CN4093 Command Reference For Lenovo Networking OS 8.2 393 CR 8 2
User Manual: 393
Open the PDF directly: View PDF .
Page Count: 652
Download | |
Open PDF In Browser | View PDF |
Lenovo Flex System CN4093 10Gb Converged Scalable Switch ISCLI—Industry Standard CLI Command Reference For Networking OS 8.2 Note: Before using this information and the product it supports, read the general information in the Safety information and Environmental Notices and User Guide documents on the Lenovo Documentation CD and the Warranty Information document that comes with the product. First Edition (April 2015) © Copyright Lenovo 2015 Portions © Copyright IBM Corporation 2014. LIMITED AND RESTRICTED RIGHTS NOTICE: If data or software is delivered pursuant a General Services Administration “GSA” contract, use, reproduction, or disclosure is subject to restrictions set forth in Contract No. GS‐35F‐05925. Lenovo and the Lenovo logo are trademarks of Lenovo in the United States, other countries, or both. Contents Preface . . . . . . . . . Who Should Use This Book . How This Book Is Organized . Typographic Conventions . . . . . . . . . . . . . . . . . Chapter 1. ISCLI Basics . . . . ISCLI Command Modes . . . . . Global Commands . . . . . . . Command Line Interface Shortcuts CLI List and Range Inputs . . Command Abbreviation . . . Tab Completion . . . . . . User Access Levels . . . . . . . Idle Timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 . .16 . .17 . .18 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21 .22 .26 .28 .28 .28 .28 .29 .30 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31 .33 .34 .35 .36 .37 .38 .39 .40 .40 .41 .42 .43 .44 .45 .46 .47 .48 .49 .50 .52 .53 .53 .53 .54 .54 .55 .56 .59 .60 .61 .61 Chapter 2. Information Commands . . . . . . . System Information . . . . . . . . . . . . . . . . CLI Display Information . . . . . . . . . . . . Error Disable and Recovery Information . . . . . SNMPv3 System Information . . . . . . . . . . SNMPv3 USM User Table Information . . . . SNMPv3 View Table Information . . . . . . SNMPv3 Access Table Information . . . . . SNMPv3 Group Table Information. . . . . . SNMPv3 Community Table Information . . . SNMPv3 Target Address Table Information . . SNMPv3 Target Parameters Table Information SNMPv3 Notify Table Information. . . . . . SNMPv3 Dump Information . . . . . . . . General System Information . . . . . . . . . . Show Software Version Brief . . . . . . . . Show Recent Syslog Messages . . . . . . . . . Show Security Audit Log Messages . . . . . . . User Status . . . . . . . . . . . . . . . . . . Stacking Information . . . . . . . . . . . . . . . Stacking Switch Information . . . . . . . . . . Attached Switches Information . . . . . . . . . Stack Name Information . . . . . . . . . . . . Stack Backup Switch Information . . . . . . . . Stack Version Information . . . . . . . . . . . Stack Packet Path Information . . . . . . . . . Stack Push Status Information . . . . . . . . . Layer 2 Information . . . . . . . . . . . . . . . . FDB Information . . . . . . . . . . . . . . . Show All FDB Information . . . . . . . . . Show FDB Multicast Address Information . . Clearing Entries from the Forwarding Database © Copyright Lenovo 2015 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Contents 3 Link Aggregation Control Protocol Information. Link Aggregation Control Protocol . . . . Layer 2 Failover Information Commands . . . Layer 2 Failover Information . . . . . . . Hot Links Information. . . . . . . . . . . . Edge Control Protocol Information . . . . . . LLDP Information . . . . . . . . . . . . . LLDP Remote Device Information . . . . . Unidirectional Link Detection Information . . . UDLD Port Information . . . . . . . . . OAM Discovery Information . . . . . . . . . OAM Port Information. . . . . . . . . . vLAG Information . . . . . . . . . . . . . vLAG Trunk Information . . . . . . . . 802.1X Information . . . . . . . . . . . . . Spanning Tree Information. . . . . . . . . . RSTP/PVRST Information . . . . . . . . Spanning Tree Bridge Information. . . . . Spanning Tree Root Information . . . . . Multiple Spanning Tree Information . . . . Trunk Group Information . . . . . . . . . . VLAN Information . . . . . . . . . . . . . Layer 3 Information. . . . . . . . . . . . . . . IP Routing Information . . . . . . . . . . . Show All IP Route Information . . . . . . ARP Information . . . . . . . . . . . . . . Show All ARP Entry Information . . . . . ARP Address List Information . . . . . . BGP Information . . . . . . . . . . . . . . BGP Peer information . . . . . . . . . . BGP Summary Information . . . . . . . . BGP Aggregation Information . . . . . . Dump BGP Information . . . . . . . . . OSPF Information. . . . . . . . . . . . . . OSPF General Information . . . . . . . . OSPF Interface Loopback Information . . . OSPF Interface Information . . . . . . . . OSPF Information Route Codes . . . . . . OSPF Database Information . . . . . . . OSPFv3 Information . . . . . . . . . . . . OSPFv3 Information Dump. . . . . . . . OSPFv3 Interface Information. . . . . . . OSPFv3 Routes Information . . . . . . . OSPFv3 Database Information . . . . . . Routing Information Protocol . . . . . . . . RIP Routes Information . . . . . . . . . RIP Interface Information . . . . . . . . IPv6 Routing Information . . . . . . . . . . IPv6 Routing Table . . . . . . . . . . . 4 CN4093 Command Reference for N/OS 8.2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62 . 62 . 63 . 63 . 65 . 66 . 67 . 68 . 69 . 69 . 70 . 70 . 71 . 71 . 72 . 74 . 79 . 81 . 82 . 83 . 85 . 86 . 88 . 91 . 92 . 94 . 95 . 95 . 96 . 96 . 97 . 97 . 97 . 98 . 99 100 100 100 101 103 104 105 105 106 107 107 107 108 109 IPv6 Neighbor Discovery Cache Information . . IPv6 Neighbor Discovery Cache Information IPv6 Neighbor Discovery Prefix Information . . ECMP Static Route Information . . . . . . . . ECMP Hashing Result . . . . . . . . . . . . IGMP Information. . . . . . . . . . . . . . IGMP Querier Information . . . . . . . . IGMP Group Information. . . . . . . . . IGMP Multicast Router Information . . . . IPMC Group Information . . . . . . . . . MLD information . . . . . . . . . . . . . . MLD Mrouter Information . . . . . . . . VRRP Information . . . . . . . . . . . . . Interface Information . . . . . . . . . . . . IPv6 Interface Information . . . . . . . . . . IPv6 Path MTU Information . . . . . . . . . IP Information . . . . . . . . . . . . . . . IKEv2 Information . . . . . . . . . . . . . IKEv2 Information Dump. . . . . . . . . IPsec Information . . . . . . . . . . . . . . IPsec Manual Policy Information . . . . . PIM Information . . . . . . . . . . . . . . PIM Component Information . . . . . . . PIM Interface Information . . . . . . . . PIM Neighbor Information . . . . . . . . PIM Multicast Route Information Commands PIM Multicast Route Information . . . . . Quality of Service Information . . . . . . . . . . 802.1p Information . . . . . . . . . . . . . WRED and ECN Information . . . . . . . . . Access Control List Information Commands . . . . Access Control List Information . . . . . . . . RMON Information Commands . . . . . . . . . RMON History Information . . . . . . . . . RMON Alarm Information . . . . . . . . . . RMON Event Information . . . . . . . . . . Link Status Information . . . . . . . . . . . Port Information . . . . . . . . . . . . . . . . Port Transceiver Status . . . . . . . . . . . . . VM Ready Information . . . . . . . . . . . . . VM Information . . . . . . . . . . . . . . VM Check Information . . . . . . . . . . . VMware Information . . . . . . . . . . . . VMware Host Information . . . . . . . . EVB Information . . . . . . . . . . . . . . . . vNIC Information. . . . . . . . . . . . . . . . Virtual NIC (vNIC) Information. . . . . . . . vNIC Group Information. . . . . . . . . . . SLP Information . . . . . . . . . . . . . . . . UFP Information . . . . . . . . . . . . . . . . © Copyright Lenovo 2015 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110 110 111 112 112 113 115 116 117 117 118 119 120 121 122 123 124 125 126 127 128 129 130 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 146 148 149 149 150 150 151 152 153 154 155 156 Contents 5 6 Port Information . . . . . . . . . . . . . . . CDCP Information . . . . . . . . . . . . . . QoS Information . . . . . . . . . . . . . . . TLV Status Information . . . . . . . . . . . . Virtual Port Information . . . . . . . . . . . . VLAN Information . . . . . . . . . . . . . . TLV Information . . . . . . . . . . . . . . . DCBX Information Commands . . . . . . . . . . . Converged Enhanced Ethernet Information . . . . . DCBX Information . . . . . . . . . . . . . . DCBX Control Information . . . . . . . . . . . DCBX Feature Information . . . . . . . . . . . DCBX ETS Information . . . . . . . . . . . . DCBX PFC Information . . . . . . . . . . . . DCBX Application Protocol Information . . . . . ETS Information . . . . . . . . . . . . . . . PFC Information . . . . . . . . . . . . . . . FCoE Information . . . . . . . . . . . . . . . . FIP Snooping Information . . . . . . . . . . . Fibre Channel Information. . . . . . . . . . . . . Fabric Login Database Information . . . . . . . Fibre Channel Name Server Database Information Fabric Configuration Status Database Information. Fibre Channel Forwarding Information . . . . . NPV Traffic Information . . . . . . . . . . . . Zone Status Information . . . . . . . . . . . . FC Port Information . . . . . . . . . . . . . . Topology Information . . . . . . . . . . . . . Information Dump . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Chapter 3. Statistics Commands . Forwarding Database Statistics . . . Port Statistics . . . . . . . . . . 802.1X Authenticator Statistics . 802.1X Authenticator Diagnostics Bridging Statistics. . . . . . . Ethernet Statistics . . . . . . . Interface Statistics. . . . . . . Interface Protocol Statistics . . . Link Statistics . . . . . . . . RMON Statistics . . . . . . . QoS Queue Statistics . . . . . Trunk Group Statistics . . . . . . Trunk Group Interface Statistics Layer 2 Statistics . . . . . . . . . LACP Statistics . . . . . . . . Hotlinks Statistics . . . . . . . LLDP Port Statistics . . . . . . OAM Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . CN4093 Command Reference for N/OS 8.2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 157 158 158 159 160 161 162 163 164 165 166 167 168 169 170 172 173 174 174 176 178 178 179 179 180 180 181 182 183 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 185 186 187 189 190 193 194 197 200 200 201 204 208 208 209 210 211 212 213 vLAG Statistics . . . . . . . . . . . vLAG ISL Statistics . . . . . . . vLAG Statistics . . . . . . . . . Layer 3 Statistics . . . . . . . . . . . . IPv4 Statistics . . . . . . . . . . . . IPv6 Statistics . . . . . . . . . . . . IPv4 Route Statistics . . . . . . . . . IPv6 Route Statistics . . . . . . . . . ARP statistics . . . . . . . . . . . . DNS Statistics . . . . . . . . . . . ICMP Statistics . . . . . . . . . . . TCP Statistics . . . . . . . . . . . . UDP Statistics . . . . . . . . . . . IGMP Statistics . . . . . . . . . . . MLD Statistics . . . . . . . . . . . MLD Global Statistics . . . . . . OSPF Statistics . . . . . . . . . . . OSPF Global Statistics . . . . . . OSPFv3 Statistics . . . . . . . . . . OSPFv3 Global Statistics . . . . . VRRP Statistics . . . . . . . . . . . PIM Statistics . . . . . . . . . . . . Routing Information Protocol Statistics. Management Processor Statistics . . . . . Packet Statistics . . . . . . . . . . . MP Packet Statistics . . . . . . . . . Packet Statistics Log . . . . . . . . . Packet Log example . . . . . . . Packet Statistics Last Packet . . . . . Packet Statistics Dump. . . . . . . . Logged Packet Statistics . . . . . . . TCP Statistics . . . . . . . . . . . . UDP Statistics . . . . . . . . . . . CPU Statistics. . . . . . . . . . . . CPU Statistics History . . . . . . Access Control List Statistics . . . . . . . ACL Statistics. . . . . . . . . . . . ACL Meter Statistics . . . . . . . . . VMAP Statistics. . . . . . . . . . . Fibre Channel over Ethernet Statistics . . . SNMP Statistics . . . . . . . . . . . . NTP Statistics . . . . . . . . . . . . . SLP Statistics . . . . . . . . . . . . . . Statistics Dump. . . . . . . . . . . . . © Copyright Lenovo 2015 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 214 214 214 216 220 223 228 229 230 231 232 234 236 237 239 240 242 243 247 248 251 252 253 254 255 255 260 260 261 261 262 266 267 267 269 270 271 271 271 272 273 277 279 280 Contents 7 Chapter 4. Configuration Commands . . . . . . . Viewing and Saving Changes . . . . . . . . . . . . Saving the Configuration . . . . . . . . . . . . System Configuration . . . . . . . . . . . . . . . . System Error Disable and Recovery Configuration . Link Flap Dampening Configuration. . . . . . System Host Log Configuration. . . . . . . . . . SSH Server Configuration . . . . . . . . . . . . RADIUS Server Configuration . . . . . . . . . . TACACS+ Server Configuration . . . . . . . . . LDAP Server Configuration . . . . . . . . . . . NTP Server Configuration . . . . . . . . . . . . NTP MD5 Key Commands . . . . . . . . . . System SNMP Configuration . . . . . . . . . . . SNMPv3 Configuration . . . . . . . . . . . . . User Security Model Configuration . . . . . . SNMPv3 View Configuration . . . . . . . . . View‐based Access Control Model Configuration SNMPv3 Group Configuration . . . . . . . . SNMPv3 Community Table Configuration . . . SNMPv3 Target Address Table Configuration. . SNMPv3 Target Parameters Table Configuration SNMPv3 Notify Table Configuration . . . . . System Access Configuration . . . . . . . . . . . Management Network Configuration . . . . . User Access Control Configuration . . . . . . System User ID Configuration . . . . . . . . Strong Password Configuration . . . . . . . . HTTPS Access Configuration . . . . . . . . . Custom Daylight Saving Time Configuration . . . . sFlow Configuration . . . . . . . . . . . . . . . . sFlow Port Configuration . . . . . . . . . . . . Port Configuration . . . . . . . . . . . . . . . . . Port Error Disable and Recovery Configuration . . . Port Link Configuration . . . . . . . . . . . . . Temporarily Disabling a Port . . . . . . . . . . . Unidirectional Link Detection Configuration . . . . Port OAM Configuration . . . . . . . . . . . . Port ACL Configuration . . . . . . . . . . . . . Port WRED Configuration . . . . . . . . . . . . Port WRED Transmit Queue Configuration . . . Management Port Configuration . . . . . . . . . Stacking Configuration . . . . . . . . . . . . . . . Stacking Switch Configuration . . . . . . . . . . Management Interface Configuration . . . . . . . Quality of Service Configuration . . . . . . . . . . . 802.1p Configuration . . . . . . . . . . . . . . DSCP Configuration . . . . . . . . . . . . . . Control Plane Protection . . . . . . . . . . . . . 8 CN4093 Command Reference for N/OS 8.2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 281 283 283 284 287 288 289 292 294 296 300 302 304 305 307 309 310 311 312 313 314 315 316 317 319 320 321 322 323 325 326 326 327 332 333 333 334 335 336 337 338 339 340 341 342 343 343 344 345 Weighted Random Early Detection Configuration . . . . WRED Transmit Queue Configuration . . . . . . . Access Control Configuration . . . . . . . . . . . . . . Access Control List Configuration . . . . . . . . . . . Ethernet Filtering Configuration . . . . . . . . . . . IPv4 Filtering Configuration . . . . . . . . . . . . . TCP/UDP Filtering Configuration . . . . . . . . . . . Packet Format Filtering Configuration . . . . . . . . . ACL IPv6 Configuration . . . . . . . . . . . . . . . IPv6 Filtering Configuration . . . . . . . . . . . IPv6 TCP/UDP Filtering Configuration . . . . . . . IPv6 Metering Configuration . . . . . . . . . . . Management ACL Filtering Configuration . . . . . . . TCP/UDP Filtering Configuration . . . . . . . . . . . VMAP Configuration . . . . . . . . . . . . . . . . ACL Group Configuration . . . . . . . . . . . . . . ACL Metering Configuration . . . . . . . . . . . . . ACL Re‐Mark Configuration . . . . . . . . . . . . . Re‐Marking In‐Profile Configuration . . . . . . . . Re‐Marking Out‐Profile Configuration . . . . . . . IPv6 Re‐Marking Configuration . . . . . . . . . . . . IPv6 Re‐Marking In‐Profile Configuration . . . . . IPv6 Re‐Marking Out‐Profile Configuration . . . . . Port Mirroring . . . . . . . . . . . . . . . . . . . . . Port Mirroring Configuration . . . . . . . . . . . . . Layer 2 Configuration . . . . . . . . . . . . . . . . . . 802.1X Configuration . . . . . . . . . . . . . . . . 802.1X Global Configuration . . . . . . . . . . . 802.1X Guest VLAN Configuration . . . . . . . . 802.1X Port Configuration . . . . . . . . . . . . Spanning Tree Configuration . . . . . . . . . . . . . MSTP Configuration . . . . . . . . . . . . . . . RSTP/PVRST Configuration. . . . . . . . . . . . Forwarding Database Configuration . . . . . . . . . . Static Multicast MAC Configuration . . . . . . . . Static FDB Configuration . . . . . . . . . . . . . ECP Configuration . . . . . . . . . . . . . . . . . LLDP Configuration . . . . . . . . . . . . . . . . . LLDP Port Configuration . . . . . . . . . . . . . LLDP Optional TLV configuration . . . . . . . . . Trunk Configuration . . . . . . . . . . . . . . . . IP Trunk Hash Configuration . . . . . . . . . . . . . FCoE Trunk Hash Configuration . . . . . . . . . Layer 2 Trunk Hash . . . . . . . . . . . . . . . Layer 3 Trunk Hash . . . . . . . . . . . . . . . Virtual Link Aggregation Control Protocol Configuration vLAG Health Check Configuration . . . . . . . . vLAG ISL Configuration . . . . . . . . . . . . . Link Aggregation Control Protocol Configuration . . . . LACP Port Configuration. . . . . . . . . . . . . © Copyright Lenovo 2015 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 346 348 349 350 351 352 353 354 355 356 357 358 359 360 361 366 367 368 369 369 370 371 371 372 373 374 375 375 377 378 380 383 386 390 391 392 393 394 395 396 398 399 400 401 402 403 405 405 406 407 Contents 9 Layer 2 Failover Configuration . . . . . . . . . . Failover Trigger Configuration . . . . . . . . Auto Monitor Configuration . . . . . . . . . Failover Manual Monitor Port Configuration . . Failover Manual Monitor Control Configuration Hot Links Configuration . . . . . . . . . . . . . Hot Links Trigger Configuration . . . . . . . Hot Links Master Configuration. . . . . . . . Hot Links Backup Configuration . . . . . . . VLAN Configuration . . . . . . . . . . . . . . Protocol‐Based VLAN Configuration . . . . . Private VLAN Configuration . . . . . . . . . Layer 3 Configuration. . . . . . . . . . . . . . . . IP Interface Configuration . . . . . . . . . . . . Default Gateway Configuration. . . . . . . . . . IPv4 Static Route Configuration. . . . . . . . . . IP Multicast Route Configuration . . . . . . . . . ARP Configuration . . . . . . . . . . . . . . . ARP Static Configuration. . . . . . . . . . . IP Forwarding Configuration . . . . . . . . . . . Network Filter Configuration. . . . . . . . . . . Routing Map Configuration . . . . . . . . . . . IP Access List Configuration . . . . . . . . . Autonomous System Filter Path Configuration . Routing Information Protocol Configuration . . . . RIP Interface Configuration. . . . . . . . . . RIP Route Redistribution Configuration . . . . Open Shortest Path First Configuration . . . . . . Area Index Configuration . . . . . . . . . . OSPF Summary Range Configuration . . . . . OSPF Interface Configuration . . . . . . . . . OSPF Virtual Link Configuration . . . . . . . OSPF Host Entry Configuration . . . . . . . . OSPF Route Redistribution Configuration . . . OSPF MD5 Key Configuration . . . . . . . . Open Shortest Path First Version 3 Configuration . . OSPFv3 Area Index Configuration. . . . . . . OSPFv3 Summary Range Configuration . . . . OSPFv3 AS‐External Range Configuration . . . OSPFv3 Interface Configuration . . . . . . . . OSPFv3 over IPSec Configuration . . . . . . . OSPFv3 Virtual Link Configuration . . . . . . OSPFv3 Host Entry Configuration . . . . . . . OSPFv3 Redistribute Entry Configuration . . . OSPFv3 Redistribute Configuration . . . . . . Border Gateway Protocol Configuration . . . . . . BGP Peer Configuration . . . . . . . . . . . BGP Aggregation Configuration . . . . . . . BGP Neighbor Redistribution Configuration . . Multicast Listener Discovery Protocol Configuration MLD Interface Configuration . . . . . . . . . 10 CN4093 Command Reference for N/OS 8.2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 409 410 410 411 412 413 414 415 416 417 419 421 422 424 426 427 428 429 430 431 432 433 435 436 437 437 439 440 441 443 444 446 447 448 448 449 451 453 454 455 457 459 461 461 462 463 464 467 468 469 469 IGMP Configuration. . . . . . . . . . . . . . . . . IGMP Snooping Configuration . . . . . . . . . . IGMPv3 Configuration . . . . . . . . . . . . . . IGMP Relay Configuration . . . . . . . . . . . . IGMP Filtering Configuration . . . . . . . . . . . IGMP Relay Multicast Router Configuration . . . . IGMP Static Multicast Router Configuration . . . . IGMP Advanced Configuration . . . . . . . . . . IGMP Querier Configuration . . . . . . . . . . . IKEv2 Configuration . . . . . . . . . . . . . . . . IKEv2 Proposal Configuration. . . . . . . . . . . IKEv2 Preshare Key Configuration. . . . . . . . . IKEv2 Identification Configuration . . . . . . . . IPsec Configuration . . . . . . . . . . . . . . . . . IPsec Transform Set Configuration . . . . . . . . . IPsec Traffic Selector Configuration . . . . . . . . IPsec Dynamic Policy Configuration . . . . . . . . IPsec Manual Policy Configuration . . . . . . . . Domain Name System Configuration . . . . . . . . . Bootstrap Protocol Relay Configuration . . . . . . . . BOOTP Relay Broadcast Domain Configuration . . . VRRP Configuration. . . . . . . . . . . . . . . . . Virtual Router Configuration . . . . . . . . . . . Virtual Router Priority Tracking Configuration . . . Virtual Router Group Configuration . . . . . . . . Virtual Router Group Priority Tracking Configuration VRRP Interface Configuration . . . . . . . . . . . VRRP Tracking Configuration. . . . . . . . . . . Protocol Independent Multicast Configuration . . . . . PIM Component Configuration . . . . . . . . . . RP Candidate Configuration . . . . . . . . . . . RP Static Configuration . . . . . . . . . . . . . PIM Interface Configuration . . . . . . . . . . . IPv6 Default Gateway Configuration . . . . . . . . . IPv6 Static Route Configuration . . . . . . . . . . . . IPv6 Neighbor Discovery Cache Configuration . . . . . IPv6 Neighbor Discovery Prefix Configuration . . . . . IPv6 Prefix Policy Table Configuration . . . . . . . . . IPv6 Path MTU Configuration . . . . . . . . . . . . IP Loopback Interface Configuration. . . . . . . . . . Converged Enhanced Ethernet Configuration . . . . . . . ETS Global Configuration . . . . . . . . . . . . . . ETS Global Priority Group Configuration . . . . . . Priority Flow Control Configuration . . . . . . . . . . Global Priority Flow Control Configuration . . . . . Port‐level 802.1p PFC Configuration . . . . . . . . DCBX Port Configuration . . . . . . . . . . . . . . Fibre Channel Configuration . . . . . . . . . . . . . . . FC Port Configuration . . . . . . . . . . . . . . . . FC VLAN Configuration . . . . . . . . . . . . . . . FC Zone Configuration . . . . . . . . . . . . . . . © Copyright Lenovo 2015 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 471 472 473 474 474 476 477 478 479 481 481 482 482 483 483 484 484 485 488 489 489 490 492 494 495 497 498 499 500 501 501 501 502 504 505 506 506 508 509 510 511 512 512 514 514 515 516 517 518 518 520 Contents 11 FC Zoneset Configuration . . . . . . . Fibre Channel over Ethernet Configuration . FIPS Port Configuration . . . . . . . . Remote Monitoring Configuration . . . . . RMON History Configuration . . . . . RMON Event Configuration . . . . . . RMON Alarm Configuration . . . . . . Virtualization Configuration . . . . . . . VM Policy Bandwidth Management . . . Virtual NIC Configuration . . . . . . . vNIC Port Configuration . . . . . . Virtual NIC Group Configuration . . VM Group Configuration . . . . . . . VM Check Configuration . . . . . . . VM Profile Configuration . . . . . . . VMWare Configuration . . . . . . . . Miscellaneous VMready Configuration . UFP Configuration . . . . . . . . . . . . Edge Virtual Bridge Configuration . . . . . Edge Virtual Bridge Profile Configuration Switch Partition (SPAR) Configuration . . . Service Location Protocol Configuration . . . Configuration Dump . . . . . . . . . . . Saving the Active Switch Configuration . . . Restoring the Active Switch Configuration. . 12 CN4093 Command Reference for N/OS 8.2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 521 522 523 524 524 525 526 528 530 531 531 532 534 537 538 539 540 541 544 546 547 549 550 551 552 Chapter 5. Operations Commands . . . . . . . Operations‐Level Port Commands . . . . . . . . Operations‐Level Port 802.1X Commands . . . . . Operations‐Level VRRP Commands. . . . . . . . Operations‐Level BGP Commands . . . . . . . . Protected Mode Options . . . . . . . . . . . . . VMware Operations . . . . . . . . . . . . . . VMware Distributed Virtual Switch Operations . VMware Distributed Port Group Operations . . Edge Virtual Bridge Operations. . . . . . . . . . Feature on Demand Key Options . . . . . . . . . © Copyright Lenovo 2015 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 553 554 555 556 557 558 560 562 563 564 565 Chapter 6. Boot Options . . . . . . . . . . . . . . . . . . . Stacking Boot Options . . . . . . . . . . . . . . . . . . . . . . . Scheduled Reboot. . . . . . . . . . . . . . . . . . . . . . . . . Netboot Configuration . . . . . . . . . . . . . . . . . . . . . . Flexible Port Mapping . . . . . . . . . . . . . . . . . . . . . . . QSFP Port Configuration . . . . . . . . . . . . . . . . . . . . . Updating the Switch Software Image . . . . . . . . . . . . . . . . Loading New Software to Your Switch . . . . . . . . . . . . . . Selecting a Software Image to Run. . . . . . . . . . . . . . . . Uploading a Software Image from Your Switch . . . . . . . . . . Selecting a Configuration Block . . . . . . . . . . . . . . . . . . . Rebooting the Switch . . . . . . . . . . . . . . . . . . . . . . . Using the Boot Management Menu . . . . . . . . . . . . . . . . . Boot Recovery Mode . . . . . . . . . . . . . . . . . . . . . Recover from a Failed Image Upgrade using TFTP. . . . . . . . . Recovering from a Failed Image Upgrade using XModem Download Physical Presence . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 567 568 570 571 572 573 574 574 575 575 577 578 579 580 581 583 585 Chapter 7. Maintenance Commands . . . Forwarding Database Maintenance . . . . . Debugging Commands . . . . . . . . . . IP Security Debugging . . . . . . . . . ARP Cache Maintenance. . . . . . . . . . IP Route Manipulation . . . . . . . . . . LLDP Cache Manipulation . . . . . . . . . IGMP Group Maintenance . . . . . . . . . IGMP Multicast Routers Maintenance . . . . IPv6 Neighbor Discovery Cache Manipulation IPv6 Route Maintenance . . . . . . . . . . Uuencode Flash Dump . . . . . . . . . . TFTP, SFTP or FTP System Dump Copy . . . Clearing Dump Information . . . . . . . . Unscheduled System Dumps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 587 589 591 593 594 595 596 597 598 600 601 602 603 604 605 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Contents 13 Appendix A. Lenovo N/OS System Log Messages LOG_ALERT . . . . . . . . . . . . . . . . . LOG_CRIT . . . . . . . . . . . . . . . . . . LOG_ERR . . . . . . . . . . . . . . . . . . . LOG_INFO . . . . . . . . . . . . . . . . . . LOG_NOTICE . . . . . . . . . . . . . . . . . LOG_WARNING . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 607 608 610 611 613 617 621 Appendix B. Getting help and technical assistance. . . . . . . . . . 625 Appendix C. Notices . . . . . . . . . . . . . . . . . . . . Trademarks . . . . . . . . . . . . . . . . . . . . . . . . . . . Important Notes . . . . . . . . . . . . . . . . . . . . . . . . . Recycling Information. . . . . . . . . . . . . . . . . . . . . . . Particulate Contamination . . . . . . . . . . . . . . . . . . . . . Telecommunication Regulatory Statement . . . . . . . . . . . . . . Electronic Emission Notices . . . . . . . . . . . . . . . . . . . . Federal Communications Commission (FCC) Statement . . . . . . Industry Canada Class A Emission Compliance Statement . . . . . Avis de Conformité à la Réglementation dʹIndustrie Canada . . . . Australia and New Zealand Class A Statement . . . . . . . . . . European Union EMC Directive Conformance Statement. . . . . . Germany Class A Statement . . . . . . . . . . . . . . . . . . Japan VCCI Class A Statement . . . . . . . . . . . . . . . . Japan Electronics and Information Technology Industries Association (JEITA) Statement . . . . . . . . . . . . . . . . . . . . . . Korea Communications Commission (KCC) Statement . . . . . . Russia Electromagnetic Interference (EMI) Class A Statement . . . . . People’s Republic of China Class A electronic emission Statement . . . Taiwan Class A compliance Statement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 627 629 630 631 632 633 634 634 634 634 634 634 635 636 . . . . . . . . . . 637 637 638 639 640 Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 641 14 CN4093 Command Reference for N/OS 8.2 Preface The Lenovo Flex System Fabric CN4093 10Gb Converged Scalable Switch ISCLI Command Reference describes how to configure and use the Lenovo N/OS 8.2 software with your Lenovo Flex System CN4093 10Gb Converged Scalable Switch (referred to as CN4093 throughout this document). This guide lists each command, together with the complete syntax and a functional description, from the IS Command Line Interface (ISCLI). For documentation on installing the switches physically, see the Installation Guide for your CN4093. For details about the configuration and operation of the CN4093, see the Lenovo N/OS 8.2 Application Guide. © Copyright Lenovo 2015 Preface 15 Who Should Use This Book This book is intended for network installers and system administrators engaged in configuring and maintaining a network. The administrator should be familiar with Ethernet concepts, IP addressing, the Spanning Tree Protocol and SNMP configuration parameters. 16 CN4093 Command Reference for N/OS 8.2 How This Book Is Organized Chapter 1, “ISCLI Basics,” describes how to connect to the switch and access the information and configuration commands. This chapter provides an overview of the command syntax, including command modes, global commands, and shortcuts. Chapter 2, “Information Commands,” shows how to view switch configuration parameters. Chapter 3, “Statistics Commands,” shows how to view switch performance statistics. Chapter 4, “Configuration Commands,” shows how to configure switch system parameters, ports, VLANs, Spanning Tree Protocol, SNMP, Port Mirroring, IP Routing, Port Trunking, and more. Chapter 5, “Operations Commands,” shows how to use commands which affect switch performance immediately, but do not alter permanent switch configurations (such as temporarily disabling ports). The commands describe how to activate or deactivate optional software features. Chapter 6, “Boot Options,” describes the use of the primary and alternate switch images, how to load a new software image, and how to reset the software to factory defaults. Chapter 7, “Maintenance Commands,” shows how to generate and access a dump of critical switch state information, how to clear it, and how to clear part or all of the forwarding database. Appendix A, “Lenovo N/OS System Log Messages,” lists Lenovo N/OS System Log Messages. Appendix B, “Getting help and technical assistance,” contains information on how to get help, service, technical assistance, o more information about Lenovo products. Appendix C, “Notices,” displays Lenovo legal information. “Index” includes pointers to the description of the key words used throughout the book. © Copyright Lenovo 2015 Preface 17 Typographic Conventions The following table describes the typographic styles used in this book. Table 1. Typographic Conventions Typeface or Symbol Meaning plain fixedwidth text This type is used for names of commands, files, and directories used within the text. For example: View the readme.txt file. It also depicts on‐screen computer output and prompts. bold fixedwidth text This bold type appears in command examples. It shows text that must be typed in exactly as shown. For example: show sysinfo bold body text This bold type indicates objects such as window names, dialog box names, and icons, as well as user interface objects such as buttons, and tabs. italicized body text This italicized type indicates book titles, special terms, or words to be emphasized. angle brackets < > Indicate a variable to enter based on the description inside the brackets. Do not type the brackets when entering the command. Example: If the command syntax is pingyou enter ping 192.32.10.12 braces {} Indicate required elements in syntax descriptions where there is more than one option. You must choose only one of the options. Do not type the braces when entering the command. Example: If the command syntax is show portchannel {<1‐128>|hash|information} you enter: show portchannel <1‐128> or show portchannel hash or show portchannel information 18 CN4093 Command Reference for N/OS 8.2 Table 1. Typographic Conventions Typeface or Symbol Meaning brackets [] Indicate optional elements in syntax descriptions. Do not type the brackets when entering the command. Example: If the command syntax is show interface ip [<1‐128>] you enter show interface ip or show interface ip <1‐128> vertical line | Separates choices for command keywords and arguments. Enter only one of the choices. Do not type the vertical line when entering the command. Example: If the command syntax is show portchannel {<1‐128>|hash|information} you must enter: show portchannel <1‐128> or show portchannel hash or show portchannel information © Copyright Lenovo 2015 Preface 19 20 CN4093 Command Reference for N/OS 8.2 Chapter 1. ISCLI Basics Your CN4093 10Gb Converged Scalable Switch (CN4093) is ready to perform basic switching functions right out of the box. Some of the more advanced features, however, require some administrative configuration before they can be used effectively. This guide describes the individual ISCLI commands available for the CN4093. The ISCLI provides a direct method for collecting switch information and performing switch configuration. Using a basic terminal, the ISCLI allows you to view information and statistics about the switch, and to perform any necessary configuration. This chapter explains how to access the IS Command Line Interface (ISCLI) for the switch. © Copyright Lenovo 2015 Chapter 1: ISCLI Basics 21 ISCLI Command Modes The ISCLI has three major command modes listed in order of increasing privileges, as follows: User EXEC mode This is the initial mode of access. By default, password checking is disabled for this mode, on console. Privileged EXEC mode This mode is accessed from User EXEC mode. This mode can be accessed using the following command: enable Global Configuration mode This mode allows you to make changes to the running configuration. If you save the configuration, the settings survive a reload of the CN4093. Several sub‐modes can be accessed from the Global Configuration mode. For more details, see Table 1. This mode can be accessed using the following command: configure terminal Each mode provides a specific set of commands. The command set of a higher‐privilege mode is a superset of a lower‐privilege mode—all lower‐privilege mode commands are accessible when using a higher‐privilege mode. Table 1 lists the ISCLI command modes. Table 1. ISCLI Command Modes Command Mode/Prompt Command used to enter or exit User EXEC Default mode, entered automatically on console CN 4093> Exit: exit or logout Privileged EXEC Enter Privileged EXEC mode, from User EXEC mode: enable CN 4093# Exit to User EXEC mode: disable Quit ISCLI: exit or logout Global Configuration CN 4093(config)# Enter Global Configuration mode, from Privileged EXEC mode: configure terminal Exit to Privileged EXEC: end or exit Interface IP CN 4093(configipif)# Enter Interface IP Configuration mode, from Global Configuration mode: interface ip Internal Management IP interface is reachable only by Management Module. Exit to Global Configuration mode: exit Exit to Privileged EXEC mode: end 22 CN4093 Command Reference for N/OS 8.2 Table 1. ISCLI Command Modes (continued) Command Mode/Prompt Command used to enter or exit Interface Loopback Enter Interface Loopback Configuration mode, from Global Configuration mode: interface loopback <1‐5> CN 4093(configiploopback)# Exit to Global Configuration mode: exit Exit to Privileged EXEC mode: end Interface Port CN 4093(configif)# Enter Port Configuration mode, from Global Configuration mode: interface port Exit to Privileged EXEC mode: exit Exit to Global Configuration mode: end Interface PortChannel CN 4093(configPortChannel)# Enter PortChannel (trunk group) Configuration mode, from Global Configuration mode: interface portchannel { |lacp } Exit to Privileged EXEC mode: exit Exit to Global Configuration mode: end VLAN CN 4093(configvlan)# Enter VLAN Configuration mode, from Global Configuration mode: vlan Exit to Global Configuration mode: exit Exit to Privileged EXEC mode: end Router OSPF CN 4093(configrouterospf)# Enter OSPF Configuration mode, from Global Configuration mode: router ospf Exit to Global Configuration mode: exit Exit to Privileged EXEC mode: end Router OSPFv3 CN 4093(configrouterospf3)# Enter OSPFv3 Configuration mode, from Global Configuration mode: ipv6 router ospf Exit to Global Configuration mode: exit Exit to Privileged EXEC mode: end Router BGP CN 4093(configrouterbgp)# Enter BGP Configuration mode, from Global Configuration mode: router bgp Exit to Global Configuration mode: exit Exit to Privileged EXEC mode: end © Copyright Lenovo 2015 Chapter 1: ISCLI Basics 23 Table 1. ISCLI Command Modes (continued) Command Mode/Prompt Command used to enter or exit Router RIP Enter RIP Configuration mode, from Global Configuration mode: router rip CN 4093(configrouterrip)# Exit to Global Configuration mode: exit Exit to Privileged EXEC mode: end Route Map CN 4093(configroutemap)# Enter Route Map Configuration mode, from Global Configuration mode: routemap <1‐32> Exit to Global Configuration mode: exit Exit to Privileged EXEC mode: end Router VRRP CN 4093(configvrrp)# Enter VRRP Configuration mode, from Global Configuration mode: router vrrp Exit to Global Configuration mode: exit Exit to Privileged EXEC mode: end IKEv2 Proposal CN 4093(configikev2prop)# Enter IKEv2 Proposal Configuration mode, from Global Configuration mode: ikev2 proposal Exit to Global Configuration mode: exit Exit to Privileged EXEC mode: end MLD Configuration CN 4093(configroutermld)# Enter Multicast Listener Discovery Protocol Configuration mode, from Global Configuration mode: ipv6 mld Exit to Global Configuration mode: exit Exit to Privileged EXEC mode: end MST Configuration CN 4093(configmst)# Enter Multiple Spanning Tree Protocol Configuration mode, from Global Configuration mode: spanningtree mst configuration Exit to Global Configuration mode: exit Exit to Privileged EXEC mode: end VSI Database CN 4093(confvsidb)# Enter Virtual Station Interface Database Configuration mode, from Global Configuration mode: virt evb vsidb Exit to Global Configuration mode: exit Exit to Privileged EXEC mode: end 24 CN4093 Command Reference for N/OS 8.2 Table 1. ISCLI Command Modes (continued) Command Mode/Prompt Command used to enter or exit EVB Profile Enter Edge Virtual Bridging Profile Configuration mode, from Global Configuration mode: virt evb profile <1‐16> CN 4093(confevbprof)# Exit to Global Configuration mode: exit Exit to Privileged EXEC mode: end UFP Virtual Port Configuration CN 4093(config_ufp_vport)# Enter Unified Fabric Port Virtual Port Configuration mode, from Global Configuration mode: ufp port vport <1‐4> Exit to Global Configuration mode: exit Exit to Privileged EXEC mode: end SPAR Configuration CN 4093(configspar)# Enter Switch Partition Configuration mode, from Global Configuration mode: spar <1‐8> Exit to Global Configuration mode: exit Exit to Privileged EXEC mode: end FC Port Configuration CN 4093(configfc)# Enter Fibre Channel Port Configuration mode, from Global Configuration mode: interface fc Exit to Global Configuration mode: exit Exit to Privileged EXEC mode: end FC Zone Configuration CN 4093(configzone)# Enter Fibre Channel Zone Configuration mode, from Global Configuration mode: zone name <1‐64 characters> Exit to Global Configuration mode: exit Exit to Privileged EXEC mode: end FC Zoneset Configuration CN 4093(configzoneset)# Enter Fibre Channel Zoneset Configuration mode, from Global Configuration mode: zoneset name <1‐64 characters> Exit to Global Configuration mode: exit Exit to Privileged EXEC mode: end © Copyright Lenovo 2015 Chapter 1: ISCLI Basics 25 Global Commands Some basic commands are recognized throughout the ISCLI command modes. These commands are useful for obtaining online help, navigating through the interface, and for saving configuration changes. For help on a specific command, type the command, followed by help. Table 2. Description of Global Commands Command Action ? Provides more information about a specific command or lists commands available at the current level. list Lists the commands available at the current level. exit Go up one level in the command mode structure. If already at the top level, exit from the command line interface and log out. copy runningconfig startupconfig Write configuration changes to non‐volatile flash memory. logout Exit from the command line interface and log out. ping Use this command to verify station‐to‐station connectivity across the network. The format is as follows: ping | [n ] [w ] [l ] [s ] [v ] [f] [t] Where: n: Sets the number of attempts (optional). w: Sets the number of milliseconds between attempts (optional). l: Sets the ping request payload size (optional). s: Sets the IP source address for the IP packet (optional). v: Sets the Type Of Service bits in the IP header. f: Sets the don’t fragment bit in the IP header (only for IPv4 addresses). t: Pings continuously (same as n 0). Where the IP address or hostname specify the target device. Use of a hostname requires DNS parameters to be configured on the switch. Tries (optional) is the number of attempts (1‐32), and msec delay (optional) is the number of milliseconds between attempts. 26 CN4093 Command Reference for N/OS 8.2 Table 2. Description of Global Commands (continued) Command Action traceroute Use this command to identify the route used for station‐to‐station connectivity across the network. The format is as follows: traceroute { | } [ [ ]] Where hostname/IP address is the hostname or IP address of the target station, max‐hops (optional) is the maximum distance to trace (1‐32 devices), and msec‐delay (optional) is the number of milliseconds to wait for the response. As with ping, the DNS parameters must be configured if specifying hostnames. telnet This command is used to form a Telnet session between the switch and another network device. The format is as follows: telnet { | } [ ] Where IP address or hostname specifies the target station. Use of a hostname requires DNS parameters to be configured on the switch. Port is the logical Telnet port or service number. © Copyright Lenovo 2015 show history This command displays the last ten issued commands. show who Displays a list of users who are currently logged in. show line Displays a list of users who are currently logged in, in table format. Chapter 1: ISCLI Basics 27 Command Line Interface Shortcuts The following shortcuts allow you to enter commands quickly and easily. CLI List and Range Inputs For VLAN and port commands that allow an individual item to be selected from within a numeric range, lists and ranges of items can now be specified. For example, the vlan command permits the following options: # vlan 1,3,4095 # vlan 120 # vlan 15,9099,40904095 # vlan 15,19,20,40904095 (access VLANs 1, 3, and 4095) (access VLANs 1 through 20) (access multiple ranges) (access a mix of lists and ranges) The numbers in a range must be separated by a dash: Multiple ranges or list items are permitted using a comma: , Do not use spaces within list and range specifications. Ranges can also be used to apply the same command option to multiple items. For example, to access multiple ports with one command: # interface port 14 (Access ports 1 though 4) Command Abbreviation Most commands can be abbreviated by entering the first characters which distinguish the command from the others in the same mode. For example, consider the following full command and a valid abbreviation: CN 4093(config)#show macaddresstable interface port 12 or: CN 4093(config)#sh ma i p 12 Tab Completion By entering the first letter of a command at any prompt and pressing , the ISCLI displays all available commands or options that begin with that letter. Entering additional letters further refines the list of commands or options displayed. If only one command fits the input text when is pressed, that command is supplied on the command line, waiting to be entered. 28 CN4093 Command Reference for N/OS 8.2 User Access Levels To enable better switch management and user accountability, three levels or classes of user access have been implemented on the CN4093. Levels of access to CLI, Web management functions, and screens increase as needed to perform various switch management tasks. Conceptually, access classes are defined as follows: user Interaction with the switch is completely passive—nothing can be changed on the CN4093. Users may display information that has no security or privacy implications, such as switch statistics and current operational state information. oper Operators can make temporary changes on the CN4093. These changes are lost when the switch is rebooted/reset. Operators have access to the switch management features used for daily switch operations. Because any changes an operator makes are undone by a reset of the switch, operators cannot severely impact switch operation. admin Administrators are the only ones that may make permanent changes to the switch configuration—changes that are persistent across a reboot or reset of the switch. Administrators can access switch functions to configure and troubleshoot problems on the CN4093. Because administrators can also make temporary (operator‐level) changes as well, they must be aware of the interactions between temporary and permanent changes. Access to switch functions is controlled through the use of unique surnames and passwords. Once you are connected to the switch via local Telnet, remote Telnet, or SSH, you are prompted to enter a password. The default user names/password for each access level are listed in the following table. Note: It is recommended that you change default switch passwords after initial configuration and as regularly as required under your network security policies. Table 3. User Access Levels User Account Description and Tasks Performed Password User The User has no direct responsibility for switch management. He or she can view all switch status information and statistics, but cannot make any configuration changes to the switch. Operator The Operator can make temporary changes that are lost when the switch is rebooted/reset. Operators have access to the switch management features used for daily switch operations. The superuser Administrator has complete access to admin all command modes, information, and Administrator configuration commands on the CN4093, including the ability to change both the user and administrator passwords. Note: With the exception of the “admin” user, access to each user level can be disabled by setting the password to an empty value. © Copyright Lenovo 2015 Chapter 1: ISCLI Basics 29 Idle Timeout By default, the switch will disconnect your Telnet session after ten minutes of inactivity. This function is controlled by the following command, which can be set from 1 to 60 minutes, or disabled when set to 0: system idle <0‐60> Command mode: Global Configuration 30 CN4093 Command Reference for N/OS 8.2 Chapter 2. Information Commands You can view configuration information for the switch in both the user and administrator command modes. This chapter discusses how to use the command line interface to display switch information. Table 4. Information Commands Command Syntax and Usage show interface status Displays configuration information about the selected port(s), including: Port alias and number Port speed Duplex mode (half, full, or auto) Flow control for transmit and receive (no, yes, or both) Link status (up, down, or disabled) For details, see page 143. Command mode: All show interface trunk Displays port status information, including: Port alias and number Whether the port uses VLAN Tagging or not Port VLAN ID (PVID) Port name VLAN membership FDB Learning status Flooding status For details, see page 144. Command mode: All show interface transceiver Displays the status of the port transceiver module on each external port. For details, see page 146. Command mode: All show softwarekey Displays the enabled software features. Command mode: All © Copyright Lenovo 2015 Chapter 2: Information Commands 31 Table 4. Information Commands (continued) Command Syntax and Usage show informationdump Dumps all switch information available (10K or more, depending on your configuration). If you want to capture dump data to a file, set your communication software on your workstation to capture session data prior to issuing the dump commands. Command mode: All 32 CN4093 Command Reference for N/OS 8.2 System Information The information provided by each command option is briefly described in Table 5 on page 33, with pointers to where detailed information can be found. Table 5. System Information Commands Command Syntax and Usage show sysinfo Displays system information, including: System date and time Switch model name and number Switch name and location Time of last boot MAC address of the switch management processor IP address of management interface Hardware version and part number Software image file and version number Configuration name Log‐in banner, if one is configured Internal temperatures For details, see page 45. Command mode: All show logging [severity <0‐7>] [reverse] Displays the current syslog configuration, followed by the most recent 2000 syslog messages, as displayed by the show logging messages command. For details, see page 47. Command mode: All show access user Displays configured user names and their status. Command mode: Privileged EXEC © Copyright Lenovo 2015 Chapter 2: Information Commands 33 CLI Display Information These commands allow you to display information about the number of lines per screen displayed in the CLI. Table 6. CLI Display Information Options Command Syntax and Usage show terminallength Displays the number of lines per screen displayed in the CLI for the current session. A value of 0 means paging is disabled. Command mode: All show line console length Displays the current line console length setting. For details, see page 284. Command mode: All show line vty length Displays the current line vty length setting. For details, see page 284. Command mode: All 34 CN4093 Command Reference for N/OS 8.2 Error Disable and Recovery Information These commands allow you to display information about the Error Disable and Recovery feature for interface ports. Table 7. Error Disable Information Commands Command Syntax and Usage show errdisable [information] Displays all Error Disable and Recovery information. Command mode: All show errdisable linkflap [information] Displays the current Link Flap Dampening parameters. The information option displays ports that have been disabled due to excessive link flaps. Command mode: All show errdisable recovery Displays a list of ports with their Error Recovery status. Command mode: All show errdisable timers Displays a list of active recovery timers, if applicable. Command mode: All © Copyright Lenovo 2015 Chapter 2: Information Commands 35 SNMPv3 System Information SNMP version 3 (SNMPv3) is an extensible SNMP Framework that supplements the SNMPv2 framework by supporting the following: a new SNMP message format security for messages access control remote configuration of SNMP parameters For more details on the SNMPv3 architecture please refer to RFC2271 to RFC2276. Table 8. SNMPv3 Commands Command Syntax and Usage show snmpserver v3 user Displays User Security Model (USM) table information. To view the table, see page 37. Command mode: All show snmpserver v3 view Displays information about view, subtrees, mask and type of view. To view a sample, see page 38. Command mode: All show snmpserver v3 access Displays View‐based Access Control information. To view a sample, see page 39. Command mode: All show snmpserver v3 group Displays information about the group, including the security model, user name, and group name. To view a sample, see page 40. Command mode: All show snmpserver v3 community Displays information about the community table information. To view a sample, see page 40. Command mode: All show snmpserver v3 targetaddress Displays the Target Address table information. To view a sample, see page 41. Command mode: All show snmpserver v3 targetparameters Displays the Target parameters table information. To view a sample, see page 42. Command mode: All 36 CN4093 Command Reference for N/OS 8.2 Table 8. SNMPv3 Commands (continued) Command Syntax and Usage show snmpserver v3 notify Displays the Notify table information. To view a sample, see page 43. Command mode: All show snmpserver v3 Displays all the SNMPv3 information. To view a sample, see page 44. Command mode: All SNMPv3 USM User Table Information The User‐based Security Model (USM) in SNMPv3 provides security services such as authentication and privacy of messages. This security model makes use of a defined set of user identities displayed in the USM user table. The following command displays SNMPv3 user information: show snmpserver v3 user Command mode: All The USM user table contains the following information: the user name a security name in the form of a string whose format is independent of the Secu‐ rity Model an authentication protocol, which is an indication that the messages sent on behalf of the user can be authenticated the privacy protocol usmUser Table: User Name adminmd5 adminsha v1v2only Protocol HMAC_MD5, DES PRIVACY HMAC_SHA, DES PRIVACY NO AUTH, NO PRIVACY Table 9. USM User Table Information Parameters © Copyright Lenovo 2015 Field Description User Name This is a string that represents the name of the user that you can use to access the switch. Protocol This indicates whether messages sent on behalf of this user are protected from disclosure using a privacy protocol. Lenovo N/OS supports DES algorithm for privacy. The software also supports two authentication algorithms: MD5 and HMAC‐SHA. Chapter 2: Information Commands 37 SNMPv3 View Table Information The user can control and restrict the access allowed to a group to only a subset of the management information in the management domain that the group can access within each context by specifying the group’s rights in terms of a particular MIB view for security reasons. The following command displays the SNMPv3 View Table: show snmpserver v3 view Command mode: All View Name iso v1v2only v1v2only v1v2only v1v2only Subtree 1 1 1.3.6.1.6.3.15 1.3.6.1.6.3.16 1.3.6.1.6.3.18 Mask Type included included excluded excluded excluded Table 10. SNMPv3 View Table Information Parameters 38 Field Description View Name Displays the name of the view. Subtree Displays the MIB subtree as an OID string. A view subtree is the set of all MIB object instances which have a common Object Identifier prefix to their names. Mask Displays the bit mask. Type Displays whether a family of view subtrees is included or excluded from the MIB view. CN4093 Command Reference for N/OS 8.2 SNMPv3 Access Table Information The access control subsystem provides authorization services. The vacmAccessTable maps a group name, security information, a context, and a message type, which could be the read or write type of operation or notification into a MIB view. The View‐based Access Control Model defines a set of services that an application can use for checking access rights of a group. This groupʹs access rights are determined by a read‐view, a write‐view and a notify‐view. The read‐view represents the set of object instances authorized for the group while reading the objects. The write‐view represents the set of object instances authorized for the group when writing objects. The notify‐view represents the set of object instances authorized for the group when sending a notification. The following command displays SNMPv3 access information: show snmpserver v3 access Command mode: All Group Name v1v2grp admingrp Model snmpv1 usm Level noAuthNoPriv authPriv ReadV iso iso WriteV iso iso NotifyV v1v2only iso Table 11. SNMPv3 Access Table Information © Copyright Lenovo 2015 Field Description Group Name Displays the name of group. Model Displays the security model used, for example, SNMPv1, or SNMPv2 or USM. Level Displays the minimum level of security required to gain rights of access. For example, noAuthNoPriv, authNoPriv, or authPriv. ReadV Displays the MIB view to which this entry authorizes the read access. WriteV Displays the MIB view to which this entry authorizes the write access. NotifyV Displays the Notify view to which this entry authorizes the notify access. Chapter 2: Information Commands 39 SNMPv3 Group Table Information A group is a combination of security model and security name that defines the access rights assigned to all the security names belonging to that group. The group is identified by a group name. The following command displays SNMPv3 group information: show snmpserver v3 group Command mode: All Sec Model snmpv1 usm usm usm User Name v1v2only adminmd5 adminsha adminshaaes Group Name v1v2grp admingrp admingrp admingrp Table 12. SNMPv3 Group Table Information Parameters Field Description Sec Model Displays the security model used, which is any one of: USM, SNMPv1, SNMPv2, and SNMPv3. User Name Displays the name for the group. Group Name Displays the access name of the group. SNMPv3 Community Table Information This command displays the community table information stored in the SNMP engine.The following command displays SNMPv3 community information: show snmpserver v3 community Command mode: All Index Name User Name Tag trap1 public v1v2only v1v2trap Table 13. SNMPv3 Community Table Information Parameters Field Description Index Displays the unique index value of a row in this table. Name Displays the community string, which represents the configuration. User Name Displays the User Security Model (USM) user name. Tag 40 Displays the community tag. This tag specifies a set of transport endpoints from which a command responder application accepts management requests and to which a command responder application sends an SNMP trap. CN4093 Command Reference for N/OS 8.2 SNMPv3 Target Address Table Information The following command displays SNMPv3 target address information: show snmpserver v3 targetaddress Command mode: All This command displays the SNMPv3 target address table information, which is stored in the SNMP engine. Name Transport Addr Port Taglist Params trap1 47.81.25.66 162 v1v2trap v1v2param Table 14. SNMPv3 Target Address Table Information Parameters © Copyright Lenovo 2015 Field Description Name Displays the locally arbitrary, but unique identifier associated with this snmpTargetAddrEntry. Transport Addr Displays the transport addresses. Port Displays the SNMP UDP port number. Taglist This column contains a list of tag values which are used to select target addresses for a particular SNMP message. Params The value of this object identifies an entry in the snmpTargetParamsTable. The identified entry contains SNMP parameters to be used when generating messages to be sent to this transport address. Chapter 2: Information Commands 41 SNMPv3 Target Parameters Table Information The following command displays SNMPv3 target parameters information: show snmpserver v3 targetparameters Command mode: All Name MP Model v1v2param snmpv2c User Name v1v2only Sec Model snmpv1 Sec Level noAuthNoPriv Table 15. SNMPv3 Target Parameters Table Information 42 Field Description Name Displays the locally arbitrary, but unique identifier associated with this snmpTargeParamsEntry. MP Model Displays the Message Processing Model used when generating SNMP messages using this entry. User Name Displays the securityName, which identifies the entry on whose behalf SNMP messages will be generated using this entry. Sec Model Displays the security model used when generating SNMP messages using this entry. The system may choose to return an inconsistentValue error if an attempt is made to set this variable to a value for a security model which the system does not support. Sec Level Displays the level of security used when generating SNMP messages using this entry. CN4093 Command Reference for N/OS 8.2 SNMPv3 Notify Table Information The following command displays the SNMPv3 Notify table: show snmpserver v3 notify Command mode: All Name Tag v1v2trap v1v2trap Table 16. SNMPv3 Notify Table Information © Copyright Lenovo 2015 Field Description Name The locally arbitrary, but unique identifier associated with this snmpNotifyEntry. Tag This represents a single tag value which is used to select entries in the snmpTargetAddrTable. Any entry in the snmpTargetAddrTable that contains a tag value equal to the value of this entry, is selected. If this entry contains a value of zero length, no entries are selected. Chapter 2: Information Commands 43 SNMPv3 Dump Information The following command displays SNMPv3 information: show snmpserver v3 Command mode: All usmUser Table: User Name adminmd5 adminsha v1v2only vacmAccess Table: Group Name Prefix Model v1v2grp snmpv1 admingrp usm Protocol HMAC_MD5, DES PRIVACY HMAC_SHA, DES PRIVACY NO AUTH, NO PRIVACY Level noAuthNoPriv authPriv vacmViewTreeFamily Table: View Name Subtree iso 1 v1v2only 1 v1v2only 1.3.6.1.6.3.15 v1v2only 1.3.6.1.6.3.16 v1v2only 1.3.6.1.6.3.18 Match exact exact ReadV iso iso Mask vacmSecurityToGroup Table: All active SNMPv3 groups are listed below: Sec Model User Name snmpv1 v1v2only usm adminmd5 usm adminsha WriteV iso iso NotifyV v1v2only iso Type included included excluded excluded excluded Group Name v1v2grp admingrp admingrp snmpCommunity Table: Index Name User Name Tag snmpNotify Table: Name Tag snmpTargetAddr Table: Name Transport Addr Port Taglist Params snmpTargetParams Table: Name MP Model User Name Sec Model Sec Level 44 CN4093 Command Reference for N/OS 8.2 General System Information The following command displays system information: show sysinfo Command mode: All System Information at 13:15:04 Tue Mar 17, 2015 Time zone: No timezone configured Daylight Savings Time Status: Disabled Lenovo Flex System Fabric CN4093 10Gb Converged Scalable Switch Switch has been up for 0 days, 0 hours, 53 minutes and 20 seconds. Last boot: 12:26:24 Tue Mar 17, 2015 (reset from console) IP (If 1) address: 0.0.0.0 MAC address: 74:99:75:8a:94:00 Internal Management Port MAC Address: 74:99:75:8a:94:ef Internal Management Port IP Address (if 128): 10.241.9.130 External Management Port MAC Address: 74:99:75:8a:94:fe External Management Port IP Address (if 127): Software Version 8.2.1 (FLASH image2), active configuration. Boot kernel version 8.2.1 Chassis MTM Chassis Serial Num Hardware Part Number Hardware Revision Serial Number Manufacturing Date (WWYY) PCBA Part Number PCBA Revision PCBA Number Board Revision PLD Firmware Version : : : : : : : : : : : 8721A1G 06MBGH4 00FM512 05 Y010CM319030 1113 BAC0010701 0 00 05 0.14 Temperature Temperature Temperature Temperature Temperature Temperature : : : : : : 45 44 34 44 50 54 Warning Shutdown Inlet Exhaust Asic Max FCM Max Power Consumption C (Warning at 70 C / Recover at 65 C) C (Shutdown at 82 C / Recover at 77 C) C C C (Warning at 100 C / Shutdown at 108 C) C : 102.960 W (12.232 V 8.417 A) Switch is in I/O Module Bay 1 Note: The display of temperature will come up only if the temperature of any of the sensors exceeds the temperature threshold. There will be a warning from the software if any of the sensors exceeds this temperature threshold. The switch will shut down if the power supply overheats. © Copyright Lenovo 2015 Chapter 2: Information Commands 45 System information includes: System date and time Switch model Switch name and location Time of last boot MAC address of the switch management processor Software image file and version number, and configuration name. IP address of the management interface Hardware version and part number Log‐in banner, if one is configured Internal temperatures Show Software Version Brief Table 17 lists commands used for displaying specific entries from the general system information screen. Table 17. Specific System Information Options Command Syntax and Usage show version brief Displays the software version number, image file, and configuration name. Command mode: All Sample output for command show version brief: Software Version 8.2.1 (FLASH image2), active configuration. Displays the software version number, image file, and configuration name. 46 CN4093 Command Reference for N/OS 8.2 Show Recent Syslog Messages The following command displays system log messages: show logging [messages] [severity <0‐7>] [reverse] Command mode: All Current syslog configuration: host 0.0.0.0 via MGT port, severity 7, facility 0 host2 0.0.0.0 via MGT port, severity2 7, facility2 0 console enabled severity level of console output 6 severity level of write to flash 7 syslogging all features Syslog source loopback interface not set Date Jul Jul Jul Jul Jul Jul Jul Jul Jul Jul Jul Jul Jul Jul Jul Jul Jul Jul 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 Time 17:25:41 17:25:41 17:25:41 17:25:41 17:25:41 17:25:41 17:25:41 17:25:41 17:25:41 17:25:41 17:25:41 17:25:41 17:25:41 17:25:41 17:25:42 17:25:42 17:25:42 17:25:42 Criticality level NOTICE system: NOTICE system: NOTICE system: NOTICE system: NOTICE system: NOTICE system: NOTICE system: NOTICE system: NOTICE system: NOTICE system: NOTICE system: NOTICE system: NOTICE system: NOTICE system: NOTICE system: NOTICE system: NOTICE system: NOTICE system: Message link up on link up on link up on link up on link up on link up on link up on link up on link up on link up on link up on link up on link up on link up on link up on link up on link up on link up on port port port port port port port port port port port port port port port port port port INT1 INT8 INT7 INT2 INT1 INT4 INT3 INT6 INT5 EXT4 EXT1 EXT3 EXT2 INT3 INT2 INT4 INT3 INT6 Each syslog message has a severity level associated with it, included in text form as a prefix to the log message. One of eight different prefixes is used, depending on the condition for which the administrator is being notified. EMERG ALERT CRIT ERR WARNING NOTICE INFO DEBUG Indicates the system is unusable Indicates action should be taken immediately Indicates critical conditions Indicates error conditions or errored operations Indicates warning conditions Indicates a normal but significant condition Indicates an information message Indicates a debug‐level message The severity option filters only syslog messages with a specific severity level between 0 and 7, from EMERG to DEBUG correspondingly. The reverse option displays the output in reverse order, from the newest entry to the oldest. © Copyright Lenovo 2015 Chapter 2: Information Commands 47 Show Security Audit Log Messages The following commands display security audit log messages: Table 18. Security Audit Log Information Commands Command Syntax and Usage show sal [reverse] Displays the most recent security audit log messages. The reverse option displays the output in reverse order, from the newest entry to the oldest. Command mode: All except User EXEC show sal sequence Displays the security audit log messages associated with the specified sequence number or range. Command mode: All except User EXEC show sal severity <1‐6> [reverse] Displays only the security audit log messages with a specific severity level between 1 and 6, from FATAL to INFORMATION correspondingly. The reverse option displays the output in reverse order, from the newest entry to the oldest. Command mode: All except User EXEC Note: Security Audit Log commands are not available in Stacking mode. Command sample output for show sal: 2014 Jul 16 12:40:39 2000:30:0:0:0:0:2:95 000004DC 0x00000004 Warning 1B33D6C833832DA17E020817F40A2000 2EBBCC63AF754E04A21449CE49BFF70A 4 : IP: New Management IP Address 10.30.2.95 configured 2014 Jul 16 12:40:39 2000:30:0:0:0:0:2:95 000004DD 0x00000004 Warning 1B33D6C833832DA17E020817F40A2000 2EBBCC63AF754E04A21449CE49BFF70A 4 : IP: New Management Gateway 10.30.1.1 configured 2014 Jul 16 12:42:40 2000:30:0:0:0:0:2:95 000004DE 0x00000004 Warning 1B33D6C833832DA17E020817F40A2000 2EBBCC63AF754E04A21449CE49BFF70A 4 : IP: New Management IP Address 10.30.2.95 configured 2014 Jul 16 12:42:40 2000:30:0:0:0:0:2:95 000004DF 0x00000004 Warning 1B33D6C833832DA17E020817F40A2000 2EBBCC63AF754E04A21449CE49BFF70A 4 : IP: New Management Gateway 10.30.1.1 configured Each security audit log message has a severity level associated with it, included in text form as a prefix to the log message. One of six different prefixes is used, depending on the condition for which the administrator is being notified. 48 FATAL CRITICAL MAJOR MINOR WARNING INFORMATION CN4093 Command Reference for N/OS 8.2 Indicates the system is unusable Indicates critical conditions Indicates action should be taken immediately Indicates error conditions or errored operations Indicates warning conditions Indicates an information message User Status The following command displays user status information: show access user Command mode: All except User EXEC Usernames: user disabled offline oper disabled offline admin enabled online Current User ID table: 1: name USERID , ena, cos admin 1 session. , password valid, offline Current strong password settings: strong password status: disabled This command displays the status of the configured usernames. © Copyright Lenovo 2015 Chapter 2: Information Commands 49 Stacking Information Table 19 lists the Stacking information options. Table 19. Stacking Information Commands Command Syntax and Usage show stack switch Displays information about each switch in the stack, including: Configured Switch Number (csnum) Attached Switch Number (asnum) when run on master switch MAC address Stacking state UUID Bay number Command mode: All show stack attachedswitches Displays information about each attached switch in the stack. Available only on the master switch. Command mode: All show stack link Displays link information for each switch in the stack, listed by attached switch number. Command mode: All show stack name Displays the name of the stack. Command mode: All show stack backup Displays the unit number of the backup switch. Command mode: All show stack version Displays the firmware version number for all attached switches. Command mode: All show stack pathmap [csnum <1‐8>] Displays the path used to send known unicast packets from one switch of the stack to another. Command mode: All 50 CN4093 Command Reference for N/OS 8.2 Table 19. Stacking Information Commands Command Syntax and Usage show stack pushstatus Displays the status of the most recent firmware and configuration file push from the master to member switches. Command mode: All show stack dynamic Displays all stacking information. Command mode: All © Copyright Lenovo 2015 Chapter 2: Information Commands 51 Stacking Switch Information The following command displays Stacking switch information: show stack switch Command mode: All Stack name: STK Local switch is the master. Local switch: csnum MAC UUID Bay Number Switch Type Chassis Type Switch Mode (cfg) Priority Stack MAC 1 74:99:75:21:8d:00 534c8ca1605846299148305adc9a1f6d 1 14 6 (Flex Enterprise) Master 250 74:99:75:21:8d:1f Master switch: csnum MAC UUID Bay Number 1 74:99:75:21:8d:00 534c8ca1605846299148305adc9a1f6d 1 Backup switch: csnum MAC UUID Bay Number 5 74:99:75:21:8c:00 98c587636548429aba5010f8c62d4e27 1 Configured Switches: csnum UUID Bay MAC asnum C1 534c8ca1605846299148305adc9a1f6d 1 74:99:75:21:8d:00 A1 C2 534c8ca1605846299148305adc9a1f6d 2 08:17:f4:84:34:00 A3 C3 534c8ca1605846299148305adc9a1f6d 3 08:17:f4:0a:2d:00 A2 C4 534c8ca1605846299148305adc9a1f6d 4 74:99:75:1c:77:00 A4 C5 98c587636548429aba5010f8c62d4e27 1 74:99:75:21:8c:00 A5 Attached Switches in Stack: asnum UUID Bay MAC csnum State A1 534c8ca1605846299148305adc9a1f6d 1 74:99:75:21:8d:00 C1 IN_STACK A2 534c8ca1605846299148305adc9a1f6d 3 08:17:f4:0a:2d:00 C3 IN_STACK A3 534c8ca1605846299148305adc9a1f6d 2 08:17:f4:84:34:00 C2 IN_STACK A4 534c8ca1605846299148305adc9a1f6d 4 74:99:75:1c:77:00 C4 IN_STACK A5 98c587636548429aba5010f8c62d4e27 1 74:99:75:21:8c:00 C5 IN_STACK Stack switch information includes the following: Stack name Details about the local switch from which the command was issued Configured switch number and MAC of the Stack Master and Stack Backup Configured switch numbers and their associated assigned switch numbers Attached switch numbers and their associated configured switch numbers 52 CN4093 Command Reference for N/OS 8.2 Attached Switches Information The following command displays information about attached switches, when run on master switch: show stack attachedswitches Command mode: All Attached Switches in Stack asnum UUID Bay MAC csnum State A1 534c8ca1605846299148305adc9a1f6d 1 74:99:75:21:8d:00 C1 IN_STACK A2 534c8ca1605846299148305adc9a1f6d 3 08:17:f4:0a:2d:00 C3 IN_STACK A3 534c8ca1605846299148305adc9a1f6d 2 08:17:f4:84:34:00 C2 IN_STACK A4 534c8ca1605846299148305adc9a1f6d 4 74:99:75:1c:77:00 C4 IN_STACK A5 98c587636548429aba5010f8c62d4e27 1 74:99:75:21:8c:00 C5 IN_STACK Stack Name Information The following command displays the name of the stack: show stack name Command mode: All Stack name: STK Stack Backup Switch Information The following command displays the unit number for the backup switch: show stack backup Command mode: All Current config Backup unit number = 5 © Copyright Lenovo 2015 Chapter 2: Information Commands 53 Stack Version Information The following command displays firmware version information for each switch in the stack: show stack version Command mode: All Switch Firmware Versions: asnum csnum MAC S/W Version A1 C1 74:99:75:21:8d:00 image1 7.7.1.10 A2 C3 08:17:f4:0a:2d:00 image1 7.7.1.10 A3 C2 08:17:f4:84:34:00 image1 7.7.1.10 A4 C4 74:99:75:1c:77:00 image1 7.7.1.10 A5 C5 74:99:75:21:8c:00 image1 7.7.1.10 Serial # Y250CM28Y653 US7049000Y Y010CM161680 Y010CM28E857 Y250CM28Y639 Stack Packet Path Information The following command displays information about the path used to send known unicast packets between the switches of a stack. show stack pathmap Command mode: All Packet path Information: To> Swu 1 |Swu 2 |Swu 3 |Swu 4 |Swu 5 |Swu 6 |Swu 7 |Swu 8 | Swu 1 | 0 | 1:45 | 1:45 | 1:49 | 1:49 | 0 | 0 | 0 | Swu 2 | 2:61 | 0 | 2:61 | 2:57 | 2:57 | 0 | 0 | 0 | Swu 3 | 3:57 | 3:61 | 0 | 3:57 | 3:61 | 0 | 0 | 0 | Swu 4 | 4:57 | 4:61 | 4:57 | 0 | 4:61 | 0 | 0 | 0 | Swu 5 | 5:45 | 5:49 | 5:49 | 5:45 | 0 | 0 | 0 | 0 | Swu 6 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | Swu 7 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | Swu 8 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 54 CN4093 Command Reference for N/OS 8.2 Stack Push Status Information The following command displays the status of the most recent firmware and configuration file push from the master to member switches: show stack pushstatus Command mode: All Image 1 transfer status info: Switch 08:17:f4:0a:2d:00: not received file Switch 08:17:f4:84:34:00: not received file Switch 74:99:75:1c:77:00: not received file Switch 74:99:75:21:8c:00: not received file Image 2 transfer status info: Switch 08:17:f4:0a:2d:00: not received file Switch 08:17:f4:84:34:00: not received file Switch 74:99:75:1c:77:00: not received file Switch 74:99:75:21:8c:00: not received file Boot image transfer status info: Switch 08:17:f4:0a:2d:00: not received file Switch 08:17:f4:84:34:00: not received file Switch 74:99:75:1c:77:00: not received file Switch 74:99:75:21:8c:00: not received file not sent or transfer in progress not sent or transfer in progress not sent or transfer in progress not sent or transfer in progress not sent or transfer in progress not sent or transfer in progress not sent or transfer in progress not sent or transfer in progress not sent or transfer in progress not sent or transfer in progress not sent or transfer in progress not sent or transfer in progress Config file transfer status info: Switch 08:17:f4:0a:2d:00: last receive successful Switch 08:17:f4:84:34:00: last receive successful Switch 74:99:75:1c:77:00: last receive successful Switch 74:99:75:21:8c:00: last receive successful © Copyright Lenovo 2015 Chapter 2: Information Commands 55 Layer 2 Information The following commands display Layer 2 information. Table 20. Layer 2 Information Commands Command Syntax and Usage show dot1x information Displays 802.1X Information. For details, see page 72. Command mode: All show spanningtree Displays Spanning Tree information, including the status (on or off), Spanning Tree mode (RSTP, PVRST, or MSTP), and VLAN membership. In addition to seeing if spanning tree groups (STGs) are enabled or disabled, you can view the following STG bridge information: Priority Hello interval Maximum age value Forwarding delay Aging time You can also see the following port‐specific STG information: Port alias and priority Cost State For details, see page 74. Command mode: All show spanningtree stp <1‐128> information Displays information about a specific Spanning Tree Group. For details, see page 79. Command mode: All 56 CN4093 Command Reference for N/OS 8.2 Table 20. Layer 2 Information Commands (continued) Command Syntax and Usage show spanningtree mst <0‐32> [information] Displays Multiple Spanning Tree Protocol (MSTP) information for the specified instance, including the MSTP digest and VLAN membership. MSTP port information includes: Port number and priority Cost State Role Designated bridge and port Type For details, see page 83. Command mode: All show spanningtree mst configuration Displays the current MSTP settings. Command mode: All show portchannel information Displays the state of each port in the various static or LACP trunk groups. For details, see page 85. Command mode: All show vlan Displays VLAN configuration information for all configured VLANs, including: VLAN Number VLAN Name Status Port membership of the VLAN For details, see page 86. Command mode: All show failover trigger [ |information] Displays Layer 2 Failover information. For details, see page 63. Command mode: All © Copyright Lenovo 2015 Chapter 2: Information Commands 57 Table 20. Layer 2 Information Commands (continued) Command Syntax and Usage show hotlinks information Displays Hot Links information. For details, see page 65. Command mode: All show layer2 information Dumps all Layer 2 switch information available (10K or more, depending on your configuration). If you want to capture dump data to a file, set your communication software on your workstation to capture session data prior to issuing the dump commands. Command mode: All 58 CN4093 Command Reference for N/OS 8.2 FDB Information The forwarding database (FDB) contains information that maps the media access control (MAC) address of each known device to the switch port where the device address was learned. The FDB also shows which other ports have seen frames destined for a particular MAC address. Note: The master forwarding database supports up to 128K MAC address entries on the MP per switch. Table 21. FDB Information Commands Command Syntax and Usage show macaddresstable Displays all entries in the Forwarding Database. Command mode: All For more information, see page 60. show macaddresstable address Displays a single database entry by its MAC address. You are prompted to enter the MAC address of the device. Enter the MAC address using the format, xx:xx:xx:xx:xx:xx. For example, 08:00:20:12:34:56. You can also enter the MAC address using the format, xxxxxxxxxxxx. For example, 080020123456. Command mode: All show macaddresstable all Displays both unicast (static and dynamic) and multicast (static) entries in the Forwarding Database. Command mode: All show macaddresstable configured static Displays all configured static MAC entries in the FDB. Command mode: All show macaddresstable interface port Displays all FDB entries for a particular port. Command mode: All show macaddresstable multicast Displays all Multicast MAC entries in the FDB. Command mode: All show macaddresstable portchannel Displays all FDB entries for a particular trunk group (portchannel). Command mode: All show macaddresstable privatevlan Displays all FDB entries on a single private VLAN. Command mode: All © Copyright Lenovo 2015 Chapter 2: Information Commands 59 Table 21. FDB Information Commands (continued) Command Syntax and Usage show macaddresstable state {unknown|forward|trunk} Displays all FDB entries for a particular state. Command mode: All show macaddresstable static Displays all static MAC entries in the FDB. Command mode: All show macaddresstable vlan Displays all FDB entries on a single VLAN. Command mode: All Show All FDB Information The following command displays Forwarding Database information: show macaddresstable Command mode: All MAC address 00:04:38:90:54:18 00:09:6b:9b:01:5f 00:09:6b:ca:26:ef 00:0f:06:ec:3b:00 00:11:43:c4:79:83 VLAN 1 1 4095 4095 1 Port Trnk EXT4 INT13 MGT1 MGT1 EXT4 State FWD FWD FWD FWD FWD Permanent P An address that is in the forwarding (FWD) state, means that it has been learned by the switch. When in the trunking (TRK) state, the port field represents the trunk group number. If the state for the port is listed as unknown (UNK), the MAC address has not yet been learned by the switch, but has only been seen as a destination address. When an address is in the unknown state, no outbound port is indicated, although ports that reference the address as a destination will be listed under “Reference ports”. 60 CN4093 Command Reference for N/OS 8.2 Show FDB Multicast Address Information The following commands display Multicast Forwarding Database information: Table 22. Multicast FDB Information Commands Command Syntax and Usage show macaddresstable multicast Displays all Multicast MAC entries in the FDB. Command mode: All show macaddresstable multicast address Displays a single FDB multicast entry by its MAC address. You are prompted to enter the MAC address of the device. Enter the MAC address using the format, xx:xx:xx:xx:xx:xx. For example, 03:00:20:12:34:56. You can also enter the MAC address using the format, xxxxxxxxxxxx. For example, 030020123456. Command mode: All show macaddresstable multicast interface port Displays all FDB multicast entries for a particular port. Command mode: All show macaddresstable multicast vlan Displays all FDB multicast entries on a single VLAN. Command mode: All Clearing Entries from the Forwarding Database To clear the entire FDB, refer to “Forwarding Database Maintenance” on page 589. © Copyright Lenovo 2015 Chapter 2: Information Commands 61 Link Aggregation Control Protocol Information Use these commands to display LACP status information about each port on the CN4093. Table 23. LACP Information Commands Command Syntax and Usage show lacp aggregator Displays detailed information about the LACP aggregator. Command mode: All show lacp information Displays a summary of LACP information. For details, see page 62. Command mode: All show interface port lacp information Displays LACP information about the selected port. Command mode: All Link Aggregation Control Protocol The following command displays LACP information: show lacp information Command mode: All port mode adminkey operkey selected prio aggr trunk status minlinks 1 active 1000 1000 individual 32768 down 1 2 active 2000 2000 suspended 32768 down 1 3 active 3000 2000 yes 32768 1 65* up 1 4 active 3000 2000 suspended 32768 65* down 1 ... (*) LACP PortChannel is statically bound to the admin key LACP dump includes the following information for each external port in the CN4093: 62 mode Displays the port’s LACP mode (active, passive, or off). adminkey Displays the value of the port’s adminkey. operkey Shows the value of the port’s operational key. selected Indicates whether the port has been selected to be part of a Link Aggregation Group. prio Shows the value of the port priority. aggr Displays the aggregator associated with each port. trunk This value represents the LACP trunk group number. status Displays the status of LACP on the port (up, down or standby). minlinks Displays the minimum number of active links in the LACP trunk. CN4093 Command Reference for N/OS 8.2 Layer 2 Failover Information Commands The following command displays Layer 2 Failover information: Table 24. Layer 2 Failover Information Commands Command Syntax and Usage show failover trigger [information] Displays detailed information about the selected Layer 2 Failover trigger. Command mode: All show failover trigger [information] Displays a summary of Layer 2 Failover information. For details, see page 63. Command mode: All Layer 2 Failover Information The following command displays Layer 2 Failover information: show failover trigger Command mode: All trunk 1 EXT2 EXT3 Operational Operational Control State: Auto Disabled Member Status INT1 Operational INT2 Operational INT3 Operational INT4 Operational Trigger 2 Manual Monitor: Enabled Trigger 2 limit: 0 Monitor State: Down Member Status adminkey 62 EXT20 Failed Control State: Auto Disabled Member Status Physical ports INTC1 Failed Virtual ports INTB1.2 Failed INTB2.2 Failed INTB3.2 Failed INTB4.2 Failed INTB5.2 Failed ... © Copyright Lenovo 2015 Chapter 2: Information Commands 63 A monitor port’s Failover status is Operational only if all the following conditions hold true: Port link is up. If Spanning‐Tree is enabled, the port is in the Forwarding state. If the port is a member of an LACP trunk group, the port is aggregated. If any of these conditions are not true, the monitor port is considered to be failed. A control port is considered to be operational if the monitor trigger state is Up. Even if a port’s link status is Down, Spanning‐Tree status is Blocking, and the LACP status is Not Aggregated, from a teaming perspective the port status is Operational, since the trigger is Up. A control portʹs status is displayed as Failed when the monitor trigger state is Down or when the controlled port is a vPort which is not properly configured (UFP feature is not enabled in switch, port is not configured as UFP port, vport is not enabled or physical port is not enabled). 64 CN4093 Command Reference for N/OS 8.2 Hot Links Information The following command displays Hot Links information: show hotlinks information Command mode: All Hot Links Info: Trigger Current global Hot Links setting: ON Hot Links BPDU flood: disabled Hot Links FDB update: disabled FDB update rate (pps): 500 Current Trigger 12 setting: enabled name "TG12", preempt enabled, fdelay 30 sec Active state: None Master settings: port EXT2 Backup settings: port EXT3 Hot Links information includes the following: © Copyright Lenovo 2015 Hot Links status (on or off) Status of BPDU flood option Status of FDB send option Status and configuration of each Hot Links trigger Chapter 2: Information Commands 65 Edge Control Protocol Information The following commands display Edge Control Protocol (ECP) information. Table 25. ECP Information Options Command Syntax and Usage show ecp channels Displays all Edge Control Protocol (ECP) channels. Command mode: All show ecp retransmitinterval Displays Edge Control Protocol (ECP) retransmit interval. Command mode: All show ecp upperlayerprotocols Displays all registered Upper‐Level Protocols (ULPs). Command mode: All 66 CN4093 Command Reference for N/OS 8.2 LLDP Information The following commands display LLDP information. Table 26. LLDP Information Commands Command Syntax and Usage show lldp [information] Displays LLDP information. Command mode: All show lldp port [ ] Displays Link Layer Discovery Protocol (LLDP) port information. Command mode: All show lldp port <1‐16> tlv evb Displays Edge Virtual Bridge (EVB) type‐length‐value (TLV) information. Command mode: All show lldp port <1‐16> vport <1‐4> tlv evb Displays Edge Virtual Bridge (EVB) type‐length‐value (TLV) information for the specifiec virtual port. Command mode: All show lldp receive Displays information about the LLDP receive state machine. Command mode: All show lldp remotedevice [<1‐256>|detail| |port [ ]] Displays information received from LLDP‐capable devices. To view a sample display, see page 68. Command mode: All show lldp transmit Displays information about the LLDP transmit state machine. Command mode: All © Copyright Lenovo 2015 Chapter 2: Information Commands 67 LLDP Remote Device Information The following command displays LLDP remote device information: show lldp remotedevice [<1‐256>|detail|port [ ]] Command mode: All LLDP Remote Devices Information Legend(possible values in DMAC column) : NB Nearest Bridge 0180C200000E NnTB Nearest nonTPMR Bridge 0180C2000003 NCB Nearest Customer Bridge 0180C2000000 Total number of current entries: 1 LocalPort|Index|Remote Chassis ID|Remote Port|Remote System Name|DMAC ||||| EXTM | 1 |74 99 75 df 88 00|2 |G805211 |NB LLDP remote device information provides a summary of information about remote devices connected to the switch. To view detailed information about a device, as shown below, follow the command with the index number of the remote device. To view detailed information about all devices, use the detail option. Local Port Alias: EXT1 Remote Device Index Remote Device TTL Remote Device RxChanges Chassis Type Chassis Id Port Type Port Id Port Description : : : : : : : : 15 99 false Mac Address 0018b1331d00 Locally Assigned 23 EXT1 System Name : System Description : Lenovo Networking Operating System RackSwitch G8264, Lenovo Networking OS: version 7.8.0.24, Boot image: version 7.8.0.24 System Capabilities Supported : bridge, router System Capabilities Enabled : bridge, router Remote Management Address: Subtype Address Interface Subtype Interface Number Object Identifier 68 CN4093 Command Reference for N/OS 8.2 : : : : : IPv4 10.100.120.181 ifIndex 128 Unidirectional Link Detection Information The following commands show unidirectional link detection information. Table 27. UDLD Information Commands Command Syntax and Usage show interface port udld Displays UDLD information about the selected port. Command mode: All show udld Displays all UDLD information. Command mode: All UDLD Port Information The following command displays UDLD information for the selected port: show interface port udld Command mode: All UDLD information on port EXT1 Port enable administrative configuration setting: Enabled Port administrative mode: normal Port enable operational state: link up Port operational state: advertisement Port bidirectional status: bidirectional Message interval: 15 Time out interval: 5 Neighbor cache: 1 neighbor detected Entry #1 Expiration time: 31 seconds Device Name: Device ID: 00:da:c0:00:04:00 Port ID: EXT1 UDLD information includes the following: © Copyright Lenovo 2015 Status (enabled or disabled) Mode (normal or aggressive) Port state (link up or link down) Bi‐directional status (unknown, unidirectional, bidirectional, TX‐RX loop, neighbor mismatch) Chapter 2: Information Commands 69 OAM Discovery Information The following commands display OAM Discovery information. Table 28. OAM Discovery Information Commands Command Syntax and Usage show interface port oam Displays OAM information about the selected port. Command mode: All show oam Displays all OAM information. Command mode: All OAM Port Information The following command displays OAM information for the selected port: show interface port oam Command mode: All OAM information on port EXT1 State enabled Mode active Link up Satisfied Yes Evaluating No Remote port information: Mode active MAC address 00:da:c0:00:04:00 Stable Yes State valid Yes Evaluating No OAM port display shows information about the selected port and the peer to which the link is connected. 70 CN4093 Command Reference for N/OS 8.2 vLAG Information The following table lists the information commands for Virtual Link Aggregation Group (vLAG) protocol. Table 29. vLAG Information Options Command Syntax and Usage show vlag adminkey <1‐65535> Displays vLAG LACP information. Command mode: All show vlag portchannel Displays vLAG static trunk group information. Command mode: All show vlag isl Displays vLAG Inter‐Switch Link (ISL) information. Command mode: All show vlag information Displays all vLAG information. Command mode: All vLAG Trunk Information The following command displays vLAG information for the trunk group: show vlag portchannel Command mode: All vLAG is enabled on trunk 3 Protocol Static Current settings: enabled ports: 60 Current L2 trunk hash settings: smac Current L3 trunk hash settings: sip dip Current ingress port hash: disabled Current L4 port hash: disabled © Copyright Lenovo 2015 Chapter 2: Information Commands 71 802.1X Information The following command displays 802.1X information: show dot1x information Command mode: All System capability System status Protocol version Guest VLAN status Guest VLAN : : : : : Authenticator disabled 1 disabled none Authenticator Backend Assigned Port Auth Mode Auth Status PAE State Auth State VLAN *INT1 forceauth unauthorized initialize initialize none *INT2 forceauth unauthorized initialize initialize none INT3 forceauth unauthorized initialize initialize none *INT4 forceauth unauthorized initialize initialize none *INT5 forceauth unauthorized initialize initialize none *INT6 forceauth unauthorized initialize initialize none *INT7 forceauth unauthorized initialize initialize none INT8 forceauth unauthorized initialize initialize none INT9 forceauth unauthorized initialize initialize none *INT10 forceauth unauthorized initialize initialize none *INT11 forceauth unauthorized initialize initialize none *INT12 forceauth unauthorized initialize initialize none EXT1 forceauth unauthorized initialize initialize none EXT2 forceauth unauthorized initialize initialize none *EXT3 forceauth unauthorized initialize initialize none *EXT4 forceauth unauthorized initialize initialize none *EXT11 forceauth unauthorized initialize initialize none * Port down or disabled Note: The sample screens that appear in this document might differ slightly from the screens displayed by your system. Screen content varies based on the type of Lenovo Switch that you are using and the firmware versions and options that are installed. The following table describes the IEEE 802.1X parameters. Table 30. 802.1X Parameter Descriptions Parameter Description Port Displays each port’s alias. Auth Mode Displays the Access Control authorization mode for the port. The Authorization mode can be one of the following: Auth Status 72 CN4093 Command Reference for N/OS 8.2 force‐unauth auto force‐auth Displays the current authorization status of the port, either authorized or unauthorized. Table 30. 802.1X Parameter Descriptions (continued) Parameter Description Authenticator PAE State Displays the Authenticator Port Access Entity State. The PAE state can be one of the following: Backend Auth State © Copyright Lenovo 2015 initialize disconnected connecting authenticating authenticated aborting held forceAuth Displays the Backend Authorization State. The Backend Authorization state can be one of the following: initialize request response success fail timeout idle Chapter 2: Information Commands 73 Spanning Tree Information The following command displays Spanning Tree information: show spanningtree Command mode: All Note: Based on the Spanning Tree mode enabled, the command output differs: VLAN Rapid Spanning Tree mode (pvrst): Pvst+ compatibility mode enabled Spanning Tree Group 2: On (PVRST) VLANs: 4000 Current Root: 8002 74:99:75:bd:b6:00 Parameters: Priority 32770 PathCost 0 Hello 2 MaxAge 20 Port 0 Hello 2 FwdDel 15 MaxAge 20 Aging 300 FwdDel 15 Topology Change Counts 0 Port Prio Cost State Role Designated Bridge Des Port Type EXT13 128 4990!+ DISC DESG 800274:99:75:bd:b6:00 8036 P2P EXT14 128 4990!+ DISC DESG 800274:99:75:bd:b6:00 8036 P2P EXT15 128 4990!+ DISC DESG 800274:99:75:bd:b6:00 8036 P2P EXT16 128 4990!+ DISC DESG 800274:99:75:bd:b6:00 8036 P2P EXT17 128 4990!+ DISC DESG 800274:99:75:bd:b6:00 8047 P2P EXT20 128 4990!+ DISC DESG 800274:99:75:bd:b6:00 8047 P2P EXT21 128 4990!+ DISC DESG 800274:99:75:bd:b6:00 8047 P2P EXT22 128 4990!+ DISC DESG 800274:99:75:bd:b6:00 8047 P2P ! = Automatic path cost. + = Portchannel cost, not the individual port cost. Spanning Tree Group 32: On (PVRST) VLANs: 1 Current Root: 8020 74:99:75:bd:b6:00 Parameters: Priority 32800 PathCost 0 Hello 2 MaxAge 20 Port Hello MaxAge FwdDel 0 2 20 15 FwdDel 15 Aging 300 Topology Change Counts 0 Port Prio Cost State Role Designated Bridge Des Port Type Note: There is no active STP port in Spanning Tree Group 32. Spanning Tree Group 128: Off (PVRST), FDB aging timer 300 VLANs: 4095 Port Prio Cost MGT1 0 0 * = STP turned off for this 74 CN4093 Command Reference for N/OS 8.2 State Role Designated Bridge Des Port Type FWD * port. Rapid Spanning Tree mode (rstp) Pvst+ compatibility mode enabled Spanning Tree Group 1: On (RSTP) VLANs: 1 4000 4095 Current Root: 0000 74:99:75:bd:c4:00 Parameters: Priority 32768 PathCost Port 990 EXT15 Hello 2 MaxAge 20 Hello 2 FwdDel 15 MaxAge 20 Aging 300 FwdDel 15 Topology Change Counts 1 Port Prio Cost State Role Designated Bridge Des Port Type EXT13 128 4990!+ DISC DESG 800274:99:75:bd:b6:00 8036 P2P EXT14 128 4990!+ DISC DESG 800274:99:75:bd:b6:00 8036 P2P EXT15 128 990!+ FWD ROOT 000074:99:75:bd:c4:00 8046 P2P EXT16 128 4990!+ DISC DESG 800274:99:75:bd:b6:00 8036 P2P EXT17 128 4990!+ DISC DESG 800274:99:75:bd:b6:00 8047 P2P EXT20 128 4990!+ DISC DESG 800274:99:75:bd:b6:00 8047 P2P EXT21 128 4990!+ DISC DESG 800274:99:75:bd:b6:00 8047 P2P EXT22 128 4990!+ DISC DESG 800274:99:75:bd:b6:00 8047 P2P MGT1 0 0 FWD * * = STP turned off for this port. ! = Automatic path cost. + = Portchannel cost, not the individual port cost. © Copyright Lenovo 2015 Chapter 2: Information Commands 75 Multiple Spanning Tree mode (mstp) Pvst+ compatibility mode enabled Mstp Digest: 0x5e5b21c3e2cb4f144cabc50e88b9bdea Common Internal Spanning Tree: VLANs MAPPED: VLANs: 4095 23999 40014094 Current Root: 0000 74:99:75:bd:c4:00 PathCost Port 0 EXT15 Cist Regional Root: 0000 74:99:75:bd:c4:00 MaxAge 20 FwdDel 15 PathCost 990 Parameters: Priority MaxAge FwdDel Hops 4096 20 15 20 Des Port Hello Type Port Prio Cost State Role Designated Bridge EXT13 128 200!+ FWD DESG 100074:99:75:bd:b6:00 8056 2 P2P EXT14 128 200!+ FWD DESG 100074:99:75:bd:b6:00 8056 2 P2P EXT15 128 990!+ FWD ROOT 000074:99:75:bd:c4:00 8046 2 P2P EXT16 128 200!+ FWD DESG 100074:99:75:bd:b6:00 8056 2 P2P EXT17 128 200!+ FWD DESG 100074:99:75:bd:b6:00 8066 2 P2P EXT20 128 200!+ FWD DESG 100074:99:75:bd:b6:00 8066 2 P2P EXT21 128 200!+ FWD DESG 100074:99:75:bd:b6:00 8066 2 P2P EXT22 128 200!+ FWD DESG 100074:99:75:bd:b6:00 8066 2 P2P MGT1 0 0 FWD * * = STP turned off for this port. ! = Automatic path cost. + = Portchannel cost, not the individual port cost. Spanning Tree Group 2: On (MSTP) VLANs MAPPED: 4000 VLANs: 4000 Current Root: 8000 74:99:75:bd:b6:00 Parameters: Priority 32768 PathCost 0 Aging 300 Port 0 Topology Change Counts 3 Port Prio Cost State Role Designated Bridge Des Port Type EXT13 128 200!+ FWD DESG 100074:99:75:bd:b6:00 8056 P2P EXT14 128 200!+ FWD DESG 100074:99:75:bd:b6:00 8056 P2P EXT15 128 990!+ FWD ROOT 000074:99:75:bd:c4:00 8046 P2P EXT16 128 200!+ FWD DESG 100074:99:75:bd:b6:00 8056 P2P EXT17 128 200!+ FWD DESG 100074:99:75:bd:b6:00 8066 P2P EXT20 128 200!+ FWD DESG 100074:99:75:bd:b6:00 8066 P2P EXT21 128 200!+ FWD DESG 100074:99:75:bd:b6:00 8066 P2P EXT22 128 200!+ FWD DESG 100074:99:75:bd:b6:00 8066 P2P ! = Automatic path cost. + = Portchannel cost, not the individual port cost. 76 CN4093 Command Reference for N/OS 8.2 In addition to seeing if Common Internal Spanning Tree (CIST) is enabled or disabled, you can view the following CIST bridge information: Table 31. CIST Parameter Descriptions Parameter Description CIST Root The CIST Root shows information about the root bridge for the Common Internal Spanning Tree (CIST). Values on this row of information refer to the CIST root. CIST Regional Root The CIST Regional Root shows information about the root bridge for this MSTP region. Values on this row of information refer to the regional root. Priority (bridge) The bridge priority parameter controls which bridge on the network will become the STP root bridge. MaxAge The maximum age parameter specifies, in seconds, the maximum time the bridge waits without receiving a configuration bridge protocol data unit before it reconfigure the STP network. FwdDel The forward delay parameter specifies, in seconds, the amount of time that a bridge port has to wait before it changes from discarding to learning and from learning state to forwarding state. Hops The maximum number of bridge hops a packet can traverse before it is dropped. The default value is 20. The following port‐specific CIST information is also displayed: Table 32. CIST Parameter Descriptions © Copyright Lenovo 2015 Parameter Description Prio (port) The port priority parameter helps determine which bridge port becomes the designated port. In a network topology that has multiple bridge ports connected to a single segment, the port with the lowest port priority becomes the designated port for the segment. Cost The port path cost parameter is used to help determine the designated port for a segment. Generally speaking, the faster the port, the lower the path cost. A setting of 0 indicates that the cost will be set to the appropriate default after the link speed has been auto negotiated. State The state field shows the current state of the port. The state field can be either Discarding (DISC), Learning (LRN), or Forwarding (FWD). Role The Role field shows the current role of this port in the Spanning Tree. The port role can be one of the following: Designated (DESG), Root (ROOT), Alternate (ALTN), Backup (BKUP), Disabled (DSB), Master (MAST), or Unknown (UNK). Chapter 2: Information Commands 77 Table 32. CIST Parameter Descriptions (continued) 78 Parameter Description Designated Bridge The Designated Bridge shows information about the bridge connected to each port, if applicable. Information includes the priority (in hexadecimal notation) and MAC address of the Designated Bridge. Designated Port The port ID of the port on the Designated Bridge to which this port is connected. Hello The hello time parameter specifies, in seconds, how often the root bridge transmits a configuration bridge protocol data unit (BPDU). Any bridge that is not the root bridge uses the root bridge hello value. Type Type of link connected to the port, and whether the port is an edge port. Link type values are AUTO, P2P, or SHARED. CN4093 Command Reference for N/OS 8.2 RSTP/PVRST Information The following command displays RSTP/PVRST information: show spanningtree stp <1‐128> information Command mode: All Spanning Tree Group 1: On (RSTP) VLANs: 1 Current Root: ffff 00:13:0a:4f:7d:d0 Parameters: Priority 61440 PathCost 0 Hello 2 Port Prio Cost State INT1 0 0 DSB * INT2 0 0 DSB * INT3 0 0 FWD * INT4 0 0 DSB * INT5 0 0 DSB * INT6 0 0 DSB * INT7 0 0 DSB * INT8 0 0 DSB * INT9 0 0 DSB * INT10 0 0 DSB * INT11 0 0 DSB * INT12 0 0 DSB * INT13 0 0 DSB * INT14 0 0 DSB * EXT1 128 2000 FWD EXT2 128 2000 DISC EXT3 128 2000 FWD EXT4 128 20000 DISC ... * = STP turned off for this MaxAge 20 Port Hello MaxAge FwdDel EXT4 2 20 15 FwdDel 15 Aging 300 Role Designated Bridge Des Port DESG BKUP DESG BKUP 800000:11:58:ae:39:00 800000:11:58:ae:39:00 800000:11:58:ae:39:00 800000:11:58:ae:39:00 8011 8011 8013 8013 Type P2P P2P P2P Shared port. Note: The sample screens that appear in this document might differ slightly from the screens displayed by your system. Screen content varies based on the type of Flex System unit that you are using and the firmware versions and options that are installed. You can configure the switch software to use the IEEE 802.1D (2004) Rapid Spanning Tree Protocol (RSTP), Per VLAN Rapid Spanning Tree Protocol (PVRST) or IEEE 802.1Q (2003) Multiple Spanning Tree Protocol (MSTP). © Copyright Lenovo 2015 Chapter 2: Information Commands 79 If RSTP/PVRST is turned on, you can view the following bridge information for the Spanning Tree Group: Table 33. RSTP/PVRST Bridge Parameter Descriptions Parameter Description Current Root The Current Root shows information about the root bridge for the Spanning Tree. Information includes the priority (in hexadecimal notation) and the MAC address of the root. Priority (bridge) The Bridge Priority parameter controls which bridge on the network will become the STP root bridge. Hello The Hello Time parameter specifies, in seconds, how often the root bridge transmits a configuration bridge protocol data unit (BPDU). Any bridge that is not the root bridge uses the root bridge hello value. MaxAge The Maximum Age parameter specifies, in seconds, the maximum time the bridge waits without receiving a configuration bridge protocol data unit before it reconfigures the STP network. FwdDel The Forward Delay parameter specifies, in seconds, the amount of time that a bridge port has to wait before it changes from discarding to learning and from learning state to forwarding state. Aging The Aging Time parameter specifies, in seconds, the amount of time the bridge waits without receiving a packet from a station before removing the station from the Forwarding Database. The following port‐specific information is also displayed: Table 34. RSTP/PVRST Port Parameter Descriptions 80 Parameter Description Prio (port) The Port Priority parameter helps determine which bridge port becomes the designated port. In a network topology that has multiple bridge ports connected to a single segment, the port with the lowest port priority becomes the designated port for the segment. Cost The port Path Cost parameter is used to help determine the designated port for a segment. Generally speaking, the faster the port, the lower the path cost. A setting of 0 indicates that the cost will be set to the appropriate default after the link speed has been auto negotiated. State The State field shows the current state of the port. The State field in RSTP mode can be one of the following: Discarding (DISC), Learning (LRN), Forwarding (FWD), or Disabled (DSB). CN4093 Command Reference for N/OS 8.2 Table 34. RSTP/PVRST Port Parameter Descriptions (continued) Parameter Description Role The Role field shows the current role of this port in the Spanning Tree. The port role can be one of the following: Designated (DESG), Root (ROOT), Alternate (ALTN), Backup (BKUP), Disabled (DSB), Master (MAST). Designated Bridge The Designated Bridge shows information about the bridge connected to each port, if applicable. Information includes the priority (in hexadecimal notation) and MAC address of the Designated Bridge. Designated Port The port ID of the port on the Designated Bridge to which this port is connected. Type Type of link connected to the port, and whether the port is an edge port. Link type values are AUTO, P2P, or SHARED. Spanning Tree Bridge Information The following command displays Spanning Tree bridge information: show spanningtree [vlan ] bridge Command mode: All Vlan 1 Priority 61440 Hello 2 MaxAge 20 FwdDel 15 Protocol PVRST Table 35. Bridge Parameter Descriptions © Copyright Lenovo 2015 Parameter Description VLANs VLANs that are part of the Spanning Tree Group. Priority The bridge priority parameter controls which bridge on the network will become the STP root bridge. The lower the value, the higher the priority. Hello The hello time parameter specifies, in seconds, how often the root bridge transmits a configuration bridge protocol data unit (BPDU). Any bridge that is not the root bridge uses the root bridge hello value. MaxAge The maximum age parameter specifies, in seconds, the maximum time the bridge waits without receiving a configuration bridge protocol data unit before it reconfigure the STP network. FwdDel The forward delay parameter specifies, in seconds, the amount of time that a bridge port has to wait before it changes from discaring to learning and from learning state to forwarding state. Protocol The STP protocol run by the Spanning Tree Group. Chapter 2: Information Commands 81 Spanning Tree Root Information The following command displays information about the root switches in every STP group: show spanningtree root Command mode: All Instance 1 3 6 17 Root ID 8001 08:17:f4:32:95:00 8003 08:17:f4:32:95:00 8001 08:17:f4:fb:d8:00 8011 08:17:f4:32:95:00 PathCost 0 0 20000 0 Hello 2 2 2 2 MaxAge 20 20 20 20 FwdDel Root Port 15 0 15 0 15 27 15 0 Table 36. Bridge Parameter Descriptions 82 Parameter Description Instance Spanning Tree instance Root ID Indicates the root switch MAC address and port number. Path‐Cost The port path cost is used to help determine the designated port for a segment. Port path cost is based on the port speed. Hello The hello time parameter specifies, in seconds, how often the root bridge transmits a configuration bridge protocol data unit (BPDU). Any bridge that is not the root bridge uses the root bridge hello value. MaxAge The maximum age parameter specifies, in seconds, the maximum time the bridge waits without receiving a configuration bridge protocol data unit before it reconfigure the STP network. FwdDel The forward delay parameter specifies, in seconds, the amount of time that a bridge port has to wait before it changes from discarding to learning and from learning state to forwarding state. Root Port Port number allocated to the STP instance on the root switch. CN4093 Command Reference for N/OS 8.2 Multiple Spanning Tree Information The following command displays Multiple Spanning Tree (MSTP) information: show spanningtree mst <0‐32> information Command mode: All Mstp Digest: 0x5e5b21c3e2cb4f144cabc50e88b9bdea Spanning Tree Group 2: On (MSTP) VLANs MAPPED: 4000 VLANs: 4000 Current Root: 8000 74:99:75:bd:b6:00 Parameters: Priority 32768 PathCost 0 Aging 300 Port 0 Topology Change Counts 3 Port Prio Cost State Role Designated Bridge Des Port Type EXT13 128 200!+ FWD DESG 100074:99:75:bd:b6:00 8056 P2P EXT14 128 200!+ FWD DESG 100074:99:75:bd:b6:00 8056 P2P EXT15 128 990!+ FWD ROOT 000074:99:75:bd:c4:00 8046 P2P EXT16 128 200!+ FWD DESG 100074:99:75:bd:b6:00 8056 P2P EXT17 128 200!+ FWD DESG 100074:99:75:bd:b6:00 8066 P2P EXT20 128 200!+ FWD DESG 100074:99:75:bd:b6:00 8066 P2P EXT21 128 200!+ FWD DESG 100074:99:75:bd:b6:00 8066 P2P EXT22 128 200!+ FWD DESG 100074:99:75:bd:b6:00 8066 P2P ! = Automatic path cost. + = Portchannel cost, not the individual port cost. The following port‐specific MSTP information is also displayed: Table 37. MSTP Parameter Descriptions © Copyright Lenovo 2015 Parameter Description Prio (port) The port priority parameter helps determine which bridge port becomes the designated port. In a network topology that has multiple bridge ports connected to a single segment, the port with the lowest port priority becomes the designated port for the segment. Cost The port path cost parameter is used to help determine the designated port for a segment. Generally speaking, the faster the port, the lower the path cost. A setting of 0 indicates that the cost will be set to the appropriate default after the link speed has been auto negotiated. State The state field shows the current state of the port. The state field can be either Discarding (DISC), Learning (LRN), or Forwarding (FWD). Chapter 2: Information Commands 83 Table 37. MSTP Parameter Descriptions (continued) 84 Parameter Description Role The Role field shows the current role of this port in the Spanning Tree. The port role can be one of the following: Designated (DESG), Root (ROOT), Alternate (ALTN), Backup (BKUP), Disabled (DSB), Master (MAST), or Unknown (UNK). Designated Bridge The Designated Bridge shows information about the bridge connected to each port, if applicable. Information includes the priority (in hexadecimal notation) and MAC address of the Designated Bridge. Designated Port The port ID of the port on the Designated Bridge to which this port is connected. Type Type of link connected to the port, and whether the port is an edge port. Link type values are AUTO, P2P, or SHARED. CN4093 Command Reference for N/OS 8.2 Trunk Group Information The following command displays Trunk Group information: show portchannel information Command mode: All Trunk group 1: Enabled Protocol Static Port state: EXT1: STG 1 forwarding EXT2: STG 1 forwarding When trunk groups are configured, you can view the state of each port in the various trunk groups. Note: If Spanning Tree Protocol on any port in the trunk group is set to forwarding, the remaining ports in the trunk group will also be set to forwarding. © Copyright Lenovo 2015 Chapter 2: Information Commands 85 VLAN Information The following commands display VLAN information. Table 38. VLAN Information Commands Command Syntax and Usage show vlan [information] Displays general VLAN information. show vlan privatevlan [type] Displays private VLAN information. The type option lists only the VLAN type for each private VLAN: community, isolated or primary. Command mode: All show vlan information Displays information about all VLANs, including: VLAN number and name Port membership VLAN status (enabled or disabled) Protocol VLAN status Private VLAN status Spanning Tree membership VMAP configuration Command mode: All show protocolvlan Displays protocol VLAN information. Command mode: All 86 CN4093 Command Reference for N/OS 8.2 The following command displays VLAN information: show vlan [ ] Command mode: All VLAN 1 10 4095 Name Status MGT Ports Default VLAN ena dis INTA1EXT22 VLAN 10 ena dis empty Mgmt VLAN ena ena EXTM MGT1 Primary Secondary Type Ports Note: The sample screens that appear in this document might differ slightly from the screens displayed by your system. Screen content varies based on the type of Lenovo Switch that you are using and the firmware versions and options that are installed. This information display includes all configured VLANs and all member ports that have an active link state. Port membership is represented in slot/port format. VLAN information includes: © Copyright Lenovo 2015 VLAN Number VLAN Type VLAN Name Status Management status of the VLAN Port membership of the VLAN Protocol‐based VLAN information Private VLAN configuration Chapter 2: Information Commands 87 Layer 3 Information The following commands display Layer 3 information. Table 39. Layer 3 Information Commands Command Syntax and Usage show arp Displays Address Resolution Protocol (ARP) information. For details, see page 94. Command mode: All show interface ip [ ] Displays IPv4 interface information. For details, see page 121. Command mode: All show ikev2 Displays IKEv2 information. For more information options, see page 125. Command mode: All show ip bgp information [ ] [ ] Displays Border Gateway Protocol (BGP) information. For details, see page 97. Command mode: All show ip dns Displays the current Domain Name System settings. Command mode: All show ip ecmp Displays ECMP static route information. For details, see page 112. Command mode: All show ip gateway <1‐4> Displays the current gateway settings. Command mode: All show ip igmp Displays IGMP Information. For more IGMP information options, see page 113. Command mode: All show ip information Displays all IP information. Command mode: All 88 CN4093 Command Reference for N/OS 8.2 Table 39. Layer 3 Information Commands (continued) Command Syntax and Usage show ip interface brief Displays IP Information. For details, see page 124. IP information, includes: IP interface information: Interface number, IP address, subnet mask, VLAN number, and operational status. Default gateway information: Metric for selecting which configured gateway to use, gateway number, IP address, and health status. IP forwarding settings, network filter settings, route map settings. Command mode: All show ip ospf information Displays OSPF information. For more OSPF information options, see page 98. Command mode: All show ip pim component [<1‐2>] Displays Protocol Independent Multicast (PIM) component information. For more PIM information options, see page 129. Command mode: All show ip rip interface Displays RIP user’s configuration. For details, see page 107. Command mode: All show ip route Displays all routes configured on the switch. For details, see page 92. Command mode: All show ip slp Displays information about the Service Location Protocol (SLP) configuration. For command options, see page 155. Command mode: All show ip vrrp information Displays VRRP information. For details, see page 120. Command mode: All show ipsec manualpolicy Displays information about manual key management policy for IP security. For more information options, see page 127. Command mode: All show ipv6 gateway6 <1,3‐4> Displays the current IPv6 default gateway configuration. Command mode: All © Copyright Lenovo 2015 Chapter 2: Information Commands 89 Table 39. Layer 3 Information Commands (continued) Command Syntax and Usage show ipv6 interface [ ] Displays IPv6 interface information. For details, see page 122. Command mode: All show ipv6 mld groups Displays Multicast Listener Discovery (MLD) information. For more MLD information options, see page 118. Command mode: All show ipv6 neighbors Displays IPv6 Neighbor Discovery cache information. For more information options, see page 110. Command mode: All show ipv6 ospf information Displays OSPFv3 information. For more OSPFv3 information options, see page 103. Command mode: All show ipv6 pmtu [ ] Displays IPv6 Path MTU information. For details, see page 123. Command mode: All show ipv6 prefix Displays IPv6 Neighbor Discovery prefix information. For details, see page 111. Command mode: All show ipv6 route Displays IPv6 routing information. For more information options, see page 108. Command mode: All show layer3 Dumps all Layer 3 switch information available (10K or more, depending on your configuration). If you want to capture dump data to a file, set your communication software on your workstation to capture session data prior to issuing the dump commands. Command mode: All 90 CN4093 Command Reference for N/OS 8.2 IP Routing Information Using the commands listed below, you can display all or a portion of the IP routes currently held in the switch. Table 40. Route Information Commands Command Syntax and Usage show ip route [all] Displays all routes configured in the switch. For more information, see page 92. Command mode: All show ip route address Displays a single route by destination IP address. Command mode: All show ip route ecmphash Displays the current ECMP hashing mechanism. Command mode: All show ip route gateway Displays routes to a single gateway. Command mode: All show ip route interface Displays routes on a single interface. Command mode: All show ip route static Displays static routes configured on the switch. Command mode: All show ip route tag {address|bgp|broadcast|fixed|martian| |multicast|ospf|rip|static} Displays routes of a single tag. For a description of IP routing tags, see Table 42 on page 92. Command mode: All show ip route type {broadcast|direct|indirect|local| |martian|multicast} Displays routes of a single type. For a description of IP routing types, see Table 41 on page 92. Command mode: All © Copyright Lenovo 2015 Chapter 2: Information Commands 91 Show All IP Route Information The following command displays IP route information: show ip route Command mode: All Status code: * best Destination Mask * 12.0.0.0 255.0.0.0 * 12.0.0.1 255.255.255.255 * 12.255.255.255 255.255.255.255 * 12.0.0.0 255.0.0.0 * 12.0.0.1 255.255.255.255 * 255.255.255.255 255.255.255.255 * 224.0.0.0 224.0.0.0 * 224.0.0.5 255.255.255.255 Gateway 11.0.0.1 11.0.0.1 11.255.255.255 12.0.0.1 12.0.0.1 12.255.255.255 0.0.0.0 0.0.0.0 Type direct local broadcast direct local broadcast martian multicast Tag Metric If fixed 128 addr 128 broadcast 128 fixed 12 addr 12 broadcast 2 martian addr The following table describes the Type parameters. Table 41. IP Routing Type Parameters Parameter Description indirect The next hop to the host or subnet destination will be forwarded through a router at the Gateway address. direct Packets will be delivered to a destination host or subnet attached to the switch. local Indicates a route to one of the switch’s IP interfaces. broadcast Indicates a broadcast route. martian The destination belongs to a host or subnet which is filtered out. Packets to this destination are discarded. multicast Indicates a multicast route. The following table describes the Tag parameters. Table 42. IP Routing Tag Parameters 92 Parameter Description fixed The address belongs to a host or subnet attached to the switch. static The address is a static route which has been configured on the CN4093 10Gb Converged Scalable Switch. address The address belongs to one of the switch’s IP interfaces. rip The address was learned by the Routing Information Protocol (RIP). ospf The address was learned by Open Shortest Path First (OSPF). bgp The address was learned via Border Gateway Protocol (BGP). CN4093 Command Reference for N/OS 8.2 Table 42. IP Routing Tag Parameters (continued) © Copyright Lenovo 2015 Parameter Description broadcast Indicates a broadcast address. martian The address belongs to a filtered group. multicast Indicates a multicast address. Chapter 2: Information Commands 93 ARP Information The ARP information includes IP address and MAC address of each entry, address status flags (see Table 44 on page 95), VLAN and port for the address, and port referencing information. Table 43. ARP Information Commands Command Syntax and Usage show [ip] arp [all] Displays all ARP entries. including: IP address and MAC address of each entry Address status flag (see below) The VLAN and port to which the address belongs The elapsed time (in seconds) since the ARP entry was learned For more information, see page 95. Command mode: All show [ip] arp find Displays a single ARP entry by IP address. Command mode: All show [ip] arp interface port Displays the ARP entries on a single port. Command mode: All show [ip] arp reply Displays the ARP address list: IP address, IP mask, MAC address, and VLAN flags. Command mode: All show [ip] arp static Displays all static ARP entries. Command mode: All show [ip] arp vlan Displays the ARP entries on a single VLAN. Command mode: All 94 CN4093 Command Reference for N/OS 8.2 Show All ARP Entry Information The following command displays ARP information: show arp Command mode: All IP address Flags MAC address VLAN 12.20.1.1 00:15:40:07:20:42 4095 12.20.20.16 00:30:13:e3:44:14 4095 12.20.20.18 00:30:13:e3:44:14 4095 12.20.23.111 00:1f:29:95:f7:e5 4095 Age Port 0 INT8 2 INT8 2 INT6 6 INT6 The Port field shows the target port of the ARP entry. The Flags field is interpreted as follows: Table 44. ARP Dump Flag Parameters Flag Description P Permanent entry created for switch IP interface. R Indirect route entry. U Unresolved ARP entry. The MAC address has not been learned. ARP Address List Information The following command displays owned ARP address list information: show arp reply Command mode: All IP address 205.178.18.66 205.178.50.1 205.178.18.64 © Copyright Lenovo 2015 IP mask 255.255.255.255 255.255.255.255 255.255.255.255 MAC address VLAN PassUp 00:70:cf:03:20:04 P 00:70:cf:03:20:06 1 00:70:cf:03:20:05 1 Chapter 2: Information Commands 95 BGP Information The following commands display BGP information. Table 45. BGP Peer Information Commands Command Syntax and Usage show ip bgp aggregateaddress Displays BGP peer routes. See page 97 for a sample output. Command mode: All show ip bgp information Displays the BGP routing table. See page 97 for a sample output. Command mode: All show ip bgp neighbor information Displays BGP peer information. See page 96 for a sample output. Command mode: All show ip bgp neighbor summary Displays peer summary information such as AS, message received, message sent, up/down, state. See page 97 for a sample output. Command mode: All BGP Peer information Following is an example of the information provided by the following command: show ip bgp neighbor information Command mode: All BGP Peer Information: 3: 2.1.1.1 , version 4, TTL 225 Remote AS: 100, Local AS: 100, Link type: IBGP Remote router ID: 3.3.3.3, Local router ID: 1.1.201.5 BGP status: idle, Old status: idle Total received packets: 0, Total sent packets: 0 Received updates: 0, Sent updates: 0 Keepalive: 60, Holdtime: 180, MinAdvTime: 60 LastErrorCode: unknown(0), LastErrorSubcode: unspecified(0) Established state transitions: 1 4: 2.1.1.4 , version 4, TTL 225 Remote AS: 100, Local AS: 100, Link type: IBGP Remote router ID: 4.4.4.4, Local router ID: 1.1.201.5 BGP status: idle, Old status: idle Total received packets: 0, Total sent packets: 0 Received updates: 0, Sent updates: 0 Keepalive: 60, Holdtime: 180, MinAdvTime: 60 LastErrorCode: unknown(0), LastErrorSubcode: unspecified(0) Established state transitions: 1 96 CN4093 Command Reference for N/OS 8.2 BGP Summary Information Following is an example of the information provided by the following command: show ip bgp neighbor summary Command mode: All BGP Peer Summary Information: Peer V AS MsgRcvd MsgSent Up/Down State 1: 205.178.23.142 4 142 113 121 00:00:28 established 2: 205.178.15.148 0 148 0 0 never connect BGP Aggregation Information Following is an example of the information provided by the following command: show ip bgp aggregateaddress Command mode: All Current BGP aggregation settings: 1: addr 4.2.0.0, mask 255.0.0.0, enabled 2: addr 5.5.0.0, mask 255.255.0.0, enabled Dump BGP Information Following is an example of the information provided by the following command: show ip bgp information [ ] Command mode: All Status codes: * valid, > best, i internal Origin codes: i IGP, e EGP, ? incomplete Network Mask Next Hop Metr LcPrf Wght Path *> 1.1.1.0 255.255.255.0 0.0.0.0 0 ? *> 10.100.100.0 255.255.255.0 0.0.0.0 0 ? *> 10.100.120.0 255.255.255.0 0.0.0.0 0 ? The 13.0.0.0 is filtered out by rrmap; or, a loop detected. The IPv4 network and mask options restrict the output to a specific network in the BGP routing table. © Copyright Lenovo 2015 Chapter 2: Information Commands 97 OSPF Information The following commands display OSPF information. Table 46. OSPF Information Commands Command Syntax and Usage show ip ospf area <0‐2> Displays area information for a particular area index. Command mode: All show ip ospf area information Displays area information for all areas. Command mode: All show ip ospf areavirtuallink information Displays information about all the configured virtual links. Command mode: All show ip ospf generalinformation Displays general OSPF information. See page 99 for a sample output. Command mode: All show ip ospf information Displays OSPF information. Command mode: All show ip ospf interface Displays OSPF information for a particular IP interface. See page 100 for a sample output. Command mode: All show ip ospf interface loopback <1‐5> Displays loopback information for a particular interface. If no parameter is supplied, it displays loopback information for all the interfaces. See page 100 for a sample output. Command mode: All show ip ospf neighbor Displays the status of all the current neighbors. Command mode: All show ip ospf routes Displays OSPF routing table. See page 105 for a sample output. Command mode: All 98 CN4093 Command Reference for N/OS 8.2 Table 46. OSPF Information Commands (continued) Command Syntax and Usage show ip ospf summaryrange <0‐2> Displays the list of summary ranges belonging to non‐NSSA areas. Command mode: All show ip ospf summaryrangenssa <0‐2> Displays the list of summary ranges belonging to NSSA areas. Command mode: All OSPF General Information The following command displays general OSPF information: show ip ospf generalinformation Command mode: All OSPF Version 2 Router ID: 10.10.10.1 Started at 1663 and the process uptime is 4626 Area Border Router: yes, AS Boundary Router: no LS types supported are 6 External LSA count 0 External LSA checksum sum 0x0 Number of interfaces in this router is 2 Number of virtual links in this router is 1 16 new lsa received and 34 lsa originated from this router Total number of entries in the LSDB 10 Database checksum sum 0x0 Total neighbors are 1, of which 2 are >=INIT state, 2 are >=EXCH state, 2 are =FULL state Number of areas is 2, of which 3transit 0nssa Area Id : 0.0.0.0 Authentication : none Import ASExtern : yes Number of times SPF ran : 8 Area Border Router count : 2 AS Boundary Router count : 0 LSA count : 5 LSA Checksum sum : 0x2237B Summary : noSummary © Copyright Lenovo 2015 Chapter 2: Information Commands 99 OSPF Interface Loopback Information The following command displays OSPF interface loopback information: show ip ospf interface loopback Command mode: All Ip Address 5.5.5.5, Area 0.0.0.1, Passive interface, Admin Status UP Router ID 1.1.1.2, State Loopback, Priority 1 Designated Router (ID) 0.0.0.0, Ip Address 0.0.0.0 Backup Designated Router (ID) 0.0.0.0, Ip Address 0.0.0.0 Timer intervals, Hello 10, Dead 40, Wait 40, Retransmit 5, Transit delay 1 Neighbor count is 0 If Events 1, Authentication type none OSPF Interface Information The following command displays OSPF interface information: show ip ospf interface Command mode: All Ip Address 10.10.12.1, Area 0.0.0.1, Admin Status UP Router ID 10.10.10.1, State DR, Priority 1 Designated Router (ID) 10.10.10.1, Ip Address 10.10.12.1 Backup Designated Router (ID) 10.10.14.1, Ip Address 10.10.12.2 Timer intervals, Hello 10, Dead 40, Wait 1663, Retransmit 5, Neighbor count is 1 If Events 4, Authentication type none OSPF Information Route Codes The following command displays OSPF route information: show ip ospf routes Command mode: All Codes: IA OSPF inter area, N1 OSPF NSSA external type 1, N2 OSPF NSSA external type 2 E1 OSPF external type 1, E2 OSPF external type 2 IA 10.10.0.0/16 via 200.1.1.2 IA 40.1.1.0/28 via 20.1.1.2 IA 80.1.1.0/24 via 200.1.1.2 IA 100.1.1.0/24 via 20.1.1.2 IA 140.1.1.0/27 via 20.1.1.2 IA 150.1.1.0/28 via 200.1.1.2 E2 172.18.1.1/32 via 30.1.1.2 E2 172.18.1.2/32 via 30.1.1.2 E2 172.18.1.3/32 via 30.1.1.2 E2 172.18.1.4/32 via 30.1.1.2 E2 172.18.1.5/32 via 30.1.1.2 E2 172.18.1.6/32 via 30.1.1.2 E2 172.18.1.7/32 via 30.1.1.2 E2 172.18.1.8/32 via 30.1.1.2 100 CN4093 Command Reference for N/OS 8.2 OSPF Database Information The following commands display OSPF Database information. Table 47. OSPF Database Information Commands Command Syntax and Usage show ip ospf database Displays all the LSAs. Command mode: All show ip ospf database advertisingrouter Takes advertising router as a parameter. Displays all the Link State Advertisements (LSAs) in the LS database that have the advertising router with the specified router ID, for example: 20.1.1.1. Command mode: All show ip ospf database asbrsummary [advertisingrouter |linkstateid |self] Displays ASBR summary LSAs. The use of this command is as follows: asbrsummary advertisingrouter 20.1.1.1 displays ASBR summary LSAs having the advertising router 20.1.1.1. asbrsummary linkstateid 10.1.1.1 displays ASBR summary LSAs having the link state ID 10.1.1.1. asbrsummary self displays the self advertised ASBR summary LSAs. asbrsummary with no parameters displays all the ASBR summary LSAs. Command mode: All show ip ospf database databasesummary Displays the following information about the LS database in a table format: Number of LSAs of each type in each area. Total number of LSAs for each area. Total number of LSAs for each LSA type for all areas combined. Total number of LSAs for all LSA types for all areas combined. No parameters are required. Command mode: All show ip ospf database external [advertisingrouter | |linkstateid |self] Displays the AS‐external (type 5) LSAs with detailed information of each field of the LSAs. Command mode: All show ip ospf database network [advertisingrouter | |linkstateid |self] Displays the network (type 2) LSAs with detailed information of each field of the LSA.network LS database. Command mode: All © Copyright Lenovo 2015 Chapter 2: Information Commands 101 Table 47. OSPF Database Information Commands (continued) Command Syntax and Usage show ip ospf database nssa Displays the NSSA (type 7) LSAs with detailed information of each field of the LSAs. Command mode: All show ip ospf database router [advertisingrouter | |linkstateid |self] Displays the router (type 1) LSAs with detailed information of each field of the LSAs. Command mode: All show ip ospf database self Displays all the self‐advertised LSAs. No parameters are required. Command mode: All show ip ospf database summary [advertisingrouter | |linkstateid |self] Displays the network summary (type 3) LSAs with detailed information of each field of the LSAs. Command mode: All 102 CN4093 Command Reference for N/OS 8.2 OSPFv3 Information The following commands display OSPFv3 information. Table 48. OSPFv3 Information Options Command Syntax and Usage show ipv6 ospf area Displays the area information. Command mode: All show ipv6 ospf areas Displays the OSPFv3 Area Table. Command mode: All show ipv6 ospf arearange information Displays OSPFv3 summary ranges. Command mode: All show ipv6 ospf areavirtuallink Displays information about all the configured virtual links. Command mode: All show ipv6 ospf borderrouters Displays OSPFv3 routes to an ABR or ASBR. Command mode: All show ipv6 ospf host Displays OSPFv3 host configuration information. Command mode: All show ipv6 ospf information Displays all OSPFv3 information. To view a sample display, see page 104. Command mode: All show ipv6 ospf interface Displays interface information for a particular interface. If no parameter is supplied, it displays information for all the interfaces. To view a sample display, see page 105. Command mode: All show ipv6 ospf neighbor Displays the status of a neighbor with a particular router ID. If no router ID is supplied, it displays the information about all the current neighbors. Command mode: All © Copyright Lenovo 2015 Chapter 2: Information Commands 103 Table 48. OSPFv3 Information Options Command Syntax and Usage show ipv6 ospf redistconfig Displays OSPFv3 redistribution information to be applied to routes learned from the route table. Command mode: All show ipv6 ospf requestlist Displays the OSPFv3 request list. If no router ID is supplied, it displays the information about all the current neighbors. Command mode: All show ipv6 ospf retranslist Displays the OSPFv3 retransmission list. If no router ID is supplied, it displays the information about all the current neighbors. Command mode: All show ipv6 ospf routes Displays OSPFv3 routing table. To view a sample display, see page 105. Command mode: All show ipv6 ospf summaryprefix Displays the OSPFv3 external summary‐address configuration information. Command mode: All OSPFv3 Information Dump The following command displays OSPFv3 information: show ipv6 ospf information Command mode: All Router Id: 1.0.0.1 ABR Type: Standard ABR SPF schedule delay: 5 secs Hold time between two SPFs: 10 secs Exit Overflow Interval: 0 Ref BW: 100000 Ext Lsdb Limit: none Trace Value: 0x00008000 As Scope Lsa: 2 Checksum Sum: 0xfe16 Passive Interface: Disable Nssa Asbr Default Route Translation: Disable Autonomous System Boundary Router Redistributing External Routes from connected, metric 10, metric type asExtType1, no tag set Number of Areas in this router 1 Area 0.0.0.0 Number of interfaces in this area is 1 Number of Area Scope Lsa: 7 Checksum Sum: 0x28512 Number of Indication Lsa: 0 SPF algorithm executed: 2 times 104 CN4093 Command Reference for N/OS 8.2 OSPFv3 Interface Information The following command displays OSPFv3 interface information: show ipv6 ospf interface Command mode: All Ospfv3 Interface Information Interface Id: 1 Instance Id: 0 Local Address: fe80::222:ff:fe7d:5d00 Network Type: BROADCAST Cost: 1 Designated Router Id: 2.0.0.2 fe80::218:b1ff:fea1:6c01 Area Id: 0.0.0.0 Router Id: 1.0.0.1 State: BACKUP local address: Backup Designated Router Id: 1.0.0.1 fe80::222:ff:fe7d:5d00 local address: Transmit Delay: 1 sec Priority: 1 IfOptions: 0x0 Timer intervals configured: Hello: 10, Dead: 40, Retransmit: 5 Hello due in 6 sec Neighbor Count is: 1, Adjacent neighbor count is: 1 Adjacent with neighbor 2.0.0.2 OSPFv3 Routes Information The following command displays OSPFv3 route information: show ipv6 ospf routes Command mode: All Dest/ PrefixLength 3ffe::10:0:0:0 /80 3ffe::20:0:0:0 /80 3ffe::30:0:0:0 /80 3ffe::60:0:0:6 /128 © Copyright Lenovo 2015 NextHp/ Cost IfIndex fe80::290:69ff 30 fe90:b4bf /vlan1 fe80::290:69ff 20 fe90:b4bf /vlan1 :: /vlan2 10 fe80::211:22ff fe33:4426 /vlan2 10 Rt. Type Area interArea 0.0.0.0 interArea 0.0.0.0 intraArea 0.0.0.0 interArea 0.0.0.0 Chapter 2: Information Commands 105 OSPFv3 Database Information The following commands display OSPFv3 Database information. Table 49. OSPFv3 Database Information Options Command Syntax and Usage show ipv6 ospf database [detail|hex] Displays all the LSAs. Command mode: All show ipv6 ospf database asexternal [detail|hex] Displays AS‐External LSAs database information. If no parameter is supplied, it displays condensed information. Command mode: All show ipv6 ospf database interprefix [detail|hex] Displays Inter‐Area Prefix LSAs database information. If no parameter is supplied, it displays condensed information. Command mode: All show ipv6 ospf database interrouter [detail|hex] Displays Inter‐Area router LSAs database information. If no parameter is supplied, it displays condensed information. Command mode: All show ipv6 ospf database intraprefix [detail|hex] Displays Intra‐Area Prefix LSAs database information. If no parameter is supplied, it displays condensed information. Command mode: All show ipv6 ospf database link [detail|hex] Displays Link LSAs database information. If no parameter is supplied, it displays condensed information. Command mode: All show ipv6 ospf database network [detail|hex] Displays Network LSAs database information. If no parameter is supplied, it displays condensed information. Command mode: All show ipv6 ospf database router [detail|hex] Displays the Router LSAs with detailed information of each field of the LSAs. If no parameter is supplied, it displays condensed information. Command mode: All show ipv6 ospf database nssa [detail|hex] Displays Type‐7 (NSSA) LSA database information. If no parameter is supplied, it displays condensed information. Command mode: All 106 CN4093 Command Reference for N/OS 8.2 Routing Information Protocol The following commands display Routing Information Protocol (RIP) information. Table 50. Routing Information Protocol Commands Command Syntax and Usage show ip rip routes Displays RIP routes. For more information, see page 107. Command mode: All show interface ip rip Displays RIP user’s configuration. For more information, see page 107. Command mode: All RIP Routes Information The following command displays RIP route information: show ip rip routes Command mode: All >> IP Routing# 30.1.1.0/24 directly connected 3.0.0.0/8 via 30.1.1.11 metric 4 4.0.0.0/16 via 30.1.1.11 metric 16 10.0.0.0/8 via 30.1.1.2 metric 3 20.0.0.0/8 via 30.1.1.2 metric 2 This table contains all dynamic routes learned through RIP, including the routes that are undergoing garbage collection with metric = 16. This table does not contain locally configured static routes. RIP Interface Information The following command displays RIP user information: show ip rip interface Command mode: All RIP USER CONFIGURATION : RIP: ON, update 30 RIP on Interface 49 : 101.1.1.10, enabled version 2, listen enabled, supply enabled, default none poison disabled, split horizon enabled, trigg enabled, mcast enabled, metric 1 auth none,key none © Copyright Lenovo 2015 Chapter 2: Information Commands 107 IPv6 Routing Information Table 51 describes the IPv6 Routing information options. Table 51. IPv6 Routing Information Commands Command Syntax and Usage show ipv6 route Displays all IPv6 routing information. For more information, see page 109. Command mode: All show ipv6 route address Displays a single route by destination IP address. Command mode: All show ipv6 route gateway Displays routes to a single gateway. Command mode: All show ipv6 route interface Displays routes on a single interface. Command mode: All show ipv6 route static Displays all static IPv6 routes. Command mode: All show ipv6 route type {connected|static|ospf} Displays routes of a single type. Command mode: All show ipv6 route summary Displays a summary of IPv6 routing information, including inactive routes. Command mode: All 108 CN4093 Command Reference for N/OS 8.2 IPv6 Routing Table The following command displays IPv6 routing information: show ipv6 route Command mode: All IPv6 Routing Table 3 entries Codes : C Connected, S Static O OSPF D Data Gateway from RA M Management Gateway, E ExtManagement Gateway N Management Gateway from RA F ExtManagement Gateway from RA S C C ::/0 [1/20] via 2001:2:3:4::1, Interface 2 2001:2:3:4::/64 [1/1] via ::, Interface 2 fe80::20f:6aff:feec:f701/128 [1/1] via ::, Interface 2 Note: The first number inside the brackets represents the metric and the second number represents the preference for the route. © Copyright Lenovo 2015 Chapter 2: Information Commands 109 IPv6 Neighbor Discovery Cache Information The following commands display IPv6 Neighbor Discovery Cache information. Table 52. IPv6 Neighbor Discovery Cache Information Commands Command Syntax and Usage show ipv6 neighbors Shows all IPv6 Neighbor Discovery cache entries. For more information, see page 110. Command mode: All show ipv6 neighbors find Shows a single IPv6 Neighbor Discovery cache entry by IP address. Command mode: All show ipv6 neighbors interface port Shows IPv6 Neighbor Discovery cache entries on a single port. Command mode: All show ipv6 neighbors static Displays static IPv6 Neighbor Discovery cache entries. Command mode: All show ipv6 neighbors vlan Shows IPv6 Neighbor Discovery cache entries on a single VLAN. Command mode: All IPv6 Neighbor Discovery Cache Information The following command displays a summary of IPv6 Neighbor Discovery cache information: show ipv6 neighbors Command mode: All IPv6 Address Age 2001:2:3:4::1 10 fe80::250:bfff:feb7:76b0 0 110 CN4093 Command Reference for N/OS 8.2 Linklayer Addr 00:50:bf:b7:76:b0 00:50:bf:b7:76:b0 State Reachable Stale IF 2 2 VLAN 1 1 Port EXT1 EXT2 IPv6 Neighbor Discovery Prefix Information The following command displays a summary of IPv6 Neighbor Discovery prefix information: show ipv6 prefix Command mode: All Codes: A Address , P PrefixAdvertisement D Default , N Not Advertised [L] Onlink Flag is set [A] Autonomous Flag is set AD 10:: 64 [LA] Valid lifetime 2592000 , Preferred lifetime 604800 P 20:: 64 [LA] Valid lifetime 200 , Preferred lifetime 100 Neighbor Discovery prefix information includes information about all configured prefixes. The following command displays IPv6 Neighbor Discovery prefix information for an interface: show ipv6 prefix interface Command mode: All © Copyright Lenovo 2015 Chapter 2: Information Commands 111 ECMP Static Route Information The following command displays Equal Cost Multi‐Path (ECMP) route information: show ip ecmp Command mode: All Current ecmp static routes: Destination Mask Gateway If GW Status 10.10.1.1 255.255.255.255 100.10.1.1 1 up 200.20.2.2 1 down 10.20.2.2 255.255.255.255 10.233.3.3 1 up 10.20.2.2 255.255.255.255 10.234.4.4 1 up 10.20.2.2 255.255.255.255 10.235.5.5 1 up ECMP route information shows the status of each ECMP route configured on the switch. ECMP Hashing Result The following command displays the status of ECMP hashing on each switch: show ip route ecmphash Command mode: All ECMP Hash Mechanism: dipsip 112 CN4093 Command Reference for N/OS 8.2 IGMP Information The following commands display IGMP information: Table 53. IGMP Information Commands Command Syntax and Usage show ip igmp Displays the current IGMP configuration parameters. Command mode: All show ip igmp filtering Displays current IGMP Filtering parameters. Command mode: All show ip igmp groups Displays information for all multicast groups. For a command sample output, see page 116. Command mode: All show ip igmp groups address Displays a single IGMP multicast group by its IP address. Command mode: All show ip igmp groups detail Displays details about an IGMP multicast group, including source and timer information. Command mode: All show ip igmp groups interface port Displays all IGMP multicast groups on a single port. Command mode: All show ip igmp groups portchannel Displays all IGMP multicast groups on a single trunk group. Command mode: All show ip igmp groups vlan Displays all IGMP multicast groups on a single VLAN. Command mode: All show ip igmp ipmcgrp Displays information for all IPMC groups. For details, see page 117. Command mode: All show ip igmp mrouter [information] Displays IGMP Multicast Router information. For details, see page 117. Command mode: All © Copyright Lenovo 2015 Chapter 2: Information Commands 113 Table 53. IGMP Information Commands (continued) Command Syntax and Usage show ip igmp mrouter dynamic Displays IGMP Multicast Router dynamic information. Command mode: All show ip igmp mrouter interface port Displays IGMP Multicast Router information the specified interface. Command mode: All show ip igmp mrouter portchannel Displays IGMP Multicast Router information the specified portchannel. Command mode: All show ip igmp mrouter static Displays IGMP Multicast Router static information. Command mode: All show ip igmp mrouter vlan Displays IGMP Multicast Router information for the specified VLAN. Command mode: All show ip igmp profile <1‐16> Displays information about the current IGMP filter. Command mode: All show ip igmp querier vlan Displays IGMP Querier information. For details, see page 115. Command mode: All show ip igmp snoop Displays IGMP Snooping information. Command mode: All 114 CN4093 Command Reference for N/OS 8.2 IGMP Querier Information The following command displays IGMP Querier information: show ip igmp querier vlan Command mode: All Current IGMP Querier information: IGMP Querier information for vlan 1: Other IGMP querier none Switchquerier enabled, current state: Querier Switchquerier type: Ipv4, address 1.1.1.1, Switchquerier general query interval: 125 secs, Switchquerier maxresponse interval: 100 'tenths of secs', Switchquerier startup interval: 31 secs, count: 2 Switchquerier robustness: 2 IGMP configured version is v3 IGMP Operating version is v3 IGMP Querier information includes: VLAN number Querier status © Copyright Lenovo 2015 Other IGMP querier—none IGMP querier present, address: (IP or MAC address) Querier election type (IPv4 or MAC) and address Query interval Querier startup interval Maximum query response interval Querier robustness value Other IGMP querier present, interval (minutes:seconds) IGMP Querier current state: Querier/Non‐Querier IGMP version number Chapter 2: Information Commands 115 IGMP Group Information The following command displays IGMP Group information: show ip igmp groups Command mode: All Total entries: 5 Total IGMP groups: 2 Note: The number is computed as the number of unique (Group, Vlan) entries! Note: Local groups (224.0.0.x) are not snooped/relayed appear. Source Group VLAN Port Version 10.1.1.1 232.1.1.1 2 4 V3 10.1.1.5 232.1.1.1 2 4 V3 * 232.1.1.1 2 4 V3 10.10.10.43 235.0.0.1 9 1 V3 * 235.0.0.1 9 1 V3 IGMP Group information includes: 116 IGMP source address IGMP Group address VLAN and port IGMP version IGMPv3 filter mode Expiration timer value IGMP multicast forwarding state CN4093 Command Reference for N/OS 8.2 and will not Mode Expires Fwd INC 4:16 Yes INC 4:16 Yes INC No EXC 2:26 No EXC Yes IGMP Multicast Router Information The following command displays Mrouter information: show ip igmp mrouter information Command mode: All Total entries: 3 Total number of dynamic mrouters: 2 Total number of installed static mrouters: SrcIP VLAN Port Version 10.1.1.1 3 EXT4 V3 10.1.1.5 2 EXT6 V2 * 9 EXT7 V2 1 Expires 4:09 4:09 static MRT 128 125 QRV 2 QQIC 125 IGMP Mrouter information includes: Source IP address VLAN and port where the Mrouter is connected IGMP version Mrouter expiration Maximum query response time Querier’s Robustness Variable (QRV) Querier’s Query Interval Code (QQIC) IPMC Group Information The following command displays IGMP IPMC group information: show ip igmp ipmcgrp Command mode: All Total number of displayed ipmc groups: 4 Legend(possible values in Type column): SH static host DR dynamic registered SP static primary DU dynamic unregistered SB static backup M mrouter O other Source Group Vlan Port =============== =============== ==== ============ * 232.0.0.1 1 * 232.0.0.2 1 * 232.0.0.3 1 * 232.0.0.4 1 Type Timeleft ==== ======== DU 6 sec DU 6 sec DU 6 sec DU 6 sec IGMP IPMC Group information includes: IGMPv3 source address Multicast group address VLAN and port Type of IPMC group Expiration timer value © Copyright Lenovo 2015 Chapter 2: Information Commands 117 MLD information Table 54 describes the commands used to view Multicast Listener Discovery (MLD) information. Table 54. MLD Information Commands Command Syntax and Usage show ipv6 mld groups Displays MLD multicast group information. Command mode: All show ipv6 mld groups address Displays group information for the specified IPv6 address. Command mode: All show ipv6 mld groups interface port Displays MLD groups on a single interface port. Command mode: All show ipv6 mld groups portchannel Displays groups on a single port channel. Command mode: All show ipv6 mld groups vlan Displays groups on a single VLAN. Command mode: All show ipv6 mld mrouter Displays all MLD Mrouter ports. See page 119 for sample output. Command mode: All 118 CN4093 Command Reference for N/OS 8.2 MLD Mrouter Information The following command displays MLD Mrouter information: show ipv6 mld mrouter Command mode: All Source: fe80:0:0:0:200:14ff:fea8:40c9 Port/Vlan: 26/4 Interface: 3 QRV: 2 QQIC:125 Maximum Response Delay: 1000 Version: MLDv2 Expires:1:02 The following table describes the MLD Mrouter information displayed in the output. Table 55. MLD Mrouter © Copyright Lenovo 2015 Statistic Description Source Displays the link‐local address of the reporter. Port/Vlan Displays the port/vlan on which the general query is received. Interface Displays the interface number on which the general query is received. QRV Displays the Querier’s robustness variable value. QQIC Displays the Querier’s query interval code. Maximum Response Delay Displays the configured maximum query response time. Version Displays the MLD version configured on the interface. Expires Displays the amount of time that must pass before the multicast router decides that there are no more listeners for a multicast address or a particular source on a link. Chapter 2: Information Commands 119 VRRP Information Virtual Router Redundancy Protocol (VRRP) support on CN4093 10Gb Converged Scalable Switch provides redundancy between routers in a LAN. This is accomplished by configuring the same virtual router IP address and ID number on each participating VRRP‐capable routing device. One of the virtual routers is then elected as the master, based on a number of priority criteria, and assumes control of the shared virtual router IP address. If the master fails, one of the backup virtual routers will assume routing authority and take control of the virtual router IP address. The following command displays VRRP information: show ip vrrp information Command mode: All VRRP 1: 2: 3: information: vrid 2, 205.178.18.210, if vrid 1, 205.178.18.202, if vrid 3, 205.178.18.204, if 1, renter, prio 100, master 1, renter, prio 100, backup 1, renter, prio 100, master When virtual routers are configured, you can view the status of each virtual router using this command. VRRP information includes: Virtual router number Virtual router ID and IP address Interface number Ownership status owner identifies the preferred master virtual router. A virtual router is the owner when the IP address of the virtual router and its IP interface are the same. renter identifies virtual routers which are not owned by this device. Priority value. During the election process, the virtual router with the highest priority becomes master. Activity status 120 master identifies the elected master virtual router. backup identifies that the virtual router is in backup mode. holdoff identifies that the virtual router is in holdoff state. init identifies that the virtual router is waiting for a startup event. For example, once it receives a startup event, it transitions to master if its priority is 255, (the IP address owner), or transitions to backup if it is not the IP address owner. CN4093 Command Reference for N/OS 8.2 Interface Information The following command displays interface information: show interface ip Command mode: All Interface information: 126: IP6 fd55:faaf:e1ab:1022:7699:75ff:fe91:a6ef/64 , vlan 4095, up fe80::7699:75ff:fe91:a6ef 128: IP4 9.37.78.51 255.255.252.0 9.37.79.255 , vlan 4095, up For each interface, the following information is displayed: IPv4 interface address and subnet mask IPv6 address and prefix VLAN assignment Status (up, down, disabled) © Copyright Lenovo 2015 Chapter 2: Information Commands 121 IPv6 Interface Information The following command displays IPv6 interface information: show ipv6 interface [ ] Command mode: All Interface information: 2: IP6 2001:0:0:0:225:3ff:febb:bb15/64 fe80::225:3ff:febb:bb15 Link local address: fe80::225:3ff:febb:bb15 Global unicast address(es): 2001::225:3ff:febb:bb15/64 Anycast address(es): Not Configured. Joined group address(es): ff02::1 ff02::2 ff02::1:ffbb:bb15 MTU is 1500 ICMP redirects are enabled ND DAD is enabled, Number of DAD attempts: 1 ND router advertisement is disabled , vlan 1, up For each interface, the following information is displayed: 122 IPv6 interface address and prefix VLAN assignment Status (up, down, disabled) Path MTU size Status of ICMP redirects Status of Neighbor Discovery (ND) Duplicate Address Detection (DAD) Status of Neighbor Discovery router advertisements CN4093 Command Reference for N/OS 8.2 IPv6 Path MTU Information The following command displays IPv6 Path MTU information: show ipv6 pmtu [ ] Command mode: All Path MTU Discovery info: Max Cache Entry Number : 10 Current Cache Entry Number: 2 Cache Timeout Interval : 10 minutes Destination Address 5000:1::3 FE80::203:A0FF:FED6:141D Since 00:02:26 00:06:55 PMTU 1400 1280 Path MTU Discovery information provides information about entries in the Path MTU cache. The PMTU field indicates the maximum packet size in octets that can successfully traverse the path from the switch to the destination node. It is equal to the minimum link MTU of all the links in the path to the destination node. © Copyright Lenovo 2015 Chapter 2: Information Commands 123 IP Information The following command displays Layer 3 information: show ip interface brief Command mode: All IP information: AS number 0 Interface information: 126: IP6 0:0:0:0:0:0:0:0/0 fe80::200:ff:fe00:ef 128: IP4 9.43.95.121 255.255.255.0 , vlan 4095, up 9.43.95.255, vlan 4095, up Loopback interface information: Default gateway information: metric strict 4: 9.43.95.254, FAILED Default IP6 gateway information: Current BOOTP relay settings: OFF Global servers: Server 1 address 0.0.0.0 Server 2 address 0.0.0.0 Server 3 address 0.0.0.0 Server 4 address 0.0.0.0 Server 5 address 0.0.0.0 Current IP forwarding settings: ON, dirbr disabled, icmprd disabled Current network filter settings: none Current route map settings: RIP is disabled. OSPF is disabled. OSPFv3 is disabled. BGP is disabled. IP information includes: 124 IP interface information: Interface number, IP address, subnet mask, broadcast address, VLAN number, and operational status. Default gateway information: Metric for selecting which configured gateway to use, gateway number, IP address, and health status. BootP relay settings. IP forwarding settings, including the forwarding status of directed broadcasts, and the status of ICMP re‐directs. Network filter settings, if applicable. Route map settings, if applicable. CN4093 Command Reference for N/OS 8.2 IKEv2 Information The following table lists commands that display information about IKEv2. Table 56. IKEv2 Information Commands Command Syntax and Usage show ikev2 Displays all IKEv2 information. See page 126 for sample output. Command mode: All show ikev2 cacert Displays the CA certificate. Command mode: All show ikev2 hostcert Displays the host certificate. Command mode: All show ikev2 identity Displays IKEv2 identity information. Command mode: All show ikev2 presharekey Displays the IKEv2 preshare key. Command mode: All show ikev2 proposal Displays the IKEv2 proposal. Command mode: All show ikev2 retransmitinterval Displays the IKEv2 retransmit interval. Command mode: All show ikev2 sa Displays the IKEv2 SA. Command mode: All © Copyright Lenovo 2015 Chapter 2: Information Commands 125 IKEv2 Information Dump The following command displays IKEv2 information: show ikev2 Command mode: All IKEv2 retransmit time: 20 IKEv2 cookie notification: disable IKEv2 authentication method: Preshared key IKEv2 proposal: Cipher: Authentication: DH Group: 3des sha1 dh2 Local preshare key: lenovo123 IKEv2 choose IPv6 address as ID type No SAD entries. IKEv2 information includes: 126 IKEv2 retransmit time, in seconds. Whether IKEv2 cookie notification is enabled. The IKEv2 proposal in force. This includes the encryption algorithm (cipher), the authentication algorithm type, and the Diffie‐Hellman (DH) group, which determines the strength of the key used in the key exchange process. Higher DH group numbers are more secure but require additional time to compute the key. The local preshare key. Whether IKEv2 is using IPv4 or IPv6 addresses as the ID type. Security Association Database (SAD) entries, if applicable. CN4093 Command Reference for N/OS 8.2 IPsec Information The following table describes the commands used to display information about IPsec. Table 57. IPsec Information Commands Command Syntax and Usage show ipsec dynamicpolicy <1‐10> Displays dynamic policy information. Command mode: All show ipsec manualpolicy <1‐10> Displays manual policy information. See page 128 for sample output. Command mode: All show ipsec sa Displays all security association information. Command mode: All show ipsec spd Displays all security policy information. Command mode: All show ipsec trafficselector <1‐10> Displays IPsec traffic selector information. Command mode: All show ipsec transformset <1‐10> Displays IPsec transform set information. Command mode: All © Copyright Lenovo 2015 Chapter 2: Information Commands 127 IPsec Manual Policy Information The following command displays IPsec manual key management policy information: show ipsec manualpolicy Command mode: All IPsec manual policy 1 IP Address: 2002:0:0:0:0:0:0:151 Associated transform ID: 1 Associated traffic selector ID: 1 INESP SPI: 9900 INESP encryption KEY: 3456789abcdef012 INESP authentication KEY: 23456789abcdef0123456789abcdef0123456789 OUTESP SPI: 7700 OUTESP encryption KEY: 6789abcdef012345 OUTESP authentication KEY: 56789abcdef0123456789abcdef0123456789abc Applied on interface: interface 1 IPsec manual policy information includes: 128 The IP address of the remote peer The transform set ID associated with this policy Traffic selector ID associated with this policy ESP inbound SPI ESP inbound encryption key ESP inbound authentication key ESP outbound SPI ESP outbound encryption key ESP outbound authentication key The interface to which this manual policy has been applied CN4093 Command Reference for N/OS 8.2 PIM Information The following commands display PIM information. Table 58. PIM Information Options Command Syntax and Usage show ip pim bsr [ ] Displays information about the PIM bootstrap router (BSR). Command mode: All show ip pim component [ ] Displays PIM component information. For details, see page 130. Command mode: All show ip pim electedrp [group ] Displays a list of the elected Rendezvous Points. Command mode: All show ip pim interface [ |detail|port ] Displays PIM interface information. To view sample output, see page 130. Command mode: All show ip pim mroute [ |count|flags| |group |interface { | |port }|source ] Displays information about PIM multicast routes. For more information about displaying PIM multicast route information, see page 132. Command mode: All show ip pim neighbor [ |port ] Displays PIM neighbor information. To view sample output, see page 131. Command mode: All show ip pim neighborfilters Displays information about PIM neighbor filters. Command mode: All show ip pim rpcandidate [ ] Displays a list of the candidate Rendezvous Points configured. Command mode: All show ip pim rpset [