types.

Version 7.5.1.0

Support added for C-Series

E-Series legacy command
Usage
Information

In order to configure the router to send SNMP notifications, you must enter at least one
snmp-server host command. If you enter the command with no keywords, all trap types are
enabled for the host. If you do not enter an snmp-server host command, no notifications are
sent.
In order to enable multiple hosts, you must issue a separate snmp-server host command for
each host. You can specify multiple notification types in the command for each host.
Several host commands for the same ip can coexist. For the same host ip, community-name,
and udp-port commands, the trap over-writes informs and vice-versa.
The snmp-server host command is used in conjunction with the snmp-server enable
command. Use the snmp-server enable command to specify which SNMP notifications are
sent globally. For a host to receive most notifications, at least one snmp-server enable
command and the snmp-server host command for that host must be enabled.
Note: For v1 / v2c trap configuration, if the community-string is not defined using the
snmp-server community command prior to using this command, the default form of
the snmp-server community command will automatically be configured, with the
community-name the same as specified in the snmp-server host command.

Configuring Informs
To send an inform, follow the step below.
1.
2.
3.
4.
5.
Related
Commands

Configure a remote engine ID.
Configure a remote user.
Configure a group for this user with access rights.
Enable traps.
Configure a host to receive informs.

snmp-server enable traps

Enable SNMP traps.

snmp-server community

Configure a new community SNMPv1 or SNMPv2c

snmp-server location
cesz
Syntax

Configure the location of the SNMP server.
snmp-server location text

Simple Network Management Protocol and Syslog | 1379

www.dell.com | support.dell.com

To delete the SNMP location, enter no snmp-server location.
Parameters

Defaults
Command Modes
Command
History

text

Enter an alpha-numeric text string, up to 55 characters long.

Not configured.
CONFIGURATION
Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

E-Series legacy command

snmp-server packetsize
cesz
Syntax
Parameters

Defaults
Command Modes
Command
History

Set the largest SNMP packet size permitted when the SNMP server is receiving a request or
generating a reply, use the snmp-server packetsize global configuration command.
snmp-server packetsize byte-count
byte-count

Enter one of the following values 8, 16, 24 or 32. Packet sizes are 8000 bytes,
16000 bytes, 32000 bytes, and 64000 bytes.

8
CONFIGURATION
Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

E-Series legacy command

snmp-server trap-source
cesz
Syntax

Configure a specific interface as the source for SNMP traffic.
snmp-server trap-source interface

To disable sending traps out a specific interface, enter no snmp trap-source.

1380

|

Simple Network Management Protocol and Syslog

Parameter

Defaults
Command Modes
Command
History

interface

Enter the following keywords and slot/port or number information:
• For an 100/1000 Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Loopback interface, enter the keyword loopback followed by a
number from 0 to 16383.
• For a SONET interface, enter the keyword sonet followed by the
slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE
followed by the slot/port information.
• For VLAN interface, enter the keyword vlan followed by a number
from 1 to 4094.

The IP address assigned to the management interface is the default.
CONFIGURATION
Version 8.3.11.1

Introduced on Z9000

Version 8.3.12.0

Added description of keyword vlan

Version 8.3.7.0

Introduced on S4810

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

E-Series legacy command
Usage
Information
Related
Commands

For this snmp-server trap-source command to be enabled, you must configure an IP address
on the interface and enable the interface configured as an SNMP trap source.
snmp-server
community

Set the community string.

snmp-server user
cesz
Syntax

Configure a new user to an SNMP group.
snmp-server user name {group_name remote ip-address udp-port port-number} [1 | 2c | 3]
[encrypted] [auth {md5 | sha} auth-password] [priv des56 priv password] [access
access-list-name | ipv6 access-list-name | access-list-name ipv6 access-list-name]

To remove a user from the SNMP group, use the no snmp-server user name {group_name
remote ip-address udp-port port-number} [1 | 2c | 3] [encrypted] [auth {md5 | sha}
auth-password] [priv des56 priv password] [access access-list-name | ipv6 access-list-name |
access-list-name ipv6 access-list-name] command.

Simple Network Management Protocol and Syslog | 1381

www.dell.com | support.dell.com

Parameters

name

Enter the name of the user (not to exceed 20 characters), on the host, that
connects to the agent.

group_name

Enter a text string (up to 20 characters long) as the name of the group.
Defaults: The following groups are created for mapping to read/write
community/security-names.
• v1v2creadu — maps to a community with ro (read only)
permissions
• 1v2cwriteu — maps to a community rw (read/write) permissions

remote ip-address

Enter the keyword remote followed by the IP address that identifies the
copy of the SNMP on the remote device.

udp-port port-number

Enter the keyword udp-port followed by the UDP (User Datagram
Protocol) port number on the remote device.
Range: 0 to 65535.
Default: 162

1 | 2c | 3

(OPTIONAL) Enter the security model version number (1, 2c, or 3).
• 1 is the least secure version
• 2c allows transmission of informs and counter 64, which allows for
integers twice the width of what is normally allowed.
• 3 is the most secure of the security modes.
Default: 1

encrypted

(OPTIONAL) Enter the keyword encrypted to specify the password
appear in encrypted format (a series of digits, masking the true characters
of the string).

auth

(OPTIONAL) Enter the keyword auth to specify authentication of a
packet without encryption.

md5 | sha

(OPTIONAL) Enter the keyword md5 or sha to designate the
authentication level.
md5 — Message Digest Algorithm
sha — Secure Hash Algorithm

auth-password

(OPTIONAL) Enter a text string (up to 20 characters long) password that
will enable the agent to receive packets from the host.
Minimum: 8 characters long

priv des56

(OPTIONAL) Enter the keyword priv des56 to initiate a privacy
authentication level setting using the CBC-DES privacy authentication
algorithm (des56).

priv password

(OPTIONAL) Enter a text string (up to 20 characters long) password that
will enables the host to encrypt the contents of the message it sends to the
agent.
Minimum: 8 characters long

access

(Optional) Enter the keyword access followed by the standard IPv4
access list name (a string up to 16 characters long).

access-list-name

Defaults
Command Modes

1382

|

ipv6 access-list-name

(Optional) Enter the keyword ipv6 followed by the IPv6 access list name
(a string up to 16 characters long)

access-list-name ipv6
access-list-name

(Optional) Enter both an IPv4 and IPv6 access list name.

As above
CONFIGURATION

Simple Network Management Protocol and Syslog

Command
History

Version 8.3.11.1

Introduced on Z9000

Version 8.3.10.2

Added access parameter support

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

E-Series legacy command
Usage
Information

Note: For IPv6 ACLs, only IPv6 and UDP types are valid for SNMP; TCP, ICMP rules
are not valid for SNMP. In IPv6 ACLs port rules are not valid for SNMP.

No default values exist for authentication or privacy algorithms and no default password
exist. If you forget a password, you cannot recover it; the user must be reconfigured. You can
specify either a plain-text password or an encrypted cypher-text password. In either case, the
password will be stored in the configuration in an encrypted form and displayed as encrypted
in the show running-config command.
If you have an encrypted password, you can specify the encrypted string instead of the
plain-text password. The following command is an example of how to specify the command
with an encrypted string:
Examples

FTOS# snmp-server user privuser v3group v3 encrypted auth md5
9fc53d9d908118b2804fe80e3ba8763d priv des56 d0452401a8c3ce42804fe80e3ba8763d

The following command is an example of how to enter a plain-text password as the string
authpasswd for user authuser of group v3group.
FTOS#conf
FTOS(conf)# snmp-server user authuser v3group v3 auth md5 authpasswd

The following command configures a remote user named n3user with a v3 security model and
a security level of authNOPriv.
FTOS#conf
FTOS(conf)# snmp-server user n3user ngroup remote 172.31.1.3 udp-port 5009 3
auth md5 authpasswd

Note: The number of configurable users is limited to 16.
Related
Commands

show snmp user

Display the information configured on each SNMP user name.

snmp-server view
cesz

Configure an SNMPv3 view.

Simple Network Management Protocol and Syslog | 1383

www.dell.com | support.dell.com

Syntax

snmp-server view view-name oid-tree {included | excluded}

To remove an SNMPv3 view, use the no snmp-server view view-name oid-tree {included |
excluded}} command.
Parameters

Defaults
Command Modes
Command
History

view-name

Enter the name of the view (not to exceed 20 characters).

oid-tree

Enter the OID sub tree for the view (not to exceed 20 characters).

included

(OPTIONAL) Enter the keyword included to include the MIB
family in the view.

excluded

(OPTIONAL) Enter the keyword excluded to exclude the MIB
family in the view.

No default behavior or values.
CONFIGURATION
Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

E-Series legacy command
Usage
Information

Example

Related
Commands

The oid-tree variable is a full sub-tree starting from 1.3.6 and can not specify the name of a
sub-tree or a MIB. The following example configures a view named rview that allows access
to all objects under 1.3.6.1:
FTOS# conf
FTOS#(conf) snmp-server view rview 1.3.6.1 included

show running-config snmp

Display the SNMP running configuration

snmp trap link-status
cesz
Syntax

Enable the interface to send SNMP link traps, which indicate whether the interface is up or
down.
snmp trap link-status

To disable sending link trap messages, enter no snmp trap link-status.
Defaults
Command Modes

1384

|

Enabled.
INTERFACE

Simple Network Management Protocol and Syslog

Command
History

Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

E-Series legacy command
Usage
Information

If the interface is expected to flap during normal usage, you could disable this command.

Syslog Commands
The following commands allow you to configure logging functions on all Dell Force10
switches:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

clear logging
default logging buffered
default logging console
default logging monitor
default logging trap
logging
logging buffered
logging console
logging facility
logging history
logging history size
logging monitor
logging on
logging source-interface
logging synchronous
logging trap
show logging
show logging driverlog stack-unit (S-Series)
terminal monitor

clear logging
cesz
Syntax
Defaults

Clear the messages in the logging buffer.
clear logging

None.

Simple Network Management Protocol and Syslog | 1385

www.dell.com | support.dell.com

Command Modes

EXEC Privilege

Command
History

Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

E-Series legacy command
Related
Commands

show logging

Display logging settings and system messages in the internal buffer.

default logging buffered
cesz
Syntax
Defaults
Command Modes
Command
History

Return to the default setting for messages logged to the internal buffer.
default logging buffered

size = 40960; level = 7 or debugging
CONFIGURATION
Version 8.3.11.1

Introduced on Z9000

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

E-Series legacy command
Related
Commands

logging buffered

Set the logging buffered parameters.

default logging console
cesz

Return the default settings for messages logged to the console.

Syntax

default logging console

Defaults

level = 7 or debugging

Command Modes
Command
History

CONFIGURATION
Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

E-Series legacy command

1386

|

Simple Network Management Protocol and Syslog

Related
Commands

logging console

Set the logging console parameters.

default logging monitor
cesz

Return to the default settings for messages logged to the terminal.

Syntax

default logging monitor

Defaults

level = 7 or debugging

Command Modes
Command
History

CONFIGURATION
Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

E-Series legacy command
Related
Commands

logging monitor

Set the logging monitor parameters.

terminal monitor

Send system messages to the terminal/monitor.

default logging trap
cesz
Syntax
Defaults
Command Modes
Command
History

Return to the default settings for logging messages to the Syslog servers.
default logging trap

level = 6 or informational
CONFIGURATION
Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

E-Series legacy command
Related
Commands

logging trap

Limit messages logged to the Syslog servers based on severity.

logging
cesz

Configure an IP address or host name of a Syslog server where logging messages will be sent.
Multiple logging servers of both IPv4 and/or IPv6 can be configured.

Simple Network Management Protocol and Syslog | 1387

www.dell.com | support.dell.com

Syntax

logging {ipv4-address | ipv6-address | hostname}

To disable logging, enter no logging.
Parameters

Defaults
Command Modes
Command
History

ipv4-address |
ipv6-address

Enter an IPv4 address (A.B.C.D) or IPv6 address (X:X:X:X::X) address.

hostname

Enter the name of a host already configured and recognized by the switch.

Disabled
CONFIGURATION
Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 8.4.1.0

Added support for IPv6.

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

E-Series legacy command
Related
Commands

logging on

Enables the logging asynchronously to logging buffer, console, Syslog server,
and terminal lines.

logging trap

Enables logging to the Syslog server based on severity.

logging buffered
cesz
Syntax

Enable logging and specify which messages are logged to an internal buffer. By default, all
messages are logged to the internal buffer.
logging buffered [level] [size]

To return to the default values, enter default logging buffered. To disable logging stored to an
internal buffer, enter no logging buffered.
Parameters

Defaults
Command Modes

1388

|

level

(OPTIONAL) Indicate a value from 0 to 7 or enter one of the following
equivalent words: emergencies, alerts, critical, errors, warnings,
notifications, informational, or debugging.
Default: 7 or debugging.

size

(OPTIONAL) Indicate the size, in bytes, of the logging buffer. The
number of messages buffered depends on the size of each message.
Range: 40960 to 524288.
Default: 40960 bytes.

level

= 7; size = 40960 bytes

CONFIGURATION

Simple Network Management Protocol and Syslog

Command
History

Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

E-Series legacy command
Usage
Information
Related
Commands

When you decrease the buffer size, all messages stored in the buffer are lost. Increasing the
buffer size does not affect messages stored in the buffer.
clear logging

Clear the logging buffer.

default logging
buffered

Returns the logging buffered parameters to the default setting.

show logging

Display the logging setting and system messages in the internal buffer.

logging console
cesz
Syntax

Specify which messages are logged to the console.
logging console [level]

To return to the default values, enter default logging console. To disable logging to the
console, enter no logging console.
Parameters

Defaults
Command Modes
Command
History

level

(OPTIONAL) Indicate a value from 0 to 7 or enter one of the following parameters:
emergencies, alerts, critical, errors, warnings, notifications, informational, or debugging.
Default: 7 or debugging.

7 or debugging
CONFIGURATION
Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

E-Series legacy command
Related
Commands

clear logging

Clear logging buffer.

default logging console

Returns the logging console parameters to the default setting.

show logging

Display logging settings and system messages in the internal buffer.

Simple Network Management Protocol and Syslog | 1389

www.dell.com | support.dell.com

logging facility
cesz
Syntax

Configure the Syslog facility, used for error messages sent to Syslog servers.
logging facility [facility-type]

To return to the default values, enter no logging facility.
Parameters

Defaults
Command Modes
Command
History

facility-type

(OPTIONAL) Enter one of the following parameters.
• auth (authorization system)
• cron (Cron/at facility)
• deamon (system deamons)
• kern (kernel)
• local0 (local use)
• local1 (local use)
• local2 (local use)
• local3 (local use)
• local4 (local use)
• local5 (local use)
• local6 (local use)
• local7 (local use)
• lpr (line printer system)
• mail (mail system)
• news (USENET news)
• sys9 (system use)
• sys10 (system use)
• sys11 (system use)
• sys12 (system use)
• sys13 (system use)
• sys14 (system use)
• syslog (Syslog process)
• user (user process)
• uucp (Unix to Unix copy process)
The default is local7.

local7
CONFIGURATION
Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

E-Series legacy command
Related
Commands

1390

|

logging

Enable logging to a Syslog server.

logging on

Enables logging.

Simple Network Management Protocol and Syslog

logging history
cesz
Syntax

Specify which messages are logged to the history table of the switch and the SNMP network
management station (if configured).
logging history level

To return to the default values, enter no logging history.
Parameters

Defaults
Command Modes
Command
History

level

Indicate a value from 0 to 7 or enter one of the following equivalent
words: emergencies, alerts, critical, errors, warnings, notifications,
informational, or debugging.
The default is 4.

4 or warnings
CONFIGURATION
Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

E-Series legacy command
Usage
Information
Related
Commands

When you configure the snmp-server trap-source command, the system messages logged to
the history table are also sent to the SNMP network management station.
show logging history

Display information logged to the history buffer.

logging history size
c es z
Syntax

Specify the number of messages stored in the FTOS logging history table.
logging history size size

To return to the default values, enter no logging history size.
Parameters

Defaults
Command Modes

size

Indicate a value as the number of messages to be stored.
Range: 0 to 500.
Default: 1 message.

1 message
CONFIGURATION

Simple Network Management Protocol and Syslog | 1391

www.dell.com | support.dell.com

Command
History

Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

E-Series legacy command
Usage
Information
Related
Commands

When the number of messages reaches the limit you set with the logging history size
command, older messages are deleted as newer ones are added to the table.
show logging
history

Display information logged to the history buffer.

logging monitor
cesz
Syntax

Specify which messages are logged to Telnet applications.
logging monitor [level]

To disable logging to terminal connections, enter no logging monitor.
Parameters

Defaults
Command Modes
Command
History

level

Indicate a value from 0 to 7 or enter one of the following parameters:
emergencies, alerts, critical, errors, warnings, notifications, informational, or
debugging.
The default is 7 or debugging.

7 or debugging
CONFIGURATION
Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

E-Series legacy command
Related
Commands

default logging monitor

Returns the logging monitor parameters to the default setting.

logging on
cesz
Syntax

1392

|

Specify that debug or error messages are asynchronously logged to multiple destinations,
such as logging buffer, Syslog server, or terminal lines.
logging on

Simple Network Management Protocol and Syslog

To disable logging to logging buffer, Syslog server and terminal lines, enter no logging on.
Defaults
Command Modes
Command
History

Enabled
CONFIGURATION
Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

E-Series legacy command
Usage
Information
Related
Commands

When you enter no logging on, messages are logged only to the console.

logging

Enable logging to Syslog server.

logging buffered

Set the logging buffered parameters.

logging console

Set the logging console parameters.

logging monitor

Set the logging parameters for the terminal connections.

logging source-interface
cesz
Syntax

Specify that the IP address of an interface is the source IP address of Syslog packets sent to
the Syslog server.
logging source-interface interface

To disable this command and return to the default setting, enter no logging source-interface.

Simple Network Management Protocol and Syslog | 1393

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes
Command
History

interface

Enter the following keywords and slot/port or number information:
• For an 100/1000 Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed
by the slot/port information.
• For Loopback interfaces, enter the keyword loopback followed by a number
from zero (0) to 16383.
• For the management interface on the RPM, enter the keyword
ManagementEthernet followed by the slot/port information. The slot range
is 0-1 and the port range is 0.
• For a Port Channel interface, enter the keyword port-channel followed by a
number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a SONET interface, enter the keyword sonet followed by the slot/port
information.
• For a Ten Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by
the slot/port information.
• For VLAN interface, enter the keyword vlan followed by a number from 1 to
4094.

Not configured.
CONFIGURATION
Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

E-Series legacy command
Usage
Information

Related
Commands

Syslog messages contain the IP address of the interface used to egress the router. By
configuring the logging source-interface command, the Syslog packets contain the IP address
of the interface configured.
logging

Enable the logging to another device.

logging synchronous
cesz
Syntax

Synchronize unsolicited messages and FTOS output.
logging synchronous [level level | all] [limit number-of-buffers]

To disable message synchronization, use the no logging synchronous [level level | all] [limit
number-of-buffers] command.

1394

|

Simple Network Management Protocol and Syslog

Parameters

Defaults

Command Modes

all

Enter the keyword all to ensure that all levels are printed
asynchronously.

level level

Enter the keyword level followed by a number as the severity level.
A high number indicates a low severity level and visa versa.
Range: 0 to 7.
Default: 2

all

Enter the keyword all to turn off all

limit number-of-buffers

Enter the keyword limit followed by the number of buffers to be
queued for the terminal after which new messages are dropped
Range: 20 to 300
Default: 20

Disabled. If enabled without level or number-of-buffers options specified, level = 2 and
number-of-buffers = 20 are the defaults.
LINE

Command
History

Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

E-Series legacy command
Usage
Information

When logging synchronous is enabled, unsolicited messages appear between software
prompts and outputs. Only the messages with a severity at or below the set level are sent to
the console.
If the message queue limit is reached on a terminal line and messages are discarded, a system
message appears on that terminal line. Messages may continue to appear on other terminal
lines.

Related
Commands

logging on

Enables logging.

logging trap
cesz

Syntax

Specify which messages are logged to the Syslog server based on the message severity.

logging trap [level]

To return to the default values, enter default logging trap. To disable logging, enter no logging
trap.

Simple Network Management Protocol and Syslog | 1395

www.dell.com | support.dell.com

Parameters
level

Defaults
Command Modes
Command
History

Indicate a value from 0 to 7 or enter one of the following parameters:
emergencies, alerts, critical, errors, warnings, notifications, informational, or
debugging.
The default is 6.

6 or informational
CONFIGURATION
Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

E-Series legacy command
Related
Commands

Usage
Information

logging

Enable the logging to another device.

logging on

Enables logging.

To block a type of message parameter, set the logging trap level to a lower number. For
example, to block severity messages at level 6, set the level to 5.

show logging
cesz
Syntax
Parameters

Command Modes

Display the logging settings and system messages logged to the internal buffer of the switch.
show logging [number | history [reverse] [number] | reverse [number] | summary]
number

(OPTIONAL) Enter the number of message to be displayed on the output.
Range: 1 to 65535

history

(OPTIONAL) Enter the keyword history to view only information in the Syslog
history table.

reverse

(OPTIONAL) Enter the keyword reverse to view the Syslog messages in FIFO
(first in, first out) order.

summary

(OPTIONAL) Enter the keyword summary to view a table showing the number
of messages per type and per slot.
Slots *7* and *8* represent RPMs.

EXEC
EXEC Privilege

Command
History

1396

|

Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Simple Network Management Protocol and Syslog

Version 7.5.1.0

Support added for C-Series

E-Series legacy command
Example
(partial)

FTOS#show logging
Syslog logging: enabled
Console logging: level debugging
Monitor logging: level debugging
Buffer logging: level debugging, 5604 Messages Logged, Size (524288 bytes)
Trap logging: level informational
Oct 8 09:25:37: %RPM1:RP1 %BGP-5-ADJCHANGE: Connection with neighbor
223.80.255.254 closed. Hold time expired
Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.200.13.2 Up
Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.1.1.13 Up
Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 1.1.14.2 Up
Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.1.1.14 Up
Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 1.1.11.2 Up
Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.1.1.5 Up
Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.4.1.3 Up
Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.1.1.4 Up
Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.1.1.6 Up
Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.1.1.12 Up
Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.1.1.15 Up
Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.1.1.3 Up
Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.200.12.2 Up
Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 1.1.10.2 Up
Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Session closed by neighbor
1.1.10.2 (Hold time expired)
Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.200.14.7 Up
Oct 8 09:26:25: %RPM1:RP1 %BGP-5-ADJCHANGE: Connection with neighbor 1.1.11.2
closed. Neighbor recycled
Oct 8 09:26:25: %RPM1:RP1 %BGP-5-ADJCHANGE: Connection with neighbor 1.1.14.2
closed. Neighbor recycled
--More--

Example
(show logging
history)

FTOS#show logging history
Syslog History Table: 1 maximum table entries,
saving level Warnings or higher
SNMP notifications not Enabled
%RPM:0:0 %CHMGR-2-LINECARDDOWN - Line card 3 down - IPC timeout
FTOS#

show logging driverlog stack-unit (S-Series)
sz

Display the driver log for the specified stack member.

Syntax

show logging driverlog stack-unit unit#

Parameters

Defaults
Command Modes

stack-unit unit#

Enter the keyword stack-unit followed by the stack member ID of the
switch for which you want to display the driver log.
Range: 0 to 1

No default values or behavior
EXEC
EXEC Privilege

Simple Network Management Protocol and Syslog | 1397

www.dell.com | support.dell.com

Command
History

Usage
Information

Version 8.3.11.1

Introduced on Z9000

Version 7.6.1.0

Introduced for S-Series

This command displays internal software driver information, which may be useful during
troubleshooting switch initialization errors, such as a downed Port-Pipe.

terminal monitor
cesz
Syntax

Configure the FTOS to display messages on the monitor/terminal.
terminal monitor

To return to default settings, enter terminal no monitor.
Defaults
Command Modes

Disabled.
EXEC
EXEC Privilege

Command
History

Version 8.3.11.1

Introduced on Z9000

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

E-Series legacy command
Related
Commands

1398

|

logging monitor

Set the logging parameters on the monitor/terminal.

Simple Network Management Protocol and Syslog

50
S-Series Stacking Commands
Overview
All commands in this chapter are specific to the S-Series s and
platforms as
indicated by the characters that appear under each of the command headers.
The commands are always available and operational, whether or not the S-Series has a
stacking module inserted. You can use the commands to pre-configure a switch, so that the
configuration settings are invoked when the switch is attached to other S-Series units.
For details on using the S-Series stacking feature, the chapter “Stacking S-Series Switches”
in the FTOS Configuration Guide.
Caution: S4810 Stacking cannot be enabled simultaneously with VLT. If both are enabled at
the same time, unexpected behavior will occur.

Commands
The commands in this chapter are used for managing the stacking of S-Series systems:
•
•
•
•
•
•
•
•
•
•

redundancy disable-auto-reboot
redundancy force-failover stack-unit
reset stack-unit
show redundancy
show system stack-ports
stack-unit priority
stack-unit provision
stack-unit renumber
stack-unit stack-group
upgrade system stack-unit (S-Series stack member)

S-Series Stacking Commands | 1399

www.dell.com | support.dell.com

redundancy disable-auto-reboot
s
Syntax

Prevent the S-Series stack management unit, stack member unit, and standby unit from
rebooting if they fail.
redundancy disable-auto-reboot [members | 0-11]

To return to the default, enter no redundancy disable-auto-reboot stack-unit.
The stack-unit range is 0-11.
Defaults
Command Modes
Command
History

Usage
Information

Related
Commands

Disabled (the failed switch is automatically rebooted).
CONFIGURATION
Version 8.3.1.0

Added the members option

Version 7.7.1.0

Introduced on S-Series

Enabling this command keeps the failed switch in the failed state. It will not reboot until it is
manually rebooted. When enabled, it is not displayed in the running-config. When disabled, it
is displayed in the running-config.
show redundancy

Display the current redundancy status.

redundancy force-failover stack-unit
s
Syntax
Defaults
Command Modes

Force the standby unit in the stack to become the management unit.
redundancy force-failover stack-unit

Not enabled
EXEC Privilege

reset stack-unit
s
Syntax
Parameters

Default
Command Modes

1400

|

Reset any designated stack member except the management unit (master unit).
reset stack-unit 0-11 hard
0-11

Enter the stack member unit identifier of the stack member to reset.

hard

Reset the stack unit if the unit is in a problem state.

none
EXEC

S-Series Stacking Commands

Command
History

Usage
Information

Version 8.3.1.0

Added hard reset option.

Version 7.8.1.0

Augmented to run on the standby unit in order to reset the standby unit directly.

Version 7.7.1.0

Introduced on S-Series

Resetting the management unit is not allowed, and an error message will be displayed if you
try to do so. Resetting is a soft reboot, including flushing the forwarding tables.
Starting with FTOS 7.8.1.0, you can run this command directly on the stack standby unit
(standby master) to reset the standby. You cannot reset any other unit from the standby unit.

Example

Stack MAC : 00:01:e8:8b:1a:36
Reload-Type
:
normal-reload [Next boot : normal-reload]
-- Stack Info -Unit UnitType
Status
ReqTyp
CurTyp
Version
Ports
---------------------------------------------------------------------------0
Management
online
S4810
S4810
8-3-12-1
64
1
Standby
online
S4810
S4810
8-3-12-1
64
2
Member
online
S4810
S4810
8-3-12-1
64
3
Member
online
S4810
S4810
8-3-12-1
64
4
Member
online
S4810
S4810
8-3-12-1
64
5
Member
online
S4810
S4810
8-3-12-1
64
6
Member
not present
7
Member
not present
8
Member
not present
9
Member
not present
10
Member
not present
11
Member
not present

Related
Commands

reload

Reboot FTOS.

upgrade (S-Series management unit
and Z9000)

Reset the designated S-Series stack member.

show redundancy
s
Syntax
Command Modes

Display the current redundancy configuration (status of automatic reboot configuration on
stack management unit).
show redundancy

EXEC
EXEC Privilege

Command
History
Example

Version 7.7.1.0

Introduced on S-Series

FTOS#show redundancy
FTOS#show redundancy
-- SSeries Redundancy Configuration ------------------------------------------------Auto reboot :
Enabled

S-Series Stacking Commands | 1401

www.dell.com | support.dell.com

-- Stack-unit Status ------------------------------------------------Mgmt ID:
0
Stack-unit ID:
0
Stack-unit Redundancy Role:
Primary
Stack-unit State:
Active
Stack-unit SW Version:
7.7.1.0
Link to Peer:
Up
-- PEER Stack-unit Status ------------------------------------------------Stack-unit State:
Standby
Peer stack-unit ID:
1
Stack-unit SW Version:
7.7.1.0
-- Stack-unit Redundancy Configuration ------------------------------------------------Primary Stack-unit:
mgmt-id
0
Auto Data Sync:
Full
Failover Type:
Hot Failover
Auto reboot Stack-unit:
Enabled
Auto failover limit:
3 times in 60 minutes
-- Stack-unit Failover Record ------------------------------------------------Failover Count:
0
Last failover timestamp:
None
Last failover Reason:
None
Last failover type:
None
-- Last Data Block Sync Record: ------------------------------------------------Stack Unit Config:
succeeded Jul 11 2012
Start-up Config:
succeeded Jul 11 2012
Runtime Event Log:
succeeded Jul 11 2012
Running Config:
succeeded Jul 11 2012
ACL Mgr:
succeeded Jul 11 2012
LACP:
no block sync done
STP:
no block sync done
SPAN:
no block sync done

Related
Commands

redundancy disable-auto-reboot

09:42:35
09:42:35
09:42:35
09:42:35
09:42:35

Prevent the system from auto-rebooting if it fails.

show system stack-ports
s
Syntax
Parameters

Defaults

1402

|

Display information about the stacking ports on all switches in the S-Series stack.
show system stack-ports [status | topology]
status

(OPTIONAL) Enter the keyword status to display the command output without
the Connection field.

topology

(OPTIONAL) Enter the keyword topology to limit the table to just the Interface
and Connection fields.

No default behavior

S-Series Stacking Commands

Command Modes

EXEC
EXEC Privilege

Command
History

Version 7.7.1.0

Example

Introduced on S-Series

FTOS# show system stack-ports
Topology: Ring
Interface

Link Speed
Admin
Link
(Gb/s)
Status
Status
---------------------------------------------------------------------------0/49
1/49
12
up
up
0/50
12
up
down
0/51
2/49
24
up
up
1/49
0/49
12
up
up
1/50
2/51
12
up
up
2/49
0/51
24
up
up
2/51
1/50
12
up
up
2/52
12
up
down
FTOS#

Example
(status)

Connection

FTOS# show system stack-ports status
Topology: Ring
Interface

Link Speed
Admin
Link
(Gb/s)
Status
Status
------------------------------------------------0/49
12
up
up
0/50
12
up
down
0/51
24
up
up
1/49
12
up
up
1/50
12
up
up
2/49
24
up
up
2/51
12
up
up
2/52
12
up
down
FTOS#

Example
(topology)

FTOS# show system stack-ports topology
Topology: Ring
Interface

Connection

---------------------0/49
1/49
0/50
0/51
2/49
1/49
0/49
1/50
2/51
2/49
0/51
2/51
1/50
2/52
FTOS#

Table 50-1.

show interfaces description Command Example Fields

Field

Description

Topology

Lists the topology of stack ports connected: Ring, Daisy chain, or Standalone

Interface

The unit/port ID of the connected stack port on this unit

Link Speed

Link Speed of the stack port (10 or 40) in Gb/s

S-Series Stacking Commands | 1403

www.dell.com | support.dell.com

Table 50-1.

show interfaces description Command Example Fields (continued)

Field

Description

Admin
Status

The only currently listed status is Up.

Connection

The stack port ID to which this unit’s stack port is connected

Related
Commands

reset stack-unit

Reset the designated S-Series stack member.

show hardware stack-unit

Display the data plane or management plane input and output statistics
of the designated component of the designated stack member.

show system (S-Series
and S4810)

Display the current status of all stack members or a specific member.

upgrade (S-Series
management unit and
Z9000)

Upgrade the bootflash image or system image of the S-Series
management unit.

stack-unit priority
s
Syntax

Configure the ability of an S-Series switch to become the management unit of a stack.
stack-unit 0-7 priority 1-14

Parameters

Defaults
Command Modes
Command
History
Related
Commands

0-7

Enter the stack member unit identifier, from 0 to 7, of the switch on which you want to
set the management priority.

1-14

This preference parameter allows you to specify the management priority of one backup
switch over another, with 0 the lowest priority and 14 the highest.
The switch with the highest priority value will be chosen to become the management unit
if the active management unit fails or on the next reload.

0
CONFIGURATION
Version 7.7.1.0

Introduced on S-Series

reload

Reboot FTOS.

show system (S-Series
and S4810)

Display the current status of all stack members or a specific member.

stack-unit provision
s
Syntax

1404

|

Pre-configure a logical stacking ID of a switch that will join the stack. This is an optional
command that is executed on the management unit.
stack-unit 0-11 provision {S25N|S25P|S25V|S50N|S50V|S4810}

S-Series Stacking Commands

Parameters

Defaults

Command Modes
Command
History
Related
Commands

0-11

Enter a stack member identifier, from 0 to 11, of the switch that you want to
add to the stack.

S25N|S25P|S25V||
S50N|S50V|S4810

Enter the S-Series model identifier of the switch to be added as a stack
member. This identifier is also referred to as the provision type.

When this value is not set, a switch joining the stack is given the next available sequential
stack member identifier.
CONFIGURATION
Version 7.7.1.0

Introduced on S-Series

reload

Reboot FTOS.

show system (S-Series
and S4810)

Display the current status of all stack members or a specific member.

stack-unit renumber
Change the stack member ID of any stack member or a stand-alone S-Series.

s
Syntax
Parameters

Defaults
Command Modes
Command
History
Usage
Information

stack-unit 0-11 renumber 0-11
0-11

The first instance of this value is the stack member unit identifier of the
switch that you want add to the stack.
Range: 0-11.
The second instance of this value is the desired new unit identifier number.

none
EXEC Privilege
Version 7.7.1.0

Introduced on S-Series

You can renumber any switch, including the management unit or a stand-alone unit.
You cannot renumber a unit to a number of an active member in the stack.
When executing this command on the master, the stack reloads. When the members are
renumbered, only that specific unit will reset and come up with the new unit number.

Example

FTOS#stack-unit 5 renumber 6
Renumbering will reset the unit.
Warning: Interface configuration for current unit will be lost!
Proceed to renumber [confirm yes/no]:

S-Series Stacking Commands | 1405

www.dell.com | support.dell.com

Related
Commands

reload

Reboot FTOS.

reset stack-unit

Reset the designated S-Series stack member.

show system (S-Series
and S4810)

Display the current status of all stack members or a specific member.

stack-unit stack-group
Configure the stacking unit and stacking group by specifying an ID when adding units to a
stack to ensure the unit is assigned to the correct group.
Syntax

stack-unit unit-id stack-group stack-group-id

Use no stack-unit unit-id stack-group stack-id to remove the current stack group configuration.
Parameters

Defaults
Command Mode
Command
History

Usage
Information

unit-id

Enter the stack unit ID.

stack-group-id

Enter the stack group ID.
Range is 0 to 15.

None
CONFIGURATION
Version 8.3.12.0

Reset command mode from EXEC to CONFIGURATION.

Version 8.3.10.2

Introduced on S4810

The following message displays to confirm the command.

Warning: Setting ports Fo 0/60

as stack group will make their
interface configs obsolete after a reload.[confirm yes/no]:
If “y” is entered, all non-default configurations on any member ports of the current stack group
will be removed when the unit is rebooted.
Note: Any scripts used to streamline the stacking configuration process must be
updated to reflect the Command Mode change from EXEC Privilege to
CONFIGURATION to allow the scripts to work correctly.

upgrade system stack-unit (S-Series stack member)
Copy the boot image or FTOS from the management unit to one or more stack members.

s
Syntax

1406

|

upgrade {boot | system} stack-unit {all | 0-11 | A | B}

S-Series Stacking Commands

Parameters

Defaults
Command Modes
Command
History
Usage
Information
Related
Commands

boot

Enter this keyword to copy the boot image from the management unit to the
designated stack members.

system

Enter this keyword to copy the FTOS image from the management unit to the
designated stack members.

all

Enter this keyword to copy the designated image to all stack members.

0-11

Enter the unit ID of the stack member to which to copy the designated image.

A

Enter this keyword to upgrade all stacked units in System A(S4810 only)

B

Enter this keyword to upgrade all stacked units in System B(S4810 only)

No configuration or default values
EXEC
Version 7.7.1.0

Introduced on S-Series

To reboot using the new image, use the command upgrade boot system stack-unit.

reload

Reboot FTOS.

reset stack-unit

Reset the designated S-Series stack member.

show system (S-Series and
S4810)

Display the current status of all stack members or a specific
member.

show version

Display the current FTOS version information on the system.

upgrade (S-Series
management unit and
Z9000)

Upgrade the bootflash image or system image of the S-Series
management unit.

S-Series Stacking Commands | 1407

www.dell.com | support.dell.com
1408

|

S-Series Stacking Commands

51
Storm Control
Overview
The FTOS Storm Control feature allows users to limit or suppress traffic during a traffic
storm (Broadcast/Unknown Unicast Rate Limiting, or Multicast on the C-Series and
S-Series).
Support for particular Dell Force10 platforms (C-Series, E-Series, or S-Series) is indicated by
the characters that appear under each of the command headings: e E-Series, c C-Series,
s S-Series, or
.

Commands
The Storm Control commands are:
•
•
•
•
•
•
•
•
•

show storm-control broadcast
show storm-control multicast
show storm-control unknown-unicast
storm-control broadcast (Configuration)
storm-control broadcast (Interface)
storm-control multicast (Configuration)
storm-control multicast (Interface)
storm-control unknown-unicast (Configuration)
storm-control unknown-unicast (Interface)

Important Points to Remember
•
•
•
•

Interface commands can only be applied on physical interfaces (VLANs and
LAG interfaces are not supported).
An INTERFACE-level command only support storm control configuration on
ingress.
An INTERFACE-level command overrides any CONFIGURATION-level
ingress command for that physical interface, if both are configured.
The CONFIGURATION-level storm control commands can be applied at ingress
or egress and are supported on all physical interfaces.

Storm Control | 1409

www.dell.com | support.dell.com

•

•
•

•

When storm control is applied on an interface, the percentage of storm control
applied is calculated based on the advertised rate of the line card. It is not based
on the speed setting for the line card.
Do not apply per-VLAN QoS on an interface that has storm control enabled
(either on an interface or globally).
When broadcast storm control is enabled on an interface or globally on ingress,
and DSCP marking for a DSCP value 1 is configured for the data traffic, the
traffic will go to queue 1 instead of queue 0.
Similarly, if unicast storm control is enabled on an interface or globally on
ingress, and DSCP marking for a DSCP value 2 is configured for the data traffic,
the traffic will go to queue 2 instead of queue 0.

Note: Bi-directional traffic (unknown unicast and broadcast), along with egress storm
control, causes the configured traffic rates to be split between the involved ports. The
percentage of traffic that each port receives after the split is not predictable. These
ports can be in the same/different port pipes, or the same/different line cards.

show storm-control broadcast
ces

Syntax
Parameters

Defaults
Command Modes

Display the storm control broadcast configuration.

show storm-control broadcast [interface]
interface

(OPTIONAL) Enter one of the following interfaces to display the interface specific
storm control configuration.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed
by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by the
slot/port information.
• For a SONET interface, enter the keyword sonet followed by the slot/port
information.
• Fast Ethernet is not supported.

No default behavior or values
EXEC
EXEC Privilege

Command
History

1410

|

Storm Control

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 6.5.1.0

Introduced on E-Series

Example
(E-Series)

FTOS#show storm-control broadcast gigabitethernet 11/11
Broadcast storm control configuration
Interface
Direction
Percentage
Wred Profile
-------------------------------------------------------------Gi 11/11
Ingress
5.6
Gi 11/11
FTOS#

Example
(C-Series)

Egress

5.6

-

FTOS#show storm-control broadcast gigabitethernet 3/24
Broadcast storm control configuration
Interface
Direction
Packets/Second
----------------------------------------------Gi 3/24
Ingress
1000
FTOS#

show storm-control multicast
Display the storm control multicast configuration.

cs
Syntax
Parameters

Defaults
Command Modes

show storm-control multicast [interface]
interface

(OPTIONAL) Enter one of the following interfaces to display the interface specific
storm control configuration.
• For Fast Ethernet, enter the keyword Fastethernet followed by the slot/port
information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed
by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by the
slot/port information.

No default behavior or values
EXEC
EXEC Privilege

Command
History

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on C-Series and S-Series

Storm Control | 1411

www.dell.com | support.dell.com

Example

FTOS#show storm-control multicast gigabitethernet 1/0
Multicast storm control configuration
Interface
Direction
Packets/Second
----------------------------------------------Gi 1/0
Ingress
5
FTOS#

show storm-control unknown-unicast
ces

Syntax
Parameters

Defaults
Command Modes

Display the storm control unknown-unicast configuration

show storm-control unknown-unicast [interface]
interface

(OPTIONAL) Enter one of the following interfaces to display the interface specific
storm control configuration.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed
by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by the
slot/port information.
• For a SONET interface, enter the keyword sonet followed by the slot/port
information.
• Fast Ethernet is not supported.

No default behavior or values
EXEC
EXEC Privilege

Command
History

Example
(E-Series)

Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.10

Introduced on C-Series

Version 6.5.1.0

Introduced on E-Series

FTOS#show storm-control unknown-unicast gigabitethernet 11/1
Unknown-unicast storm control configuration
Interface
Direction
Percentage
Wred Profile
-------------------------------------------------------------Gi 11/1
Ingress
5.9
Gi 11/1
FTOS#

1412

|

Storm Control

Egress

5.7

w8

Example
(C-Series)

FTOS#show storm-control unknown-unicast gigabitethernet 3/0
Unknown-unicast storm control configuration
Interface
Direction
Packets/Second
----------------------------------------------Gi 3/0
Ingress
1000
FTOS#

storm-control broadcast (Configuration)
ces

Configure the percentage of broadcast traffic allowed in or out of the network.

Syntax

storm-control broadcast [percentage decimal_value in | out] | [wred-profile name]]
[packets_per_second in]

To disable broadcast rate-limiting, use the storm-control broadcast [percentage decimal_value in
| out] | [wred-profile name]] [packets_per_second in] command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

percentage
decimal_value in | out

E-Series Only: Enter the percentage of broadcast traffic allowed in or
out of the network. Optionally, you can designate a decimal value
percentage, for example, 55.5%.
Percentage: 0 to 100
0 % blocks all related traffic
100% allows all traffic into the interface
Decimal Range: .1 to .9

wred-profile name

E-Series Only: (Optionally) Enter the keyword wred-profile followed
by the profile name to designate a wred-profile.

packets_per_second
in

C-Series and S-Series Only: Enter the packets per second of broadcast
traffic allowed into the network.
Range: 0 to 33554431

No default behavior or values
CONFIGURATION (conf)
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 7.4.1.0

E-Series Only: Added percentage decimal value option

Version 6.5.1.0

Introduced on E-Series

Broadcast storm control is valid on Layer 2/Layer 3 interfaces only. Layer 2 broadcast traffic
is treated as unknown-unicast traffic.

Storm Control | 1413

www.dell.com | support.dell.com

storm-control broadcast (Interface)
ces

Syntax

Configure the percentage of broadcast traffic allowed on an interface (ingress only).

storm-control broadcast [percentage decimal_value in] |[wred-profile name]]
[packets_per_second in]

To disable broadcast storm control on the interface, use the no storm-control broadcast
[percentage {decimal_value} in] |[wred-profile name]] [packets_per_second in] command.
Parameters

Defaults
Command Modes
Command
History

percentage
decimal_value in

E-Series Only: Enter the percentage of broadcast traffic allowed in to
the network. Optionally, you can designate a decimal value percentage,
for example, 55.5%.
Percentage: 0 to 100
0 % blocks all related traffic
100% allows all traffic into the interface
Decimal Range: .1 to .9

wred-profile name

E-Series Only: (Optionally) Enter the keyword wred-profile followed
by the profile name to designate a wred-profile.

packets_per_second
in

C-Series and S-Series Only: Enter the packets per second of broadcast
traffic allowed into the network.
Range: 0 to 33554431

No default behavior or values
INTERFACE (conf-if-interface-slot/port)
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 7.4.1.0

E-Series Only: Added percentage decimal value option

Version 6.5.1.0

Introduced on E-Series

storm-control multicast (Configuration)
Configure the packets per second (pps) of multicast traffic allowed in to the C-Series and
S-Series networks only.

cs
Syntax

storm-control multicast packets_per_second in

To disable storm-control for multicast traffic into the network, use the no storm-control
multicast packets_per_second in command.
Parameters

1414

|

Storm Control

packets_per_second
in

C-Series and S-Series Only: Enter the packets per second of multicast
traffic allowed into the network followed by the keyword in.
Range: 0 to 33554431

Defaults
Command Modes
Command
History

Usage
Information

No default behavior or values
CONFIGURATION (conf)
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on C-Series and S-Series only

Broadcast traffic (all 0xFs) should be counted against broadcast storm control meter, not
against the multicast storm control meter. It is possible, however, that some multicast control
traffic may get dropped when storm control thresholds are exceeded.

storm-control multicast (Interface)
Configure the percentage of multicast traffic allowed on an C-Series or S-Series interface
(ingress only) network only.

cs
Syntax

storm-control multicast packets_per_second in

To disable multicast storm control on the interface, use the no storm-control multicast
packets_per_second in command.
Parameters

Defaults
Command Modes
Command
History

packets_per_second
in

C-Series and S-Series Only: Enter the packets per second of broadcast
traffic allowed into the network.
Range: 0 to 33554431

No default behavior or values
INTERFACE (conf-if-interface-slot/port)
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on C-Series and S-Series

storm-control unknown-unicast (Configuration)
ces

Configure the percentage of unknown-unicast traffic allowed in or out of the network.

Syntax

storm-control unknown-unicast [percentage decimal_value [in | out]] | [wred-profile name]]
[packets_per_second in]

To disable storm control for unknown-unicast traffic, use the no storm-control
unknown-unicast [percentage decimal_value [in | out] | [wred-profile name]]
[packets_per_second in] command.

Storm Control | 1415

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes
Command
History

Usage
Information

percentage
decimal_value [in | out]

E-Series Only: Enter the percentage of broadcast traffic allowed in or
out of the network. Optionally, you can designate a decimal value
percentage, for example, 55.5%.
Percentage: 0 to 100
0 % blocks all related traffic
100% allows all traffic into the interface
Decimal Range: .1 to .9

wred-profile name

E-Series Only: (Optionally) Enter the keyword wred-profile followed
by the profile name to designate a wred-profile.

packets_per_second
in

C-Series and S-Series Only: Enter the packets per second of broadcast
traffic allowed into the network.
Range: 0 to 33554431

No default behavior or values
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 7.4.1.0

E-Series Only: Added percentage decimal value option

Version 6.5.1.0

Introduced on E-Series

Unknown Unicast Storm-Control is valid for Layer 2 and Layer 2/Layer 3 interfaces.

storm-control unknown-unicast (Interface)
ces

Syntax

Configure percentage of unknown-unicast traffic allowed on an interface (ingress only).

storm-control unknown-unicast [percentage decimal_value in] | [wred-profile name]]
[packets_per_second in]

To disable unknown-unicast storm control on the interface, use the no storm-control
unknown-unicast [percentage decimal_value in] | [wred-profile name]] [packets_per_second in]
command.
Parameters

1416

|

Storm Control

percentage
decimal_value in

E-Series Only: Enter the percentage of broadcast traffic allowed in to
the network. Optionally, you can designate a decimal value percentage,
for example, 55.5%.
Percentage: 0 to 100
0 % blocks all related traffic
100% allows all traffic into the interface
Decimal Range: .1 to .9

Defaults
Command Modes
Command
History

wred-profile name

E-Series Only: (Optionally) Enter the keyword wred-profile followed
by the profile name to designate a wred-profile.

packets_per_second
in

C-Series and S-Series Only: Enter the packets per second of broadcast
traffic allowed into the network.
Range: 0 to 33554431

No default behavior or values
INTERFACE (conf-if-interface-slot/port)
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 7.4.1.0

E-Series Only: Added percentage decimal value option

Version 6.5.1.0

Introduced on E-Series

Storm Control | 1417

1418

|

Storm Control

www.dell.com | support.dell.com

52
Spanning Tree Protocol (STP)
Overview
The commands in this chapter configure and monitor the IEEE 802.1d Spanning Tree
protocol (STP) and are supported on the Dell Force10 switch/routing platforms, as indicated
by the characters under the command headings: e E-Series, c C-Series, s S-Series, or
.

Commands
•
•
•
•
•
•
•
•
•
•
•

bridge-priority
debug spanning-tree
description
disable
forward-delay
hello-time
max-age
protocol spanning-tree
show config
show spanning-tree 0
spanning-tree 0

bridge-priority
ces

Syntax

Set the bridge priority of the switch in an IEEE 802.1D Spanning Tree.

bridge-priority {priority-value | primary | secondary}

To return to the default value, enter no bridge-priority.

Spanning Tree Protocol (STP) | 1419

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes
Command
History

priority-value

Enter a number as the bridge priority value.
Range: 0 to 65535.
Default: 32768.

primary

Enter the keyword primary to designate the bridge as the root bridge.

secondary

Enter the keyword secondary to designate the bridge as a secondary
root bridge.

priority-value

= 32768

SPANNING TREE (The prompt is “config-stp”.)
Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

debug spanning-tree
ces

Syntax

Enable debugging of Spanning Tree Protocol and view information on the protocol.

debug spanning-tree {stp-id [all | bpdu | config | events | exceptions | general | root] | protocol}

To disable debugging, enter no debug spanning-tree.
Parameters

Command Modes
Command
History

1420

|

stp-id

Enter zero (0). The switch supports one Spanning Tree group with a group
ID of 0.

protocol

Enter the keyword for the type of STP to debug, either mstp, pvst, or rstp.

all

(OPTIONAL) Enter the keyword all to debug all spanning tree operations.

bpdu

(OPTIONAL) Enter the keyword bpdu to debug Bridge Protocol Data
Units.

config

(OPTIONAL) Enter the keyword config to debug configuration
information.

events

(OPTIONAL) Enter the keyword events to debug STP events.

general

(OPTIONAL) Enter the keyword general to debug general STP
operations.

root

(OPTIONAL) Enter the keyword root to debug STP root transactions.

EXEC Privilege
Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

Spanning Tree Protocol (STP)

Usage
Information
Related
Commands

When you enable debug spanning-tree bpdu for multiple interfaces, the software only sends
information on BPDUs for the last interface specified.
protocol spanning-tree

Enter SPANNING TREE mode on the switch.

description
ces

Syntax

Enter a description of the Spanning Tree

description {description}

To remove the description from the Spanning Tree, use the no description {description}
command.
Parameters

Defaults
Command Modes
Command
History

Related
Commands

description

Enter a description to identify the Spanning Tree (80 characters maximum).

No default behavior or values
SPANNING TREE (The prompt is “config-stp”.)
Version 8.3.7.0

Introduced on S4810

pre-7.7.1.0

Introduced

protocol spanning-tree

Enter SPANNING TREE mode on the switch.

disable
ces

Syntax

Disable Spanning Tree Protocol globally on the switch.

disable

To enable Spanning Tree Protocol, enter no disable.
Defaults
Command Modes
Command
History

Enabled (that is, Spanning Tree Protocol is disabled.)
SPANNING TREE
Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

Spanning Tree Protocol (STP) | 1421

www.dell.com | support.dell.com

Related
Commands

protocol spanning-tree

Enter SPANNING TREE mode.

forward-delay
ces

Syntax

The amount of time the interface waits in the Listening State and the Learning State before
transitioning to the Forwarding State.
forward-delay seconds

To return to the default setting, enter no forward-delay.
Parameters

Defaults
Command Modes
Command
History

Related
Commands

seconds

Enter the number of seconds the FTOS waits before transitioning STP to
the forwarding state.
Range: 4 to 30
Default: 15 seconds.

15 seconds
SPANNING TREE
Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

max-age

Change the wait time before STP refreshes protocol configuration
information.

hello-time

Change the time interval between BPDUs.

hello-time
ces

Syntax

Set the time interval between generation of Spanning Tree Bridge Protocol Data Units
(BPDUs).
hello-time seconds

To return to the default value, enter no hello-time.
Parameters

Defaults
Command Modes

1422

|

seconds

2 seconds
SPANNING TREE

Spanning Tree Protocol (STP)

Enter a number as the time interval between transmission of BPDUs.
Range: 1 to 10.
Default: 2 seconds.

Command
History

Related
Commands

Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

forward-delay

Change the wait time before STP transitions to the Forwarding state.

max-age

Change the wait time before STP refreshes protocol configuration
information.

max-age
ces

Syntax

Set the time interval for the Spanning Tree bridge to maintain configuration information
before refreshing that information.
max-age seconds

To return to the default values, enter no max-age.
Parameters

Defaults
Command Modes
Command
History

Related
Commands

seconds

Enter a number of seconds the FTOS waits before refreshing configuration
information.
Range: 6 to 40
Default: 20 seconds.

20 seconds
SPANNING TREE
Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

forward-delay

Change the wait time before STP transitions to the Forwarding state.

hello-time

Change the time interval between BPDUs.

protocol spanning-tree
ces

Syntax

Enter the SPANNING TREE mode to enable and configure the Spanning Tree group.

protocol spanning-tree stp-id

To disable the Spanning Tree group, enter no protocol spanning-tree stp-id command.

Spanning Tree Protocol (STP) | 1423

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes

stp-id

Not configured.
CONFIGURATION

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

Example
Usage
Information

Enter zero (0). FTOS supports one Spanning Tree group, group 0.

FTOS(conf)#protocol spanning-tree 0
FTOS(config-stp)#

STP is not enabled when you enter the SPANNING TREE mode. To enable STP globally on
the switch, enter no disable from the SPANNING TREE mode.

Related
Commands

Disable Spanning Tree group 0. To enable Spanning Tree group 0, enter no disable.

disable

show config
ces

Syntax
Command Modes
Command
History

Example

Display the current configuration for the mode. Only non-default values are displayed.

show config

SPANNING TREE
Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

FTOS(config-stp)#show config
protocol spanning-tree 0
no disable
FTOS(config-stp)#

show spanning-tree 0
ces

Syntax

1424

|

Display the Spanning Tree group configuration and status of interfaces in the Spanning Tree
group.
show spanning-tree 0 [active | brief | guard | interface interface | root | summary]

Spanning Tree Protocol (STP)

Parameters

0

Enter 0 (zero) to display information about that specific Spanning Tree group.

active

(OPTIONAL) Enter the keyword active to display only active interfaces in
Spanning Tree group 0.

brief

(OPTIONAL) Enter the keyword brief to display a synopsis of the Spanning Tree
group configuration information.

guard

(OPTIONAL) Enter the keyword guard to display the type of guard enabled on
an STP interface and the current port state.

interface

(OPTIONAL) Enter the keyword interface and the type slot/port of the interface
you want displayed. Type slot/port options are the following:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the slot/port
information.
• For a Port Channel interface, enter the keyword port-channel followed by a
number:

interface

•
•

•
•

Command Modes
Usage
Information
Command
History

C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.

For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by
the slot/port information.

root

(OPTIONAL) Enter the keyword root to display configuration information on the
Spanning Tree group root.

summary

(OPTIONAL) Enter the keyword summary to only the number of ports in the
Spanning Tree group and their state.

EXEC Privilege
You must enable Spanning Tree group 0 prior to using this command.

Version 8.5.1.0

Added support for 4-port 40G line cards on the E-Series ExaScale.

Version 8.4.2.1

Support for the optional guard keyword was added on the C-Series,
S-Series, and E-Series TeraScale.

Version 8.3.7.0

Introduced on S4810

Version 7.7.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

Spanning Tree Protocol (STP) | 1425

www.dell.com | support.dell.com

Example

FTOS#show spann 0
Executing IEEE compatible Spanning Tree Protocol
Bridge Identifier has priority 32768, Address 0001.e800.0a56
Configured hello time 2, max age 20, forward delay 15
We are the root of the spanning tree
Current root has priority 32768 address 0001.e800.0a56
Topology change flag set, detected flag set
Number of topology changes 1 last change occurred 0:00:05 ago
from GigabitEthernet 1/3
Timers: hold 1, topology change 35
hello 2, max age 20, forward_delay 15
Times: hello 1, topology change 1, notification 0, aging 2
Port 26 (GigabitEthernet 1/1) is Forwarding
Port path cost 4, Port priority 8, Port Identifier 8.26
Designated root has priority 32768, address 0001.e800.0a56
Designated bridge has priority 32768, address 0001.e800.0a56
Designated port id is 8.26, designated path cost 0
Timers: message age 0, forward_delay 0, hold 0
Number of transitions to forwarding state 1
BPDU: sent:18, received 0
The port is not in the portfast mode
Port 27 (GigabitEthernet 1/2) is Forwarding
Port path cost 4, Port priority 8, Port Identifier 8.27
Designated root has priority 32768, address 0001.e800.0a56
Designated bridge has priority 32768, address 0001.e800.0a56
Designated port id is 8.27, designated path cost 0
Timers: message age 0, forward_delay 0, hold 0
Number of transitions to forwarding state 1
BPDU: sent:18, received 0
The port is not in the portfast mode
Port 28 (GigabitEthernet 1/3) is Forwarding
Port path cost 4, Port priority 8, Port Identifier 8.28
Designated root has priority 32768, address 0001.e800.0a56
Designated bridge has priority 32768, address 0001.e800.0a56
Designated port id is 8.28, designated path cost 0
Timers: message age 0, forward_delay 0, hold 0
Number of transitions to forwarding state 1
BPDU: sent:31, received 0
The port is not in the portfast mode
FTOS#

Table 52-1.

1426

|

show spanning-tree 0 Command Information

Field

Description

“Bridge Identifier...”

Lists the bridge priority and the MAC address for this
STP bridge.

“Configured hello...”

Displays the settings for hello time, max age, and
forward delay.

“We are...”

States whether this bridge is the root bridge for the
STG.

“Current root...”

Lists the bridge priority and MAC address for the root
bridge.

“Topology flag...”

States whether the topology flag and the detected flag
were set.

Spanning Tree Protocol (STP)

Table 52-1.

show spanning-tree 0 Command Information

Field

Description

“Number of...”

Displays the number of topology changes, the time of
the last topology change, and on what interface the
topology change occurred.

“Timers”

Lists the values for the following bridge timers:
hold time, topology change, hello time, max age, and
forward delay.

“Times”

List the number of seconds since the last:
• hello time
• topology change
• notification
• aging

“Port 1...”

Displays the Interface type slot/port information and
the status of the interface (Disabled or Enabled).

“Port path...”

Displays the path cost, priority, and identifier for the
interface.

“Designated root...”

Displays the priority and MAC address of the root
bridge of the STG that the interface belongs.

“Designated port...”

Displays the designated port ID

Example
(brief)

FTOS#show span 0 brief
Executing IEEE compatible Spanning Tree Protocol
Root ID
Priority 32768
Address 0001.e800.0a56
Root Bridge hello time 2, max age 20, forward delay 15
Bridge ID
Priority 32768,
Address 0001.e800.0a56
Configured hello time 2, max age 20, forward delay 15
Interface
Designated
Name
PortID Prio Cost Sts Cost
Bridge ID
-------------- ------ ---- ---- --- --------------------Gi 1/1
8.26
8
4 FWD
0
32768 0001.e800.0a56
Gi 1/2
8.27
8
4 FWD
0
32768 0001.e800.0a56
Gi 1/3
8.28
8
4 FWD
0
32768 0001.e800.0a56
FTOS#

Example
(guard)

FTOS#show spanning-tree 0 guard
Interface
Name
Instance
Sts
--------- ---------------Gi 0/1
0
INCON(Root)
Gi 0/2
0
LIS
Gi 0/3
0
EDS (Shut)

Table 52-2.

PortID
-----8.26
8.27
8.28

Guard type
---------Rootguard
Loopguard
Bpduguard

show spanning-tree 0 guard Command Example Information

Field

Description

Interface Name

STP interface

Instance

STP 0 instance

Spanning Tree Protocol (STP) | 1427

www.dell.com | support.dell.com

Table 52-2.

show spanning-tree 0 guard Command Example Information

Field

Description

Sts

Port state: root-inconsistent (INCON Root), forwarding (FWD), listening
(LIS), blocking (BLK), or shut down (EDS Shut)

Guard Type

Type of STP guard configured (Root, Loop, or BPDU guard)

spanning-tree 0
ces

Syntax

Assigns a Layer 2 interface to STP instance 0 and configures a port cost or port priority, or
enables loop guard, root guard, or the Portfast feature on the interface.
spanning-tree stp-id {cost cost | {loopguard | rootguard} |
portfast [bpduguard [shutdown-on-violation]] | priority priority}

To disable Spanning Tree group on an interface, use the no spanning-tree stp-id {cost cost |
{loopguard | rootguard} | portfast [bpduguard [shutdown-on-violation]] | priority priority}
command.
Parameters

Defaults
Command Modes

1428

|

stp-id

Enter the STP instance ID. Range: 0

cost cost

Enter the keyword cost followed by a number as the cost.
Range: 1 to 65535
Defaults:
• 100 Mb/s Ethernet interface = 19
• 1-Gigabit Ethernet interface = 4
• 10-Gigabit Ethernet interface = 2
• Port Channel interface with 100 Mb/s Ethernet = 18
• Port Channel interface with 1-Gigabit Ethernet = 3
• Port Channel interface with 10-Gigabit Ethernet = 1

loopguard

(C-, S-, and E-Series TeraScale and S4810 only) Enter the keyword
loopguard to enable STP loop guard on a port or port-channel interface.

rootguard

(C-, S-, and E-Series TeraScale and S4810 only) Enter the keyword
rootguard to enable STP root guard on a port or port-channel interface.

portfast
[bpduguard
[shutdown-on-vi
olation]]

Enter the keyword portfast to enable Portfast to move the interface into
forwarding mode immediately after the root fails.
Enter the optional keyword bpduguard to disable the port when it receives a
BPDU.
Enter the optional keyword shutdown-on-violation to hardware disable an
interface when a BPDU is received and the port is disabled.

priority priority

Enter keyword priority followed by a number as the priority.
Range: zero (0) to 15
Default: 8

cost

= depends on the interface type; priority = 8

INTERFACE

Spanning Tree Protocol (STP)

Command
History

Usage
Information

Version 8.3.10.1

Introduced the loopguard and rootguard options on the S4810.

Version 8.4.2.1

Introduced the loopguard and rootguard options on the E-Series TeraScale,
C-Series, and S-Series.

Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduced shutdown-on-violation option.

Version 7.7.1.0

Introduced on S-Series.

Version 7.5.1.0

Introduced on C-Series.

Version 6.2.1.1

Introduced.

If you enable portfast bpduguard on an interface and the interface receives a BPDU, the
software disables the interface and sends a message stating that fact. The port is in
ERR_DISABLE mode, yet appears in the show interface commands as enabled. If
shutdown-on-violation is not enabled, BPDUs will still be sent to the RPM CPU.
STP loop guard and root guard are supported on a port or port-channel enabled in any
Spanning Tree mode: Spanning Tree Protocol (STP), Rapid Spanning Tree Protocol (RSTP),
Multiple Spanning Tree Protocol (MSTP), and Per-VLAN Spanning Tree Plus (PVST+).
Root guard is supported on any STP-enabled port or port-channel except when used as a
stacking port. When enabled on a port, root guard applies to all VLANs configured on the
port.
STP root guard and loop guard cannot be enabled at the same time on a port. For example, if
you configure loop guard on a port on which root guard is already configured, the following
error message is displayed:
% Error: RootGuard is configured. Cannot configure LoopGuard.

Do not enable Portfast BPDU guard and loop guard at the same time on a port. Enabling both
features may result in a port that remains in a blocking state and prevents traffic from flowing
through it. For example, when Portfast BPDU guard and loop guard are both configured:
•
•

If a BPDU is received from a remote device, BPDU guard places the port in an
err-disabled blocking state and no traffic is forwarded on the port.
If no BPDU is received from a remote device, loop guard places the port in a
loop-inconsistent blocking state and no traffic is forwarded on the port.

To display the type of STP guard (Portfast BPDU, root, or loop guard) enabled on a port,
enter the show spanning-tree 0 command.

Spanning Tree Protocol (STP) | 1429

www.dell.com | support.dell.com
1430

|

Spanning Tree Protocol (STP)

53
System Time and Date
Overview
The commands in this chapter configure time values on the system, either using FTOS, or the
hardware, or using the Network Time Protocol (NTP). With NTP, the switch can act only as a
client to an NTP clock host. For details, the “Network Time Protocol” section of the
Management chapter in the FTOS Configuration Guide.
The commands in this chapter are generally supported on the C-Series, E-Series, and
S-Series, with some exceptions, as noted in the Command History fields and by these
symbols under the command headings: e E-Series, c C-Series, s S-Series, or

.

Commands
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

calendar set
clock read-calendar
clock set
clock summer-time date
clock summer-time recurring
clock timezone
clock update-calendar
debug ntp
ntp authenticate
ntp authentication-key
ntp broadcast client
ntp disable
ntp multicast client
ntp server
ntp source
ntp trusted-key
ntp update-calendar
show calendar
show clock
show ntp associations

System Time and Date | 1431

www.dell.com | support.dell.com

•

show ntp status

calendar set
ces

Syntax
Parameters

Command Modes
Command
History

Set the time and date for the switch hardware clock.

calendar set time month day year
time

Enter the time in hours:minutes:seconds. For the hour variable, use the 24-hour
format, for example, 17:15:00 is 5:15 pm.

month

Enter the name of one of the 12 months in English.
You can enter the name of a day to change the order of the display to time day
month year.

day

Enter the number of the day.
Range: 1 to 31.
You can enter the name of a month to change the order of the display to time day
month year.

year

Enter a four-digit number as the year.
Range: 1993 to 2035.

EXEC Privilege
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Example
Usage
Information

FTOS#calendar set 08:55:00 june 18 2006
FTOS#

You can change the order of the month and day parameters to enter the time and date as time
day month year.
In the switch, the hardware clock is separate from the software and is called the calendar. This
hardware clock runs continuously. After the hardware clock (the calendar) is set, the FTOS
automatically updates the software clock after system bootup.You cannot delete the hardware
clock (calendar).
To manually update the software with the hardware clock, use the command clock
read-calendar.

Related
Commands

1432

|

clock read-calendar

Set the software clock based on the hardware clock.

clock set

Set the software clock.

clock update-calendar

Set the hardware clock based on the software clock.

show clock

Display clock settings.

System Time and Date

clock read-calendar
ces

Syntax

Set the software clock on the switch from the information set in hardware clock (calendar).

clock read-calendar

Defaults

Not configured.

Command Modes

EXEC Privilege

Command
History

Usage
Information

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

In the switch, the hardware clock is separate from the software and is called the calendar. This
hardware clock runs continuously. After the hardware clock (the calendar) is set, the FTOS
automatically updates the software clock after system bootup.
You cannot delete this command (that is, there is not a “no” version of this command).

clock set
ces
Syntax
Parameters

Defaults
Command Modes
Command
History

Set the software clock in the switch.
clock set time month day year
time

Enter the time in hours:minutes:seconds. For the hour variable, use the 24-hour format,
example, 17:15:00 is 5:15 pm.

month

Enter the name of one of the 12 months, in English.
You can enter the number of a day and change the order of the display to time day
month year.

day

Enter the number of the day.
Range: 1 to 31.
You can enter the name of a month to change the order of the display to time month day
year.

year

Enter a four-digit number as the year.
Range: 1993 to 2035.

Not configured
EXEC Privilege
Version 7.6.1.0

Support added for S-Series

System Time and Date | 1433

www.dell.com | support.dell.com

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Example

Usage
Information

FTOS#clock set 16:20:00 19 may 2001
FTOS#

You can change the order of the month and day parameters to enter the time and date as time
day month year. You cannot delete the software clock.
The software clock runs only when the software is up. The clock restarts, based on the
hardware clock, when the switch reboots.
Dell Force10 recommends that you use an outside time source, such as NTP, to ensure
accurate time on the switch.

Related
Commands

ntp update-calendar

Set the switch using the NTP settings.

clock summer-time date
ces

Syntax

Set a date (and time zone) on which to convert the switch to daylight saving time on a
one-time basis.
clock summer-time time-zone date start-month start-day start-year start-time end-month end-day
end-year end-time [offset]

To delete a daylight saving time zone configuration, enter no clock summer-time.
Parameters

1434

|

time-zone

Enter the three-letter name for the time zone. This name is displayed in the show
clock output.

start-month

Enter the name of one of the 12 months in English.
You can enter the name of a day to change the order of the display to time day
month year.

start-day

Enter the number of the day.
Range: 1 to 31.
You can enter the name of a month to change the order of the display to time day
month year.

start-year

Enter a four-digit number as the year.
Range: 1993 to 2035.

start-time

Enter the time in hours:minutes. For the hour variable, use the 24-hour format,
example, 17:15 is 5:15 pm.

end-day

Enter the number of the day.
Range: 1 to 31.
You can enter the name of a month to change the order of the display to time day
month year.

end-month

Enter the name of one of the 12 months in English.
You can enter the name of a day to change the order of the display to time day
month year.

System Time and Date

Defaults
Command Modes
Command
History

Related
Commands

end-time

Enter the time in hours:minutes. For the hour variable, use the 24-hour format,
example, 17:15 is 5:15 pm.

end-year

Enter a four-digit number as the year.
Range: 1993 to 2035.

offset

(OPTIONAL) Enter the number of minutes to add during the summer-time
period.
Range: 1 to1440.
Default: 60 minutes

Not configured.
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

calendar set

Set the hardware clock.

clock summer-time
recurring

Set a date (and time zone) on which to convert the switch to daylight
saving time each year.

show clock

Display the current clock settings.

clock summer-time recurring
ces

Syntax

Set the software clock to convert to daylight saving time on a specific day each year.

clock summer-time time-zone recurring [start-week start-day start-month start-time end-week end-day
end-month end-time [offset]]

To delete a daylight saving time zone configuration, enter no clock summer-time.
Parameters

time-zone

Enter the three-letter name for the time zone. This name is displayed in the show
clock output.
You can enter up to eight characters.

start-week

(OPTIONAL) Enter one of the following as the week that daylight saving begins
and then enter values for start-day through end-time:
• week-number: Enter a number from 1-4 as the number of the week in the
month to start daylight saving time.
• first: Enter this keyword to start daylight saving time in the first week of the
month.
• last: Enter this keyword to start daylight saving time in the last week of the
month.

System Time and Date | 1435

www.dell.com | support.dell.com

Defaults
Command Modes
Command
History

Related
Commands

start-day

Enter the name of the day that you want daylight saving time to begin. Use
English three letter abbreviations, for example, Sun, Sat, Mon, etc.
Range: Sun – Sat

start-month

Enter the name of one of the 12 months in English.

start-time

Enter the time in hours:minutes. For the hour variable, use the 24-hour format,
example, 17:15 is 5:15 pm.

end-week

Enter the one of the following as the week that daylight saving ends:
• week-number: enter a number from 1-4 as the number of the week to end
daylight saving time.
• first: enter the keyword first to end daylight saving time in the first week of
the month.
• last: enter the keyword last to end daylight saving time in the last week of the
month.

end-day

Enter the weekday name that you want daylight saving time to end. Enter the
weekdays using the three letter abbreviations, for example Sun, Sat, Mon etc.
Range: Sun to Sat

end-month

Enter the name of one of the 12 months in English.

end-time

Enter the time in hours:minutes:seconds. For the hour variable, use the 24-hour
format, example, 17:15:00 is 5:15 pm.

offset

(OPTIONAL) Enter the number of minutes to add during the summer-time
period.
Range: 1 to 1440.
Default: 60 minutes.

Not configured.
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

Version 7.4.1.0

Updated the start-day and end-day options to allow for using the three-letter
abbreviation of the weekday name.

pre-Version
6.1.1.0

Introduced for E-Series

calendar set

Set the hardware clock.

clock summer-time date

Set a date (and time zone) on which to convert the switch to daylight
saving time on a one-time basis.

show clock

Display the current clock settings.

clock timezone
ces

1436

|

Configure a timezone for the switch.

System Time and Date

Syntax

clock timezone timezone-name offset

To delete a timezone configuration, enter no clock timezone.
Parameters

Default
Command Modes
Command
History

Usage
Information

timezone-name

Enter the name of the timezone. You cannot use spaces.

offset

Enter one of the following:
• a number from 1 to 23 as the number of hours in addition to UTC for the
timezone.
• a minus sign (-) followed by a number from 1 to 23 as the number of
hours

Not configured.
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Coordinated Universal Time (UTC) is the time standard based on the International Atomic
Time standard, commonly known as Greenwich Mean time. When determining system time,
you must include the differentiator between UTC and your local timezone. For example, San
Jose, CA is the Pacific Timezone with a UTC offset of -8.

clock update-calendar
ces
Syntax

Set the switch hardware clock based on the software clock.
clock update-calendar

Defaults

Not configured.

Command Modes

EXEC Privilege

Command
History

Usage
Information

Related
Commands

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Use this command only if you are sure that the hardware clock is inaccurate and the software
clock is correct. You cannot delete this command (that is, there is not a “no” form of this
command).
calendar set

Set the hardware clock.

System Time and Date | 1437

www.dell.com | support.dell.com

debug ntp
ces

Syntax

Display Network Time Protocol (NTP) transactions and protocol messages for
troubleshooting.
debug ntp {adjust | all | authentication | events | loopfilter | packets | select | sync}

To disable debugging of NTP transactions, use the no debug ntp {adjust | all | authentication |
events | loopfilter | packets | select | sync} command.
Parameters

Command Modes
Command
History

adjust

Enter the keyword adjust to display information on NTP clock adjustments.

all

Enter the keyword all to display information on all NTP transactions.

authentication

Enter the keyword authentication to display information on NTP
authentication transactions.

events

Enter the keyword events to display information on NTP events.

loopfilter

Enter the keyword loopfilter to display information on NTP local clock
frequency.

packets

Enter the keyword packets to display information on NTP packets.

select

Enter the keyword select to display information on the NTP clock selection.

sync

Enter the keyword sync to display information on the NTP clock
synchronization.

EXEC Privilege
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

ntp authenticate
ces

Syntax

Enable authentication of NTP traffic between the switch and the NTP time serving hosts.

ntp authenticate

To disable NTP authentication, enter no ntp authentication.
Defaults
Command Modes
Command
History

1438

|

Not enabled.
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

System Time and Date

Usage
Information
Related
Commands

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

You also must configure an authentication key for NTP traffic using the ntp
authentication-key command.
ntp authentication-key

Configure authentication key for NTP traffic.

ntp trusted-key

Configure a key to authenticate

ntp authentication-key
ces
Syntax
Parameters

Defaults

Command Modes
Command
History

Usage
Information

Specify a key for authenticating the NTP server.
ntp authentication-key number md5 [0 | 7] key
number

Specify a number for the authentication key.
Range: 1 to 4294967295.
This number must be the same as the number parameter configured in the ntp
trusted-key command.

md5

Specify that the authentication key will be encrypted using MD5 encryption
algorithm.

0

Specify that authentication key will be entered in an unencrypted format (default).

7

Specify that the authentication key will be entered in DES encrypted format.

key

Enter the authentication key in the previously specified format.

NTP authentication is not configured by default. If you do not specify the option [0 | 7], 0 is
selected by default.
CONFIGURATION
Version 8.2.1.0

Added options [0 | 7] for entering authentication key.

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

After configuring the ntp authentication-key command, configure the ntp trusted-key
command to complete NTP authentication.
FTOS versions 8.2.1.0 and later use an encryption algorithm to store the authentication key
that is different from previous FTOS versions; beginning in version 8.2.1.0, FTOS uses DES
encryption to store the key in the startup-config when you enter the command ntp
authentication-key. Therefore, if your system boots with a startup-configuration from an FTOS
versions prior to 8.2.1.0 in which you have configured ntp authentication-key, the system cannot
correctly decrypt the key, and cannot authenticate NTP packets. In this case you must re-enter
this command and save the running-config to the startup-config.

System Time and Date | 1439

www.dell.com | support.dell.com

Related
Commands

ntp authenticate

Enables NTP authentication.

ntp trusted-key

Configure a trusted key.

ntp broadcast client
ces

Syntax

Set up the interface to receive NTP broadcasts from an NTP server.

ntp broadcast client

To disable broadcast, enter no ntp broadcast client.
Defaults
Command Modes
Command
History

Disabled
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

ntp disable
ces

Syntax

Prevent an interface from receiving NTP packets.

ntp disable

To re-enable NTP on an interface, enter no ntp disable.
Default
Command Modes
Command
History

Disabled (that is, if an NTP host is configured, all interfaces receive NTP packets)
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

ntp multicast client
e

1440

|

Configure the switch to receive NTP information from the network via multicast.

System Time and Date

Syntax

ntp multicast client [multicast-address]

To disable multicast reception, use the no ntp multicast client [multicast-address] command.
Parameters

Defaults
Command Modes
Command
History

multicast-address

(OPTIONAL) Enter a multicast address. Enter either an IPv4 address in
dotted decimal format or an IPv6 address in X:X:X:X::X format. If you
do not enter a multicast address, the address 224.0.1.1 is configured if the
interface address is IPv4 or ff05::101 is configured if the interface
address is IPv6.

Not configured.
INTERFACE
Version 8.4.1.0

Added support for IPv6 multicast addresses.

Version 8.3.7.0

Introduced on S4810

pre-Version 6.1.1.0

Introduced for E-Series

ntp server
ces
Syntax
Parameters

Defaults
Command Modes
Command
History

Configure an NTP time-serving host.
ntp server {hostname | ipv4-address | ipv6-address} [key keyid] [prefer] [version number]
ipv4-address |
ipv6-address

Enter an IPv4 address (A.B.C.D) or IPv6 address (X:X:X:X::X).

hostname

Enter the hostname of the server.

key keyid

(OPTIONAL) Enter the keyword key and a number as the NTP peer key.
Range: 1 to 4294967295

prefer

(OPTIONAL) Enter the keyword prefer to indicate that this peer has priority
over other servers.

version number

(OPTIONAL) Enter the keyword version and a number to correspond to the
NTP version used on the server.
Range: 1 to 3

Not configured.
CONFIGURATION
Version 8.4.1.0

Added IPv6 support.

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

System Time and Date | 1441

www.dell.com | support.dell.com

Usage
Information

You can configure multiple time serving hosts (up to 250). From these time serving hosts, the
FTOS will choose one NTP host with which to synchronize. Use the show ntp associations to
determine which server was selected.
Since a large number of polls to NTP hosts can impact network performance, Dell Force10
recommends that you limit the number of hosts configured.

Related
Commands

show ntp associations

Displays NTP servers configured and their status.

ntp source
ces
Syntax

Specify an interface’s IP address to be included in the NTP packets.
ntp source interface

To delete the configuration, enter no ntp source.
Parameters

Defaults
Command Modes
Command
History

interface

Enter the following keywords and slot/port or number information:
• For an 100/1000 Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For Loopback interfaces, enter the keyword loopback followed by a number
from zero (0) to 16383.
• For a Port Channel interface, enter the keyword lag followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale
• For SONET interface types, enter the keyword sonet followed by the slot/port
information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by
the slot/port information.
• For VLAN interface, enter the keyword vlan followed by a number from 1 to
4094.

Not configured.
CONFIGURATION
Version 8.5.1.0

Added support for 4-port 40G line cards on ExaScale.

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

ntp trusted-key
ces

1442

|

Set a key to authenticate the system to which NTP will synchronize.

System Time and Date

Syntax

ntp trusted-key number

To delete the key, use the no ntp trusted-key number command.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

Related
Commands

number

Enter a number as the trusted key ID.
Range: 1 to 4294967295.

Not configured.
CONFIGURATION
Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

The number parameter in the ntp trusted-key command must be the same number as the
number parameter in the ntp authentication-key command. If you change the ntp
authentication-key command, you must also change the ntp trusted-key command.
ntp authentication-key

Set an authentication key for NTP.

ntp authenticate

Enable the NTP authentication parameters you set.

ntp update-calendar
ces
Syntax

Configure the FTOS to update the calendar (the hardware clock) with the NTP-derived time.
ntp update-calendar [minutes]

To return to default setting, enter no ntp update-calendar.
Parameters

Defaults
Command Modes
Command
History

minutes

(OPTIONAL) Enter the number of minutes between updates from NTP to the
hardware clock.
Range: 1 to 1440.
Default: 60 minutes.

Not enabled.
CONFIGURATION
Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

System Time and Date | 1443

www.dell.com | support.dell.com

show calendar
ces

Syntax
Command Modes

Display the current date and time based on the switch hardware clock.

show calendar

EXEC
EXEC Privilege

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Example

Related
Commands

FTOS#show calendar
16:33:30 UTC Tue Jun 26 2001
FTOS#

show clock

Display the time and date from the switch software clock.

show clock
ces

Syntax
Parameters

Command Modes

Display the current clock settings.

show clock [detail]

(OPTIONAL) Enter the keyword detail to view the source information of the
clock.

detail

EXEC
EXEC Privilege

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Example

1444

|

System Time and Date

FTOS#show clock
11:05:56.949 UTC Thu Oct 25 2001
FTOS#

Example
(detail)

Related
Commands

FTOS#show clock detail
12:18:10.691 UTC Wed Jan 7 2009
Time source is RTC hardware
Summer time starts 02:00:00 UTC Sun Mar 8 2009
Summer time ends 02:00:00 ABC Sun Nov 1 2009
FTOS#

clock summer-time recurring

Display the time and date from the switch hardware clock.

show calendar

Display the time and date from the switch hardware clock.

show ntp associations
ces

Syntax
Command Modes

Display the NTP master and peers.

show ntp associations

EXEC
EXEC Privilege

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Example

FTOS#show ntp associations
remote
ref clock
st when poll reach
delay
offset
disp
==========================================================================
10.10.120.5
0.0.0.0
16
- 256
0
0.00
0.000 16000.0
*172.16.1.33
127.127.1.0
11
6
16 377
-0.08 -1499.9 104.16
172.31.1.33
0.0.0.0
16
- 256
0
0.00
0.000 16000.0
192.200.0.2
0.0.0.0
16
- 256
0
0.00
0.000 16000.0
* master (synced), # master (unsynced), + selected, - candidate
FTOS#

Table 53-1.

show ntp associations Command Fields

Field

Description

(none)

One or more of the following symbols could be displayed:
• * means synchronized to this peer
• # means almost synchronized to this peer
• + means the peer was selected for possible synchronization
• - means the peer is a candidate for selection
• ~ means the peer is statically configured

remote

Displays the remote IP address of the NTP peer.

ref clock

Displays the IP address of the remote peer’s reference clock.

System Time and Date | 1445

www.dell.com | support.dell.com

Table 53-1.

Related
Commands

show ntp associations Command Fields

Field

Description

st

Displays the peer’s stratum, that is, the number of hops away from the external time
source. A 16 in this column means the NTP peer cannot reach the time source.

when

Displays the last time the switch received an NTP packet.

poll

Displays the polling interval (in seconds).

reach

Displays the reachability to the peer (in octal bitstream).

delay

Displays the time interval or delay for a packet to complete a round-trip to the NTP
time source (in milliseconds).

offset

Displays the relative time of the NTP peer’s clock to the switch clock (in
milliseconds).

disp

Displays the dispersion.

show ntp status

Display current NTP status.

show ntp status
ces

Syntax
Command Modes

Display the current NTP status.

show ntp status

EXEC
EXEC Privilege

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Support added for S-Series

Version 7.5.1.0

Support added for C-Series

pre-Version 6.1.1.0

Introduced for E-Series

Example

1446

|

System Time and Date

FTOS#sh ntp status
Clock is synchronized, stratum 2, reference is 100.10.10.10
frequency is -32.000 ppm, stability is 15.156 ppm, precision is 4294967290
reference time is BC242FD5.C7C5C000 (10:15:49.780 UTC Mon Jan 10 2000)
clock offset is clock offset msec, root delay is 0.01656 sec
root dispersion is 0.39694 sec, peer dispersion is peer dispersion msec
peer mode is client
FTOS#

Table 53-2.

Related
Commands

show ntp status Command Example Information

Field

Description

“Clock is...”

States whether or not the switch clock is
synchronized, which NTP stratum the system is
assigned and the IP address of the NTP peer.

“frequency is...”

Displays the frequency (in ppm), stability (in
ppm) and precision (in Hertz) of the clock in this
system.

“reference time is...”

Displays the reference time stamp.

“clock offset is...”

Displays the system offset to the synchronized
peer and the time delay on the path to the NTP
root clock.

“root dispersion is...”

Displays the root and path dispersion.

“peer mode is...”

State what NTP mode the switch is. This should
be client mode.

show ntp associations

Display information on NTP master and peer
configurations.

System Time and Date | 1447

1448

|

System Time and Date

www.dell.com | support.dell.com

54
VLAN Stacking
Overview
With the VLAN-Stacking feature (also called Stackable VLANs and QinQ), you can “stack”
VLANs into one tunnel and switch them through the network transparently. This feature is
supported by FTOS on all Dell Force10 platforms as indicated by the characters that appear
under each of the command headings: e E-Series, c C-Series, s S-Series, or
.

Commands
The commands included are:
•
•
•
•
•
•
•
•
•
•
•
•

dei enable
dei honor
dei mark
member
show interface dei-honor
show interface dei-mark
stack-unit stack-group
vlan-stack access
vlan-stack compatible
vlan-stack dot1p-mapping
vlan-stack protocol-type
vlan-stack trunk

For information on basic VLAN commands, refer to Virtual LAN (VLAN) Commands in the
chapter Layer 2.

Important Points to Remember
•

If Spanning Tree Protocol (STP) is not enabled across the Stackable VLAN
network, STP BPDUs from the customer’s networks are tunneled across the
Stackable VLAN network.

VLAN Stacking | 1449

www.dell.com | support.dell.com

•

If STP is enabled across the Stackable VLAN network, STP BPDUs from the
customer’s networks are consumed and not tunneled across the Stackable VLAN
network unless protocol tunneling is enabled.

Note: For details on protocol tunneling on the E-Series, refer to Chapter 47, Service
Provider Bridging.

•
•

•
•

•

Layer 3 protocols are not supported on a Stackable VLAN network.
Assigning an IP address to a Stackable VLAN is supported when all the members
are only Stackable VLAN trunk ports. IP addresses on a Stackable
VLAN-enabled VLAN is not supported if the VLAN contains Stackable VLAN
access ports. This facility is provided for SNMP management over a Stackable
VLAN enabled VLAN containing only Stackable VLAN trunk interfaces. Layer
3 routing protocols on such a VLAN are not supported.
It is recommended that you do not use the same MAC address, on different
customer VLANs, on the same Stackable VLAN.
Interfaces configured using Stackable VLAN access or Stackable VLAN trunk
commands will not switch traffic for the default VLAN. These interfaces will
switch traffic only when they are added to a non-default VLAN.
Starting with FTOS 7.8.1 for C-Series and S-Series (FTOS 7.7.1 for E-Series,
8.2.1.0 for E-Series ExaScale), a vlan-stack trunk port is also allowed to be
configured as a tagged port and as an untagged port for single-tagged VLANs.
When the vlan-stack trunk port is also a member of an untagged vlan, the port
should be in hybrid mode. Refer to portmode hybrid.

dei enable
Make packets eligible for dropping based on their DEI value.

cs
Syntax
Defaults
Command Mode
Command
History

dei enable

Packets are colored green; no packets are dropped.
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 8.3.1.0

Introduced on C-Series and S-Series.

dei honor
Honor the incoming DEI value by mapping it to an FTOS drop precedence. You may enter the
command once for 0 and once for 1.

cs
Syntax

1450

|

VLAN Stacking

dei honor {0 | 1} {green | red | yellow}

Parameters

Defaults
Command Mode
Command
History

Usage
Information
Related
Commands

0|1

Enter the bit value you want to map to a color.

green | red
| yellow

Choose a color:
• Green: High priority packets that are the least preferred to be dropped.
• Yellow: Lower priority packets that are treated as best-effort.
• Red: Lowest priority packets that are always dropped (regardless of congestion
status).

Disabled; Packets with an unmapped DEI value are colored green.
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 8.3.1.0

Introduced on C-Series and S-Series.

You must first enable DEI for this configuration to take effect.

dei enable

Make packets eligible for dropping based on their DEI value.

dei mark
Set the DEI value on egress according to the color currently assigned to the packet.

cs
Syntax
Parameters

Defaults
Command Mode
Command
History

Usage
Information
Related
Commands

dei mark {green | yellow} {0 | 1}
0|1

Enter the bit value you want to map to a color.

green |
yellow

Choose a color:
• Green: High priority packets that are the least preferred to be dropped.
• Yellow: Lower priority packets that are treated as best-effort.

All the packets on egress will be marked with DEI 0.
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 8.3.1.0

Introduced on C-Series and S-Series.

You must first enable DEI for this configuration to take effect.

dei enable

Make packets eligible for dropping based on their DEI value.

VLAN Stacking | 1451

www.dell.com | support.dell.com

member
ces
Syntax

Assign a Stackable VLAN access or trunk port to a VLAN. The VLAN must contain the
vlan-stack compatible command in its configuration.
member interface

To remove an interface from a Stackable VLAN, use the no member interface command.
Parameters

Defaults
Command Mode
Command
History

interface

Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed
by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by a
number:
C-Series and S-Series Range: 1 to 128
E-Series Range: 1 to 255 for TeraScale and 1 to 512 for ExaScale.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a 40-Gigabyte Ethernet interface, enter the keyword fortyGigE followed by
the slot/port information.

Not configured.
CONF-IF-VLAN
Version 8.2.1.0

Introduced on the E-Series ExaScale

Version 7.6.1.0

Support added for C-Series and S-Series

E-Series original Command
Usage
Information
Related
Commands

You must enable the Stackable VLAN (using the vlan-stack compatible command) on the
VLAN prior to adding a member to the VLAN.
vlan-stack compatible

Enable Stackable VLAN on a VLAN.

show interface dei-honor
cs

Display the dei honor configuration.

Syntax

show interface dei-honor [interface slot/port | linecard number port-set number]

Parameters

Command Mode

1452

|

VLAN Stacking

interface slot/port

Enter the interface type followed by the line card slot and port
number.

linecard number port-set
number

Enter linecard followed by the line card slot number, then enter
port-set followed by the port-pipe number.

EXEC Privilege

Command
History

Version 8.3.1.0

Example

Introduced on C-Series and S-Series.

FTOS#show interface dei-honor
Default Drop precedence: Green
Interface
CFI/DEI
Drop precedence
------------------------------------------------------------Gi 0/1
0
Green
Gi 0/1
1
Yellow
Gi 8/9
1
Red
Gi 8/40
0
Yellow

Related
Commands

dei honor

Honor the incoming DEI value by mapping it to an FTOS drop
precedence. You may enter the command once for 0 and once for 1.

show interface dei-mark
cs

Display the dei mark configuration.

Syntax

show interface dei-mark [interface slot/port | linecard number port-set number]

Parameters

Command Mode

interface slot/port

Enter the interface type followed by the line card slot and port
number.

linecard number port-set
number

Enter linecard followed by the line card slot number, then enter
port-set followed by the port-pipe number.

EXEC Privilege

Command
History

Version 8.3.1.0

Example

Introduced on C-Series and S-Series.

FTOS#show interface dei-mark
Default CFI/DEI Marking: 0
Interface
Drop precedence
CFI/DEI
-----------------------------------------------Gi 0/1
Green
0
Gi 0/1
Yellow
1
Gi 8/9
Yellow
0
Gi 8/40
Yellow
0

Related
Commands

sh

dei mark

Set the DEI value on egress according to the color currently assigned to
the packet.

stack-unit stack-group
Configure stacking group specified by ID.
Syntax

[no] stack-unit unit-id stack-group stack-group-id

VLAN Stacking | 1453

www.dell.com | support.dell.com

Parameters

Defaults
Command Mode
Command
History
Usage
Information

unit-id

Enter the stack unit ID.

stack-group-id

Enter the stack group ID. Range is 0 to 16.

[no]

Use no stack-unit unit-id stack-group stack-id to remove the current
stack group configuration.

N/A
CONFIGURATION
Version 8.3.10.2

Introduced on S4810

Warning: The following message is displayed to confirm the command:
All non-default configurations on the related member ports
ports () will be removed. Do you want to
continue (y/n)?
If “y” is entered, all non-default configurations on any member ports of the current stack group
will be removed when the unit is rebooted.

vlan-stack access
ces

Syntax

Specify a Layer 2 port or port channel as an access port to the Stackable VLAN network.

vlan-stack access

To remove access port designation, enter no vlan-stack access.
Defaults
Command Modes
Command
History

Not configured.
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduced on the E-Series ExaScale

Version 7.6.1.0

Support added for C-Series and S-Series

E-Series original Command
Usage
Information

Prior to enabling this command, you must enter the switchport command to place the interface
in Layer 2 mode.
To remove the access port designation, the port must be removed (using the no member
interface command) from all Stackable VLAN enabled VLANs.

1454

|

VLAN Stacking

vlan-stack compatible
ces

Syntax

Enable the Stackable VLAN feature on a VLAN.

vlan-stack compatible

To disable the Stackable VLAN feature on a VLAN, enter no vlan-stack compatible.
Defaults
Command Modes
Command
History

Not configured.
CONF-IF-VLAN
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduced on the E-Series ExaScale

Version 7.6.1.0

Support added for C-Series and S-Series

E-Series original Command
Usage
Information

You must remove the members prior to disabling the Stackable VLAN feature.
To view the Stackable VLANs, use the show vlan command in the EXEC Privilege mode.
Stackable VLANs contain members, designated by the M in the Q column of the command
output.

Example

FTOS#show vlan
Codes: * - Default VLAN, G - GVRP VLANs

*

NUM
1
2

Status
Inactive
Active

3

Active

4

Active

5

Active

Q Ports
M
M
M
M
M
M
M
M
M
M
M

Gi 13/13
Gi 13/0-2
Po1(Gi 13/14-15)
Gi 13/18
Gi 13/3
Po1(Gi 13/14-15)
Gi 13/18
Gi 13/4
Po1(Gi 13/14-15)
Gi 13/18
Gi 13/5

FTOS#

vlan-stack dot1p-mapping
Map C-Tag dot1p values to a S-Tag dot1p value. C-Tag values may be separated by commas
and dashed ranges are permitted. Dynamic Mode CoS overrides any Layer 2 QoS
configuration in case of conflicts.

cs

Syntax

vlan-stack dot1p-mapping c-tag-dot1p values sp-tag-dot1p value

VLAN Stacking | 1455

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes
Command
History

c-tag-dot1p value

Enter the keyword followed by the customer dot1p value that will be
mapped to a service provider do1p value.
Range: 0 to 7

sp-tag-dot1p value

Enter the keyword followed by the service provider dot1p value.
Range: 0 to 7

None
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 8.3.1.0

Introduced on C-Series and S-Series.

vlan-stack protocol-type
ces

Syntax
Parameters

Defaults
Command Modes
Command
History

Define the Stackable VLAN Tag Protocol Identifier (TPID) for the outer VLAN tag (also
called the VMAN tag). If you do not configure this command, FTOS assigns the value
0x9100.
vlan-stack protocol-type number

number

Enter the hexadecimal number as the Stackable VLAN tag.
On the E-Series: FTOS accepts the Most Significant Byte (MSB) and then appends
zeros for the Least Significant Byte (LSB).
On the C-Series and S-Series: You may specify both bytes of the 2-byte S-Tag
TPID.
E-Series Range: 0 to FF
C-Series and S-Series Range: 0 to FFFF
Default: 9100

0x9100
CONFIGURATION
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduced on the E-Series ExaScale. C-Series and S-Series accept both bytes
of the 2-byte S-Tag TPID.

Version 8.2.1.0

Introduced on the E-Series ExaScale

Version 7.6.1.0

Support added for C-Series and S-Series

E-Series original Command
Usage
Information

1456

|

VLAN Stacking

Refer to the FTOS Configuration Guide for specific interoperability limitations regarding the
S-Tag TPID.

On E-Series TeraScale, the two characters you enter in the CLI for number become the MSB,
as shown in Table 54-1.
Table 54-1.

Configuring a TPID on the E-Series TeraScale

number

Resulting TPID

1

0x0100

10

0x1000

More than two characters.

Configuration rejected.

On E-Series ExaScale, C-Series, and S-Series, four characters you enter in the CLI for number
are interpreted as follows:
Table 54-2.

Related
Commands

Configuring a TPID on the E-Series TeraScale

number

Resulting TPID

1

0x0001

10

0x0010

81

0x0081

8100

0x8100

portmode hybrid

Set a port (physical ports only) to accept both tagged and untagged frames. A
port configured this way is identified as a hybrid port in report displays.

vlan-stack trunk

Specify a Layer 2 port or port channel as a trunk port to the Stackable VLAN
network.

vlan-stack trunk
ces

Syntax

Specify a Layer 2 port or port channel as a trunk port to the Stackable VLAN network.

vlan-stack trunk

To remove a trunk port designation from the selected interface, enter no vlan-stack trunk.
Defaults
Command Modes
Command
History

Not configured.
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 8.2.1.0

Introduced on the E-Series ExaScale

Version 7.8.1.0

Functionality augmented for C-Series and S-Series to enable multi-purpose use
of the port. Refer to Usage Information, below.

VLAN Stacking | 1457

www.dell.com | support.dell.com

Version 7.7.1.0

Functionality augmented for E-Series to enable multi-purpose use of the port.
Refer to Usage Information, below.

Version 7.6.1.0

Introduced for C-Series and S-Series

E-Series original Command
Usage
Information

Prior to using this command, you must execute the switchport command to place the interface
in Layer 2 mode.
To remove the trunk port designation, the port must first be removed (using the no member
interface command) from all Stackable VLAN-enabled VLANs.
Starting with FTOS 7.7.1.0 for E-Series, the VLAN-Stack trunk port can transparently tunnel,
in a service provider environment, customer-originated xSTP control protocol PDUs. Refer to
Chapter 47, Service Provider Bridging.
Starting with FTOS 7.8.1.0 for C-Series and S-Series (FTOS 7.7.1 for E-Series), a
VLAN-Stack trunk port is also allowed to be configured as a tagged port and as an untagged
port for single-tagged VLANs. When the VLAN-Stack trunk port is also a member of an
untagged VLAN, the port should be in hybrid mode. Refer to portmode hybrid.
In Example 1 below a VLAN-Stack trunk port is configured and then also made part of a
single-tagged VLAN.
In Example 2 below, the Tag Protocol Identifier (TPID) is set to 8848. The “Gi 3/10” port is
configured to act as a VLAN-Stack access port, while the “TenGi 8/0” port will act as a
VLAN-Stack trunk port, switching Stackable VLAN traffic for VLAN 10, while also
switching untagged traffic for VLAN 30 and tagged traffic for VLAN 40. (To allow VLAN
30 traffic, the native VLAN feature is required, by executing the portmode hybrid command.
Refer to portmode hybrid in Interfaces.

Example
(Tagged VLAN)

1458

|

VLAN Stacking

FTOS(conf-if-gi-0/42)#switchport
FTOS(conf-if-gi-0/42)#vlan-stack trunk
FTOS(conf-if-gi-0/42)#show config
!
interface GigabitEthernet 0/42
no ip address
switchport
vlan-stack trunk
no shutdown
FTOS(conf-if-gi-0/42)#interface vlan 100
FTOS(conf-if-vl-100)#vlan-stack compatible
FTOS(conf-if-vl-100-stack)#member gigabitethernet 0/42
FTOS(conf-if-vl-100-stack)#show config
!
interface Vlan 100
no ip address
vlan-stack compatible
member GigabitEthernet 0/42
shutdown
FTOS(conf-if-vl-100-stack)#interface vlan 20
FTOS(conf-if-vl-20)#tagged gigabitethernet 0/42
FTOS(conf-if-vl-20)#show config

!
interface Vlan 20
no ip address
tagged GigabitEthernet 0/42
shutdown
FTOS(conf-if-vl-20)#do show vlan
Codes:
Q: U x G -

* - Default VLAN, G - GVRP VLANs
Untagged, T - Tagged
Dot1x untagged, X - Dot1x tagged
GVRP tagged, M - Vlan-stack

NUM
Status
Description
1
Inactive
20
Active
100
Active
FTOS(conf-if-vl-20)#

Q Ports

*

Example
(Tagged &
Untagged
VLANs)

T Gi 0/42
M Gi 0/42

FTOS(config)#vlan-stack protocol-type 88A8
FTOS(config)#interface gigabitethernet 3/10
FTOS(conf-if-gi-3/10)#no shutdown
FTOS(conf-if-gi-3/10)#switchport
FTOS(conf-if-gi-3/10)#vlan-stack access
FTOS(conf-if-gi-3/10)#exit
FTOS(config)#interface tenGigabitethernet 8/0
FTOS(conf-if-te-10/0)#no shutdown
FTOS(conf-if-te-10/0)#portmode hybrid
FTOS(conf-if-te-10/0)#switchport
FTOS(conf-if-te-10/0)#vlan-stack trunk
FTOS(conf-if-te-10/0)#exit
FTOS(config)#interface vlan 10
FTOS(conf-if-vlan)#vlan-stack compatible
FTOS(conf-if-vlan)#member Gi 7/0, Gi 3/10, TenGi 8/0
FTOS(conf-if-vlan)#exit
FTOS(config)#interface vlan 30
FTOS(conf-if-vlan)#untagged TenGi 8/0
FTOS(conf-if-vlan)#exit
FTOS(config)#
FTOS(config)#interface vlan 40
FTOS(conf-if-vlan)#tagged TenGi 8/0
FTOS(conf-if-vlan)#exit
FTOS(config)#

VLAN Stacking | 1459

1460

|

VLAN Stacking

www.dell.com | support.dell.com

55
S4810 u-Boot
Overview
All commands in this chapter are in u-Boot. These commands are supported on the Dell
Force10
platform only.
To access this mode, hit any key when the following line appears on the console during a
system boot:
Hit any key to stop autoboot:

You enter u-Boot immediately, as indicated by the => prompt.
Note: This chapter discusses only a few commands available in uBoot. The
commands included here are those that are comparable to those found in the Boot
User mode on other S-Series systems.

Commands
•
•
•
•

printenv
reset
save
setenv

Note: You cannot use the Tab key to complete commands in this mode.

printenv
Display the current system boot variable and other system settings.
Syntax
Command Modes
Command
History

printenv

uBoot
Version 8.3.7.0

Introduced on the S4810.

S4810 u-Boot | 1461

www.dell.com | support.dell.com

Example

=> printenv
baudrate=9600
uboot_filesize=0x80000
bootfile=FTOS-SC-1.2.0.0E3.bin
bootcmd=echo Booting primary bootline....;$primary_boot;boot;echo Failed;echo
Booting secondary bootline....;$secondary_boot;boot;echo Failed;echo Booting default
bootline....;$default_boot;boot;echo Failed;echo Rebooting...;reset
bootdelay=5
loads_echo=1
rootpath=/opt/nfsroot
hostname=unknown
loadaddr=640000
ftpuser=force10
ftppasswd=force10
uboot=u-boot.bin
tftpflash=tftpboot $loadaddr $uboot; protect off 0xfff80000 +$filesize; erase 0x
fff80000 +$filesize; cp.b $loadaddr 0xfff80000 $filesize; protect on 0xfff80000
+$filesize; cmp.b $loadaddr 0xfff80000 $filesize
ethact=eTSEC1
ethaddr=00:01:E8:82:09:B2
serverip=10.11.9.4

primary_boot=f10boot tftp://10.11.9.2/si-S4810-40g
secondary_boot=f10boot flash0
default_boot=f10boot tftp://192.168.128.1/FTOS-SC-1.2.0.0E3.bin
gatewayip=10.11.192.254
ipaddr=10.11.198.114

MAC Address
netmask=255.255.0.0
mgmtautoneg=true
mgmtspeed100=true
mgmtfullduplex=true
stdin=serial
stdout=serial
stderr=serial
Environment size: 1002/8188 bytes
=>

Boot
Variables
Default Gateway Address
Management IP Address

1462

|

S4810 u-Boot

reset
Reload the S4810 system.
Syntax
Command Modes
Command
History
Usage
Information

reset

uBoot
Version 8.3.7.0

Introduced on the S4810.

You must save your changes before resetting the system, or all changes will be lost.

save
Save configurations created in uBoot.
Syntax
Command Modes
Command
History
Usage
Information

save

uBoot
Version 8.3.7.0

Introduced on the S4810.

You must save your changes before resetting the system, or all changes will be lost.

setenv
Configure system settings.
Syntax

setenv [gatewayip address | primary_image f10boot location | secondary_image f10boot location |
default_image f10boot location | ipaddre address | ethaddr address | enablepwdignore |

stconfigignore]
Parameters

gatewayip address

Enter the IP address for the default gateway.

primary_image

Enter the keywords primary_image to configure the boot
parameters used in the first attempt to boot FTOS.

secondary_image

Enter the keywords secondary_image to configure boot
parameters used if the primary operating system boot selection is
not available.

default_image

Enter the keywords default_image to configure boot parameters
used if the secondary operating system boot parameter selection is
not available. The default location should always be the internal
flash device (flash:), and a verified image should be stored there.

S4810 u-Boot | 1463

www.dell.com | support.dell.com

Command Modes
Command
History

1464

|

S4810 u-Boot

location

Enter the location of the image file to be loaded. The keyword
f10boot must precede the location when using this command. For
example, primary_image f10boot tftp://10.10.10.10/
server

ipaddr

Enter the keyword ippaddr to configure the system management IP
address.

ethaddr

Enter the keyword ethaddr to configure system management MAC
address.

address

Enter the IP address in standard IPv4 format and the MAC address
in standard MAC format.

enablepwdignore

Enter the keywords enableprdignore true to reload the system
software without the enable password configured.

stconfigignore

Enter the keywords stconfigignore true ignore the startup
configuration file when reloading the system.

uBoot
Version 8.3.7.0

Introduced on the S4810.

56
Uplink Failure Detection (UFD)
Overview
Uplink Failure Detection (UFD) provides detection of the loss of upstream connectivity and,
if used with NIC teaming, automatic recovery from a failed link.
Uplink Failure Detection is supported on the following platforms: s (S50 only) and

Commands
•
•
•
•
•
•
•
•
•
•
•

clear ufd-disable
debug uplink-state-group
description
downstream
downstream auto-recover
downstream disable links
enable
show running-config uplink-state-group
show uplink-state-group
uplink-state-group
upstream

clear ufd-disable
s S50 only

Syntax

Re-enable one or more downstream interfaces on the switch/router that are in a UFD-disabled
error state so that an interface can send and receive traffic.
clear ufd-disable {interface interface | uplink-state-group group-id}

Uplink Failure Detection (UFD) | 1465

www.dell.com | support.dell.com

Parameters

Defaults

Command Modes
Command
History

Related
Commands

interface interface

Specifies one or more downstream interfaces.
For interface, enter one of the following interface types:
• Fast Ethernet: fastethernet {slot/port | slot/port-range}
• 1-Gigabit Ethernet: gigabitethernet {slot/port |slot/port-range}
• 10-Gigabit Ethernet: tengigabitethernet {slot/port |slot/
port-range}
• Port channel: port-channel {1-512 | port-channel-range}
Where port-range and port-channel-range specify a range
of ports separated by a dash (-) and/or individual ports/port
channels in any order; for example:
gigabitethernet 1/1-2,5,9,11-12
port-channel 1-3,5
A comma is required to separate each port and port-range
entry.

uplink-state-group
group-id

Re-enables all UFD-disabled downstream interfaces in the group.
Valid group-id values are 1 to 16.

A downstream interface in an uplink-state group that has been disabled by UFD is disabled
and in a UFD-disabled error state.
CONFIGURATION
Version 8.3.12.0

Introduced on S4810

Version 8.4.2.3

Introduced on the S-Series S50.

downstream

Assign a port or port-channel to the uplink-state group as a downstream
interface.

uplink-state-group

Create an uplink-state group and enabling the tracking of upstream
links.

debug uplink-state-group
s S50 only

Syntax
Parameters

Defaults

1466

Enable debug messages for events related to a specified uplink-state group or all groups.

debug uplink-state-group [group-id]
group-id

Enables debugging on the specified uplink-state group. Valid group-id values
are 1 to 16.

None

Command Modes

EXEC Privilege

Command
History

Version 8.3.12.0

Introduced on S4810

Version 8.4.2.3

Introduced on the S-Series S50.

|

Uplink Failure Detection (UFD)

Usage
Information

To turn off debugging event messages, enter the no debug uplink-state-group [group-id]
command.

Related
Commands

clear ufd-disable

Re-enable downstream interfaces that are in a UFD-disabled error state.

description
s S50 only

Syntax

Enter a text description of an uplink-state group.

description text

Parameters

Defaults
Command Modes

text

Text description of the uplink-state group.
Maximum length: 80 alphanumeric characters.

None
UPLINK-STATE-GROUP

Command
History

Related
Commands

Version 8.3.12.0

Introduced on S4810

Version 8.4.2.3

Introduced on the S-Series S50.

uplink-state-group

Example

Create an uplink-state group and enabling the tracking of upstream
links.

FTOS(conf-uplink-state-group-16)# description test
FTOS(conf-uplink-state-group-16)#

downstream
s S50 only

Syntax

Assign a port or port-channel to the uplink-state group as a downstream interface.

downstream interface

Uplink Failure Detection (UFD) | 1467

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes
Command
History

Usage
Information

interface

Enter one of the following interface types:
• Fast Ethernet: fastethernet {slot/port | slot/port-range}
• 1-Gigabit Ethernet: gigabitethernet {slot/port | slot/port-range}
• 10-Gigabit Ethernet: tengigabitethernet {slot/port |slot/port-range}
• Port channel: port-channel {1-512 | port-channel-range}
Where port-range and port-channel-range specify a range of ports
separated by a dash (-) and/or individual ports/port channels in any
order; for example:
gigabitethernet 1/1-2,5,9,11-12
port-channel 1-3,5
A comma is required to separate each port and port-range entry.

None
UPLINK-STATE-GROUP
Version 8.3.12.0

Introduced on S4810

Version 8.4.2.3

Introduced on the S-Series S50.

You can assign physical port or port-channel interfaces to an uplink-state group.
You can assign an interface to only one uplink-state group. Each interface assigned to an
uplink-state group must be configured as either an upstream or downstream interface, but not
both.
You can assign individual member ports of a port channel to the group. An uplink-state group
can contain either the member ports of a port channel or the port channel itself, but not both.
To delete an uplink-state group, enter the no downstream interface command.

Related
Commands

upstream

Assign a port or port-channel to the uplink-state group as an upstream
interface.

uplink-state-group

Create an uplink-state group and enabling the tracking of upstream
links.

downstream auto-recover
s S50 only

Syntax

Defaults
Command Modes

1468

|

Enable auto-recovery so that UFD-disabled downstream ports in an uplink-state group
automatically come up when a disabled upstream port in the group comes back up.
downstream auto-recover
The auto-recovery of UFD-disabled downstream ports is enabled.
UPLINK-STATE-GROUP

Uplink Failure Detection (UFD)

Command
History

Usage
Information
Related
Commands

Version 8.3.12.0

Introduced on S4810

Version 8.4.2.3

Introduced on the S-Series S50.

To disable auto-recovery on downstream links, enter the no downstream auto-recover
command.
downstream

Assign a port or port-channel to the uplink-state group as a downstream
interface.

uplink-state-group

Create an uplink-state group and enabling the tracking of upstream
links.

downstream disable links
s S50 only

Syntax
Parameters

Defaults
Command Modes
Command
History

Usage
Information

Configure the number of downstream links in the uplink-state group that will be disabled if
one upstream link in an uplink-state group goes down.
downstream disable links {number |all}
number

Enter the number of downstream links to be brought down by UFD.
Range: 1 to 1024.

all

Brings down all downstream links in the group.

No downstream links are disabled when an upstream link in an uplink-state group goes down.
UPLINK-STATE-GROUP
Version 8.3.12.0

Introduced on S4810

Version 8.4.2.3

Introduced on the S-Series S50.

A user-configurable number of downstream interfaces in an uplink-state group are put into a
link-down state with an UFD-Disabled error message when one upstream interface in an
uplink-state group goes down.
If all upstream interfaces in an uplink-state group go down, all downstream interfaces in the
same uplink-state group are put into a link-down state.
To revert to the default setting, enter the no downstream disable links command.

Related
Commands

downstream

Assign a port or port-channel to the uplink-state group as a downstream
interface.

uplink-state-group

Create an uplink-state group and enabling the tracking of upstream
links.

enable
Uplink Failure Detection (UFD) | 1469

www.dell.com | support.dell.com

s S50 only

Syntax

Defaults
Command Modes
Command
History

Usage
Information
Related
Commands

Enable uplink state group tracking for a specific Uplink Failure Detection (UFD) group.

enable
Upstream-link tracking is automatically enabled in an uplink-state group.
UPLINK-STATE-GROUP
Version 8.3.12.0

Introduced on S4810

Version 8.4.2.3

Introduced on the S-Series S50.

To disable upstream-link tracking without deleting the uplink-state group, enter the no enable
command.
uplink-state-group

Create an uplink-state group and enabling the tracking of upstream
links.

show running-config uplink-state-group
s S50 only

Syntax
Parameters

Defaults
Command Modes

Display the current configuration of one or more uplink-state groups.

show running-config uplink-state-group [group-id]
group-id

Displays the current configuration of all uplink-state groups or a
specified group. Valid group-id values are 1 to 16.

None
EXEC
EXEC Privilege

Command
History

Example

1470

|

Version 8.3.12.0

Introduced on S4810

Version 8.4.2.3

Introduced on the S-Series S50.

FTOS#show running-config uplink-state-group
!
no enable
uplink state track 1
downstream GigabitEthernet 0/2,4,6,11-19
upstream TengigabitEthernet 0/48, 52
upstream PortChannel 1
!
uplink state track 2
downstream GigabitEthernet 0/1,3,5,7-10
upstream TengigabitEthernet 0/56,60

Uplink Failure Detection (UFD)

Related
Commands

show uplink-state-group

Display status information on a specified uplink-state group or all
groups.

uplink-state-group

Create an uplink-state group and enabling the tracking of upstream
links.

show uplink-state-group
s S50 only

Syntax
Parameters

Defaults
Command Modes

Display status information on a specified uplink-state group or all groups.

show uplink-state-group [group-id] [detail]
group-id

Displays status information on a specified uplink-state group or all
groups. Valid group-id values are 1 to 16.

detail

Displays additional status information on the upstream and
downstream interfaces in each group

None
EXEC
EXEC Privilege

Command
History

Example

Version 8.3.12.0

Introduced on S4810

Version 8.4.2.3

Introduced on the S-Series S50.

FTOS# show uplink-state-group
Uplink
Uplink
Uplink
Uplink
Uplink
Uplink

State
State
State
State
State
State

Group:
Group:
Group:
Group:
Group:
Group:

1
3
5
6
7
16

Status:
Status:
Status:
Status:
Status:
Status:

Enabled, Up
Enabled, Up
Enabled, Down
Enabled, Up
Enabled, Up
Disabled, Up

FTOS# show uplink-state-group 16
Uplink State Group: 16 Status: Disabled, Up

FTOS#show uplink-state-group detail
(Up): Interface up
(Dwn): Interface down
Uplink State Group
: 1
Upstream Interfaces
:
Downstream Interfaces :

(Dis): Interface disabled

Status: Enabled, Up

Uplink State Group
: 3
Status: Enabled, Up
Upstream Interfaces
: Gi 0/46(Up) Gi 0/47(Up)
Downstream Interfaces : Te 13/0(Up) Te 13/1(Up) Te 13/3(Up) Te 13/5(Up) Te 13/6(Up)
Uplink State Group
Upstream Interfaces

: 5
Status: Enabled, Down
: Gi 0/0(Dwn) Gi 0/3(Dwn) Gi 0/5(Dwn)

Uplink Failure Detection (UFD) | 1471

www.dell.com | support.dell.com

Downstream Interfaces : Te 13/2(Dis) Te 13/4(Dis) Te 13/11(Dis) Te 13/12(Dis) Te 13/13(Dis) Te 13/14(Dis) Te 13/15(Dis)
Uplink State Group
: 6
Upstream Interfaces
:
Downstream Interfaces :

Status: Enabled, Up

Uplink State Group
: 7
Upstream Interfaces
:
Downstream Interfaces :

Status: Enabled, Up

Uplink State Group
: 16
Status: Disabled, Up
Upstream Interfaces
: Gi 0/41(Dwn) Po 8(Dwn)
Downstream Interfaces : Gi 0/40(Dwn)

Related
Commands

show running-config
uplink-state-group

Display the current configuration of one or more uplink-state groups.

uplink-state-group

Create an uplink-state group and enabling the tracking of upstream
links.

uplink-state-group
s S50 only

Syntax
Parameters

Defaults
Command Modes
Command
History

Usage
Information

Create an uplink-state group and enabling the tracking of upstream links on a switch/router.

uplink-state-group group-id
group-id

Enter the ID number of an uplink-state group. Range: 1-16.

None
CONFIGURATION
Version 8.3.12.0

Introduced on S4810

Version 8.4.2.3

Introduced on the S-Series S50.

After you enter the command, you enter uplink-state-group configuration mode to assign
upstream and downstream interfaces to the group.
An uplink-state group is considered to be operationally up if at least one upstream interface in
the group is in the link-up state.
An uplink-state group is considered to be operationally down if no upstream interfaces in the
group are in the link-up state. No uplink-state tracking is performed when a group is disabled
or in an operationally down state.
To delete an uplink-state group, enter the no uplink-state-group group-id command.
To disable upstream-link tracking without deleting the uplink-state group, enter the no enable
command in uplink-state-group configuration mode.

1472

|

Uplink Failure Detection (UFD)

Related
Commands

show running-config
uplink-state-group

Display the current configuration of one or more uplink-state groups.

show uplink-state-group

Display status information on a specified uplink-state group or all
groups.

Example

FTOS(conf)#uplink-state-group 16
FTOS(conf)#
02:23:17: %RPM0-P:CP %IFMGR-5-ASTATE_UP: Changed uplink state group Admin state to up: Group 16

upstream
s S50 only

Syntax
Parameters

Defaults
Command Modes
Command
History

Usage
Information

Assign a port or port-channel to the uplink-state group as an upstream interface.

upstream interface
interface

Enter one of the following interface types:
• Fast Ethernet: fastethernet {slot/port | slot/port-range}
• 1-Gigabit Ethernet: gigabitethernet {slot/port | slot/port-range}
• 10-Gigabit Ethernet: tengigabitethernet {slot/port | slot/port-range}
• 40-Gigabit Ethernet: fortyGigE {slot/port | slot/port-range}
• Port channel: port-channel {1-512 | port-channel-range}
Where port-range and port-channel-range specify a range of ports
separated by a dash (-) and/or individual ports/port channels in any order;
for example:
gigabitethernet 1/1-2,5,9,11-12
port-channel 1-3,5
A comma is required to separate each port and port-range entry.

None
UPLINK-STATE-GROUP
Version 8.3.12.0

Introduced on S4810

Version 8.4.2.3

Introduced on the S-Series S50.

You can assign physical port or port-channel interfaces to an uplink-state group.
You can assign an interface to only one uplink-state group. Each interface assigned to an
uplink-state group must be configured as either an upstream or downstream interface, but not
both.
You can assign individual member ports of a port channel to the group. An uplink-state group
can contain either the member ports of a port channel or the port channel itself, but not both.
To delete an uplink-state group, enter the no upstream interface command.

Uplink Failure Detection (UFD) | 1473

www.dell.com | support.dell.com

Related
Commands

1474

Example

|

downstream

Assign a port or port-channel to the uplink-state group as a downstream
interface.

uplink-state-group

Create an uplink-state group and enabling the tracking of upstream
links.

FTOS(conf-uplink-state-group-16)# upstream gigabitethernet 1/10-15
FTOS(conf-uplink-state-group-16)#

Uplink Failure Detection (UFD)

57
Virtual Link Trunking (VLT)
Overview
Virtual Link Trunking (VLT) is supported on the

platform.

Virtual link trunking (VLT) allows physical links between two chassis to appear as a single
virtual link to the network core or other switches such as Edge, Access or ToR. VLT reduces
the role of Spanning Tree protocols by allowing LAG terminations on two separate
distribution or core switches, and by supporting a loop free topology. (A Spanning Tree
protocol is still needed to prevent the initial loop that may occur prior to VLT being
established. After VLT is established, RTSP may be used to prevent loops from forming with
new links that are incorrectly connected and outside the VLT domain.) VLT provides Layer 2
multipathing, creating redundancy through increased bandwidth, enabling multiple parallel
paths between nodes and load-balancing traffic where alternative paths exist.
Prerequisites: Before you configure VLT, make sure that both VLT peer switches are running
the same FTOS version and are configured for RSTP as described in the Virtual Link
Trunking (VLT) chapter in the FTOS Configuration Guide.
Caution: Dell Force10 recommends not enabling Stacking and VLT simultaneously.
If both are enabled at the same time, unexpected behavior will occur.

Commands
•
•
•
•
•
•
•
•
•
•
•

back-up
back-up destination
clear vlt statistics
delay-restore
lacp ungroup member-independent
peer-link
peer-link port-channel
primary-priority
show vlt
show vlt backup-link
show vlt counter

Virtual Link Trunking (VLT) | 1475

www.dell.com | support.dell.com

•
•
•
•
•
•
•
•

show vlt role
show vlt statistics
show vlt statistics igmp-snoop
system-mac
unit-id
vlt domain
vlt domain peer-link
vlt-peer-lag port-channel

back-up
Configure the backup link for VLT.
Syntax

back-up

Defaults

Not configured.

Command Modes

VLT DOMAIN

Command
History

Version 8.3.12.0

Introduced on S4810

back-up destination
Configure the IP address of the management interface on the remote VLT peer to be used as
the endpoint of the VLT backup link for sending out-of-band hello messages.
Syntax
Parameters

Defaults

1476

back-up destination ip-address [interval seconds]
ip-address

Enter an IP address in dotted decimal format.

interval
seconds

Enter the keyword interval to specify the time interval used to send hello
messages.
Range: 1 to 5 seconds.

1 second

Command Modes

VLT DOMAIN

Command
History

Version 8.3.8.0

|

Virtual Link Trunking (VLT)

Introduced on S4810

clear vlt statistics
Clear the statistics on VLT operations.
Syntax
Command Modes

clear vlt statistics

EXEC

Command
History

Version 8.3.12.0

Related
Commands

show vlt statistics

Introduced on S4810
Display statistics on VLT operations.

delay-restore
Configure the delay in bringing up VLT ports after reload or peer-link restoration between the
VLT peer switches.
Syntax
Parameters

delay-restore
delay-restore

Defaults

Not configured.

Command Modes

VLT DOMAIN

Command
History

Version 8.3.12.0

Usage
Information

Enter the amount of time, in seconds, to delay bringing up the VLT ports after
the VLTi device is reloaded or after the peer-link is restored between VLT
peer switches.
Range: 1 to 1200.
Default: 90 seconds.

Introduced on S4810

Use the delay-restore parameter to delay the system from bringing up the VLT port for a brief
period to allow IGMP Snooping and Layer 3 routing protocols to converge. This feature can
be used:
•
•

after a VLT device is reloaded.
if the Peer VLT device was up at the time the VLTi link failed to the time when it
was restored.

lacp ungroup member-independent
Enable BMP boot for the device connected to the LACP LAG or by a VLT peer device.
Syntax

lacp ungroup member-independent {vlt | port-channel port-channel-id}

Virtual Link Trunking (VLT) | 1477

www.dell.com | support.dell.com

Defaults
Command Modes
Usage
Information

Not configured.
CONFIGURATION
LACP on VLT ports (on a VLT switch or access device), which are members of the virtual
link trunk, is not brought up until the VLT domain is recognized on the access device.
During boot-up in a stacking configuration, the system must be able to reach the DHCP server
with the image and configuration image. During bootup, only untagged DHCP requests are
sent to the DHCP server to receive an offer on static LAGs between switches. The DHCP
server must be configured to start in jumpstart mode. If switches are connected using LACP
port-channel like the VLT peer and ToR, use the port-channel parameter on the TOR side of
the configuration to allow member ports of a completely un-grouped lacp port-channel to
inherit vlan membership of that port channel to ensure untagged packets sent by a VLT peer
device reach the DHCP server located on the TOR. To ungroup the vlt and port-channel
configurations, use the no lacp ungroup member-independent vlt command on a VLT port
channel, depending on whether the port channel is VLT or non-VLT..

Command
History

Version 8.3.12.0

Added port-channel parameter.

Version 8.3.8.0

Introduced on S4810

peer-link
Configure the peer-link for VLT
Syntax

peer-link

Defaults

Not configured.

Command Modes

VLT DOMAIN

Command
History

Version 8.3.12.0

Introduced on S4810

peer-link port-channel
Configure the specified port channel as the chassis interconnect trunk between VLT peers in
the domain.
Syntax
Parameters

1478

|

peer-link port-channel port-channel-number {peer-down-vlan vlan id}
port-channelnumber

Enter the port-channel number that will act as the interconnect trunk.

peer-down-vlan
vlan id

(Optional) Configure the VLAN that the VLT peer link uses when the VLT peer
is down.

Virtual Link Trunking (VLT)

Defaults

Not configured.

Command Modes

VLT DOMAIN

Command
History

Usage
Information

Version 8.3.12.0

Added support for peer-down-vlan parameter.

Version 8.3.8.0

Introduced on S4810

Use peer-down-vlan to configure the VLAN from where the VLT peer forwards packets
received over the VLTi from an adjacent VLT peer that is down. When a VLT peer with Bare
Metal Provisioning (BMP) is booting up, it sends untagged DHCP discover packets to its peer
over the VLTi. Use this configuration to ensure that the DHCP discover packets are
forwarded to the VLAN on the DHCP server.

primary-priority
Assign the priority for master election among VLT peers.
Syntax
Parameters

Default
Command Modes
Usage
Information

Command
History

[no] primary-priority
value

To configure the primary role on a VLT peer, enter a lower value than the priority
value of the remote peer.
Range: 1 to 65535.

32768
VLT DOMAIN
After you configure the VLT domain on each peer switch on both sides of the interconnect
trunk, by default, the FTOS software elects a primary and secondary VLT peer device. Use
the priority command to reconfigure the primary role of VLT peer switches.
Version 8.3.8.0

Introduced on S4810

show vlt
Displays status information about VLT domains currently configured on the switch.

z
Syntax
Defaults
Command Modes
Example
(brief)

show vlt [brief | detail]

Not configured.
EXEC
FTOS(conf)#show vlt brief
VLT Domain Brief

Virtual Link Trunking (VLT) | 1479

www.dell.com | support.dell.com

-----------------Domain ID:
Role:
Role Priority:
ICL Link Status:
HeartBeat Status:
VLT Peer Status:
Version:
Local System MAC address:
Remote System MAC address:
Remote system version:

Example
(detail)

Command
History

Usage
Information

10
Primary
32768
Up
Not Established
Up
5(1)
00:01:e8:8b:14:3c
00:01:e8:8b:15:20
5 (1)

FTOS# FTOS(conf-if-vl-100)#show vlt detail
Local LAG Id Peer LAG Id Local Status
Peer Status
------------ ----------- ------------ -----------10
10
UP
UP
400,

Version 8.3.12.0

Support added for number of VLT instances on S4810. For show vlt brief,
added support in output for version and delay restore timer. For show vlt
detail, added support in output for local LAG status and remote LAG
status.

Version 8.3.8.0

Introduced on S4810.

The version shown in the show vlt brief output displays the VLT version number which is
different from the FTOS version number. VLT version numbers are begin with odd numbers
such as 3 or 5.

show vlt backup-link
Displays information on backup link operation
Syntax
Defaults
Command Modes

show vlt backup-link

Not configured.
EXEC

Example

FTOS_VLTpeer1# show vlt backup-link
VLT Backup Link
----------------Destination:
Peer HeartBeat status:
HeartBeat Timer Interval:
HeartBeat Timeout:
UDP Port:
HeartBeat Messages Sent:
HeartBeat Messages Received:

Command
History

1480

|

Active VLANs
------------100, 200, 300

Version 8.3.8.0

Virtual Link Trunking (VLT)

Introduced on S4810

10.11.200.18
Up
1
3
34998
1026
1025

show vlt counter
Displays the counter information.
Syntax
Parameters

Defaults
Command Modes
Command
History
Example

Example
(igmp-snoop)

Example
(igmp-snoop
interface port
channel)

show vlt counter [arp| igmp-snoop | interface | mac]
arp

Enter the keyword arp to display the ARP counter information for the VLT.

igmp-snoop

Enter the keyword igmp-snoop to display the igmp-snooping counter
information for the VLT.

interface

Enter the keyword interface to display the interface counter information for the
VLT.

mac

Enter the keyword mac to display the MAC address counter information for the
VLT.

Not configured.
EXEC
Version 8.3.12.0

Introduced on S4810

FTOS# show vlt counter
Total VLT counters
------------------------L2 Total MAC-Address Count
IGMP MRouter Vlans count :
IGMP Mcast Groups count :
ARP entries count

:

FTOS# show vlt counter igmp-snoop
Total IGMP VLT counters
---------------------IGMP MRouter Vlans count :
IGMP Mcast Groups count :

:

1
5

FTOS#show vlt counter igmp-snoop interface port-channel 2
VLT Port-ID: 2 IGMP Counter
----------------------IGMP MRouter Vlans count :
0
IGMP Mcast Groups count :
5
FTOS# show vlt counter igmp-snoop interface port-channel 100
VLT Port-ID: 100 IGMP Counter
----------------------IGMP MRouter Vlans count :
1
IGMP Mcast Groups count :
0

Usage
Information

If you do not add a parameter such as arp or mac, the output will display all of the counters.

Virtual Link Trunking (VLT) | 1481

www.dell.com | support.dell.com

show vlt role
Displays the VLT peer status, role of the local VLT switch, VLT system MAC address and
system priority, and the MAC address and priority of the local VLT device.
Syntax
Defaults
Command Modes
Command
History

show vlt role

Not configured.
EXEC
Version 8.3.8.0

Example

Introduced on S4810

FTOS_VLTpeer1# show vlt role
VLT Role
---------VLT Role:
System MAC address:
System Role Priority:
Local System MAC address:
Local System Role Priority:

Primary
00:01:e8:8a:df:bc
32768
00:01:e8:8a:df:bc
32768

FTOS_VLTpeer2# show vlt role
VLT Role
---------VLT Role:
System MAC address:
System Role Priority:
Local System MAC address:
Local System Role Priority:

Secondary
00:01:e8:8a:df:bc
32768
00:01:e8:8a:df:e6
32768

show vlt statistics
Displays statistics on VLT operations.
Syntax
Defaults
Command Modes
Command
History

Example

show vlt statistics

Not configured.
EXEC
Version 8.3.12.0

Added support in output for ARP, MAC and IGMP snooping.

Version 8.3.8.0

Introduced on S4810

Note: The following example shows the statistics for all of the VLT parameters. If a specific
keyword is entered, such as mac, only the statistics for that VLT parameter will display.
FTOS_VLTpeer1#show vlt statistics
VLT Statistics

1482

|

Virtual Link Trunking (VLT)

---------------HeartBeat Messages Sent:
HeartBeat Messages Received:
ICL Hello's Sent:
ICL Hello's Received:
Domain Mismatch Errors:
Version Mismatch Errors:
Config Mismatch Errors:
VLT MAC Statistics
---------------L2 Info Pkts sent:6,
L2 Info Pkts Rcvd:3,
L2 Reg Request sent:1
L2 Reg Request rcvd:2

930
909
927
910
0
0
0

L2 Mac-sync Pkts Sent:0
L2 Mac-sync Pkts Rcvd:2

L2 Reg Response sent:1
L2 Reg Response rcvd:1
VLT Igmp-Snooping Statistics
------------------------------IGMP Info Pkts sent:
4
IGMP Info Pkts Rcvd:
1
IGMP Reg Request sent:
1
IGMP Reg Request rcvd:
2
IGMP Reg Response sent: 1
IGMP Reg Response rcvd: 1
IGMP PDU Tunnel Pkt sent:5
IGMP PDU Tunnel Pkt rcvd:10
IGMP Tunnel PDUs sent:
10
IGMP Tunnel PDUs rcvd:
19
VLT ARP Statistics
---------------ARP Tunnel Pkts sent:0
ARP Tunnel Pkts Rcvd:0
ARP-sync Pkts Sent:0
ARP-sync Pkts Rcvd:0
ARP Reg Request sent:19
ARP Reg Request rcvd:10

Command
History

clear vlt statistics

Clear statistics on VLT operations.

show vlt statistics igmp-snoop
Displays the informational packets and IGMP control PDUs that are exchanged between VLT
peer nodes.
Syntax
Defaults
Command Modes
Example

show vlt statistics igmp-snoop

Not configured.
EXEC
FTOS_VLTpeer1#show vlt statistics igmp-snoop
VLT Igmp-Snooping Statistics
------------------------------IGMP Info Pkts sent:
4

Virtual Link Trunking (VLT) | 1483

www.dell.com | support.dell.com

IGMP
IGMP
IGMP
IGMP
IGMP
IGMP
IGMP
IGMP
IGMP

Command
History

Info Pkts Rcvd:
1
Reg Request sent:
1
Reg Request rcvd:
2
Reg Response sent: 1
Reg Response rcvd: 1
PDU Tunnel Pkt sent:5
PDU Tunnel Pkt rcvd:10
Tunnel PDUs sent:
10
Tunnel PDUs rcvd:
19

Version 8.3.12.0

Introduced on S4810

system-mac
Configure the MAC address for the VLT domain on a VLT peer switch.
Syntax
Parameters

Defaults
Command Modes
Usage
Information

system-mac mac-address
mac-address

Enter a MAC address in the format aaaa.bbbb.cccc.

Automatically assigned based on the primary priority and MAC address of each VLT peer.
VLT DOMAIN
When you create a VLT domain on a switch, the FTOS software automatically creates a
VLT-system MAC address used for internal system operations. Use the system-mac
command to explicitly define the MAC address for the domain. You must also reconfigure the
same MAC address on the VLT peer switch.
Use this command to minimize the time required for the VLT system to synchronize the
default MAC address of the VLT domain on both peer switches when one peer switch
reboots.

Command
History

Version 8.3.8.0

Introduced on S4810

unit-id
Explicitly configure the default unit ID of a VLT peer switch.
Syntax
Parameters

Defaults

1484

|

unit-id [0 | 1]
0|1

Configure the default unit ID of a VLT peer switch. Enter 0 for a unit with a lower
MAC address or enter 1 for a unit with a higher MAC address.

Automatically assigned based on the MAC address of each VLT peer. The peer with the lower
MAC address is assigned unit 0; the peer with the higher MAC address is assigned unit 1.

Virtual Link Trunking (VLT)

Command Modes
Usage
Information

VLT DOMAIN
When you create a VLT domain on a switch, the FTOS software automatically assigns a
unique unit ID (0 or 1) to each peer switch. The unit IDs are used for internal system
operations. Use the unit-id command to explicitly configure the unit ID of a VLT peer. You
must configure a different unit ID (0 or 1) on each peer switch.
Use this command to minimize the time required for the VLT system to determine the unit ID
assigned to each peer switch when one peer reboots.

Command
History

Version 8.3.8.0

Introduced on S4810

vlt domain
Use this command to enable VLT on a switch, configure a VLT domain, enter VLT-domain
configuration mode, set a VLT port delay time, set VLT priorities and configure a VLT peer
link.
Syntax
Parameters

Command Modes
Command
History
Related
Commands
Usage
Information

vlt domain domain-id
domain-id

Enter the Domain ID number. You must configure the same domain ID on the
peer switch. VLT uses the domain ID to automatically create a VLT MAC
address for the domain.
Range of domain IDs: 1 to 1000.

CONFIGURATION
Version 8.3.8.0
show vlt

Introduced on S4810
Use the show vlt brief command to display the delay-restore value.

The VLT domain ID must be the same between the two VLT devices. If the domain ID is not
the same, a syslog message is generated and VLT will not launch.

vlt domain peer-link
Use this command to configure a VLT peer link for a VLAN to indicate where the VLT peer
forwards packets from the VLTi in a peer failure scenario.
Syntax

vlt domain domain-id peer-link port-channel

Virtual Link Trunking (VLT) | 1485

www.dell.com | support.dell.com

Parameters

Command Modes
Command
History
Related
Commands

domain-id

Enter the Domain ID number. You must configure the same domain ID on the
peer switch. VLT uses the domain ID to automatically create a VLT MAC
address for the domain.
Range of domain IDs: 1 to 1000.

peer-link
port-channel

Configure the VLT peer link.

CONFIGURATION
Version 8.3.8.0
show vlt

Introduced on S4810
Use the show vlt brief command to display the delay-restore value.

vlt-peer-lag port-channel
Associate the port channel to the corresponding port channel in the VLT peer for the VLT
connection to an attached device.
Syntax
Parameters

Defaults
Command Modes
Command
History

1486

|

vlt-peer-lag port-channel id-number
id-number

Enter the port-channel number that will connect to another port channel in the
VLT peer.

Not configured.
INTERFACE PORT-CHANNEL
Version 8.3.8.0

Virtual Link Trunking (VLT)

Introduced on S4810

58
Virtual Router Redundancy Protocol
(VRRP)
Virtual Router Redundancy Protocol (VRRP) is supported by FTOS on all Dell Force10
platforms, as indicated by the characters that appear under each of the command headings:
E-Series,
C-Series,
S-Series, or
.

e

c

s

Overview
This chapter has the following sections:

•
•

IPv4 VRRP Commands
IPv6 VRRP Commands

IPv4 VRRP Commands
The commands are:

•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

advertise-interval
authentication-type
clear counters vrrp
debug vrrp
description
disable
hold-time
preempt
priority
show config
show vrrp
track
virtual-address
vrrp delay minimum
vrrp delay reload
vrrp-group

Virtual Router Redundancy Protocol (VRRP) | 1487

www.dell.com | support.dell.com

advertise-interval
ces

Syntax

Set the time interval between VRRP advertisements.

advertise-interval seconds

To return to the default settings, enter no advertise-interval.
Parameters

Defaults
Command Modes
Command
History

Usage
Information

seconds

Enter a number of seconds.
Range: 1 to 255.
Default: 1 second.

1 second.
INTERFACE-VRRP
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

Dell Force10 recommends that you keep the default setting for this command. If you do
change the time interval between VRRP advertisements on one router, you must change it on
all routers.

authentication-type
ces

Syntax

Enable authentication of VRRP data exchanges.

authentication-type simple [encryption-type] password

To delete an authentication type and password, enter no authentication-type.
Parameters

Defaults
Command Modes

1488

|

simple

Enter the keyword simple to specify simple authentication.

encryption-type

(OPTIONAL) Enter one of the following numbers:
• 0 (zero) for an un-encrypted (clear text) password
• 7 (seven) for hidden text password.

password

Enter a character string up to 8 characters long as a password. If you do not
enter an encryption-type, the password is stored as clear text.

Not configured.
VRRP

Virtual Router Redundancy Protocol (VRRP)

Command
History

Usage
Information

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

The password is displayed in the show config output if the encryption-type is unencrypted or
clear text. If you choose to encrypt the password, the show config displays an encrypted text
string.

clear counters vrrp
ces

Syntax
Parameters

Clear the counters maintained on VRRP operations.

clear counters vrrp [vrrp-id]
vrrp-id

(OPTIONAL) Enter the number of the VRRP group ID.
Range: 1 to 255

Command Modes

EXEC Privilege

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

debug vrrp
ce

Allows you to enable debugging of VRRP.

Syntax

debug vrrp interface [vrrp-id] {all | packets | state | timer}

To disable debugging, use the no debug vrrp interface [vrrp-id] {all | packets | state | timer}
command.

Virtual Router Redundancy Protocol (VRRP) | 1489

www.dell.com | support.dell.com

Parameters

interface

Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For Port Channel interface types, enter the keyword port-channel followed by
the number:
C-Series and S-Series Range: 1 to 128
E-Series Range: 1 to 255 for TeraScale
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a VLAN interface, enter the keyword vlan followed by the VLAN ID.
The VLAN ID range is from 1 to 4094.

vrrp-id

(OPTIONAL) Enter a number from 1 to 255 as the VRRP group ID.

all

Enter the keyword all to enable debugging of all VRRP groups.

bfd

Enter the keyword bfd to enable debugging of all VFFP BFD interactions

packets

Enter the keyword packets to enable debugging of VRRP control packets.

state

Enter the keyword state to enable debugging of VRRP state changes.

timer

Enter the keyword timer to enable debugging of the VRRP timer.

Command Modes

EXEC Privilege

Command
History

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

Usage
Information

If no options are specified, debug is active on all interfaces and all VRRP groups.

description
ces

Syntax

Configure a short text string describing the VRRP group.

description text

To delete a VRRP group description, enter no description.
Parameters

Defaults
Command Modes
Command
History

1490

|

text

Enter a text string up to 80 characters long.

Not enabled.
VRRP
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

Virtual Router Redundancy Protocol (VRRP)

disable
ces

Syntax

Disable a VRRP group.

disable

To re-enable a disabled VRRP group, enter no disable.
Defaults

C and S-Series default: VRRP is enabled.
E-Series default: VRRP is disabled.

Command Modes
Command
History

Usage
Information
Related
Commands

VRRP
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

To enable VRRP traffic, assign an IP address to the VRRP group using the virtual-address
command and enter no disable.
virtual-address

Specify the IP address of the Virtual Router.

hold-time
ces

Syntax

Specify a delay (in seconds) before a switch becomes the MASTER virtual router. By delaying
the initialization of the VRRP MASTER, the new switch can stabilize its routing tables.
hold-time seconds

To return to the default value, enter no hold-time.
Parameters

Defaults
Command Modes
Command
History

seconds

Enter a number of seconds.
Range: 0 to 65535.
Default: zero (0) seconds.

zero (0) seconds
VRRP
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

Virtual Router Redundancy Protocol (VRRP) | 1491

www.dell.com | support.dell.com

Usage
Information
Related
Commands

If a switch is a MASTER and you change the hold timer, you must disable and re-enable
VRRP for the new hold timer value to take effect.
disable

Disable a VRRP group.

preempt
ces

Syntax

Permit a BACKUP router with a higher priority value to preempt or become the MASTER
router.
preempt

To prohibit preemption, enter no preempt.
Defaults
Command Modes
Command
History

Enabled (that is, a BACKUP router can preempt the MASTER router).
VRRP
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

priority
ces

Syntax

Specify a VRRP priority value for the VRRP group. This value is used by the VRRP protocol
during the MASTER election process.
priority priority

To return to the default value, enter no priority.
Parameters

Defaults
Command Modes
Command
History

1492

|

priority

Enter a number as the priority. Enter 255 only if the router’s virtual address is the
same as the interface’s primary IP address (that is, the router is the OWNER).
Range: 1 to 255
Default: 100

100
VRRP
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

Virtual Router Redundancy Protocol (VRRP)

Usage
Information

To guarantee that a VRRP group becomes MASTER, configure the VRRP group’s virtual
address with same IP address as the interface’s primary IP address and change the priority of
the VRRP group to 255.
If you set the priority to 255 and the virtual-address is not equal to the interface’s primary IP
address, an error message appears.

show config
ces

Syntax
Parameters

Command Modes
Command
History

Example

View the non-default VRRP configuration.

show config [verbose]
verbose

(OPTIONAL) Enter the keyword verbose to view all VRRP group configuration
information, including defaults.

VRRP
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

FTOS(conf-if-vrid-4)#show con
vrrp-group 4
virtual-address 119.192.182.124
!

show vrrp
ces

View the VRRP groups that are active. If no VRRP groups are active, the FTOS returns “No

Active VRRP group.”
Syntax

show vrrp [vrrp-id] [interface] [brief]

Virtual Router Redundancy Protocol (VRRP) | 1493

www.dell.com | support.dell.com

Parameters

Command Modes

vrrp-id

(OPTIONAL) Enter the Virtual Router Identifier for the VRRP group to view
only that group.
Range: 1 to 255.

interface

(OPTIONAL) Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For Port Channel interface types, enter the keyword port-channel followed
by the number:
C-Series and S-Series Range: 1 to 128
E-Series Range: 1 to 255 for TeraScale
• For SONET interfaces, enter the keyword sonet followed by the slot/port
information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a VLAN interface, enter the keyword vlan followed by the VLAN ID.
The VLAN ID range is from 1 to 4094.

brief

(OPTIONAL) Enter the keyword brief to view a table of information on the
VRRP groups on the E-Series.

EXEC
EXEC Privilege

Command
History

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

Example

FTOS>Interface Grp Pri Pre State Master addr
Virtual addr(s)
Description-----------------------------------------------------------------------------Gi 10/37 1 100 Y Master 200.200.200.200 200.200.200.201
Gi 10/37 2 100 Y Master 200.200.200.200 200.200.200.202 200.200.200.203
Description
Gi 10/37 3 100 Y Master 1.1.1.1
1.1.1.2
Gi 10/37 4 100 Y Master 200.200.200.200 200.200.200.206 200.200.200.207 ... short desc
Gi 10/37 254 254 Y Master 200.200.200.200 200.200.200.204 200.200.200.205
FTOS>

Table 58-1.

1494

|

Command Example Descriptions: show vrrp brief

Item

Description

Interface

Lists the interface type, slot and port on which the VRRP group is
configured.

Grp

Displays the VRRP group ID.

Pri

Displays the priority value assigned to the interface.
If the track command is configured to track that interface and the
interface is disabled, the cost is subtracted from the priority value
assigned to the interface.

Pre

States whether preempt is enabled on the interface.
• Y = Preempt is enabled.
• N = Preempt is not enabled.

Virtual Router Redundancy Protocol (VRRP)

Table 58-1.

Example

Command Example Descriptions: show vrrp brief

Item

Description

State

Displays the operational state of the interface by using one of the
following:
• NA/IF (the interface is not available).
• MASTER (the interface associated with the MASTER router).
• BACKUP (the interface associated with the BACKUP router).

Master addr

Displays the IP address of the MASTER router.

Virtual addr(s)

Displays the virtual IP addresses of the VRRP routers associated
with the interface.

FTOS>show vrrp
-----------------GigabitEthernet 12/3, VRID: 1, Net: 10.1.1.253
State: Master, Priority: 105, Master: 10.1.1.253 (local)
Hold Down: 0 sec, Preempt: TRUE, AdvInt: 1 sec
Adv rcvd: 0, Adv sent: 1862, Gratuitous ARP sent: 0
Virtual MAC address:
00:00:5e:00:01:01
Virtual IP address:
10.1.1.252
Authentication: (none)
Tracking states for 1 interfaces:
Up GigabitEthernet 12/17 priority-cost 10
-----------------GigabitEthernet 12/4, VRID: 2, Net: 10.1.2.253
State: Master, Priority: 110, Master: 10.1.2.253 (local)
Hold Down: 10 sec, Preempt: TRUE, AdvInt: 1 sec
Adv rcvd: 0, Adv sent: 1862, Gratuitous ARP sent: 0
Virtual MAC address:
00:00:5e:00:01:02
Virtual IP address:
10.1.2.252
Authentication: (none)
Tracking states for 2 interfaces:
Up GigabitEthernet 2/1 priority-cost 10
Up GigabitEthernet 12/17 priority-cost 10
FTOS>

Table 58-2.
Line Beginning
with

Command Example Description: show vrrp

Description

GigabitEthernet 12/
3...

Displays the Interface, the VRRP group ID, and the network address.
If the interface is not sending VRRP packets, 0.0.0.0 appears as the
network address.

State: master...

Displays the interface’s state:
• Na/If (not available),
• master (MASTER virtual router)
• backup (BACKUP virtual router)
the interface’s priority and the IP address of the MASTER.

Virtual Router Redundancy Protocol (VRRP) | 1495

www.dell.com | support.dell.com

Table 58-2.

Command Example Description: show vrrp

Hold Down:...

This line displays additional VRRP configuration information:
• Hold Down displays the hold down timer interval in seconds.
• Preempt displays TRUE if preempt is configured and FALSE if
preempt is not configured.
• AdvInt displays the Advertise Interval in seconds.

Adv rcvd:...

This line displays counters for the following:
• Adv rcvd displays the number of VRRP advertisements received on the
interface.
• Adv sent displays the number of VRRP advertisements sent on the
interface.
• Gratuitous ARP sent displays the number of gratuitous ARPs sent.

Virtual MAC address Displays the virtual MAC address of the VRRP group.
Virtual IP address

Displays the virtual IP address of the VRRP router to which the interface is
connected.

Authentication:...

States whether authentication is configured for the VRRP group. If it is, the
authentication type and the password are listed.

Tracking states...

This line is displayed if the track command is configured on an interface.
Below this line, the following information on the tracked interface is
displayed:
• Dn or Up states whether the interface is down or up.
• the interface type slot/port information

track
ces

Syntax

Monitor an interface and lower the priority value of the VRRP group on that interface if it is
disabled.
track interface [priority-cost cost]

To disable monitoring, use the no track interface command.

1496

|

Virtual Router Redundancy Protocol (VRRP)

Parameters

Defaults
Command Modes
Command
History

Usage
Information

interface

Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Loopback interface, enter the keyword loopback followed by a number
from 0 to 16383.
• For Port Channel interface types, enter the keyword port-channel followed
by the number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale
• For SONET interfaces, enter the keyword sonet followed by the slot/port
information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a VLAN interface, enter the keyword vlan followed by a number from 1
to 4094.

cost

(OPTIONAL) Enter a number as the amount to be subtracted from the priority
value.
Range: 1 to 254.
Default: 10.

cost = 10

VRRP
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

If the interface is disabled, the cost value is subtracted from the priority value and forces a
new MASTER election if the priority value is lower than the priority value in the BACKUP
virtual routers.

virtual-address
ces

Syntax

Configure up to 12 IP addresses of virtual routers in the VRRP group. You must set at least
one virtual address for the VRRP group to start sending VRRP packets.
virtual-address ip-address1 [... ip-address12]

To delete one or more virtual IP addresses, use the no virtual-address ip-address1 [...
ip-address12] command.

Virtual Router Redundancy Protocol (VRRP) | 1497

www.dell.com | support.dell.com

Parameters

Defaults
Command Modes

ip-address1

Enter an IP address of the virtual router in dotted decimal format.
The IP address must be on the same subnet as the interface’s primary IP
address.

... ip-address12

(OPTIONAL) Enter up to 11 additional IP addresses of virtual routers in
dotted decimal format. Separate the IP addresses with a space.
The IP addresses must be on the same subnet as the interface’s primary IP
address.

Not configured.
VRRP

Command
History

Usage
Information

Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

Version 7.4.1.0

Introduced support for telnetting to the VRRP group IP address assigned
using this command

pre-Version 6.2.1.1

Introduced on E-Series

The VRRP group only becomes active and sends VRRP packets when a virtual IP address is
configured. When you delete the virtual address, the VRRP group stops sending VRRP
packets.
A system message appears after you enter or delete the virtual-address command.
To guarantee that a VRRP group becomes MASTER, configure the VRRP group’s virtual
address with the same IP address as the interface’s primary IP address and change the
priority of the VRRP group to 255.
You can ping the virtual addresses configured in all VRRP groups.

vrrp delay minimum
Set the delay time for VRRP initialization after an interface comes up.
Syntax
Parameters

Defaults
Command Modes
Command
History

1498

|

vrrp delay minimum seconds
seconds

Enter the number of seconds for the delay for VRRP initialization after an
interface becomes operational.
Range: 0 to 900 (0 indicates no delay)

0
INTERFACE
Version 8.3.8.0

Virtual Router Redundancy Protocol (VRRP)

Introduced on S4810

Usage
Information

This command applies to a single interface.When used in conjunction with the vrrp delay reload
CLI, the later timer rules the VRRP enabling. For example, if vrrp delay reload is 600 and the
vrrp delay minimum is 300:

•
•

Related
Commands

When the system reloads, VRRP waits 600 seconds (10 minutes) to bring up
VRRP on all interfaces that are up and configured for vrrp.
When an interface comes up, whether as part of a system reload or an interface
reload, the system waits 300 seconds (5 minutes) to bring up VRRP on that
interface.

vrrp delay reload

Set the delay time for VRRP initialization after a system reboot.

vrrp delay reload
Set the delay time for VRRP initialization after a system reboot.

Syntax
Parameters

Defaults
Command Modes
Command
History
Usage
Information

vrrp delay minimum seconds
seconds

Enter the number of seconds for the delay.
Range: 0 to 900 (0 indicates no delay)

0
INTERFACE
Version 8.3.8.0

Introduced on S4810

This command applies to a all the VRRP configured interfaces on a system. When used in
conjunction with the vrrp delay minimum CLI, the later timer rules the VRRP enabling. For
example, if vrrp delay reload is 600 and the vrrp delay minimum is 300:

•
•

When the system reloads, VRRP waits 600 seconds (10 minutes) to bring up
VRRP on all interfaces that are up and configured for vrrp.
When an interface comes up, whether as part of a system reload or an interface
reload, the system waits 300 seconds (5 minutes) to bring up VRRP on that
interface.

You must save the configuration and reload the system for the delay timers to take affect.
Related
Commands

vrrp delay minimum

Set the delay time for VRRP initialization after a line card reboot.

vrrp-group
ces

Assign a VRRP ID to an interface. You can configure up to 12 VRRP groups per interface.

Virtual Router Redundancy Protocol (VRRP) | 1499

www.dell.com | support.dell.com

Syntax
Parameters

Defaults
Command Modes
Command
History

Usage
Information

Related
Commands

vrrp-group vrrp-id
vrrp-id

Enter a number as the group ID.
Range: 1 to 255.

Not configured.
INTERFACE
Version 8.3.7.0

Introduced on S4810

Version 7.6.1.0

Introduced on S-Series

Version 7.5.1.0

Introduced on C-Series

pre-Version 6.2.1.1

Introduced on E-Series

The VRRP group only becomes active and sends VRRP packets when a virtual IP address is
configured. When you delete the virtual address, the VRRP group stops sending VRRP
packets.
virtual-address

Assign up to 12 virtual IP addresses per VRRP group.

IPv6 VRRP Commands
The IPv6 VRRP commands are:

•
•
•
•

clear counters vrrp ipv6
debug vrrp ipv6
show vrrp ipv6
vrrp-ipv6-group

The following commands apply to IPv4 and IPv6:

•
•
•
•
•
•
•
•
•

1500

|

advertise-interval
description
disable
hold-time
preempt
priority
show config
track
virtual-address

Virtual Router Redundancy Protocol (VRRP)

clear counters vrrp ipv6
ecs

Syntax
Parameters

Clear the counters recorded for IPv6 VRRP groups.

clear counters vrrp ipv6 [vrid | vrf instance]
vrid

(OPTIONAL) Enter the number of an IPv6 VRRP group.
Range: 1 to 255

vrf instance

(OPTIONAL) E-Series only: Enter the name of a VRF instance (32 characters
maximum) to clear the counters of all IPv6 VRRP groups in the specified VRF.

Command Modes

EXEC Privilege

Command
History

Version 8.4.1.0

Introduced on E-Series ExaScale, C-Series, and S-Series. Support was
added for IPv6 VRRP groups in non-default VRF instances.

Version 8.3.10.0

Introduced on S4810

Version 8.3.2.0

Introduced on E-Series TeraScale

debug vrrp ipv6
ecs

Syntax
Parameters

Command Modes

Allows you to enable debugging of VRRP.

debug vrrp ipv6 interface [vrid] {all | packets | state | timer}

interface

Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by a
number:
E-Series Range: 1 to 255 for TeraScale
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a VLAN interface, enter the keyword vlan followed by the VLAN ID.
The VLAN ID range is from 1 to 4094.

vrid

(OPTIONAL) Enter a number from 1 to 255 as the VRRP group ID.

all

Enter the keyword all to enable debugging of all VRRP groups.

bfd

Enter the keyword bfd to enable debugging of all VFFP BFD interactions

database

Enter the keyword database to display changes related to group, prefix, and
interface entries in the VRRP table.

packets

Enter the keyword packets to enable debugging of VRRP control packets.

state

Enter the keyword state to enable debugging of VRRP state changes.

timer

Enter the keyword timer to enable debugging of the VRRP timer.

EXEC Privilege

Virtual Router Redundancy Protocol (VRRP) | 1501

www.dell.com | support.dell.com

Command
History

Usage
Information

Version 8.4.1.0

Introduced on E-Series ExaScale, C-Series, and S-Series.

Version 8.3.10.0

Introduced on S4180

Version 8.3.2.0

Introduced on E-Series TeraScale

If no options are specified, debug is active on all interfaces and all VRRP groups.

show vrrp ipv6
ecs

Syntax
Parameters

Command Modes

View the IPv6 VRRP groups that are active. If no VRRP groups are active, the FTOS returns
“No Active VRRP group.”
show vrrp ipv6 [vrid] [interface] [brief]
vrid

(OPTIONAL) Enter the Virtual Router Identifier for the VRRP group to view
only that group.
Range: 1 to 255.

interface

(OPTIONAL) Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet
followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by a
number:
E-Series Range: 1 to 255 for TeraScale
• For SONET interfaces, enter the keyword sonet followed by the slot/port
information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
followed by the slot/port information.
• For a VLAN interface, enter the keyword vlan followed by the VLAN ID.
The VLAN ID range is from 1 to 4094.

brief

(OPTIONAL) Enter the keyword brief to view a table of information on the
VRRP groups on the E-Series.

EXEC
EXEC Privilege

Command
History

1502

|

Version 8.3.10.0

Introduced on S4810

Version 8.3.2.0

Introduced

Virtual Router Redundancy Protocol (VRRP)

Example

FTOS#show vrrp ipv6
-----------------GigabitEthernet 5/6, IPv6 VRID: 255, Version: 3, Net: fe80::201:e8ff:fe7a:6bb9
VRF: 0 default-vrf
State: Master, Priority: 101, Master: fe80::201:e8ff:fe7a:6bb9 (local)
Hold Down: 0 centisec, Preempt: TRUE, AdvInt: 100 centisec
Accept Mode: FALSE, Master AdvInt: 100 centisec
Adv rcvd: 0, Bad pkts rcvd: 0, Adv sent: 64
Virtual MAC address:
00:00:5e:00:02:ff
Virtual IP address:
1::255 fe80::255

Table 58-3.
Line Beginning
with

Command Example Description: show vrrp ipv6

Description

GigabitEthernet...

Displays the Interface, the VRRP group ID, and the network address.
If the interface is no sending VRRP packets, 0.0.0.0 appears as the network
address.

VRF

VRF instance to which the interface (on which the VRRP group is configured)
belongs

State: master...

Displays the interface’s state:
• Na/If (not available),
• master (MASTER virtual router)
• backup (BACKUP virtual router)
the interface’s priority and the IP address of the MASTER.

Hold Down:...

This line displays additional VRRP configuration information:
• Hold Down displays the hold down timer interval in seconds.
• Preempt displays TRUE if preempt is configured and FALSE if preempt
is not configured.
• AdvInt displays the Advertise Interval in seconds.

Adv rcvd:...

This line displays counters for the following:
• Adv rcvd displays the number of VRRP advertisements received on the
interface.
• Adv sent displays the number of VRRP advertisements sent on the
interface.
• Bad pkts rcvd displays the number of invalid packets received on the
interface.

Virtual MAC address Displays the virtual MAC address of the VRRP group.
Virtual IP address

Displays the virtual IP address of the VRRP router to which the interface is
connected.

Tracking states...

Displays information on the tracked interfaces or objects configured for a
VRRP group (track command), including:
• UP or DOWN state of the tracked interface or object (Up or Dn)
• Interface type and slot/port or object number, description, and time since
the last change in the state of the tracked object
• Cost to be subtracted from the VRRP group priority if the state of the
tracked interface/object goes DOWN

Virtual Router Redundancy Protocol (VRRP) | 1503

www.dell.com | support.dell.com

vrrp-ipv6-group
ecs

Syntax
Parameters

Defaults
Command Modes
Command
History

Usage
Information

Assign an interface to a VRRP group.

vrrp-ipv6-group vrid
vrid

Enter the virtual-router ID number of the VRRP group.
VRID range (C-Series and S-Series): 1-255.
VRID range (E-Series): 1-255 when VRF microcode is not loaded and 1-15 when
VRF microcode is loaded.

Not configured.
INTERFACE
Version 8.4.2.1

The range of valid VRID values on the E-Series when VRF microcode is
loaded in CAM changed to 1-15.

Version 8.4.1.0

Introduced on E-Series ExaScale, C-Series, and S-Series.

Version 8.3.7.0

Introduced on S4810

Version 8.3.2.0

Introduced on E-Series TeraScale

The VRRP group only becomes active and sends VRRP packets when a link-local virtual IP
address is configured. When you delete the virtual address, the VRRP group stops sending
VRRP packets.
E-Series ExaScale and TeraScale only: Starting in release 8.4.2.1, you can configure up to
255 VRRP groups per interface if VRF microcode is not loaded, and up to 15 groups if VRF
microcode is loaded.
E-Series ExaScale and TeraScale only: Starting in release 8.4.2.1, the VRID used by the
VRRP protocol changes according to whether VRF microcode is loaded or not:

•

•

When VRF microcode is not loaded in CAM, the VRID for a VRRP group is the
same as the VRID number configured with the vrrp-group or vrrp-ipv6-group
command.
When VRF microcode is loaded in CAM, the VRID for a VRRP group is equal to
16 times the vrrp-group or vrrp-ipv6-group vrid number plus the ip vrf vrf-id
number.

For example, if VRF microcode is loaded and VRRP group 10 is configured in VRF 2, the
VRID used for the VRRP group is (16 x 10) + 2, or 162. This VRID value is used in the lowest
byte of the virtual MAC address of the VRRP group and is also used for VRF routing.
Important: You must configure the same VRID on neighboring routers (Dell Force10 or
non-Dell Force10) in the same VRRP group in order for all routers to interoperate.
Related
Commands

1504

|

virtual-address

Virtual Router Redundancy Protocol (VRRP)

Assign up to 12 virtual IP addresses per VRRP group.

59
S-Series Debugging and Diagnostics
The basic debugging and diagnostic commands are supported by FTOS on all Dell Force10
platforms, as indicated by the characters that appear under each of the command headings:
e E-Series, c C-Series, s S-Series (S25/S50), or
.
This chapter contains three sections:
•
•
•

Offline Diagnostic Commands
Buffer Tuning Commands
Hardware Commands

Offline Diagnostic Commands
The offline diagnostics test suite is useful for isolating faults and debugging hardware. While
tests are running, FTOS results are saved as a text file (TestReport-SU-X.txt) in the flash
directory. This show file command is available only on master and standby.

Important Points to Remember
•
•

•
•

Offline diagnostics can only be run when the unit is offline.
You can only run offline diagnostics on a unit to which you are connected via
console.
In other words, you cannot run diagnostics on a unit to which you are connected
via a stacking link.
Diagnostic results are printed to the screen. FTOS does not write them to
memory.
Diagnostics only test connectivity, not the entire data path.

The offline diagnostics commands are:
•
•
•

diag stack-unit
offline stack-unit
online stack-unit

S-Series Debugging and Diagnostics | 1505

www.dell.com | support.dell.com

diag stack-unit
s
Syntax
Parameters

Defaults
Command Modes
Command
History

Run offline diagnostics on a stack unit.
diag stack-unit number [alllevels | level0 | level1 | level2] verbose testname
number

Enter the stack-unit number.
Range: 0 to 7

alllevels

Enter the keyword alllevels to run the complete set of offline diagnostic tests.

level0

Enter the keyword level0 to run Level 0 diagnostics. Level 0 diagnostics check for
the presence of various components and perform essential path verifications. In
addition, they verify the identification registers of the components on the board.

level1

Enter the keyword Level1 to run Level 1 diagnostics. Level 1 diagnostics is a
smaller set of diagnostic tests with support for automatic partitioning. They perform
status/self test for all the components on the board and test their registers for
appropriate values. In addition, they perform extensive tests on memory devices
(e.g., SDRAM, flash, NVRAM, EEPROM, and CPLD) wherever possible. There
are no tests on 10G links. At this level, stack ports are shut down automatically.

level2

Enter the keyword level2 to run Level 2 diagnostics. Level 2 diagnostics is a full set
of diagnostic tests with no support for automatic partitioning. Level 2 diagnostics
are used primarily for on-board loopback tests and more extensive component
diagnostics. Various components on the board are put into loop back mode, and test
packets are transmitted through those components. These diagnostics also perform
snake tests using VLAN configurations. You must physically remove the unit from
the stack to test 10G links.

verbose

Enter the keyword verbose to run the diagnostic in verbose mode. Verbose mode
gives more information in the output than standard mode.

testname

Enter the keyword level2 to run a specific test case. Enclose the test case name in
double quotes (“ “). For example: diag stack-unit 1 level1 testname “first”

None
EXEC Privilege
Version 8.3.1.0

Introduced the verbose option.

Version 7.7.1.0

Introduced on S-Series

offline stack-unit
sz

Place a stack unit in the offline state.

Syntax

offline stack-unit number

Parameters

Defaults

1506

|

number

None

S-Series Debugging and Diagnostics

Enter the stack unit number.
Range: 0 to 7

Command Mode
Command
History

EXEC Privilege
H

Version 8.3.11.1

Introduced on Z9000

Version 8.2.1.0

Added warning message to off-line diagnostic

Version 7.7.1.0

Introduced on S-Series

show environment
(S-Series)

View S-Series system component status (for example, temperature,
voltage).

Related
Commands

H

Usage
Information

You cannot enter this command on a Master or Standby unit.
The system reboots when the off-line diagnostics complete. This is an automatic process. A
warning message appears when the offline stack-unit command is implemented.
Warning - Diagnostic execution will cause stack-unit to reboot after completion of
diags.
Proceed with Offline-Diags [confirm yes/no]:y

online stack-unit
sz

Place a stack unit in the online state.

Syntax

online stack-unit number

Parameters

Defaults
Command Mode
Command
History

Related
Commands

number

Enter the stack unit number.
S4810 range: 0 to 11
Z9000 range: 0 to 7

None
EXEC Privilege
H

Version 8.3.11.1

Introduced on Z9000

Version 7.7.1.0

Introduced on S-Series

show environment
(S-Series)

View S-Series system component status (for example, temperature,
voltage).

S-Series Debugging and Diagnostics | 1507

www.dell.com | support.dell.com

Buffer Tuning Commands
The buffer tuning commands are:
•
•
•
•
•
•

buffer (Buffer Profile)
buffer (Configuration)
buffer-profile (Configuration)
buffer-profile (Interface)
show buffer-profile
show buffer-profile interface

Warning: Altering the buffer allocations is a sensitive operation. Do not use any buffer tuning commands
without first contacting the Dell Force10 Technical Assistance Center.

buffer (Buffer Profile)
cs

Allocate an amount of dedicated buffer space, dynamic buffer space, or packet pointers to
queues 0 to 3.

Syntax

buffer [dedicated | dynamic | packets-pointers] queue0 number queue1 number queue2 number
queue3 number

Parameters

1508

|

dedicated

Enter this keyword to configure the amount of dedicated buffer space
per queue.

dynamic

Enter this keyword to configure the amount of dynamic buffer space
per Field Processor.

packets-pointers

Enter this keyword to configure the number of packet pointers per
queue.

queue0 number

Enter this keyword to allocate an amount of buffer space or packet
pointers to Queue 0.
Dedicated Buffer Range: 0-2013
Dynamic Buffer Range:
FP: 0-2013
CSF: 0-131200 (in multiples of 80)
Packet Pointer Range: 0-2047

queue1 number

Enter this keyword to allocate an amount of buffer space or packet
pointers to Queue 1.
Dedicated Buffer Range: 0-2013
Dynamic Buffer Range:
FP: 0-2013
CSF: 0-131200 (in multiples of 80)
Packet Pointer Range: 0-2047

S-Series Debugging and Diagnostics

Defaults
Command Mode
Command
History

Related
Commands

queue2 number

Enter this keyword to allocate an amount of buffer space or packet
pointers to Queue 2.
Dedicated Buffer Range: 0-2013
Dynamic Buffer Range:
FP: 0-2013
CSF: 0-131200 (in multiples of 80)
Packet Pointer Range: 0-2047

queue3 number

Enter this keyword to allocate an amount of buffer space or packet
pointers to Queue 3.
Dedicated Buffer Range: 0-2013
Dynamic Buffer Range:
FP: 0-2013
CSF: 0-131200 (in multiples of 80)
Packet Pointer Range: 0-2047

None
BUFFER PROFILE
H

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

buffer-profile
(Configuration)

Create a buffer profile that can be applied to an interface.

buffer (Configuration)
cs

Apply a buffer profile to all Field or Switch Fabric processors in a port-pipe.
buffer [csf | fp-uplink] linecard slot port-set port-pipe buffer-policy buffer-profile

Parameters

csf

Enter this keyword to apply a buffer profile to all Switch Fabric
processors in a port-pipe.

fp-uplink

Enter this keyword to apply a buffer profile to all Field Processors in
a a port-pipe.

linecard slot

Enter the keyword linecard followed by the line card slot number.

port-set port-pipe

Enter the keyword port-set followed by the port-pipe number.
Range: 0-3 on C-Series, 0-1 on S-Series

buffer-policy buffer-profile

Enter the keyword buffer-policy followed by the name of a buffer
profile you created.

None
Command Mode

BUFFER PROFILE

S-Series Debugging and Diagnostics | 1509

www.dell.com | support.dell.com

Usage
Information

If you attempt to apply a buffer profile to a non-existent port-pipe, FTOS displays the
following message. However, the configuration still appears in the running-config.
%DIFFSERV-2-DSA_BUFF_CARVING_INVALID_PORT_SET: Invalid FP port-set 2 for linecard 2.
Valid range of port-set is <0-1>

When you remove a buffer-profile using the command no buffer-profile [fp | csf] from
CONFIGURATION mode, the buffer-profile name still appears in the output of show
buffer-profile [detail | summary]. After a line card reset, the buffer profile correctly returns to
the default values, but the profile name remains. Remove it from the show buffer-profile [detail
| summary] command output by entering no buffer [fp-uplink | csf] linecard port-set buffer-policy
from CONFIGURATION mode and no buffer-policy from INTERFACE mode.
Command
History

H

Related
Commands

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

buffer-profile
(Configuration)

Create a buffer profile that can be applied to an interface.

buffer-profile (Configuration)
cs

Create a buffer profile that can be applied to an interface.

Syntax

buffer-profile {{fp | csf} profile-name | global {1Q|4Q}

Parameters

Defaults
Command Mode
Command
History

Related
Commands

1510

|

fp

Enter this keyword to create a buffer profile for the Field Processor.

csf

Enter this keyword to create a buffer profile for the Switch Fabric
Processor.

profile-name

Create a name for the buffer profile.

global

Apply one of two pre-defined buffer profiles to all of the port-pipes
in the system.

1Q

Enter this keyword to choose a pre-defined buffer profile for single
queue (i.e non-QoS) applications.

4Q

Enter this keyword to choose a pre-defined buff fer profile for four
queue (i.e QoS) applications.

global 4Q
CONFIGURATION
H

Version 7.8.1.0

Added global keyword.

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

buffer (Buffer Profile)

Allocate an amount of dedicated buffer space, dynamic buffer
space, or packet pointers to queues 0 to 3.

S-Series Debugging and Diagnostics

Usage
Information

The buffer-profile global command fails if you have already applied a custom buffer-profile on
an interface. Similarly, when buffer-profile global is configured, you cannot not apply
buffer-profile on any interface.
If the default buffer-profile (4Q) is active, FTOS displays an error message instructing you to
remove the default configuration using the command no buffer-profile global.
You must reload the system for the global buffer-profile to take effect.

buffer-profile (Interface)
cs

Apply a buffer profile to an interface.

Syntax

buffer-profile profile-name

Parameters

Defaults
Command Mode
Command
History

Related
Commands

profile-name

Enter the name of the buffer profile you want to apply to the
interface.

None
INTERFACE
H

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

buffer-profile
(Configuration)

Create a buffer profile that can be applied to an interface.

show buffer-profile
cs

Display the buffer profile that is applied to an interface.

Syntax

show buffer-profile {detail | summary} {csf | fp-uplink}

Parameters

Defaults
Command Mode

detail

Display the buffer allocations of the applied buffer profiles.

summary

Display the buffer-profiles that are applied to line card port-pipes in
the system.

csf

Display the Switch Fabric Processor buffer profiles that you have
applied to line card port-pipes in the system.

fp-uplink

Display the Field Processor buffer profiles that you have applied to
line card port-pipes in the system.

None
INTERFACE

S-Series Debugging and Diagnostics | 1511

www.dell.com | support.dell.com

Command
History

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

Example

FTOS#show buffer-profile summary fp-uplink
Linecard
Port-set
Buffer-profile
0
0
test1
4
0
test2
FTOS#

Related
Commands

buffer-profile
(Configuration)

Create a buffer profile that can be applied to an interface.

show buffer-profile interface
cs

Display the buffer profile that is applied to an interface.

Syntax

show buffer-profile {detail | summary} interface interface slot/port

Parameters

Defaults
Command Mode
Command
History

Example

Related
Commands

1512

Version 7.7.1.0

|

detail

Display the buffer allocations of a buffer profile.

summary

Display the Field Processors and Switch Fabric Processors that are
applied to line card port-pipes in the system.

interface interface

Enter the keyword interface followed by the interface type, either
gigabitethernet or tengigabitethernet.

slot/port

Enter the slot and port number of the interface.

None
INTERFACE
H

Version 7.7.1.0

Introduced on S-Series

Version 7.6.1.0

Introduced on C-Series

FTOS#show buffer-profile detail csf linecard 4 port-set 0
Linecard 4 Port-set 0
Buffer-profile test
Queue#
Dedicated Buffer
Buffer Packets
(Bytes)
0
36960
718
1
18560
358
2
18560
358
3
18560
358
4
9600
64
5
9600
64
6
9600
64
7
9600
63
FTOS#

buffer-profile
(Configuration)

S-Series Debugging and Diagnostics

Create a buffer profile that can be applied to an interface.

Hardware Commands
These commands display information from a hardware sub-component or ASIC.
The commands are:
•
•
•
•
•
•
•

clear hardware stack-unit
clear hardware system-flow
hardware watchdog
show hardware layer2 acl
show hardware layer3
show hardware stack-unit
show hardware system-flow

clear hardware stack-unit
s
Syntax

Parameters

Defaults
Command Modes

Clear statistics from selected hardware components.
clear hardware stack-unit 0–7 {counters | unit 0–1 counters | cpu data-plane statistics | cpu
party-bus statistics | stack-port 0–52}
stack-unit 0-7

Enter the keyword stack-unit followed by 0 to 7 to select a particular
stack member and then enter one of the following command options
to clear a specific collection of data.

counters

Enter the keyword counters to clear the counters on the selected
stack member.

unit 0–1 counters

Enter the keyword unit along with a port-pipe number, from 0 to 1,
followed by the keyword counters to clear the counters on the
selected port-pipe.
Note: S25 models (S25N, S25P, S25V, etc.) have only port-pipe 0.

cpu data-plane statistics

Enter the keywords cpu data-plane statistics to clear the data plane
statistics.

cpu party-bus statistics

Enter the keywords cpu party-bus statistics to clear the
management statistics.

stack-port 0–52

Enter the keyword stack-port followed by the port number of the
stacking port to clear the statistics of the particular stacking port.
Range: 0 to 52
Note: You can identify stack port numbers by physical inspection of
the rear modules. The numbering is the same as for the 10G ports.
You can also inspect the output of the show system stack-ports
command.

No default behavior or values
EXEC Privilege

S-Series Debugging and Diagnostics | 1513

www.dell.com | support.dell.com

Command
History
Related
Commands

Version 7.8.1.0

Introduced on S-Series

show hardware stack-unit

Display the data plane or management plane input and output statistics
of the designated component of the designated stack member.

clear hardware system-flow
s
Syntax
Parameters

Defaults
Command Modes
Command
History
Related
Commands

Clear system-flow statistics from selected hardware components.
clear hardware system-flow layer2 stack-unit 0-7 port-set 0-1 counters
stack-unit 0-7

Enter the keyword stack-unit followed by 0 to 7 to select a particular
stack member and then enter one of the following command options
to clear a specific collection of data.

port-set 0–1 counters

Enter the keyword port-set along with a port-pipe number, from 0 to
1, followed by the keyword counters to clear the system-flow
counters on the selected port-pipe.
Note: S25 models (S25N, S25P, S25V, etc.) have only port-pipe 0.

No default behavior or values
EXEC Privilege
Version 7.8.1.0

Introduced on S-Series

show hardware stack-unit

Display the data plane or management plane input and output statistics
of the designated component of the designated stack member.

hardware watchdog
s
Syntax
Defaults
Command Mode
Command
History
Usage
Information

1514

|

Set the watchdog timer to trigger a reboot and restart the system.
hardware watchdog

Enabled
CONFIGURATION
Version 7.8.1.0

Introduced

This command enables a hardware watchdog mechanism that automatically reboots an FTOS
switch/router with a single unresponsive unit. This is a last resort mechanism intended to
prevent a manual power cycle.

S-Series Debugging and Diagnostics

show hardware layer2 acl
s
Syntax
Parameters

Defaults
Command Modes
Command
History

Display Layer 2 ACL data for the selected stack member and stack member port-pipe.
show hardware layer2 acl stack-unit 0-7 port-set 0-1
stack-unit 0-7

Enter the keyword stack-unit followed by 0 to 7 to select a stack ID.

port-set 0-1

Enter the keyword port-set with a port-pipe number — 0 or 1. The S25
models of the S-Series have only port-pipe 0.

No default behavior
EXEC Privilege
Version 7.8.1.0

Introduced on S-Series

show hardware layer3
s
Syntax
Parameters

Defaults
Command Modes
Command
History

Display Layer 3 ACL or QoS data for the selected stack member and stack member port-pipe.
show hardware layer3 {acl | qos} stack-unit 0-7 port-set 0-1
acl | qos

Enter either the keyword acl or the keyword qos to select between
ACL or QoS data.

stack-unit 0-7

Enter the keyword stack-unit followed by a numeral from 0 to 7 to
select a stack ID.

port-set 0-1

Enter the keyword port-set with a port-pipe number — 0 or 1. The
S25 models of the S-Series have only port-pipe 0.

No default behavior
EXEC Privilege
Version 7.8.1.0

Introduced on S-Series

show hardware stack-unit
s
Syntax

Display the data plane or management plane input and output statistics of the designated
component of the designated stack member.
show hardware stack-unit 0-7 {buffer [buffer unit | port [(0-27) | all] total buffer | buffer unit (1) port
(0-64) queue [(0-14) | a11] buffer-info]} {cpu data-plane statistics [stack-port 0-52] | cpu party-bus
statistics | drops [unit 0-1 [port 0-27]] | stack-port 0-52 | unit 0-1 {counters | details | port-stats

[detail] | register}}

S-Series Debugging and Diagnostics | 1515

www.dell.com | support.dell.com

Parameters

stack-unit 0-7
{command-option}

Enter the keyword stack-unit followed by 0 to 7 to select a particular
stack member and then enter one of the following command options
to display a collection of data based on the option entered.

buffer

Enter the keyword buffer, optionally followed by the keywords
total-buffer to show the total buffer statistics per stack unit. Enter the
keywords buffer unit then total-buffer to display the buffer details
per unit and mode of allocation. To display the forwarding plane
statistics containing the packet buffer usage per port per stack unit,
enter the keywords buffer unit followed by port and the port number
(0-64 or all), then buffer-info. To display the forwarding plane
statistics containing the packet buffer statistics per COS per port,
enter the keywords buffer unit and port (0-64), and queue (0-14 or
all), and buffer-info.
Buffer unit default: 1

cpu data-plane statistics

Enter the keywords cpu data-plane statistics, optionally followed
by the keywords stack port and its number — 0 to 52 — to display
the data plane statistics, which shows the High Gig (Higig) port raw
input/output counter statistics to which the stacking module is
connected.

cpu party-bus statistics

Enter the keywords cpu party-bus statistics, to display the
Management plane input/output counter statistics of the pseudo party
bus interface.

drops [unit 0-1 [port 0-27]]

Enter the drops keyword to display internal drops on the selected
stack member. Optionally, use the unit keyword with 0 or 1 to select
port-pipe 0 or 1, and then use port 0-27 to select a port on that
port-pipe.

stack-port 0-52

Enter this keyword and a stacking port number to select a stacking
port for which to display statistics. Identify the stack port number as
you would to identify a 10G port that was in the same place in one of
the rear modules.
Note: You can identify stack port numbers by physical inspection of
the rear modules. The numbering is the same as for the 10G ports.
You can also inspect the output of the show system stack-ports
command.

unit 0-1 {counters | details
| port-stats [detail] |
register}

Defaults
Command Modes

Enter the unit keyword followed by 0 or 1 for port-pipe 0 or 1, and
then enter one of the following keywords to troubleshoot errors on
the selected port-pipe and to give status on why a port is not coming
up to register level: counters, details, port-stats [detail], or register

No default behavior
EXEC
EXEC Privilege

Command
History

1516

|

Version 8.3.10.0

S-Series Debugging and Diagnostics

Added the buffer parameter for S4810

Example
(data plane
statistics)

Example
(party-bus
statistics)

Version 7.8.1.0

Modified: stack-port keyword range expanded from 49-52 to 0-52; output
modified for the cpu data-plane statistics option; the following options were
added: drops [unit 0-1 [port 0-27]]; unit 0-1 {counters | details | port-stats
[detail] | register}

Version 7.7.1.0

Introduced on S-Series

FTOS#show hardware stack-unit 0 cpu data-plane statistics stack-port 49
Input Statistics:
1856 packets, 338262 bytes
141 64-byte pkts, 1248 over 64-byte pkts, 11 over 127-byte pkts
222 over 255-byte pkts, 236 over 511-byte pkts, 0 over 1023-byte pkts
919 Multicasts, 430 Broadcasts
0 runts, 0 giants, 0 throttles
0 CRC, 0 overrun, 0 discarded
Output Statistics:
325 packets, 27629 bytes, 0 underruns
9 64-byte pkts, 310 over 64-byte pkts, 1 over 127-byte pkts
1 over 255-byte pkts, 2 over 511-byte pkts, 2 over 1023-byte pkts
0 Multicasts, 3 Broadcasts, 322 Unicasts
0 throttles, 0 discarded, 0 collisions
Rate info (interval 299 seconds):
Input 00.00 Mbits/sec
Output 00.00 Mbits/sec
FTOS#
FTOS#show hardware stack-unit 0 cpu party-bus statistics
Input Statistics:
8189 packets, 8076608 bytes
0 dropped, 0 errors
Output Statistics:
366 packets, 133100 bytes
0 errors
FTOS#

Example
(drop summary
for switch)

FTOS#sh hard stack-unit 0 drops
UNIT No: 0
Total Ingress Drops: 0
Total IngMacDrops: 0
Total MmuDrops: 0
Total EgMacDrops: 0
Total Egress Drops: 0
FTOS#

Example
(drop summary
per port)

FTOS#sh hard stack-unit 0 drops unit 0
PortNumber Ingress Drops IngMac Drops Total Mmu Drops EgMac Drops Egress Drops
100 000
200 000
300 000
400 000
FTOS#

Example
(drop counters
per port)

FTOS#show hardware stack-unit
--- Ingress Drops
--Ingress Drops
IBP CBP Full Drops
PortSTPnotFwd Drops
IPv4 L3 Discards
Policy Discards
Packets dropped by FP
(L2+L3) Drops

0 drops unit 1 port 27
:
:
:
:
:
:
:

0
0
0
0
0
0
0

S-Series Debugging and Diagnostics | 1517

www.dell.com | support.dell.com

Port bitmap zero Drops
Rx VLAN Drops
--- Ingress MAC counters--Ingress FCSDrops
Ingress MTUExceeds
--- MMU Drops
--HOL DROPS
TxPurge CellErr
Aged Drops
--- Egress MAC counters--Egress FCS Drops
--- Egress FORWARD PROCESSOR
IPv4 L3UC Aged & Drops
TTL Threshold Drops
INVALID VLAN CNTR Drops
L2MC Drops
PKT Drops of ANY Conditions
Hg MacUnderflow
TX Err PKT Counter
FTOS#

1518

|

: 0
: 0
: 0
: 0
: 0
: 0
: 0
: 0
Drops
: 0
: 0
: 0
: 0
: 0
: 0
: 0 25

---

Example
(port-statistics)

FTOS#show hardware stack-unit 0
ena/ speed/ link auto
port link duplex scan neg?
ge0 down
SW
Yes
ge1 !ena
SW
Yes
ge2 !ena
SW
Yes
ge3 !ena
SW
Yes
ge4 !ena
SW
Yes
ge5 !ena
SW
Yes
ge6 !ena
SW
Yes
ge7 !ena
SW
Yes
ge8 !ena
SW
Yes
ge9 !ena
SW
Yes
ge10 !ena
SW
Yes
ge11 !ena
SW
Yes
ge12 !ena
SW
Yes
ge13 !ena
SW
Yes
ge14 !ena
SW
Yes
ge15 !ena
SW
Yes
ge16 !ena
SW
Yes
ge17 !ena
SW
Yes
ge18 !ena
SW
Yes
ge19 !ena
SW
Yes
ge20 !ena
SW
Yes
ge21 !ena
SW
Yes
ge22 !ena
SW
Yes
ge23 !ena
SW
Yes
hg0 up
12G FD
SW
No
hg1 up
12G FD
SW
No
hg2 down 10G FD
SW
No
hg3 down 10G FD
SW
No
0
FTOS#

Example
(unit 1 register)

FTOS#show hardware stack-unit 0 unit 1 register
0x0068003c AGINGCTRMEMDEBUG.mmu0 = 0x00000000
0x0068003d AGINGEXPMEMDEBUG.mmu0 = 0x00000000
0x00680017 ASFCONFIG.mmu0 = 0x0000000e
0x0060004c ASFPORTSPEED.ge0 = 0x00000000
0x0060104c ASFPORTSPEED.ge1 = 0x00000000
0x0060204c ASFPORTSPEED.ge2 = 0x00000000
0x0060304c ASFPORTSPEED.ge3 = 0x00000000

S-Series Debugging and Diagnostics

unit 0 port-stats
STP
state
pause discrd
Block
Untag
Block
Tag
Block
Tag
Block
Tag
Forward
Tag
Forward
Tag
Forward
Tag
Forward
Tag
Forward
Tag
Forward
Tag
Forward
Tag
Forward
Tag
Forward
Tag
Forward
Tag
Forward
Tag
Forward
Tag
Forward
Tag
Forward
Tag
Forward
Tag
Forward
Tag
Forward
Tag
Forward
Tag
Forward
Tag
Forward
Tag
Forward
None
Forward
None
Forward
None
Forward
None

lrn
ops
FA
FA
FA
FA
F
F
F
F
F
F
F
F
F
F
F
F
F
F
F
F
F
F
F
F
F
F
F
F

inter
face
SGMII
SGMII
SGMII
SGMII
SGMII
SGMII
SGMII
SGMII
SGMII
SGMII
SGMII
SGMII
SGMII
SGMII
SGMII
SGMII
SGMII
SGMII
SGMII
SGMII
SGMII
SGMII
SGMII
SGMII
XGMII
XGMII
XGMII
XGMII

max
frame
1554
1554
1554
1554
1554
1554
1554
1554
1554
1554
9252
9252
1554
1554
1554
1554
1554
1554
1554
1554
1554
1554
1554
1554
16360
16360
16360
16360

loop
back

0x0060404c
0x0060504c
0x0060604c
0x0060704c
0x0060804c
0x0060904c
0x0060a04c
0x0060b04c
0x0060c04c
0x0060d04c
0x0060e04c
0x0060f04c
0x0061004c
0x0061104c
0x0061204c
0x0061304c
0x0061404c
0x0061504c
0x0061604c
0x0061704c
0x0061804c
0x0061904c
0x0061a04c
0x0061b04c
0x0061c04c
0x00780000
0x0e700102
0x0e701102
0x0e702102
0x0e703102
0x0e704102
0x0e705102
0x0e706102
0x0e707102
0x0e708102
0x0e709102
0x0e70a102
0x0e70b102
0x0e70c102
0x0e70d102
0x0e70e102
0x0e70f102
0x0e710102
0x0e711102
0x0e712102
0x0e713102
0x0e714102
0x0e715102
0x0e716102
0x0e717102
0x0e718102
0x0e719102
0x0e71a102
0x0e71b102
0x0e71c102
0x0b700001
0x0b701001
0x0b702001
0x0b703001
0x0b704001
0x0b705001
0x0b706001
0x0b707001
0x0b708001
0x0b709001

ASFPORTSPEED.ge4 = 0x00000000
ASFPORTSPEED.ge5 = 0x00000000
ASFPORTSPEED.ge6 = 0x00000000
ASFPORTSPEED.ge7 = 0x00000000
ASFPORTSPEED.ge8 = 0x00000000
ASFPORTSPEED.ge9 = 0x00000000
ASFPORTSPEED.ge10 = 0x00000000
ASFPORTSPEED.ge11 = 0x00000000
ASFPORTSPEED.ge12 = 0x00000000
ASFPORTSPEED.ge13 = 0x00000000
ASFPORTSPEED.ge14 = 0x00000000
ASFPORTSPEED.ge15 = 0x00000000
ASFPORTSPEED.ge16 = 0x00000000
ASFPORTSPEED.ge17 = 0x00000000
ASFPORTSPEED.ge18 = 0x00000000
ASFPORTSPEED.ge19 = 0x00000000
ASFPORTSPEED.ge20 = 0x00000000
ASFPORTSPEED.ge21 = 0x00000000
ASFPORTSPEED.ge22 = 0x00000000
ASFPORTSPEED.ge23 = 0x00000005
ASFPORTSPEED.hg0 = 0x00000007
ASFPORTSPEED.hg1 = 0x00000007
ASFPORTSPEED.hg2 = 0x00000000
ASFPORTSPEED.hg3 = 0x00000000
ASFPORTSPEED.cpu0 = 0x00000000
AUX_ARB_CONTROL.ipipe0 = 0x0000001c
BCAST_BLOCK_MASK.ge0 = 0x00000000
BCAST_BLOCK_MASK.ge1 = 0x00000000
BCAST_BLOCK_MASK.ge2 = 0x00000000
BCAST_BLOCK_MASK.ge3 = 0x00000000
BCAST_BLOCK_MASK.ge4 = 0x00000000
BCAST_BLOCK_MASK.ge5 = 0x00000000
BCAST_BLOCK_MASK.ge6 = 0x00000000
BCAST_BLOCK_MASK.ge7 = 0x00000000
BCAST_BLOCK_MASK.ge8 = 0x00000000
BCAST_BLOCK_MASK.ge9 = 0x00000000
BCAST_BLOCK_MASK.ge10 = 0x00000000
BCAST_BLOCK_MASK.ge11 = 0x00000000
BCAST_BLOCK_MASK.ge12 = 0x00000000
BCAST_BLOCK_MASK.ge13 = 0x00000000
BCAST_BLOCK_MASK.ge14 = 0x00000000
BCAST_BLOCK_MASK.ge15 = 0x00000000
BCAST_BLOCK_MASK.ge16 = 0x00000000
BCAST_BLOCK_MASK.ge17 = 0x00000000
BCAST_BLOCK_MASK.ge18 = 0x00000000
BCAST_BLOCK_MASK.ge19 = 0x00000000
BCAST_BLOCK_MASK.ge20 = 0x00000000
BCAST_BLOCK_MASK.ge21 = 0x00000000
BCAST_BLOCK_MASK.ge22 = 0x00000000
BCAST_BLOCK_MASK.ge23 = 0x00000000
BCAST_BLOCK_MASK.hg0 = 0x00000000
BCAST_BLOCK_MASK.hg1 = 0x00000000
BCAST_BLOCK_MASK.hg2 = 0x00000000
BCAST_BLOCK_MASK.hg3 = 0x00000000
BCAST_BLOCK_MASK.cpu0 = 0x00000000
BCAST_STORM_CONTROL.ge0 = 0x00000000
BCAST_STORM_CONTROL.ge1 = 0x00000000
BCAST_STORM_CONTROL.ge2 = 0x00000000
BCAST_STORM_CONTROL.ge3 = 0x00000000
BCAST_STORM_CONTROL.ge4 = 0x00000000
BCAST_STORM_CONTROL.ge5 = 0x00000000
BCAST_STORM_CONTROL.ge6 = 0x00000000
BCAST_STORM_CONTROL.ge7 = 0x00000000
BCAST_STORM_CONTROL.ge8 = 0x00000000
BCAST_STORM_CONTROL.ge9 = 0x00000000

S-Series Debugging and Diagnostics | 1519

www.dell.com | support.dell.com

0x0b70a001 BCAST_STORM_CONTROL.ge10 = 0x00000000
!------------------ output truncated ---------------!

Example
(unit details)

FTOS#
show hardware stack-unit 0 unit 1 details
******************************************************
The total no of FP & CSF Devices in the Card is 2
The total no of FP Devices in the Card is 2
The total no of CSF Devices in the Card is 0
The number of ports in device 0 is - 24
The number of Hg ports in devices 0 is - 4
The CPU Port of the device is 28
The number of ports in device 1 is - 24
The number of Hg ports in devices 1 is - 4
The CPU Port of the device is 28
The staring unit no the SWF in the device is 0
******************************************************
The Current Link Status Is
Front End Link Status
0x000000000000400000000000
Front End Port Present Status 0x000000000000000000000000
Back Plane Link Status
0x00000000
******************************************************
Link Status of all the ports in the Device - 1
The linkStatus of Front End Port 0 is FALSE
The linkStatus of Front End Port 1 is FALSE
The linkStatus of Front End Port 2 is FALSE
The linkStatus of Front End Port 3 is FALSE
The linkStatus of Front End Port 4 is FALSE
The linkStatus of Front End Port 5 is FALSE
The linkStatus of Front End Port 6 is FALSE
The linkStatus of Front End Port 7 is FALSE
The linkStatus of Front End Port 8 is FALSE
The linkStatus of Front End Port 9 is FALSE
The linkStatus of Front End Port 10 is FALSE
The linkStatus of Front End Port 11 is FALSE
The linkStatus of Front End Port 12 is FALSE
The linkStatus of Front End Port 13 is FALSE
The linkStatus of Front End Port 14 is FALSE
The linkStatus of Front End Port 15 is FALSE
The linkStatus of Front End Port 16 is FALSE
The linkStatus of Front End Port 17 is FALSE
The linkStatus of Front End Port 18 is FALSE
The linkStatus of Front End Port 19 is FALSE
The linkStatus of Front End Port 20 is FALSE
The linkStatus of Front End Port 21 is FALSE
The linkStatus of Front End Port 22 is FALSE
The linkStatus of Front End Port 23 is TRUE
The linkStatus of Hg Port 24 is TRUE
The linkStatus of Hg Port 25 is TRUE
The linkStatus of Hg Port 26 is FALSE
The linkStatus of Hg Port 27 is FALSE
!------------------ output truncated ---------------!

1520

|

S-Series Debugging and Diagnostics

Example
(Per Stack Unit
buffer statistics)

Example
(Per Port buffer
statistics for
specific port)
Example
(Queue buffer
statistics)

Related
Commands

FTOS(conf)#sh hardware stack-unit 0 buffer total-buffer
FTOS#sh hardware stack-unit 0 buffer total-buffer
----- Buffer Details for Stack-Unit 0 ----Total Buffers allocated per Stack-Unit 46080

FTOS(conf)#sh hardware stack-unit 0 buffer unit 0 port 1 buffer-info
----- Buffer Stats for Unit 0 Port 1 ----Maximum Shared Limit for the Port: 30720
Default Packet Buffer allocate for the Port: 120
Used Packet Buffer for the Port: 0
FTOS(conf)#sh hardware stack-unit 0 buffer unit 0 port 1 queue 2 buffer-info
----- Buffer Stats for Unit 0 Port 1 Queue 2 ----Maximum Shared Limit: 30720
Default Packet Buffer allocate for the Queue: 8
Used Packet Buffer: 0

clear hardware system-flow

Clear statistics from selected hardware components.

show interfaces stack-unit

Display information on all interfaces on a specific S-Series stack
member.

show processes cpu
(S-Series)

Display CPU usage information based on processes running in an
S-Series.

show system stack-ports

Display information about the stacking ports on all switches in the
S-Series stack.

show system (S-Series and
S4810)

Display the current status of all stack members or a specific
member.

show hardware system-flow
s
Syntax
Parameters

Defaults
Command Modes

Display Layer 3 ACL or QoS data for the selected stack member and stack member port-pipe.
show hardware system-flow layer2 stack-unit 0-7 port-set 0-1 [counters]
acl | qos

For the selected stack member and stack member port-pipe, display which
system flow entry the packet hits and what queue the packet takes as it dumps
the raw system flow tables.

stack-unit 0-7

Enter the keyword stack-unit followed by 0 to 7 to select a stack member ID.

port-set 0-1
[counters]

Enter the keyword port-set with a port-pipe number — 0 or 1. The S25
models of the S-Series have only port-pipe 0.
(OPTIONAL) Enter the keyword counters to display hit counters for the
selected ACL or QoS option.

No default behavior
EXEC Privilege

S-Series Debugging and Diagnostics | 1521

www.dell.com | support.dell.com

Command
History
Example
(layer2 counters)

Example
(layer2
non-counters)

Version 7.8.1.0

Introduced on S-Series

FTOS#show hardware system-flow layer2 stack-unit 0 port-set 0 counters
--------------------------------------------------------------------------EntryId
Description
#HITS
--------------------------------------------------------------------------2048
STP BPDU Redirects
0
2047
LLDP BPDU Redirects
0
2045
LACP traffic Redirects
0
2044
GVRP traffic Redirects
0
2043
ARP Reply Redirects
0
2042
802.1x frames Redirects
0
2041
VRRP frames Redirects
0
2040
GRAT ARP
0
2039
DROP Cases
0
2038
OSPF1 STUB
0
2037
OSPF2 STUB
0
2036
VRRP STUB
0
2035
L2_DST_HIT+BC MAC+VLAN 4095
0
2034
L2_DST_HIT+BC MAC
0
2033
Catch all
0
384
OSPF[224.0.0.5] Packets
0
383
OSPF[224.0.0.6] Packets
0
382
VRRP Packets
0
380
BCast L2_DST_HIT on VLAN 4095
0
379
BCAST L2_DST_HIT Packets
0
4
Unknown L2MC Packets
0
3
L2DLF Packets
0
2
L2UCAST Packets
0
1
L2BCASTPackets
0
25
FTOS#
FTOS#show hardware system-flow layer2 stack-unit 0 port-set 0
############## FP Entry for redirecting STP BPDU to CPU Port ################
EID 2048: gid=1,
slice=15, slice_idx=0x00, prio=0x800, flags=0x82, Installed
tcam: color_indep=0,
higig=0, higig_mask=0,
KEY=0x00000000 00000000 00000000 0180c200 00000000 00000000
00000000 , FPF4=0x00
MASK=0x00000000 00000000 00000000 ffffffff ffff0000 00000000
00000000 ,
0x00
action={act=Drop, param0=0(0x00), param1=0(0x00)},
action={act=CosQCpuNew, param0=7(0x07), param1=0(0x00)},
action={act=CopyToCpu, param0=0(0x00), param1=0(0x00)},
action={act=UpdateCounter, param0=1(0x01), param1=0(0x00)},
meter=NULL,
counter={idx=0, mode=0x01, entries=1}
################ FP Entry for redirecting LLDP BPDU to RSM ################
EID 2047: gid=1,
slice=15, slice_idx=0x01, prio=0x7ff, flags=0x82, Installed
tcam: color_indep=0,
higig=0, higig_mask=0,
KEY=0x00000000 00000000 00000000 0180c200 000e0000 00000000
00000000 , FPF4=0x00
MASK=0x00000000 00000000 00000000 ffffffff ffff0000 00000000
00000000 ,
0x00
action={act=Drop, param0=0(0x00), param1=0(0x00)},
action={act=CosQCpuNew, param0=7(0x07), param1=0(0x00)},
action={act=CopyToCpu, param0=0(0x00), param1=0(0x00)},
action={act=UpdateCounter, param0=1(0x01), param1=0(0x00)},
meter=NULL,
counter={idx=1, mode=0x01, entries=1}

1522

|

S-Series Debugging and Diagnostics

############## FP Entry for redirecting LACP traffic to CPU Port ############
EID 2045: gid=1,
slice=15, slice_idx=0x02, prio=0x7fd, flags=0x82, Installed
tcam: color_indep=0,
higig=0, higig_mask=0,
KEY=0x00000000 00000000 00000000 0180c200 00020000 00000000
00000000 , FPF4=0x00
MASK=0x00000000 00000000 00000000 ffffffff ffff0000 00000000
00000000 ,
0x00
action={act=Drop, param0=0(0x00), param1=0(0x00)},
action={act=CosQCpuNew, param0=7(0x07), param1=0(0x00)},
action={act=CopyToCpu, param0=0(0x00), param1=0(0x00)},
action={act=UpdateCounter, param0=1(0x01), param1=0(0x00)},
meter=NULL,
counter={idx=2, mode=0x01, entries=1}
################# FP Entry for redirecting GVRP traffic to RSM ###########
EID 2044: gid=1,
slice=15, slice_idx=0x03, prio=0x7fc, flags=0x82, Installed
tcam: color_indep=0,
higig=0, higig_mask=0,
KEY=0x00000000 00000000 00000000 0180c200 00210000 00000000
00000000 , FPF4=0x00
MASK=0x00000000 00000000 00000000 ffffffff ffff0000 00000000
00000000 ,
0x00
action={act=Drop, param0=0(0x00), param1=0(0x00)},
action={act=CosQCpuNew, param0=7(0x07), param1=0(0x00)},
action={act=CopyToCpu, param0=0(0x00), param1=0(0x00)},
action={act=UpdateCounter, param0=1(0x01), param1=0(0x00)},
meter=NULL,
counter={idx=3, mode=0x01, entries=1}
################# FP Entry for redirecting ARP Replies to RSM #############
EID 2043: gid=1,
slice=15, slice_idx=0x04, prio=0x7fb, flags=0x82, Installed
tcam: color_indep=0,
higig=0, higig_mask=0,
KEY=0x00000000 00000000 00000000 00000000 00000000 00000806
00001600 , FPF4=0x00
MASK=0x00000000 00000000 00000000 00000000 00000000 0000ffff
00001600 ,
0x00
action={act=Drop, param0=0(0x00), param1=0(0x00)},
action={act=CosQCpuNew, param0=6(0x06), param1=0(0x00)},
action={act=CopyToCpu, param0=0(0x00), param1=0(0x00)},
action={act=UpdateCounter, param0=1(0x01), param1=0(0x00)},
!--------- output truncated -----------------!

S-Series Debugging and Diagnostics | 1523

www.dell.com | support.dell.com
1524

|

S-Series Debugging and Diagnostics

60
SNMP Traps
This chapter lists the traps sent by FTOS. Each trap is listed by the fields Message ID, Trap
Type, and Trap Option, and the next is the message(s) associated with the trap.
Table 60-1.

SNMP Traps and Error Messages

Message ID

Trap Type

Trap Option

COLD_START

SNMP

COLDSTART

%SNMP-5-SNMP_COLD_START: SNMP COLD_START trap sent.
WARM_START

SNMP

WARMSTART

COPY_CONFIG_COMPLETE

SNMP

NONE

SNMP

LINKDOWN

SNMP Copy Config Command Completed
LINK_DOWN

%IFA-1-PORT_LINKDN: changed interface state to down:%d
LINK_UP

SNMP

LINKUP

%IFA-1-PORT_LINKUP: changed interface state to up:%d
AUTHENTICATION_FAIL

SNMP

AUTH

%SNMP-3-SNMP_AUTH_FAIL: SNMP Authentication failed.Request with invalid community string.
EGP_NEIGHBOR_LOSS

SNMP

NONE

OSTATE_DOWN

SNMP

LINKDOWN

%IFM-1-OSTATE_DN: changed interface state to down:%s
%IFM-5-CSTATE_DN:Changed interface Physical state to down: %s
OSTATE_UP

SNMP

LINKUP

%IFM-1-OSTATE_UP: changed interface state to up:%s
%IFM-5-CSTATE_UP: Changed interface Physical state to up: %s
RMON_RISING_THRESHOLD

SNMP

NONE

%RPM0-P:CP %SNMP-4-RMON_RISING_THRESHOLD: RMON rising threshold alarm from SNMP OID 

SNMP Traps | 1525

www.dell.com | support.dell.com

Table 60-1.

SNMP Traps and Error Messages (continued)

Message ID

Trap Type

Trap Option

RMON_FALLING_THRESHOLD

SNMP

NONE

%RPM0-P:CP %SNMP-4-RMON_FALLING_THRESHOLD: RMON falling threshold alarm from SNMP OID 
RMON_HC_RISHING_THRESHOLD

SNMP

NONE

%RPM0-P:CP %SNMP-4-RMON_HC_RISING_THRESHOLD: RMON high-capacity rising threshold alarm from SNMP
OID 
RMON_HC_FALLING_THRESHOLD

SNMP

NONE

%RPM0-P:CP %SNMP-4-RMON_HC_FALLING_THRESHOLD: RMON high-capacity falling threshold alarm from
SNMP OID 
RESV

NONE

NONE

ENVMON

NONE

N/A
CHM_CARD_DOWN

%CHMGR-1-CARD_SHUTDOWN: %sLine card %d down - %s
%CHMGR-2-CARD_DOWN: %sLine card %d down - %s
CHM_CARD_UP

ENVMON

NONE

%CHMGR-5-LINECARDUP: %sLine card %d is up
CHM_CARD_MISMATCH

ENVMON

NONE

%CHMGR-3-CARD_MISMATCH: Mismatch: line card %d is type %s - type %s required.
CHM_CARD_PROBLEM

ENVMON

NONE

CHM_ALARM_CUTOFF

ENVMON

NONE

CHM_SFM_UP

ENVMON

NONE

CHM_SFM_DOWN

ENVMON

NONE

CHM_RPM_UP

ENVMON

NONE

%RAM-6-RPM_STATE: RPM1 is in Active State
%RAM-6-RPM_STATE: RPM0 is in Standby State
CHM_RPM_DOWN

ENVMON

NONE

%CHMGR-2-RPM_DOWN: RPM 0 down - hard reset
%CHMGR-2-RPM_DOWN: RPM 0 down - card removed
CHM_RPM_PRIMARY

ENVMON

NONE

%RAM-5-COLD_FAILOVER: RPM Failover Completed
%RAM-5-HOT_FAILOVER: RPM Failover Completed
%RAM-5-FAST_FAILOVER: RPM Failover Completed
CHM_SFM_ADD

ENVMON

NONE

ENVMON

NONE

%TSM-5-SFM_DISCOVERY: Found SFM 1
CHM_SFM_REMOVE

1526

|

SNMP Traps

Table 60-1.

SNMP Traps and Error Messages (continued)

Message ID

Trap Type

Trap Option

ENVMON

NONE

%TSM-5-SFM_REMOVE: Removed SFM 1
CHM_MAJ_SFM_DOWN

%CHMGR-0-MAJOR_SFM: Major alarm: Switch fabric down
CHM_MAJ_SFM_DOWN_CLR

ENVMON

NONE

%CHMGR-5-MAJOR_SFM_CLR: Major alarm cleared: Switch fabric up
CHM_MIN_SFM_DOWN

ENVMON

NONE

%CHMGR-2-MINOR_SFM: MInor alarm: No working standby SFM
CHM_MIN_SFM_DOWN_CLR

ENVMON

NONE

%CHMGR-5-MINOR_SFM_CLR: Minor alarm cleared: Working standby SFM present
CHM_PWRSRC_DOWN

ENVMON

SUPPLY

%CHMGR-2-PEM_PRBLM: Major alarm: problem with power entry module %s
CHM_PWRSRC_CLR

ENVMON

SUPPLY

%CHMGR-5-PEM_OK: Major alarm cleared: power entry module %s is good
CHM_MAJ_ALARM_PS

ENVMON

SUPPLY

%CHMGR-0-MAJOR_PS: Major alarm: insufficient power %s
CHM_MAJ_ALARM_PS_CLR

ENVMON

SUPPLY

%CHMGR-5-MAJOR_PS_CLR: major alarm cleared: sufficient power
CHM_MIN_ALARM_PS

ENVMON

SUPPLY

%CHMGR-1-MINOR_PS: Minor alarm: power supply non-redundant
CHM_MIN_ALARM_PS_CLR

ENVMON

SUPPLY

%CHMGR-5-MINOR_PS_CLR: Minor alarm cleared: power supply redundant
CHM_MIN_ALRM_TEMP

ENVMON

TEMP

%CHMGR-2-MINOR_TEMP: Minor alarm: chassis temperature
CHM_MIN_ALRM_TEMP_CLR

ENVMON

TEMP

%CHMRG-5-MINOR_TEMP_CLR: Minor alarm cleared: chassis temperature normal (%s %d temperature is within
threshold of %dC)
CHM_MAJ_ALRM_TEMP

ENVMON

TEMP

%CHMGR-2-MAJOR_TEMP: Major alarm: chassis temperature high (%s temperature reaches or exceeds threshold of
%dC)
CHM_MAJ_ALRM_TEMP_CLR

ENVMON

TEMP

%CHMGR-2-MAJOR_TEMP_CLR: Major alarm cleared: chassis temperature lower (%s %d temperature is within
threshold of %dC)
CHM_FANTRAY_BAD

ENVMON

FAN

For E1200: %CHMGR-2-FAN_TRAY_BAD: Major alarm: fan tray %d is missing or down
%CHMGR-2-ALL_FAN_BAD: Major alarm: all fans in fan tray %d are down.
For E600 and E300: %CHMGR-2-FANTRAYBAD: Major alarm: fan tray is missing
%CHMGR-2-FANSBAD: Major alarm: most or all fans in fan tray are down

SNMP Traps | 1527

www.dell.com | support.dell.com

Table 60-1.

SNMP Traps and Error Messages (continued)

Message ID

Trap Type

Trap Option

CHM_FANTRAY_BAD_CLR

ENVMON

FAN

For the E1200: %CHMGR-5-FAN_TRAY_OK: Major alarm cleared: fan tray %d present
For the E600 and E300: %CHMGR-5-FANTRAYOK: Major alarm cleared: fan tray present
CHM_MIN_FANBAD

ENVMON

FAN

For the E1200: %CHMGR-2-FAN_BAD: Minor alarm: some fans in fan tray %d are down
For the E600 and E300: %CHMGR- 2-1FANBAD: Minor alarm: fan in fan tray is down
CHM_MIN_FANBAD_CLR

ENVMON

FAN

For E1200: %CHMGR-2-FAN_OK: Minor alarm cleared: all fans in fan tray %d are good
For E600 and E300: %CHMGR-5-FANOK: Minor alarm cleared: all fans in fan tray are good
TME_TASK_SUSPEND

ENVMON

NONE

%TME-2-TASK SUSPENDED: SUSPENDED - svce:%d - inst:%d - task:%s
TME_TASK_TERM

ENVMON

NONE

%TME-2-ABNORMAL_TASK_TERMINATION: CRASH - task:%s %s
CHM_CPU_THRESHOLD

ENVMON

NONE

%CHMGR-5-CPU_THRESHOLD: Cpu %s usage above threshold. Cpu5SecUsage (%d)
CHM_CPU_THRESHOLD_CLR

ENVMON

NONE

%CHMGR-5-CPU_THRESHOLD_CLR: Cpu %s usage drops below threshold. Cpu5SecUsage (%d)
CHM_MEM_THRESHOLD

ENVMON

NONE

%CHMGR-5-MEM_THRESHOLD: Memory %s usage above threshold. MemUsage (%d)
CHM_MEM_THRESHOLD_CLR

ENVMON

NONE

%CHMGR-5-MEM_THRESHOLD_CLR: Memory %s usage drops below threshold. MemUsage (%d)
MACMGR_STN_MOVE

ENVMON

NONE

%MACMGR-5-DETECT_STN_MOVE: Station Move threshold exceeded for Mac %s in vlan %d
VRRP_BADAUTH

PROTO

NONE

%RPM1-P:RP2 %VRRP-3-VRRP_BAD_AUTH: vrid-1 on Gi 11/12 rcvd pkt with authentication type mismatch.
%RPM1-P:RP2 %VRRP-3-VRRP_BAD_AUTH: vrid-1 on Gi 11/12 rcvd pkt with authentication failure.
VRRP_GO_MASTER

PROTO

NONE

%VRRP-6-VRRP_MASTER: vrid-%d on %s entering MASTER
VRRP_PROTOCOL_ERROR

PROTO

NONE

VRRP_PROTOERR: VRRP protocol error on %S
BGP4_ESTABLISHED

PROTO

NONE

%TRAP-5-PEER_ESTABLISHED: Neighbor %a, state %s
BGP4_BACKW_XSITION

PROTO

%TRAP-5-BACKWARD_STATE_TRANS: Neighbor %a, state %s

1528

|

SNMP Traps

NONE

Index
Numerics
802.3x pause frames

576

A
aaa accounting suppress 1281
aaa authentication login 1289
ABR 1047, 1048
Access Control Lists (ACLs) 181
access control lists. See ACL.
access-class (common IP ACL) 184
access-group 1290
ACCESS-LIST Mode 23
ACL 23
deny 711
deny tcp 713
deny udp 716
description 252
Important Points to Remember 707
ipv6 access-group 717
permit 719
permit tcp 721
permit udp 723
remark 725
seq 727
show ipv6 accounting access-list 731
ACL, IP trace lists 1334
address family ipv4 multicast (MBGP) 379
address family ipv6 unicast (BGP IPv6) 828
Address Resolution Protocol, See ARP.
address-family
bgp 296, 764
adjacency-check (ISIS_IPv6) 863
advertise 863
advertise (ISIS) 863
advertise med guest-voice 966
advertise-interval 1488, 1501
AFI/SAFI 324
aggregate-address 297, 764
aggregate-address (BGP IPv6) 764, 828
aggregate-address (BGP) 297
aggregate-address (MBGP) 380
ANSI/TIA-1057 965
Area Border Router. See ABR.
area default-cost 1047
area default-cost (OSPF) 1047
area nssa 1047
area nssa (OSPF) 1048

area range 1048
area range (OSPF) 1048
area stub 1049
area stub (OSPF) 1049
area virtual-link 1049
area virtual-link (OSPF) 1050
area-password 863
area-password (ISIS) 864
arp 648, 649
arp timeout 651
AS 293, 761
AS (Autonomous System) 1045
ASBR 1081
asymmetric flow control 578
audience 13
authentication-type 1488
authentication-type simple 1488
autoconfiguration
displaying current mode 415
auto-cost 1051
auto-cost (OSPF) 1051
auto-negotiation 593
Autonomous System. See AS.
auto-summary 1234

B
bandwidth-percentage 1185
bandwidth-percentage (policy QoS) 1185, 1186
Bare Metal Provisioning
changing reload mode in BMP 2.0 414
described 413
version 2.0 on S4810 413
Bare Metal Provisioning commands
reload factory-default dhcp-client-only-mode 415
reload-type 413
show reload-type 415
stop jump-start 415
base VLAN 1149
BFD 277
bfd all-neighbors 278
bfd disable 279
bfd enable 279, 280
bfd interval 280
bfd neighbor 281
bfd protocol-liveness 282
BGP 293, 761
bgp four-octet-as-support 308, 772

Index | 1529

www.dell.com | support.dell.com
1530

passive peering 343, 805
soft reconfiguration 315, 778, 779, 780
bgp add-path 298
bgp always-compare-med 298, 299, 765
bgp always-compare-med (BGP IPv6) 765
bgp asnotation 299
bgp bestpath as-path ignore 300, 766
bgp bestpath as-path ignore (BGP IPv6) 766
bgp bestpath med confed 301, 766
bgp bestpath med confed (BGP IPv6) 766
bgp bestpath med missing-as-best 301
bgp bestpath med missing-as-best (BGP IPv6) 767
bgp bestpath router-id-ignore 302
bgp client-to-client reflection 302, 767
bgp client-to-client reflection (BGP IPv6) 767
bgp cluster-id 303, 314, 768, 777, 778
bgp cluster-id (BGP IPv6) 768
bgp confederation identifier 303, 304, 768
bgp confederation identifier (BGP IPv6) 768
bgp confederation peers 304, 769
bgp confederation peers (BGP IPv6) 769
bgp dampening 305, 381, 770, 829
bgp dampening (BGP IPv6) 770, 829
bgp dampening (MBGP) 381
bgp default local-preference 306, 771
bgp default local-preference (BGP IPv6) 771
bgp enforce-first-as 307, 771
bgp fast-external-fallover 308, 772
bgp fast-external-fallover (BGP IPv6) 772
bgp graceful-restart 309, 773
bgp graceful-restart (BGP IPv6) 773
bgp log-neighbor-changes 310, 774
bgp log-neighbor-changes (BGP IPv6) 774
bgp non-deterministic-med 310, 774
bgp non-deterministic-med (BGP IPv6) 774
bgp recursive-bgp-next-hop 311, 775
bgp regex-eval-optz-disable 311, 775
bgp router-id 312, 776
bgp router-id (BGP IPv6) 776
bgp soft-reconfig-backup 313, 777
boot, interrupting 1461
BPDU 990, 1170, 1271, 1422
Bridge Protocol Data Units, See BPDU.
Bridge Protocol Data Units. See BPDU.
bridge-priority 1419
bridge-priority (RSTP) 1267
Broadcast/Unknown Unicast Rate Limiting 1409
bsr 1132
buffer 1508, 1509
buffer-profile 1510, 1511

|

Index

Bulk Configuration
see interface range 582
Bulk Configuration Macro
see interface range macro

585

C
calendar set 1432
CAM (Content Addressable Memory) 928
cam ipv4flow command 432
cam l2acl command 435
CAM Profiling
Important Points to Remember 418
cam-ipv4flow command 432
cam-l2acl command 435
cam-optimization 421
cam-profile microcode command 421
capture bgp-pdu max-buffer-size 314
capture bgp-pdu max-buffer-size (BGP IPv6) 778
capture bgp-pdu neighbor 314
capture bgp-pdu neighbor (BGP IPv6) 777
card type 87
card type, 4-port 40G 89
card-type 87, 88
channel-member 630
class-map (policy QoS) 1186
clear arp-cache 651, 652
clear bfd counters 282
clear command history 71
clear config 865
clear config (ISIS) 865
clear counters 569
clear counters ip access-group (common IP ACL) 185
clear counters ip trace-group 1334
clear counters mac access-group 231
clear counters vrrp 1489, 1501
clear dampening 570
clear frrp 518
clear gvrp statistics interface 527
clear hardware stack-unit 1513
clear hardware system-flow 1514
clear host 652
clear host (DNS) 653
clear ip bgp 315, 782
clear ip bgp (BGP IPv6) 779, 780
clear ip bgp * (asterisk) 314, 778
clear ip bgp * (BGP IPv6) 778
clear ip bgp as-number 779
clear ip bgp dampening 316
clear ip bgp dampening ipv4 multicast (MBGP) 382
clear ip bgp dampening ipv6 unicast 830

Index | 1531

www.dell.com | support.dell.com
1532

clear ip bgp flap-statistics 316, 382, 831
clear ip bgp ipv4 multicast 381, 830
clear ip bgp ipv4 multicast (MBGP) 382
clear ip bgp ipv4 multicast flap-statistics network (MBGP)
clear ip bgp ipv6 dampening 781
clear ip bgp ipv6 flap-statistics 781
clear ip bgp ipv6 unicast (BGP IPv6) 830
clear ip bgp ipv6 unicast dampening 781
clear ip bgp ipv6 unicast flap-statistics 782, 831
clear ip bgp ipv6 unicast soft 782
clear ip bgp ipv6-address 780
clear ip bgp peer-group 316, 383, 781, 831
clear ip bgp peer-group (BGP IPv6) 781
clear ip fib linecard 653
clear ip igmp groups 550
clear ip mroute 1003, 1004, 1013
clear ip ospf 1051
clear ip ospf statistics 1052
clear ip pim rp-mapping 1108
clear ip pim tib 1108, 1109
clear ip prefix-list 245
clear ip rip 1234
clear ip route 654
clear ipv6 neighbor 1020
clear isis 865
clear lacp port 908
clear logging 1385
clear mac-address-table dynamic 916
clear qos statistics (policy QoS) 1187
clear queue statistics egress (QoS) 1223
clear queue statistics ingress (QoS) 1224
clear tcp statistics 654
clear ufd-disable 1465
CLI
case sensitivity 18
partial keywords 18
CLI Modes
AS-PATH ACL 24
CONFIGURATION 21
EXEC 21
EXEC Privilege 21
INTERFACE 21
IP ACCESS LIST 23
IP COMMUNITY LIST 24
LINE 22
MAC ACCESS LIST 23
MULTIPLE SPANNING TREE 26, 27
PREFIX-LIST 24
REDIRECT-LIST 24
ROUTE-MAP 23

|

Index

382

ROUTER BGP 27
ROUTER ISIS 27
ROUTER OSPF 26
ROUTER RIP 26
SPANNING TREE 25
TRACE-LIST 22
clns host 865
clns host (ISIS) 865
clock read-calendar 1433
clock set 1433
clock summer-time date 1434
clock summer-time recurring 1435
clock timezone 1436
clock update-calendar 1437
Command Modes 21
command modes 16
community port 1150
community VLAN 1149
CONFIGURATION mode 21
configuration, multiple users 16
Content Addressable Memory (CAM) 928
contiguous subnet masks 189
continue (Route Map) 251
Control Plane Policing (CoPP) 439
copy (Streamline Upgrade) 36
copy running-config startup-config duplicate
Core-Dump 42
CPU Traffic Statistics 72, 101
crypto key generate 1320
CX4-cable-length command 571

37

D
dampening 572
debug arp 655
debug bfd 283
debug fefd 947
debug frrp 519
debug gvrp 527
debug ip bgp 317, 319, 320, 321, 785
debug ip bgp (BGP IPv6) 783
debug ip bgp (ipv6) 783
debug ip bgp dampening 318
debug ip bgp events 319, 784
debug ip bgp events (BGP IPv6) 784
debug ip bgp events (ipv6) 784
debug ip bgp ipv4 multicast dampening (MBGP)
debug ip bgp ipv6 dampening 785
debug ip bgp ipv6 unicast dampening 785, 831
debug ip bgp ipv6 unicast updates 832

383

Index | 1533

www.dell.com | support.dell.com
1534

debug ip bgp keepalives 319, 786
debug ip bgp keepalives (BGP IPv6) 786
debug ip bgp modify 320, 786
debug ip bgp notifications (BGP IPv6) 786
debug ip bgp peer-group updates (MBGP) 384
debug ip bgp updates 321, 384, 787, 831
debug ip bgp updates (BGP IPv6) 787
debug ip dhcp 656
debug ip icmp 657
debug ip igmp 551
debug ip ospf 1053
debug ip packet 658
debug ip pim 1109, 1131
debug ip rip 1235
debug ip ssh 1321
debug ip udp-helper 642
debug isis 866
debug isis adj-packets 866
debug isis local-updates 867, 868
debug isis snp-packets 867
debug isis spf-triggers 868
debug isis update-packets 868
debug lacp 908
debug ntp 1438
debug protocol-tunnel 1350
debug radius 1300
debug spanning-tree 1420
debug spanning-tree mstp 988
debug spanning-tree rstp 1268
debug tacacs+ 1306
debug track (Object Tracking) 1028
debug uplink-state-group 1466, 1470
debug vrrp 1489, 1501
default logging buffered 1386, 1388
default logging console 1386
default logging monitor 1387
default logging trap 1387, 1395
Default VLAN 937
default vlan-id 937
default-information originate 1055
BGP 322
IS-IS 869
OSPF 1055
RIP 1236
default-information originate (ISIS) 869
default-information originate (RIP) 1236
default-metric
BGP 322, 788
OSPF 1055
RIP 1236

|

Index

default-metric (BGP IPv6) 788
default-metric (BGP) 322
default-metric (OSPF) 1055
default-metric (RIP) 1236
define interface range macro 585
delay (Object Tracking) 1028
delete
EXEC privilege mode 38
Denial of Service 1334
deny 1334
AS-Path Access list 269
extended IP ACL 197
IP ACL (standard) 189
standard IP ACL 189
Trace list 1334
deny (AS-Path) 269
deny (BGP) 404
deny (Extended MAC ACL) 239
deny (IP Community List) 273
deny (IP prefix ACL) 245
deny (standard MAC ACL) 234
deny arp (extended IP ACL) 199
deny ether-type 200
deny ether-type (extended IP ACLs) 200
deny icmp (extended IP ACLs) 202
deny regex (BGP) 405
deny tcp 1335
IP ACL 205
Trace list 1335
deny tcp (extended IP ACLs) 205
deny udp 1336
IP ACL 208
Trace list 1336
deny udp (extended IP ACLs) 208
description 1189, 1467
ACL 182
INTERFACE 573
VRRP 1490, 1502
description (ACL) 182
description (BGP) 405
description (FRRP) 519
description (interface) 573
description (Object Tracking) 1029
description (OSPF) 1056
description (Route Map) 252
description (VLAN) 936, 1056
description (VRRP) 1490
description, spanning-tree 322, 788, 870, 989, 1144, 1160, 1237, 1269, 1421
DHCP 664, 665
UDP ports 665

Index | 1535

www.dell.com | support.dell.com
1536

DHCP broadcast messages 665
DHCP server 665
diag stack-unit 1506
dir
EXEC privilege mode 38
disable
Spanning Tree Protocol 870, 989, 1160, 1269, 1421
VRRP 1491
disable (FRRP) 520
disable (GVRP) 528
disable (MSTP) 989
disable (PVST+) 1160
disable (RSTP) 1270
disable (STP) 1421
disable (VRRP) 1491
disable-on-sfm-failure
INTERFACE 574
disable-on-sfm-failure (interface) 574
discontiguous subnet masks 189
display parameter 20
distance
IS-IS 870
OSPF 1056
RIP 1237
distance (ISIS) 870
distance (OSPF) 1056
distance (RIP) 1237
distance bgp 322, 323, 789
distance bgp (BGP IPv6) 789
distance bgp (IPv6) 833
distance bgp (MBGP) 385
distance ospf 1057
distribute-list (ISIS) 871, 872
distribute-list (OSPF) 1058, 1059
distribute-list (RIP) 1238, 1239
distribute-list in
IS-IS 871
OSPF 1058
RIP 1238
distribute-list out
IS-IS 872
OSPF 1059
RIP 1239
distribute-list redistributed-override (ISIS) 872
distribute-list redistributed-override in 872
IS-IS 872
DNS commands 662, 663, 669, 744
do 74
Document conventions 14
domain-password 873

|

Index

domain-password (ISIS) 873
DOS 1334
dot1p-priority 449, 1174
dot1p-priority (QoS) 1174
dot1x auth-fail-vlan 167, 1311
dot1x auth-server radius 168, 1312
dot1x guest-vlan 169, 170, 172, 1313
dot1x max-eap-req 171, 1314
dot1x port-control 172, 1314
dot1x quiet-period 173, 1315
dot1x reauthentication 173, 1315
dot1x reauth-max 174, 1316
dot1x server-timeout 174, 1316
dot1x supplicant-timeout 175, 1317
dot1x tx-period 175, 1317
download alt-boot-image 39
downstream 1467
downstream auto-recover 1468
downstream disable links 1469
duplex 574, 575
duplex (Management) 574
duplex flow control 577
dynamic LAG 629

E
ECMP 496, 499
egress ACLs 185
enable 75
enable inverse mask
OSPF 1059
enable inverse mask (OSPF) 1059
Enable password 21
enable password 1291, 1292
enable restricted 1292
end 76
except parameter 20
EXEC mode 21
exec-banner 78
exec-timeout 78
exit 79
extended MAC ACL 240
external flash, number of files supported

35

F
Far-End Failure Detection (FEFD)
fast-convergence
OSPF 1060
fast-convergence (OSPF) 1060
fefd 948
fefd disable 949

947

Index | 1537

www.dell.com | support.dell.com

fefd interval 950
fefd mode 951
fefd reset 952
fefd-global 949
fefd-global interval 950
files, number supported on external flash 35
find parameter 20
flood-2328 (OSPF) 1060
flow control values 579
flow control, asymmetric 578
flow control, duplex 577
flow-based enable 1144
flowcontrol 576
format (C-Series and E-Series) 40
format flash (S-Series) 41
forward-delay 1422
forward-delay (MSTP) 990
forward-delay (RSTP) 1270
forward-delay (STP) 1422
Forwarding Information Base (FIB) entries 687, 688
ftp-server enable 79
ftp-server topdir 80
ftp-server username 81

G
GARP (Generic Attribute Registration Protocol) 525
garp timers 529
GARP VLAN Registration Protocol. See GVRP.
GID (GARP Information Declaration) 526
GIP (GARP Information Propagation) 526
graceful-restart
OSPF 1061, 1062, 1063
graceful-restart grace-period
OSPF 1061
graceful-restart grace-period (OSPF) 1061
graceful-restart helper-reject
OSPF 1062
graceful-restart helper-reject (OSPF) 1062
graceful-restart ietf
IS-IS 873
graceful-restart interval
IS-IS 874
graceful-restart mode
OSPF 1062
graceful-restart mode (OSPF) 1062
graceful-restart restart-wait
IS-IS 876
graceful-restart role
OSPF 1063
graceful-restart role (OSPF) 1063
graceful-restart t1

1538

|

Index

IS-IS 874
graceful-restart t2
IS-IS 875
graceful-restart t3
IS-IS 875
grep command option 20
grep parameter 20
group (LAG sharing) 631
group (LAG) 631
GVRP 26
GVRP (GARP VLAN Registration Protocol)
gvrp enable 530
gvrp registration 530

525

H
HA commands 535
hardware watchdog 1514
Hash Message Authentication Code (HMAC)
hash-algorithm ecmp (C-Series and S-Series)
hello padding (ISIS) 877
hello-time 1422
hello-time (MSTP) 990
hello-time (RSTP) 1271
hello-time (STP) 1422
hitless 535
hitless dynamic LACP states 907
hitless protocol 535
hitless upgrade 539
HMAC (Hash Message Authentication Code)
hold-time 1491
hold-time (VRRP) 1491
hostname 81
hostname dynamic 877
hostname dynamic (ISIS) 877

864
499

864

I
ICMP 673
IEEE 802.1d 1159
IETF Draft draft-ietf-bfd-base-03 277
IETF RFCs
1058 1233
2328 1045
2453 1233
2966 864
IFM (interface management) 134
IGMP Snooping 561
Important Things to Remember for IGMP Querier 562
Important Things to Remember for IGMP Snooping 561
IGMP Snooping Commands 561
ignore-case sub-option 20

Index | 1539

www.dell.com | support.dell.com
1540

ignore-lsp-errors 878
ignore-lsp-errors (ISIS) 878
IGP (Interior Gateway Protocol) 1045
ingress ACLs 185
interface 579
interface command 579
interface (FRRP) 520
interface loopback 580
interface management (IFM) 134
interface ManagementEthernet 581
interface null 582
interface port-channel 632
interface range 582
interface range macro 586
interface rate-interval 598
interface suppress threshold (dampening) 573
Interface vlan 587
interface vlan 587
Interior Gateway Protocol (IGP) 1045
Internet Control Message Protocol. See ICMP.
ip access-group (common IP ACL) 185
ip access-list extended 210
ip access-list extended (extended IP ACLs) 210
ip access-list standard 190
ip address 660, 661
ip as-path access-list 270
ip community-list 274
ip default-network 662
ip directed-broadcast 661
ip domain-list 662
ip domain-lookup 663
ip domain-name 663
IP DSCP bit 1206
ip extcommunity-list (BGP) 406
ip fib download-igp-only 664
ip ftp password 82
ip ftp source-interface 82
ip ftp username 83
ip helper-address 664, 665
ip helper-address hop-count disable 665, 666
ip host 666, 743
ip igmp access-group 551
ip igmp immediate-leave 552
ip igmp last-member-query-interval 553
ip igmp querier-timeout 553
ip igmp query-interval 554
ip igmp query-max-resp-time 555
ip igmp static-group 556
ip local-proxy-arp command 1150
ip max-frag-count 667

|

Index

ip mroute 1004
ip mtu 668
ip multicast-lag-hashing 1005
ip multicast-limit 1006
ip multicast-routing 1005, 1006, 1015
ip name-server 669, 744
ip ospf auth-change-wait-time 1063
OSPF 1063
ip ospf authentication-key 1064
ip ospf cost 1064
ip ospf dead-interval 1065
ip ospf hello-interval 1065
ip ospf message-digest-key 1066
ip ospf mtu-ignore 1067
ip ospf network 1067
ip ospf priority 1068
ip ospf retransmit-interval 1068
ip ospf transmit-delay 1069
ip pim dr-priority 1111, 1133
ip pim query-interval 1114, 1134
ip pim rp-address 1115
ip poison-reverse 1240
ip poison-reverse (RIP) 1240
ip prefix-list 246
ip proxy-arp 670
ip radius source-interface 1301
ip redirects 670
ip rip receive version 1240
ip rip send version 1241
ip route 671
ip route bfd 284
ip router isis 878
ip scp topdir 1321
ip source-route 673
ip split-horizon 1241
ip split-horizon (RIP) 1242
ip ssh authentication-retries 1322
ip ssh connection-rate-limit 1323
ip ssh hostbased-authentication enable 1323
ip ssh key-size 1324
ip ssh password-authentication enable 1324
ip ssh pub-key-file 1325
ip ssh rhostsfile 1326
ip ssh rsa-authentication 1327
ip ssh rsa-authentication enable 1327
ip ssh server 1328
ip ssh server enable 1328
ip tacacs source-interface 1306
ip telnet server enable 84

Index | 1541

www.dell.com | support.dell.com
1542

ip telnet source-interface 84
ip tftp source-interface 85
IP trace lists 1334
ip trace-group 1337
ip trace-list 1338
ip udp-broadcast-address 643
ip udp-helper udp-port 644
ip unreachables 673
ip vlan-flooding 674
ipg 587
IPv6
clear ipv6 fib 740
IPv6 ACLs 708
cam-acl 419, 420, 708, 709
clear counters ipv6 access-group 710
deny icmp 712
deny tcp 713
deny udp 716
ipv6 access-group 717
ipv6 access-list 718
permit 719
permit icmp 720
permit tcp 721
permit udp 723
remark 725
resequence access-list 726
resequence prefix-list ipv6 727
seq 727
show cam-acl 729, 730
show config 731
show ipv6 accounting access-list 731
show running-config acl 732
ipv6 nd managed-config-flag 1021
ipv6 nd max-ra-interval 1021
ipv6 nd other-config-flag 1022
ipv6 nd prefix 1022
ipv6 nd ra-lifetime 1023
ipv6 nd reachable-time 1024
ipv6 nd suppress-ra 1024
ipv6 neighbor 1024
IPv6 PIM debugging, set 1131
IPv6 PIM Router-Query messages, set frequency
IPv6 PIM sparse mode, enable 1137
IPv6 Route Map
match ipv6 address 735
match ipv6 next-hop prefix-list 735
match ipv6 route-source prefix-list 736
route-map 736
set ipv6 next-hop 737
show config 737

|

Index

1134

show route-map 738
ipv6 router isis (ISIS_IPv6) 878
IS-IS
isis hello padding 882
isis bfd all-neighbors 285
isis circuit-type 879
IS-IS commands 861
isis csnp 880
isis csnp-interval 880
isis hello padding 882
isis hello-interval 880
isis hello-multiplier 881
isis ipv6 metric 882
isis metric 882, 883
isis network point-to-point 883
isis password 884
isis priority 884
isolated port 1150
isolated VLAN 1149
is-type 885
is-type (ISIS) 885

J
Jumpstart mode
stopping 415

K
keepalive

588

L
L2PT (Layer 2 Protocol Tunneling) 1349
LACP
clear lacp counters 908
debug lacp 908
lacp port-priority 910
port-channel mode 911
port-channel-protocol lacp 912
show lacp 912
lacp system-priority 910
LAG
channel-member 630
group 631
interface port-channel 632
minimum-links 633
monitoring
show groups 623
port-channel failover-group 634
show interfaces port-channel 635
show port-channel-flow 637
LAG failover group 634

Index | 1543

www.dell.com | support.dell.com

LAG failover-group 636
LAG fate-sharing group 636
LAG supergroup 631
LAGs 907
Layer 2 Protocol Tunneling (L2PT) 1349
lfs enable 589
line 86
linecard 87, 88
Link Aggregation Control Protocol (LACP) 907
link debounce interface 589
Link Layer Detection Protocol (LLDP) 955
Link State Advertisements. See LSA.
link-state protocol 1045
LLDP 955
LLDP-MED (Media Endpoint Discovery) 965
load-balance 675, 676
log-adjacency-changes 886, 1069
log-adjacency-changes (ISIS) 886
logging 1387
logging buffered 1388
logging console 1389
logging facility 1390
logging history 1391
logging history size 1391
logging monitor 1392
logging on 1392
logging source-interface 1393
logging synchronous 1394
logging trap 1395
login authentication 1293
lp pim bsr-border 1110
LSA 1049, 1068
lsp-gen-interval 886
lsp-gen-interval (ISIS) 886
lsp-mtu 887
lsp-mtu (ISIS) 887
lsp-refresh-interval 887
lsp-refresh-interval (ISIS) 887

M
mac access-group 231
mac access-list extended (Extended MAC ACL) 240
mac access-list standard (standard MAC ACL) 235
mac accounting destination 917
MAC ACL, extended 240
MAC address station-move trap 919
mac cam fib-partition 920
mac learning limit (dynamic or no-station-move) 921
mac learning-limit 921
mac learning-limit learn-limit-violation 922

1544

|

Index

mac learning-limit reset 924
mac learning-limit station-move-violation 924
mac-address-table aging-time 917
mac-address-table static 918
mac-address-table station-move 919
mac-address-table station-move refresh-arp 920
mac-address-table station-move threshold 919
Management interface 581, 754
management route 678
Management static route 678
management unit, S-Series 1401
master unit, S-Series 1400
match as-path (Route Map) 253
match community (Route Map) 253
match extcommunity (BGP) 406
match interface (Route Map) 254
match ip access-group 1188
match ip access-group (policy QoS) 1188
match ip address (Route Map) 255
match ip dscp 1190
match ip dscp (policy QoS) 1190
match ip next-hop (Route Map) 255
match ip precedence 1191
match ip precedence (policy QoS) 1191
match ip route-source (Route Map) 256
match mac access-group (policy QoS) 1192
match mac dot1p (policy QoS) 1192, 1193
match metric (Route Map) 256
match origin (Route Map) 257
match route-type (Route Map) 258
match tag (Route Map) 258
max-age 1423
max-age (MSTP) 991
max-age (RSTP) 1272
max-age (STP) 1423
max-area-addresses 888
max-area-addresses (ISIS) 888
max-hops (MSTP) 991
maximum-paths 1070
BGP 324, 790
IS-IS 889, 890
OSPF 1070
RIP 1242
maximum-paths (BGP IPv6) 790
maximum-paths (BGP) 324
maximum-paths (ISIS) 889
maximum-paths (RIP) 1242
max-lsp-lifetime 889
max-lsp-lifetime (ISIS) 889

Index | 1545

www.dell.com | support.dell.com

MBGP Commands 378, 827
Media Endpoint Discovery 965
member 1452
member (Stackable VLAN) 1452
member-vlan (FRRP) 521
metric-style 890
metric-style (ISIS) 890
mib-binding 1070
minimum-links 633
mode (FRRP) 522
modes, command 16
module power-off 90
monitor interface 589
monitor session 1145
motd-banner 90
MSDP 975
msti (MSTP) 992
MSTP 987
debug spanning-tree mstp 988
mtrace 1008
mtu 592
Multicast Source Discovery Protocol
see MSDP 975
MULTIPLE SPANNING TREE 26, 27
Multiple Spanning Tree Protocol 987
see MSTP 987
Multiprotocol BGP (MBGP) 378
multi-topology (ISIS) 890

N
name (MSTP) 993
name (VLAN) 940
NDP 1019
negotiation auto 593
neighbor 1242
neighbor (RIP) 1243
neighbor activate (BGP IPv6) 790, 833
neighbor activate (BGP) 324, 325
neighbor activate (MBGP) 385
neighbor advertisement-interval (BGP IPv6) 791, 834
neighbor advertisement-interval (BGP) 326, 332
neighbor advertisement-interval (MBGP) 386
neighbor advertisement-start(BGP) 326
neighbor allowas-in 327, 791
neighbor allowas-in (BGP) 327, 791
neighbor bfd 286
neighbor bfd disable 287
neighbor default-originate 327, 792
neighbor default-originate (BGP IPv6) 792, 835
neighbor default-originate (BGP) 327

1546

|

Index

neighbor default-originate (MBGP) 387
neighbor description 328, 793
neighbor description (BGP IPv6) 793
neighbor description (BGP) 328
Neighbor Discovery Protocol 1019
neighbor distribute-list 328, 793
neighbor distribute-list (BGP IPv6) 793, 835
neighbor distribute-list (BGP) 329
neighbor distribute-list (MBGP) 387
neighbor ebgp-multihop 329, 794
neighbor ebgp-multihop (BGP IPv6) 794
neighbor ebgp-multihop (BGP) 329
neighbor fall-over (BGP) 330
neighbor filter-list 330, 795
neighbor filter-list (BGP IPv6) 795
neighbor filter-list (BGP) 331
neighbor filter-list aspath (BGP IPv6) 836
neighbor filter-list aspath (MBGP) 388
neighbor graceful-restart 331
neighbor graceful-restart (BGP) 331
neighbor local-as 332
neighbor maximum-prefix 333, 796
neighbor maximum-prefix (BGP IPv6) 796, 836
neighbor maximum-prefix (BGP) 333
neighbor maximum-prefix (MBGP) 389
neighbor next-hop-self 334, 797
neighbor next-hop-self (BGP IPv6) 797, 837
neighbor next-hop-self (BGP) 334
neighbor next-hop-self (MBGP) 389
neighbor password 334
neighbor password (BGP) 334
neighbor peer-group 335, 336, 798, 799
neighbor peer-group (BGP IPv6) 798
neighbor peer-group (BGP) 335, 336
neighbor peer-group (creating group) (BGP IPv6) 799
neighbor peer-group passive (BGP IPv6) 799
neighbor peer-group passive (BGP) 337
neighbor remote-as 338, 800
neighbor remote-as (BGP IPv6) 800
neighbor remote-as (BGP) 338
neighbor remove-private-as 338, 801
neighbor remove-private-as (BGP IPv6) 801, 838
neighbor remove-private-as (BGP) 338
neighbor remove-private-as (MBGP) 390
neighbor route-map 339, 801
neighbor route-map (BGP IPv6) 801
neighbor route-map (BGP) 339
neighbor route-map (MBGP) 390
neighbor route-reflector-client 340

Index | 1547

www.dell.com | support.dell.com
1548

neighbor route-reflector-client (BGP IPv6) 802, 839
neighbor route-reflector-client (BGP) 340
neighbor route-reflector-client (MBGP) 391
neighbor send-community 341, 803
neighbor send-community (BGP IPv6) 803
neighbor send-community (BGP) 341
neighbor shutdown 341, 803
neighbor shutdown (BGP IPv6) 803
neighbor shutdown (BGP) 341
neighbor soft-reconfiguration inbound (BGP) 342, 804
neighbor subnet 805
neighbor subnet (BGP IPv6) 805
neighbor subnet (BGP) 343
neighbor timers 343, 805
neighbor timers (BGP IPv6) 805
neighbor timers (BGP) 343
neighbor update-source 344, 806
neighbor update-source (BGP) 344
neighbor update-source loopback (BGP IPv6) 806
neighbor weight 345, 807
neighbor weight (BGP IPv6) 807
neighbor weight (BGP) 345
net 891
network
BGP 346, 392, 807, 839
RIP 1243
network (BGP IPv6) 808, 839
network (BGP) 346
network (MBGP) 392
network (OSPF) 1071
network (RIP) 1243
network area
OSPF 1071
network backdoor 346, 808
network backdoor (BGP IPv6) 808
network backdoor (BGP) 346
Network Time Protocol (NTP) 1431
Network Time Protocol. See NTP.
NIC Teaming 920
no-more 20
no-more parameter 20
non-contiguous subnet masks 189
Not So Stubby Area. See NSSA.
NSSA 1047
NTP 1438
NTP (Network Time Protocol) 1431
ntp authenticate 1438
ntp authentication-key 1439
ntp broadcast client 1440
ntp disable 1440

|

Index

ntp multicast client 1440
ntp server 1441
ntp source 1442
ntp trusted-key 1442
ntp update-calendar 1443

O
Object tracking
overview 1027
offline stack-unit 1506
offset-list 1244
offset-list (RIP) 1244
online stack-unit 1507
OSPF
link-state 1045
output-delay 1245
output-delay (RIP) 1245

P
passive-interface
IS-IS 891
OSPF 1071
RIP 1245
passive-interface (ISIS) 891
passive-interface (OSPF) 1071
passive-interface (RIP) 1245
password 1294
password, Enable 21
pause frames 576
PBR (Policy-Based Routing) 1355
permit 1338
IP ACL (extended) 211
Trace list 1338
permit (AS-Path) 271
permit (BGP) 407
permit (extended IP ACLs) 211
permit (Extended MAC ACL) 241
permit (IP Community List) 274
permit (IP prefix ACL) 247
permit (standard MAC ACL) 236
permit arp 213
permit arp (extended IP ACLs) 213
permit ether-type 215
permit ether-type (extended IP ACLs) 215
permit icmp (extended IP ACLs) 216
permit regex (BGP) 408
permit tcp 1339
IP ACL 218
Trace list 1339
permit tcp (extended IP ACLs) 218

Index | 1549

www.dell.com | support.dell.com
1550

permit udp 1340
IP ACL 221
Trace list 1340
permit udp (extended IP ACLs) 221
per-port QoS 1174
PIM
Sparse-Mode 1107
PIM-SM 975
ping 90
policy-aggregate (policy QoS) 1193
Policy-Based QoS 472, 1184
Policy-map
description 1189
policy-map-input 1195
policy-map-input (policy QoS) 1195
policy-map-output (policy QoS) 1195
Port Channel-Specific Commands 629
Port Mirroring
Important Points to Remember 1143
port types (private VLAN) 1150
port-based QoS 1174
port-channel failover-group 634
port-channel mode 911
port-channel supergroup 631
port-channel-protocol lacp 912
port-channels 907
Port-Channel-Specific Commands 629
portmode hybrid command 595
power-off 93
power-on 93
preemphasis, CX4 cable length 571
preempt 1492
preempt (VRRP) 1492
PREFIX-LIST Mode 24
primary port 637
primary VLAN 1149
priority 1492
priority (VRRP) 1492
private VLANs (PVLANs) 680
private-vlan mapping secondary-vlan command 1152
private-vlan mode command 1151
privilege exec 1285, 1286
privilege level (CONFIGURATION mode) 1285
privilege level (LINE mode) 1286
promiscuous port 1150
PROTOCOL
Per-VLAN SPANNING TREE Mode 25
SPANNING TREE Mode 25
protocol frrp (FRRP) 522
protocol gvrp 531

|

Index

PROTOCOL GVRP Mode 26
PROTOCOL MULTIPLE SPANNING TREE Mode
protocol route 678
protocol spanning-tree 1423
protocol spanning-tree mstp 993
protocol spanning-tree pvst (PVST+) 1161
protocol spanning-tree rstp 1272
PROTOCOL VLT DOMAIN Mode 27
protocol, hitless 535
protocol-tunnel 1351
protocol-tunnel enable 1352
protocol-tunnel rate-limit 1353
protocol-tunnel stp 1352
provision type 1405
PVST+ (Per-VLAN Spanning Tree plus) 1159

26

Q
QinQ 1449
QoS
clear qos statistics 1187
Per Port 1174
Policy-Based 1184
rate-limit 1200
threshold 1219
QoS, per-port 1174
QoS, port-based 1174
qos-policy-input 1196
qos-policy-input (policy QoS) 1196
qos-policy-output 1197
queue egress multicast linecard (policy QoS) 1198
queue ingress multicast (policy QoS) 1198, 1199
Queue Level Debugging 1223
clear queue statistics ingress 1223, 1224
show queue statistics egress 1224
Queuing Statistics 1223

R
radius-server deadtime 1301
radius-server host 1302
radius-server key 1304
radius-server retransmit 1304
radius-server timeout 1305
RAPID SPANNING TREE Mode
rate limit 1175
rate limit (QoS) 1175
rate police (QoS) 1177
rate shape (QoS) 1178
rate-interval 598
rate-limit 1200

25

Index | 1551

www.dell.com | support.dell.com
1552

rate-police 1201
rate-shape (policy QoS) 1202
redistribute
BGP 347, 392, 809, 840
IS-IS 892
OSPF 1073
RIP 1246
redistribute (BGP IPv6) 809, 840
redistribute (BGP) 347
redistribute (ISIS) 892
redistribute (MBGP) 393
redistribute (OSPF) 1073
redistribute bgp 1074
redistribute bgp (ISIS) 893
redistribute bgp (OSPF) 1074
redistribute isis
OSPF 1075
RIP 1247
redistribute isis (BGP) 348
redistribute isis (OSPF) 1075
redistribute ospf
BGP 393
IS-IS 895
isis 348
RIP 1248
redistribute ospf (BGP IPv6) 810
redistribute ospf (BGP) 349
redistribute ospf (ISIS) 895
redistribute ospf (MBGP) 393
redundancy auto-failover-limit 537
redundancy disable-auto-reboot 538, 1400
redundancy disable-auto-reboot rpm 1400
redundancy force-failover 538, 1400
redundancy force-failover rpm 538
redundancy force-failover sfm 538
redundancy force-failover stack-unit command 1400
redundancy primary rpm 539
redundancy protocol lacp 540
redundancy protocol xstp 540
redundancy reset-counter 540
redundancy synchronize 542
reload 94
remark 182, 725
Remote Network Monitoring (RMON) 1253
resequence access-list 193
resequence access-list (extended IP ACLs) 223
resequence prefix-list ipv4 193
resequence prefix-list ipv4 (extended IP ACLs) 224
reset 94, 95
reset stack-unit 1400

|

Index

resetting S-Series member unit 1401
revision (MSTP) 994
RFC 1858 378
RFC 3069 1149
RFC 4360 403
RFC-2328 1061
RFCs. See IETF RFCs
RIP 1233
version 1 1233
version 2 1233
RMON 1253
rmon alarm 1254
rmon collection history 1255
rmon collection statistics 1256
rmon event 1256
rmon hc-alarm 1257
Route Map
match ip address 734
match ipv6 next-hop 735
match ipv6 route-source 736
route-map 736
set ipv6 next-hop 737
show config 737
route-map 259
ROUTE-MAP Mode 23
router bgp 297, 764
router bgp (BGP IPv6) 811
router bgp (BGP) 350
Router Information Protocol. See RIP.
router isis 896
ROUTER ISIS Mode 27
router ospf 1076, 1077
router rip 1248
ROUTER RIP Mode 26, 27
router-id 1076
router-id (OSPF) 1076
running config defined 36

S
searching show commands 20
display 20
except 20
find 20
grep 20
secondary VLAN 1149
secure copy 35
Secure Copy (SCP) 36
Security
aaa accounting 1280
aaa accounting suppress 1281

Index | 1553

www.dell.com | support.dell.com
1554

aaa authorization 1284
show accounting 1282
see Neighbor Discovery Protocol 1019
see Storm-Control 1409
seq 1342
IP ACL (extended) 228
standard IP ACL 194
Trace list 1341
seq (extended IP ACLs) 225, 226, 228
seq (Extended MAC ACL) 243
seq (IP prefix ACL) 247
seq (standard MAC ACL) 237
seq arp 225
seq ether-type 226
service password-encryption 1296
service timestamps 96
service-class dynamic dot1p 1179
service-class dynamic dot1p (QoS) 452, 453, 1179, 1181
service-policy input 1203
service-policy output 1204
service-queue 1204
set (policy QoS) 1205
set as-path prepend (Route Map) 260
set automatic-tag (Route Map) 261
set comm-list (Route Map) 261
set community (Route Map) 262
set extcommunity rt (BGP) 408
set extcommunity soo (BGP) 409
set level (Route Map) 263
set local-preference (Route Map) 264
set metric (Route Map) 264
set metric-type (Route Map) 265
set next-hop (Route Map) 266
set origin (Route Map) 266
set tag (Route Map) 267
set weight (Route Map) 267
set-overload-bit 896
set-overload-bit (ISIS) 896
sFlow 1356
sflow collector 1356
sflow enable (globally) 1358
sflow enable (Interface) 1358
sflow extended-gateway enable 1359
sflow extended-router 1360
sflow extended-switch enable 1360
sflow polling-interval (Global) 1361
sflow polling-interval (Interface) 1362
sflow sample-rate (Global) 1362
sflow sample-rate (Interface) 1363

|

Index

SFM 93
shortest path first (SPF) 1104
show alarms 97
show arp 678, 679
show bfd counters 288
show bfd neighbors 289
show cam layer2-qos (policy QoS) 1206
show cam layer3-qos (policy QoS) 1207
show cam mac linecard 925
show cam mac stack-unit 928
show cam maccheck linecard 926
show cam-acl 423, 424
show cam-ipv4flow command 433
show cam-l2acl command 436
show cam-usage command 428
show capture bgp-pdu neighbor 351
show capture bgp-pdu neighbor (BGP IPv6) 812
show chassis 98
show command-history 99
show config 731, 1343
Access list 183
BGP 352, 812
Interface 598
IS-IS 897
OSPF 1077
RIP 1249
Spanning Tree 634, 940, 1273, 1424
Trace list 1343
VRRP 1493
show config (ACL) 183
show config (AS-Path) 271
show config (BGP IPv6) 812
show config (BGP) 352
show config (from INTERFACE RANGE mode) 599
show config (GVRP) 531
show config (interface configuration) 598
show config (IP Community List) 275
show config (IP prefix ACL) 248
show config (ISIS) 897
show config (LAG) 634
show config (MSTP) 995
show config (OSPF) 1077
show config (port monitor) 1146
show config (Route Map) 268
show config (RSTP) 1273
show config (STP) 1424
show config (VLAN) 940
show config (VRRP) 1493
show crypto 1329

Index | 1555

www.dell.com | support.dell.com
1556

show debugging 103, 131
show dot1x cos-mapping interface 176
show dot1x interface 177, 1318
show environment 103, 105
show frrp 523
show garp timers 531
show gvrp 532
show gvrp statistics 533
show hardware layer2 1515
show hardware layer2 acl 1515
show hardware layer3 1515
show hardware stack-unit 1515
show hardware system-flow 1521
show hosts 682
show interface rate 450, 451, 452, 453, 454, 465, 1181
show interfaces 599, 614
show interfaces configured 606
show interfaces dampening 607
show interfaces debounce 608
show interfaces description 608
show interfaces gigabitethernet transceiver 616
show interfaces linecard 608, 610
show interfaces port-channel 635
show interfaces private-vlan command 1153
show interfaces rate (QoS) 1181
show interfaces stack-unit 613
show interfaces switchport 615
show ip accounting access-list (common IP ACL) 187
show ip accounting access-lists 1343
show ip accounting trace-lists 1343
show ip as-path-access-lists 272
show ip bgp 352, 394, 841
show ip bgp cluster-list 354, 395, 813, 842
show ip bgp cluster-list (BGP IPv6) 813
show ip bgp community 355, 360, 396, 815, 843
show ip bgp community-list 357, 396, 843
show ip bgp dampened-paths 358, 397, 844
show ip bgp detail 359, 815
show ip bgp extcommunity-list 360
show ip bgp filter-list 360, 397, 846
show ip bgp flap-statistics 362, 397, 816, 846
show ip bgp inconsistent-as 363, 398, 847
show ip bgp ipv4 extcommunity-list 410
show ip bgp ipv4 multicast 394
show ip bgp ipv4 multicast (MBGP) 394
show ip bgp ipv4 multicast cluster-list (MBGP) 395
show ip bgp ipv4 multicast community (MBGP) 396
show ip bgp ipv4 multicast community-list (MBGP) 396
show ip bgp ipv4 multicast dampened-paths (MBGP) 397

|

Index

show ip bgp ipv4 multicast filter-list (MBGP) 397
show ip bgp ipv4 multicast flap-statistics (MBGP) 397
show ip bgp ipv4 multicast inconsistent-as (MBGP) 398
show ip bgp ipv4 multicast neighbors (MBGP) 399
show ip bgp ipv4 multicast peer-group (MBGP) 401
show ip bgp ipv4 multicast summary (MBGP) 402
show ip bgp ipv6 351, 812
show ip bgp ipv6 unicast 813, 841
show ip bgp ipv6 unicast cluster-list 842
show ip bgp ipv6 unicast community 814, 843
show ip bgp ipv6 unicast community-list 814, 843
show ip bgp ipv6 unicast dampened-paths 815, 844
show ip bgp ipv6 unicast detail 844
show ip bgp ipv6 unicast extcommunity-list 815
show ip bgp ipv6 unicast filter-list 816, 846
show ip bgp ipv6 unicast flap-statistics 816, 846
show ip bgp ipv6 unicast inconsistent-as 817, 847
show ip bgp ipv6 unicast neighbors 818, 847
show ip bgp ipv6 unicast peer-group 821, 850
show ip bgp ipv6 unicast summary 823, 851
show ip bgp neighbor 364, 399, 818, 847
show ip bgp neighbors 364
show ip bgp next-hop 368, 823
show ip bgp next-hops 368, 821
show ip bgp paths 369, 401, 823, 850
show ip bgp paths as-path 370, 824
show ip bgp paths community 371, 411, 824
show ip bgp paths extcommunity 411, 824
show ip bgp peer-group 372, 401, 821, 850
show ip bgp regexp 374
show ip bgp regexp (BGP IPv6) 825
show ip bgp summary 375, 402, 851
show ip bgp summary (BGP IPv6) 822
show ip bgpipv6 unicast community-list 814
show ip cam 683, 685
show ip cam linecard 683
show ip cam stack-unit 685
show ip community-lists 276
show ip extcommunity-list 411
show ip fib linecard 687, 688, 752
show ip fib stack-unit 688
show ip flow 689
show ip flow interface 690
show ip igmp groups 557
show ip igmp interface 559
show ip interface 691
show ip management-route 693
show ip mroute 1010
show ip ospf 1078

Index | 1557

www.dell.com | support.dell.com
1558

show ip ospf asbr 1079
show ip ospf database 1080
show ip ospf database asbr-summary 1081
show ip ospf database database-summary 1092
show ip ospf database external 1083
show ip ospf database network 1085
show ip ospf database nssa-external 1086
show ip ospf database opaque-area 1087
show ip ospf database opaque-as 1088
show ip ospf database opaque-link 1089
show ip ospf database router 1090
show ip ospf database summary 1092
show ip ospf interface 1094
show ip ospf neighbor 1095
show ip ospf routes 1096
show ip ospf statistics global 1097
show ip ospf timers rate-limit 1101
show ip ospf virtual-links 1102
show ip pim interface 1121, 1123, 1138
show ip pim neighbor 1122, 1124, 1139
show ip pim rp mapping 1123, 1139
show ip pim tib 1125, 1127, 1128, 1140
show ip prefix-list detail 249
show ip protocols 694, 695
show ip rip database 1249
show ip route 695
show ip route list 697, 698
show ip route summary 698, 699
show ip ssh 1330
show ip ssh client-pub-keys 1330
show ip ssh rsa-authentication 1331
show ip traffic 699, 700
show ip udp-helper 645
show ipv6 accounting access-list 731
show ipv6 cam stack-unit 751
show ipv6 fib stack-unit 752
show ipv6 neighbors 1025
show isis database 897
show isis hostname 899, 900
show isis interface 900
show isis neighbors 901
show isis protocol 903
show isis traffic 903
show lacp 912
show linecard 47, 110
show logging 1396
show logging driverlog stack-unit (S-Series) 1397
show mac accounting access-list 233
show mac accounting destination 932

|

Index

show mac cam 934
show mac learning-limit 934
show mac-address-table 930
show mac-address-table aging-time 932
show memory 114, 116
show monitor session 1146
show ntp associations 1445
show ntp status 1446
show port-channel-flow 637
show port-channel-flow command 639
show privilege 1297
show processes cpu 116, 119
show processes memory 126, 129
show processes switch-utilization 131
show protocol-termination-table linecard 702
show protocol-tunnel 1353
show qos class-map 1208
show qos policy-map 1209
show qos policy-map-input 1211
show qos policy-map-output 1212
show qos qos-policy-input 1212
show qos qos-policy-output 1213
show qos statistics 1214
show qos wred-profile 1217
show queue statistics egress (QoS) 1224
show queue statistics ingress (QoS) 1228
show range 621
show redundancy 538, 1400, 1401
show rmon 1258
show rmon alarms 1259
show route-map 268, 738
show route-map (Route Map) 268
show rpm 132
show running-config acl 732
show running-config extcommunity-list 377, 412, 1250
show running-config monitor session 1147
show running-config track (Object Tracking) 1030, 1130
show running-config uplink-state-group 1470
show sflow 1364
show sfm 52
show snmp 1368, 1369, 1370
show software ifm 134
show spanning-tree 0 1424
show spanning-tree 0 (STP) 1424
show spanning-tree mst configuration 995
show spanning-tree msti 996
show spanning-tree pvst 1162
show spanning-tree rstp (RSTP) 1273
show system 136

Index | 1559

www.dell.com | support.dell.com
1560

show system brief (S-Series) 136
show system stack-ports 1402
show system stack-unit (S-Series) 136
show tcp statisitics 703
show tcp statistics 704
show tdr 641
show tech-support 33, 34, 41, 46, 47, 152
show tech-support (S-Series) 142
show track (Object Tracking) 1030
show track ipv6 route (Object Tracking) 1039
show uplink-state-group 1471
show users 1297
show version 54
show vlan 941
show vlan command 941
show vlan private-vlan command 1154
show vlan private-vlan mapping command 1156
show vrrp 1493, 1502
shutdown 623
Single Window Protocol Queue (SWPQ) 123
Site-of-Origin (soo) 404
SNMP
number of traps supported 1367
versions supported 1367
snmp ifmib ifalias long 1371
snmp trap link-status 1384
snmp-server community 1371
snmp-server contact 1373
snmp-server enable traps 1373, 1375
snmp-server host 1377
snmp-server location 1379, 1380
snmp-server trap-source 1380
soo (Site-of-Origin) 404
source (port monitoring) 1147
Spanning Tree Protocol
BPDU guard 1429
interface cost 1428
Loop guard 1428
portfast 1429
Root guard 1428
spanning-tree 1428
spanning-tree (MSTP) 998
spanning-tree 0 1428
spanning-tree msti 998
spanning-tree mstp 999
spanning-tree pvst 1165
spanning-tree rstp (RSTP) 1275
speed 624, 625
100/1000 Base-T Ethernet interfaces 624
Management interface 625

|

Index

SPF (Shortest Path First) 1053
spf-interval 905
spf-interval (ISIS) 905
split 40G port 626
S-Series master unit 1400
S-Series member unit, resetting 1401
S-Series model identifier 1405
S-Series stacking 1399
S-Series-only commands
buffer 1508, 1509
buffer-profile 1510, 1511
diag stack-unit 1506
offline stack-unit 1506
online stack-unit 1507
redundancy disable-auto-reboot rpm 1400
reset stack-unit 1400
show environment 105
show hardware stack-unit 1515
show hardware system-flow 1521
show inventory 109
show memory 116
show processes cpu 119
show redundancy 1401
show system stack-ports 1402
stack-unit priority 1404
stack-unit provision 1404
stack-unit renumber 1405
upgrade system stack-unit 1406
SSH
ssh-peer-rpm 145
ssh 1332
stack member identifier 1405
stack standby unit 1401
Stackable VLAN feature 1449
Stackable VLANs (VLAN-Stacking) 1349
stacking, S-Series 1399
stack-unit priority 1404
stack-unit provision 1404
stack-unit renumber 1405
standby master 1401
static LAG commands 907
static route 678
Storm-Control 1409
Important Points to Remember 1409
STP
PVST+ 1159
Streamline Upgrade 36
strict-priority queue (QoS) 460, 1183
subnet masks 189
summary-address 1103

Index | 1561

www.dell.com | support.dell.com
1562

summary-address (OSPF) 1103
suppress threshold (dampening), interface 573
switchport 627
switchport backup interface 627
switchport mode private-vlan command 1157
SWPQ (Single Window Protocol Queue) 123
System Time and Date 1431

T
tacacs-server host 1307
tacacs-server key 1308
tagged 944
tagged command 944
tc-flush-standard 1277
tc-flush-standard (MSTP) 1000
tc-flush-standard (PVST+) 1168
TDR
Important Points to Remember 640
TDR (Time Domain Reflectometer) 640
tdr-cable-test 640
Telnet
number of Telnet sessions supported 86
telnet 145
terminal length 147, 148
terminal monitor 1398
test cam-usage 429, 733
TFTP server, copy running-config to 36
threshold 1219
threshold metric (Object Tracking) 1032
Time Domain Reflectometer (TDR) 640
Important Points to Remember 640
timeout login response 1298
timer (FRRP) 524
timers basic 1251
timers bgp 378, 825
timers bgp (BGP IPv6) 825
timers spf 1104, 1105
timers spf (OSPF) 1104, 1105
TOS 1082, 1084, 1086, 1088, 1091, 1093
traceroute 148
track 1496, 1504
track (Object Tracking) 1033
track (VRRP) 1496
track interface ip route metric threshold 1034
track interface ip route reachability (Object Tracking) 1035
track interface ip routing (Object Tracking) 1036
track interface ipv6 route metric threshold (Object Tracking) 1041
track interface ipv6 route reachability (Object Tracking) 1042
track interface ipv6 routing (Object Tracking) 1040
track interface line-protocol (Object Tracking) 1037

|

Index

track ip command 945
track resolution ip route (Object Tracking) 1038
track resolution ipv6 route (Object Tracking) 1043
tracking. See Object tracking.
trap, MAC address station-move 919
tree information base (tib) 1131
Troubleshooting 1525
trunk port 1150
trust diffserv 1220
trust ipv6-diffserv 759
Type of Service. See TOS.

U
u-Boot 1461
undebug all 150
untagged 946
untagged command 946
upgrade fpga-image 62
upgrade sfm-fpga 60
upgrade system stack-unit
uplink-state-group 1472
upstream 1473
username 1299

1406

V
version 1252
Virtual LANs. See VLANs.
virtual-address 1497
virtual-address (VRRP) 1497
VLAN
description 936, 1056
vlan bridge-priority (PVST+) 1169
vlan forward-delay (PVST+) 1169
vlan hello-time (PVST+) 1170
vlan max-age (PVST+) 1171
VLAN types (private VLAN) 1149
VLANs
ACL support 587
definition 936
IP features not supported 936
vlan-stack access 1454
vlan-stack compatible 1455
vlan-stack protocol-type 1456
vlan-stack trunk 1457
VLAN-Stack VLANs
Important Points to Remember 1449
VLAN-Stacking 1449
VLAN-Stacking (Stackable VLANs) 1349
VMAN tag 1456
vrrp bfd neighbor interval 290

Index | 1563

www.dell.com | support.dell.com

vrrp delay minimum 1498, 1499
vrrp-group 1499, 1500, 1504

W
wanport command 628
warm upgrade 539
Weighted Fair Queuing (WFQ) 1199
Weighted Random Early Detection (WRED)
WFQ 1199
WRED 1194
wred 1221
WRED (Weighted Random Early Detection)
wred-profile 1222
write 152

X
XML
terminal xml

1564

|

Index

148

1194

1206

Command Index
A
aaa accounting 1280
aaa accounting suppress 1281
aaa authorization 1284, 1285
Access list
access-class 184, 1290
clear counters ip access-group 185
ip access-group 185
show config 183, 268
show ip accounting access-list 187
Access list (extended)
deny 197
deny arp 199
deny ether-type 200
deny tcp 205, 1335
deny udp 208
ip access-list extended 210
permit 211, 1338
permit arp 213
permit ether-type 215
permit tcp 218
permit udp 221, 1340
seq 228
seq arp 225
seq ether-type 226
Access list (standard)
deny 189
ip access-list standard 190
permit 191
seq 194
access-class 184
ACL
description 182
address family ipv4 multicast (MBGP) 379
address family ipv6 unicast (BGP IPv6) 828
adjacency-check 863
advertise dot1-tlv 956
advertise dot3-tlv 957
advertise management -tlv 957
advertise med guest-voice-signaling 967
advertise med location-identification 967
advertise med power-via-mdi 968
advertise med softphone-voice 969
advertise med streaming-video 969
advertise med video-conferencing 970
advertise med video-signaling 971
advertise med voice 972
advertise med voice-signaling 972
aggregate-address (BGP) 296, 297, 764
Alarms
audible cut-off 67
clear alarms 71

show alarms 97
ARP
arp 648
arp timeout 651
clear arp-cache 651
debug arp 655
show arp 678
AS-PATH Access list
deny 269
ip as-path access-list 270
permit 271
show config 271
show ip as-path-access-list

272

B
back-up destination 1476, 1479, 1484
bandwidth-percentage 1185
banner exec 67
banner login 68
banner motd 69
Bare Metal Provisioning commands
reload-type 413
bfd all-neighbors (OSPF) 278
bfd enable (Configuration) 279
bfd enable (Interface) 280
bfd interval 280
bfd neighbor 281
bfd protocol-liveness 282
BGP
aggregate-address 296, 297, 380, 764, 828
bgp always-compare-med 298, 765
bgp asnotation 299
bgp bestpath as-path ignore 300, 766
bgp bestpath med confed 301, 766
bgp client-to-client reflection 302, 767
bgp cluster-id 303, 768
bgp confederation identifier 303
bgp confederation peers 304, 769
bgp dampening 305, 381, 770, 829
bgp default local-preference 306, 771
bgp fast-external-fallover 308, 772
bgp graceful-restart 309, 773
bgp log-neighbor-changes 310, 774
bgp non-deterministic-med 310, 774
bgp router-id 312, 776
bgp soft-reconfig-backup 777
capture bgp-pdu max-buffer-size 314, 778
capture bgp-pdu neighbor (ipv4) 314
capture bgp-pdu neighbor (ipv6) 777
clear ip bgp dampening 316
clear ip bgp flap-statistics 316, 382, 831

Command Index | 1565

www.dell.com | support.dell.com

clear ip bgp ipv6 dampening 781
clear ip bgp ipv6 flap-statistics 781
clear ip bgp ipv6 unicast soft 782
clear ip bgp peer-group 316, 781
debug ip bgp 317, 783
debug ip bgp dampening 318
debug ip bgp events 319
debug ip bgp events (ipv6) 784
debug ip bgp ipv6 dampening 785
debug ip bgp ipv6 unicast soft-reconfiguration 785
debug ip bgp keepalives 319, 786
debug ip bgp notifications 320, 786
debug ip bgp updates 321, 384, 787, 831, 832
default-metric 788
description 322, 788
distance bgp 323, 789
maximum-paths 324, 790
neighbor activate 324, 790
neighbor add-path 325
neighbor advertisement-interval 326, 791
neighbor allowas-in 327, 791
neighbor default-originate 327, 792
neighbor description 328, 793
neighbor distribute-list 328, 387, 793, 835
neighbor ebgp-multihop 329, 794
neighbor filter-list 330, 795
neighbor graceful-restart 331
neighbor local-as 332
neighbor maximum-prefix 333, 796
neighbor next-hop self 334, 797
neighbor password 334
neighbor peer-group
assigning peers 335, 798
creating group 336, 799
neighbor remote-as 338, 800
neighbor remove-private-as 338, 801
neighbor route-map 339, 390, 801, 838
neighbor route-reflector-client 340, 802
neighbor send-community 341, 803
neighbor shutdown 341, 803
neighbor subnet 343
neighbor timers 343, 805
neighbor update-source 344, 806
neighbor weight 345, 807
network 346, 807, 839
network backdoor 346
redistribute 347, 392, 809, 840
redistribute isis 810
redistribute ospf 348, 349, 393, 810
router bgp 350, 811
show capture bgp-pdu neighbor (ipv4) 351
show config 352, 812
show ip bgp 352, 377
show ip bgp cluster-list 354, 395

1566

|

Command Index

show ip bgp community 355, 396, 843
show ip bgp community-list 357, 396, 843
show ip bgp dampened-paths 358, 397, 815, 844
show ip bgp extcommunity-list 360, 815
show ip bgp filter-list 397, 846
show ip bgp flap-statistics 362, 397, 846
show ip bgp inconsistent-as 363, 398, 817, 847
show ip bgp ipv6 812, 813
show ip bgp ipv6 unicast cluster-list 813
show ip bgp ipv6 unicast community 814
show ip bgp ipv6 unicast community-list 814
show ip bgp ipv6 unicast detail 844
show ip bgp ipv6 unicast filter-list 816
show ip bgp ipv6 unicast flap-statistics 816
show ip bgp ipv6 unicast neighbors 818
show ip bgp ipv6 unicast summary 822
show ip bgp neighbor 364, 399, 847
show ip bgp next-hops 368, 823
show ip bgp paths 369, 823
show ip bgp paths as-path 370, 824
show ip bgp paths community 371, 411, 412, 824
show ip bgp peer-group 372, 401, 821, 850
show ip bgp regexp 374, 825
show ip bgp summary 375, 402, 851
timers bgp 825
bgp bestpath med missing-as-best 301
bgp four-octet-as-support 308, 772
bgp regex-eval-optz-disable 311, 775
bgp soft-reconfig-backup 313
boot config 30
boot host 31
boot network 32
boot system 33
boot system gateway 33
bridge-priority (RSTP) 1267
bridge-priority (STP) 1419
buffer 1508

C
calendar set 1432
cam l2acl 435
cam-acl 418, 420, 708, 709
cam-audit linecard 70
cam-audit stack-unit 70
cam-ipv4flow (EtherScale) 431, 432
cam-l2acl 435
cam-optimization 420
cam-profile default microcode 421
cam-profile eg-default microcode 421
cam-profile ipv4-320k microcode 421
cam-profile ipv4-egacl-16k microcode 421
cam-profile ipv6-extacl microcode 421

cam-profile l2-ipv4-inacl microcode 421
cam-profile microcode (Config mode) 421
cam-profile unified-default microcode 421
capture bgp-pdu max-buffer-size 314, 778
capture bgp-pdu neighbor (ipv4) 314
capture bgp-pdu neighbor (ipv6) 777
cd 34
change bootflash-image 34
channel-member 630
class-map 1186
clear alarms 71
clear arp-cache 651
clear bfd counters 282
clear counters ip access-group 185
clear counters ipv6 access-group 710
clear counters mac access-group 231
clear dampening 570
clear frrp 518
clear gvrp statistics interface 527
clear hardware stack-unit 1513
clear hardware system-flow 1514
clear host (DNS) 652
clear ip bgp 315, 382, 830
clear ip bgp * (asterisk) 778
clear ip bgp as-number 779
clear ip bgp ipv4 multicast 830
clear ip bgp ipv6-address 780
clear ip fib linecard 653
clear ip mroute 1003
clear ip mroute snooping 1004
clear ip ospf statistics 1052
clear ip prefix-list 245
clear ip route 654
clear ipv6 fib 740
clear ipv6 route 740
clear lacp counters 908
clear line 71
clear lldp counters 958
clear lldp neighbors 958
clear logging 1385
clear mac-address-table 916
clear qos statistics 1187
clear queue statistics ingress (QoS) 1223, 1224
clear tcp statistics 654
clear ufd-disable 1465
clear vlt statistics 1477
clock read-calendar 1433
clock set 1433
clock summer-time date 1434
clock summer-time recurring 1435
clock timezone 1436
clock update-calendar 1437
Community Access list
deny 273

ip community-list 273
permit 274
show config 275
show ip community-lists 276
configure 72
continue (Route Map) 251
CoPP
control-plane 439
service-policy rate-limit-cpu-queues 439
service-policy rate-limit-protocols 440
show cpu-queue rate 441
show ip protocol-queue-mapping 441
show ipv6 protocol-queue-mapping 442
copy 35
copy (Streamline Upgrade) 36
copy flash 35, 58, 62
copy ftp

35, 58, 62
copy rpm0flash

35
copy rpm0slot0

35
copy rpm1 35
copy rpm1flash 35
copy run start 41, 42
copy running-config 35
copy running-config ftp

36
copy running-config startup-config duplicate
copy running-config tftp

37

36
copy scp 35
copy slot0 35
copy startup-config 35
copy tftp 35, 58, 62
copy usbflash 35
crypto key generate 1320
cx4-cable-length 571

D
dampening 572
Debug
debug arp 655
debug ftpserver 73
debug ip bgp 317
debug ip bgp (ipv6) 783
debug ip bgp dampening 318
debug ip bgp events 319
debug ip bgp events (ipv6) 784
debug ip bgp ipv6 dampening 785
debug ip bgp ipv6 unicast soft-reconfiguration
debug ip bgp keepalives 319, 786

785

Command Index | 1567

www.dell.com | support.dell.com
1568

debug ip bgp notifications 320, 786
debug ip bgp updates 321, 384, 787, 831, 832
debug ip icmp 657
debug ip igmp 551
debug ip msdp 976
debug ip ospf 1053
debug ip packet 658
debug ip pim 1109
debug ip rip 1235
debug ipv6 pim 1131
debug isis 866
debug isis adj-packets 866
debug isis local-updates 867
debug isis snp-packets 867
debug isis spf-triggers 868
debug isis update-packets 868
debug multiple spanning-tree 988
debug ntp 1438
debug radius 1300
debug spanning-tree 1420
debug vrrp 1489, 1501
show debugging 103
undebug all 150
debug bfd 283
debug cpu-traffic-stats 72
debug fefd 947
debug frrp 518
debug gvrp 527
debug ip bgp ipv4 multicast dampening (MBGP) 383
debug ip bgp peer-group updates (MBGP) 384
debug ip bgp soft-reconfiguration 321
debug ip bgp updates (MBGP) 384
debug ip dhcp 656
debug ip ssh 1321
debug ip udp-helper 642
debug ipv6 pim 1131
debug lldp interface 959
debug protocol-tunnel 1350
debug spanning-tree rstp 1268
debug uplink-state-group 1466, 1469
default logging buffered 1386
default logging console 1386
default logging monitor 1387
default logging trap 1387
default-metric (BGP) 322
delete 38
deny 711
Community Access list 273
IP ACL (extended) 197
MAC ACL (extended) 239
MAC ACL (standard) 234
Prefix List 245
standard IP ACL 189
deny (AS-Path) 269

|

Command Index

deny (BGP) 404
deny (Extended IP ACL) 197
deny arp 199
deny arp (Extended IP ACL) 199
deny ether-type (Extended IP ACL) 200
deny icmp (Extended IP ACL) 202
deny regex (BGP) 405
deny tcp 713
deny tcp (Extended IP ACL) 205
deny udp 716
deny udp (Extended IP ACL) 208
description (ACL) 182
description (BGP) 322, 405, 788
description (FRRP) 519
description (IS-IS) 870
description (MSTP) 989
description (PVST) 1160
description (RIP) 1237
description (Route Map) 252
description (RSTP) 1269
description (STP) 1421
description (VLAN) 936, 1056
diag stack-unit 1506
dir 38
disable 73
disable (FRRP) 520
disable (GVRP) 528
disable (LLDP) 960
disable (MSTP) 989
disable (PVST+) 1160
disable (RSTP) 1270
disable (STP) 1421
DNS
clear host 652
ip domain-list 662
ip domain-lookup 662
ip domain-name 663
dot1x auth-fail-vlan 167, 1311
dot1x auth-server 168, 1312
dot1x guest-vlan 169, 170, 1313
dot1x mac-auth-bypass 1313
dot1x max-eap-req 171, 1314
dot1x port-control 172, 1314
dot1x quiet-period 173, 1315
dot1x reauthentication 173, 1315
dot1x reauth-max 174, 1316
dot1x server-timeout 174, 1316
dot1x supplicant-timeout 175, 1317
dot1x tx-period 175, 1317
download alt-boot-image 39
download alt-full-image 39
downstream 1467, 1469
downstream auto-recover 1468
duplex (10/100 Interfaces) 575

duplex (Management)

574

E
ecmp-group, ECMP link bundle monitoring 495
ecmp-group, LAG link bundle monitoring 576
enable 75
enable xfp-power-updates 75, 76
end 76
epoch 77
exec-banner 78
exec-timeout 78
exit 79

F
failover group, LAG 631
fate-sharing group, LAG 631
FEFD 947
debug fefd 947
fefd 948
fefd disable 949
fefd interval 950
fefd mode 951
fefd reset 952
fefd-global 949
fefd-global interval 950
show fefd 952
fefd 948
fefd mode 951
flow-based enable 1144
flowcontrol 576
format (C-Series and E-Series) 40
format flash (S-Series) 41
forward-delay (MSTP) 989
forward-delay (RSTP) 1270
forward-delay (STP) 1422
FTP
debug ftpserver 73
ftp-server enable 79
ftp-server topdir 80
ftp-server username 81
ip ftp password 82
ip ftp source-interface 82
ip ftp username 83

G
garp timers 528
gvrp enable 529
gvrp registration 530

H
hardware watchdog 1514
hash-algorithm ecmp (C-Series and S-Series)
hello (LLDP) 961
hello-time (MSTP) 990
hello-time (RSTP) 1271
hello-time (STP) 1422
hostname 81

499

I
IGMP
clear ip igmp groups 550
debug ip igmp 551
igmp snooping fast-leave 563
ip igmp immediate-leave 552
ip igmp last-member-query-interval 553
ip igmp querier-timeout 553
ip igmp query-interval 554
ip igmp query-ma-resp-time 555
ip igmp static-group 556
show ip igmp groups 557
show ip igmp interface 559
IGMP Snooping
igmp snooping flood 563
igmp snooping last-member-query-interval 564
igmp snooping querier 565
ip igmp snooping enable 562
ip igmp snooping mroute 564
show ip igmp snooping mrouter 566
Interface
clear counters 569
description 573
disable-on-sfm-failure 574
dot1p-priority 449, 507, 1174
interface 579
interface loopback 580
interface ManagementEthernet 581
interface null 582
interface port-channel 632
interface vlan 587
ip unreachables 673
negotiation auto 593
show config 598
show interfaces 599, 611, 616
show interfaces linecard 610
show interfaces switchport 615
show ipv6 interfaces ManagementEthernet 753
shutdown 623
switchport 627
interface (FRRP) 520
interface range 582

Command Index | 1569

www.dell.com | support.dell.com
1570

interface range macro (define) 585
interface range macro name 586
interface vlan 587
ip access-group 185
ip access-list extended (Extended IP ACL) 210
ip access-list standard 190
ip address 660
ip as-path access-list 270
ip community-list 273
ip directed-broadcast 661
ip extcommunity-list (BGP) 406
ip fib download-igp-only 664
ip helper-address 664
ip helper-address hop-count disable 665
ip host 666, 743
ip igmp snooping enable 562
ip igmp snooping fast-leave 563
ip igmp snooping flood 563
ip igmp snooping last-member-query-interval 564
ip igmp snooping mrouter 564
ip igmp snooping querier 565
ip local-proxy-arp 1150
ip max-frag-count 667
ip mroute 1004
ip multicast-lag-hashing 1005
ip multicast-limit 1006
ip multicast-routing 1006, 1007, 1015
ip name-server 669, 744
ip pim bsr-border 1110
ip prefix-list 246
ip proxy-arp 670
ip radius source-interface 1301
ip redirects 670
ip route 671
ip route bfd 284, 285
ip source-route 673
ip ssh authentication-retries 1322
ip ssh connection-rate-limit 1323
ip ssh hostbased-authentication enable 1323
ip ssh key-size 1324
ip ssh password-authentication 1324
ip ssh pub-key-file 1325
ip ssh rhostsfile 1326
ip ssh rsa-authentication (Config) 1327
ip ssh rsa-authentication (EXEC) 1327
ip ssh server 1328
ip udp-broadcast-address 643
ip udp-helper udp-port 644
ipv6 access-list 718
ipv6 control-plane egress-filter 719
IPv6 PIM
debug ipv6 pim 1131
ipv6 pim dr-priority 1133
ipv6 pim query-interval 1134

|

Command Index

ipv6 pim sparse-mode 1137
show ipv6 pim bsr-router 1138
show ipv6 pim interface 1138
show ipv6 pim neighbor 1139
show ipv6 pim rp 1139
show ipv6 pim tib 1140
ipv6 pim dr-priority 1133
ipv6 pim query-interval 1134
ipv6 pim sparse-mode 1137
ipv6 route 745
ipv6 router isis (ISIS_IPv6) 878
IS-IS
advertise 863
area-password 864
clear config 865
clear isis 865
clns host 865
debug isis 866
debug isis adj-packets 866
debug isis local-updates 867
debug isis snp-packets 867
debug isis spf-triggers 868
debug isis update-packets 868
default-information originate 869
description 870
distance 870
distribute-list in 871
distribute-list out 872
domain-password 873
hello padding 877
hostname dynamic 877
ignore-lsp-errors 878
ip router isis 878
isis circuit-type 879
isis csnp-interval 880
isis hello-interval 880
isis hello-multiplier 881
isis metric 883
isis network point-to-point 883
isis password 884
isis priority 884
is-type 885
log-adjacency-changes 886
lsp-gen-interval 886
lsp-mtu 887
lsp-refresh-interval 887
max-area-addresses 888
maximum-paths 889
max-lsp-lifetime 889
metric-style 890
multi-topology 890
net 891
passive-interface 891
redistribute 892

redistribute ospf 895
router isis 896
set-overload-bit 896
show config 897
show isis database 897
show isis hostname 900
show isis interface 900
show isis neighbors 901
show isis protocol 903
spf-interval 905
isis bfd all-neighbors 285
isis hello padding 882

L
lacp port-priority 910
lacp system-priority 910
lacp ungroup member-independent vlt 1477
LAG
channel-member 630
interface port-channel 632
minimum-links 633
port-channel failover-group 634
show config 634
show interfaces port-channel 635
show port-channel-flow 637
LAG fate-sharing group 631
lfs enable 589
line 86
line aux 86
line console 86
line vty 86
linecard 87
linecard, 4-port 40G 88
link debounce 589
load-balance 676
Logging
clear logging 1385
default logging buffered 1386
default logging console 1386
default logging monitor 1387
default logging trap 1387
logging 1387
logging buffered 1388
logging console 1389
logging facility 1390
logging history 1391
logging history size 1391
logging monitor 1392
logging on 1392
logging source-interface 1393
logging synchronous 1394
logging trap 1395

no logging on 1393
show logging 1396
logging 1387
logging buffered 1388
logging console 1389
logging facility 1390
logging history 1391
logging history size 1391
logging kernel-coredump 42
logging kernel-coredump server
logging monitor 1392
logging on 1392
logging source-interface 1393
logging synchronous 1394
logging trap 1395

43

M
MAC Access list
clear counters mac access-group 231
mac access-group 231
show mac accounting access-list 186, 232,
MAC Access list (extended)
deny 239
mac-access-list extended 240
permit 241
seq 243
MAC Access list (standard)
deny 234
mac-access-list standard 235
permit 236
seq 237
mac access-group 231
mac access-list extended 240
mac access-list standard 235
mac accounting destination 917
mac cam fib-partition 920
mac learning-limit 921
mac learning-limit learn-limit-violation 922
mac learning-limit reset 924
mac learning-limit station-move-violation 924
mac-address-table aging-time 917
mac-address-table static 918
mac-address-table station-move refresh-arp 920
mac-address-table station-move threshold 919
match as-path (Route Map) 253
match community (Route Map) 253
match extcommunity (BGP) 406
match interface (Route Map) 254
match ip access-group 1188
match ip address (Route Map) 254
match ip dscp 1189
match ip next-hop (Route Map) 255

233

Command Index | 1571

www.dell.com | support.dell.com
1572

match ip precedence 1191
match ip route-source (Route Map) 256
match ipv6 address 735
match ipv6 next-hop 735
match ipv6 route-source 736
match mac access-group (policy QoS) 1192
match mac dot1p (policy QoS) 1192
match metric (Route Map) 256
match origin (Route Map) 257
match route-type (Route Map) 257
match tag (Route Map) 258
max-age (MSTP) 991
max-age (RSTP) 1272
max-age (STP) 1423
max-hops (MSTP) 991
MBGP Commands 378, 827
member (Stackable VLAN) 1452
member-vlan (FRRP) 521
minimum-links 633
mode (FRRP) 522
mode (LLDP) 961
monitor 589
Monitor Session
description 1144
monitor session 1145
motd-banner 90
MSDP
clear ip msdp peer 976
clear ip msdp sa-cache 976
debug ip msdp 976
ip msdp default-peer 977
ip msdp log-adjacency-changes 978
ip msdp mesh-group 978
ip msdp originator-id 979, 981
ip msdp peer 980
ip msdp shutdown 982
ip multicast-msdp 983
show ip msdp 983
msti (MSTP) 992
MSTP
debug spanning-tree mstp 988
disable 989
forward-delay 989
hello-time 990
max-age 991
max-hops 991
msti 992
name 993
protocol spanning-tree mstp 993
revision 994
show config 995
show spanning-tree mst configuration 995
show spanning-tree msti 996
spanning-tree 998

|

Command Index

spanning-tree msti 998
spanning-tree mstp 999
mtrace 1008
mtu 592
Multiple Spanning Tree Protocol
see MSTP 987
multiplier (LLDP) 962

N
name (MSTP) 993
name (VLAN) 940
neighbor 837
neighbor activate (BGP IPv6) 833
neighbor activate (MBGP) 385
neighbor advertisement-interval (BGP IPv6) 834
neighbor advertisement-interval (MBGP) 386
neighbor bfd 286
neighbor bfd disable 287
neighbor default-originate (BGP IPv6) 835
neighbor default-originate (MBGP) 387
neighbor filter-list aspath (BGP IPv6) 836
neighbor filter-list aspath (MBGP) 388
neighbor maximum-prefix (BGP IPv6) 836
neighbor maximum-prefix (MBGP) 389
neighbor next-hop-self (BGP IPv6) 837
neighbor next-hop-self (MBGP) 389
neighbor peer-group passive (BGP) 337
neighbor remove-private-as (BGP IPv6) 838
neighbor remove-private-as (MBGP) 390
neighbor route-map (BGP IPv6) 838
neighbor route-reflector-client (BGP IPv6) 839
neighbor route-reflector-client (BGP) 340
neighbor soft-reconfiguration inbound 804
network (BGP IPv6) 839
network (MBGP) 392
NTP
debug ntp 1438
ntp authenticate 1438
ntp authentication-key 1439
ntp broadcast client 1440
ntp disable 1440
ntp multicast client 1440
ntp server 1441
ntp source 1442
ntp trusted-key 1442
ntp update-calendar 1443
show ntp associations 1445
show ntp status 1446

O
Object Tracking

debug track 1028
delay 1028
description 1029
show running-config track 1030
show track 1030
show track ipv6 route 1039
threshold metric 1032
track 1033
track interface ip route metric threshold 1034
track interface ip route reachability 1035
track interface ip routing 1036
track interface ipv6 route metric threshold 1041
track interface ipv6 route reachability 1042
track interface ipv6 routing 1040
track interface line-protocol 1037
track resolution ip route 1038
track resolution ipv6 route 1043
offline stack-unit 1506
online stack-unit 1507
OSPF
area default-cost 1047
area nssa 1047
area range 1048
area stub 1049
area virtual-link 1049
auto-cost 1051
clear ip ospf 1051
debug ip ospf 1053
default-information originate 1055
default-metric 1055
distance 1056
distance ospf 1057
distribute-list in 1058
distribute-list out 1059
enable inverse mask 1059
fast-convergence 1060
graceful-restart grace-period 1061
graceful-restart helper-reject 1062
graceful-restart mode 1062
graceful-restart role 1063
ip ospf auth-change-wait-time 1063
ip ospf authentication-key 1064
ip ospf cost 1064
ip ospf dead-interval 1065
ip ospf hello-interval 1065
ip ospf message-digest-key 1066
ip ospf mtu-ignore 1067
ip ospf network 1067
ip ospf priority 1068
ip ospf retransmit-interval 1068
ip ospf transmit-delay 1069
log-adjacency-changes 1069
maximum-paths 1070
mib-binding 1070

network area 1071
passive-interface 1071
redistribute 1073
redistribute isis 1075
router ospf 1076
show config 1077
show ip ospf 1078
show ip ospf database 1080
show ip ospf database asbr-summary 1081
show ip ospf database database-summary 1092
show ip ospf database external 1083
show ip ospf database network 1085
show ip ospf database nssa-external 1086
show ip ospf database opaque-area 1087
show ip ospf database opaque-as 1088
show ip ospf database opaque-link 1088, 1089
show ip ospf database router 1090
show ip ospf interface 1094
show ip ospf neighbor 1095
show ip ospf virtual-links 1102
summary-address 1103
timers spf 1104
timers throttle lsa 1104, 1105

P
peer-link port-channel 1478
permit 719
AS-Path Access list 271
Community Access list 274
IP ACL (standard) 191
MAC ACL (extended) 241
MAC ACL (standard) 236
Prefix list 247
standard IP ACL 191
permit (BGP) 407
permit (Extended IP ACL) 211
permit arp (Extended IP ACL) 213
permit ether-type (Extended IP ACL) 215
permit icmp (Extended IP ACL) 216
permit regex (BGP) 407
permit tcp 721
permit tcp (Extended IP ACL) 218
permit udp 723
permit udp (Extended IP ACL) 221
PIM-SM
clear ip pim rp-mapping 1108
clear ip pim snooping tib 1109
clear ip pim tib 1108
debug ip pim 1109
ip pim dr-priority 1111, 1114
ip pim query-interval 1114, 1115
ip pim rp-address 1115, 1135

Command Index | 1573

www.dell.com | support.dell.com
1574

ip pim snooping 1117
ip pim sparse-mode 1118
ip pim sparse-mode sg-expiry-timer 1118
no ip pim snooping dr-flood 1119
show ip pim bsr-router 1120
show ip pim interface 1121
show ip pim neighbor 1122
show ip pim rp 1123
show ip pim snooping interface 1123
show ip pim snooping neighbor 1124
show ip pim summary 1127
show ip pim tib 1125, 1128
show running-config pim 1130
ping 90
policy-aggregate 1193
policy-map-input 1195
policy-map-output 1195
Port Channel
channel-member 630
interface port-channel 632
minimum-links 633
minimum-links command 633
show interfaces port-channel 635
port-channel failover-group 634
port-channel mode 911
port-channel-protocol lacp 912
portmode hybrid 595
power-off 93
power-on 93
power-reset cycle 94
Prefix list
clear ip prefix-list 245
deny 245
ip prefix-list 246
permit 247
seq 247
show config 248
show ip prefix-list detail 249
show ip prefix-list summary 249
private-vlan mapping secondary-vlan 1152
private-vlan mode 1151
protocol frrp (FRRP) 522
protocol gvrp 531
protocol lldp (Configuration) 962
protocol lldp (Interface) 963
protocol spanning-tree (STP) 1423
protocol spanning-tree mstp 993
protocol spanning-tree pvst 1161
protocol spanning-tree rstp 1272
protocol-tunnel enable 1352
protocol-tunnel rate-limit 1353
protocol-tunnel stp 1351
PVST
description 1160

|

Command Index

pwd 43

Q
QoS
bandwidth-percentage 1185
class-map 1186
match ip access-group 1188
match ip dscp 1190
match ip precedence 1191
policy-aggregate 1193
policy-map-input 1195
policy-map-output 1195
qos-policy-output 1197
rate limit 1175
rate shape 463, 505, 506, 508, 856, 1178
rate-police 1201
rate-shape 1202
service-class dynamic dot1p 457, 508, 855, 1179
service-policy input 1203
service-policy output 1204
service-queue 1204
show interfaces rate 451, 452, 453, 454, 465, 1181
show qos class-map 1208
show qos policy-map 1209
show qos policy-map-input 1211
show qos policy-map-output 1212
show qos qos-policy-input 1212
show qos qos-policy-output 1213
show qos statistics 1214
strict-priority queue 460, 464, 1183
threshold 1219
trust diffserv 1220
wred 1221
wred-profile 1222
qos 1197
qos-policy-input 1196
qos-policy-output 1197
queue backplane 1198
queue backplane ignore-backpressure 1198
queue egress multicast linecard (policy QoS)
queue ingress multicast (policy QoS) 1199

R
RADIUS
debug radius 1300
ip radius source-interface 1301
radius-server deadtime 1301
radius-server host 1302
radius-server key 1304
radius-server retransmit 1304
radius-server timeout 1305

1198

rate limit (QoS) 1175
rate police (QoS) 1177
rate shape (QoS) 463, 505, 506, 508, 856, 1178
rate-interval 598
rate-police 1201
redistribute (BGP IPv6) 840
redistribute (BGP) 347
redistribute (MBGP) 392
redistribute bgp 1074
redistribute isis (BGP) 348
redistribute ospf
BGP 349, 811
redistribute ospf (BGP) 349
redistribute ospf (MBGP) 393
Redundancy
redundancy primary 539
redundancy protocol 540
show redundancy 543, 1401
redundancy auto-failover-limit 537
redundancy disable-auto-reboot 538, 1400
redundancy force-failover 538
redundancy force-failover rpm 538
redundancy force-failover stack-unit 1400
redundancy primary rpm 539
redundancy protocol lacp 540
redundancy protocol xstp 540
redundancy reset-counter 540
redundancy sfm standby 540
redundancy synchronize 542
reload 94
remark 182
rename 44
resequence access-list 193
resequence access-list (Extended IP ACL) 223
resequence prefix-list ipv4 193
resequence prefix-list ipv4 (Extended IP ACL) 224
reset 94
reset hard 94
reset linecard 94
reset rpm 94
reset sfm 94
reset stack-unit 1400
revision (MSTP) 994
RIP
auto-summary 1234
clear ip rip 1234
debug ip rip 1235
default-information originate 1236
default-metric 1236
description 1237
distance 1237
distribute-list in 1238
distribute-list out 1239
ip poison-reverse 1240

ip rip receive version 1240
ip rip send version 1241
ip split-horizon 1241
maximum-paths 1242
neighbor 1242
network 1243
offset-list 1244
output-delay 1245
passive-interface 1245
redistribute 1246
redistribute isis 1247
redistribute ospf 1248
router rip 1248
show config 1249
show ip rip database 1249
show running-config rip 1250
timers basic 1251
version 1252
rmon alarm 1254
rmon collection history 1255
rmon collection statistic 1256
rmon collection statistics 1256
RMON Commands 1253
rmon event 1256
rmon hc-alarm 1257
Route map
match as-path 253
match community 253
match interface 254
match ip address 254
match ip next-hop 255
match ip route-source 256
match metric 256
match origin 257
match route-type 257
match tag 258
route-map 259
set as-path 260
set automatic-tag 261
set comm-list delete 261
set community 262
set level 263
set local-preference 264
set metric 264
set metric-type 265
set next-hop 266
set origin 266
set tag 267
set weight 267
show route-map 268
route-map 736
route-map (Route Map) 259
router bgp (BGP) 350
router-id 1076

Command Index | 1575

www.dell.com | support.dell.com

RSTP
bridge-priority 1267
debug spanning-tree rstp 1268
disable 1270
forward-delay 1270
hello-time 1271
max-age 1272
protocol spanning-tree rstp 1272
show config 1273
show spanning-tree rstp 1273
spanning-tree rstp 1275

S
SCP
ip scp topdir 1321
Security
aaa authentication login 1289
enable password 1291
enable restricted 1292
login authentication 1293
password 1294
privilege level 1285, 1286
service password-encryption 1296
show privilege 1297
show users 1297
timeout login response 1298
username 1299
send 95
seq 727
IP ACL (standard) 194
MAC Access list (extended) 243
MAC ACL (standard) 237
Prefix list 247
seq (Extended IP ACL) 228
seq arp (Extended IP ACL) 225
seq ether-type (Extended IP ACL) 226
service power-off 90
service timestamps 96
service-policy-input 1203, 1215, 1216,
service-policy-output 1204
service-queue 1204
set (policy QoS) 1205
set as-path (Route Map) 260
set automatic-tag (Route Map) 261
set comm-list delete (Route Map) 261
set community (Route Map) 262
set extcommunity rt (BGP) 408
set extcommunity soo (BGP) 409
set ipv6 next-hop 737
set level (Route Map) 263
set local-preference (Route Map) 264
set metric (Route Map) 264

1576

|

Command Index

1217

set metric-type (Route Map) 265
set next-hop (Route Map) 266
set origin (Route Map) 266
set tag (Route Map) 267
set weight (Route Map) 267
sflow collector 1356
sflow enable (Global) 1358
sflow enable (Interface) 1358
sflow extended-gateway enable 1359
sflow extended-router 1360
sflow extended-switch enable 1360
sflow polling-interval (Global) 1361
sflow polling-interval (Interface) 1362
sflow sample-rate (Global) 1362
sflow sample-rate (Interface) 1363
show accounting 1282
show bfd counters 288
show bfd neighbors 289, 290
show bootvar 45
show calendar 1444
show cam ipv4flow 433
show cam layer2-qos (policy QoS) 1206
show cam layer3-qos (policy QoS) 1207
show cam mac linecard (count) 925
show cam mac linecard (dynamic or static) 927
show cam mac stack-unit 928
show cam maccheck linecard 926
show cam-acl 422, 729, 730
show cam-l2acl 436
show cam-profile 425
show cam-usage 428
show capture bgp-pdu neighbor (ipv4) 351
show chassis 98
show clock 1444
show config 731, 737
AS-PATH ACL 271
Community-list 275
Prefix list 248
show config (ACL) 183
show config (from INTERFACE RANGE mode) 599
show config (GVRP) 531
show config (LAG) 634
show config (MSTP) 995
show config (port monitor) 1145
show config (Route Map) 268
show config (RSTP) 1273
show config (STP) 940, 1424
show config (VLAN) 940
show console lp 101
show cpu-traffic-stats 101
show crypto 1329
show dot1x cos-mapping interface 176
show dot1x interface 177, 1318
show environment 103, 105

show fefd 952
show file 46
show file-systems 46
show frrp 523
show garp timers 531
show gvrp 532
show gvrp statistics 533
show hardware layer2 acl 1515
show hardware layer3 1515
show hardware stack-unit 1515
show hardware system-flow 1521
show hosts 682
show interfaces 599
show interfaces configured 606
show interfaces dampening 607
show interfaces debounce 608
show interfaces description 608
show interfaces gigabitethernet phy 611
show interfaces gigabitethernet transceiver 616
show interfaces police (QoS) 1183
show interfaces port-channel 635
show interfaces private-vlan 1153
show interfaces rate 451, 452, 453, 454, 465, 1181
show interfaces stack-unit 613
show interfaces status 614
show inventory 107
show inventory (S-Series) 109
show ip accounting access-list 187
show ip as-path-access-lists 272
show ip bgp 352
show ip bgp ipv4 extcommunity-list 410
show ip bgp ipv4 multicast 394, 841
show ip bgp ipv6 unicast dampened-paths 815
show ip bgp ipv6 unicast detail 844
show ip bgp regexp 374
show ip cam linecard 683
show ip cam stack-unit 685
show ip community-lists 276
show ip extcommunity-list 411
show ip fib linecard 687
show ip fib stack-unit 688
show ip flow 689
show ip interface 691
show ip management-route 693
show ip mroute 550, 551, 552, 553, 554, 555, 556,

557, 559, 1004, 1008, 1010, 1012, 1015
show ip ospf asbr 1079
show ip prefix-list detail 249
show ip prefix-list summary 249
show ip protocols 694
show ip route 695
show ip route list 697
show ip route summary 698
show ip ssh client-pub-keys 1330

show ip ssh rsa-authentication 1331
show ip traffic 699
show ip udp-helper 645
show ipv6 fib linecard 752
show ipv6 interface 753
show ipv6 pim bsr-router 1138
show ipv6 pim interface 1138
show ipv6 pim neighbor 1139
show ipv6 pim rp 1139
show ipv6 pim tib 1140
show isis traffic 903
show lacp 912
show linecard 47, 110
show linecard boot-information 113
show lldp neighbors 963
show lldp statistics 964
show logging 1396
show mac accounting access-list 186, 232,
show mac accounting destination 932
show mac cam 934
show mac learning-limit 934
show mac-address-table 930
show mac-address-table aging-time 932
show memory 114
show memory (S-Series) 116
show monitor session 1146
show os-version 48
show port-channel-flow 637
show processes cpu 116
show processes cpu (S-Series) 119
show processes ipc flow-control 123
show processes memory 126, 129
show processes switch-utilization 131
show protocol-tunnel 1353
show qos class-map 1208
show qos policy-map 1209
show qos policy-map-input 759, 1211
show qos policy-map-output 1212
show qos qos-policy-input 1212
show qos qos-policy-output 1213
show qos statistics 1214
show qos wred-profile 1217
show queue statistics egress (QoS) 1224
show queue statistics ingress (QoS) 1228
show range 621
show redundancy 1401
show rmon 1258
show rmon alarms 1259
show rmon events 1260
show rmon hc-alarm 1261
show rmon history 1262
show rmon log 1263
show rmon statistics 1263
show route-map 738

233

Command Index | 1577

www.dell.com | support.dell.com
1578

show route-map (Route Map) 268
show rpm 132
show running-config 49
show running-config bgp 377
show running-config ecmp-group 623
show running-config extcommunity-list 412
show running-config lldp 964
show running-config monitor session 1147
show running-config uplink-state-group 1470
show sflow 1364
show sflow linecard 1365
show sfm 52
show snmp 1368
show snmp engineID 1369
show snmp group 1370
show snmp user 1370
show software ifm 134
show spanning-tree 0 (STP) 1424
show spanning-tree mst configuration 995
show spanning-tree msti 996
show spanning-tree pvst 1162
show spanning-tree rstp 1273
show startup-config 53
show storm-control broadcast 1410, 1411
show storm-control unknown-unicast 1412
show switch links 135
show system (S-Series) 136
show system stack-ports 1402
show system stack-unit stack-group 1453
show tcp statistics 703
show tdr 641
show tech-support 33, 34, 41, 46, 47, 139,
show tech-support stack-unit 142
show uplink-state-group 1471
show version 54
show vlan 941
show vlan private-vlan 1154
show vlan private-vlan mapping 1156
show vlt backup-link 1480
show vlt statistics 1482, 1483
shutdown (port, LAG, VLAN) 623
SNMP
show snmp 1368, 1370
show snmp user 1370
snmp trap link-status 1384
snmp-server community 1371
snmp-server contact 1373
snmp-server enable traps 1373
snmp-server host 1377
snmp-server location 1379, 1380
snmp-server trap-source 1380
snmp ifmib ifalias long 1371
snmp-server engineID 1375
snmp-server group 1376

|

Command Index

152

snmp-server user 1381
snmp-server view 1383
source (port monitoring) 1147
Spanning Tree
bridge-priority 1419
debug spanning-tree 1420
description 989, 1269, 1421
disable 1160, 1421
forward-delay 1422
hello-time 1422
max-age 1423
protocol spanning-tree 1423
show config 940, 1424
show spanning-tree 0 1424
spanning-tree 1428
spanning-tree (MSTP) 998
spanning-tree 0 (STP) 1428
spanning-tree msti 998
spanning-tree mstp 999
spanning-tree pvst 1165
spanning-tree rstp 1275
speed
10/100/1000 Base-T Ethernet Interfaces 624
Management interface 625
SSD command
upgrade 59
S-Series-only commands
redundancy disable-auto-reboot 1400
reset stack-unit 1400
show hardware layer2 acl 1515
show hardware layer3 1515
show hardware stack-unit 1515
show hardware system-flow 1521
show redundancy 1401
show system stack-ports 1402
stack-unit priority 626, 1404
stack-unit provision 1404
stack-unit renumber 1405
upgrade system stack-unit 1406
SSH
show ip ssh 1330
ssh 1332
ssh-peer-rpm 145
stack-unit portmode quad 626
stack-unit priority 626, 1404
stack-unit provision 1404
stack-unit renumber 1405
stack-unit stack-group 1453
storm-control broadcast 1413, 1414, 1415
storm-control unknown-unicast 1415, 1416
strict-priority queue 1183
switchport 627
switchport backup interface 627
switchport mode private-vlan 1157

T
TACACS
ip tacacs source-interface 1306
tc-flush-standard 1168, 1277
tc-flush-standard (MSTP) 1000
tdr-cable-test 640
Telnet
ip telnet server enable 84
ip telnet source-interface 84
telnet 145
telnet-peer-rpm 146
terminal length 147
terminal monitor 1398
terminal xml 148
test cam-usage 429, 733
TFTP
ip tftp source-interface 85
threshold 1219
Time Domain Reflectometer
show tdr 641
tdr-cable-test 640
timer (FRRP) 524
Trace list
clear counters ip trace-group 1334
deny 1334
deny udp 1336
ip trace-group 1337
ip trace-list 1338
permit tcp 1339
seq 1341
show config 1343
show ip accounting trace-lists 1343
traceroute 148
track ip 945
trust diffserv 1220

U
undebug all 150
upgrade 56, 57
upgrade (S-Series management unit)
upgrade all 56, 58
upgrade boot 59
upgrade booted 58
upgrade bootflash-image 56, 57
upgrade bootselector-image 56, 57
upgrade fpga-image 62
upgrade ftp 59
upgrade linecard 56, 58
upgrade rpm 56, 58
upgrade scp 59
upgrade sfm-fpga 60

59

Command Index | 1579

www.dell.com | support.dell.com

upgrade system 59
upgrade system stack-unit (S-Series stack member)
upgrade system-image 56, 57
upgrade tftp 59
uplink-state-group 1472
upload trace-log 151
upstream 1467, 1473

V
virtual-ip 151
VLAN
default vlan-id 937
description 936, 1056
interface vlan 587
show vlan 941
tagged 944
untagged 946
vrrpdelay minimum 1498
vrrp-group 1499, 1504
vlan bridge-priority (PVST+) 1168
vlan forward-delay 1169
vlan hello-time (PVST+) 1170
vlan max-age (PVST+) 1171
vlan-stack access 1454
vlan-stack compatible 1455
vlan-stack protocol-type 1456
vlan-stack trunk 1457
vlt domain 1485
vlt domain peer-link 1485
VRRP
advertise-interval 1488
authentication-type 1488
clear vrrp counters 1489, 1501
debug vrrp 1489, 1501
description 1490
disable 1491
hold-time 1491
preempt 1492
priority 1492
show config 1493
show vrrp 1493, 1502
track 1496
virtual-address 1497

W
wanport 628
wred 1204, 1221
wred-profile 1222
write 152
write memory 41, 42

1580

|

Command Index

1406



---

Source Exif Data:

File Type                       : PDF
File Type Extension             : pdf
MIME Type                       : application/pdf
PDF Version                     : 1.6
Linearized                      : No
Format                          : application/pdf
Creator                         : Dell Inc.
Title                           : FTOS 8.3.12.1 Command Reference Guide for the S4810 System
Subject                         : Reference Guide6
Description                     : Reference Guide6
Producer                        : Acrobat Distiller 10.1.4 (Windows); modified using iTextSharp 5.1.3 (c) 1T3XT BVBA
Keywords                        : Servers, Storage and Networking#Force 10#force10 s4810#force10-s4810#Reference Guide6#FTOS version 8.3.12.1
Create Date                     : 2012:11:26 17:17:09Z
Creator Tool                    : FrameMaker 10.0.2
Modify Date                     : 2013:06:24 18:03:21-05:00
Page Layout                     : OneColumn
Page Mode                       : UseOutlines
Page Count                      : 1580
Author                          : Dell Inc.
Marked                          : True
Productcode                     : force10-s4810
Typecode                        : rg6
Typedescription                 : Reference Guide6
Languagecodes                   : en-us
Publishdate                     : 2013-06-24 00:00:00
Expirydate                      : 9999-09-09 00:00:00
Manualurl                       : http://ftp.dell.com/manuals/all-products/esuprt_ser_stor_net/esuprt_force10/force10-s4810_Reference Guide6_en-us.pdf
Readytocopy                     : false
Isdeleted                       : False
Businesskeywords                : FTOS version 8.3.12.1
Futureproductindication         : No
Categorypathforfutureproducts   : 
Filesize                        : 12902
Creationdate                    : D:20121126171709Z
Moddate                         : D:20130624171650-05'00'

EXIF Metadata provided by EXIF.tools