Dell Command Line Reference Guide for the S4048–ON System 9.9(0.0)
File info: application/pdf · 1544 pages · 7.43MB
Dell Command Line Reference Guide for the S4048–ON System 9.9(0.0)
Reference Guide
dell S4048-ON switch command reference guide 9.9.0.0, S4048-ON switch commands, ftos commands, dell networking operating system, switch command reference, virtual link trunking force10, dhcp server commands, virtual routing, command line interface, dell networking commands, policy based routing, open networking, open switch, router switch
Dell Command Line Reference Guide for the S4048–ON System
Dell Command Line Reference Guide for the S4048–ON System 9.9(0.0) September 2015
Full PDF Document
If the inline viewer fails, it will open the original document in compatibility mode automatically. You can also open the file directly.
Extracted Text
Dell Command Line Reference Guide for the S4048�ON System
9.9(0.0)
September 2015
Notes, cautions, and warnings
NOTE: A NOTE indicates important information that helps you make better use of your computer. CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. WARNING: A WARNING indicates a potential for property damage, personal injury, or death.
Copyright � 2015 Dell Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. DellTM and the Dell logo are trademarks of Dell Inc. in the United States and/or other jurisdictions. All other marks and names mentioned herein may be trademarks of their respective companies.
Contents
Chapter 1: About this Guide.........................................................................................................40 Objectives........................................................................................................................................................................... 40 Audience.............................................................................................................................................................................. 40 Conventions........................................................................................................................................................................40 Information Icons................................................................................................................................................................41
Chapter 2: CLI Basics.................................................................................................................. 42 Accessing the Command Line........................................................................................................................................ 42 Multiple Configuration Users.......................................................................................................................................... 42 Obtaining Help....................................................................................................................................................................43 Navigating the CLI............................................................................................................................................................ 44 Using the Keyword no Command.................................................................................................................................. 44 Filtering show Commands............................................................................................................................................... 45 Enabling Software Features on Devices Using a Command Option..................................................................... 45 feature vrf..................................................................................................................................................................... 46 show feature.................................................................................................................................................................46 Command Modes...............................................................................................................................................................47
Chapter 3: File Management........................................................................................................55 boot system........................................................................................................................................................................55 cd.......................................................................................................................................................................................... 56 HTTP Copy via CLI............................................................................................................................................................57 copy...................................................................................................................................................................................... 57 delete................................................................................................................................................................................... 60 dir.......................................................................................................................................................................................... 60 format (S-Series)...............................................................................................................................................................61 fsck flash............................................................................................................................................................................. 62 mkdir..................................................................................................................................................................................... 63 mount nfs............................................................................................................................................................................ 63 rmdir..................................................................................................................................................................................... 64 HTTP Copy via CLI............................................................................................................................................................64 rename................................................................................................................................................................................. 65 restore factory-defaults.................................................................................................................................................. 65 show boot system............................................................................................................................................................. 68 show bootvar......................................................................................................................................................................68 show file-systems............................................................................................................................................................. 69 show os-version.................................................................................................................................................................70 show running-config..........................................................................................................................................................71 show startup-config......................................................................................................................................................... 74 show version.......................................................................................................................................................................75 upgrade................................................................................................................................................................................ 77 upgrade system..................................................................................................................................................................78
Chapter 4: Control and Monitoring...............................................................................................81
Contents
3
asf-mode............................................................................................................................................................................. 82 banner exec........................................................................................................................................................................ 83 banner login........................................................................................................................................................................ 84 banner motd....................................................................................................................................................................... 85 cam-acl................................................................................................................................................................................ 86 cam-acl-vlan....................................................................................................................................................................... 87 clear line...............................................................................................................................................................................88 configure............................................................................................................................................................................. 88 disable.................................................................................................................................................................................. 89 do.......................................................................................................................................................................................... 90 enable................................................................................................................................................................................... 90 enable optic-info-update interval...................................................................................................................................91 enable xfp-power-updates..............................................................................................................................................92 end........................................................................................................................................................................................ 93 exec-timeout...................................................................................................................................................................... 93 exit........................................................................................................................................................................................ 94 ftp-server enable...............................................................................................................................................................95 ftp-server topdir................................................................................................................................................................96 ftp-server username......................................................................................................................................................... 97 hostname.............................................................................................................................................................................98 ip http source-interface...................................................................................................................................................98 ip http vrf............................................................................................................................................................................ 99 ip ftp password................................................................................................................................................................ 100 ip ftp source-interface................................................................................................................................................... 100 ip ftp username................................................................................................................................................................. 101 ip ftp vrf.............................................................................................................................................................................102 ip telnet server enable.................................................................................................................................................... 103 ip telnet server vrf...........................................................................................................................................................103 ip telnet source-interface.............................................................................................................................................. 104 ip telnet vrf....................................................................................................................................................................... 105 ip tftp source-interface..................................................................................................................................................105 ip tftp vrf........................................................................................................................................................................... 106 line....................................................................................................................................................................................... 107 login concurrent-session................................................................................................................................................108 login statistics...................................................................................................................................................................109 motd-banner...................................................................................................................................................................... 110 ping....................................................................................................................................................................................... 111 reload................................................................................................................................................................................... 114 send......................................................................................................................................................................................114 service timestamps.......................................................................................................................................................... 115 show alarms....................................................................................................................................................................... 116 show cam-acl-vlan........................................................................................................................................................... 117 show command-history...................................................................................................................................................118 show command-tree........................................................................................................................................................119 show cpu-traffic-stats................................................................................................................................................... 120 show debugging................................................................................................................................................................ 121 show environment........................................................................................................................................................... 122 show inventory................................................................................................................................................................. 124 show login statistics........................................................................................................................................................126 show memory....................................................................................................................................................................128
4
Contents
show processes cpu........................................................................................................................................................129 show processes ipc flow-control................................................................................................................................. 132 show processes memory................................................................................................................................................134 show software ifm...........................................................................................................................................................136 show system..................................................................................................................................................................... 137 show tech-support...........................................................................................................................................................141 ssh-peer-stack-unit.........................................................................................................................................................143 telnet...................................................................................................................................................................................144 telnet-peer-stack-unit.................................................................................................................................................... 145 terminal length..................................................................................................................................................................146 traceroute.......................................................................................................................................................................... 147 undebug all........................................................................................................................................................................ 148 virtual-ip............................................................................................................................................................................. 149 write.................................................................................................................................................................................... 150
Chapter 5: 802.1ag.....................................................................................................................152 ccm disable........................................................................................................................................................................152 ccm transmit-interval..................................................................................................................................................... 153 clear ethernet cfm traceroute-cache......................................................................................................................... 153 database hold-time..........................................................................................................................................................154 disable.................................................................................................................................................................................154 domain................................................................................................................................................................................ 154 ethernet cfm.....................................................................................................................................................................155 ethernet cfm mep............................................................................................................................................................155 ethernet cfm mip............................................................................................................................................................. 156 mep cross-check..............................................................................................................................................................157 mep cross-check enable................................................................................................................................................ 157 mep cross-check start-delay........................................................................................................................................ 158 ping ethernet.................................................................................................................................................................... 158 show ethernet cfm domain........................................................................................................................................... 159 show ethernet cfm maintenance-points local.......................................................................................................... 159 show ethernet cfm maintenance-points remote..................................................................................................... 160 show ethernet cfm mipbd.............................................................................................................................................. 161 show ethernet cfm statistics.........................................................................................................................................161 show ethernet cfm port-statistics.............................................................................................................................. 162 show ethernet cfm traceroute-cache........................................................................................................................ 163 service................................................................................................................................................................................ 163 traceroute cache hold-time...........................................................................................................................................164 traceroute cache size..................................................................................................................................................... 164 traceroute ethernet........................................................................................................................................................ 165
Chapter 6: 802.1X...................................................................................................................... 166 debug dot1x....................................................................................................................................................................... 167 dot1x auth-fail-vlan..........................................................................................................................................................167 dot1x auth-server.............................................................................................................................................................168 dot1x auth-type mab-only..............................................................................................................................................169 dot1x authentication (Configuration)..........................................................................................................................169 dot1x authentication (Interface).................................................................................................................................. 170 dot1x guest-vlan................................................................................................................................................................171
Contents
5
dot1x host-mode.............................................................................................................................................................. 172 dot1x mac-auth-bypass.................................................................................................................................................. 172 dot1x max-eap-req...........................................................................................................................................................173 dot1x max-supplicants.................................................................................................................................................... 174 dot1x port-control............................................................................................................................................................174 dot1x quiet-period............................................................................................................................................................175 dot1x reauthentication.................................................................................................................................................... 176 dot1x reauth-max............................................................................................................................................................. 176 dot1x server-timeout....................................................................................................................................................... 177 dot1x supplicant-timeout................................................................................................................................................178 dot1x tx-period..................................................................................................................................................................178 show dot1x cos-mapping interface..............................................................................................................................179 show dot1x interface.......................................................................................................................................................180
Chapter 7: Access Control Lists (ACL)....................................................................................... 184 Commands Common to all ACL Types....................................................................................................................... 185 remark...........................................................................................................................................................................185 show config................................................................................................................................................................. 186 Common IP ACL Commands......................................................................................................................................... 187 access-class................................................................................................................................................................ 187 clear counters ip access-group.............................................................................................................................. 188 ip access-group.......................................................................................................................................................... 189 ip control-plane egress-filter...................................................................................................................................190 show ip accounting access-list...............................................................................................................................190 show ip access-lists.................................................................................................................................................. 192 Standard IP ACL Commands.........................................................................................................................................192 deny...............................................................................................................................................................................192 ip access-list standard..............................................................................................................................................194 permit............................................................................................................................................................................195 resequence access-list............................................................................................................................................. 196 seq................................................................................................................................................................................. 197 Extended IP ACL Commands........................................................................................................................................198 deny...............................................................................................................................................................................198 deny icmp....................................................................................................................................................................200 deny tcp....................................................................................................................................................................... 201 deny udp......................................................................................................................................................................204 ip access-list extended............................................................................................................................................ 206 permit........................................................................................................................................................................... 207 permit tcp................................................................................................................................................................... 208 permit udp................................................................................................................................................................... 210 resequence access-list............................................................................................................................................. 212 seq................................................................................................................................................................................. 213 Common MAC Access List Commands...................................................................................................................... 215 clear counters mac access-group..........................................................................................................................216 mac access-group......................................................................................................................................................216 show mac access-lists.............................................................................................................................................. 217 show mac accounting access-list.......................................................................................................................... 218 Standard MAC ACL Commands...................................................................................................................................219 deny...............................................................................................................................................................................219 mac access-list standard.........................................................................................................................................220
6
Contents
permit............................................................................................................................................................................221 seq................................................................................................................................................................................ 222 Extended MAC ACL Commands..................................................................................................................................224 deny.............................................................................................................................................................................. 224 mac access-list extended........................................................................................................................................226 permit........................................................................................................................................................................... 227 IP Prefix List Commands...............................................................................................................................................228 clear ip prefix-list.......................................................................................................................................................228 deny.............................................................................................................................................................................. 229 ip prefix-list.................................................................................................................................................................230 seq................................................................................................................................................................................. 231 show config................................................................................................................................................................ 232 show ip prefix-list detail...........................................................................................................................................232 show ip prefix-list summary....................................................................................................................................233 Route Map Commands.................................................................................................................................................. 234 continue....................................................................................................................................................................... 234 description.................................................................................................................................................................. 235 match as-path............................................................................................................................................................236 match community......................................................................................................................................................236 match interface..........................................................................................................................................................237 match ip address....................................................................................................................................................... 238 match ip next-hop.....................................................................................................................................................239 match ip route-source............................................................................................................................................. 240 match metric............................................................................................................................................................... 241 match origin.................................................................................................................................................................241 match route-type...................................................................................................................................................... 242 match tag.................................................................................................................................................................... 243 route-map................................................................................................................................................................... 244 set as-path..................................................................................................................................................................245 set automatic-tag......................................................................................................................................................246 set comm-list delete.................................................................................................................................................246 set community............................................................................................................................................................247 set level........................................................................................................................................................................248 set local-preference................................................................................................................................................. 249 set metric....................................................................................................................................................................250 set metric-type...........................................................................................................................................................251 set next-hop...............................................................................................................................................................252 set origin......................................................................................................................................................................252 set tag..........................................................................................................................................................................253 set weight................................................................................................................................................................... 254 show config................................................................................................................................................................ 255 show route-map........................................................................................................................................................ 255 AS-Path Commands.......................................................................................................................................................256 ip as-path access-list............................................................................................................................................... 256 show ip as-path-access-lists..................................................................................................................................257 IP Community List Commands.....................................................................................................................................258 ip community-list.......................................................................................................................................................258 show ip community-lists..........................................................................................................................................258 UDF ACL Commands..................................................................................................................................................... 259 deny ip......................................................................................................................................................................... 259
Contents
7
feature udf-acl...........................................................................................................................................................260 key................................................................................................................................................................................ 260 match............................................................................................................................................................................ 261 permit ip...................................................................................................................................................................... 262 show config................................................................................................................................................................ 262 udf-id............................................................................................................................................................................263 udf-qualifier-value..................................................................................................................................................... 263 udf-tcam......................................................................................................................................................................264 deny (for Standard IP ACLs)........................................................................................................................................264 deny (for Extended IP ACLs).......................................................................................................................................265 seq (for Standard IPv4 ACLs)......................................................................................................................................267 deny tcp (for Extended IP ACLs)............................................................................................................................... 268 deny udp (for Extended IP ACLs)...............................................................................................................................269 deny arp (for Extended MAC ACLs).......................................................................................................................... 270 deny icmp (for Extended IP ACLs)..............................................................................................................................271 deny ether-type (for Extended MAC ACLs)............................................................................................................ 272 deny (for Standard MAC ACLs).................................................................................................................................. 273 deny (for Extended MAC ACLs)..................................................................................................................................274 permit (for Standard IP ACLs).....................................................................................................................................275 permit arp (for Extended MAC ACLs)....................................................................................................................... 276 permit ether-type (for Extended MAC ACLs)......................................................................................................... 277 permit icmp (for Extended IP ACLs)..........................................................................................................................278 permit udp (for Extended IP ACLs)............................................................................................................................279 permit (for Extended IP ACLs)....................................................................................................................................280 permit (for Standard MAC ACLs)...............................................................................................................................282 seq (for Standard MAC ACLs).................................................................................................................................... 283 permit tcp (for Extended IP ACLs)............................................................................................................................ 284 seq arp (for Extended MAC ACLs)............................................................................................................................ 285 seq ether-type (for Extended MAC ACLs)...............................................................................................................286 seq (for IP ACLs)............................................................................................................................................................ 287 seq (for IPv6 ACLs)....................................................................................................................................................... 288 permit udp (for IPv6 ACLs)..........................................................................................................................................289 permit tcp (for IPv6 ACLs).......................................................................................................................................... 290 permit icmp (for IPv6 ACLs).........................................................................................................................................291 permit (for IPv6 ACLs)..................................................................................................................................................292 deny udp (for IPv6 ACLs).............................................................................................................................................293 deny tcp (for IPv6 ACLs)..............................................................................................................................................294 deny icmp (for Extended IPv6 ACLs)........................................................................................................................ 296 deny (for IPv6 ACLs)..................................................................................................................................................... 297
Chapter 8: Access Control List (ACL) VLAN Groups and Content Addressable Memory (CAM).. 299 member vlan.....................................................................................................................................................................299 ip access-group............................................................................................................................................................... 300 show acl-vlan-group ..................................................................................................................................................... 300 show cam-acl-vlan.......................................................................................................................................................... 301 cam-acl-vlan.....................................................................................................................................................................302 show cam-usage............................................................................................................................................................. 303 show running config acl-vlan-group...........................................................................................................................305 acl-vlan-group..................................................................................................................................................................305 show acl-vlan-group detail........................................................................................................................................... 306
8
Contents
description (ACL VLAN Group)................................................................................................................................... 307
Chapter 9: Bidirectional Forwarding Detection (BFD)................................................................308 bfd all-neighbors............................................................................................................................................................. 308 bfd disable........................................................................................................................................................................ 309 bfd enable (Configuration)............................................................................................................................................ 310 bfd enable (Interface).................................................................................................................................................... 310 bfd interval ........................................................................................................................................................................311 bfd neighbor......................................................................................................................................................................312 bfd protocol-liveness...................................................................................................................................................... 312 ip route bfd........................................................................................................................................................................313 ipv6 ospf bfd all-neighbors............................................................................................................................................314 isis bfd all-neighbors....................................................................................................................................................... 315 neighbor bfd......................................................................................................................................................................316 neighbor bfd disable........................................................................................................................................................ 317 show bfd neighbors......................................................................................................................................................... 317 vrrp bfd neighbor............................................................................................................................................................. 319
Chapter 10: Border Gateway Protocol........................................................................................320 BGP IPv4 Commands.....................................................................................................................................................320 address-family............................................................................................................................................................320 aggregate-address.....................................................................................................................................................321 bgp add-path..............................................................................................................................................................322 bgp always-compare-med.......................................................................................................................................323 bgp asnotation........................................................................................................................................................... 324 bgp bestpath as-path ignore..................................................................................................................................325 bgp bestpath as-path multipath-relax................................................................................................................. 326 bgp bestpath med confed.......................................................................................................................................326 bgp bestpath med missing-as-best.......................................................................................................................327 bgp bestpath router-id ignore................................................................................................................................328 bgp client-to-client reflection................................................................................................................................ 328 bgp cluster-id............................................................................................................................................................. 329 bgp confederation identifier................................................................................................................................... 330 bgp confederation peers.......................................................................................................................................... 331 bgp connection-retry-timer.................................................................................................................................... 332 bgp dampening...........................................................................................................................................................332 bgp default local-preference.................................................................................................................................. 333 bgp dmzlink-bw......................................................................................................................................................... 334 bgp enforce-first-as................................................................................................................................................. 335 bgp fast-external-fallover....................................................................................................................................... 335 bgp four-octet-as-support..................................................................................................................................... 336 bgp graceful-restart................................................................................................................................................. 337 bgp non-deterministic-med.................................................................................................................................... 338 bgp recursive-bgp-next-hop.................................................................................................................................. 338 bgp regex-eval-optz-disable.................................................................................................................................. 339 bgp router-id.............................................................................................................................................................. 340 clear ip bgp.................................................................................................................................................................. 341 clear ip bgp dampening............................................................................................................................................ 342 clear ip bgp flap-statistics.......................................................................................................................................343
Contents
9
clear ip bgp peer-group........................................................................................................................................... 344 deny bandwidth......................................................................................................................................................... 345 debug ip bgp...............................................................................................................................................................346 debug ip bgp dampening..........................................................................................................................................347 debug ip bgp events................................................................................................................................................. 348 debug ip bgp keepalives.......................................................................................................................................... 349 debug ip bgp notifications.......................................................................................................................................349 debug ip bgp soft-reconfiguration........................................................................................................................350 debug ip bgp updates............................................................................................................................................... 351 default-metric............................................................................................................................................................ 352 description.................................................................................................................................................................. 353 maximum-paths......................................................................................................................................................... 353 neighbor activate...................................................................................................................................................... 354 neighbor add-path.................................................................................................................................................... 355 neighbor advertisement-interval........................................................................................................................... 356 neighbor advertisement-start................................................................................................................................ 357 neighbor allowas-in................................................................................................................................................... 357 neighbor default-originate...................................................................................................................................... 358 neighbor description.................................................................................................................................................359 neighbor distribute-list.............................................................................................................................................360 neighbor ebgp-multihop........................................................................................................................................... 361 neighbor fall-over.......................................................................................................................................................361 neighbor local-as....................................................................................................................................................... 362 neighbor maximum-prefix........................................................................................................................................363 neighbor password....................................................................................................................................................364 neighbor peer-group (assigning peers)............................................................................................................... 365 neighbor peer-group (creating group).................................................................................................................366 neighbor peer-group passive..................................................................................................................................367 neighbor remote-as.................................................................................................................................................. 368 neighbor remove-private-as................................................................................................................................... 369 neighbor route-map.................................................................................................................................................. 370 neighbor route-reflector-client...............................................................................................................................371 neighbor send-community.......................................................................................................................................372 neighbor sender-side-loopdetect.......................................................................................................................... 372 neighbor shutdown................................................................................................................................................... 373 neighbor soft-reconfiguration inbound................................................................................................................ 374 neighbor timers.......................................................................................................................................................... 375 neighbor update-source...........................................................................................................................................376 neighbor weight......................................................................................................................................................... 377 network........................................................................................................................................................................378 network backdoor..................................................................................................................................................... 379 permit bandwidth...................................................................................................................................................... 380 redistribute................................................................................................................................................................. 380 redistribute ospf.........................................................................................................................................................381 router bgp................................................................................................................................................................... 382 set extcommunity bandwidth.................................................................................................................................383 show capture bgp-pdu neighbor........................................................................................................................... 384 show config................................................................................................................................................................ 385 show ip bgp................................................................................................................................................................ 385 show ip bgp cluster-list............................................................................................................................................387
10
Contents
show ip bgp community...........................................................................................................................................388 show ip bgp community-list....................................................................................................................................390 show ip bgp dampened-paths................................................................................................................................392 show ip bgp detail..................................................................................................................................................... 393 show ip bgp extcommunity-list..............................................................................................................................395 show ip bgp filter-list............................................................................................................................................... 396 show ip bgp flap-statistics......................................................................................................................................398 show ip bgp inconsistent-as...................................................................................................................................399 show ip bgp neighbors..............................................................................................................................................401 show ip bgp next-hop.............................................................................................................................................. 404 show ip bgp paths.....................................................................................................................................................405 show ip bgp paths community............................................................................................................................... 407 show ip bgp peer-group...........................................................................................................................................407 show ip bgp regexp.................................................................................................................................................. 409 show ip bgp summary............................................................................................................................................... 410 show running-config bgp......................................................................................................................................... 413 timers bgp....................................................................................................................................................................413 MBGP Commands........................................................................................................................................................... 414 debug ip bgp dampening.......................................................................................................................................... 414 distance bgp................................................................................................................................................................415 show ip bgp dampened-paths.................................................................................................................................416 BGP Extended Communities (RFC 4360)..................................................................................................................417 set extcommunity rt.................................................................................................................................................. 417 set extcommunity soo...............................................................................................................................................418 show ip bgp paths extcommunity.......................................................................................................................... 419 show ip extcommunity-list...................................................................................................................................... 420 IPv6 BGP Commands......................................................................................................................................................421 clear ip bgp ipv6 unicast soft..................................................................................................................................421 debug ip bgp ipv6 unicast soft-reconfiguration.................................................................................................422 ipv6 prefix-list............................................................................................................................................................ 423 neighbor soft-reconfiguration inbound................................................................................................................ 423 show ipv6 prefix-list................................................................................................................................................. 424 IPv6 MBGP Commands................................................................................................................................................. 424 show ipv6 mbgproutes.............................................................................................................................................424
Chapter 11: Content Addressable Memory (CAM)...................................................................... 426 CAM Profile Commands................................................................................................................................................ 426 cam-acl (Configuration).......................................................................................................................................... 427 cam-acl-egress.......................................................................................................................................................... 429 cam-optimization.......................................................................................................................................................430 show cam-acl.............................................................................................................................................................. 431 test cam-usage.......................................................................................................................................................... 432
Chapter 12: Control Plane Policing (CoPP)................................................................................ 435 control-plane-cpuqos..................................................................................................................................................... 435 service-policy rate-limit-cpu-queues......................................................................................................................... 436 service-policy rate-limit-protocols..............................................................................................................................436 ip unknown-unicast.........................................................................................................................................................437 ipv6 unknown-unicast....................................................................................................................................................438
Contents
11
show cpu-queue rate cp............................................................................................................................................... 438 show ip protocol-queue-mapping............................................................................................................................... 439 show ipv6 protocol-queue-mapping...........................................................................................................................440 show mac protocol-queue-mapping...........................................................................................................................440
Chapter 13: Data Center Bridging (DCB)....................................................................................442 DCB Command................................................................................................................................................................ 442 dcb-enable.................................................................................................................................................................. 442 PFC Commands...............................................................................................................................................................443 clear pfc counters..................................................................................................................................................... 443 description.................................................................................................................................................................. 444 pfc mode on................................................................................................................................................................444 pfc no-drop queues.................................................................................................................................................. 445 show dcb..................................................................................................................................................................... 446 show interface pfc....................................................................................................................................................446 show interface pfc statistics..................................................................................................................................449 show stack-unit stack-ports pfc details..............................................................................................................450 ETS Commands................................................................................................................................................................451 bandwidth-percentage............................................................................................................................................. 451 clear ets counters..................................................................................................................................................... 452 dcb-enable.................................................................................................................................................................. 452 description.................................................................................................................................................................. 453 priority-list...................................................................................................................................................................453 qos-policy-output ets...............................................................................................................................................454 scheduler..................................................................................................................................................................... 455 show interface ets.................................................................................................................................................... 455 show qos priority-groups........................................................................................................................................ 459 show stack-unit stack-ports ets details.............................................................................................................. 460 DCBX Commands............................................................................................................................................................ 461 advertise dcbx-app-tlv............................................................................................................................................. 461 advertise dcbx-appln-tlv.......................................................................................................................................... 461 advertise dcbx-tlv..................................................................................................................................................... 462 dcbx port-role............................................................................................................................................................ 463 dcbx version............................................................................................................................................................... 463 debug dcbx................................................................................................................................................................. 464 fcoe priority-bits........................................................................................................................................................465 iscsi priority-bits........................................................................................................................................................ 465 show interface dcbx detail......................................................................................................................................466 dcb-map............................................................................................................................................................................ 468 priority-pgid...................................................................................................................................................................... 469 pfc mode on..................................................................................................................................................................... 470 priority-group bandwidth pfc........................................................................................................................................ 471 dcb-map stack-unit all stack-ports all........................................................................................................................ 471 show qos dcb-map..........................................................................................................................................................472 dcb pfc-shared-buffer-size.......................................................................................................................................... 473 dcb-buffer-threshold .................................................................................................................................................... 473 priority................................................................................................................................................................................474 qos-policy-buffer.............................................................................................................................................................475 dcb-policy buffer-threshold (Interface Configuration)..........................................................................................476 dcb-policy dcb-buffer-threshold (Global Configuration).......................................................................................477
12
Contents
show qos dcb-buffer-threshold...................................................................................................................................478 dcb pfc-total-buffer-size.............................................................................................................................................. 478 show running-config dcb-buffer-threshold.............................................................................................................. 479 service-class buffer shared-threshold-weight........................................................................................................ 480 dcb pfc-queues................................................................................................................................................................ 481 dcb {ets | pfc} enable.................................................................................................................................................... 482
Chapter 14: Debugging and Diagnostics..................................................................................... 483 Diagnostics and Monitoring Commands.................................................................................................................... 483 logging coredump stack-unit..................................................................................................................................483 Offline Diagnostic Commands......................................................................................................................................484 diag stack-unit........................................................................................................................................................... 484 offline stack-unit....................................................................................................................................................... 485 online stack-unit........................................................................................................................................................ 486 Hardware Commands.....................................................................................................................................................486 clear hardware stack-unit....................................................................................................................................... 486 clear hardware system-flow................................................................................................................................... 487 clear hardware vlan-counters................................................................................................................................ 488 hardware watchdog..................................................................................................................................................488 show hardware layer2.............................................................................................................................................. 489 show hardware layer3.............................................................................................................................................. 489 show hardware stack-unit...................................................................................................................................... 490 show hardware system-flow.................................................................................................................................. 498 show hardware vlan-counters............................................................................................................................... 500 show hardware counters interface ..................................................................................................................... 500 show hardware drops...............................................................................................................................................502 show hardware stack-unit buffer-stats-snapshot (Total Buffer Information).......................................... 503 show hardware buffer interface............................................................................................................................505 show hardware buffer-stats-snapshot................................................................................................................506
Chapter 15: Dynamic Host Configuration Protocol (DHCP)........................................................509 Commands to Configure the System to be a DHCP Server................................................................................ 509 clear ip dhcp...............................................................................................................................................................509 debug ip dhcp server................................................................................................................................................ 510 debug ipv6 dhcp ....................................................................................................................................................... 510 default-router.............................................................................................................................................................. 511 disable............................................................................................................................................................................511 dns-server....................................................................................................................................................................512 domain-name.............................................................................................................................................................. 512 excluded-address....................................................................................................................................................... 513 hardware-address...................................................................................................................................................... 514 host............................................................................................................................................................................... 514 lease.............................................................................................................................................................................. 515 netbios-name-server.................................................................................................................................................515 netbios-node-type..................................................................................................................................................... 516 network........................................................................................................................................................................ 517 pool................................................................................................................................................................................ 517 show ip dhcp binding................................................................................................................................................ 518 show ip dhcp configuration..................................................................................................................................... 518
Contents
13
show ip dhcp conflict................................................................................................................................................519 show ip dhcp server................................................................................................................................................. 520 Commands to Configure Secure DHCP.................................................................................................................... 520 arp inspection.............................................................................................................................................................520 arp inspection-trust...................................................................................................................................................521 clear ip dhcp snooping............................................................................................................................................. 522 clear ipv6 dhcp snooping binding.......................................................................................................................... 523 ip dhcp relay............................................................................................................................................................... 523 ip dhcp snooping....................................................................................................................................................... 524 ipv6 dhcp snooping...................................................................................................................................................524 ipv6 dhcp snooping vlan..........................................................................................................................................525 ip dhcp snooping binding.........................................................................................................................................525 IPv6 DHCP Snooping Binding................................................................................................................................ 526 ip dhcp snooping database..................................................................................................................................... 527 ipv6 dhcp snooping database write-delay...........................................................................................................528 ip dhcp snooping database renew.........................................................................................................................528 ipv6 dhcp snooping database renew....................................................................................................................529 ip dhcp snooping trust............................................................................................................................................. 529 ipv6 dhcp snooping trust........................................................................................................................................ 529 ip dhcp source-address-validation........................................................................................................................530 ip dhcp relay information-option............................................................................................................................ 531 ip dhcp snooping verify mac-address................................................................................................................... 531 ipv6 dhcp snooping verify mac-address..............................................................................................................532 ip helper-address.......................................................................................................................................................532 ipv6 helper-address.................................................................................................................................................. 533 show ip dhcp snooping............................................................................................................................................ 534 show ipv6 dhcp snooping........................................................................................................................................536 Commands to Configure DNS .................................................................................................................................... 536 ip name-server...........................................................................................................................................................536 ip domain-name......................................................................................................................................................... 537 ip domain-list.............................................................................................................................................................. 538 ip host.......................................................................................................................................................................... 539 clear host.................................................................................................................................................................... 539
Chapter 16: Equal Cost Multi-Path (ECMP)............................................................................... 541 ecmp-group.......................................................................................................................................................................541 hash-algorithm.................................................................................................................................................................542 hash-algorithm ecmp..................................................................................................................................................... 544 hash-algorithm seed.......................................................................................................................................................545 ip ecmp-group..................................................................................................................................................................546 ip ecmp weighted............................................................................................................................................................547 link-bundle-monitor enable........................................................................................................................................... 547 link-bundle-distribution trigger-threshold.................................................................................................................548 show config...................................................................................................................................................................... 548 show link-bundle distribution....................................................................................................................................... 549
Chapter 17: FIPS Cryptography................................................................................................. 550 fips mode enable............................................................................................................................................................. 550 show fips status..............................................................................................................................................................550
14
Contents
show ip ssh........................................................................................................................................................................551 ssh...................................................................................................................................................................................... 552
Chapter 18: FIP Snooping.......................................................................................................... 555 clear fip-snooping database interface vlan.............................................................................................................. 555 clear fip-snooping statistics......................................................................................................................................... 556 debug fip snooping......................................................................................................................................................... 556 debug fip snooping rx.....................................................................................................................................................557 feature fip-snooping.......................................................................................................................................................558 fip-snooping enable........................................................................................................................................................ 558 fip-snooping fc-map.......................................................................................................................................................559 fip-snooping max-sessions-per-enodemac...............................................................................................................559 fip-snooping port-mode fcf..........................................................................................................................................560 fip-snooping port-mode fcoe-trusted....................................................................................................................... 560 show fip-snooping config.............................................................................................................................................. 561 show fip-snooping enode...............................................................................................................................................561 show fip-snooping fcf....................................................................................................................................................562 show fip-snooping statistics........................................................................................................................................ 563 show fip-snooping system............................................................................................................................................566 show fip-snooping vlan..................................................................................................................................................566 show fips status.............................................................................................................................................................. 567
Chapter 19: Force10 Resilient Ring Protocol (FRRP)................................................................. 568 clear frrp........................................................................................................................................................................... 568 debug frrp.........................................................................................................................................................................569 description........................................................................................................................................................................ 570 disable................................................................................................................................................................................. 571 interface............................................................................................................................................................................. 571 member-vlan.................................................................................................................................................................... 572 mode...................................................................................................................................................................................573 protocol frrp..................................................................................................................................................................... 574 show frrp...........................................................................................................................................................................574 timer................................................................................................................................................................................... 576
Chapter 20: GARP VLAN Registration (GVRP)........................................................................... 577 clear gvrp statistics........................................................................................................................................................ 578 debug gvrp........................................................................................................................................................................578 disable................................................................................................................................................................................ 579 garp timers....................................................................................................................................................................... 580 gvrp enable........................................................................................................................................................................581 gvrp registration..............................................................................................................................................................582 protocol gvrp....................................................................................................................................................................583 show config...................................................................................................................................................................... 583 show garp timers............................................................................................................................................................ 584 show gvrp......................................................................................................................................................................... 585 show gvrp statistics....................................................................................................................................................... 586
Chapter 21: High Availability (HA)............................................................................................. 588 patch flash://RUNTIME_PATCH_DIR...................................................................................................................... 588
Contents
15
process restartable.........................................................................................................................................................589 redundancy auto-failover-limit.................................................................................................................................... 589 redundancy disable-auto-reboot.................................................................................................................................590 redundancy force-failover............................................................................................................................................. 591 redundancy primary........................................................................................................................................................592 redundancy protocol...................................................................................................................................................... 592 redundancy reset-counter............................................................................................................................................ 593 redundancy sfm standby...............................................................................................................................................593 redundancy synchronize............................................................................................................................................... 594 show patch.......................................................................................................................................................................595 show processes restartable......................................................................................................................................... 595 show redundancy............................................................................................................................................................596
Chapter 22: ICMP Message Types............................................................................................. 599
Chapter 23: Internet Group Management Protocol (IGMP)........................................................ 601 IGMP Commands.............................................................................................................................................................601 clear ip igmp groups.................................................................................................................................................. 601 debug ip igmp.............................................................................................................................................................602 ip igmp access-group............................................................................................................................................... 603 ip igmp immediate-leave..........................................................................................................................................604 ip igmp last-member-query-interval..................................................................................................................... 604 ip igmp query-interval.............................................................................................................................................. 605 ip igmp query-max-resp-time.................................................................................................................................606 ip igmp ssm-map....................................................................................................................................................... 607 ip igmp version...........................................................................................................................................................608 show ip igmp groups................................................................................................................................................ 608 show ip igmp interface............................................................................................................................................. 610 show ip igmp ssm-map..............................................................................................................................................611 IGMP Snooping Commands.......................................................................................................................................... 612 clear ip igmp snooping groups................................................................................................................................ 613 debug ip igmp snooping............................................................................................................................................614 ip igmp snooping enable........................................................................................................................................... 614 ip igmp snooping fast-leave.................................................................................................................................... 615 ip igmp snooping flood..............................................................................................................................................616 ip igmp snooping last-member-query-interval....................................................................................................616 ip igmp snooping mrouter........................................................................................................................................ 617 ip igmp snooping querier.......................................................................................................................................... 618 show ip igmp snooping groups............................................................................................................................... 619 show ip igmp snooping mrouter............................................................................................................................ 620
Chapter 24: Interfaces.............................................................................................................. 622 Basic Interface Commands...........................................................................................................................................622 clear counters............................................................................................................................................................ 622 clear dampening.........................................................................................................................................................624 dampening...................................................................................................................................................................625 default interface........................................................................................................................................................ 626 description...................................................................................................................................................................627 duplex (10/100 Interfaces)..................................................................................................................................... 628
16
Contents
flowcontrol..................................................................................................................................................................628 interface....................................................................................................................................................................... 631 interface group.......................................................................................................................................................... 632 interface loopback.................................................................................................................................................... 633 interface ManagementEthernet............................................................................................................................ 634 interface null...............................................................................................................................................................635 interface range.......................................................................................................................................................... 636 interface range macro (define)............................................................................................................................. 638 interface range macro name.................................................................................................................................. 639 interface vlan............................................................................................................................................................. 640 intf-type cr4 autoneg................................................................................................................................................641 keepalive...................................................................................................................................................................... 641 negotiation auto.........................................................................................................................................................642 monitor interface.......................................................................................................................................................644 mtu................................................................................................................................................................................646 portmode hybrid........................................................................................................................................................ 647 rate-interval................................................................................................................................................................649 show config................................................................................................................................................................ 649 show config (from INTERFACE RANGE mode)................................................................................................ 650 show interfaces..........................................................................................................................................................651 show interfaces configured....................................................................................................................................656 show interfaces dampening....................................................................................................................................657 show interfaces phy................................................................................................................................................. 659 show interfaces stack-unit......................................................................................................................................661 show interfaces status............................................................................................................................................ 662 show interfaces switchport....................................................................................................................................663 show interfaces transceiver................................................................................................................................... 665 show interfaces vlan.................................................................................................................................................670 show range.................................................................................................................................................................. 671 show running-config ecmp-group..........................................................................................................................671 shutdown.....................................................................................................................................................................672 speed (for 10/100/1000 interfaces).....................................................................................................................673 speed (Management interface)............................................................................................................................. 674 stack-unit portmode.................................................................................................................................................675 switchport................................................................................................................................................................... 676 Egress Interface Selection (EIS) Commands........................................................................................................... 677 application................................................................................................................................................................... 677 application (for HTTP and ICMP)......................................................................................................................... 678 clear management application pkt-cntr............................................................................................................... 678 clear management application pkt-fallback-cntr............................................................................................... 679 management egress-interface-selection.............................................................................................................679 show ip management-eis-route ............................................................................................................................680 show management application pkt-cntr..............................................................................................................680 show management application pkt-fallback-cntr...............................................................................................681 Port Channel Commands............................................................................................................................................... 681 channel-member........................................................................................................................................................682 group............................................................................................................................................................................ 683 interface port-channel............................................................................................................................................. 684 minimum-links............................................................................................................................................................ 685 port-channel failover-group................................................................................................................................... 686
Contents
17
show config................................................................................................................................................................ 687 show interfaces port-channel................................................................................................................................ 687 show port-channel-flow.......................................................................................................................................... 690 Time Domain Reflectometer (TDR) Commands...................................................................................................... 691 tdr-cable-test.............................................................................................................................................................692 show tdr...................................................................................................................................................................... 692 UDP Broadcast Commands.......................................................................................................................................... 693 debug ip udp-helper..................................................................................................................................................694 ip udp-helper udp-port............................................................................................................................................ 695 show ip udp-helper................................................................................................................................................... 695 ip http source-interface................................................................................................................................................ 696
Chapter 25: Internet Protocol Security (IPSec).........................................................................698 crypto ipsec transform-set...........................................................................................................................................698 crypto ipsec policy.......................................................................................................................................................... 700 management crypto-policy........................................................................................................................................... 700 match.................................................................................................................................................................................. 701 session-key....................................................................................................................................................................... 702 show crypto ipsec transform-set................................................................................................................................702 show crypto ipsec policy............................................................................................................................................... 703 transform-set................................................................................................................................................................... 704
Chapter 26: IPv4 Routing.......................................................................................................... 705 arp.......................................................................................................................................................................................706 arp backoff-time..............................................................................................................................................................707 arp learn-enable...............................................................................................................................................................708 arp max-entries................................................................................................................................................................708 arp retries..........................................................................................................................................................................709 arp timeout....................................................................................................................................................................... 709 clear arp-cache.................................................................................................................................................................710 clear host............................................................................................................................................................................ 711 clear ip fib stack-unit...................................................................................................................................................... 712 clear ip route..................................................................................................................................................................... 713 clear tcp statistics........................................................................................................................................................... 713 debug arp........................................................................................................................................................................... 714 debug ip dhcp................................................................................................................................................................... 715 debug ipv6 dhcp ............................................................................................................................................................. 716 debug ip icmp.................................................................................................................................................................... 717 debug ip packet................................................................................................................................................................ 718 ip address.......................................................................................................................................................................... 720 ip directed-broadcast......................................................................................................................................................721 ip domain-list.................................................................................................................................................................... 722 ip domain-lookup............................................................................................................................................................. 723 ip domain-name............................................................................................................................................................... 723 ip helper-address.............................................................................................................................................................724 ip helper-address hop-count disable.......................................................................................................................... 725 ip host................................................................................................................................................................................ 726 ip icmp source-interface................................................................................................................................................727 ipv6 icmp source-interface...........................................................................................................................................728
18
Contents
ip max-frag-count........................................................................................................................................................... 729 ip max-routes................................................................................................................................................................... 729 ip mtu................................................................................................................................................................................. 730 ip name-server..................................................................................................................................................................731 ip proxy-arp...................................................................................................................................................................... 732 ip route...............................................................................................................................................................................733 ip source-route................................................................................................................................................................ 735 ip unreachables................................................................................................................................................................ 736 load-balance..................................................................................................................................................................... 736 load-balance hg................................................................................................................................................................738 management route..........................................................................................................................................................739 show arp............................................................................................................................................................................740 show arp retries...............................................................................................................................................................743 show hosts........................................................................................................................................................................743 show ip cam stack-unit..................................................................................................................................................745 show ip fib stack-unit.....................................................................................................................................................746 show ip flow..................................................................................................................................................................... 748 show ip interface.............................................................................................................................................................749 show ip management-route..........................................................................................................................................752 show ipv6 management-route..................................................................................................................................... 752 show ip protocols............................................................................................................................................................ 753 show ip route................................................................................................................................................................... 754 show ip route list.............................................................................................................................................................758 show ip route summary................................................................................................................................................. 759 show ip traffic..................................................................................................................................................................760 show tcp statistics..........................................................................................................................................................762
Chapter 27: IPv6 Access Control Lists (IPv6 ACLs)................................................................... 765 show cam-acl-egress..................................................................................................................................................... 765 show cam-acl................................................................................................................................................................... 766 permit icmp.......................................................................................................................................................................768 permit................................................................................................................................................................................. 768 ipv6 control-plane egress-filter................................................................................................................................... 769 ipv6 access-list................................................................................................................................................................ 769 cam-acl-egress................................................................................................................................................................ 770 cam-acl............................................................................................................................................................................... 771
Chapter 28: IPv6 Basics.............................................................................................................773 clear ipv6 fib..................................................................................................................................................................... 773 clear ipv6 route................................................................................................................................................................ 774 clear ipv6 mld_host........................................................................................................................................................ 775 maximum dynamic-routes-ipv6....................................................................................................................................775 ipv6 address autoconfig................................................................................................................................................ 776 ipv6 address......................................................................................................................................................................777 ipv6 address eui64.......................................................................................................................................................... 778 ipv6 control-plane icmp error-rate-limit.................................................................................................................... 778 ipv6 flowlabel-zero..........................................................................................................................................................779 ipv6 host............................................................................................................................................................................780 ipv6 name-server............................................................................................................................................................ 780
Contents
19
ipv6 nd dad attempts......................................................................................................................................................781 ipv6 nd dns-server ...................................................................................................................................................... 781 ipv6 nd prefix................................................................................................................................................................... 782 ipv6 route..........................................................................................................................................................................783 ipv6 unicast-routing....................................................................................................................................................... 785 show ipv6 cam stack-unit............................................................................................................................................. 786 show ipv6 control-plane icmp...................................................................................................................................... 787 show ipv6 fib stack-unit................................................................................................................................................ 787 show ipv6 flowlabel-zero.............................................................................................................................................. 788 show ipv6 interface........................................................................................................................................................ 788 show ipv6 mld_host........................................................................................................................................................ 791 show ipv6 route...............................................................................................................................................................792 trust ipv6-diffserv...........................................................................................................................................................794
Chapter 29: iSCSI Optimization................................................................................................. 796 advertise dcbx-app-tlv.................................................................................................................................................. 796 iscsi aging time.................................................................................................................................................................797 iscsi cos..............................................................................................................................................................................797 iscsi enable........................................................................................................................................................................798 iscsi priority-bits.............................................................................................................................................................. 798 iscsi profile-compellant.................................................................................................................................................. 799 iscsi target port............................................................................................................................................................... 799 show iscsi..........................................................................................................................................................................800 show iscsi session...........................................................................................................................................................800 show iscsi session detailed............................................................................................................................................ 801 show run iscsi.................................................................................................................................................................. 802
Chapter 30: Intermediate System to Intermediate System (IS-IS).............................................803 adjacency-check............................................................................................................................................................. 804 advertise........................................................................................................................................................................... 805 area-password................................................................................................................................................................. 806 clear config.......................................................................................................................................................................806 clear isis............................................................................................................................................................................. 807 clns host............................................................................................................................................................................808 debug isis.......................................................................................................................................................................... 808 debug isis adj-packets................................................................................................................................................... 809 debug isis local-updates.................................................................................................................................................810 debug isis snp-packets................................................................................................................................................... 810 debug isis spf-triggers.....................................................................................................................................................811 debug isis update-packets.............................................................................................................................................812 default-information originate........................................................................................................................................ 813 description......................................................................................................................................................................... 814 distance.............................................................................................................................................................................. 814 distribute-list in................................................................................................................................................................ 815 distribute-list out............................................................................................................................................................. 816 distribute-list redistributed-override........................................................................................................................... 817 domain-password............................................................................................................................................................. 817 graceful-restart ietf........................................................................................................................................................ 818 graceful-restart interval................................................................................................................................................. 819
20
Contents
graceful-restart restart-wait........................................................................................................................................ 819 graceful-restart t1...........................................................................................................................................................820 graceful-restart t2...........................................................................................................................................................821 graceful-restart t3...........................................................................................................................................................821 hello padding.................................................................................................................................................................... 822 hostname dynamic.......................................................................................................................................................... 823 ignore-lsp-errors............................................................................................................................................................. 823 ip router isis...................................................................................................................................................................... 824 ipv6 router isis................................................................................................................................................................. 825 isis circuit-type................................................................................................................................................................ 825 isis csnp-interval............................................................................................................................................................. 826 isis hello-interval..............................................................................................................................................................827 isis hello-multiplier...........................................................................................................................................................828 isis hello padding............................................................................................................................................................. 829 isis ipv6 metric.................................................................................................................................................................829 isis metric..........................................................................................................................................................................830 isis network point-to-point............................................................................................................................................831 isis password.....................................................................................................................................................................831 isis priority.........................................................................................................................................................................832 is-type................................................................................................................................................................................ 833 log-adjacency-changes.................................................................................................................................................. 834 lsp-gen-interval............................................................................................................................................................... 834 lsp-mtu.............................................................................................................................................................................. 835 lsp-refresh-interval......................................................................................................................................................... 836 max-area-addresses....................................................................................................................................................... 837 max-lsp-lifetime............................................................................................................................................................... 837 maximum-paths............................................................................................................................................................... 838 metric-style...................................................................................................................................................................... 839 multi-topology..................................................................................................................................................................840 net.......................................................................................................................................................................................840 passive-interface............................................................................................................................................................. 841 redistribute....................................................................................................................................................................... 842 redistribute bgp............................................................................................................................................................... 843 redistribute ospf.............................................................................................................................................................. 844 router isis.......................................................................................................................................................................... 845 set-overload-bit...............................................................................................................................................................846 show config...................................................................................................................................................................... 847 show isis database.......................................................................................................................................................... 848 show isis graceful-restart detail..................................................................................................................................850 show isis hostname......................................................................................................................................................... 851 show isis interface.......................................................................................................................................................... 852 show isis neighbors.........................................................................................................................................................853 show isis protocol........................................................................................................................................................... 854 show isis traffic............................................................................................................................................................... 855 spf-interval....................................................................................................................................................................... 857
Chapter 31: Link Aggregation Control Protocol (LACP)............................................................. 859 clear lacp counters......................................................................................................................................................... 859 debug lacp........................................................................................................................................................................ 860 lacp long-timeout.............................................................................................................................................................861
Contents
21
lacp port-priority.............................................................................................................................................................. 861 lacp system-priority........................................................................................................................................................862 port-channel-protocol lacp...........................................................................................................................................863 show lacp.......................................................................................................................................................................... 863
Chapter 32: Layer 2................................................................................................................... 866 MAC Addressing Commands........................................................................................................................................866 clear mac-address-table..........................................................................................................................................866 mac-address-table aging-time............................................................................................................................... 867 mac-address-table static........................................................................................................................................ 868 mac-address-table station-move threshold....................................................................................................... 869 mac-address-table station-move refresh-arp....................................................................................................869 mac learning-limit...................................................................................................................................................... 870 mac learning-limit learn-limit-violation.................................................................................................................. 871 mac learning-limit mac-address-sticky................................................................................................................ 872 mac learning-limit station-move-violation........................................................................................................... 873 mac learning-limit reset........................................................................................................................................... 874 show cam mac linecard (count)............................................................................................................................ 874 show cam mac linecard (dynamic or static).......................................................................................................875 show mac-address-table......................................................................................................................................... 877 show mac-address-table aging-time.................................................................................................................... 879 show mac accounting destination.........................................................................................................................880 show mac learning-limit............................................................................................................................................881 Virtual LAN (VLAN) Commands.................................................................................................................................. 882 default vlan-id............................................................................................................................................................ 882 default-vlan disable...................................................................................................................................................883 name............................................................................................................................................................................. 883 show config................................................................................................................................................................ 884 show vlan.................................................................................................................................................................... 885 tagged.......................................................................................................................................................................... 888 track ip.........................................................................................................................................................................889 untagged..................................................................................................................................................................... 890 Far-End Failure Detection (FEFD)...............................................................................................................................891 debug fefd................................................................................................................................................................... 891 fefd............................................................................................................................................................................... 892 fefd disable................................................................................................................................................................. 892 fefd interval................................................................................................................................................................ 893 fefd mode....................................................................................................................................................................894 fefd reset.................................................................................................................................................................... 894 fefd-global interval................................................................................................................................................... 895 fefd-global.................................................................................................................................................................. 896 show fefd.................................................................................................................................................................... 896
Chapter 33: Link Layer Discovery Protocol (LLDP).................................................................... 899 LLPD Commands.............................................................................................................................................................899 advertise dot1-tlv...................................................................................................................................................... 899 advertise dot3-tlv..................................................................................................................................................... 900 advertise management-tlv.......................................................................................................................................901 advertise management-tlv (Interface)................................................................................................................. 901
22
Contents
clear lldp counters.....................................................................................................................................................902 clear lldp neighbors...................................................................................................................................................903 debug lldp interface..................................................................................................................................................904 disable.......................................................................................................................................................................... 905 hello.............................................................................................................................................................................. 905 management-interface............................................................................................................................................ 906 mode............................................................................................................................................................................ 906 multiplier...................................................................................................................................................................... 907 protocol lldp (Configuration)..................................................................................................................................908 protocol lldp (Interface).......................................................................................................................................... 908 show lldp neighbors..................................................................................................................................................909 show lldp statistics.................................................................................................................................................... 910 show management-interface...................................................................................................................................911 show running-config lldp...........................................................................................................................................911 LLDP-MED Commands...................................................................................................................................................912 advertise med guest-voice...................................................................................................................................... 912 advertise med guest-voice-signaling.................................................................................................................... 913 advertise med location-identification....................................................................................................................914 advertise med power-via-mdi................................................................................................................................. 915 advertise med softphone-voice..............................................................................................................................916 advertise med streaming-video.............................................................................................................................. 916 advertise med video-conferencing........................................................................................................................ 917 advertise med video-signaling................................................................................................................................ 918 advertise med voice.................................................................................................................................................. 919 advertise med voice-signaling................................................................................................................................920
Chapter 34: Microsoft Network Load Balancing......................................................................... 921 arp (for Multicast MAC Address)................................................................................................................................ 921 mac-address-table static (for Multicast MAC Address).......................................................................................922 ip vlan-flooding................................................................................................................................................................ 923
Chapter 35: Multicast Source Discovery Protocol (MSDP)........................................................ 924 clear ip msdp peer...........................................................................................................................................................924 clear ip msdp sa-cache..................................................................................................................................................925 clear ip msdp statistic....................................................................................................................................................926 debug ip msdp..................................................................................................................................................................926 ip msdp cache-rejected-sa........................................................................................................................................... 927 ip msdp default-peer...................................................................................................................................................... 928 ip msdp log-adjacency-changes.................................................................................................................................. 928 ip msdp mesh-group.......................................................................................................................................................929 ip msdp originator-id...................................................................................................................................................... 930 ip msdp peer.....................................................................................................................................................................930 ip msdp redistribute........................................................................................................................................................932 ip msdp sa-filter...............................................................................................................................................................932 ip msdp sa-limit................................................................................................................................................................933 ip msdp shutdown...........................................................................................................................................................934 ip multicast-msdp............................................................................................................................................................934 show ip msdp................................................................................................................................................................... 935 show ip msdp sa-cache rejected-sa...........................................................................................................................936
Contents
23
Chapter 36: Multiple Spanning Tree Protocol (MSTP)............................................................... 938 debug spanning-tree mstp............................................................................................................................................938 disable................................................................................................................................................................................ 939 forward-delay...................................................................................................................................................................940 hello-time........................................................................................................................................................................... 941 max-age............................................................................................................................................................................. 941 msti..................................................................................................................................................................................... 942 name...................................................................................................................................................................................943 protocol spanning-tree mstp........................................................................................................................................944 revision.............................................................................................................................................................................. 944 show config...................................................................................................................................................................... 945 show spanning-tree mst configuration......................................................................................................................946 show spanning-tree msti...............................................................................................................................................947 spanning-tree...................................................................................................................................................................949 spanning-tree msti..........................................................................................................................................................950 tc-flush-standard.............................................................................................................................................................951
Chapter 37: Multicast................................................................................................................952 IPv4 Multicast Commands............................................................................................................................................952 clear ip mroute...........................................................................................................................................................952 ip mroute..................................................................................................................................................................... 953 ip multicast-limit........................................................................................................................................................ 954 ip multicast-routing.................................................................................................................................................. 955 show ip mroute..........................................................................................................................................................955 show ip rpf..................................................................................................................................................................958
Chapter 38: Neighbor Discovery Protocol (NDP)....................................................................... 959 clear ipv6 neighbors....................................................................................................................................................... 959 ipv6 neighbor................................................................................................................................................................... 960 show ipv6 neighbors....................................................................................................................................................... 961 IPv6 Router Advertisement (RA) Guard................................................................................................................... 962 debug ipv6 nd ra-guard........................................................................................................................................... 963 device-role.................................................................................................................................................................. 963 hop-limit...................................................................................................................................................................... 964 ipv6 nd ra-guard attach-policy.............................................................................................................................. 964 ipv6 nd ra-guard enable...........................................................................................................................................965 ipv6 nd ra-guard policy............................................................................................................................................965 managed-config-flag................................................................................................................................................ 966 match ra...................................................................................................................................................................... 966 mtu................................................................................................................................................................................967 other-config-flag.......................................................................................................................................................968 reachable-time........................................................................................................................................................... 968 retrans-time................................................................................................................................................................969 router-lifetime............................................................................................................................................................ 969 router-preference maximum...................................................................................................................................970 show config................................................................................................................................................................ 970 show ipv6 nd ra-guard policy.................................................................................................................................. 971 trusted-port................................................................................................................................................................ 972
24
Contents
Chapter 39: Object Tracking......................................................................................................974 IPv4 Object Tracking Commands................................................................................................................................974 debug track.................................................................................................................................................................974 delay............................................................................................................................................................................. 975 description.................................................................................................................................................................. 975 show running-config track......................................................................................................................................976 show track...................................................................................................................................................................977 threshold metric........................................................................................................................................................ 979 track interface ip routing.........................................................................................................................................979 track interface line-protocol...................................................................................................................................980 track ip host reachability..........................................................................................................................................981 track ip route metric threshold..............................................................................................................................982 track ip route reachability....................................................................................................................................... 983 track resolution ip route.......................................................................................................................................... 983 IPv6 Object Tracking Commands................................................................................................................................984 show track ipv6 route.............................................................................................................................................. 984 track interface ipv6 routing....................................................................................................................................986 track ipv6 route metric threshold......................................................................................................................... 987 track ipv6 route reachability...................................................................................................................................987 track resolution ipv6 route......................................................................................................................................988
Chapter 40: Open Shortest Path First (OSPFv2 and OSPFv3)................................................... 990 OSPFv2 Commands....................................................................................................................................................... 990 area default-cost.......................................................................................................................................................990 area nssa...................................................................................................................................................................... 991 area range................................................................................................................................................................... 992 area stub..................................................................................................................................................................... 993 auto-cost.....................................................................................................................................................................994 clear ip ospf................................................................................................................................................................ 994 clear ip ospf statistics..............................................................................................................................................995 debug ip ospf............................................................................................................................................................. 996 default-information originate................................................................................................................................. 998 default-metric............................................................................................................................................................ 999 description................................................................................................................................................................ 1000 distance...................................................................................................................................................................... 1001 distance ospf.............................................................................................................................................................1001 distribute-list in........................................................................................................................................................ 1002 distribute-list out..................................................................................................................................................... 1003 fast-convergence.................................................................................................................................................... 1004 graceful-restart grace-period...............................................................................................................................1005 graceful-restart helper-reject.............................................................................................................................. 1006 graceful-restart mode............................................................................................................................................ 1007 graceful-restart role................................................................................................................................................1007 ip ospf auth-change-wait-time............................................................................................................................ 1008 ip ospf authentication-key.................................................................................................................................... 1009 ip ospf cost................................................................................................................................................................ 1010 ip ospf dead-interval................................................................................................................................................1010 ip ospf hello-interval.................................................................................................................................................1011
Contents
25
ip ospf message-digest-key...................................................................................................................................1012 ip ospf mtu-ignore....................................................................................................................................................1013 ip ospf network......................................................................................................................................................... 1014 ip ospf priority........................................................................................................................................................... 1014 ip ospf retransmit-interval..................................................................................................................................... 1015 ip ospf transmit-delay............................................................................................................................................. 1016 log-adjacency-changes........................................................................................................................................... 1017 maximum-paths........................................................................................................................................................ 1017 network area............................................................................................................................................................. 1018 passive-interface...................................................................................................................................................... 1019 redistribute.................................................................................................................................................................1021 redistribute bgp........................................................................................................................................................1022 redistribute isis......................................................................................................................................................... 1023 router-id..................................................................................................................................................................... 1024 router ospf................................................................................................................................................................ 1025 show config...............................................................................................................................................................1026 show ip ospf..............................................................................................................................................................1026 show ip ospf asbr.................................................................................................................................................... 1028 show ip ospf database............................................................................................................................................1029 show ip ospf database asbr-summary................................................................................................................1030 show ip ospf database external........................................................................................................................... 1032 show ip ospf database network........................................................................................................................... 1034 show ip ospf database nssa-external................................................................................................................. 1036 show ip ospf database opaque-area................................................................................................................... 1037 show ip ospf database opaque-as....................................................................................................................... 1038 show ip ospf database opaque-link.....................................................................................................................1039 show ip ospf database router...............................................................................................................................1040 show ip ospf database summary..........................................................................................................................1042 show ip ospf interface............................................................................................................................................1044 show ip ospf neighbor............................................................................................................................................ 1046 show ip ospf routes.................................................................................................................................................1047 show ip ospf statistics............................................................................................................................................1048 show ip ospf timers rate-limit............................................................................................................................... 1051 show ip ospf topology............................................................................................................................................ 1052 summary-address.................................................................................................................................................... 1053 timers spf.................................................................................................................................................................. 1054 timers throttle lsa all...............................................................................................................................................1055 timers throttle lsa arrival....................................................................................................................................... 1056 OSPFv3 Commands......................................................................................................................................................1056 area authentication................................................................................................................................................. 1056 area encryption........................................................................................................................................................ 1058 auto-cost................................................................................................................................................................... 1059 clear ipv6 ospf process.......................................................................................................................................... 1060 debug ipv6 ospf bfd................................................................................................................................................1060 debug ipv6 ospf packet......................................................................................................................................... 1062 default-information originate................................................................................................................................1063 graceful-restart grace-period...............................................................................................................................1064 graceful-restart mode............................................................................................................................................ 1065 ipv6 ospf area...........................................................................................................................................................1065 ipv6 ospf authentication........................................................................................................................................1066
26
Contents
ipv6 ospf bfd all-neighbors....................................................................................................................................1067 ipv6 ospf cost...........................................................................................................................................................1068 ipv6 ospf dead-interval.......................................................................................................................................... 1068 ipv6 ospf encryption...............................................................................................................................................1069 ipv6 ospf graceful-restart helper-reject............................................................................................................ 1070 ipv6 ospf hello-interval............................................................................................................................................1071 ipv6 ospf priority......................................................................................................................................................1072 ipv6 router ospf........................................................................................................................................................1072 maximum-paths........................................................................................................................................................1073 passive-interface..................................................................................................................................................... 1073 redistribute................................................................................................................................................................ 1074 router-id..................................................................................................................................................................... 1075 show crypto ipsec policy........................................................................................................................................1076 show crypto ipsec sa ipv6..................................................................................................................................... 1078 show ipv6 ospf database.......................................................................................................................................1080 show ipv6 ospf interface........................................................................................................................................1081 show ipv6 ospf neighbor........................................................................................................................................1082 timers spf...................................................................................................................................................................1083
Chapter 41: Policy-based Routing (PBR)..................................................................................1085 description...................................................................................................................................................................... 1085 ip redirect-group............................................................................................................................................................1086 ip redirect-list................................................................................................................................................................. 1086 permit............................................................................................................................................................................... 1087 redirect............................................................................................................................................................................ 1088 seq.................................................................................................................................................................................... 1089 show cam pbr..................................................................................................................................................................1091 show ip redirect-list...................................................................................................................................................... 1092
Chapter 42: PIM-Sparse Mode (PIM-SM).................................................................................1094 IPv4 PIM-Sparse Mode Commands..........................................................................................................................1094 clear ip pim rp-mapping......................................................................................................................................... 1094 clear ip pim tib..........................................................................................................................................................1095 debug ip pim............................................................................................................................................................. 1095 ip pim bsr-border..................................................................................................................................................... 1096 ip pim bsr-candidate............................................................................................................................................... 1097 ip pim dr-priority...................................................................................................................................................... 1098 ip pim join-filter........................................................................................................................................................ 1099 ip pim ingress-interface-map................................................................................................................................1099 ip pim neighbor-filter............................................................................................................................................... 1100 ip pim query-interval.................................................................................................................................................1101 ip pim register-filter..................................................................................................................................................1101 ip pim rp-address......................................................................................................................................................1102 ip pim rp-candidate.................................................................................................................................................. 1103 ip pim sparse-mode..................................................................................................................................................1104 ip pim sparse-mode sg-expiry-timer....................................................................................................................1105 ip pim ssm-range...................................................................................................................................................... 1105 ip pim spt-threshold.................................................................................................................................................1106 no ip pim snooping dr-flood................................................................................................................................... 1107
Contents
27
show ip pim bsr-router............................................................................................................................................1108 show ip pim interface.............................................................................................................................................. 1109 show ip pim neighbor............................................................................................................................................... 1110 show ip pim rp............................................................................................................................................................ 1111 show ip pim snooping interface............................................................................................................................. 1112 show ip pim snooping neighbor..............................................................................................................................1113 show ip pim snooping tib.........................................................................................................................................1114 show ip pim ssm-range............................................................................................................................................1115 show ip pim summary...............................................................................................................................................1116 show ip pim tib...........................................................................................................................................................1117 show running-config pim.........................................................................................................................................1119
Chapter 43: Port Monitoring.....................................................................................................1120 description....................................................................................................................................................................... 1120 monitor multicast-queue............................................................................................................................................... 1121 monitor session...............................................................................................................................................................1122 rate-limit........................................................................................................................................................................... 1123 show config..................................................................................................................................................................... 1123 show monitor session....................................................................................................................................................1124 show running-config monitor session....................................................................................................................... 1125 source (port monitoring)..............................................................................................................................................1126
Chapter 44: Private VLAN (PVLAN).......................................................................................... 1128 ip local-proxy-arp........................................................................................................................................................... 1129 private-vlan mode.......................................................................................................................................................... 1129 private-vlan mapping secondary-vlan....................................................................................................................... 1130 switchport mode private-vlan......................................................................................................................................1131
Chapter 45: Per-VLAN Spanning Tree Plus (PVST+)................................................................. 1133 description....................................................................................................................................................................... 1133 disable............................................................................................................................................................................... 1134 extend system-id............................................................................................................................................................1135 protocol spanning-tree pvst........................................................................................................................................ 1136 show spanning-tree pvst..............................................................................................................................................1137 spanning-tree pvst.........................................................................................................................................................1140 spanning-tree pvst err-disable....................................................................................................................................1142 tc-flush-standard........................................................................................................................................................... 1142 vlan bridge-priority.........................................................................................................................................................1143 vlan forward-delay......................................................................................................................................................... 1144 vlan hello-time.................................................................................................................................................................1145 vlan max-age................................................................................................................................................................... 1146
Chapter 46: Quality of Service (QoS)........................................................................................1147 Global Configuration Commands................................................................................................................................ 1147 qos-rate-adjust..........................................................................................................................................................1147 Per-Port QoS Commands............................................................................................................................................ 1148 dot1p-priority............................................................................................................................................................. 1148 rate police...................................................................................................................................................................1149 rate shape.................................................................................................................................................................. 1150
28
Contents
service-class dot1p-mapping..................................................................................................................................1151 service-class dynamic dot1p...................................................................................................................................1151 strict-priority queue.................................................................................................................................................1153 Policy-Based QoS Commands.....................................................................................................................................1153 bandwidth-percentage............................................................................................................................................1153 class-map................................................................................................................................................................... 1154 clear qos statistics................................................................................................................................................... 1155 description................................................................................................................................................................. 1156 match ip access-group............................................................................................................................................1157 match ip dscp............................................................................................................................................................1158 match ip precedence...............................................................................................................................................1159 match ip vlan............................................................................................................................................................. 1160 match ip vrf................................................................................................................................................................ 1161 match mac access-group....................................................................................................................................... 1162 match mac dot1p...................................................................................................................................................... 1162 match mac vlan.........................................................................................................................................................1163 policy-aggregate....................................................................................................................................................... 1164 policy-map-input.......................................................................................................................................................1165 policy-map-output....................................................................................................................................................1166 qos-policy-input........................................................................................................................................................ 1166 qos-policy-output..................................................................................................................................................... 1167 queue egress............................................................................................................................................................. 1168 queue ingress............................................................................................................................................................ 1169 rate-police.................................................................................................................................................................. 1170 rate-shape................................................................................................................................................................... 1171 service-policy input.................................................................................................................................................. 1172 service-policy output............................................................................................................................................... 1173 service-queue............................................................................................................................................................ 1174 set................................................................................................................................................................................ 1175 show qos class-map.................................................................................................................................................1176 show qos dot1p-queue-mapping...........................................................................................................................1176 show qos policy-map............................................................................................................................................... 1177 show qos policy-map-input.................................................................................................................................... 1178 show qos policy-map-output.................................................................................................................................1180 show qos qos-policy-input..................................................................................................................................... 1180 show qos qos-policy-output...................................................................................................................................1181 show qos statistics.................................................................................................................................................. 1182 show qos wred-profile............................................................................................................................................ 1183 test cam-usage......................................................................................................................................................... 1184 threshold.....................................................................................................................................................................1186 trust............................................................................................................................................................................. 1187 wred.............................................................................................................................................................................1188 wred ecn.....................................................................................................................................................................1189 wred-profile............................................................................................................................................................... 1190 DSCP Color Map Commands....................................................................................................................................... 1191 dscp.............................................................................................................................................................................. 1191 qos dscp-color-map.................................................................................................................................................1192 qos dscp-color-policy.............................................................................................................................................. 1192 show qos dscp-color-policy ............................................................................................................................ 1193 show qos dscp-color-map ................................................................................................................................ 1194
Contents
29
Chapter 47: Routing Information Protocol (RIP).......................................................................1195 auto-summary................................................................................................................................................................. 1195 clear ip rip........................................................................................................................................................................ 1196 debug ip rip...................................................................................................................................................................... 1197 default-information originate.......................................................................................................................................1198 default-metric................................................................................................................................................................. 1198 description....................................................................................................................................................................... 1199 distance........................................................................................................................................................................... 1200 distribute-list in...............................................................................................................................................................1201 distribute-list out........................................................................................................................................................... 1202 ip poison-reverse........................................................................................................................................................... 1203 ip rip receive version.....................................................................................................................................................1204 ip rip send version......................................................................................................................................................... 1204 ip split-horizon............................................................................................................................................................... 1205 maximum-paths............................................................................................................................................................. 1206 neighbor........................................................................................................................................................................... 1207 network............................................................................................................................................................................ 1207 offset-list.........................................................................................................................................................................1208 output-delay................................................................................................................................................................... 1209 passive-interface............................................................................................................................................................1210 redistribute....................................................................................................................................................................... 1211 redistribute isis................................................................................................................................................................1212 redistribute ospf............................................................................................................................................................. 1213 router rip...........................................................................................................................................................................1214 show config..................................................................................................................................................................... 1214 show ip rip database......................................................................................................................................................1215 show running-config rip................................................................................................................................................1216 timers basic......................................................................................................................................................................1217 version...............................................................................................................................................................................1218
Chapter 48: Remote Monitoring (RMON)................................................................................. 1220 rmon alarm...................................................................................................................................................................... 1220 rmon collection history.................................................................................................................................................1222 rmon collection statistics.............................................................................................................................................1223 rmon event......................................................................................................................................................................1223 rmon hc-alarm................................................................................................................................................................ 1224 show rmon.......................................................................................................................................................................1225 show rmon alarms......................................................................................................................................................... 1226 show rmon events......................................................................................................................................................... 1227 show rmon hc-alarm..................................................................................................................................................... 1229 show rmon history.........................................................................................................................................................1230 show rmon log.................................................................................................................................................................1231 show rmon statistics.....................................................................................................................................................1232
Chapter 49: Rapid Spanning Tree Protocol (RSTP).................................................................. 1235 bridge-priority.................................................................................................................................................................1235 debug spanning-tree rstp............................................................................................................................................ 1236 description....................................................................................................................................................................... 1237
30
Contents
disable...............................................................................................................................................................................1237 forward-delay................................................................................................................................................................. 1238 hello-time.........................................................................................................................................................................1239 max-age........................................................................................................................................................................... 1240 protocol spanning-tree rstp........................................................................................................................................1240 show config..................................................................................................................................................................... 1241 show spanning-tree rstp..............................................................................................................................................1242 spanning-tree rstp.........................................................................................................................................................1244 tc-flush-standard.......................................................................................................................................................... 1245
Chapter 50: Software-Defined Networking (SDN)....................................................................1247
Chapter 51: Security................................................................................................................ 1248 AAA Accounting Commands....................................................................................................................................... 1248 aaa accounting......................................................................................................................................................... 1248 accounting.................................................................................................................................................................1250 aaa accounting suppress....................................................................................................................................... 1250 aaa radius group....................................................................................................................................................... 1251 show accounting......................................................................................................................................................1252 Authorization and Privilege Commands................................................................................................................... 1253 authorization............................................................................................................................................................. 1253 aaa authorization commands................................................................................................................................ 1254 aaa authorization config-commands...................................................................................................................1254 aaa authorization exec........................................................................................................................................... 1255 privilege level (CONFIGURATION mode).......................................................................................................... 1256 privilege level (LINE mode)................................................................................................................................... 1257 Obscure Password Commands.................................................................................................................................. 1257 service obscure-passwords...................................................................................................................................1257 Authentication and Password Commands.............................................................................................................. 1258 aaa authentication enable......................................................................................................................................1258 aaa authentication login......................................................................................................................................... 1260 access-class...............................................................................................................................................................1261 enable password...................................................................................................................................................... 1262 enable restricted...................................................................................................................................................... 1263 enable secret............................................................................................................................................................ 1264 login authentication.................................................................................................................................................1265 password................................................................................................................................................................... 1266 password-attributes................................................................................................................................................1267 service password-encryption................................................................................................................................1268 show privilege...........................................................................................................................................................1269 show users................................................................................................................................................................ 1269 timeout login response............................................................................................................................................ 1271 username.................................................................................................................................................................... 1271 RADIUS Commands.......................................................................................................................................................1273 debug radius..............................................................................................................................................................1273 ip radius source-interface...................................................................................................................................... 1273 radius-server deadtime...........................................................................................................................................1274 radius-server group................................................................................................................................................. 1275 radius-server host................................................................................................................................................... 1275
Contents
31
radius-server vrf.......................................................................................................................................................1277 radius-server key..................................................................................................................................................... 1278 radius-server retransmit.........................................................................................................................................1279 radius-server timeout............................................................................................................................................. 1280 TACACS+ Commands.................................................................................................................................................. 1280 tacacs-server group................................................................................................................................................1280 debug tacacs+...........................................................................................................................................................1281 ip tacacs source-interface.....................................................................................................................................1282 tacacs-server group................................................................................................................................................1283 tacacs-server host.................................................................................................................................................. 1283 tacacs-server key.................................................................................................................................................... 1285 tacacs-server vrf..................................................................................................................................................... 1285 Port Authentication (802.1X) Commands............................................................................................................... 1286 dot1x authentication (Configuration)..................................................................................................................1287 dot1x authentication (Interface).......................................................................................................................... 1287 dot1x auth-fail-vlan................................................................................................................................................. 1288 dot1x auth-server.................................................................................................................................................... 1289 dot1x guest-vlan...................................................................................................................................................... 1289 dot1x mac-auth-bypass..........................................................................................................................................1290 dot1x max-eap-req................................................................................................................................................... 1291 dot1x port-control.................................................................................................................................................... 1291 dot1x quiet-period....................................................................................................................................................1292 dot1x reauthentication............................................................................................................................................1293 dot1x reauth-max.....................................................................................................................................................1293 dot1x server-timeout.............................................................................................................................................. 1294 dot1x supplicant-timeout....................................................................................................................................... 1295 dot1x tx-period......................................................................................................................................................... 1295 show dot1x interface.............................................................................................................................................. 1296 SSH Server and SCP Commands.............................................................................................................................. 1297 crypto key generate................................................................................................................................................ 1297 crypto key zeroize rsa............................................................................................................................................ 1299 debug ip ssh..............................................................................................................................................................1299 ip scp topdir.............................................................................................................................................................. 1300 ip ssh authentication-retries.................................................................................................................................1300 ip ssh connection-rate-limit...................................................................................................................................1301 ip ssh hostbased-authentication..........................................................................................................................1302 ip ssh key-size.......................................................................................................................................................... 1302 ip ssh password-authentication........................................................................................................................... 1303 ip ssh pub-key-file................................................................................................................................................... 1304 ip ssh rekey .............................................................................................................................................................. 1305 ip ssh rhostsfile........................................................................................................................................................ 1305 ip ssh rsa-authentication (Config)...................................................................................................................... 1306 ip ssh server..............................................................................................................................................................1307 ip ssh server vrf....................................................................................................................................................... 1309 ip ssh source-interface........................................................................................................................................... 1310 ip ssh vrf......................................................................................................................................................................1311 show crypto................................................................................................................................................................1311 show ip ssh................................................................................................................................................................ 1313 show ip ssh client-pub-keys.................................................................................................................................. 1313 show ip ssh rsa-authentication............................................................................................................................. 1314
32
Contents
ssh................................................................................................................................................................................1315 Secure DHCP Commands.............................................................................................................................................1317
clear ip dhcp snooping.............................................................................................................................................1317 ip dhcp relay.............................................................................................................................................................. 1318 ip dhcp snooping.......................................................................................................................................................1319 ip dhcp snooping binding........................................................................................................................................ 1319 ip dhcp snooping database....................................................................................................................................1320 ip dhcp snooping database renew........................................................................................................................1321 ip dhcp snooping trust............................................................................................................................................ 1321 ip dhcp source-address-validation...................................................................................................................... 1322 ip dhcp snooping vlan............................................................................................................................................. 1322 show ip dhcp snooping...........................................................................................................................................1323 Role-Based Access Control Commands...................................................................................................................1323 aaa authorization role-only ............................................................................................................................. 1324 enable......................................................................................................................................................................... 1324 role ............................................................................................................................................................................ 1325 show role ................................................................................................................................................................ 1326 show userroles ..................................................................................................................................................... 1327 userrole ................................................................................................................................................................... 1328
Chapter 52: Service Provider Bridging..................................................................................... 1329 debug protocol-tunnel..................................................................................................................................................1329 protocol-tunnel.............................................................................................................................................................. 1330 protocol-tunnel destination-mac................................................................................................................................ 1331 protocol-tunnel enable................................................................................................................................................. 1332 protocol-tunnel rate-limit............................................................................................................................................ 1332 show protocol-tunnel................................................................................................................................................... 1333
Chapter 53: sFlow.................................................................................................................... 1335 sflow collector................................................................................................................................................................1336 sflow enable (Global).................................................................................................................................................... 1337 sflow ingress-enable..................................................................................................................................................... 1338 sflow extended-switch enable................................................................................................................................... 1338 sflow max-header-size extended.............................................................................................................................. 1339 sflow polling-interval (Global).................................................................................................................................... 1340 sflow polling-interval (Interface)............................................................................................................................... 1340 sflow sample-rate (Global).......................................................................................................................................... 1341 sflow sample-rate (Interface).................................................................................................................................... 1342 show sflow...................................................................................................................................................................... 1343
Chapter 54: Simple Network Management Protocol (SNMP) and Syslog.................................. 1345 SNMP Commands......................................................................................................................................................... 1345 show snmp................................................................................................................................................................ 1345 show snmp engineID............................................................................................................................................... 1346 show snmp group.....................................................................................................................................................1347 show snmp user....................................................................................................................................................... 1348 snmp ifmib ifalias long............................................................................................................................................ 1348 snmp-server community........................................................................................................................................ 1349 snmp-server contact............................................................................................................................................... 1351
Contents
33
snmp-server enable traps.......................................................................................................................................1351 snmp-server engineID.............................................................................................................................................1353 snmp-server group..................................................................................................................................................1354 snmp-server host.................................................................................................................................................... 1356 snmp-server location.............................................................................................................................................. 1358 snmp-server packetsize.........................................................................................................................................1359 snmp-server trap-source.......................................................................................................................................1359 snmp-server user.....................................................................................................................................................1360 snmp-server user (for AES128-CFB Encryption)............................................................................................ 1362 snmp-server view.................................................................................................................................................... 1363 snmp-server vrf....................................................................................................................................................... 1364 snmp trap link-status..............................................................................................................................................1365 Syslog Commands......................................................................................................................................................... 1366 clear logging..............................................................................................................................................................1366 clear logging auditlog.........................................................................................................................................1366 default logging buffered.........................................................................................................................................1367 default logging console...........................................................................................................................................1367 default logging monitor.......................................................................................................................................... 1368 default logging trap.................................................................................................................................................1369 logging........................................................................................................................................................................ 1369 logging buffered.......................................................................................................................................................1370 logging console..........................................................................................................................................................1371 logging extended......................................................................................................................................................1372 logging facility...........................................................................................................................................................1373 logging history.......................................................................................................................................................... 1374 logging history size..................................................................................................................................................1375 logging monitor.........................................................................................................................................................1375 logging on.................................................................................................................................................................. 1376 logging source-interface........................................................................................................................................ 1377 logging synchronous............................................................................................................................................... 1378 logging trap............................................................................................................................................................... 1379 logging version......................................................................................................................................................1380 show logging.............................................................................................................................................................1380 show logging auditlog........................................................................................................................................ 1382 show logging driverlog stack-unit........................................................................................................................1382 terminal monitor.......................................................................................................................................................1383
Chapter 55: SNMP Traps......................................................................................................... 1384
Chapter 56: Stacking................................................................................................................1391 redundancy disable-auto-reboot................................................................................................................................ 1391 redundancy force-failover stack-unit....................................................................................................................... 1392 redundancy protocol.....................................................................................................................................................1392 reset stack-unit..............................................................................................................................................................1393 show redundancy.......................................................................................................................................................... 1394 show system stack-ports............................................................................................................................................ 1395 stack-unit priority.......................................................................................................................................................... 1397 stack-unit provision.......................................................................................................................................................1397 stack-unit stack-group.................................................................................................................................................1398
34
Contents
upgrade system stack-unit..........................................................................................................................................1398
Chapter 57: Storm Control.......................................................................................................1400 show storm-control broadcast................................................................................................................................... 1401 show storm-control multicast..................................................................................................................................... 1401 show storm-control unknown-unicast..................................................................................................................... 1402 storm-control broadcast (Configuration)................................................................................................................1403 storm-control broadcast (Interface)........................................................................................................................ 1404 storm-control multicast (Configuration)................................................................................................................. 1405 storm-control multicast (Interface)..........................................................................................................................1405 storm-control PFC/LLFC............................................................................................................................................1406 storm-control unknown-unicast (Configuration).................................................................................................. 1406 storm-control unknown-unicast (Interface)........................................................................................................... 1407
Chapter 58: Spanning Tree Protocol (STP).............................................................................. 1409 bridge-priority................................................................................................................................................................ 1409 bpdu-destination-mac-address...................................................................................................................................1410 debug spanning-tree..................................................................................................................................................... 1410 description........................................................................................................................................................................ 1411 disable............................................................................................................................................................................... 1412 forward-delay.................................................................................................................................................................. 1412 hello-time..........................................................................................................................................................................1413 max-age............................................................................................................................................................................ 1414 protocol spanning-tree................................................................................................................................................. 1415 show config..................................................................................................................................................................... 1415 show spanning-tree 0................................................................................................................................................... 1416 spanning-tree.................................................................................................................................................................. 1419
Chapter 59: SupportAssist....................................................................................................... 1421 eula-consent.................................................................................................................................................................... 1421 support-assist.................................................................................................................................................................1422 support-assist activate................................................................................................................................................ 1422 support-assist activity..................................................................................................................................................1423 SupportAssist Commands........................................................................................................................................... 1423 activity........................................................................................................................................................................1423 contact-company.....................................................................................................................................................1424 contact-person.........................................................................................................................................................1424 enable......................................................................................................................................................................... 1425 server..........................................................................................................................................................................1425 SupportAssist Activity Commands............................................................................................................................1425 action-manifest get.................................................................................................................................................1425 action-manifest install............................................................................................................................................ 1426 action-manifest remove......................................................................................................................................... 1426 action-manifest show............................................................................................................................................. 1427 enable..........................................................................................................................................................................1427 SupportAssist Company Commands.........................................................................................................................1428 address....................................................................................................................................................................... 1428 street-address.......................................................................................................................................................... 1428 territory...................................................................................................................................................................... 1429
Contents
35
SupportAssist Person Commands............................................................................................................................. 1429 email-address............................................................................................................................................................1429 phone.......................................................................................................................................................................... 1430 preferred-method.................................................................................................................................................... 1430 time-zone.................................................................................................................................................................. 1430
SupportAssist Server Commands.............................................................................................................................. 1431 proxy-ip-address.......................................................................................................................................................1431 enable......................................................................................................................................................................... 1432 url.................................................................................................................................................................................1432
show eula-consent........................................................................................................................................................ 1432 show running-config..................................................................................................................................................... 1433 show support-assist status.........................................................................................................................................1434
Chapter 60: System Time and Date.......................................................................................... 1436 clock summer-time date.............................................................................................................................................. 1436 clock summer-time recurring......................................................................................................................................1437 clock timezone............................................................................................................................................................... 1439 debug ntp........................................................................................................................................................................ 1439 ntp authenticate............................................................................................................................................................ 1440 ntp authentication-key..................................................................................................................................................1441 ntp broadcast client...................................................................................................................................................... 1442 ntp disable....................................................................................................................................................................... 1442 ntp multicast client........................................................................................................................................................1443 ntp master <stratum>.................................................................................................................................................. 1444 ntp server........................................................................................................................................................................ 1444 ntp source....................................................................................................................................................................... 1445 ntp trusted-key.............................................................................................................................................................. 1446 show clock.......................................................................................................................................................................1447 show ntp associations.................................................................................................................................................. 1447 show ntp vrf associations........................................................................................................................................... 1449 show ntp status............................................................................................................................................................. 1449
Chapter 61: Tunneling ..............................................................................................................1451 ip unnumbered................................................................................................................................................................ 1451 ipv6 unnumbered...........................................................................................................................................................1452 tunnel allow-remote......................................................................................................................................................1452 tunnel destination..........................................................................................................................................................1453 tunnel dscp......................................................................................................................................................................1454 tunnel flow-label............................................................................................................................................................ 1454 tunnel hop-limit..............................................................................................................................................................1455 tunnel keepalive............................................................................................................................................................. 1455 tunnel-mode................................................................................................................................................................... 1456 tunnel source.................................................................................................................................................................. 1457
Chapter 62: Uplink Failure Detection (UFD)............................................................................. 1458 clear ufd-disable............................................................................................................................................................ 1458 debug uplink-state-group............................................................................................................................................1459 description...................................................................................................................................................................... 1460 downstream.................................................................................................................................................................... 1460
36
Contents
downstream auto-recover........................................................................................................................................... 1461 downstream disable links.............................................................................................................................................1462 enable............................................................................................................................................................................... 1462 show running-config uplink-state-group................................................................................................................. 1463 show uplink-state-group..............................................................................................................................................1464 uplink-state-group.........................................................................................................................................................1465 upstream..........................................................................................................................................................................1466
Chapter 63: VLAN Stacking......................................................................................................1468 dei enable........................................................................................................................................................................ 1468 dei honor..........................................................................................................................................................................1469 dei mark........................................................................................................................................................................... 1470 member............................................................................................................................................................................ 1470 stack-unit stack-group..................................................................................................................................................1471 vlan-stack access.......................................................................................................................................................... 1472 vlan-stack compatible...................................................................................................................................................1472 vlan-stack dot1p-mapping........................................................................................................................................... 1473 vlan-stack protocol-type............................................................................................................................................. 1474 vlan-stack trunk............................................................................................................................................................. 1475
Chapter 64: Virtual Routing and Forwarding (VRF)...................................................................1478 ip vrf..................................................................................................................................................................................1478 ip http vrf........................................................................................................................................................................ 1479 description.......................................................................................................................................................................1479 ip vrf forwarding............................................................................................................................................................1480 ip route-export................................................................................................................................................................1481 ip route-import............................................................................................................................................................... 1482 ipv6 route-export.......................................................................................................................................................... 1482 ipv6 route-import.......................................................................................................................................................... 1483 match source-protocol.................................................................................................................................................1484 redistribute...................................................................................................................................................................... 1484 interface management................................................................................................................................................. 1485 maximum dynamic-routes........................................................................................................................................... 1486 show ip vrf...................................................................................................................................................................... 1486 show run vrf....................................................................................................................................................................1487
Chapter 65: VLT Proxy Gateway...............................................................................................1489 proxy-gateway lldp........................................................................................................................................................1489 proxy-gateway static....................................................................................................................................................1490 remote-mac-address exclude-vlan........................................................................................................................... 1490 peer-domain-link port-channel exclude-vlan...........................................................................................................1491 proxy-gateway peer-timeout .....................................................................................................................................1492 vlt-peer-mac transmit.................................................................................................................................................. 1492 show vlt-proxy-gateway..............................................................................................................................................1493
Chapter 66: Virtual Link Trunking (VLT)...................................................................................1495 back-up destination...................................................................................................................................................... 1496 clear vlt statistics.......................................................................................................................................................... 1496 delay-restore...................................................................................................................................................................1497
Contents
37
delay-restore abort-threshold.................................................................................................................................... 1498 lacp ungroup member-independent.......................................................................................................................... 1498 multicast peer-routing timeout.................................................................................................................................. 1499 peer-link port-channel..................................................................................................................................................1500 peer-routing.................................................................................................................................................................... 1501 peer-routing-timeout.................................................................................................................................................... 1501 primary-priority.............................................................................................................................................................. 1502 show vlt brief................................................................................................................................................................. 1502 show vlt backup-link.....................................................................................................................................................1503 show vlt counters..........................................................................................................................................................1504 show vlt detail................................................................................................................................................................1505 show vlt inconsistency.................................................................................................................................................1506 show vlt mismatch........................................................................................................................................................ 1506 show vlt role................................................................................................................................................................... 1508 show vlt statistics......................................................................................................................................................... 1509 show vlt statistics igmp-snoop...................................................................................................................................1510 system-mac...................................................................................................................................................................... 1511 unit-id................................................................................................................................................................................ 1512 vlt domain.........................................................................................................................................................................1512 vlt-peer-lag port-channel.............................................................................................................................................1513 show vlt private-vlan.....................................................................................................................................................1514
Chapter 67: Virtual Extensible LAN (VXLAN)............................................................................ 1515 feature vxlan................................................................................................................................................................... 1515 debug vxlan..................................................................................................................................................................... 1516 fail-mode.......................................................................................................................................................................... 1516 vxlan-instance................................................................................................................................................................. 1516 vxlan-instance (VAP).................................................................................................................................................... 1517 max_backoff....................................................................................................................................................................1517 gateway-ip....................................................................................................................................................................... 1518 controller.......................................................................................................................................................................... 1518 show vxlan vxlan-instance........................................................................................................................................... 1519 show running-config vxlan..........................................................................................................................................1520 show vxlan vxlan-instance unicast-mac-remote................................................................................................... 1520 show vxlan vxlan-instance unicast-mac-local.........................................................................................................1521 show vxlan vxlan-instance statistics interface...................................................................................................... 1522 show vxlan vxlan-instance physical-locator............................................................................................................1522 show vxlan vxlan-instance logical network............................................................................................................. 1523 clear vxlan vxlan-instance statistics......................................................................................................................... 1524 clear mac-address-table dynamic all........................................................................................................................ 1524
Chapter 68: Virtual Router Redundancy Protocol (VRRP)........................................................ 1525 IPv4 VRRP Commands................................................................................................................................................ 1525 advertise-interval.................................................................................................................................................... 1525 authentication-type................................................................................................................................................ 1526 clear counters vrrp..................................................................................................................................................1526 debug vrrp................................................................................................................................................................. 1527 description.................................................................................................................................................................1528 disable........................................................................................................................................................................ 1529
38
Contents
hold-time................................................................................................................................................................... 1530 preempt..................................................................................................................................................................... 1530 priority......................................................................................................................................................................... 1531 show config...............................................................................................................................................................1532 show vrrp...................................................................................................................................................................1532 track............................................................................................................................................................................1536 virtual-address......................................................................................................................................................... 1536 vrrp delay minimum................................................................................................................................................. 1537 vrrp delay reload...................................................................................................................................................... 1538 vrrp-group................................................................................................................................................................. 1539 version........................................................................................................................................................................1539 IPv6 VRRP Commands................................................................................................................................................ 1540 clear counters vrrp ipv6.........................................................................................................................................1540 debug vrrp ipv6.........................................................................................................................................................1541 show vrrp ipv6......................................................................................................................................................... 1542 vrrp-ipv6-group....................................................................................................................................................... 1544
Contents
39
1
About this Guide
This guide provides information about the Dell Networking operating system command line interface (CLI). This book also includes information about the protocols and features supported in Dell Networking OS.
References
For more information about your system, refer to the following documents:
Dell Networking OS Configuration Guides Installation and Maintenance Guides Release Notes
Topics:
� Objectives � Audience � Conventions � Information Icons
Objectives
This book is intended as a reference guide for the Dell Networking OS CLI commands, with detailed syntax statements, along with usage information and sample output.
NOTE: For more information about when to use the CLI commands, refer to the Dell Networking OS Configuration Guide
for your system.
Audience
This book is intended for system administrators who are responsible for configuring or maintaining networks. This guide assumes that you are knowledgeable in Layer 2 and Layer 3 networking technologies.
Conventions
This book uses the following conventions to describe command syntax.
Keyword parameter {X}
Keywords are in Courier font and must be entered in the CLI as listed. Parameters are in italics and require a number or word to be entered in the CLI. Keywords and parameters within braces must be entered in the CLI.
[X]
Keywords and parameters within brackets are optional.
x|y
Keywords and parameters separated by a bar require you to choose one option.
x||y
Keywords and parameters separated by a double bar allows you to choose any or all of the options.
40
About this Guide
Information Icons
This book uses the following information symbols: NOTE: The Note icon signals important operational information.
CAUTION: The Caution icon signals information about situations that could result in equipment damage or loss of data.
NOTE: The Warning icon signals information about hardware handling that could result in injury.
About this Guide
41
2
CLI Basics
This chapter describes the command line interface (CLI) structure and command modes. The Dell Networking operating software commands are in a text-based interface that allows you to use the launch commands, change command modes, and configure interfaces and protocols.
Topics:
� Accessing the Command Line � Multiple Configuration Users � Obtaining Help � Navigating the CLI � Using the Keyword no Command � Filtering show Commands � Enabling Software Features on Devices Using a Command Option � Command Modes
Accessing the Command Line
When the system boots successfully, you are positioned on the command line in EXEC mode and not prompted to log in. You can access the commands through a serial console port or a Telnet session. When you Telnet into the switch, you are prompted to enter a login name and password.
Example
telnet 172.31.1.53 Trying 172.31.1.53... Connected to 172.31.1.53. Escape character is '^]'. Login: username Password: Dell>
After you log in to the switch, the prompt provides you with the current command-level information. For example:
Prompt
CLI Command Mode
Dell> Dell# Dell(conf)#
EXEC EXEC Privilege CONFIGURATION
NOTE: For a list of all the command mode prompts, refer to the Command Modes section.
Multiple Configuration Users
When a user enters CONFIGURATION mode and another user is already in CONFIGURATION mode, the Dell Networking operating software generates an alert warning message similar to the following:
Dell#conf % Warning: The following users are currently configuring the system: User "" on line console0 User "admin" on line vty0 ( 123.12.1.123 ) User "admin" on line vty1 ( 123.12.1.123 )
42
CLI Basics
User "Irene" on line vty3 ( 123.12.1.321 ) Dell#conf When another user enters CONFIGURATION mode, Dell Networking OS sends a message similar to the following: % Warning: User "admin" on line vty2 "172.16.1.210" is in configuration In this case, the user is "admin" on vty2.
Obtaining Help
As soon as you are in a command mode there are several ways to access help.
To obtain a list of Type a ? at the prompt or after a keyword. There must always be a space before the ?. keywords at any
command mode:
To obtain a list of Type help at the prompt. keywords with a brief functional description:
To obtain a list of Type a keyword and then type a space and a ?. available options:
To obtain a list of Type a partial keyword and then type a ?. partial keywords using a partial keyword:
Example
The following is an example of typing ip ? at the prompt:
Dell(conf)#ip ? access-list as-path community-list domain-list domain-lookup domain-name fib ftp host max-frag-count multicast-routing name-server pim Protocol prefix-list radius redirect-list route scp source-route ssh tacacs telnet tftp trace-group trace-list Dell(conf)#ip
Named access-list BGP autonomous system path filter Add a community list entry Domain name to complete unqualified host name Enable IP Domain Name System hostname translation Define the default domain name FIB configuration commands FTP configuration commands Add an entry to the ip hostname table Max. fragmented packets allowed in IP re-assembly Enable IP multicast forwarding Specify address of name server to use Independent Multicast Build a prefix list Interface configuration for RADIUS Named redirect-list Establish static routes SCP configuration commands Process packets with source routing header options SSH configuration commands Interface configuration for TACACS+ Specify telnet options TFTP configuration commands Named trace-list Named trace-list
When entering commands, you can take advantage of the following timesaving features:
The commands are not case-sensitive. You can enter partial (truncated) command keywords. For example, you can enter int teng 1/1 for the interface
tengigabitethernet 1/1 command. To complete keywords in commands, use the TAB key. To display the last enabled command, use the up Arrow key.
CLI Basics
43
Use either the Backspace key or Delete key to erase the previous character. To navigate left or right in the Dell Networking OS command line, use the left and right Arrow keys.
The shortcut key combinations at the Dell Networking OS command line are as follows:
Key
Action
Combination
CNTL-A CNTL-B CNTL-D CNTL-E CNTL-F CNTL-I CNTL-K CNTL-L CNTL-N
CNTL-P CNTL-R CNTL-U CNTL-W CNTL-X CNTL-Z Esc B Esc F Esc D
Moves the cursor to the beginning of the command line. Moves the cursor back one character. Deletes the character at the cursor. Moves the cursor to the end of the line. Moves the cursor forward one character. Completes a keyword. Deletes all the characters from the cursor to the end of the command line. Re-enters the previous command. Returns to the more recent commands in the history buffer after recalling commands with Ctrl-P or the up Arrow key. Recalls commands, beginning with the last command. Re-enters the previous command. Deletes the line. Deletes the previous word. Deletes the line. Ends continuous scrolling of the command outputs. Moves the cursor back one word. Moves the cursor forward one word. Deletes all the characters from the cursor to the end of the word.
Navigating the CLI
Dell Networking OS displays a CLI prompt comprised of the host name and CLI mode. Host name is the initial part of the prompt and is "Dell" by default. You can change the host name with the hostname
command. CLI mode is the second part of the prompt and reflects the current CLI mode. For a list of the Dell Networking OS command
modes, refer to the command mode list in the Accessing the Command Line section. The CLI prompt changes as you move up and down the levels of the command structure. Starting with CONFIGURATION mode, the command prompt adds modifiers to further identify the mode. For more information about command modes, refer to the Command Modes section.
Using the Keyword no Command
To disable, delete or return to default values, use the no form of the commands. For most commands, if you type the keyword no in front of the command, you disable that command or delete it from the running configuration. In this guide, the no form of the command is described in the Syntax portion of the command description.
44
CLI Basics
Filtering show Commands
To find specific information, display certain information only or begin the command output at the first instance of a regular expression or phrase, you can filter the display output of a show command.
When you execute a show command, and then enter a pipe ( | ), one of the following parameters, and a regular expression, the resulting output either excludes or includes those parameters.
NOTE: Dell Networking OS accepts a space before or after the pipe, no space before or after the pipe, or any combination. For example: Dell#command | grep gigabit |except regular-expression | find regularexpression
except find grep
displays only the text that does not match the pattern (or regular expression)
searches for the first occurrence of a pattern
displays text that matches a pattern. The grep command option has an ignore-case suboption that makes the search case-insensitive. For example, the commands:
show run | grep Ethernet
show run | grep ethernet
show run | grep Ethernet ignore-case
returns a search result with instances containing a capitalized "Ethernet," such as interface TenGigabitEthernet 1/1
does not return the previous search result because it only searches for instances containing a noncapitalized "ethernet"
returns instances containing both "Ethernet" and "ethernet"
no-more save
does not paginate the display output copies the output to a file for future use
Displaying All Output
To display the output all at once (not one screen at a time), use the no-more option after the pipe. This operation is similar to the terminal length screen-length command except that the no-more option affects the output of just the specified command. For example: Dell#show running-config|no-more.
Filtering the Command Output Multiple Times
You can filter a single command output multiple times. To filter a command output multiple times, place the save option as the last filter. For example: Dell# command | grep regular-expression | except regular-expression | grep other-regular-expression | find regular-expression | no-more | save.
Enabling Software Features on Devices Using a Command Option
This capability to activate software applications or components on a device using a command is supported on this platform. Starting with Release 9.4(0.0), you can enable or disable specific software features or applications that need to run on a device by using a command attribute in the CLI interface. This capability enables effective, streamlined management and administration of applications and utilities that run on a device. You can employ this capability to perform an on-demand activation or turn-off of a software component or protocol. A feature configuration file that is generated for each image contains feature names denotes whether this enabling or disabling method is available for such features. In 9.4(0.0), you can enable or disable the VRF application globally across the system by using this capability. You can activate VRF application on a device by using the feature vrf command in CONFIGURATION mode.
CLI Basics
45
NOTE: The no feature vrf command is not supported on any of the platforms.
To enable the VRF feature and cause all VRF-related commands to be available or viewable in the CLI interface, use the following command. You must enable the VRF feature before you can configure its related attributes.
Dell(conf)# feature vrf
Based on whether VRF feature is identified as supported in the Feature Configuration file, configuration command feature vrf becomes available for usage. This command will be stored in running-configuration and will precede all other VRF-related configurations.
NOTE: The MXL and Z9000 platforms currently do not support VRF. These platforms support only the management and default VRFs, which are available by default. As a result, the feature vrf command is not available for these platforms.
To display the state of Dell Networking OS features:
Dell#show feature
Example of show feature output
For a particular target where VRF is enabled, the show output is similar to the following:
Feature State
------------------------------
VRF
enabled
feature vrf
Enable the VRF application on a switch. After you enable the VRF feature, you cannot deactivate it.
Syntax
feature vrf
Defaults
Disabled
Command Modes CONFIGURATION
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.5(0.0)
9.4(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4810, S4820T, S5000, and S6000.
Usage Information
You can activate VRF application on a device by using the feature vrf command in CONFIGURATION mode. The no feature vrf command is not supported on any platform.
show feature
Verify the status of software applications, such as VRF, that are activated and running on a device.
Syntax
show feature
Command Modes EXEC
EXEC Privilege
Command History
Version
9.8(0.0P5) 9.8(0.0P2)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON.
46
CLI Basics
Usage Information
Example
Version
9.4(0.0)
Description
Introduced on the S4810, S4820T, and S6000.
You can activate VRF application on a device by using the feature vrf command in CONFIGURATION mode. The no feature vrf command is not supported on any of the platforms.
Dell#show feature
Feature State
------------------------------
VRF
enabled
Command Modes
To navigate and launch various CLI modes, use specific commands. Navigation to these modes is described in the following sections.
BGP ADDRESS-FAMILY Mode
To enable or configure IPv4 for BGP, use BGP ADDRESS-FAMILY mode. For more information, refer to Border Gateway Protocol IPv4 (BGPv4). To enter BGP ADDRESS-FAMILY mode: 1. Verify that you are logged in to ROUTER BGP mode. 2. Enter the command address-family 3. Enter the protocol type.
For IPv4, enter ipv4 multicast. The prompt changes to include (conf-router_bgp_af) for IPv4.
CLASS-MAP Mode
To create or configure a class map, use CLASS-MAP mode. For more information, refer to Policy-Based QoS Commands. To enter CLASS-MAP mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Enter the class-map command then enter the class map name. The prompt changes to include (config-class-map). You can return to CONFIGURATION mode by using the exit command.
CONFIGURATION Mode
In EXEC Privilege mode, use the configure command to enter CONFIGURATION mode and configure routing protocols and access interfaces. To enter CONFIGURATION mode: 1. Verify that you are logged in to EXEC Privilege mode. 2. Enter the configure command. The prompt changes to include (conf). From this mode, you can enter INTERFACE mode by using the interface command.
CONTROL-PLANE Mode
To manage control-plane traffic, use CONTROL-PLANE mode. For more information, refer to Control Plane Policing (CoPP). To enter CONTROL-PLANE mode: 1. Verify that you are logged in to CONFIGURATION mode.
CLI Basics
47
2. Enter the control-plane-cpuqos command. The prompt changes to include (conf-control-cpuqos). You can return to CONFIGURATION mode by using the exit command.
DHCP Mode
To enable and configure Dynamic Host Configuration Protocol (DHCP), use DHCP mode. For more information, refer to Dynamic Host Configuration Protocol (DHCP). To enter DHCP mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Enter the ip dhcp server command. The prompt changes to include (config-dhcp). You can return to CONFIGURATION mode by using the exit command.
DHCP POOL Mode
To create an address pool, use DHCP POOL mode. For more information, refer to Dynamic Host Configuration Protocol (DHCP). To enter DHCP POOL mode: 1. Verify that you are logged in to DHCP mode. 2. Enter the pool command then the pool name. The prompt changes to include (config-dhcp-pool-name). You can return to DHCP mode by using the exit command.
ECMP GROUP Mode
To enable or configure traffic distribution monitoring on an ECMP link bundle, use ECMP GROUP mode. For more information, refer to ecmp_overview. To enter ECMP GROUP mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Enter the ecmp-group command then enter the ECMP group ID. The prompt changes to include (conf-ecmp-group-ecmp-
group-id). You can return to CONFIGURATION mode by using the exit command.
EIS Mode
To enable or configure Egress Interface Selection (EIS), use EIS mode. To enter EIS mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Enter the management egress-interface-selection command. The prompt changes to include (conf-mgmt-eis). You can return to CONFIGURATION mode by using the exit command.
EXEC Mode
When you initially log in to the switch, by default, you are logged in to EXEC mode. This mode allows you to view settings and enter EXEC Privilege mode, which is used to configure the device. When you are in EXEC mode, the > prompt is displayed following the host name prompt, which is "Dell" by default. You can change the host name prompt using the hostname command.
NOTE: Each mode prompt is preceded by the host name.
48
CLI Basics
EXEC Privilege Mode
The enable command accesses EXEC Privilege mode. If an administrator has configured an "Enable" password, you are prompted to enter it.
EXEC Privilege mode allows you to access all the commands accessible in EXEC mode, plus other commands, such as to clear address resolution protocol (ARP) entries and IP addresses. In addition, you can access CONFIGURATION mode to configure interfaces, routes and protocols on the switch. While you are logged in to EXEC Privilege mode, the # prompt is displayed.
EXTENDED COMMUNITY LIST Mode
To enable and configure a BGP extended community, use EXTENDED COMMUNITY LIST mode. To enter EXTENDED COMMUNITY LIST mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Enter the ip extcommunity-list command then a community list name. The prompt changes to include (conf-ext-
community-list). You can return to CONFIGURATION mode by using the exit command.
FRRP Mode
To enable or configure Force10 Resilient Ring Protocol (FRRP), use FRRP mode. For more information, refer to Force10 Resilient Ring Protocol (FRRP).
To enter FRRP mode:
1. Verify that you are logged in to CONFIGURATION mode. 2. Enter the protocol frrp command then the ring ID. The prompt changes to include (conf-frrp-ring-id).
You can return to CONFIGURATION mode by using the exit command.
INTERFACE Mode
Use INTERFACE mode to configure interfaces or IP services on those interfaces. An interface can be physical (for example, a Gigabit Ethernet port) or virtual (for example, the Null interface).
To enter INTERFACE mode:
1. Verify that you are logged in to CONFIGURATION mode. 2. Enter the interface command and then enter an interface type and interface number that is available on the switch.
NOTE: In Dell Networking OS, the stack unit number and interfaces start from 0. But in Dell Networking OS Open Networking platforms, the stack unit number and interfaces start from 1.
The prompt changes to include the designated interface and slot/port[/subport] number. For example:
Prompt
Interface Type
Dell(confif)#
Dell(conf-ifte-1/1)#
Dell(conf-iffo-1/1)#
Dell(conf-iflo-0)#
Dell(conf-ifnu-0)#
INTERFACE mode Ten-Gigabit Ethernet interface then slot/port information Forty-Gigabit Ethernet interface then slot/port information Loopback interface number Null Interface then zero
CLI Basics
49
Prompt
Interface Type
Dell(conf-if- Port-channel interface number po-0)#
Dell(conf-if- VLAN Interface then VLAN number (range 1�4094) vl-0)#
Dell(conf-if- Management Ethernet interface then slot/port information ma-1/1)#
Dell(conf-if- Tunnel interface then tunnel ID. tu-0)#
Dell(conf-if- Designated interface range (used for bulk configuration). range)#
IP ACCESS LIST Mode
To enter IP ACCESS LIST mode and configure either standard or extended access control lists (ACLs), use the ip accesslist standard or ip access-list extended command. To enter IP ACCESS LIST mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Use the ip access-list standard or ip access-list extended command. Include a name for the ACL. The
prompt changes to include (conf-std-nacl) or (conf-ext-nacl). You can return to CONFIGURATION mode by using the exit command.
ISIS ADDRESS-FAMILY Mode
To enable or configure IPv6 for ISIS, use ISIS ADDRESS-FAMILY mode. For more information, refer to Intermediate System to Intermediate System (IS-IS). To enter ISIS ADDRESS-FAMILY mode: 1. Verify that you are logged in to ROUTER ISIS mode. 2. Enter the command address-family ipv6 unicast. The prompt changes to include (conf-router_isis-af_ipv6).
LLDP Mode
To enable and configure Link Layer Discovery Protocol (LLDP), use LLDP mode. For more information, refer to Link Layer Discovery Protocol (LLDP). To enter LLDP mode: 1. To enable LLDP globally, verify that you are logged in to CONFIGURATION mode. To enable LLDP on an interface, verify
that you are logged in to INTERFACE mode. 2. Enter the protocol lldp command. The prompt changes to include (conf-lldp) or (conf-if-interface-lldp).
LLDP MANAGEMENT INTERFACE Mode
To enable and configure Link Layer Discovery Protocol (LLDP) on management interfaces, use LLDP MANAGEMENT INTERFACE mode. To enter LLDP MANAGEMENT INTERFACE mode: 1. Verify that you are logged in to LLDP mode. 2. Enter the management-interface command. The prompt changes to include (conf-lldp-mgmtIf).
50
CLI Basics
LINE Mode
To configure the console or virtual terminal parameters, use LINE mode. To enter LINE mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Enter the line command. Include the keywords console or vty and their line number available on the switch. The prompt
changes to include (config-line-console) or (config-line-vty). You can exit this mode by using the exit command.
MAC ACCESS LIST Mode
To enter MAC ACCESS LIST mode and configure either standard or extended access control lists (ACLs), use the mac access-list standard or mac access-list extended command. To enter MAC ACCESS LIST mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Use the mac access-list standard or mac access-list extended command. Include a name for the ACL. The
prompt changes to include (conf-std-macl) or (conf-ext-macl). You can return to CONFIGURATION mode by using the exit command.
MONITOR SESSION Mode
To enable and configure a traffic monitoring session using port monitoring, use MONITOR SESSION mode. For more information, refer to Port Monitoring. To enter MONITOR SESSION mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Enter the monitor session command then the session ID. The prompt changes to include (conf-mon-sess-sessionID).
MULTIPLE SPANNING TREE (MSTP) Mode
To enable and configure MSTP, use MULTIPLE SPANNING TREE mode. For more information, refer to Multiple Spanning Tree Protocol (MSTP). To enter MULTIPLE SPANNING TREE mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Enter the protocol spanning-tree mstp command. The prompt changes to include (conf-mstp). You can return to CONFIGURATION mode by using the exit command.
OPENFLOW INSTANCE Mode
To enable and configure OpenFlow instances, use OPENFLOW INSTANCE mode. To enter OPENFLOW INSTANCE mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Enter the openflow of-instance command then the OpenFlow ID number of the instance you want to create or
configure. The prompt changes to include (conf-of-instance of-id). You can return to the CONFIGURATION mode by entering the exit command.
CLI Basics
51
Per-VLAN SPANNING TREE (PVST+) Plus Mode
To enable and configure the Per-VLAN Spanning Tree (PVST+) protocol, use PVST+ mode. For more information, refer to PerVLAN Spanning Tree Plus (PVST+).
NOTE: The protocol name is PVST+, but the plus sign is dropped at the CLI prompt.
To enter PVST+ mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Enter the protocol spanning-tree pvst command. The prompt changes to include (conf-pvst). You can return to CONFIGURATION mode by using the exit command.
PORT-CHANNEL FAILOVER-GROUP Mode
To configure shared LAG state tracking, use PORT-CHANNEL FAILOVER-GROUP mode. For more information, refer to Port Channel Commands. To enter PORT-CHANNEL FAILOVER-GROUP mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Enter the port-channel failover-group command. The prompt changes to include (conf-po-failover-grp). You can return to CONFIGURATION mode by using the exit command.
PREFIX-LIST Mode
To configure a prefix list, use PREFIX-LIST mode. To enter PREFIX-LIST mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Enter the ip prefix-list command. Include a name for the prefix list. The prompt changes to include (conf-nprefixl). You can return to CONFIGURATION mode by using the exit command.
PROTOCOL GVRP Mode
To enable and configure GARP VLAN Registration Protocol (GVRP), use PROTOCOL GVRP mode. For more information, refer to GARP VLAN Registration (GVRP). To enter PROTOCOL GVRP mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Enter the protocol gvrp command. The prompt changes to include (config-gvrp). You can return to CONFIGURATION mode by using the exit command.
RAPID SPANNING TREE (RSTP) Mode
To enable and configure RSTP, use RSTP mode. For more information, refer to Rapid Spanning Tree Protocol (RSTP). To enter RSTP mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Enter the protocol spanning-tree rstp command. The prompt changes to include (conf-rstp). You can return to CONFIGURATION mode by using the exit command.
ROUTE-MAP Mode
To configure a route map, use ROUTE-MAP mode.
52
CLI Basics
To enter ROUTE-MAP mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Use the route-map map-name [permit | deny] [sequence-number] command. The prompt changes to include
(config-route-map). You can return to CONFIGURATION mode by using the exit command.
ROUTER BGP Mode
To enable and configure Border Gateway Protocol (BGP), use ROUTER BGP mode. For more information, refer to Border Gateway Protocol IPv4 (BGPv4) To enter ROUTER BGP mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Use the router bgp command then enter the AS number. The prompt changes to include (conf-router_bgp). You can return to CONFIGURATION mode by using the exit command.
ROUTER ISIS Mode
To enable and configure Intermediate System to Intermediate System (ISIS), use ROUTER ISIS mode. For more information, refer to Intermediate System to Intermediate System (IS-IS). To enter ROUTER ISIS mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Use the router isis command. The prompt changes to include (conf-router_isis). You can return to CONFIGURATION mode by using the exit command.
ROUTER OSPF Mode
To configure OSPF, use ROUTER OSPF mode. For more information, refer to Open Shortest Path First (OSPFv2). To enter ROUTER OSPF mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Enter the router ospf {process-id} command. The prompt changes to include (conf-router_ospf-id). You can switch to INTERFACE mode by using the interface command or you can switch to ROUTER RIP mode by using the router rip command.
ROUTER OSPFV3 Mode
To configure OSPF for IPv6, use ROUTER OSPFV3 mode. To enter ROUTER OSPFV3 mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Enter the ipv6 router ospf {process-id} command. The prompt changes to include (conf-ipv6-router_ospf). You can return to CONFIGURATION mode by using the exit command.
ROUTER RIP Mode
To enable and configure Router Information Protocol (RIP), use ROUTER RIP mode. For more information, refer to Routing Information Protocol (RIP). To enter ROUTER RIP mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Enter the router rip command. The prompt changes to include (conf-router_rip).
CLI Basics
53
You can return to CONFIGURATION mode by using the exit command.
SPANNING TREE Mode
To enable and configure the Spanning Tree protocol, use SPANNING TREE mode. For more information, refer to Spanning Tree Protocol (STP). To enter SPANNING TREE mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Enter the protocol spanning-tree stp-id command. The prompt changes to include (conf-stp). You can return to CONFIGURATION mode by using the exit command.
SupportAssist Mode
To enable and configure the SupportAssist, use SupportAssist mode. For more information, refer to SupportAssist. 1. Verify that you are logged in to CONFIGURATION mode. 2. Enter the support-assist command. The prompt changes to include (conf-supportassist). You can return to CONFIGURATION mode by using the exit command.
TRACE-LIST Mode
To configure a Trace list, use TRACE-LIST mode. To enter TRACE-LIST mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Enter the ip trace-list command. Include the name of the Trace list. The prompt changes to include (conf-trace-acl). You can exit this mode by using the exit command.
VLT DOMAIN Mode
To enable and configure the VLT domain protocol, use VLT DOMAIN mode. For more information, refer to Virtual Link Trunking (VLT). To enter VLT DOMAIN mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Enter the vlt domaincommand then the VLT domain number. The prompt changes to include (conf-vlt-domain). You can return to CONFIGURATION mode by entering the exit command.
VRRP Mode
To enable and configure Virtual Router Redundancy Protocol (VRRP), use VRRP mode. For more information, refer to Virtual Router Redundancy Protocol (VRRP). To enter VRRP mode: 1. To enable VRRP globally, verify that you are logged in to CONFIGURATION mode. 2. Enter the vrrp-group command then enter the VRRP group ID. The prompt changes to include (conf-if-interface-type-
slot/port-vrid-vrrp-group-id).
54
CLI Basics
3
File Management
This chapter contains command line interface (CLI) commands needed to manage the configuration files as well as other file management commands.
Topics:
� boot system � cd � HTTP Copy via CLI � copy � delete � dir � format (S-Series) � fsck flash � mkdir � mount nfs � rmdir � HTTP Copy via CLI � rename � restore factory-defaults � show boot system � show bootvar � show file-systems � show os-version � show running-config � show startup-config � show version � upgrade � upgrade system
boot system
Specify the location where the Dell Networking OS image used to boot the system is stored.
Syntax
boot system {gateway ip address | stack-unit [{stack-unit-number | all] [default | primary {system: {A: | B: | bmp-boot} | tftp: | secondary]}
To return to the default boot sequence, use the no boot system command.
Parameters
gateway ip-address stack-unit all stack-unitnumber default primary secondary
Enter the IP address of the default next-hop gateway for the management subnet. Enter an IP address in dotted decimal format. Enter the stack-unit number for the master switch. Enter the keyword all for all the stack units. Enter the stack-unit number. The range is from 1 to 6.
Enter the keyword default to use the default Dell Networking OS image. Enter the keyword primary to use the primary Dell Networking OS image. Enter the keyword secondary to use the secondary Dell Networking OS image.
File Management
55
system: ftp:
nfsmount
system: usbflash
tftp:
A: | B: bmp-boot
Enter the keyword system: to use the system image file URL (system).
Enter the keyword FTP: to retrieve the image from an FTP server. ftp:// userid:password@hostip/filepath.
Enter the keyword nfsmount: to retrieve the image from a mounted NFS file system. nfsmount://filepath
Enter the keyword system: to retrieve the image from the system.
Enter the keyword usbflash: to retrieve the image from the USB flash memory. usbflash://filename.
Enter the keyword TFTP: to retrieve the image from a TFTP server. tftp://hostip/ filepath.
Enter A: or B: to boot one of the system partitions.
Enter the keyword bmp-boot to boot the system, when the you are not sure about the partition that contains image from DHCP offer.
NOTE: In normal-reload, this keyword is not enabled.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 8.3.19.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced the support for bmp-boot on the S-Series and Z-Series switches. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Usage Information
To display these changes in the show bootvar command output, save the running configuration to the startup configuration (using the copy command) and reload system.
Use the bmp-boot keyword only when the device boots up from bare metal provisioning (BMP). For an industrial standard upgraded device, the Dell networking OS stores the image partition upgraded from the DHCP offer in the bmp-boot option.
cd
Change to a different working directory.
Syntax Parameters
cd flash: <directory name and path>
flash:
directory name and path
Use the keyword flash: to enter the directory name and path.
Enter the directory name and path as follows: directory name ([[flash://]directory_path])
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
56
File Management
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 E-Series
Introduced on the S4048-ON. Introduced on the S3048-ON. Added NFS mount support. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Original command.
HTTP Copy via CLI
Copy one file to another location. Dell Networking OS supports IPv4 and IPv6 addressing for FTP, TFTP, and SCP (in the hostip field).
Syntax
copy http://10.16.206.77/sample_file flash://sample_filecopy flash:// sample_file http://10.16.206.77/sample_file
You can copy from the server to the switch and vice-versa.
Parameters
copy http: flash:
Address or name of remote host []: 10.16.206.77 Port number of the server [80]: Source file name []: sample_file User name to login remote host: x Password to login remote host: Destination file name [sample_file]:
Defaults
None.
Command Modes EXEC Privilege
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.3(0.1)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000, Z9000, S4810, and S4820T.
Example
copy http://admin:admin123@10.16.206.77/sample_file flash://sample_file
copy
Copy one file to another location. Dell Networking OS supports IPv4 and IPv6 addressing for FTP, HTTP, TFTP, and SCP (in the hostip field).
Syntax
copy source-file-url destination-file-url
File Management
57
Parameters
compressedconfig flash:
ftp:
http:
nfsmount:
running-config
scp:
startup-config tftp:
Enter the keywords compressed-config to copy a file from the current system configuration.
Enter the keyword flash: to copy from the local file system ([flash://]filepath).
Enter the keyword ftp: to copy from the remote file system, IPv4, or IPv6, (ftp://userid:password@hostip/filepath) .
Enter the keyword http: to copy from the remote file system, IPv4, or IPv6, (http://hostip/filepath) .
Enter the keyword nfsmount: to copy from the nfs mount file system (nfsmount://<mount-point>/filepath).
Enter the keywords running-config to copy from the current system configuration.
Enter the keyword scp: to copy from the remote file system, IPv4, or IPv6, (scp://userid:password@hostip/filepath).
Enter the keywords startup-config to copy from the startup configuration.
Enter the keyword tftp: to copy from the remote file system, IPv4, or IPv6, (tftp://hostip/filepath).
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
9.4(0.0) 9.3(0.1) 9.0.2.0 8.4.1.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 7.6.1.0
7.5.1.0 E-Series
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Added the nfsmount:<mount-point> parameters that allow you to mount a remote NFS file system. Added the compressed-config parameter. Added the http parameter on the S6000, Z9000, S4810, and S4820T. Introduced on the S6000. Added IPv6 addressing support for FTP, TFTP, and SCP. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added usbflash and rpm0usbflash commands on E-Series ExaScale. Introduced on the S-Series and added the SSH port number to the SCP prompt sequence on all systems. Introduced on the C-Series. Original command.
Usage Information
Dell Networking OS supports a maximum of 100 files at the root directory level on both the internal and external flash.
When copying a file to a remote location (for example, using Secure Copy [SCP]), enter only the keywords and Dell Networking OS prompts you for the rest of the information. For example, when using SCP, you can enter copy running-config scp: where running-config is the source and the target is specified in the ensuing prompts. Dell Networking OS prompts you to enter any required
58
File Management
Example
Example Example Example
Example Related Commands
information for the named destination -- remote destination, destination filename, user ID, password, and so forth. When you use the copy running-config startup-config command to copy the running configuration (the startup configuration file amended by any configuration changes made since the system was started) to the startup configuration file, Dell Networking OS creates a backup file on the internal flash of the startup configuration. Dell Networking OS supports copying the running-configuration to a TFTP server, an FTP server, or a remote NFS file system. For example: copy running-config tftp: copy running-config ftp: copy running-config nfsmount://<mount-point>/filepath You can compress the running configuration by grouping all the VLANs and the physical interfaces with the same property. You can store the operating configuration to the startup config in Compressed mode and perform an image downgrade without any configuration loss.
Dell#copy running-config scp:/ Address or name of remote host []: 10.10.10.1 Destination file name [startup-config]? old_running User name to login remote host? sburgess Password to login remote host? dilling
In this copy scp: flash: example, specifying SCP in the first position indicates that you need to specify the target in the ensuing prompts. Entering flash: in the second position indicates that the target is the internal flash. The source is on a secure server running secure shell (SSH), so you are prompted for the user datagram protocol (UDP) port of the SSH server on the remote host.
Dell#copy running-config nfsmount://<mount-point>/filepath Destination file name [test.txt]: User name to login remote host: usrname Password to login remote host:
Dell#copy scp: flash: Address or name of remote host []: 10.11.199.134 Port number of the server [22]: 99 Source file name []: test.cfg User name to login remote host: admin Password to login remote host: Destination file name [test.cfg]: test1.cfg
Dell#copy compressed-config compressed-cfg ! 6655 bytes successfully copied Dell# Dell#copy compressed-config ftp: Address or name of remote host []: 10.11.8.12 Destination file name [startup-config]: User name to login remote host: spbalaji Password to login remote host: ! 6655 bytes successfully copied
Dell#copy http://admin:admin123@10.16.206.77/sample_file flash:// sample_file
cd � changes the working directory.
File Management
59
delete
Delete a file from the flash. After deletion, files cannot be restored.
Syntax Parameters
delete flash: [no-confirm] nfsmount: [no-confirm]
flash:
To delete a file or directory on the internal flash, enter flash:// then the filename or directory name ([flash://]filepath).
nfsmount:
To delete a file or directory on the NFS-mounted file system, enter nfsmount:// then the mount point and the file path (nfsmount://filepath).
NOTE: While deleting a file directory on a remote NFS file system, you must
specify the mount-point that indicates the working directory on the NFS file
system. You cannot delete the root directory of the remote NFS file system.
no-confirm
(OPTIONAL) Enter the keywords no-confirm to specify that the Dell Networking OS does not require user input for each file prior to deletion.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 E-Series
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Added support for NFS mount. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Original command.
dir
Display the files in a file system. The default is the current directory.
Syntax Parameters
dir ([[flash://]path] nfsmount://<mount-point>/filepath)
flash:
For a file or directory on the internal Flash, enter flash:// then the filename or directory name.
nfsmount:
For a file or directory on an NFS-mounted file system, enter nfsmount:// then the mount point and file path.
NOTE: While displaying a file directory on a remote NFS file system, it is
mandatory to specify the mount-point that indicates the working directory on
the NFS file system. You cannot display details corresponding to the root
directory of the remote NFS file system.
Command Modes EXEC Privilege
60
File Management
Command History
Example
Example (NFS Mount) Related Commands
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.7(0.0) 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 E-Series
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Added support for NFS mount. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Original command.
Dell#dir Directory of flash:
1 drwx
8192 Jan 01 1980 00:00:00 +00:00 .
2 drwx
3072 Dec 15 2014 06:27:10 +00:00 ..
3 drwx
4096 Jan 01 1980 00:02:44 +00:00 TRACE_LOG_DIR
4 drwx
4096 Jan 01 1980 00:02:44 +00:00 CORE_DUMP_DIR
5 d---
4096 Jan 01 1980 00:02:44 +00:00 ADMIN_DIR
6 drwx
4096 Jan 01 1980 00:02:44 +00:00 RUNTIME_PATCH_DIR
7 drwx
4096 Nov 06 2014 06:57:06 +00:00 CONFIG_TEMPLATE
8 -rwx
4625 Nov 06 2014 06:55:28 +00:00 startup-config
9 drwx
4096 May 31 2013 02:49:46 +00:00 CONFD_LOG_DIR
flash: 2056916992 bytes total (2052784128 bytes free)
Dell#dir nfsmount: Directory of nfsmount:
1 drwx 2 drwx
512 Jun 15 2015 02:47:57 +00:00 . 512 Jun 15 2015 02:47:57 +00:00 ..
nfsmount: 1463410688 bytes total (585719808 bytes free)
cd -- changes the working directory.
format (S-Series)
Erase all existing files and reformat the filesystem in the internal flash memory. After the filesystem is formatted, files cannot be restored.
Syntax
format {flash: | usbflash:}
Defaults
None
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
File Management
61
Usage Information
Related Commands
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.7.0 7.8.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the S-Series
You must include the colon (:) when entering this command.
After reformatting is complete, three empty directories are automatically created on flash: CRASH_LOG_DIR, TRACE_LOG_DIR and NVTRACE_LOG_DIR.
CAUTION: This command deletes all files, including the startup configuration file. So, after executing this command, consider saving the running config as the startup config (use the write memory command or copy run start command).
copy � copies the current configuration to either the startup-configuration file or the terminal. show file-systems � displays information about the file systems on the system.
fsck flash
Checks the flash file system for errors.
Syntax
fsck flash: fsck usbflash:
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 9.1(0.0) 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on S4810 and Z9000. Introduced on S4820T.
Usage Information
Include the colon (:) when entering this command. This command checks the specified flash memory for errors. If errors are found, the command recommends that you format the flash.
CAUTION: If you elect to format the flash, all files � including the startup configuration file
� are lost. If you do decide to format the specified flash, consider saving the running
configuration as the startup configuration after formatting the flash (use the write
memory command or copy run start command).
Related Commands
copy -- copy one file to another location.
62
File Management
show file-systems -- Display information about the file systems on the system.
mkdir
Creates a directory on the NFS mounted file system.
Syntax
mkdir nfsmount://mount-point/usrname
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S-Series.
Example
Dell#mkdir nfsmount:/nfs-mountpoint/guest
Related Commands
rmdir � removes a directory.
mount nfs
Mounts an NFS file system to a device.
Syntax Parameters
mount nfs rhost:path mount-point [username password] Enter the following location keywords and information:
rhost:path mount-point username password
Enter the remote hosts's path directory. Enter the folder name in the local file system. (OPTIONAL) Enter the user name to access the device. (OPTIONAL) Enter the password.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S-Series.
Example
Dell#mount nfs nfstest nfs-mount-point usrname pwd
Related Commands
cd � changes the working directory.
File Management
63
rmdir
Removes a directory from the NFS mounted file system.
Syntax
rmdir nfsmount://mount-point/usrname
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S-Series.
Example
Dell#rmdir nfsmount:/nfs-mountpoint/guest Proceed to remove the directory [confirm yes/no]: yes Dell#
Related Commands
mkdir � creates a directory.
HTTP Copy via CLI
Copy one file to another location. Dell Networking OS supports IPv4 and IPv6 addressing for FTP, TFTP, and SCP (in the hostip field).
Syntax
copy http://10.16.206.77/sample_file flash://sample_filecopy flash:// sample_file http://10.16.206.77/sample_file
You can copy from the server to the switch and vice-versa.
Parameters
copy http: flash:
Address or name of remote host []: 10.16.206.77 Port number of the server [80]: Source file name []: sample_file User name to login remote host: x Password to login remote host: Destination file name [sample_file]:
Defaults
None.
Command Modes EXEC Privilege
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.3(0.1)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000, Z9000, S4810, and S4820T.
Example
copy http://admin:admin123@10.16.206.77/sample_file flash://sample_file
64
File Management
rename
Rename a file in the local file system.
Syntax Parameters
rename url url
url
Enter the following keywords and a filename:
For a file on the internal Flash, enter flash:// followed by the filename.
For a file on an NFS mounted file system, enter nfsmount:// followed by the mount point and file path.
For a file on an external USB drive, enter usbflash:// followed by the filename.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 E-Series
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Added support for NFS mount. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on S-Series Introduced on C-Series Original command
restore factory-defaults
Restore factory defaults.
Syntax Parameters
restore factory-defaults stack-unit {stack--unit--number | all} {clear-all | bootvar | nvram}
factory-defaults stack-unitnumber all bootvar clear-all
nvram
Return the system to its factory default mode.
Enter the stack member unit identifier to restore only the mentioned stack-unit. The range is from 1 to 6.
Enter the keyword all to restore all units in the stack.
Enter the keyword bootvar to reset boot line.
Enter the keywords clear-all to reset the NvRAM, boot environment variables, and the system startup configuration.
Enter the keyword nvram to reset the NvRAM only.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
File Management
65
Usage Information
Example (all stack units)
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.16.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Added bootvar as a new parameter. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the MXL 10/40GbE Switch IO Module.
Restoring factory defaults deletes the existing startup configuration and all persistent settings (stacking, fan-out, and so forth).
When restoring all units in a stack, all the units in the stack are placed into stand-alone mode.
When restoring a single unit in a stack, that unit placed in stand-alone mode. No other units in the stack are affected.
When restoring units in stand-alone mode, the units remain in stand-alone mode after the restoration. After the restore is complete, the units power cycle immediately.
CAUTION: There is no undo for this command.
Following are the factory-default environment variables:
baudrate primary_boot secondary_boot default_boot ipaddr gatewayip netmask macaddr mgmtautoneg mgmtspeed100 mgmtfullduplex
Each boot path variable (primary_boot, secondary_boot, and default_boot) is further split into the following three independent variables:
primary_server, primary_file, and primary_type
secondary_server, secondary_file, and secondary_type
default_server, default_file, and default_type
NOTE: For information on the default values that these variables take, refer to the Restoring Factory Default Environment Variables section in the Dell Networking OS Configuration guide.
Dell#restore factory-defaults stack-unit all clear-all ************************************************************** * Warning - Restoring factory defaults will delete the existing * * startup-config and all persistent settings (stacking, fanout, etc.)* * All the units in the stack will be split into standalone units. * * After restoration the unit(s) will be powercycled immediately. * * Proceed with caution ! * ************************************************************** Proceed with factory settings? Confirm [yes/no]:yes
66
File Management
-- Restore status --
Unit Nvram
Config
------------------------
0
Success
Success
1
Success
Success
2
Success
Success
3
Not present
4
Not present
5
Not present
Power-cycling the unit(s).
Dell#
Example (single stack)
Dell#restore factory-defaults stack-unit 0 clear-all
**************************************************************
* Warning - Restoring factory defaults will delete the existing *
* startup-config and all persistent settings (stacking, fanout, etc.)*
* After restoration the unit(s) will be powercycled immediately. *
* Proceed with caution ! *
**************************************************************
Proceed with factory settings? Confirm [yes/no]:yes
-- Restore status --
Unit Nvram
Config
------------------------
0
Success Success
Power-cycling the unit(s).
Dell#
Example (NvRAM all stack units)
Dell#restore factory-defaults stack-unit all nvram
**************************************************************
* Warning - Restoring factory defaults will delete the existing *
* persistent settings (stacking, fanout, etc.) *
* All the units in the stack will be split into standalone units. *
* After restoration the unit(s) will be powercycled immediately. *
* Proceed with caution ! *
**************************************************************
Proceed with factory settings? Confirm [yes/no]:yes
-- Restore status --
Unit Nvram
Config
------------------------
0
Success
1
Success
2
Success
3
Not present
4
Not present
5
Not present
Power-cycling the unit(s).
Dell#
Example (NvRAM, single unit)
Dell#restore factory-defaults stack-unit 1nvram
**************************************************************
* Warning - Restoring factory defaults will delete the existing *
* persistent settings (stacking, fanout, etc.) *
* After restoration the unit(s) will be powercycled immediately. *
* Proceed with caution ! *
**************************************************************
Proceed with factory settings? Confirm [yes/no]:yes
-- Restore status --
Unit Nvram Config
------------------------
1
Success
Power-cycling the unit(s).
Dell#
File Management
67
show boot system
Displays information about boot images currently configured on the system.
Syntax Parameters
show boot system {stack-unit | all}
all stack-unit
Enter the keyword all to display the boot image information for all stack units.
Enter the keyword stack-unit followed by a number to display boot image information for a stack-unit.
The range is from 1 to 6.
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000 Introduced on the S4810. Introduced on the C-Series and E-Series.
Example
Dell#show boot system stack-unit 1
Current system image information in the system: =============================================
Type
Boot Type
A
B
----------------------------------------------------------------
Stack-unit 1 FLASH BOOT
9-0(2-1)
9-0(2-0)[boot]
Dell#
show bootvar
Display the variable settings for the boot parameters.
Syntax
show bootvar
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
68
File Management
Example
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.4 8.3.11.1 8.3.7.0 7.5.1.0 E-Series
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Output expanded to display current reload mode (normal or Jumpstart). Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series. Original command.
Dell#show bootvar PRIMARY IMAGE FILE = system://B SECONDARY IMAGE FILE = tftp://10.16.127.35/Dell-SI-9-0-2-0.bin DEFAULT IMAGE FILE = system://A LOCAL CONFIG FILE = variable does not exist PRIMARY HOST CONFIG FILE = variable does not exist SECONDARY HOST CONFIG FILE = variable does not exist PRIMARY NETWORK CONFIG FILE = variable does not exist SECONDARY NETWORK CONFIG FILE = variable does not exist CURRENT IMAGE FILE = system://B CURRENT CONFIG FILE 1 = flash://startup-config CURRENT CONFIG FILE 2 = variable does not exist CONFIG LOAD PREFERENCE = local first BOOT INTERFACE GATEWAY IP ADDRESS = 10.16.132.254 Reload Mode = normal-reload Dell#
show file-systems
Display information about the file systems on the system.
Syntax
show file-systems
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series
File Management
69
Example
Version
7.5.1.0 E-Series
Description
Introduced on the C-Series Original command
Dell#show file-systems Size(b) Free(b) Feature Type Flags Prefixes 63938560 51646464 dosFs2.0 MMC rw flash: 63938560 18092032 dosFs1.0 MMC rw slot0: - - - network rw ftp: - - - network rw tftp: - - - network rw scp: Dell#
Command Fields
Field
size(b)
Free(b)
Feature Type Flags
Prefixes
Description
Lists the size (in bytes) of the storage location. If the location is remote, no size is listed.
Lists the available size (in bytes) of the storage location. If the location is remote, no size is listed.
Displays the formatted DOS version of the device.
Displays the type of storage. If the location is remote, the word network is listed.
Displays the access available to the storage location. The following letters indicate the level of access:
r = read access w = write access
Displays the name of the storage location.
Related Commands
format flash (S-Series) � Erases all the existing files and reformats the filesystem in the internal flash memory on the S-Series.
show os-version
Display the release and software image version information of the image file specified.
Syntax Parameters
show os-version [file-url]
file-url
(OPTIONAL) Enter the following location keywords and information:
For a file on the internal flash, enter flash:// followed by the filename. For a file on an FTP server, enter ftp://user:password@hostip/
filepath. For a file on a TFTP server, enter tftp://hostip/filepath. For a file on the USB port, enter usbflash://filepath.
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
70
File Management
Usage Information
Version
9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 E-Series
Description
Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Original command.
NOTE: A filepath that contains a dot ( . ) is not supported.
show running-config
Display the current configuration and display changes from the default values.
Syntax Parameters
show running-config [entity] [configured] [status] [compressed]
entity
(OPTIONAL) To display that entity's current (non-default) configuration, enter one of the following keywords:
NOTE: If you did not configure anything that entity, nothing displays and the
prompt returns.
aaa acl arp as-path bfd bgp boot cam-profile class-map communitylist ecmp-group eis ethernet fefd ftp frrp fvrp gvrp
for the current AAA configuration for the current ACL configuration for the current static ARP configuration for the current AS-path configuration for the current BFD configuration for the current BGP configuration for the current boot configuration for the current CAM profile in the configuration for the current class-map configuration for the current community-list configuration
for the current ECMP group configuration for the current EIS configuration for the current Ethernet CFM configuration for the current FEFD configuration for the current FTP configuration for the current FRRP configuration for the current FVRP configuration for the current GVRP configuration
File Management
71
72
File Management
host
hardwaremonitor
hypervisor
igmp
interface
interface port-channel
interface tunnel
ip
isis
line
lldp
load-balance
logging
mac
mac-addresstable
managementeis
managementroute
mld
monitor
mroute
msdp
ntp
ospf
pim
policy-mapinput
policy-mapoutput
po-failovergroup
prefix-list
privilege
qos-policyinput
qos-policyoutput
radius
redirect-list
for the current host configuration for hardware-monitor action-on-error settings
for the current hypervisor configuration for the current IGMP configuration for the current interface configuration for the current port-channel interface configuration. The range is from 1 to 128. for all configured tunnels. For a specific tunnel, enter the tunnel ID. The range is from 1 to 16383. for the current IP configuration for the current ISIS configuration for the current line configuration for the current LLDP configuration for the current port-channel load-balance configuration for the current logging configuration for the current MAC ACL configuration for the current MAC configuration
for the current management EIS configuration
for the current Management port forwarding configuration
for the current MLD configuration for the current Monitor configuration for the current Mroutes configuration for the current MSDP configuration for the current NTP configuration for the current OSPF configuration for the current PIM configuration for the current input policy map configuration
for the current output policy map configuration
for the current port-channel failover-group configuration
for the current prefix-list configuration for the current privilege configuration for the current input QoS policy configuration
for the current output QoS policy configuration
for the current RADIUS configuration for the current redirect-list configuration
redundancy resolve rip rmon route-map sflow snmp spanning-tree static status supportassist tacacs+ tftp trace-group trace-list uplink-stategroup users vlt wred-profile
for the current RPM redundancy configuration for the current DNS configuration for the current RIP configuration for the current RMON configuration for the current route map configuration for the current sFlow configuration for the current SNMP configuration for the current spanning tree configuration for the current static route configuration for the file status information for the current SupportAssist configuration
for the current TACACS+ configuration for the current TFTP configuration for the current trace-group configuration for the current trace-list configuration for the uplink state group configuration
for the current users configuration for the current VLT configuration for the current wred-profile configuration
configured status compressed
(OPTIONAL) Enter the keyword configuration to display line card interfaces with non-default configurations only.
(OPTIONAL) Enter the keyword status to display the checksum for the running configuration and the start-up configuration.
(Optional) Enter the keyword compressed to display the compressed group configuration. Displays the compressed configuration by grouping all similar configurations. The compression is done only for interface related configurations.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.2.(0.0) 9.0.0.0 8.3.19.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Added support for the tunnel and EIS interface types. Added support for the VLT option. Introduced on the S4820T. Introduced on the Z9000.
File Management
73
Example
Example Usage Information
Version
8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0 7.4.1.0
6.5.4.0
Description
Introduced on the S4810. Added the hardware-monitor option. Introduced on the S-Series. Introduced on the C-Series. Expanded to include the last configuration change, start-up last updated (date and time), and who made the change. Added the status option.
Dell# show running-config Current Configuration ... ! Version 9-0(2-0) ! Last configuration change at Thu Apr 18 10:18:39 2013 by admin ! Startup-config last updated at Thu Apr 18 10:18:40 2013 by admin ! boot system stack-unit 1 primary system: A: boot system stack-unit 1 secondary tftp://10.16.127.35/DellSI-9-0-2-0.bin boot system stack-unit 1 default system: A: boot system gateway 10.16.132.254 ! redundancy auto-synchronize full redundancy disable-auto-reboot stack-unit ! redundancy disable-auto-reboot stack-unit 1 redundancy disable-auto-reboot stack-unit 2 redundancy disable-auto-reboot stack-unit 3 redundancy disable-auto-reboot stack-unit 4 redundancy disable-auto-reboot stack-unit 5 redundancy disable-auto-reboot stack-unit 6 ! hardware watchdog stack-unit 1 hardware watchdog stack-unit 2 hardware watchdog stack-unit 3
Dell#show running-config status running-config bytes 10257, checksum 0xFD33339F startup-config bytes 10257, checksum 0xFD33339F The status option allows you to display the size and checksum of the running configuration and the startup configuration.
show startup-config
Display the startup configuration.
Syntax
show startup-config
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2)
Introduced on the S4048-ON. Introduced on the S3048-ON.
74
File Management
Example
Related Commands
Version
9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 7.4.1.0
Description
Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on S-Series Introduced on the C-Series. Expanded to include the last configuration change, start-up last updated (date and time), and who made the change.
Dell#show startup-config ! Version 9-0(2-0) ! Last configuration change at Thu Apr 18 10:18:39 2013 by admin ! Startup-config last updated at Thu Apr 18 10:18:40 2013 by admin ! boot system stack-unit 0 primary system: A: boot system stack-unit 0 secondary tftp://10.16.127.35/DellSI-9-0-2-0.bin boot system stack-unit 0 default system: A: boot system gateway 10.16.132.254 ! redundancy auto-synchronize full redundancy disable-auto-reboot stack-unit ... show running-config � displays the current (running) configuration.
show version
Display the current Dell Networking Operating System (OS) version information on the system.
Syntax
show version
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 7.6.1.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the S-Series Introduced on the C-Series.
File Management
75
Version
E-Series
Description
Original command.
Command Fields
Lines Beginning With
Dell Network...
Dell Operating...
Dell Application...
Copyright (c)...
Build Time...
Build Path...
Dell Networking OS uptime is...
System image...
System Type:
Control Processor:...
128K bytes...
1 Route Processor...
Description
Name of the operating system OS version number Software version
Copyright information Software build's date stamp Location of the software build files loaded on the system Amount of time the system has been up
Image file name S4810, S4820T, Z9000, S6000 Control processor information and amount of memory on processor
Amount and type of memory on system Hardware configuration of the system, including the number and type of physical interfaces available
Example (SSeries)
Dell#show version Dell Real Time Operating System Software Dell Operating System Version: 1.0 Dell Application Software Version: E7-8-1-13 Copyright (c) 1999-2008 by Dell Force10 Networks, Inc. Build Time: Mon Nov 24 18:59:27 2008 Build Path: /sites/sjc/work/sw/build/build2/Release/E7-8-1/SW/SRC Dell uptime is 1 minute(s) System Type: S50V Control Processor: MPC8451E with 252739584 bytes of memory. 32M bytes of boot flash memory.
1 48-port E/FE/GE with POE (SB) 48 GigabitEthernet/IEEE 802.3 interface(s)
4 Ten GigabitEthernet/IEEE 802.3 interface(s) Dell#
Example (S4810)
Dell# Dell#show version Dell Real Time Operating System Software Dell Operating System Version: 1.0 Dell Application Software Version: Z9K-ICC-PRIM-SYNC-8-3-11-173 Copyright (c) 1999-2012 by Dell Inc. All Rights Reserved. Build Time: Mon Jul 16 22:19:01 PDT 2012 Build Path: /local/local/build/build15/8.3.12.0/SW/SRC/Radius Dell uptime is 1 minute(s) System image file is "s4810-14" System Type: S4810 Control Processor: Freescale QorIQ P2020 with 2147483648 bytes of memory. 128M bytes of boot flash memory. 1 52-port GE/TE/FG (SE) 52 Ten GigabitEthernet/IEEE 802.3 interface(s)
76
File Management
Example (S6000)
Dell#S6000#show version Dell Real Time Operating System Software Dell Operating System Version: 2.0 Dell Application Software Version: 9-4(0-119) Copyright (c) 1999-2014 by Dell Inc. All Rights Reserved. Build Time: Tue Mar 18 10:32:02 PDT 2014 Build Path: /work.local/build/buildSpaces/build01/E9-4-0/SW/SRCC Dell Networking OS uptime is 1 day(s), 0 hour(s), 19 minute(s) System image file is "DT-MAA-S6000-16-PI" System Type: S6000 Control Processor: Intel Centerton with 3203911680 bytes of memory, core(s) 2. 16G bytes of boot flash memory. 1 32-port TE/FG (SI) 32 Forty GigabitEthernet/IEEE 802.3 interface(s)
upgrade
Upgrade the bootflash image or system image of the management unit.
Syntax
upgrade boot {all | bootflash--image | bootselector-image} stack-unit {stack-unit-number | all} {booted | flash: | ftp: | nfsmount | scp: | tftp: | usbflash:} file-url
Parameters
boot system ftp:
scp:
slot0:
tftp:
flash:
A: | B: stack-unit: file-url
Enter the keyword boot to change the boot image.
Enter the keyword system to change the system image.
After entering the keyword ftp:, you can either follow it with the location of the source file in this form: //userid:password@hostip/filepath or press Enter to launch a prompt sequence.
After entering the keyword scp:, you can either follow it with the location of the source file in this form: //userid:password@hostip/filepath or press Enter to launch a prompt sequence.
After entering the keyword slot0:, you can either follow it with the location of the source file in this form: //hostlocation/filepath or press Enter to launch a prompt sequence.
After entering the keyword tftp:, you can either follow it with the location of the source file in this form: //hostlocation/filepath or press Enter to launch a prompt sequence.
After entering the keyword flash:, you can either follow it with the location of the source file in this form: flash//filepath or press Enter to launch a prompt sequence.
Enter the partition to upgrade from the flash.
Enter the keywords stack-unit: to synch the image to the stack-unit.
Enter the following location keywords and information to upgrade using an Dell Networking OS image other than the one currently running:
To specify an Dell Networking OS image on the internal flash, enter flash:// file-path/filename.
To specify an Dell Networking OS image on an FTP server, enter ftp:// user:password@hostip/filepath.
To specify an Dell Networking OS image on the external flash, enter slot0:// file-path/filename.
To copy a file on a TFTP server, enter tftp://hostip/filepath/ filename.
File Management
77
where hostip is either an IPv4 dotted decimal address or an IPv6 URI [x:x:x:x::x] format address.
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.0(0.0) 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Added support for IPv6 for the file-url parameter. Introduced on the S4820T. Introduced on the Z9000. Added support for the SSD on the Z9000 only. Introduced on the S4810. Added support for TFTP and SCP. Introduced on the S-Series.
Usage Information
Example
RFC 3986 specifies that IPv6 host addresses in a uniform resource identifier (URI) must be enclosed in square brackets, [X:X:X:X::X]. For maximum flexibility this command accepts IPv6 host addresses with or without the square brackets.
Reload Dell Networking OS after executing this command. To copy Dell Networking OS from the management unit to one or more stack members, use the upgrade system stack-unit (SSeries stack member) command.
Dell# upgrade system ? ftp:Copy from remote file system(ftp://userid:password@hostip/filepath) scp:Copy from remote file system(scp://userid:password@hostip/filepath) tftp:Copy from remote file system(tftp://hostip/filepath) Dell# upgrade system ftp://username:password@10.11.1.1/FTOSSB-7.7.1.0.bin !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Erasing Sseries ImageUpgrade Table of Contents, please wait .................................................. .................................................. .................................................. .................................................. .................................................. .................................................. .................................................. .................................................. .................................................. ....................................! 12946259 bytes successfully copied Dell# reload
upgrade system
Upgrade the Dell Networking OS image. To upgrade the bootflash or bootselector image, use the upgrade boot command.
Syntax Parameters
upgrade system {flash: | ftp: | nfsmount: | scp: | stack-unit {stack-unitid | all} | tftp: | usbflash:} file-url {A: |B:}
system
Enter the keyword system to upgrade the operating system (OS) image.
78
File Management
flash: file-url
Enter the keyword flash: and specify the location of the image file in the format //directory-path or press Enter to launch a prompt sequence.
ftp: file-url
Enter the keyword ftp: and specify the location of the image file in the format // userid:password@host-ip/filepath or press Enter to launch a prompt sequence.
nfsmount:// <mount-point>/ filepath
Enter the keyword nfsmount: and specify the location of the image file in the format //<mount-point>/filepath.
scp: file-url
Enter the keyword scp: and specify the location of the image file in the format userid:password@host-ip/filepath or press Enter to launch a prompt sequence.
stack-unit stack- Enter the keyword stack-unit and specify the stack-unit ID to sync the image
unit-id
to that stack-unit.
stack-unit all
Enter the keyword stack-unit followed by the keyword all to sync the image on all stack-units.
tftp: file-url
Enter the keyword tftp: and specify the location of the image file in the format //host-ip/filepath or press Enter to launch a prompt sequence.
usbflash: file-url
Enter the keyword usbflash: and specify the location of the source file in the format //directory-path to upgrade form an external flash device or press Enter to launch a prompt sequence.
A: | B:
Specify the flash partition of the operating-system image to be upgraded.
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0(0.0) 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Added support for NFS mount. Introduced on the Z9500. Added support for IPv6 for the file-url parameter. Introduced on the S4820T. Introduced on the Z9000. Added support for the SSD on the Z9000 only. Introduced on the S4810. Added support for TFTP and SCP. Introduced on the S-Series.
Usage Information
Example
RFC 3986 specifies that IPv6 host addresses in a uniform resource identifier (URI) must be enclosed in square brackets, [X:X:X:X::X]. For maximum flexibility this command accepts IPv6 host addresses with or without the square brackets.
After you upgrade the system image, by entering the command. specify the location where the Dell Networking OS image used to boot the system is stored (boot system), save the configuration to the start-up config file (write memory), and reload the system (reload).
Dell# upgrade system tftp://10.11.8.12/dv-rainier-13 a: 00:39:32 : Discarded 1 pkts. Expected block num : 51.
File Management
79
Received block num: 50 !00:39:36 : Discarded 1 pkts. Expected block num : 65.
Received block num: 64 !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! ................................................... .................................................... ..................................................... ..................................! 93924044 bytes successfully copied System image upgrade completed successfully. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!! Image upgraded to all
80
File Management
4
Control and Monitoring
This chapter contains the commands to configure and monitor the system, including Telnet, file transfer protocol (FTP), and trivial file transfer protocol (TFTP).
NOTE: This command replaces the enable optic-info-update interval command to update information on temperature and power monitoring in the simple network management protocol (SNMP) management information base (MIB).
Topics:
� asf-mode � banner exec � banner login � banner motd � cam-acl � cam-acl-vlan � clear line � configure � disable � do � enable � enable optic-info-update interval � enable xfp-power-updates � end � exec-timeout � exit � ftp-server enable � ftp-server topdir � ftp-server username � hostname � ip http source-interface � ip http vrf � ip ftp password � ip ftp source-interface � ip ftp username � ip ftp vrf � ip telnet server enable � ip telnet server vrf � ip telnet source-interface � ip telnet vrf � ip tftp source-interface � ip tftp vrf � line � login concurrent-session � login statistics � motd-banner � ping � reload � send � service timestamps � show alarms
Control and Monitoring
81
� show cam-acl-vlan � show command-history � show command-tree � show cpu-traffic-stats � show debugging � show environment � show inventory � show login statistics � show memory � show processes cpu � show processes ipc flow-control � show processes memory � show software ifm � show system � show tech-support � ssh-peer-stack-unit � telnet � telnet-peer-stack-unit � terminal length � traceroute � undebug all � virtual-ip � write
asf-mode
Enable alternate store and forward (ASF) mode and forward packets as soon as a threshold is reached.
Syntax
asf-mode stack-unit {unit-id | all} queue size To return to standard Store and Forward mode, use the no asf-mode command.
Parameters
unit-id queue size
Enter the stack member unit identifier of the stack member to reset. The range is from 1 to 6.
Enter the queue size of the stack member. The range is from 0 to 15.
Defaults
Not configured
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 9.2(1.0) 8.3.19.0 8.3.11.0 8.3.7.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Usage Information
You must save the configuration and reload the system to implement ASF. When you enter the command, the system sends a message stating that the new mode is enabled when the system reloads.
82
Control and Monitoring
banner exec
Configure a message that is displayed when your enter EXEC mode.
Syntax
banner exec c line c To delete a banner, use the no banner exec command.
Parameters
c
line
Enter the keywords banner exec, then enter a character delineator, represented here by the letter c. Press ENTER.
Enter a text string for your banner message ending the message with your delineator. In the following example, the delineator is a percent character (%); the banner message is "testing, testing".
Defaults
No banner is displayed.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 8.1.1.0 7.6.1.0 7.5.1.0 E-Series
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Original Command
Usage Information
Example
After entering the banner login command, type one or more spaces and a delineator character. Enter the banner text then the second delineator character. When the user is connected to the router, if a message of the day banner is configured, it displays first. If no message of the day banner is configured, the login banner and prompt appear. After the user has logged in, the banner EXEC (if configured) displays.
Dell(conf)#banner exec ? LINE c banner-text c, where 'c' is a delimiting character Dell(conf)#banner exec % Enter TEXT message. End with the character '%'. This is the banner% Dell(conf)#end Dell#exit 4d21h5m: %RPM0-P:CP %SEC-5-LOGOUT: Exec session is terminated for user on line console
This is the banner
Dell con0 now available
Press RETURN to get started.
Control and Monitoring
83
Related Commands
4d21h6m: %RPM0-P:CP %SEC-5-LOGIN_SUCCESS: Login successful for user on line console This is the banner Dell> line -- enables and configures the console and virtual terminal lines to the system.
banner login
Set a banner to display when logging on to the system.
Syntax
banner login {keyboard-interactive | no keyboard-interactive} [c line c]
Enter no banner login to delete the banner text. Enter no banner login keyboard-interactive to automatically go to the banner message prompt (does not require a carriage return).
Parameters
keyboardinteractive c
line
Enter the keyword keyboard-interactive to require a carriage return (CR) to get the message banner prompt.
Enter a delineator character to specify the limits of the text banner. The delineator is a percent character (%).
Enter a text string for your text banner message ending the message with your delineator. The delineator is a percent character (%). Range: maximum of 50 lines, up to 255 characters per line
Defaults
No banner is configured and the CR is required when creating a banner.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 8.2.1.0 8.1.1.0 7.6.1.0 7.5.1.0 E-Series
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced the keyword keyboard-interactive. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Original command
Usage Information
After entering the banner login command, type one or more spaces and a delineator character. Enter the banner text then the second delineator character. When the user is connected to the router, if a message of the day banner is configured, it displays first. If no message of the day banner is configured, the login banner and prompt appear. After the user has logged in, the banner EXEC (if configured) displays.
84
Control and Monitoring
Example
Related Commands
Dell(conf)#banner login ? keyboard-interactive Press enter key to get prompt LINE c banner-text c, where 'c' is a delimiting character Dell(conf)#no banner login ? keyboard-interactive Prompt will be displayed by default <cr> Dell(conf)#banner login keyboard-interactive Enter TEXT message. End with the character '%'. This is the banner% Dell(conf)#end Dell#exit 13d21h9m: %RPM0-P:CP %SEC-5-LOGOUT: Exec session is terminated for user on line console This is the banner Dell con0 now available Press RETURN to get started. 13d21h10m: %RPM0-P:CP %SEC-5-LOGIN_SUCCESS: Login successful for user on line console This is the banner Dell>
banner motd -- sets a Message of the Day banner. banner exec -- enables the display of a text string when you enter EXEC mode.
banner motd
Set a message of the day (MOTD) banner.
Syntax
banner motd c line c To delete a Message of the Day banner, enter no banner motd.
Parameters
c
line
Enter a delineator character to specify the limits of the text banner. The delineator is a percent character (%).
Enter a text string for your MOTD banner the message with your delineator. The delineator is a percent character (%).
Defaults
No banner is configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.12.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810.
Control and Monitoring
85
Usage Information
Related Commands
Version
8.3.11.1 8.1.1.0 7.6.1.0 7.5.1.0 E-Series
Description
Introduced on the Z9000. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Original command
After entering the banner login command, type one or more spaces and a delineator character. Enter the banner text then the second delineator character. When the user is connected to the router, if a message of the day banner is configured, it displays first. If no message of the day banner is configured, the login banner and prompt appear. After the user has logged in, the banner EXEC (if configured) displays.
banner exec -- enables the display of a text string when you enter EXEC mode.
banner login -- sets a banner to display after successful login to the system.
cam-acl
Allocate content addressable memory (CAM) for IPv4 and IPv6 ACLs.
Syntax Parameters
cam-acl {default | l2acl number ipv4acl number ipv6acl number ipv4qos number l2qos number l2pt number ipmacacl number [vman-qos | vman-dual-qos] number ecfmacl number {fcoeacl number} {iscsioptacl {0|2}} {openflow {4|8}}
default
Use the default CAM profile settings and set the CAM as follows:
L3 ACL (ipv4acl): 4 L2 ACL(l2acl): 6 IPv6 L3 ACL (ipv6acl): 0 L3 QoS (ipv4qos): 2 L2 QoS (l2qos): 1 OpenFlow: 0 (disabled) FCoE (fcoeacl): 0 (disabled) iSCSI Optimization (iscsioptacl): 0 (disabled)
Allocate space to each CAM region.
Enter the CAM profile name then the amount of CAM space to be allotted. The total space allocated must equal 13. The ipv6acl range must be a factor of 2.
Enter 4 or 8 for the number of OpenFlow FP blocks.
4: Creates 242 entries for use by the OpenFlow controller (256 total entries minus the 14 entries reserved for internal functionality)
8: Creates 498 entries for use by the OpenFlow controller (512 total entries minus the 14 entries reserved for internal functionality)
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON.
86
Control and Monitoring
Usage Information
Version
9.0.2.0 9.2(0.2) 9.1.(0.0) 8.3.19.0 8.3.12.0 8.3.11.1 8.3.1.0 8.2.1.0 7.8.1.0
Description
Introduced on the S6000. Added support for the fcoe parameter on the S4810 and S4820T. Added support for OpenFlow on the Z9000. Introduced on the S4820T. Added the keywords fcoeacl and iscsioptacl on the S4810. Introduced on the Z9000. Added the keywords ecfmacl, vman-qos, and vman-dual-qos. Introduced on the S-Series. Introduced on the C-Series.
For the new settings to take effect, save the new CAM settings to the startup-config (write-mem or copy run start) then reload the system.
The total amount of space allowed is 16 FP Blocks. System flow requires three blocks and these blocks cannot be reallocated. The ipv4acl profile range is from 1 to 4.
When configuring space for IPv6 ACLs, the total number of Blocks must equal 13.
Ranges for the CAM profiles are from 1 to 10, except for the ipv6acl profile which is from 0 to 10. The ipv6acl allocation must be a factor of 2 (2, 4, 6, 8, 10).
If you enabled BMP, to perform a reload on the chassis to upgrade any configuration changes that have changed the NVRAM content, use the reload conditional nvram-cfg-change command.
cam-acl-vlan
Specify the number of VFP blocks allocated to OpenFlow.
Syntax
cam-acl-vlan vlanopenflow {0|1}
Defaults Parameters
Disabled. vlanopenflow
Enter the number 1 to allocate VFP blocks and enable OpenFlow. (Default) Enter the number 0 to disable OpenFlow.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.1.(0.0) 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on S4810. Introduced on the S4820T.
Usage Information
Reboot the switch after changing the parameter values for changes to take effect.
For platform-specific instructions about using this command, refer to the SDN chapter in the Dell Networking OS Configuration Guide.
Control and Monitoring
87
clear line
Reset a terminal line.
Syntax Parameters
clear line {line-number | console 0 | vty number}
line-number
aux 0 console 0 vty number
Enter a number for one of the 12 terminal lines on the system. The range is from 0 to 11.
Enter the keywords aux 0 to reset the auxiliary port.
Enter the keywords console 0 to reset the console port.
Enter the keyword vty then a number to clear a terminal line. The range is from 0 to 9.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 E-Series
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Original command.
configure
Enter CONFIGURATION mode from EXEC Privilege mode.
Syntax Parameters
configure [terminal]
terminal
(OPTIONAL) Enter the keyword terminal to specify that you are configuring from the terminal.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
88
Control and Monitoring
Example
Version
9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 8.1.1.0 7.6.1.0 7.5.1.0 E-Series
Description
Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Original command.
Dell#configure Dell(conf)#
disable
Return to EXEC mode.
Syntax Parameters
disable [level]
level
(OPTIONAL) Enter a number for a privilege level of the Dell Networking OS. The range is from 0 to 15. The default is 1.
Defaults
1
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 E-Series
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Original command.
Control and Monitoring
89
do
Allows the execution of most EXEC-level commands from all CONFIGURATION levels without returning to the EXEC level.
Syntax Parameters
do command command
Enter an EXEC-level command.
Defaults
none
Command Modes CONFIGURATION INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 8.1.1.0 7.6.1.0 7.5.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Example
The following commands are not supported by the do command: enable disable exit config
Dell(conf-if-te-5/1)#do clear counters Clear counters on all interfaces [confirm] Dell(conf-if-te-5/1)# Dell(conf-if-te-5/1)#do clear logging Clear logging buffer [confirm] Dell(conf-if-te-5/1)# Dell(conf-if-te-5/1)#do reload System configuration has been modified. Save? [yes/no]: n Proceed with reload [confirm yes/no]: n
enable
Enter EXEC Privilege mode or any other privilege level configured. After entering this command, you may need to enter a password.
Syntax
enable [level]
90
Control and Monitoring
Parameters
level
(OPTIONAL) Enter a number for a privilege level of Dell Networking OS. The range is from 0 to 15.
Defaults
15
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 8.1.1.0 7.6.1.0 7.5.1.0 E-Series
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Added support for roles on the Z9000, S6000, S4820T, S4810, and MXL. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Original command.
Usage Information
Users entering EXEC Privilege mode or any other configured privilege level can access configuration commands. To protect against unauthorized access, use the enable password command to configure a password for the enable command at a specific privilege level. If no privilege level is specified, the default is privilege level 15.
NOTE: If you are authorized for the EXEC Privilege mode by your role, you do not need to enter an
enable password.
Related Commands
enable password -- configures a password for the enable command and to access a privilege level.
enable optic-info-update interval
Enable polling intervals of optical information updates for simple network management protocol (SNMP).
Syntax
enable optical-info-update interval seconds
To disable optical power information updates, use the no enable optical-info-update interval command.
Parameters
interval seconds Enter the keyword interval then the polling interval in seconds. The range is from 120 to 6000 seconds. The default is 300 seconds (5 minutes).
Defaults
Disabled
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Control and Monitoring
91
Usage Information
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.0.2.0 8.3.19.0
8.3.11.4
8.3.10.0
Introduced on the S4048-ON.
Introduced on the S3048-ON.
Introduced on the Z9500.
Introduced on the S6000.
Replacement command for the S4820T. Replaces the enable xfp-powerupdates command.
Replacement command for the Z9000. Replaces the enable xfp-powerupdates command
Replacement command for the S4810 only. Replaces the enable xfp-powerupdates command.
To enable polling and to configure the polling frequency, use this command.
enable xfp-power-updates
Enable 10�gigabit small form-factor pluggable (XFP) power updates for SNMP.
Syntax Parameters
enable xfp-power-updates interval seconds
interval seconds Enter the keyword interval then the polling interval in seconds. The range is from 120 to 6000 seconds. Default: 300 seconds (5 minutes).
Defaults
Disabled
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
8.3.19.0
8.3.11.4
8.3.10.0
8.1.1.0 7.6.1.0 7.5.1.0
Deprecated command for S4820T. Replaced by the enable optic-infoupdate interval command to update information on temperature and power monitoring in the SNMP MIB.
Deprecated command for Z9000. Replaced by the enable optic-infoupdate interval command to update information on temperature and power monitoring in the SNMP MIB.
Deprecated command for the S4810 only. Replaced by the enable opticinfo-update interval command to update information on temperature and power monitoring in the SNMP MIB.
Introduced on the E-Series ExaScale.
Introduced on the S-Series.
Introduced on the C-Series and E-Series.
Usage Information
The chassis MIB contains the entry chSysXfpRecvPower in the chSysPortTable table. Periodically, IFA polls the XFP power for each of the ports and sends the values to IFM where it is cached.
To enable polling and to configure the polling frequency, use this command.
92
Control and Monitoring
end
Return to EXEC Privilege mode from other command modes (for example, CONFIGURATION or ROUTER OSPF modes).
Syntax
end
Command Modes CONFIGURATION SPANNING TREE MULTIPLE SPANNING TREE LINE INTERFACE TRACE-LIST VRRP ACCESS-LIST PREFIX-LIST AS-PATH ACL COMMUNITY-LIST ROUTER OSPF ROUTER RIP ROUTER ISIS ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 8.1.1.0 7.6.1.0 7.5.1.0 E-Series
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series and E-Series. Original command.
Related Commands
exit -- returns to the lower command mode.
exec-timeout
Set a time interval that the system waits for input on a line before disconnecting the session.
Syntax
exec-timeout minutes [seconds] To return to default settings, use the no exec-timeout command.
Control and Monitoring
93
Parameters
minutes seconds
Enter the number of minutes of inactivity on the system before disconnecting the current session. The range is from 0 to 35791. The default is 10 minutes for the console line and 30 minutes for the VTY line.
(OPTIONAL) Enter the number of seconds. The range is from 0 to 2147483. The default is 0 seconds.
Defaults
10 minutes for console line; 30 minutes for VTY lines; 0 seconds
Command Modes LINE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 7.6.1.0 7.5.1.0 E-Series
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the S-Series. Introduced on the C-Series. Original command.
Usage Information
Example
To remove the time interval, enter exec-timeout 0 0. Dell con0 is now available Press RETURN to get started. Dell>
exit
Return to the lower command mode.
Syntax
exit
Command Modes EXEC Privilege CONFIGURATION LINE, INTERFACE TRACE-LIST PROTOCOL GVRP SPANNING TREE MULTIPLE SPANNING TREE MAC ACCESS LIST ACCESS-LIST AS-PATH ACL COMMUNITY-LIST PREFIX-LIST
94
Control and Monitoring
Command History
Related Commands
ROUTER OSPF ROUTER RIP ROUTER ISIS ROUTER BGP
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 8.1.1.0 7.6.1.0 7.5.1.0 E-Series
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Original command.
end -- returns to EXEC Privilege mode.
ftp-server enable
Enable FTP server functions on the system.
Syntax
ftp-server [vrf vrf-name] enable
Defaults
Disabled
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 8.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series ExaScale.
Control and Monitoring
95
Example
Version
7.6.1.0 7.5.1.0 E-Series
Description
Introduced on the S-Series. Introduced on the C-Series. Original command.
morpheus% ftp 10.31.1.111
Connected to 10.31.1.111.
220 Dell (1.0) FTP server ready
Name (10.31.1.111:dch): dch
331 Password required
Password:
230 User logged in
ftp> pwd
257 Current directory is "flash:"
ftp> dir
200 Port set okay
150 Opening ASCII mode data connection
size date
time name
-------- ------ ------ --------
512 Jul-20-2004 18:15:00 tgtimg
512 Jul-20-2004 18:15:00 diagnostic
512 Jul-20-2004 18:15:00 other
512 Jul-20-2004 18:15:00 tgt
226 Transfer complete
329 bytes received in 0.018 seconds (17.95 Kbytes/s)
ftp>
ftp-server topdir
Specify the top-level directory to be accessed when an incoming FTP connection request is made.
Syntax Parameters
ftp-server topdir directory
directory
Enter the directory path.
Defaults
The internal flash is the default directory.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1 8.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series ExaScale.
96
Control and Monitoring
Usage Information
Related Commands
Version
7.6.1.0 7.5.1.0 E-Series
Description
Introduced on the S-Series. Introduced on the C-Series. Original command.
After you enable FTP server functions with the ftp-server enable command, Dell Networking recommends specifying a top-level directory path. Without a top-level directory path specified, the Dell Networking OS directs users to the flash directory when logging in to the FTP server.
ftp-server enable -- enables FTP server functions on the E-Series.
ftp-server username -- sets a username and password for incoming FTP connections to the E-Series.
ftp-server username
Create a user name and associated password for incoming FTP server sessions.
Syntax
ftp-server username username password [encryption-type] password To delete a user name and its password, use the no ftp-server username username command.
Parameters
username
password password
encryption-type
Enter a text string up to 40 characters long as the user name.
Enter the keyword password then a string up to 40 characters long as the password. Without specifying an encryption type, the password is unencrypted.
(OPTIONAL) After the keyword password, enter one of the following numbers:
0 (zero) for an unecrypted (clear text) password 7 (seven) for a hidden text password
Defaults
Not enabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1 8.1.1.0 7.6.1.0 7.5.1.0 E-Series
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Original command.
Control and Monitoring
97
hostname
Set the host name of the system.
Syntax Parameters
hostname name name
Enter a text string, up to 32 characters long.
Defaults
Dell
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 8.1.1.0 7.6.1.0 7.5.1.0 E-Series
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Original command.
Usage Information
The hostname is used in the prompt.
ip http source-interface
Specify an interface as the source interface for HTTP connections. This feature is supported on platform.
Syntax
ip http source-interface interface To delete an interface, use theno ip http source-interface interface command.
Parameters
interface
Enter the following keywords and slot/port or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For a port channel interface, enter the keywords port-channel then a number.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
98
Control and Monitoring
Defaults
The IP address on the system that is closest to the Telnet address is used in the outgoing packets.
Command Modes CONFIGURATION
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000-ON.
9.3(0.1)
Introduced on the S4810, S4820T, S6000, and Z9000.
8.3.11.1
Introduced on the Z9000
8.2.1.0
Increased number of VLANs on ExaScale to 4094 (was 2094)
8.1.1.0
Introduced on E-Series ExaScale
7.6.1.0
Support added for S-Series
7.5.1.0
Introduced on C-Series
Related Commands
ip ftp source interface Configuring source interface for ftp communications.
ip http vrf
Configure an HTTP client with a VRF used to connect to the HTTP server.
Syntax Parameters
ip http vrf {management | vrf-name} To undo the HTTP client configuration, use the ip http vrf command.
management vrf-name
Enter the keyword management for configuring the management VRF that uses an HTTP client.
Enter a VRF name that the HTTP client uses. If you do not specify a VRF name, the HTTP client uses the default VRF.
Defaults
Disabled
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.8(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4810, S4820T, S5000, S6000, S6000�ON, and Z9500.
Usage Information
To make the HTTP clients VRF-aware, use the ip http vrf command. The HTTP client uses the VRF name that you specify to reach the HTTP server. If you do not specify a VRF name, the HTTP client uses the default VRF.
Control and Monitoring
99
ip ftp password
Specify a password for outgoing FTP connections.
Syntax
ip ftp password [encryption-type] password
To remove a password and return to the default setting, use the no ip ftp password [password] command.
Parameters
encryption-type
(OPTIONAL) Enter one of the following numbers:
0 (zero) for an unecrypted (clear text) password 7 (seven) for a hidden text password
password
Enter a string up to 40 characters as the password.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 8.1.1.0 7.6.1.0 7.5.1.0 E-Series
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Original command.
Usage Information
Related Commands
The password is listed in the configuration file; you can view the password by entering the show running-config ftp command. Use the ip ftp password command when you use the ftp: parameter in the copy command.
ip ftp username -- sets the user name for the FTP sessions.
ip ftp source-interface
Specify an interface's IP address as the source IP address for FTP connections.
Syntax
ip ftp source-interface interface To delete an interface, use the no ip ftp source-interface interface command.
Parameters
interface
Enter the following keywords and slot/port[/subport] or number information:
100 Control and Monitoring
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
For a tunnel interface, enter the keyword tunnel.
Defaults
The IP address on the system that is closest to the Telnet address is used in the outgoing packets.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.5.1.0 8.2.1.0 8.1.1.0 7.6.1.0 7.5.1.0 E-Series
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for 4-port 40G line cards on ExaScale. Increased number of VLANs on ExaScale to 4094 (was 2094). Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Original command.
ip ftp username
Assign a user name for outgoing FTP connection requests.
Syntax
ip ftp username username To return to anonymous FTP connections, use the no ip ftp username [username] command.
Parameters
username
Enter a text string as the user name up to 40 characters long.
Defaults
No user name is configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Control and Monitoring 101
Usage Information
Related Commands
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 8.1.1.0 7.6.1.0 7.5.1.0 E-Series
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Original command.
Configure a password with the ip ftp password command.
ip ftp password -- sets the password for FTP connections.
ip ftp vrf
Configures an FTP client with a VRF that is used to connect to the FTP server.
Syntax
ip ftp [vrf vrf-name] To undo the FTP client configuration, use the ip ftp [vrf vrf-name] command.
Parameters
vrf vrf-name
Enter the keyword vrf and then the name of the VRF to specify the VRF that is used by the FTP client.
Defaults
Disabled
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.0) 9.4(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S-Series and Z9000.
Usage Information
Use this command to make the FTP clients VRF-aware. The VRF name that you specify is used by the FTP client to reach the FTP server. If no VRF name is specified, then the default VRF is used.
102 Control and Monitoring
ip telnet server enable
Enable the Telnet server on the switch.
Syntax
ip telnet server enable To disable the Telnet server, use the no ip telnet server enable command.
Defaults
Enabled
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.11.1 8.1.1.0 7.6.1.0 7.5.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Related Commands
ip ssh server -- enables the secure shell (SSH) server on the system.
ip telnet server vrf
Configures the TELNET server on either a specific VRF or a management VRF.
Syntax Parameters
ip telnet server vrf {management | vrf-name}
To undo the TELNET server configuration, use the no ip telnet server [vrf vrf-name] command.
vrf management vrf vrf-name
Enter the keyword vrf followed by the keyword management to specify a management VRF that is used by the TELNET server.
Enter the keyword vrf and then the name of the VRF to specify the VRF that is used by the TELNET server.
Defaults
Disabled
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Control and Monitoring 103
Usage Information
Example
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.0) 9.4.(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S-Series and Z9000.
You can enable the TELNET server on either a management VRF or a user-defined VRF but not both. If you do not specify a VRF name, then the TELNET server is enabled on the default VRF.
Dell(conf)#ip telnet server vrf vrf1 Dell(conf)#no ip telnet server vrf Dell(conf)#ip telnet server vrf management Dell(conf)#no ip telnet server vrf
ip telnet source-interface
Set an interface's IP address as the source address in outgoing packets for Telnet sessions.
Syntax
ip telnet source-interface interface
To return to the default setting, use the no ip telnet source-interface [interface] command.
Parameters
interface
Enter the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For Loopback interfaces, enter the keyword loopback then a number from zero (0) to 16383.
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For VLAN interface, enter the keyword vlan then a number from 1 to 4094. For a tunnel interface, enter the keyword tunnel.
Defaults
The IP address on the system that is closest to the Telnet address is used in the outgoing packets.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000.
104 Control and Monitoring
Related Commands
Version
8.3.7.0 8.5.1.0 8.2.1.0 8.1.1.0 7.6.1.0 7.5.1.0 E-Series
Description
Introduced on the S4810. Added support for 4-port 40G line cards on ExaScale. Increased number of VLANs on ExaScale to 4094 (was 2094). Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Original command
telnet -- telnet to another device.
ip telnet vrf
Configures a TELNET client to use a specific VRF.
Syntax Parameters
ip telnet [vrf vrf-name] To undo the TELENT client configuration, use the ip telnet [vrf vrf-name] command.
vrf vrf-name
Enter the keyword vrf and then the name of the VRF to specify the VRF that is used by the TELENT client.
Defaults
Disabled
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant FTOS Command Line Reference Guide.
The following is a list of the FTOS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.0) 9.4.(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S-Series and Z9000.
Usage Information
Example
If you configure a TELNET client to use a specific VRF, then you need not explicitly specify the same VRF during the TELNET client sessions corresponding to that VRF.
Dell(conf)#ip telnet vrf vrf1 Dell(conf)#do telnet 10.10.10.2 Dell(conf)#no ip telnet vrf vrf1
ip tftp source-interface
Assign an interface's IP address in outgoing packets for TFTP traffic.
Syntax
ip tftp source-interface interface
Control and Monitoring 105
Parameters
To return to the default setting, use the no ip tftp source-interface interface command.
interface
Enter the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Defaults
The IP address on the system that is closest to the Telnet address is used in the outgoing packets.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.7.0 8.5.1.0 8.2.1.0 8.1.1.0 7.6.1.0 7.5.1.0 E-Series
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4820T. Added support for 4-port 40G line cards on ExaScale. Increased number of VLANs on ExaScale to 4094 (was 2094). Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Original command
ip tftp vrf
Configures an TFTP client with a VRF that is used to connect to the TFTP server.
Syntax
ip tftp [vrf vrf-name] To undo the TFTP client configuration, use the no ip tftp [vrf vrf-name] command.
Parameters
vrf vrf-name
Enter the keyword vrf and then the name of the VRF to specify the VRF that is used by the TFTP client.
Defaults
Disabled
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
106 Control and Monitoring
Usage Information
Related Commands
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.0) 9.4.(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S-Series and Z9000.
Use this command to make the TFTP clients VRF aware. The VRF name that you specify is used by the TFTP client to reach the TFTP server. If no VRF is specified, then the default VRF is used.
ftp-server topdir -- sets the directory to be used for incoming FTP connections. ftp-server username -- sets a username and password for incoming FTP connections.
line
Enable and configure console and virtual terminal lines to the system. This command accesses LINE mode, where you can set the access conditions for the designated line.
Syntax Parameters
line {aux 0 |console 0 | vty number [end-number]}
aux 0 console 0
vty number end-number
Enter the keyword aux 0 to configure the auxiliary terminal connection.
Enter the keyword console 0 to configure the console port. The console option for the S-Series is <0-0>.
Enter the keyword vty then a number from 0 to 9 to configure a virtual terminal line for remote sessions. The system supports 10 remote sessions.
(OPTIONAL) Enter a number from 1 to 9 as the last virtual terminal line to configure. You can configure multiple lines at one time.
Defaults
Not configured
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 8.1.1.0 7.6.1.0 7.5.1.0 E-Series
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Original command
Control and Monitoring 107
Usage Information
Related Commands
You cannot delete a terminal connection.
access-class -- restricts the incoming connections to a particular IP address in an IP access control list (ACL). password -- specifies a password for users on terminal lines.
login concurrent-session
Configures the limit of concurrent sessions for all users on console and virtual terminal lines.
Syntax
login concurrent-session {limit number-of-sessions | clear--line enable} no login concurrent-session {limit number-of-sessions | clear--line enable}
Parameters
limit number-ofsessions
Sets the number of concurrent sessions that any user can have on console and virtual terminal lines. The range is from 1 to 12 (10 VTY lines, one console, and one AUX line).
clear-line enable Enables you to clear your existing sessions.
Defaults
Not configured. You can use all the available sessions.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.8(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4810, S4820, S5000, S6000, S6000-ON, and Z9500.
Usage Information
Example
You must have either the System Administrator or Security Administrator privileges to configure login concurrent-session limit or to enable clear-line.
To limit the number of concurrent sessions that any user can have on console, auxiliary, and virtual terminal lines, use the login concurrent-session limit number-of-sessions command.
If the login concurrent-session clear-line enable command is configured, you are provided with an option to clear any of your existing sessions after a successful login authentication. When you reach the maximum concurrent session limit, you can still log in by clearing any of your existing sessions.
The following example shows how to limit the number of concurrent sessions that any user can have to four:
Dell(conf)#login concurrent-session limit 4 Dell(conf)#
The following example shows how to use the login concurrent-session clear-line enable command.
Dell(conf)#login concurrent-session clear-line enable Dell(conf)#
108 Control and Monitoring
Related Commands
When you try to log in, the following message appears with all your existing concurrent sessions, providing an option to close any one of the existing sessions:
$ telnet 10.11.178.14
Trying 10.11.178.14...
Connected to 10.11.178.14.
Escape character is '^]'.
Login: admin
Password:
Current sessions for user admin:
Line
Location
2 vty 0
10.14.1.97
3 vty 1
10.14.1.97
Clear existing session? [line number/Enter to cancel]:
When you try to create more than the permitted number of sessions, the following message appears, prompting you to close one of your existing sessions. Close any of your existing sessions to log in to the system.
$ telnet 10.11.178.14
Trying 10.11.178.14...
Connected to 10.11.178.14.
Escape character is '^]'.
Login: admin
Password:
Maximum concurrent sessions for the user reached.
Current sessions for user admin:
Line
Location
2 vty 0
10.14.1.97
3 vty 1
10.14.1.97
4 vty 2
10.14.1.97
5 vty 3
10.14.1.97
Clear existing session? [line number/Enter to cancel]:
login statistics -- Enable and configure user login statistics on console and virtual terminal lines.
show login statistics -- Displays login statistics of users who have used the console or virtual terminal lines to log in to the system.
login statistics
Enable and configure user login statistics on console and virtual terminal lines.
Syntax
login statistics {enable | time-period days} no login statistics {enable | time-period days}
Parameters
enable
Enables user login statistics. By default, the system displays the login statistics for the last 30 days.
time-period days Sets the number of days for which the system stores the user login statistics. The range is from 1 to 30.
Defaults
Not configured
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
Control and Monitoring 109
Usage Information Example
Related Commands
Version
9.8(0.0P2) 9.8(0.0)
Description
Introduced on the S3048-ON. Introduced on the S4810, S4820, S5000, S6000, S6000-ON, and Z9500.
Only the system and security administrators can configure login activity tracking and view the login activity details of other users.
If you enable user login statistics, the system displays the last successful login details of the current user and the details of any failed login attempts by others.
If you use the login statistics time-period days command to set a custom time period, the system only reports the login statistics during that interval.
NOTE: Login statistics is not applicable for login sessions that do not use user names for authentication. For example, the system does not report login activity for a telnet session that prompts only a password field.
When you log into the system, it displays a message similar to the following:
$ telnet 10.11.178.14 Trying 10.11.178.14... Connected to 10.11.178.14. Escape character is '^]'. Login: admin Password: Last successful login: Mon Feb 16 04:36:11 2015 Line vty0 ( 10.14.1.97 ). There were 2 unsuccessful login attempt(s) since the last successful login. There were 3 unsuccessful login attempt(s) for user admin in last 30 day(s).
The preceding message shows that the user had previously logged in to the system using the VTY line from 10.14.1.97. It also displays the number of unsuccessful login attempts since the last login and the number of unsuccessful login attempts in the last 30 days.
$ telnet 10.11.178.14 Trying 10.11.178.14... Connected to 10.11.178.14. Escape character is '^]'. Login: admin Password: Last successful login: Wed Feb 5 14:05:28 IST 2015 on console There were 2 unsuccessful login attempt(s) since the last successful login. There were 3 unsuccessful login attempt(s) for user admin in last 12 day(s).
The preceding message shows that the user had previously logged in to the system using the console line. It also displays the number of unsuccessful login attempts since the last login and the number of unsuccessful login attempts during a custom time period.
login concurrent-session -- Configures the limit of concurrent sessions for all users on console and virtual terminal lines. show login statistics -- Displays login statistics of users who have used the console or virtual terminal lines to log in to the system.
motd-banner
Enable a message of the day (MOTD) banner to appear when you log in to the system.
Syntax
motd-banner To disable the MOTD banner, use the no motd-banner command.
110 Control and Monitoring
Defaults
Enabled on all lines.
Command Modes LINE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1 8.1.1.0 7.6.1.0 7.5.1.0 E-Series
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series ExaScale Introduced on the S-Series. Introduced on the C-Series. Original command
ping
Test connectivity between the system and another device by sending echo requests and waiting for replies.
Syntax Parameters
ping [host | ip-address | ipv6-address] [count {number | continuous}] [datagram-size] [timeout] [source (ip src-ipv4-address) | interface] [tos] [df-bit (y|n)] [validate-reply(y|n)] [outgoing-interface] [pattern pattern] [sweep-min-size] [sweep-max-size] [sweep-interval] [ointerface (ip srcipv4-address) | interface]
host ip-address ipv6-address
(OPTIONAL) Enter the host name of the devices to which you are testing connectivity.
(OPTIONAL) Enter the IPv4 address of the device to which you are testing connectivity. The address must be in the dotted decimal format.
(OPTIONAL) Enter the IPv6 address, in the x:x:x:x::x format, to which you are testing connectivity.
NOTE: The :: notation specifies successive hexadecimal fields of zeros.
count
datagram size timeout source
Enter the number of echo packets to be sent. The default is 5.
number: from 1 to 2147483647 continuous: transmit echo request continuously
Enter the ICMP datagram size. The range is from 36 to 15360 bytes. The default is 100.
Enter the interval to wait for an echo reply before timing out. The range is from 0 to 3600 seconds. The default is 2 seconds.
Enter the IPv4 or IPv6 source ip address or the source interface. For IPv6 addresses, you may enter global addresses only. Enter the IP address in A.B.C.D format.
Control and Monitoring
111
tos df-bit
validate-reply
outgoinginterface pattern pattern sweep-min-size sweep-max-size sweep-interval interface
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094. For a Tunnel interface, enter the keyword tunnel then a number from 1 to
16383.
(IPv4 only) Enter the type of service required. The range is from 0 to 255. The default is 0.
(IPv4 only) Enter Y or N for the "don't fragment" bit in IPv4 header.
N: Do not set the "don't fragment" bit. Y: Do set "don't fragment" bit
Default is No.
(IPv4 only) Enter Y or N for reply validation.
N: Do not validate reply data. Y: Do validate reply data.
Default is No.
(IPv6 link-local address) Enter the outgoing interface for ping packets to a destination link-local address.
(IPv4 only) Enter the IPv4 data pattern. Range: 0-FFFF. Default: 0xABCD.
Enter the minimum size of datagram in sweep range. The range is from 52 to 15359 bytes.
Enter the maximum size of datagram in sweep range. The range is from 53 to 15359 bytes.
Enter the incremental value for sweep size. The range is from 1 to 15308 seconds.
(IPv4 only) Enter the outgoing interface for multicast packets. Enter the IP address in A.B.C.D format.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0)P5 9.8(0.0)P2 9.2(1.0)
Introduced on the S4048�ON. Introduced on the S3048�ON. Introduced on the Z9500.
112 Control and Monitoring
Usage Information
Example (IPv4)
Version
9.0.2.0 9.0.0.0 8.3.19.0
8.3.12.0
8.3.11.1 8.3.7.0 8.5.1.0 8.4.1.0 8.3.1.0 8.2.1.0 8.1.1.0 7.9.1.0 7.6.1.0 7.5.1.0 7.4.1.0
Description
Introduced on the S6000. Introduced on the Z9000.
Introduced on the S4820T. Added support for the outgoing-interface option for link-local IPv6 addressing on the S4820T. Added support for the outgoing-interface option for link-local IPv6 addressing on the S4810. Introduced on the Z9000. Introduced on the S4810. Added support for 4-port 40G line cards on the ExaScale. IPv6 pinging available on management interface. Introduced extended ping options. Introduced on the E-Series ExaScale (IPv6). Introduced on the E-Series ExaScale (IPv4). Introduced VRF. Introduced on the S-Series. Introduced on the C-Series. Added support for IPv6 address on the E-Series.
When you enter the ping command without specifying an IP/IPv6 address (Extended Ping), you are prompted for a target IP/IPv6 address, a repeat count, a datagram size (up to 1500 bytes), a timeout (in seconds), and for Extended Commands.
The following table provides descriptions for the ping command status response symbols displayed in the output.
Symbol
Description
!
Each exclamation point indicates receipt of a reply.
.
Each period indicates the network server timed out while waiting for a reply.
U
A destination unreachable error PDU was received.
Q
Source quench (destination too busy).
M
Could not fragment.
?
Unknown packet type.
&
Packet lifetime exceeded.
Dell#ping 172.31.1.255 Type Ctrl-C to abort. Sending 5, 100-byte ICMP Echos to 172.31.1.255, timeout is 2 seconds: Reply to request 1 from 172.31.1.208 0 ms Reply to request 1 from 172.31.1.216 0 ms Reply to request 1 from 172.31.1.205 16 ms :: Reply to request 5 from 172.31.1.209 0 ms Reply to request 5 from 172.31.1.66 0 ms Reply to request 5 from 172.31.1.87 0 ms Dell#
Control and Monitoring 113
Example (IPv6)
Dell#ping 100::1 Type Ctrl-C to abort. Sending 5, 100-byte ICMP Echos to 100::1, timeout is 2 seconds: !!!!! Success rate is 100.0 percent (5/5), round-trip min/avg/max = 0/0/0 (ms) Dell#
reload
Reboot Dell Networking Operating System (OS).
Syntax Parameters
reload [conditional nvram-cfg-change]
conditional nvram-cfgchange
Reload if the condition is true. A configuration change to the nvram requires a switch reload. To reload the switch, select nvram-cfg-change.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 9.1(0.0) 8.3.19.0 8.3.11.1 7.6.1.0 7.5.1.0 E-Series
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Added `conditional' parameter. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S-Series. Introduced on the C-Series. Original command.
Usage Information
If there is a change in the configuration, the system prompts you to save the new configuration. Or you can save your running configuration with the copy running-config command. Use the conditional parameter if any configuration changes made to the nvram, such as stack-group and fanout configurations, must be saved.
send
Send messages to one or all terminal line users.
Syntax Parameters
send [*] | [line ] | [console] | [vty]
*
Enter the asterisk character * to send a message to all tty lines.
line
Send a message to a specific line. The range is from 0 to 11.
114 Control and Monitoring
console vty
Enter the keyword console to send a message to the primary terminal line. Enter the keyword vty to send a message to the virtual terminal.
Defaults
none
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1 8.1.1.0 7.6.1.0 7.5.1.0 6.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Messages can contain an unlimited number of lines; however, each line is limited to 255 characters. To move to the next line, use <CR>. To send the message use CTR-Z; to abort a message, use CTR-C.
service timestamps
To debug and log messages, add time stamps. This command adds either the uptime or the current time and date.
Syntax
service timestamps [debug | log] [datetime [localtime] [msec] [showtimezone] | uptime]
To disable timestamping, use the no service timestamps [debug | log] command.
Parameters
debug log datetime localtime msec show-timezone uptime
(OPTIONAL) Enter the keyword debug to add timestamps to debug messages.
(OPTIONAL) Enter the keyword log to add timestamps to log messages with severity from 0 to 6.
(OPTIONAL) Enter the keyword datetime to have the current time and date added to the message.
(OPTIONAL) Enter the keyword localtime to include the localtime in the timestamp.
(OPTIONAL) Enter the keyword msec to include milliseconds in the timestamp.
(OPTIONAL) Enter the keyword show-timezone to include the time zone information in the timestamp.
(OPTIONAL) Enter the keyword uptime to have the timestamp based on time elapsed since system reboot.
Control and Monitoring 115
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1 8.1.1.0 7.6.1.0 7.5.1.0 E-Series
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Original command.
Usage Information
If you do not specify parameters and enter service timestamps, it appears as service timestamps debug uptime in the running-configuration.
To view the current options set for the service timestamps command, use the show runningconfig command.
show alarms
View alarms currently active in the system.
Syntax Parameters
show alarms [threshold]
threshold
(OPTIONAL) Enter the keyword threshold to display the temperature thresholds in Celcuis for each level.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000.
116 Control and Monitoring
Example
Version
9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1 8.1.1.0 7.6.1.0 7.5.1.0 E-Series
Description
Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Original command.
Dell# show alarms -- Minor Alarms -Alarm Type Duration ---------------------------------------------RPM 0 PEM A failed or rmvd 7 hr, 37 min SFM 0 PEM A failed or rmvd 7 hr, 37 min SFM 1 PEM A failed or rmvd 7 hr, 37 min SFM 2 PEM A failed or rmvd 7 hr, 37 min SFM 3 PEM A failed or rmvd 7 hr, 37 min SFM 4 PEM A failed or rmvd 7 hr, 37 min SFM 5 PEM A failed or rmvd 7 hr, 37 min SFM 6 PEM A failed or rmvd 7 hr, 37 min SFM 7 PEM A failed or rmvd 7 hr, 36 min stack-unit 1 PEM A failed or rmvd 7 hr, 36 min stack-unit 4 PEM A failed or rmvd 7 hr, 36 min only 8 SFMs in chassis 7 hr, 35 min -- Major Alarms -Alarm Type Duration ---------------------------------------------No major alarms Dell#
show cam-acl-vlan
Display the block sizes allocated for the VLAN CAM ACL.
Syntax
show cam-acl-vlan
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
Version 9.1.(0.0) Introduced on S4810.
Version 8.3.19.0 Introduced on the S4820T.
Control and Monitoring 117
show command-history
Display a buffered log of all commands all users enter along with a time stamp.
Syntax
show command-history
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 8.3.19.0 8.3.12.0 8.3.11.1 8.1.1.0 7.6.1.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series and E-Series.
Usage Information
Example
One trace log message is generated for each command. No password information is saved to this file. A command-history trace log is saved to a file after failover. Dell Networking TAC analyzes this file to help identify the root cause of it.
Dell#show command-history [11/20 15:47:22]: CMD-(CLI):[service password-encryption]by default from console [11/20 15:47:22]: CMD-(CLI):[service password-encryption hostname Force10]by default from console - Repeated 3 times. [11/20 15:47:23]: CMD-(CLI):[service timestamps log datetime]by default from console [11/20 15:47:23]: CMD-(CLI):[hostname Force10]by default from console [11/20 15:47:23]: CMD-(CLI):[enable password 7 ******]by default from console [11/20 15:47:23]: CMD-(CLI):[username admin password 7 ******]by default from console [11/20 15:47:23]: CMD-(CLI):[enable restricted 7 ******]by default from console [11/20 15:47:23]: CMD-(CLI):[protocol spanning-tree rstp]by default from console [11/20 15:47:23]: CMD-(CLI):[protocol spanning-tree pvst]by default from console [11/20 15:47:23]: CMD-(CLI):[no disable]by default from console [11/20 15:47:23]: CMD-(CLI):[interface tengigabitethernet 1/1]by default from console [11/20 15:47:23]: CMD-(CLI):[ip address 1.1.1.1 /24]by default from console [11/20 15:47:23]: CMD-(CLI):[ip access-group abc in]by default from console [11/20 15:47:23]: CMD-(CLI):[no shutdown]by default from console [11/20 15:47:23]: CMD-(CLI):[interface tengigabitethernet 1/2]by default
118 Control and Monitoring
from console [11/20 15:47:23]: CMD-(CLI):[no ip address]by default from console [11/20 15:47:23]: CMD-(CLI):[shutdown]by default from console [11/20 15:47:23]: CMD-(CLI):[interface tengigabitethernet 1/3]by default from console [11/20 15:47:23]: CMD-(CLI):[ip address 5.5.5.1 /24]by default from console [11/20 15:47:23]: CMD-(CLI):[no shutdown]by default from console [11/20 15:47:23]: CMD-(CLI):[interface tengigabitethernet 1/4]by default from console [11/20 15:47:23]: CMD-(CLI):[no ip address]by default from console [11/20 15:47:23]: CMD-(CLI):[shutdown]by default from console [11/20 15:47:23]: CMD-(CLI):[interface tengigabitethernet 1/5]by default from console [11/20 15:47:23]: CMD-(CLI):[no ip address]by default from console [11/20 15:47:23]: CMD-(CLI):[shutdown]by default from console [11/20 21:17:35]: CMD-(CLI):[line console 0]by default from console [11/20 21:17:36]: CMD-(CLI):[exec-timeout 0]by default from console [11/20 21:17:36]: CMD-(CLI):[exit]by default from console [11/20 21:19:25]: CMD-(CLI):[show command-history]by default from console Dell#
show command-tree
Display the entire CLI command tree, and optionally, display the utilization count for each command and its options.
Syntax Parameters
show command-tree [count | no]
count no
Display the command tree with a usage counter for each command.
Display all of the commands that may be preceded by the keyword no, which is the keyword used to remove a command from the running-configuration.
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1 8.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced.
Usage Information
Reload the system to reset the command-tree counters.
Control and Monitoring 119
Example
Dell#show command-tree count ! Enable privilege mode:
enable command usage:3 <0-15> option usage: 0
exit command usage:1
show command-tree command usage:9 count option usage: 3
show version command usage:1 ! Global configuration mode:
aaa authentication enable command usage:1
WORD
option usage: 1
default option usage: 0
enable option usage: 0
line
option usage: 0
none
option usage: 0
radius option usage: 1
tacacs+ option usage: 0
show cpu-traffic-stats
View the CPU traffic statistics.
Syntax Parameters
show cpu-traffic-stats [port number | all | cp ]
port number all cp
(OPTIONAL) Enter the port number to display traffic statistics on that port only. The range is from 1 to 1568.
(OPTIONAL) Enter the keyword all to display traffic statistics on all the interfaces receiving traffic, sorted based on the traffic.
(OPTIONAL) Enter the keyword cp to display traffic statistics on the specified CPU.
Defaults
all
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000.
120 Control and Monitoring
Usage Information
Example
Version
7.6.1.0 7.5.1.0 6.2.1.1
Description
Introduced on the S-Series. Introduced on the C-Series Introduced on the E-Series.
Traffic statistics are sorted on a per-interface basis; the interface receiving the most traffic is displayed first. All CPU and port information is displayed unless a specific port or CPU is specified. Traffic information is displayed for router ports only; not for management interfaces. The traffic statistics are collected only after the debug cpu-traffic-stats command is executed; not from the system bootup.
NOTE: After debugging is complete, use the no debug cpu-traffic-stats command to shut
off traffic statistics collection.
Dell#show cpu-traffic-stats Processor : CP -------------Received 100% traffic on TenGigabitEthernet 8/2 Total packets:100 LLC:0, SNAP:0, IP:100, ARP:0, other:0 Unicast:100, Multicast:0, Broadcast:0 Processor : RP1 --------------Received 62% traffic on TenGigabitEthernet 8/2 Total packets:500 LLC:0, SNAP:0, IP:500, ARP:0, other:0 Unicast:500, Multicast:0, Broadcast:0 Received 37% traffic on TenGigabitEthernet 8/1 Total packets:300 LLC:0, SNAP:0, IP:300, ARP:0, other:0 Unicast:300, Multicast:0, Broadcast:0 Processor : RP2 --------------No CPU traffic statistics. Dell#
show debugging
View a list of all enabled debugging processes.
Syntax
show debugging
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000.
Control and Monitoring 121
Example
Version
8.1.1.0 7.6.1.0 7.5.1.0 E-Series
Description
Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series Original command.
Dell#show debug Generic IP:
IP packet debugging is on for ManagementEthernet 1/1 Port-channel 1-2 Port-channel 5 tenGigabitEthernet 4/1-4/3,4/5-4/6,4/10-4/11,20 TenGigabitEthernet 5/1-5/3,5/5-5/6,5/10-5/11,15,17,19,21
ICMP packet debugging is on for TenGigabitEthernet 5/1,5/2,5/4,5/6,5/8,5/10,5/12,5/14,5/16
Dell#
show environment
View S-Series and Z-Series system component status (for example, temperature or voltage).
Syntax Parameters
show environment [all | fan | stack-unit unit-id | pem | thermal-sensor ]
all
Enter the keyword all to view all components.
fan
Enter the keyword fan to view information on the fans. The output of this
command is chassis dependent.
stack-unit unit-id Enter the keyword stack-unit then the unit-id to display information on a specific stack member.
pem
Enter the keyword pem to view only information on power entry modules.
thermal-sensor Enter the keyword thermal-sensor to view information on thermal sensors.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000.
122 Control and Monitoring
Usage Information
Example (all)
Version
7.8.1.0
Description
The output of the show environment fan command for the S-Series is changed to display fan speeds instead of showing the fan status as up or down.
The following example shows the output of the show environment command.
Dell#show environment
-- Fan Status --
Unit Bay TrayStatus Fan0 Speed Fan1 Speed
----------------------------------------
0
0 up
up 6971 up 7072
0
1 up
up 6971 up 7021
0
2 up
up 7021 up 7021
Speed in RPM
-- Power Supplies --
Unit Bay Status Type
FanStatus FanSpeed(rpm)
----------------------------------------------
0 0 down UNKNOWN down
0
0 1 up
AC
up
6504
-- Unit Environment Status --
Unit Status Temp Voltage TempStatus
----------------------------------
* 0 online 36C ok
1
* Management Unit
-- Thermal Sensor Readings (deg C) --
Unit Sensor0 Sensor1 Sensor2 Sensor3 Sensor4 Sensor5 Sensor6
----------------------------------------------------------
0 40
36
37
37
31
31
46
Dell#show environment fan
-- Fan Status --
Unit Bay TrayStatus Fan0 Speed Fan1 Speed
----------------------------------------
0
0 up
up 7021 up 7021
0
1 up
up 6971 up 7072
0
2 up
up 7021 up 6971
Speed in RPM
Dell#show environment pem
-- Power Supplies --
Unit Bay Status Type
FanStatus FanSpeed(rpm)
------------------------------------------------
0 0 down UNKNOWN down
0
0 1 up
AC
up
6504
Dell#show environment thermal-sensor
-- Thermal Sensor Readings (deg C) --
Unit Sensor0 Sensor1 Sensor2 Sensor3 Sensor4 Sensor5 Sensor6
----------------------------------------------------------
0 39
36
37
37
31
31
46
Control and Monitoring 123
show inventory
Display the S-Series or Z-Series switch type, components (including media), and Dell Networking Operating System (OS), including hardware identification numbers and configured protocols.
Syntax Parameters
show inventory [media slot]
media slot
(OPTIONAL) Enter the keyword media then the stack ID of the stack member for which you want to display pluggable media inventory.
NOTE: This parameter is available but not supported in Dell Networking
Operating System version 8.3.11.4. Because stacking is not supported, if you
use this parameter, the output displays "Media not present or accessible"
(refer to the Usage Information section).
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.4 8.3.11.1 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Output expanded to include Piece Part ID (PPID) and eSR4 optics. Introduced on the Z9000. Introduced this version of the command for S-Series. S-Series output differs from E-Series.
Usage Information
If there are no fiber ports in the unit, just the header under show inventory media displays. If there are fiber ports but no optics inserted, the output displays Media not present or accessible.
Example (S6000)
Dell#show inventory
System Type
: S6000
System Mode
: 1.0
Software Version : 9-4(0-168)
Unit Type
Serial Number Part Number Rev Piece Part ID
Rev SvcTag Exprs Svc Code
----------------------------------------------------------
* 0 S6000-01-FE-32T NA
08YWFG
A00 CN-08YWFG-28298-39Q-0015
A00 24N1VS1 463 414 838 5
0 S6000-PWR-AC
NA
0T9FNW
A00 CN-0T9FNW-28298-39Q-0005
A00 NA NA
0 S6000-FAN
NA
0MGDH8
A00 CN-0MGDH8-28298-39Q-0009
A00 NA NA
0 S6000-FAN
NA
0MGDH8
A00 CN-0MGDH8-28298-39Q-0007
A00 NA NA
0 S6000-FAN
NA
0MGDH8
A00 CN-0MGDH8-28298-39Q-0008
A00 NA NA
124 Control and Monitoring
* - Management Unit
Software Protocol Configured --------------------------
LLDP
Example
Dell#show inventory media
Slot Port Type Media
Serial Number F10Qualified
---------------------------------------------------------
0 0 QSFP 40GBASE-CR4-1M APF11200012UQQ Yes
0 1 QSFP 40GBASE-CR4-1M APF11200012UQQ Yes
0 2 QSFP 40GBASE-CR4-1M APF11200012UQQ Yes
0 3 QSFP 40GBASE-CR4-1M APF11200012UQQ Yes
0 4 QSFP 40GBASE-CR4-1M APF11200012UR1 Yes
0 5 QSFP 40GBASE-CR4-1M APF11200012UR1 Yes
0 6 QSFP 40GBASE-CR4-1M APF11200012UR1 Yes
0 7 QSFP 40GBASE-CR4-1M APF11200012UR1 Yes
0 8 QSFP 40GBASE-CR4-1M APF12300017GEY Yes
0 9 QSFP 40GBASE-CR4-1M APF12300017GEY Yes
0 10 QSFP 40GBASE-CR4-1M APF12300017GEY Yes
Example (S4048� ON)
Dell#show inventory
System Type
: S4048-ON
System Mode
: 1.0
Software Version : 1-0(0-4160)
Unit Type
Serial Number Part Number Rev Piece Part ID
Rev Svc Tag Exprs Svc Code
-------------------------------------------------------------------
* 2 S4048-ON-01-FE-72T NA
0J09D3
X01
TW-0J09D3-28298-49Q-0109
X01 3FD7VS1 745 954 243 3
2 S4048-ON-PWR-AC
NA
0T9FNW
X01
TW-0T9FNW-28298-49Q-0041
X01 NA
NA
2 S4048-ON-FAN
NA
0MGDH8
X01
TW-0MGDH8-28298-49Q-0331
X01 NA
NA
2 S4048-ON-FAN
NA
0MGDH8
X01
TW-0MGDH8-28298-49Q-0330
X01 NA
NA
2 S4048-ON-FAN
NA
0MGDH8
X01
TW-0MGDH8-28298-49Q-0329
X01 NA
NA
* - Management Unit
Software Protocol Configured --------------------------
LLDP SNMP
Dell#show inventory media
Slot Port Type Media
Serial Number F10Qualified
------------------------------------------------------
2 1
SFP 1000BASE-SX
U8706GR
Yes
2 2
SFP 1000BASE-SX
U8D0PTJ
Yes
2 3
SFP 1000BASE-SX
PLL4QZG
Yes
2 4
SFP 1000BASE-SX
PGP2DLH
Yes
2 5
SFP 1000BASE-SX
PGE3CEG
Yes
2 6
Media not present or accessible
2 7
SFP+ 10GBASE-CU2M APF1138003969J
Yes
2 8
SFP+ 10GBASE-CU2M APF113800395JP
Yes
2 9
Media not present or accessible
2 10
Media not present or accessible
Control and Monitoring 125
Related Commands
2 11 SFP+ 10GBASE-SR
AJG0FFG
Yes
2 12
Media not present or accessible
2 13
Media not present or accessible
2 14
Media not present or accessible
2 15
Media not present or accessible
2 16
Media not present or accessible
2 17 SFP+ 10GBASE-SR
CD23FM1NS
Yes
2 18 SFP+ 10GBASE-SR
CC20FM0K4
Yes
2 19 SFP+ 10GBASE-SR
CA20FM058
Yes
2 20
Media not present or accessible
2 21
Media not present or accessible
2 22
Media not present or accessible
2 23 SFP+ 10GBASE-SR
AP90R30
Yes
2 24 SFP 1000BASE-LX
PM15BV5
Yes
2 25 SFP+ 10GBASE-LRM
7503634SR03N
Yes
2 26 SFP+ 10GBASE-LR
APA0Q5A
Yes
2 27
Media not present or accessible
2 28
Media not present or accessible
2 29
Media not present or accessible
2 30
Media not present or accessible
2 31
Media not present or accessible
2 32
Media not present or accessible
2 33
Media not present or accessible
2 34
Media not present or accessible
2 35
Media not present or accessible
2 36
Media not present or accessible
2 37
Media not present or accessible
2 38 SFP+ 10GBASE-SR
CC48FM0SY
Yes
2 39
Media not present or accessible
2 40
Media not present or accessible
2 41
Media not present or accessible
2 42
Media not present or accessible
2 43
Media not present or accessible
2 44
Media not present or accessible
2 45
Media not present or accessible
2 46
Media not present or accessible
2 47
Media not present or accessible
2 48
Media not present or accessible
2 49/1 QSFP 40GBASE-SR4(EXT) 7503833H00GK
Yes
2 49/2 QSFP 40GBASE-SR4(EXT) 7503833H00GK
Yes
2 49/3 QSFP 40GBASE-SR4(EXT) 7503833H00GK
Yes
2 49/4 QSFP 40GBASE-SR4(EXT) 7503833H00GK
Yes
2 50
QSFP 40GBASE-SR4
DNC003X
Yes
2 51
QSFP 40GBASE-CR4-1M APF12210014T3B Yes
2 52
Media not present or accessible
2 53
QSFP 40GBASE-SR4
750383710034
Yes
2 54
QSFP 40GBASE-SR4
DPR001N
Yes
show interfaces -- displays the interface configuration.
show login statistics
Displays login statistics of users who have used the console or virtual terminal lines to log in to the system.
Syntax Parameters
show login statistics [[unsuccessful-attempts [user login-id] [time-period days]] | [all | user login-id]]
all
(Optional)Displays the login statistics of all users in the last 30 days or the custom
defined time period.
user login-id
(Optional)Displays the login statistics of a specific user in the last 30 days or the custom defined time period. When you use it with the unsuccessful-attempts keyword, the system displays the number of failed login attempts by a specific user in the last 30 days or the custom defined time period
126 Control and Monitoring
unsuccessfulattempts
(Optional)Displays the number of failed login attempts by the current user in the last 30 days or the custom defined time period.
time-period days (Optional)Displays the number of failed login attempts by the current user in the specified period.
Defaults
None
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.8(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4810, S4820, S5000, S6000, S6000-ON, and Z9500.
Usage Information
To view the successful and failed login details of the current user in the last 30 days or the custom defined period, use the show login statistics command.
To view the successful and failed login details of all users in the last 30 days or the custom defined period, use the show login statistics all command. You can use this command only if you have system or security administrator rights.
To view the successful and failed login details of a specific user in the last 30 days or the custom defined time period, use the show login statistics user user-id command. If you have system or security administrator rights, you can view the login statistics of other users. If you do not have system or security administrator rights, you can view your login statistics but not the login statistics of others.
NOTE: By default, these commands display the details for the last 30 days. If you set a customdefined time period for login statistics using the login statistics time-period days command, these commands display details only for that period.
Example
The following is sample output of the show login statistics command.
Dell#show login statistics -----------------------------------------------------------------User: admin Last login time: Mon Feb 16 04:40:00 2015 Last login location: Line vty0 ( 10.14.1.97 ) Unsuccessful login attempt(s) since the last successful login: 0 Unsuccessful login attempt(s) in last 30 day(s): 3 ------------------------------------------------------------------
The following is sample output of the show login statistics all command.
Dell#show login statistics all -----------------------------------------------------------------User: admin Last login time: Mon Feb 16 04:40:00 2015 Last login location: Line vty0 ( 10.14.1.97 ) Unsuccessful login attempt(s) since the last successful login: 0 Unsuccessful login attempt(s) in last 7 day(s): 3 ----------------------------------------------------------------------------------------------------------------------------------User: secadm Last login time: Mon Feb 16 04:45:29 2015 Last login location: Line vty0 ( 10.14.1.97 ) Unsuccessful login attempt(s) since the last successful login: 0
Control and Monitoring 127
Related Commands
Unsuccessful login attempt(s) in last 7 day(s): 0 ------------------------------------------------------------------
The following is sample output of the show login statistics user user-id command.
Dell#show login statistics user admin -----------------------------------------------------------------User: admin Last login time: Mon Feb 16 04:40:00 2015 Last login location: Line vty0 ( 10.14.1.97 ) Unsuccessful login attempt(s) since the last successful login: 0 Unsuccessful login attempt(s) in last 11 day(s): 3 ------------------------------------------------------------------
The following is sample output of the show login statistics unsuccessful-attempts command.
Dell#show login statistics unsuccessful-attempts There were 3 unsuccessful login attempt(s) for user admin in last 30 day(s).
The following is sample output of the show login statistics unsuccessful-attempts time-period days command.
Dell#show login statistics unsuccessful-attempts time-period 15 There were 0 unsuccessful login attempt(s) for user admin in last 15 day(s).
The following is sample output of the show login statistics unsuccessful-attempts user login-id command.
Dell#show login statistics unsuccessful-attempts user admin There were 3 unsuccessful login attempt(s) for user admin in last 12 day(s).
login statistics -- Enable and configure user login statistics on console and virtual terminal lines. login concurrent-session -- Configures the limit of concurrent sessions for all users on console and virtual terminal lines.
show memory
View current memory usage on the switch.
Syntax Parameters
show memory [stack-unit id]
stack-unit id
(OPTIONAL) Enter the keyword stack-unit then the stack unit ID of the SSeries stack member to display memory information on the designated stack member. The unit ID range from 1 to 6.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2)
Introduced on the S4048-ON. Introduced on the S3048-ON.
128 Control and Monitoring
Usage Information Example
Example (S4820T)
Version
9.7(0.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0
Description
Introduced on the S6000-ON. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced this version of the command for the S-Series.
The output for show memory displays the memory usage of LP part (sysdlp) of the system. The sysdlp is an aggregate task that handles all the tasks running on the S-Series' CPU.
Dell#show memory stack-unit 1 Statistics On Unit 1 Processor =========================== Total(b) Used(b) Free(b) Lowest(b) Largest(b) 268435456 4010354 264425102 264375410 264425102
Dell#show memory stack 0
Statistics On Unit 0 Processor
===========================
Total(b) Used(b) Free(b)
Lowest(b) Largest(b)
2147483648 4322398 2143161250 2142548382 2143161250
Dell#
show processes cpu
Display CPU usage information based on processes running.
Syntax Parameters
show processes cpu [management-unit 1-99 [details] | stack-unit id | summary | [stack-unit id]]
management-unit (OPTIONAL) Display processes running in the control processor. The 1-99 variable
1-99 [details]
sets the number of tasks to display in order of the highest CPU usage in the past
five (5) seconds. Add the keyword details to display all running processes
(except sysdlp). Refer to Example (management-unit).
stack-unit id
(OPTIONAL) Enter the keyword stack-unit then the stack member ID.
As an option of the show processes cpu command, this option displays CPU usage for the designated stack member. Or, as an option of the command, this option limits the output of memory statistics to the designated stack member. . The unit ID range is from 1 to 6.
Refer to Example (stack-unit).
summary
(OPTIONAL) Enter the keywordsummary to view CPU utilization of processes related to stack-unit processing.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Control and Monitoring 129
Example
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.6.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added the keywords management-unit [details]. Introduced on the S-Series.
Dell#show processes cpu ?
management-unit
Management Unit
stack-unit
Unit Number
summary
Summary of CPU utilization
|
Pipe through a command
Dell#show processes cpu summary
CPU utilization
5Sec
1Min
5Min
-------------------------------------------
UNIT0
3%
3%
1%
Dell#show processes cpu stack-unit 0
CPUID
5sec
1min
5min
--------------------------------------
CORE 0
13.17
11.53
0.00
CORE 2
9.38
12.16
0.00
Overall
11.28
11.84
0.00
CPU utilization of sysdlp for five seconds:2%/0%; one minute:3%; five
minutes:1%
PID
Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY
Process
0xbb773000 5950
595
10000 1.00% 2.25% 1.22% 0
tExcTask
0xbab2a000 4030
403
10000 1.00% 1.33% 0.73% 0
frrpagt
0xbacf3000
10
1
10000 0.00% 0.00% 0.00% 0
F10StkMgr
0xbad0c000
710
71
10000 0.00% 0.00% 0.03% 0
lcMgr
0xbad24000
30
3
10000 0.00% 0.00% 0.00% 0
dla
0xbad44000
50
5
10000 0.00% 0.00% 0.00% 0
sysAdmTsk
0xbad58000
650
65
10000 0.00% 0.00% 0.00% 0
timerMgr
0xbad6e000
50
5
10000 0.00% 0.00% 0.00% 0
PM
0xbad85000 1190
119
10000 0.00% 0.00% 0.00% 0
KP
0xbad9a000
0
0
0 0.00% 0.00% 0.00% 0
evagt
0xbadb4000
30
3
10000 0.00% 0.00% 0.00% 0
ipc
0xbadc9000
10
1
10000 0.00% 0.00% 0.00% 0
sysReaper
130 Control and Monitoring
0xbae22000
60
tme
6
10000 0.00% 0.00% 0.02% 0
Dell#show processes cpu management-unit ?
<1-99>
Number of tasks with highest CPU usage last 5 seconds
details
Detail CPU utilization
|
Pipe through a command
Dell#show processes cpu management-unit details
CPUID
5sec
1min
5min
--------------------------------
CORE 0 11.73 10.79
12.82
CORE 2 11.73 12.05
14.31
Overall 11.73 11.42
13.56
PID
Runtime(ms) Invoked
uSecs
5Sec
1Min 5Min
TTY
Process
Process:system PID: 0 CPU usage:5sec - 13.12% 1min - 13.37% 5min -
12.94% CoreID:3
Process:sysdlp PID:428 CPU usage:5sec - 3.78% 1min - 2.56% 5min -
3.40% CoreID:0
Process:sysd PID:410 CPU usage:5sec - 1.59% 1min - 0.96% 5min -
2.50% CoreID:2
TID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY
Thread
56
20
2
10000 0.00% 0.00% 0.00% 0
usm
55
10
1
10000 0.00% 0.00% 0.00% 0
DHCLIENT
54
0
0
0 0.00% 0.00% 0.00% 0
cms
53
60
6
10000 0.00% 0.00% 0.00% 0
portmirr
52
0
0
0 0.00% 0.00% 0.00% 0 cfgDataSync
51
0
0
0 0.00% 0.00% 0.00% 0 sysCompMgr
50
50
5
10000 0.00% 0.01% 0.00% 0
statMgr
49
1010
101 10000 0.05% 0.07% 0.08% 0
sflCp
48
30
3
10000 0.00% 0.00% 0.00% 0
snmp
47
0
0
0 0.00% 0.00% 0.00% 0
dpi_cmow
46
0
0
0 0.00% 0.00% 0.00% 0 dpi_taskcmo
Dell#show processes cpu management-unit details ?
|
Pipe through a command
Dell#show processes cpu management-unit ?
<1-99> Number of tasks with highest CPU usage last 5 seconds
details Detail CPU utilization
|
Pipe through a command
Dell#show processes cpu management-unit
CPUID
5sec
1min
5min
----------------------------------
CORE 0 9.54
9.92
12.82
CORE 2 10.74
11.56
14.31
Overall 10.14
10.74
13.56
PID
Runtime(ms) Invoked uSecs
0x00000000 45040
4504 10000
0x000001ac 25750
2575 10000
0x0000019a 10650
1065 10000
0x000003a5
860
86 10000
0x000001ad
520
52 10000
0x000004ba
330
33 10000
0x000000c9
1240
124 10000
0x000000e0
530
53 10000
0x00000132
420
42 10000
0x0000028d
410
41 10000
0x000000a9
200
20 10000
0x00000253
100
10 10000
0x00000206
140
14 10000
0x00000012
1290
129 10000
0x0000024d
400
40 10000
5Sec
1Min 5Min TTY
13.12% 13.20% 12.94% 0
2.78% 2.48% 3.40% 0
0.60% 1.16% 2.50% 0
0.40% 0.22% 0.28% 0
0.20% 0.30% 0.16% 0
0.20% 0.36% 0.09% 0
0.20% 0.15% 0.44% 0
0.20% 0.12% 0.16% 0
0.20% 0.10% 0.13% 0
0.20% 0.05% 0.12% 0
0.20% 0.03% 0.06% 0
0.20% 0.02% 0.02% 0
0.20% 0.02% 0.03% 0
0.00% 0.10% 0.12% 0
0.00% 0.08% 0.14% 0
Process system sysdlp sysd clish lacp clish nvmgr igmp vrrp
ovsdbsvr arpm otm
tnlmgr mount_mfs
xstp
Control and Monitoring 131
Related Commands
show hardware layer2 acl -- displays Layer 2 ACL data for the selected stack member and stack member port-pipe.
show hardware layer3 -- displays Layer 3 ACL or QoS data for the selected stack member and stack member port-pipe.
show hardware stack-unit -- displays the data plane or management plane input and output statistics of the designated component of the designated stack member.
show hardware system-flow -- displays Layer 3 ACL or QoS data for the selected stack member and stack member port-pipe.
show interfaces stack-unit -- displays information on all interfaces on a specific S-Series stack member.
show processes memory (S-Series) -- displays CPU usage information based on processes running in an S-Series.
show processes ipc flow-control
Display the single window protocol queue (SWPQ) statistics.
Syntax Parameters
show processes ipc flow-control [cp]
cp
(OPTIONAL) Enter the keyword cp to view the control processor's SWPQ
statistics.
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1 8.1.1.0 7.6.1.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series and E-Series.
Usage Information
Field
Source QID /Tx Process
Destination QID/Rx Process
Description
Source Service Identifier
Destination Service Identifier
132 Control and Monitoring
Example (SSeries)
Field
Description
Cur Len
Current number of messages enqueued
High Mark
Highest number of packets in the queue at any time
#of to / Timeout Timeout count
#of Retr /Retries Number of retransmissions
#msg Sent/Msg Number of messages sent Sent/
#msg Ackd/Ack Number of messages acknowledged Rcvd
Retr /Available Retra
Number of retries left
Total/ Max Retra Number of retries allowed
Important Points:
The SWP provides flow control-based reliable communication between the sending and receiving software tasks.
A sending task enqueues messages into the SWP queue3 for a receiving task and waits for an acknowledgement.
If no response is received within a defined period of time, the SWP timeout mechanism resubmits the message at the head of the FIFO queue.
After retrying a defined number of times, the SWP-2-NOMORETIMEOUT timeout message is generated.
In the S-Series example, a retry (Retries) value of zero indicates that the SWP mechanism reached the maximum number of retransmissions without an acknowledgement.
Dell#show processes ipc flow-control cp
Q Statistics on CP Processor
TxProcess
RxProcess Cur High Time Retr Msg Ack Aval Max
Len
Mark Out
ies
Sent Rcvd Retra Retra
DHCP0
ACL0 0
1
1
1
1
1 25 25
DHCP0
IPMGR0 0
0
0
0
0
0 25 25
DHCP0
IPMGR1 0
0
0
0
0
0 25 25
DHCP0
IFMGR0 0
0
0
0
0
0 25 25
IPMGR0
NDPM0 0
0
0
0
0
0 60 60
IFMGR0
FEFD0 0 10
0
0
12 12 60 60
IFMGR0
SNMP0 0
1
0
0
1
1 60 60
IFMGR0
SFL_CP0 0 20
0
0
26 26 60 60
IFMGR0
PORTMIRR0 0
8
0
0
9
9 60 60
IFMGR0 EVENTTERMLOG0 0
1
0
0
1
1 60 60
IFMGR0
IPSECMGR0 0
8
0
0
11 11 60 0
IFMGR0
DHCP0 0
8
0
0
11 11 60 6
IFMGR0
IPMGR0 0 29
0
0
36 36 60 60
IFMGR0
IFAGT3 0
1
0
0
2
60 60
IFAGT3
IFMGR0 0
1
0
0
1
1 60 60
IFMGR0
OFMGR0 0 16
1
1
21 21 60 60
IFMGR0
ACL0 0
8
0
0
14 14 60 60
IFMGR0
VRRP0 0 10
0
0
17 17 60 60
IFMGR0
PIM0 0
1
0
0
1
1
5
5
IFMGR0
MACMGR0 0
0
0
0
0
0 60 60
IFMGR0
L2PM0 0 29
0
0
40 40 60 60
IFMGR0
DIFFSERV0 0 51
0
0
67 67 60 60
IFMGR0
RTM0 0
9
0
0
11 11 60 60
IFMGR0
LLDP0 0 12
0
0
12 12 60 60
IFMGR0
MRTM0 0 10
0
0
10 10 60 60
IFMGR0
IPMGR1 0 33
0
0
33 33 60 60
IFMGR0
LACP0 0 23
0
0
23 23 60 60
PORTMIRR0
ACL_AGENT2 0
0
0
0
0
0 50 50
IFMGR0
IGMP0 0
0
0
0
0
0 50 50
IFMGR0
IFAGT2 0
1
0
0
1
1 60 60
Control and Monitoring 133
show processes memory
Display memory usage information based on processes running in the S-Series or Z-Series system.
Syntax Parameters
show processes memory {management-unit | stack unit {unit-id | all | summary}}
management-unit Enter the keyword management-unit for CPU memory usage of the stack management unit.
stack unit unit id Enter the keyword stack unit then a stack unit ID of the member unit for which to display memory usage on the forwarding processor.
all
Enter the keyword all for detailed memory usage on all stack members.
summary
Enter the keyword summary for a brief summary of memory availability and usage on all stack members.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1 7.7.1.0 7.6.1.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Added the management-unit option. Introduced on the S-Series.
Usage Information
show processes memory output Field
Total: MaxUsed: CurrentUsed: CurrentFree: SharedUsed: SharedFree: PID Process ResSize Size Allocs
Description
Total system memory available Total maximum memory used ever (history indicated with time stamp) Total memory currently in use Total system memory available Total used shared memory Total free shared memory Process ID Process Name Actual resident size of the process in memory Process test, stack, and data size Total dynamic memory allocated
134 Control and Monitoring
Example
Example (managementunit)
show processes memory output Field
Description
Frees Max Current
Total dynamic memory freed Maximum dynamic memory allocated Current dynamic memory in use
The output for the show process memory command displays the memory usage statistics running on CP part (sysd) of the system. The sysd is an aggregate task that handles all the tasks running on SSeries' CP.
For the S-Series, the output of the show memory command and this command differ based on which FTOS processes are counted.
In the show memory output, the memory size is equal to the size of the application processes. In the output of this command, the memory size is equal to the size of the application processes plus
the size of the system processes.
Dell#show processes memory stack-unit 1
Total: 268435456, MaxUsed: 2420244, CurrentUsed: 2420244, CurrentFree:
266015212
TaskName TotalAllocated TotalFreed MaxHeld CurrentHolding
tme
435406
397536
54434 37870
ipc
16652
0
16652 16652
timerMgr 33304
0
33304 33304
sysAdmTsk 33216
0
33216 33216
tFib4 1943960
0 1943960 1943960
aclAgent 90770
16564
74206 74206
ifagt_1 21318
16564
21318
4754
dsagt
6504
0
6504
6504
MacAgent 269778
0
269778 269778
Dell#show processes management-unit
Total
: 151937024, MaxUsed : 111800320 [2/25/2008 4:18:53]
CurrentUsed: 98848768, CurrentFree: 53088256
SharedUsed : 13007848, SharedFree : 7963696
PID Process
ResSize
Size Allocs Frees Max Current
337 KernLrnAgMv 117927936
0
0
0
0
0
331 vrrp
5189632 249856 50572
0 50572 50572
323 frrp
5206016 241664 369238
0 369238 369238
322 xstp
7430144 2928640 38328
0 38328 38328
321 pim
5267456 823296 62168
0 62168 62168
314 igmp
4960256 380928 18588 16564 18588
2024
313 mrtm
6742016 1130496 72758
0 72758 72758
308 l2mgr
5607424 552960 735214 380972 619266 354242
301 l2pm
5001216 167936 1429522 1176044 286606 253478
298 arpm
4628480 217088 71092 33128 71092 37964
294 ospf
5468160 503808 724204 662560 78208 61644
288 dsm
6778880 1159168 39490 16564 39490 22926
287 rtm
5713920 602112 442280 198768 376024 243512
284 rip
4562944 258048
528
0
528
528
281 lacp
4673536 266240 221060
0 221060 221060
277 ipm1
4837376 380928 83788
0 83788 83788
273 acl
5005312 512000 239564 149076 123616 90488
272 topoDPC
117927936
0
0
0
0
0
271 bcmNHOP
117927936
0
0
0
0
0
270 bcmDISC
117927936
0
0
0
0
0
269 bcmATP-RX 117927936
0
0
0
0
0
268 bcmATP-TX 117927936
0
0
0
0
0
267 bcmSTACK
117927936
0
0
0
0
0
266 bcmRX
117927936
0
0
0
0
0
Control and Monitoring 135
265 bcmLINK.0 117927936
0
0
0
0
0
!----------- output truncated --------------!
show software ifm
Display interface management (IFM) data.
Syntax Parameters
show software ifm {clients [summary] | ifagt number | ifcb interface | stack-unit unit-ID | trace-flags}
clients summary ifagt number ifcb interface
Enter the keyword clients to display IFM client information.
(OPTIONAL) Enter the keyword summary to display brief information about IFM clients.
Enter the keyword ifagt then the number of an interface agent to display software pipe and IPC statistics.
Enter the keyword ifcb then one of the following interface IDs then the slot/ port[/subport] information to display interface control block information for that interface:
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
stack-unit unitID
Enter the keyword stack-unit then the stack member number to display IFM information for that unit.
NOTE: This option is only available on the S-Series.
trace-flags
Enter the keyword trace-flags to display IFM information for internal trace flags.
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1 8.5.1.0 7.6.1.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced for the C-Series and S-Series.
136 Control and Monitoring
Example
Dell#show software ifm clients summary
ClntType Inst svcMask subSvcMask tlvSvcMask tlvSubSvc swp
IPM
0 0x00000000 0x00000000 0x90ff71f3 0x021e0e81 31
RTM
0 0x00000000 0x00000000 0x800010ff 0x01930000 43
VRRP
0 0x00000000 0x00000000 0x803330f3 0x00400000 39
L2PM
0 0x00000000 0x00000000 0x87ff79ff 0x0e032200 45
ACL
0 0x00000000 0x00000000 0x867f50c3 0x000f0218 44
OSPF
0 0x00000dfa 0x00400098 0x00000000 0x00000000 0
PIM
0 0x000000f3 0x00030000 0x00000000 0x00000000 0
IGMP
0 0x000e027f 0x00000000 0x00000000 0x00000000 0
SNMP
0 0x00000000 0x00000000 0x800302c0 0x00000002 30
EVTTERM 0 0x00000000 0x00000000 0x800002c0 0x00000000 29
MRTM
0 0x00000000 0x00000200 0x81f7103f 0x00000000 38
DSM
0 0x00000000 0x00000000 0x80771003 0x00000000 32
LACP
0 0x00000000 0x00000000 0x8000383f 0x00000000 35
DHCP
0 0x00000000 0x00000000 0x800000c2 0x0000c000 37
V6RAD
0 0x00000433 0x00030000 0x00000000 0x00000000 0
Unidentified Client0 0x006e0002 0x00000000 0x00000000 0x00000000 0
Dell#
show system
Display the status of all stack members or a specific member.
Syntax Parameters
show system [brief | stack-unit unit-id | stack-ports {status | topology}]
brief
(OPTIONAL) Enter the keyword brief to view an abbreviated list of system information.
stack-unit unit-id (OPTIONAL) Enter the keywords stack-unit then the stack member ID for information on that stack member. The unit ID range is from 1 to 6.
stack-ports
(OPTIONAL) Enter the keywords stack-ports for information about the status
status | topology or topology of the stack ports.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 9.4(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.11.4
8.3.11.1 8.3.7.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON. Added support for the disabled-ports parameter . Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. The brief parameter no longer displays the current Reload mode. To display Reload mode, use the show reload-type command. Modified the show system stack-unit command output to support Piece Part ID (PPID). Introduced on the Z9000. Introduced on the S4810.
Control and Monitoring 137
Version
7.8.1.0
7.7.1.0 7.6.1.0
Description
The Boot Flash field displays the code level for boot code 2.8.1.1 and newer, while older boot codes display as "Present".
Added Master Priority field.
Introduced on the S-Series.
Example (show system stack unit � disabled ports)
Example (show system brief)
Dell#show system brief
Stack MAC
: 34:17:eb:f2:90:c4
Reload-Type : normal-reload [Next boot : normal-reload]
-- Stack Info --
Unit UnitType Status
ReqTyp CurTyp
Version
Ports
----------------------------------------------------------------
1 Member
not present
2 Management online
S4048-ON S4048-ON 1-0(0-4160) 72
3 Member
not present
4 Member
not present
5 Member
not present
6 Member
not present
-- Power Supplies --
Unit Bay Status Type
FanStatus FanSpeed(rpm)
-----------------------------------------------
2
1 up
AC
up
7048
2
2 down
UNKNOWN down
0
-- Fan Status --
Unit Bay TrayStatus Fan0 Speed Fan1 Speed
----------------------------------------
2
1 up
up 7021 up 6971
2
2 up
up 7021 up 7072
2
3 up
up 6971 up 7021
Speed in RPM
Example (S6000)
Dell#show system
Stack MAC : 90:b1:1c:f4:9b:79
Reload-Type
: normal-reload [Next boot : normal-reload]
-- Unit 0 --
Unit Type
: Management Unit
Status
: online
Next Boot
: online
Required Type
: S6000 - 32-port TE/FG (SI)
Current Type
: S6000 - 32-port TE/FG (SI)
Master priority
: 0
Hardware Rev
: 4.0
Num Ports
: 128
Up Time
: 19 min, 19 sec
Dell Networking OS Version : 9-4(0-168)
Jumbo Capable
: yes
POE Capable
: no
FIPS Mode
: disabled
Burned In MAC
: 90:b1:1c:f4:9b:79
No Of MACs
: 3
-- Power Supplies --
Unit Bay Status Type
FanStatus FanSpeed(rpm)
---------------------------------------------
138 Control and Monitoring
0
0 down
UNKNOWN down
0
1 up
AC
up
0 6600
-- Fan Status --
Unit Bay TrayStatus Fan0 Speed Fan1 Speed
-------------------------------------------
0
0
up
up 7072 up 7021
0
1
up
up 7021 up 7123
0
2
up
up 7072 up 7021
peed in RPM
-- Unit 1 -Unit Type Status
: Member Unit : not present
-- Unit 2 -Unit Type Status
: Member Unit : not present
-- Unit 3 -Unit Type Status
: Member Unit : not present
-- Unit 4 -Unit Type Status
: Member Unit : not present
-- Unit 5 -Unit Type Status
: Member Unit : not present
Example (S4810)
Dell#show system stack-unit 0
-- Unit 0 --
Unit Type
: Management Unit
Status
: online
Next Boot
: online
Required Type
: S6000 - 32-port TE/FG (SI)
Current Type
: S6000 - 32-port TE/FG (SI)
Master priority
: 0
Hardware Rev
: 4.0
Num Ports
: 128
Up Time
: 21 min, 8 sec
Dell Networking OS Version : 9-4(0-168)
Jumbo Capable
: yes
POE Capable
: no
FIPS Mode
: disabled
Boot Flash
: 3.1.1.2
Boot Selector
: 3.1.0.2
Memory Size
: 3203911680 bytes
Temperature
: 36C
Voltage
: ok
Serial Number
: NA
Part Number
: 08YWFG
Rev A00
Vendor Id
: DL
Date Code
: 26092013
Country Code
: CN
Piece Part ID
: CN-08YWFG-28298-39Q-0015
PPID Revision
: A00
Service Tag
: 24N1VS1
Expr Svc Code
: 463 414 838 5
Auto Reboot
: disabled
Burned In MAC
: 90:b1:1c:f4:9b:79
No Of MACs
: 3
-- Power Supplies --
Unit Bay Status Type
FanStatus FanSpeed(rpm)
--------------------------------------------
0
0
down
UNKNOWN
down 0
Control and Monitoring 139
0
1
up
AC
up
6600
-- Fan Status --
Unit Bay TrayStatus Fan0 Speed Fan1 Speed
-----------------------------------------
0
0
up
up
6971 up 7021
0
1
up
up
7021 up 7021
0
2
up
up
7021 up 7021
Speed in RPM
Example (S4810� ON)
Dell#show system
Stack MAC Reload-Type
: 34:17:eb:f2:90:c4 : normal-reload [Next boot : normal-reload]
-- Unit 2 --
Unit Type
: Management Unit
Status
: online
Next Boot
: online
Required Type
: S4048-ON - 54-port TE/FG (SK-ON)
Current Type
: S4048-ON - 54-port TE/FG (SK-ON)
Master priority
: 0
Hardware Rev
: 2.0
Num Ports
: 72
Up Time
: 5 hr, 30 min
Dell Networking OS Version : 1-0(0-4160)
Jumbo Capable
: yes
POE Capable
: no
FIPS Mode
: disabled
Burned In MAC
: 34:17:eb:f2:90:c4
No Of MACs
: 3
-- Power Supplies --
Unit Bay Status Type FanStatus FanSpeed(rpm)
---------------------------------------------
2
1 up
AC
up
7048
2
2 down
UNKNOWN down
0
-- Fan Status --
Unit Bay TrayStatus Fan1 Speed Fan2 Speed
---------------------------------------
2
1
up
up 7072 up 7072
2
2
up
up 7021 up 6922
2
3
up
up 7021 up 7021
Speed in RPM
Example (S6000� ON)
Dell>show system stack-unit 1
-- Unit 1 --
Unit Type
: Management Unit
Status
: Card Problem - Software Failure
Next Boot
: online
Required Type
: S6000-ON - 32-port TE/FG (SI-ON)
Current Type
: S6000-ON - 32-port TE/FG (SI-ON)
Master priority
: 0
Hardware Rev
: 3.0
Num Ports
: 128
Up Time
: 3 day, 22 hr, 33 min
Dell Networking OS Version : 9-7(0-288)
Jumbo Capable
: yes
POE Capable
: no
FIPS Mode
: disabled
Boot Flash
: Present
Boot Selector
: 3.20.0.0
Memory Size
: 3203911680 bytes
Temperature
: 0C
Voltage
: ok
140 Control and Monitoring
Related Commands
Serial Number Part Number Vendor Id Date Code Country Code Piece Part ID PPID Revision Service Tag Expr Svc Code Auto Reboot Burned In MAC No Of MACs
: NA : <PART NUMB Rev R> : NA : NA : NA : <SER:)0 : R> : N/A : 0 : disabled : 00:00:00:00:00:00 : 3
-- Power Supplies --
Unit Bay Status Type FanStatus FanSpeed(rpm)
---------------------------------------
1
1 up
AC
up
18528
1
2 absent
absent
0
-- Fan Status --
Unit Bay TrayStatus Fan1 Speed Fan2 Speed
---------------------------------------
1
1 up
up
19275 up 19275
1
2 absent
1
3 up
up
19275 up 18904
Speed in RPM
show version � displays the Dell Networking OS version.
show tech-support
Display a collection of data from other show commands, necessary for Dell Networking technical support to perform troubleshooting.
Syntax Parameters
show tech-support [stack-unit unit-id | page]
stack-unit page
save
(OPTIONAL) Enter the keywords stack-unit to view CPU memory usage for the stack member designated by unit-id. The unit ID range is from 1to 6.
(OPTIONAL) Enter the keyword page to view 24 lines of text at a time. Press the SPACE BAR to view the next 24 lines. Press the ENTER key to view the next line of text.
When using the pipe command ( | ), enter one of these keywords to filter command output. For details about filtering commands, refer to CLI Basics.
Enter the keyword save to save the command output.
flash: Save to local flash drive (flash://filename. A maximum of 20 characters.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 9.0.2.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON. Introduced on the S6000.
Control and Monitoring 141
Usage Information
Example (SSeries)
Version
8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0
Description
Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced save to the file options. Introduced on the S-Series.
Without the page or stack-unit option, the command output is continuous. To interrupt the command output, use Ctrl-z.
The save option works with other filtering commands. This allows you to save specific information of a show command. The save entry must always be the last option. For example: Dell#show techsupport |grep regular-expression |except regular-expression | find regularexpression | save flash://result
This display output is an accumulation of the same information that is displayed when you execute one of the following show commands:
show version show clock show running-config show system stack-ports show interfaces show process memory show process cpu show file system show system show environment show ip traffic show ip management route show ip route summary show Inventory show log summary show command-history (last 20 commands) show log
Dell#show tech-support ?
page
Page through output
stack-unit Unit Number
|
Pipe through a command
<cr>
Dell#show tech-support stack-unit 1 ?
|
Pipe through a command
<cr>
Dell#show tech-support stack-unit 1 | ?
except Show only text that does not match a pattern
find
Search for the first occurrence of a pattern
grep
Show only text that matches a pattern
no-more Don't paginate output
save
Save output to a file
Dell#show tech-support stack-unit 1 | save ? flash: Save to local file system (flash://filename (max 20 chars) )
Dell#show tech-support stack-unit 1 | save flash://LauraSave Start saving show command report ....... Dell#
Dell#dir
142 Control and Monitoring
Example (SSeries)
Related Commands
Directory of flash: 1 drw- 16384 Jan 01 1980 00:00:00 +00:00 . 2 drwx 1536 Jul 13 1996 02:38:06 +00:00 .. 3 d--- 512 Nov 20 2007 15:46:44 +00:00 ADMIN_DIR
Dell#show tech-support stack-unit 0 ----- show version -------------Dell Real Time Operating System Software Dell Operating System Version: 2.0 Dell Application Software Version: 9-4(0-168) Copyright (c) 1999-2014 by Dell Inc. All Rights Reserved. Build Time: Sun Mar 23 22:17:49 PDT 2014 Build Path: /work.local/build/buildSpaces/build01/E9-4-0/SW/SRC Dell Networking OS uptime is 32 minute(s) System image file is "s6000" System Type: S6000 Control Processor: Intel Centerton with 3203911680 bytes of memory, core(s) 2. 16G bytes of boot flash memory.
1 32-port TE/FG (SI) 64 Ten GigabitEthernet/IEEE 802.3 interface(s) 16 Forty GigabitEthernet/IEEE 802.3 interface(s) ------- show clock ---------------18:10:52.864 UTC Tue Mar 25 2014 ------- show running-config ----------Current Configuration ... ! Version 9-4(0-168) ! Last configuration change at Tue Mar 25 17:43:06 2014 by admin ! boot system stack-unit 0 primary tftp://10.16.127.146/s6000 boot system stack-unit 0 secondary system: B: boot system stack-unit 0 default system: A: ! redundancy auto-synchronize full redundancy disable-auto-reboot stack-unit ! redundancy disable-auto-reboot stack-unit 0 redundancy disable-auto-reboot stack-unit 1 redundancy disable-auto-reboot stack-unit 2 redundancy disable-auto-reboot stack-unit 3 redundancy disable-auto-reboot stack-unit 4 redundancy disable-auto-reboot stack-unit 5 ! hardware watchdog stack-unit 0 hardware watchdog stack-unit 1 hardware watchdog stack-unit 2 hardware watchdog stack-unit 3 hardware watchdog stack-unit 4 hardware watchdog stack-unit 5 !
ssh-peer-stack-unit
Open an SSH connection to the peer stack-unit.
Syntax
ssh-peer-stack-unit [-l username]
Control and Monitoring 143
Parameters
-l username
(OPTIONAL) Enter the keyword -l then your user name. The default is the user name associated with the terminal.
Defaults
Not configured.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1 8.3.11.1
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the S-Series.
telnet
Connect through Telnet to a server. The Telnet client and server in Dell Networking support IPv4 and IPv6 connections. You can establish a Telnet session directly to the router or a connection can be initiated from the router.
NOTE: The Telnet server and client are VRF-aware. Using the vrf parameter in this command, you can make a Telnet
server or client to listen to a specific VRF. This capability enables a Telent server or client to look up the correct routing
table and establish a connection.
Syntax Parameters
telnet {host | ip-address | ipv6-address prefix-length | vrf vrf instance name } [/source-interface]
host
ip-address
ipv6-address prefix-length
Enter the name of a server.
Enter the IPv4 address in dotted decimal format of the server.
Enter the IPv6 address in the x:x:x:x::x format then the prefix length in the /x format. The range is from /0 to /128.
NOTE: The :: notation specifies successive hexadecimal fields of zeros.
vrf instance source-interface
(Optional) Enter the keyword vrf then the VRF instance name.
(OPTIONAL) Enter the keywords /source-interface then the interface information to include the source interface. Enter the following keywords and slot/ port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For a Null interface, enter the keyword null then the Null interface number. For a port channel interface, enter the keywords port-channel then a
number. The range is from 1 to 128.
144 Control and Monitoring
For Tunnel interface types, enter the keyword tunnel then the slot/ port information. The range is from 1 to 16383.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Defaults
Not configured.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0
8.3.11.1 8.2.1.0
8.1.1.0 7.6.1.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Added support for source-interface for link-local IPv6 addressing. Introduced on the Z9000. Introduced on the E-Series ExaScale (IPv6). Increased the number of VLANs on ExaScale to 4094 (was 2094). Introduced on the E-Series ExaScale (IPv4). Introduced on the S-Series. Introduced on the C-Series and added support for IPv6 address on the E-Series only.
Usage Information
Example
The VRF configured using this command has a higher precedence than a VRF configured using the ip telent vrf vrf-name command. If you do not use the VRF attribute in this command, then TELENT client uses the VRF configured using the ip telnet vrf vrf-name command.
The source interface configured using this command has a higher precedence than the source interface configured using the ip telent source-interface command. If you do not configure a source interface using this command, then the TELNET client uses the source interface configured using the ip telent source-interface command.
In case there is a mismatch between the VRF telnet source interface and the telent VRF, then an error is reported.
Dell#telnet vrf vrf1 10.10.10.2
telnet-peer-stack-unit
Open a Telnet connection to the peer stack unit.
Syntax Defaults
telnet-peer-stack-unit Not configured.
Control and Monitoring 145
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the S-Series.
terminal length
Configure the number of lines displayed on the terminal screen.
Syntax Parameters
terminal length screen-length
screen-length
Enter a number of lines. Entering zero causes the terminal to display without pausing. The range is from 0 to 512.
Defaults
24 lines
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1 8.1.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series ExaScale. Introduced on the S-Series.
146 Control and Monitoring
Version
7.5.1.0 E-Series
Description
Introduced on the C-Series. Original command.
traceroute
View a packet's path to a specific device.
Syntax Parameters
traceroute {host | vrf instance | ip-address | ipv6-address}
host vrf instance ip-address ipv6-address
Enter the name of device.
(Optional) E-Series Only: Enter the keyword vrf then the VRF Instance name.
Enter the IP address of the device in dotted decimal format.
Enter the IPv6 address, in the x:x:x:x::x format, to which you are testing connectivity.
NOTE: The :: notation specifies successive hexadecimal fields of zeros.
Defaults
Timeout = 5 seconds Probe count = 3 30 hops max 40 byte packet size UDP port = 33434
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1 8.2.1.0 8.1.1.0 7.9.1.0 7.6.1.0 7.5.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series ExaScale with IPv6. Introduced on the E-Series ExaScale (IPv4 only). Introduced VRF. Added support for the S-Series. Introduced on the C-Series. Added support for IPv6 address on the E-Series.
Control and Monitoring 147
Usage Information
Example (IPv4)
Version
E-Series
Description
Original command.
When you enter the traceroute command without specifying an IP address (Extended Traceroute), you are prompted for a target and source IP address, timeout (in seconds) (default is 5), a probe count (default is 3), minimum TTL (default is 1), maximum TTL (default is 30), and port number (default is 33434). To keep the default setting for those parameters, press the ENTER key.
For IPv6, you are prompted for a minimum hop count (default is 1) and a maximum hop count (default is 64).
Dell#traceroute www.Dell Networking.com
Translating "www.Dell Networking.com"...domain server (10.11.0.1) [OK] Type Ctrl-C to abort.
----------------------------------------------Tracing the route to www.Dell Networking.com (10.11.84.18), 30 hops max, 40 byte packets -----------------------------------------------
TTL Hostname
Probe1
Probe2
Probe3
1 10.11.199.190 001.000 ms 001.000 ms 002.000 ms
2 gwegress-sjc-02.Dell Networking.com (10.11.30.126) 005.000 ms
001.000 ms 001.000 ms
3 fw-sjc-01.Dell Networking.com (10.11.127.254) 000.000 ms 000.000 ms
000.000 ms
4 www.Dell Networking.com (10.11.84.18) 000.000 ms 000.000 ms 000.000
ms
FTOS#
Example (IPv6)
Dell#traceroute 100::1
Type Ctrl-C to abort.
-----------------------------------------------
Tracing the route to 100::1, 64 hops max, 60 byte packets
-----------------------------------------------
Hops Hostname Probe1
Probe2
Probe3
1
100::1 000.000 ms 000.000 ms 000.000 ms
FTOS#traceroute 3ffe:501:ffff:100:201:e8ff:fe00:4c8b
Type Ctrl-C to abort.
-----------------------------------------------
Tracing the route to 3ffe:501:ffff:100:201:e8ff:fe00:4c8b,
64 hops max, 60 byte packets
-----------------------------------------------
Hops Hostname Probe1 Probe2
Probe3
1 3ffe:501:ffff:100:201:e8ff:fe00:4c8b
000.000 ms 000.000 ms 000.000 ms
Dell#
Related Commands
ping -- tests the connectivity to a device.
undebug all
Disable all debug operations on the system.
Syntax Defaults
undebug all none
148 Control and Monitoring
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 8.1.1.0 7.6.1.0 7.5.1.0 E-Series
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Original command
virtual-ip
Configure a virtual IP address for the active management interface. You can configure virtual addresses both for IPv4 and IPv6 independently.
Syntax
virtual-ip {ipv4-address | ipv6-address} To return to the default, use the no virtual-ip {ipv4-address | ipv6-address} command.
Parameters
ipv4-address ipv6-address
Enter the IP address of the active management interface in a dotted decimal format (A.B.C.D.).
Enter an IPv6 address of the active management interface, in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros.
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000
Control and Monitoring 149
Usage Information
Related Commands
Version
8.3.19.0 8.3.12.0 8.1.1.0 7.5.1.0 E-Series
Description
Introduced on the S4820T. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the C-Series. Original command.
You can configure both IPv4 and IPv6 virtual addresses simultaneously, but only one of each. Each time this command is issued, it replaces the previously configured address of the same family, IPv4 or IPv6. The no virtual-ip command takes an address/prefix-length argument, so that the desired address only is removed. If you enter the no virtual-ip command without any specified address, then both IPv4 and IPv6 virtual addresses are removed.
ip address -- assigns a primary and secondary IP address to the interface.
write
Copy the current configuration to either the startup-configuration file or the terminal.
Syntax Parameters
write {memory compressed| terminal}
memory compressed terminal
Enter the keyword memory to copy the current running configuration to the startup configuration file. This command is similar to the copy running-config startup-config command.
Enter the keyword compressed to write the operating configuration to the startup-config file in the compressed mode.
Enter the keyword terminal to copy the current running configuration to the terminal. This command is similar to the show running-config command.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1 8.1.1.0 7.6.1.0 7.5.1.0 E-Series
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Original command.
150 Control and Monitoring
Usage Information
The write memory command saves the running-configuration to the file labeled startup-configuration. When using a LOCAL CONFIG FILE other than the startup-config not named "startup-configuration" (for example, you used a specific file during the boot config command), the running-config is not saved to that file; use the copy command to save any running-configuration changes to that local file.
Control and Monitoring 151
5
802.1ag
802.1ag is available on the Dell Networking OS.
Topics:
� ccm disable � ccm transmit-interval � clear ethernet cfm traceroute-cache � database hold-time � disable � domain � ethernet cfm � ethernet cfm mep � ethernet cfm mip � mep cross-check � mep cross-check enable � mep cross-check start-delay � ping ethernet � show ethernet cfm domain � show ethernet cfm maintenance-points local � show ethernet cfm maintenance-points remote � show ethernet cfm mipbd � show ethernet cfm statistics � show ethernet cfm port-statistics � show ethernet cfm traceroute-cache � service � traceroute cache hold-time � traceroute cache size � traceroute ethernet
ccm disable
Disable continuity check message (CCM).
Syntax
ccm disable Enter no ccm disable to enable CCM.
Defaults
Disabled
Command Modes ECFM DOMAIN
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the Z9000.
152 802.1ag
Version
8.3.7.0 8.3.1.0
Description
Introduced on the S4810. Introduced on the S-Series.
ccm transmit-interval
Configure the transmit interval (mandatory). The interval specified applies to all maintenance endpoints (MEPs) in the domain.
Syntax Parameters
ccm transmit-interval seconds
seconds
Enter a transmit interval. The intervals are 1, 10, 60, and 600.
Defaults
10 seconds
Command Modes ECFM DOMAIN
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) Version 8.3.19.0 Version 8.3.11.1 Version 8.3.7.0 Version 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series.
clear ethernet cfm traceroute-cache
Delete all link trace cache entries.
Syntax
clear ethernet cfm traceroute-cache
Defaults
none
Command Modes ECFM DOMAIN
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) Version 8.3.19.0 Version 8.3.7.0 Version 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the S4810. Introduced on the S-Series.
802.1ag 153
database hold-time
Set the amount of time that data from a missing MEP is kept in the continuity check database.
Syntax Parameters
database hold-time minutes
minutes
Enter a hold-time. The range is from 100 to 65535 minutes.
Defaults
100 minutes
Command Modes ECFM DOMAIN
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series.
disable
Disable Ethernet CFM without stopping the CFM process.
Syntax
disable
Defaults
Disabled
Command Modes ETHERNET CFM
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series.
domain
Create the maintenance domain.
Syntax
domain name md-level number
154 802.1ag
Parameters
name
Name the maintenance domain.
md-level number Enter a maintenance domain level. The range is from 0 to 7.
Defaults
none
Command Modes ETHERNET CFM
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series.
ethernet cfm
Spawn the CFM process. No CFM configuration is allowed until the CFM process is spawned.
Syntax
ethernet cfm
Defaults
Disabled
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series.
ethernet cfm mep
Create an MEP. Syntax
Parameters
ethernet cfm mep {up-mep | down-mep} domain {name | level} ma-name name mepid mep-id
[up-mep | down- Specify whether the MEP is up or down facing. mep]
802.1ag 155
domain [name | level] ma-name name
mepid mep-id
Up-MEP: monitors the forwarding path internal to a bridge on the customer or provider edge; on Dell Networking systems, the internal forwarding path is effectively the switch fabric and forwarding engine.
Down-MEP: monitors the forwarding path external to another bridge.
Enter the keyword domain and then enter the domain name or domain level.
Enter the keyword ma-name and then enter the name of the maintenance association.
Enter an MEP ID. The range is from 1 to 8191.
Defaults
none
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series.
ethernet cfm mip
Create a maintenance intermediate point (MIP).
Syntax Parameters
ethernet cfm mip domain {name | level} ma-name name
domain [name | level]
ma-name name
Enter the keyword domain then the domain name or domain level. Enter the keyword ma-name then the name of the maintenance association.
Defaults
none
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series.
156 802.1ag
mep cross-check
Enable cross-checking for a MEP.
Syntax Parameters
mep cross-check mep-id
mep-id
Enter the MEP ID. The range is from 1 to 8191.
Defaults
none
Command Modes ECFM DOMAIN
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series.
mep cross-check enable
Enable cross-checking.
Syntax Parameters
mep cross-check enable {port | vlan-id}
port vlan-id
Down service with no VLAN association. Enter the VLAN to apply the cross-check.
Defaults
none
Command Modes ECFM DOMAIN
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series.
802.1ag 157
mep cross-check start-delay
Configure the amount of time the system waits for a remote MEP to come up before the cross-check operation is started.
Syntax Parameters
mep cross-check start-delay number
start-delay number
Enter a start-delay in seconds. The range is from 3 to 100 seconds.
Defaults
3 ccms
Command Modes ETHERNET CFM
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series.
ping ethernet
Send a loopback message.
Syntax Parameters
ping ethernet domain [name l level] ma-name ma-name remote {dest-mep-id | mac-addr mac-address} source {src-mep-id | port interface}
name | level
ma-name maname
dest-mep-id
mac-addr macaddress
src-mep-id
port interface
Enter the domain name or level. Enter the keyword ma-name and then enter the maintenance association name.
Enter the MEP ID that is the target of the ping. Enter the keyword mac-addr and then enter the MAC address that is the target of the ping. Enter the MEP ID that originates the ping. Enter the keyword port and then enter the interface that originates the ping.
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T.
158 802.1ag
Version
8.3.11.1 8.3.7.0 8.3.1.0
Description
Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series.
show ethernet cfm domain
Display maintenance domain information.
Syntax Parameters
show ethernet cfm domain [name | level | brief]
name | level brief
Enter the maintenance domain name or level. Enter the keyword brief to display a summary output.
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.3.7.0 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the S4810. Introduced on the S-Series.
Example
Dell# show ethernet cfm domain
Domain Name: customer
Level: 7
Total Service: 1
Services
MA-Name
VLAN
CC-Int
My_MA
200
10s
Domain Name: My_Domain
Level: 6
Total Service: 1
Services
MA-Name
VLAN
CC-Int
Your_MA
100
10s
X-CHK Status enabled
X-CHK Status enabled
show ethernet cfm maintenance-points local
Display configured MEPs and MIPs.
Syntax Parameters
show ethernet cfm maintenance-points local [mep | mip]
mep mip
Enter the keyword mep to display configured MEPs. Enter the keyword mip to display configured MIPs.
Defaults
none
802.1ag 159
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) Version 8.3.19.0 Version 8.3.7.0 Version 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the S4810. Introduced on the S-Series.
Example
Dell#show ethernet cfm maintenance-points local mip
-----------------------------------------------------
MPID Domain Name Level Type Port CCM-Status
MA Name
VLAN Dir MAC
-----------------------------------------------------
0 service1
4
MIP Te 1/5/1
Disabled
My_MA
3333
DOWN 00:01:e8:0b:c6:36
0 service1 Your_MA
4 3333
MIP Te 1/5/1
Disabled
UP 00:01:e8:0b:c6:36
show ethernet cfm maintenance-points remote
Display the MEP Database.
Syntax Parameters
show ethernet cfm maintenance-points remote detail [active | domain {level | name} | expired | waiting]
active domain [name | level] expired
waiting
Enter the keyword active to display only the MEPs in active state. Enter the keyword domain then the domain name or domain level.
Enter the keyword expired to view MEP entries that have expired due to connectivity failure. Enter the keyword waiting to display MEP entries waiting for response.
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) Version 8.3.19.0 Version 8.3.7.0 Version 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the S4810. Introduced on the S-Series.
160 802.1ag
Example
Dell#show ethernet cfm maintenance-points remote detail MAC Address: 00:01:e8:58:68:78 Domain Name: cfm0 MA Name: test0 Level: 7 VLAN: 10 MP ID: 900 Sender Chassis ID: Force10 MEP Interface status: Up MEP Port status: Forwarding Receive RDI: FALSE MP Status: Active
show ethernet cfm mipbd
Display the MIP database.
Syntax
show ethernet cfm mipdb
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.3.7.0 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the S4810. Introduced on the S-Series.
show ethernet cfm statistics
Display MEP statistics.
Syntax Parameters
show ethernet cfm statistics [domain {name | level} vlan-id vlan-id mpid mpid]
domain name | level vlan-id vlan-id mpid mpid
Enter the keyword domain to display statistics for a particular domain. Enter the domain name or level. Enter the keyword vlan-id then a VLAN ID. Enter the keyword mpid then a maintenance point ID.
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
802.1ag 161
Example
Version
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.3.7.0 8.3.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the S4810. Introduced on the S-Series.
Dell# show ethernet cfm statistics Domain Name: Customer Domain Level: 7 MA Name: My_MA MPID: 300
CCMs: Transmitted:
LTRs: Unexpected Rcvd:
LBRs: Received: Received Bad MSDU: Transmitted:
1503 0 0 0 0
RcvdSeqErrors: 0 Rcvd Out Of Order: 0
show ethernet cfm port-statistics
Display CFM statistics by port.
Syntax Parameters
show ethernet cfm port-statistics [interface type slot/port[/subport]]
interface type
slot/port[/ subport]
Enter the keyword interface then the interface type.
Enter the slot and port numbers for the port. Enter the subport number if a 40G port is fanned-out into 10G ports.
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.3.7.0 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the S4810. Introduced on the S-Series.
Example
Dell#show ethernet cfm port-statistics interface tengigabitethernet 1/5 Port statistics for port: Te 1/5 ================================== RX Statistics ============= Total CFM Pkts 75394 CCM Pkts 75394 LBM Pkts 0 LTM Pkts 0
162 802.1ag
LBR Pkts 0 LTR Pkts 0 Bad CFM Pkts 0 CFM Pkts Discarded 0 CFM Pkts forwarded 102417 TX Statistics ============= Total CFM Pkts 10303 CCM Pkts 0 LBM Pkts 0 LTM Pkts 3 LBR Pkts 0 LTR Pkts 0
show ethernet cfm traceroute-cache
Display the link trace cache.
Syntax
show ethernet cfm traceroute-cache
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) Version 8.3.19.0 Version 8.3.7.0 Version 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the S4810. Introduced on the S-Series.
Example
Dell#show ethernet cfm traceroute-cache
Traceroute to 00:01:e8:52:4a:f8 on Domain Customer2, Level 7, MA name
Test2 with VLAN
2
------------------------------------------------------
Hops
Host
IngressMAC
Ingr Action
Relay Action
Next Host
Egress MAC
Egress Action FWD Status
--------------------------------------------------------
4 00:00:00:01:e8:53:4a:f8 00:01:e8:52:4a:f8 IngOK
RlyHit
00:00:00:01:e8:52:4a:f8
Terminal
MEP
service
Create maintenance association.
Syntax Parameters
service name vlan vlan-id
name vlan vlan-id
Enter a maintenance association name. Enter the keyword vlan and then enter the VLAN ID. The range is from 1 to 4094.
Defaults
none
Command Modes ECFM DOMAIN
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
802.1ag 163
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series.
traceroute cache hold-time
Set the amount of time a trace result is cached.
Syntax Parameters
traceroute cache hold-time minutes
minutes
Enter a hold-time. The range is from 10 to 65535 minutes.
Defaults
100 minutes
Command Modes ETHERNET CFM
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series.
traceroute cache size
Set the size of the link trace cache.
Syntax Parameters
traceroute cache size entries
entries
Enter the number of entries the link trace cache can hold. The range is from 1 to 4095 entries.
Defaults
100 entries
Command Modes ETHERNET CFM
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
164 802.1ag
Version
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series.
traceroute ethernet
Send a linktrace message to an MEP.
Syntax Parameters
traceroute ethernet domain [name | level] ma-name remote {mep-id mep-id | mac-addr mac-address}
domain name | level
ma-name maname
mepid mep-id
mac-addr macaddress
Enter the keyword domain then the domain name or level.
Enter the keyword ma-name then the maintenance association name. Enter the MEP ID that is the trace target. Enter the MAC address of the trace target.
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series.
802.1ag 165
6
802.1X
An authentication server must authenticate a client connected to an 802.1X switch port. Until the authentication, only extensible authentication protocol over LAN (EAPOL) traffic is allowed through the port to which a client is connected. After authentication is successful, normal traffic passes through the port.
The Dell Networking operating software supports remote authentication dial-in service (RADIUS) and active directory environments using 802.1X Port Authentication.
Important Points to Remember
Dell Networking operating software limits network access for certain users by using virtual local area network (VLAN) assignments. 802.1X with VLAN assignment has these characteristics when configured on the switch and the RADIUS server.
If the primary RADIUS server becomes unresponsive, the authenticator begins using a secondary RADIUS server, if configured.
If no VLAN is supplied by the RADIUS server or if you disable 802.1X authorization, the port configures in its access VLAN after successful authentication.
If you enable 802.1X authorization but the VLAN information from the RADIUS server is not valid, the port returns to the Unauthorized state and remains in the configured access VLAN. This safeguard prevents ports from appearing unexpectedly in an inappropriate VLAN due to a configuration error. Configuration errors create an entry in Syslog.
If you enable 802.1X authorization and all information from the RADIUS server is valid, the port is placed in the specified VLAN after authentication.
If you enable port security on an 802.1X port with VLAN assignment, the port is placed in the RADIUS server assigned VLAN. If you disable 802.1X on the port, it returns to the configured access VLAN. When the port is in the Force Authorized, Force Unauthorized, or Shutdown state, it is placed in the configured access
VLAN. If an 802.1X port is authenticated and put in the RADIUS server assigned VLAN, any change to the port access VLAN
configuration does not take effect. The 802.1X with VLAN assignment feature is not supported on trunk ports, dynamic ports, or with dynamic-access port
assignment through a VLAN membership.
Topics:
� debug dot1x � dot1x auth-fail-vlan � dot1x auth-server � dot1x auth-type mab-only � dot1x authentication (Configuration) � dot1x authentication (Interface) � dot1x guest-vlan � dot1x host-mode � dot1x mac-auth-bypass � dot1x max-eap-req � dot1x max-supplicants � dot1x port-control � dot1x quiet-period � dot1x reauthentication � dot1x reauth-max � dot1x server-timeout � dot1x supplicant-timeout � dot1x tx-period � show dot1x cos-mapping interface � show dot1x interface
166 802.1X
debug dot1x
Display 802.1X debugging information.
Syntax Parameters
debug dot1x [all | auth-pae-fsm | backend-fsm | eapol-pdu] [interface interface]
all auth-pae-fsm backend-fsm eapol-pdu interface interface
Enable all 802.1X debug messages. Enable authentication PAE FSM debug messages. Enable backend FSM debug messages. Enable the EAPOL frame trace and related debug messages. Restricts the debugging information to an interface.
Defaults
Disabled
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1 8.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the C-Series and S-Series.
dot1x auth-fail-vlan
Configure an authentication failure VLAN for users and devices that fail 802.1X authentication.
Syntax
dot1x auth-fail-vlan vlan-id [max-attempts number]
To delete the authentication failure VLAN, use the no dot1x auth-fail-vlan vlan-id [maxattempts number] command.
Parameters
vlan-id
max-attempts number
Enter the VLAN Identifier. The range is from 1 to 4094.
(OPTIONAL) Enter the keywords max-attempts followed number of attempts desired before authentication fails. The range is from 1 to 5. The default is 3.
Defaults
3 attempts
Command Modes CONFIGURATION (conf-if-interface-slot/port)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
802.1X 167
Usage Information
Related Commands
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1 8.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the C-Series and S-Series.
If the host responds to 802.1X with an incorrect login/password, the login fails. The switch attempts to authenticate again until the maximum attempts configured is reached. If the authentication fails after all allowed attempts, the interface moves to the authentication failed VLAN.
After the authentication VLAN is assigned, the port-state must be toggled to restart authentication. Authentication occurs at the next reauthentication interval (dot1x reauthentication).
dot1x port-control -- Enable port control on an interface dot1x guest-vlan -- Configure a guest VLAN for limited access users or for devices that are not
802.1X capable. show dot1x interface -- Display the 802.1X configuration of an interface.
dot1x auth-server
Configure the authentication server to RADIUS.
Syntax
dot1x auth-server radius
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the C-Series and S-Series.
168 802.1X
Version
7.4.1.0
Description
Introduced on the E-Series.
dot1x auth-type mab-only
To authenticate a device with MAC authentication bypass (MAB), only use the host MAC address.
Syntax
dot1x auth-type mab-only
Defaults
Disabled
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1 8.4.2.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the C-Series and S-Series.
Usage Information
Related Commands
The prerequisites for enabling MAB-only authentication on a port are:
Enable 802.1X authentication globally on the switch and on the port (the dot1x authentication command).
Enable MAC authentication bypass on the port (the dot1x mac-auth-bypass command).
In MAB-only authentication mode, a port authenticates using the host MAC address even though 802.1xauthentication is enabled. If the MAB-only authentication fails, the host is placed in the guest VLAN (if configured).
To disable MAB-only authentication on a port, enter the no dot1x auth-type mab-only command.
dot1x mac-auth-bypass -- Enable MAC authentication bypass.
dot1x authentication (Configuration)
Enable dot1x globally. Enable dot1x both globally and at the interface level.
Syntax
dot1x authentication To disable dot1x on a globally, use the no dot1x authentication command.
Defaults
Disabled
Command Modes CONFIGURATION
802.1X 169
Command History
Related Commands
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1 7.6.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the C-Series and S-Series. Introduced on the E-Series TeraScale.
dot1x authentication (Interface) -- Enables dot1x on an interface.
dot1x authentication (Interface)
Enable dot1x on an interface. Enable dot1x both globally and at the interface level.
Syntax
dot1x authentication To disable dot1x on an interface, use the no dot1x authentication command.
Defaults
Disabled
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1 7.6.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the C-Series and S-Series. Introduced on the E-Series.
170 802.1X
Related Commands
dot1x authentication (Configuration) -- Enables dot1x globally.
dot1x guest-vlan
Configure a guest VLAN for limited access users or for devices that are not 802.1X capable.
Syntax
dot1x guest-vlan vlan-id To disable the guest VLAN, use the no dot1x guest-vlan vlan-id command.
Parameters
vlan-id
Enter the VLAN Identifier. The range is from 1 to 4094.
Defaults
Not configured.
Command Modes CONFIGURATION (conf-if-interface-slot/port)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the C-Series, E-Series, and S-Series.
Usage Information
1X authentication is enabled when an interface is connected to the switch. If the host fails to respond within a designated amount of time, the authenticator places the port in the guest VLAN.
If a device does not respond within 30 seconds, it is assumed that the device is not 802.1X capable. Therefore, a guest VLAN is allocated to the interface and authentication, for the device, occurs at the next reauthentication interval (dot1x reauthentication).
If the host fails authentication for the designated number of times, the authenticator places the port in authentication failed VLAN (dot1x auth-fail-vlan).
NOTE: You can create the Layer 3 portion of a guest VLAN and authentication fail VLANs regardless if the VLAN is assigned to an interface or not. After an interface is assigned a guest VLAN (which has an IP address), routing through the guest VLAN is the same as any other traffic. However, the interface may join/leave a VLAN dynamically.
Related Commands
dot1x auth-fail-vlan -- Configure an authentication failure VLAN. dot1x reauthentication -- Enable periodic re-authentication of the client. dot1x reauth-max --
Configure the maximum number of times to re-authenticate a port before it becomes unauthorized
802.1X 171
dot1x host-mode
Enable single-host or multi-host authentication.
Syntax Parameters
dot1x host-mode {single-host | multi-host | multi-auth}
single-host multi-host multi-auth
Enable single-host authentication. Enable multi-host authentication. Enable multi-supplicant authentication.
Defaults
single-host
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1 8.4.1.0 8.3.2.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Added the multi-auth option on the C-Series and S-Series. Added the single-host and multi-host options on the C-Series, E-Series, and S-Series.
Usage Information
Related Commands
Single-host mode authenticates only one host per authenticator port and drops all other traffic on the port.
Multi-host mode authenticates the first host to respond to an Identity Request and then permits all other traffic on the port.
Multi-supplicant mode authenticates every device attempting to connect to the network on the authenticator port.
show dot1x interface -- Display the 802.1X configuration of an interface.
dot1x mac-auth-bypass
Enable MAC authentication bypass. If 802.1X times out because the host did not respond to the Identity Request frame, Dell Networking OS attempts to authenticate the host based on its MAC address.
Syntax
dot1x mac-auth-bypass To disable MAC authentication bypass on a port, use the no dot1x mac-auth-bypass command.
Defaults
Disabled
Command Modes INTERFACE
172 802.1X
Command History
Usage Information
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1 8.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the C-Series and S-Series.
To disable MAC authentication bypass on a port, enter the no dot1x mac-auth-bypass command.
dot1x max-eap-req
Configure the maximum number of times an extensive authentication protocol (EAP) request is transmitted before the session times out.
Syntax
dot1x max-eap-req number To return to the default, use the no dot1x max-eap-req command.
Parameters
number
Enter the number of times an EAP request is transmitted before a session time-out. The range is from 1 to 10. The default is 2.
Defaults
2
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the C-Series and S-Series.
802.1X 173
Version
7.4.1.0
Description
Introduced on the E-Series.
dot1x max-supplicants
Restrict the number of supplicants that can be authenticated and permitted to access the network through the port. This configuration is only takes effect in Multi-auth mode.
Syntax Parameters
dot1x max-supplicants number
number
Enter the number of supplicants that can be authenticated on a single port in Multiauth mode. The range is from 1 to 128. The default is 128.
Defaults
128 hosts can be authenticated on a single authenticator port.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1 8.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the C-Series and S-Series.
Related Commands
dot1x host-mode -- Enables single-host or multi-host authentication.
dot1x port-control
Enable port control on an interface.
Syntax Parameters
dot1x port-control {force-authorized | auto | force-unauthorized}
force-authorized Enter the keywords force-authorized to forcibly authorize a port.
auto
Enter the keyword auto to authorize a port based on the 802.1X operation result.
forceunauthorized
Enter the keywords force-unauthorized to forcibly de-authorize a port.
Defaults
none
Command Modes Auto
174 802.1X
Command History
Usage Information
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1 7.6.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the C-Series and S-Series. Introduced on the E-Series.
The authenticator completes authentication only when you set port-control to auto.
dot1x quiet-period
Set the number of seconds that the authenticator remains quiet after a failed authentication with a client.
Syntax
dot1x quiet-period seconds To disable quiet time, use the no dot1x quiet-time command.
Parameters
seconds
Enter the number of seconds. The range is from 1 to 65535. The default is 60.
Defaults
60 seconds
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 7.6.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the C-Series and S-Series. Introduced on the E-Series.
802.1X 175
dot1x reauthentication
Enable periodic reauthentication of the client.
Syntax
dot1x reauthentication [interval seconds] To disable periodic reauthentication, use the no dot1x reauthentication command.
Parameters
interval seconds
(Optional) Enter the keyword interval then the interval time, in seconds, after which reauthentication is initiated. The range is from 1 to 31536000 (one year). The default is 3600 (1 hour).
Defaults
3600 seconds (1 hour)
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1 7.6.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the C-Series and S-Series. Introduced on the E-Series.
dot1x reauth-max
Configure the maximum number of times a port can re-authenticate before the port becomes unauthorized.
Syntax
dot1x reauth-max number To return to the default, use the no dot1x reauth-max command.
Parameters
number
Enter the permitted number of re-authentications. The range is from 1 to 10. The default is 2.
Defaults
2
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
176 802.1X
Version
9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1 7.6.1.0 7.4.1.0
Description
Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the C-Series and S-Series. Introduced on the E-Series.
dot1x server-timeout
Configure the amount of time after which exchanges with the server time-out.
Syntax
dot1x server-timeout seconds To return to the default, use the no dot1x server-timeout command.
Parameters
seconds
Enter a time-out value in seconds. The range is from 1 to 300, where 300 is implementation dependant. The default is 30.
Defaults
30 seconds
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1 7.6.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the C-Series and S-Series. Introduced on the E-Series.
Usage Information
When you configure the dot1x server-timeout value, take into account the communication medium used to communicate with an authentication server and the number of RADIUS servers configured. Ideally, the dot1x server-timeout value (in seconds) is based on the configured RADIUS-server timeout and retransmit values and calculated according to the following formula: dot1x servertimeout seconds > (radius-server retransmit seconds + 1) * radius-server timeout seconds.
802.1X 177
Example
Where the default values are as follows: dot1x server-timeout (30 seconds), radius-server retransmit (3 seconds), and radius-server timeout (5 seconds).
Dell(conf)#radius-server host 10.11.197.105 timeout 6 Dell(conf)#radius-server host 10.11.197.105 retransmit 4 Dell(conf)#interface tengigabitethernet 2/23 Dell(conf-if-te-2/23)#dot1x server-timeout 40
dot1x supplicant-timeout
Configure the amount of time after which exchanges with the supplicant time-out.
Syntax
dot1x supplicant-timeout seconds To return to the default, use the no dot1x supplicant-timeout command.
Parameters
seconds
Enter a time-out value in seconds. The range is from 1 to 300, where 300 is implementation dependant. The default is 30.
Defaults
30 seconds
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1 7.6.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the C-Series and S-Series. Introduced on the E-Series.
dot1x tx-period
Configure the intervals at which EAPOL PDUs the Authenticator PAE transmits.
Syntax
dot1x tx-period seconds To return to the default, use the no dot1x tx-period command.
Parameters
seconds
Enter the interval time, in seconds, that EAPOL PDUs are transmitted. The range is from 1 to 65535. The default is 30.
Defaults
30 seconds
178 802.1X
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1 7.6.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the C-Series and S-Series. Introduced on the E-Series.
show dot1x cos-mapping interface
Display the CoS priority-mapping table the RADIUS server provides and applies to authenticated supplicants on an 802.1Xenabled system.
Syntax Parameters
show dot1x cos-mapping interface interface [mac-address mac-address]
interface
Enter one of the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
mac-address
(Optional) MAC address of an 802.1X-authenticated supplicant.
Defaults
none
Command Modes EXEC EXEC privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000.
802.1X 179
Usage Information
Example
Version
8.3.19.0 8.3.12.0 8.3.11.1 8.4.2.1
Description
Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the C-Series and S-Series.
Enter a supplicant's MAC address using the mac-address option to display CoS mapping information only for the specified supplicant.
You can display the CoS mapping information applied to traffic from authenticated supplicants on 802.1Xenabled ports that are in Single-Hot, Multi-Host, and Multi-Supplicant authentication modes.
Dell#show dot1x cos-mapping interface tengigabitethernet 1/32
802.1p CoS re-map table on Te 1/32:
----------------------------------
Dot1p
Remapped Dot1p
0
7
1
6
2
5
3
4
4
3
5
2
6
1
7
0
Dell#
Dell#show dot1x cos-mapping interface tengigabitethernet 1/32 macaddress 00:00:00:00:00:10 Supplicant Mac: 0 0 0 0 0 10 Lookup for Mac:
802.1p CoS re-map table on Te 1/32: ----------------------------------
802.1p CoS re-map table for Supplicant: 00:00:00:00:00:10
Dot1p 0 1 2 3 4 5 6 7 Dell#
Remapped Dot1p 7 6 5 4 3 2 1 0
show dot1x interface
Display the 802.1X configuration of an interface.
Syntax Parameters
show dot1x interface interface [mac-address mac-address]
interface
Enter one of the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
mac-address
(Optional) MAC address of a supplicant.
180 802.1X
Defaults
none
Command Modes EXEC EXEC privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.11.1 8.4.2.1 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Added the mac-address option on the C-Series and S-Series. Introduced on the C-Series, E-Series, and S-Series.
Usage Information
Example
If you enable 802.1X multi-supplicant authentication on a port, additional 802.1X configuration details (Port Authentication status, Untagged VLAN ID, Authentication PAE state, and Backend state) display for each supplicant, as shown in the following example.
Dell#show dot1x interface tengigabitethernet 1/32
802.1x information on Te 1/32:
-----------------------------
Dot1x Status:
Enable
Port Control:
AUTO
Port Auth Status:
AUTHORIZED(MAC-AUTH-BYPASS)
Re-Authentication:
Disable
Untagged VLAN id:
400
Guest VLAN:
Enable
Guest VLAN id:
100
Auth-Fail VLAN:
Disable
Auth-Fail VLAN id:
NONE
Auth-Fail Max-Attempts: NONE
Mac-Auth-Bypass:
Enable
Mac-Auth-Bypass Only:
Enable
Tx Period:
3 seconds
Quiet Period:
60 seconds
ReAuth Max:
2
Supplicant Timeout:
30 seconds
Server Timeout:
30 seconds
Re-Auth Interval:
3600 seconds
Max-EAP-Req:
2
Host Mode:
SINGLE_HOST
Auth PAE State:
Authenticated
Backend State:
Idle
Dell#
Example (macaddress)
Dell#show dot1x interface tengigabitethernet 1/32 mac-address 00:00:00:00:00:10 Supplicant Mac: 0 0 0 0 0 10 Lookup for Mac: 802.1x information on Te 1/32:
802.1X 181
-----------------------------
Dot1x Status:
Enable
Port Control:
AUTO
Re-Authentication:
Disable
Guest VLAN:
Enable
Guest VLAN id:
100
Auth-Fail VLAN:
Disable
Auth-Fail VLAN id:
NONE
Auth-Fail Max-Attempts: NONE
Mac-Auth-Bypass:
Enable
Mac-Auth-Bypass Only:
Enable
Tx Period:
3 seconds
Quiet Period:
60 seconds
ReAuth Max:
2
Supplicant Timeout:
30 seconds
Server Timeout:
30 seconds
Re-Auth Interval:
3600 seconds
Max-EAP-Req:
2
Host Mode:
MULTI_AUTH
Max-Supplicants:
128
Port status and State info for Supplicant: 00:00:00:00:00:10
Port Auth Status: Untagged VLAN id: Auth PAE State: Backend State: Dell#
AUTHORIZED(MAC-AUTH-BYPASS) 400 Authenticated Idle
Dell# show dot1x interface tengigabitethernet 1/32 mac-address 00:00:00:00:00:11 Supplicant Mac: 0 0 0 0 0 10 Lookup for Mac:
802.1x information on Te 1/32:
-----------------------------
Dot1x Status:
Enable
Port Control:
AUTO
Re-Authentication:
Disable
Guest VLAN:
Enable
Guest VLAN id:
100
Auth-Fail VLAN:
Disable
Auth-Fail VLAN id:
NONE
Auth-Fail Max-Attempts: NONE
Mac-Auth-Bypass:
Enable
Mac-Auth-Bypass Only:
Enable
Tx Period:
3 seconds
Quiet Period:
60 seconds
ReAuth Max:
2
Supplicant Timeout:
30 seconds
Server Timeout:
30 seconds
Re-Auth Interval:
3600 seconds
Max-EAP-Req:
2
Host Mode:
MULTI_AUTH
Max-Supplicants:
128
Port status and State info for Supplicant: 00:00:00:00:00:11
Port Auth Status: Untagged VLAN id: Auth PAE State: Backend State: Dell#
AUTHORIZED(GUEST-VLAN) 100 Authenticated Idle
Dell#show dot1x interface gigabitethernet 1/32 mac-address 00:00:00:00:00:10 Supplicant Mac: 0 0 0 0 0 10 Lookup for Mac:
802.1x information on Gi 1/32:
-----------------------------
Dot1x Status:
Enable
Port Control:
AUTO
182 802.1X
Re-Authentication: Guest VLAN: Guest VLAN id: Auth-Fail VLAN: Auth-Fail VLAN id: Auth-Fail Max-Attempts: Mac-Auth-Bypass: Mac-Auth-Bypass Only: Tx Period: Quiet Period: ReAuth Max: Supplicant Timeout: Server Timeout: Re-Auth Interval: Max-EAP-Req: Host Mode: Max-Supplicants:
Disable Enable 100 Disable NONE NONE Enable Enable 3 seconds 60 seconds 2 30 seconds 30 seconds 3600 seconds 2 MULTI_AUTH 128
Port status and State info for Supplicant: 00:00:00:00:00:10
Port Auth Status: Untagged VLAN id: Auth PAE State: Backend State: Dell#
AUTHORIZED(MAC-AUTH-BYPASS) 400 Authenticated Idle
Dell# show dot1x interface gigabitethernet 1/32 mac-address 00:00:00:00:00:11 Supplicant Mac: 0 0 0 0 0 10 Lookup for Mac:
802.1x information on Gi 1/32:
-----------------------------
Dot1x Status:
Enable
Port Control:
AUTO
Re-Authentication:
Disable
Guest VLAN:
Enable
Guest VLAN id:
100
Auth-Fail VLAN:
Disable
Auth-Fail VLAN id:
NONE
Auth-Fail Max-Attempts: NONE
Mac-Auth-Bypass:
Enable
Mac-Auth-Bypass Only:
Enable
Tx Period:
3 seconds
Quiet Period:
60 seconds
ReAuth Max:
2
Supplicant Timeout:
30 seconds
Server Timeout:
30 seconds
Re-Auth Interval:
3600 seconds
Max-EAP-Req:
2
Host Mode:
MULTI_AUTH
Max-Supplicants:
128
Port status and State info for Supplicant: 00:00:00:00:00:11
Port Auth Status: Untagged VLAN id: Auth PAE State: Backend State: Dell#
AUTHORIZED(GUEST-VLAN) 100 Authenticated Idle
802.1X 183
7
Access Control Lists (ACL)
Access control lists (ACLs) are supported by the Dell Networking OS.
Dell Networking OS supports the following types of ACL, IP prefix list, and route maps:
Commands Common to all ACL Types Common IP ACL Commands Standard IP ACL Commands Extended IP ACL Commands Common MAC Access List Commands Standard MAC ACL Commands Extended MAC ACL Commands IP Prefix List Commands Route Map Commands AS-Path Commands IP Community List Commands
NOTE: For ACL commands that use the Trace function, refer to the Trace List Commands section in the Security chapter.
NOTE: For IPv6 ACL commands, refer to IPv6 Access Control Lists (IPv6 ACLs).
Topics:
� Commands Common to all ACL Types � Common IP ACL Commands � Standard IP ACL Commands � Extended IP ACL Commands � Common MAC Access List Commands � Standard MAC ACL Commands � Extended MAC ACL Commands � IP Prefix List Commands � Route Map Commands � AS-Path Commands � IP Community List Commands � UDF ACL Commands � deny (for Standard IP ACLs) � deny (for Extended IP ACLs) � seq (for Standard IPv4 ACLs) � deny tcp (for Extended IP ACLs) � deny udp (for Extended IP ACLs) � deny arp (for Extended MAC ACLs) � deny icmp (for Extended IP ACLs) � deny ether-type (for Extended MAC ACLs) � deny (for Standard MAC ACLs) � deny (for Extended MAC ACLs) � permit (for Standard IP ACLs) � permit arp (for Extended MAC ACLs) � permit ether-type (for Extended MAC ACLs) � permit icmp (for Extended IP ACLs) � permit udp (for Extended IP ACLs) � permit (for Extended IP ACLs) � permit (for Standard MAC ACLs) � seq (for Standard MAC ACLs)
184 Access Control Lists (ACL)
� permit tcp (for Extended IP ACLs) � seq arp (for Extended MAC ACLs) � seq ether-type (for Extended MAC ACLs) � seq (for IP ACLs) � seq (for IPv6 ACLs) � permit udp (for IPv6 ACLs) � permit tcp (for IPv6 ACLs) � permit icmp (for IPv6 ACLs) � permit (for IPv6 ACLs) � deny udp (for IPv6 ACLs) � deny tcp (for IPv6 ACLs) � deny icmp (for Extended IPv6 ACLs) � deny (for IPv6 ACLs)
Commands Common to all ACL Types
The following commands are available within each ACL mode and do not have mode-specific options. Some commands in this chapter may use similar names, but require different options to support the different ACL types (for example, the deny and permit commands).
remark
Enter a description for an ACL entry.
Syntax Parameters
remark [remark-number] [description]
remark-number
Enter the remark number. The range is from 0 to 4294967290. NOTE: You can use the same sequence number for the remark and an ACL rule.
description
Enter a description of up to 80 characters.
Defaults
Not configured.
Command Modes CONFIGURATION-STANDARD-ACCESS-LIST CONFIGURATION-EXTENDED-ACCESS-LIST CONFIGURATION-MAC ACCESS LIST-STANDARD CONFIGURATION-MAC ACCESS LIST-EXTENDED
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale.
Access Control Lists (ACL) 185
Usage Information
Example
Related Commands
Version
7.6.1.0 7.5.1.0 6.4.1.0
Description
Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
The remark command is available in each ACL mode. You can configure up to 4294967290 remarks in a given ACL.
The following example shows the use of the remark command twice within CONFIGURATIONSTANDARD-ACCESS-LIST mode. The same sequence number was used for the remark and for an associated ACL rule. The remark precedes the rule in the running-config because it is assumed that the remark is for the rule with the same sequence number, or the group of rules that follow the remark.
Dell(config-std-nacl)#remark 10 Deny rest of the traffic Dell(config-std-nacl)#remark 5 Permit traffic from XYZ Inc. Dell(config-std-nacl)#show config ! ip access-list standard test remark 5 Permit traffic from XYZ Inc. seq 5 permit 1.1.1.0/24 remark 10 Deny rest of the traffic seq 10 Deny any Dell(config-std-nacl)#
show config -- displays the current ACL configuration.
show config
Display the current ACL configuration.
Syntax
show config
Command Modes CONFIGURATION-STANDARD-ACCESS-LIST CONFIGURATION-EXTENDED-ACCESS-LIST CONFIGURATION-MAC ACCESS LIST-STANDARD CONFIGURATION-MAC ACCESS LIST-EXTENDED
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.11.1 8.3.19.0 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series.
186 Access Control Lists (ACL)
Example
Version
6.2.1.1
Description
Introduced on the E-Series.
Dell(config-std-nacl)#show conf ! ip access-list standard test
remark 5 Permit traffic from XYZ Inc. seq 5 permit 1.1.1.0/24 count remark 10 Deny traffic from ABC seq 10 deny 2.1.1.0/24 count Dell(config-std-nacl)#
Common IP ACL Commands
The following commands are available within both Ingress and Egress IP ACL modes (Standard and Extended) and do not have mode-specific options. When an ACL is created without a rule and then is applied to an interface, ACL behavior reflects an implicit permit. The platform supports both Ingress and Egress IP ACLs.
NOTE: Also refer to the Commands Common to all ACL Types section.
access-class
Apply a standard ACL to a terminal line.
Syntax
access-class access-list-name [ipv4 | ipv6] To remove an ACL, use the no access-class access-list-name [ipv4 | ipv6] command.
Parameters
access-list-name Enter the name of a configured Standard ACL, up to 140 characters.
ipv4
Enter the keyword ipv4 to configure an IPv4 access class.
ipv6
Enter the keyword ipv6 to configure an IPv6 access class.
Defaults
Not configured.
Command Modes LINE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.8(0.0) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Added the ipv4 and ipv6 parameters to the command. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Access Control Lists (ACL) 187
Usage Information
Version
8.1.1.0 7.8.1.0
7.6.1.0 7.5.1.0 6.2.1.1
Description
Introduced on the E-Series ExaScale. Increase the name string to accept up to 140 characters. Prior to 7.8.1.0, names were up to 16 characters long. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
When you use the access-class access-list-name command without specifying the ipv4 or ipv6 attribute, both IPv4 as well as IPv6 rules that are defined in that ACL are applied to the terminal. This method is a generic way of configuring access restrictions.
To be able to filter access exclusively using either IPv4 or IPv6 rules, use either the ipv4 or ipv6 attribute along with the access-class access-list-name command. Depending on the attribute that you specify (ipv4 or ipv6), the ACL processes either IPv4 or IPv6 rules, but not both. Using this configuration, you can set up two different types of access classes with each class processing either IPv4 or IPv6 rules separately.
However, if you already have configured generic IP ACL on a terminal line, then you cannot further apply IPv4 or IPv6 specific filtering on top of this configuration. Because, both IPv4 and IPv6 access classes are already configured on this terminal line. Before applying either IPv4 or IPv6 filtering, first undo the generic configuration using the no access-class access-list-name command.
Similarly, if you have configured either IPv4 or IPv6 specific filtering on a terminal line, you cannot apply generic IP ACLs on top of this configuration. Before applying the generic ACL configuration, first undo the existing configuration using the no access-class access-list-name [ipv4 | ipv6] command.
clear counters ip access-group
Erase all counters maintained for access lists.
Syntax Parameters
clear counters ip access-group [access-list-name] access-list-name (OPTIONAL) Enter the name of a configured access-list, up to 140 characters.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Increase the name string to accept up to 140 characters. Prior to 7.8.1.0, names were up to 16 characters long.
188 Access Control Lists (ACL)
Version
7.6.1.0 7.5.1.0 6.2.1.1
Description
Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
ip access-group
Assign an IP access list (IP ACL) to an interface.
Syntax
ip access-group access-list-name {in | out} [implicit-permit] [vlan vlanid] [vrf vrf-name]
To delete an IP access-group configuration, use the no ip access-group access-list-name {in | out} [implicit-permit] [vlan vlan-id] [vrf vrf-name] command.
Parameters
access-list-name Enter the name of a configured access list, up to 140 characters.
in
Enter the keyword in to apply the ACL to incoming traffic.
out
Enter the keyword out to apply the ACL to outgoing traffic.
implicit-permit
(OPTIONAL) Enter the keyword implicit-permit to change the default action of the ACL from implicit-deny to implicit-permit (that is, if the traffic does not match the filters in the ACL, the traffic is permitted instead of dropped).
vlan vlan-id
(OPTIONAL) Enter the keyword vlan then the ID numbers of the VLANs. The range is from 1 to 4094 (you can use IDs from 1 to 4094).
vrf vrf-name
(OPTIONAL) Enter the keyword vrf then the ID numbers of the VRFs. The range is from 1 to 63 (you can use IDs from 1 to 63).
NOTE: When you specify a single VRF, use the name of the VRF instead of the
VRF ID number. Use the VRF ID numbers only when you specify a range of
VRFs.
Defaults
Not enabled.
Command Modes INTERFACE/VRF MODE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.8.1.0
7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Increased the name string to accept up to 140 characters. Prior to 7.8.1.0, names were up to 16 characters long. Introduced on the S-Series.
Access Control Lists (ACL) 189
Usage Information
Related Commands
Version
7.5.1.0 6.2.1.1
Description
Introduced on the C-Series. Introduced on the E-Series.
You can assign one ACL (standard or extended ACL) to an interface. NOTE: This command supports Loopback interfaces EE3 and EF series route processor modules (RPMs). This command does not support Loopback interfaces ED series RPMs and S-Series Loopback interfaces.
NOTE: If you apply outbound(egress) IP acl on a switch port, the filter applies only for routed traffic egressing out of that port.
To associate an access-list to a non-default VRF, use the vrf attribute of this command. You can use this command at the interface context (physical/LAG) to apply the access-list to a range of VRFs.
The VRF MODE is not available for the default and management VRFs.
ip access-list standard -- configures a standard ACL. ip access-list extended -- configures an extended ACL.
ip control-plane egress-filter
Enable egress Layer 3 ACL lookup for IPv4 CPU traffic.
Syntax
ip control-plane egress-filter
Defaults
Not enabled.
Command Modes EXEC Privilege
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000�ON.
9.2(1.0)
Introduced on the Z9500.
9.0.2.0
Introduced on the S6000.
8.3.19.0
Introduced on the S4820T.
8.3.11.1
Introduced on the Z9000.
8.3.7.0
Introduced on the S4810.
show ip accounting access-list
Display the IP access-lists created on the switch and the sequence of filters.
Syntax Parameters
show ip accounting {access-list access-list-name | cam_count} interface interface [vrf vrf-name]
access-list-name Enter the name of the ACL to be displayed.
cam_count
List the count of the CAM rules for this ACL.
interface interface
Enter the keyword interface then the one of the following keywords and slot/ port[/subport] or number information:
190 Access Control Lists (ACL)
in | out vrf vrf-name
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number.
Identify whether ACL is applied on the ingress or egress side.
(Optional) Enter the keyword vrf and then the name of the VRF to view the IP accounting information on either a default or a non-default VRF.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.5.1.0 8.3.7.0 7.6.1.0 7.5.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for the 4-port 40G line cards on ExaScale. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced.
Usage Information
show ip accounting accesslists Field
"Extended IP..." "seq 5..."
"order 4"
Description
Displays the name of the IP ACL. Displays the filter. If the keywords count or byte were configured in the filter, the number of packets or bytes the filter processes is displayed at the end of the line. Displays the QoS order of priority for the ACL entry.
Example
Dell#show ip accounting access-list L3-ACL vrf vrf3 ! Standard Ingress IP access list L3-ACL on vrf3 Total cam count 3 seq 5 permit 10.1.2.0/24
seq 10 permit 20.1.2.0/24 seq 15 permit 30.1.2.0/24 Dell#
Access Control Lists (ACL) 191
show ip access-lists
Display all of the IP ACLs configured in the system, whether or not they are applied to an interface, and the count of matches/ mismatches against each ACL entry displayed.
Syntax Parameters
show ip access-lists [access-list-name] [interface interface] [in | out] [vrf vrf-name]
access-list-name Enter the name of a configured MAC ACL, up to 140 characters.
interface interface
Enter the keyword interface followed by the one of the following keywords and slot/port or number information:
For a VLAN interface, enter the keyword vlan followed by the slot/port number.
For a Port Channel interface, enter the keyword port-channel followed by a number.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
in | out vrf vrf-name
Identify whether ACL is applied on the ingress or egress side.
Enter the keyword vrf and then the name of the VRF to display the access-lists that are configured on either the default or non-default VRFs.
Command Modes EXEC Privilege
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.2(1.0)
8.5.1.0
8.3.19.0
8.3.11.1
8.3.7.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Added support for the 4-port 40G line cards on ExaScale. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Standard IP ACL Commands
When you create an ACL without any rule and then apply it to an interface, the ACL behavior reflects an implicit permit. The platform supports both Ingress and Egress IP ACLs.
NOTE: Also refer to the Commands Common to all ACL Types and Common IP ACL Commands sections.
deny
To drop packets with a certain IP address, configure a filter.
Syntax
deny {source | any | host {ip-address}} [no-drop]
To remove this filter, you have two choices:
Use the no seq sequence-number command if you know the filter's sequence number. Use the no deny {source [mask] | any | host ip-address} command.
192 Access Control Lists (ACL)
Parameters
source any
host ip-address no-drop
Enter the IP address in dotted decimal format of the network from which the packet was sent.
Enter the keyword any to specify that all routes are subject to the filter. You can enter any of the following keywords to specify route types.
bytes -- Enter the keyword count to count packets the filter processes. count -- Enter the keyword bytesorder to count bytes the filter processes. dscp -- Enter the keyword dcsp followed by the DCSP value to match to the
IP DCSCP values. The range is from 0 to 63. fragments -- Enter the keyword fragments to use ACLs to control packet
fragments. order -- Enter the keyword order to specify the QoS order of priority for
the ACL entry. The range is from 0 to 254 (0 is the highest priority and 254 is the lowest; lower-order numbers have a higher priority). The default is, if you do not use the keyword order, the ACLs have the lowest order by default (255).
Enter the keyword host and then enter the IP address to specify a host IP address only.
Enter the keywords no-drop to match only the forwarded packets.
Defaults
Not configured.
Command Modes CONFIGURATION-STANDARD-ACCESS-LIST
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.8(0.0) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0 8.2.1.0 8.1.1.0 7.6.1.0 7.5.1.0 7.4.1.0 6.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Added the no-drop parameter. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Add the DSCP value for ACL matching. Allows ACL control of fragmented packets for IP (Layer 3) ACLs. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Added support for the non-contiguous mask and added the monitor option. Expanded to include the optional QoS order priority for the ACL entry.
Usage Information
Related Commands
The order option is relevant in the context of the Policy QoS feature only. For more information, refer to the Quality of Service chapter of the Dell Networking OS Configuration Guide.
The software cannot count both packets and bytes, so when you enter the count byte options, only bytes increment.
ip access-list standard -- configures a standard ACL.
Access Control Lists (ACL) 193
permit -- configures a permit filter.
ip access-list standard
Create a standard IP access list (IP ACL) to filter based on IP address.
Syntax
ip access-list standard access-list-name To delete an access list, use the no ip access-list standard access-list-name command.
Parameters
access-list-name Enter a string up to 140 characters long as the ACL name.
Defaults
All IP access lists contain an implicit "deny any," that is, if no match occurs, the packet is dropped.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.10.0 8.1.1.0 7.8.1.0 7.6.1.0 7.5.1.0 7.4.1.0 6.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Increased the name string to accept up to 140 characters. Introduced on the S-Series. Introduced on the C-Series. Added support for the non-contiguous mask and added the monitor option. Expanded to include the optional QoS order priority for the ACL entry.
Usage Information
Example
Dell Networking OS supports one ingress and one egress IP ACL per interface. Prior to Dell Networking OS version 7.8.1.0, names are up to 16 characters long. The number of entries allowed per ACL is hardware-dependent. For detailed specifications on entries allowed per ACL, refer to your line card documentation.
Dell(conf)#ip access-list standard TestList Dell(config-std-nacl)#
Related Commands
ip access-list extended -- creates an extended access list. show config -- displays the current configuration.
194 Access Control Lists (ACL)
permit
To permit packets from a specific source IP address to leave the switch, configure a filter.
Syntax
permit {source [mask]| any | host ip-address} [no-drop]
To remove this filter, you have two choices:
Use the no seq sequence-number command if you know the filter's sequence number. Use the no permit {source [mask] | any | host ip-address} command.
Parameters
source mask any
Enter the IP address in dotted decimal format of the network from which the packet was sent.
(OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
Enter the keyword any to specify that all routes are subject to the filter. You can enter any of the following keywords to specify route types.
bytes -- Enter the keyword bytes to count bytes processed by the filter. count -- Enter the keyword count to count packets the filter processes. dscp -- Enter the keyword dcsp to match to the IP DCSCP values. fragments -- Enter the keyword fragments to match to non-initial
fragments of a datagram. order -- Enter the keyword order to specify the QoS priority for the ACL
entry. The range is from 0 to 254 (where 0 is the highest priority and 254 is the lowest; lower-order numbers have a higher priority). If you do not use the keyword order, the ACLs have the lowest order by default (255).
host ip-address no-drop
Enter the keyword host then the IP address to specify a host IP address or hostname.
Enter the keywords no-drop to match only the forwarded packets.
Defaults
Not configured.
Command Modes CONFIGURATION-STANDARD-ACCESS-LIST
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.8(0.0) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0 8.2.1.0 8.1.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Added the no-drop parameter. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Add the DSCP value for ACL matching. Allows ACL control of fragmented packets for IP (Layer 3) ACLs. Introduced on the E-Series ExaScale. Introduced on the S-Series.
Access Control Lists (ACL) 195
Usage Information
Related Commands
Version
7.5.1.0 7.4.1.0 6.5.10
Description
Introduced on the C-Series. Added support for the non-contiguous mask and added the monitor option. Expanded to include the optional QoS order priority for the ACL entry.
The order option is relevant in the context of the Policy QoS feature only. For more information, refer to the "Quality of Service" chapter of the Dell Networking OS Configuration Guide.
deny -- assigns a IP ACL filter to deny IP packets. ip access-list standard -- creates a standard ACL.
resequence access-list
Re-assign sequence numbers to entries of an existing access-list.
Syntax Parameters
resequence access-list {ipv4 | ipv6 | mac} {access-list-name StartingSeqNum Step-to-Increment}
ipv4 | ipv6 | mac Enter the keyword ipv4or mac to identify the access list type to resequence.
access-list-name Enter the name of a configured IP access list.
StartingSeqNum Enter the starting sequence number to resequence. The range is from 0 to 4294967290.
Step-toIncrement
Enter the step to increment the sequence number. The range is from 1 to 4294967290.
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 8.1.1.0 7.8.1.0
7.6.1.0 7.5.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale (IPv6). Introduced on the E-Series ExaScale (IPv4). Increased the name string to accept up to 140 characters. Prior to 7.8.1.0, names were up to 16 characters long. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
196 Access Control Lists (ACL)
Usage Information
When you have exhausted all the sequence numbers, this feature permits re-assigning a new sequence number to entries of an existing access-list.
seq
Assign a sequence number to a deny or permit filter in an IP access list while creating the filter.
Syntax
seq sequence-number {deny | permit} {source [mask] | any | host ipaddress}} [count [bytes]] [dscp value] [order] [fragments] [no-drop]
To delete a filter, use the no seq sequence-number command.
Parameters
sequencenumber deny
permit
source
mask
any host ip-address
count bytes dscp order
fragments no-drop
Enter a number from 0 to 4294967290.
Enter the keyword deny to configure a filter to drop packets meeting this condition.
Enter the keyword permit to configure a filter to forward packets meeting this criteria.
Enter an IP address in dotted decimal format of the network from which the packet was received.
(OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
Enter the keyword any to specify that all routes are subject to the filter.
Enter the keyword host then the IP address to specify a host IP address or hostname.
(OPTIONAL) Enter the keyword count to count packets the filter processes.
(OPTIONAL) Enter the keyword bytes to count bytes the filter processes.
(OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP values.
(OPTIONAL) Enter the keyword order to specify the QoS order for the ACL entry. The range is from 0 to 254 (where 0 is the highest priority and 254 is the lowest; lower-order numbers have a higher priority). If you do not use the keyword order, the ACLs have the lowest order by default (255).
Enter the keyword fragments to use ACLs to control packet fragments.
Enter the keywords no-drop to match only the forwarded packets.
Defaults
Not configured
Command Modes CONFIGURATION-STANDARD-ACCESS-LIST
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.8(0.0) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Added the no-drop parameter. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T.
Access Control Lists (ACL) 197
Usage Information
Related Commands
Version
8.3.11.1 8.3.7.0 8.3.1.0 8.2.1.0 8.1.1.0 7.6.1.0 7.5.1.0 7.4.1.0 6.5.10
Description
Introduced on the Z9000. Introduced on the S4810. Add the DSCP value for ACL matching. Allows ACL control of fragmented packets for IP (Layer 3) ACLs. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Added support for the non-contiguous mask and added the monitor option. Expanded to include the optional QoS order priority for the ACL entry.
The order option is relevant in the context of the Policy QoS feature only. The following applies:
The seq sequence-number command is applicable only in an ACL group. The order option works across ACL groups that are applied on an interface via the QoS policy
framework. The order option takes precedence over seq sequence-number. If you do not configure sequence-number, the rules with the same order value are ordered
according to their configuration order. If you configure sequence-number, the sequence-number is used as a tie breaker for rules with the
same order.
deny -- configures a filter to drop packets.
permit -- configures a filter to forward packets.
Extended IP ACL Commands
When an ACL is created without any rule and then applied to an interface, ACL behavior reflects an implicit permit. The following commands configure extended IP ACLs, which in addition to the IP address, also examine the packet's protocol type. The platform supports both Ingress and Egress IP ACLs.
NOTE: Also refer to the Commands Common to all ACL Types and Common IP ACL Commands sections.
deny
Configure a filter that drops IP packets meeting the filter criteria.
Syntax
deny {ip | ip-protocol-number} {source mask | any | host ip-address} {destination mask | any | host ip-address} [count [byte] | log] [dscp value] [order] [monitor] [fragments] [no-drop]
To remove this filter, you have two choices:
Use the no seq sequence-number command if you know the filter's sequence number. Use the no deny {ip | ip-protocol-number} {source mask | any | host ip-
address} {destination mask | any | host ip-address} command.
Parameters
ip
Enter the keyword ip to configure a generic IP access list. The keyword ip specifies that the access list denies all IP protocols.
198 Access Control Lists (ACL)
ip-protocolnumber source mask
any host ip-address destination count byte log
dscp order
monitor
fragments no-drop
Enter a number from 0 to 255 to deny based on the protocol identified in the IP protocol header.
Enter the IP address of the network or host from which the packets were sent.
Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or noncontiguous.
Enter the keyword any to specify that all routes are subject to the filter.
Enter the keyword host then the IP address to specify a host IP address.
Enter the IP address of the network or host to which the packets are sent.
(OPTIONAL) Enter the keyword count to count packets that the filter processes.
(OPTIONAL) Enter the keyword byte to count bytes that the filter processes.
(OPTIONAL, E-Series only) Enter the keyword log to enter ACL matches in the log.
(OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP values.
(OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry. The range is from 0 to 254 (where 0 is the highest priority and 254 is the lowest; lower-order numbers have a higher priority). If you do not use the keyword order, the ACLs have the lowest order by default (255).
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface. For more information, refer to the "Flow-based Monitoring" section in the Port Monitoring chapter of the Dell Networking OS Configuration Guide.
Enter the keyword fragments to use ACLs to control packet fragments.
Enter the keywords no-drop to match only the forwarded packets.
Defaults
Not configured.
Command Modes CONFIGURATION-EXTENDED-ACCESS-LIST
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.8(0.0) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0 8.2.1.0 8.1.1.0 7.6.1.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Added the no-drop parameter. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Add the DSCP value for ACL matching. Allows ACL control of fragmented packets for IP (Layer 3) ACLs. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series.
Access Control Lists (ACL) 199
Usage Information
Related Commands
Version
7.4.1.0 6.5.1.0
Description
Added support for the noncontiguous mask and added the monitor option. Expanded to include the optional QoS order priority for the ACL entry.
The order option is relevant in the context of the Policy QoS feature only. For more information, refer to the Quality of Service chapter of the Dell Networking OS Configuration Guide.
When you use the log option, the CP processor logs detail the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets' details.
The monitor option is relevant in the context of flow-based monitoring only. For more information, refer to the Port Monitoring chapter.
The C-Series and S-Series cannot count both packets and bytes, when you enter the count byte options, only bytes are incremented.
NOTE: When you configure ACL logging and byte counters simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
deny tcp -- assigns a filter to deny TCP packets. deny udp -- assigns a filter to deny UDP packets. ip access-list extended -- creates an extended ACL.
deny icmp
To drop all or specific internet control message protocol (ICMP) messages, configure a filter.
Syntax
deny icmp {source mask | any | host ip-address} {destination mask | any | host ip-address} [dscp] [count [byte] [order] [fragments] [no-drop]
To remove this filter, you have two choices:
Use the no seq sequence-number command if you know the filter's sequence number. Use the no deny icmp {source mask | any | host ip-address} {destination
mask | any | host ip-address} command.
Parameters
source mask
any host ip-address destination dscp
count byte order
fragments no-drop
Enter the IP address of the network or host from which the packets were sent.
Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
Enter the keyword any to specify that all routes are subject to the filter.
Enter the keyword host then the IP address to specify a host IP address.
Enter the IP address of the network or host to which the packets are sent.
Enter this keyword dscp to deny a packet based on the DSCP value. The range is from 0 to 63.
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
(OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry. The range is from 0 to 254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority) If you did not use the keyword order, the ACLs have the lowest order by default (255).
Enter the keyword fragments to use ACLs to control packet fragments.
Enter the keywords no-drop to match only the forwarded packets.
Defaults
Not configured.
200 Access Control Lists (ACL)
Command Modes CONFIGURATION-EXTENDED-ACCESS-LIST
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.8(0.0) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0 8.2.1.0 8.1.1.0 7.4.1.0 6.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Added the no-drop parameter. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added the keyword dscp. Allows ACL control of fragmented packets for IP (Layer 3) ACLs. Introduced on the E-Series ExaScale. Added support for non-contiguous mask and added the monitor option. Expanded to include the optional QoS order priority for the ACL entry.
Usage Information
The order option is relevant in the context of the Policy QoS feature only. For more information, refer to the Quality of Service chapter of the Dell Networking OS Configuration Guide.
The monitor option is relevant in the context of flow-based monitoring only. For more information, refer to the Port Monitoring chapter.
deny tcp
Configure a filter that drops transmission control protocol (TCP) packets meeting the filter criteria.
Syntax
deny tcp {source mask | any | host ip-address} [bit] [operator port [port]] {destination mask | any | host ip-address} [dscp] [bit] [operator port [port]] [count [byte] [order] [fragments] [no-drop]
To remove this filter, you have two choices:
Use the no seq sequence-number command if you know the filter's sequence number. Use the no deny tcp {source mask | any | host ip-address} {destination mask
| any | host ip-address} command.
Parameters
source mask
any host ip-address dscp
bit
Enter the IP address of the network or host from which the packets are sent.
Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
Enter the keyword any to specify that all routes are subject to the filter.
Enter the keyword host then the IP address to specify a host IP address.
Enter this keyword dscp to deny a packet based on the DSCP value. The range is from 0 to 63.
Enter a flag or combination of bits:
Access Control Lists (ACL) 201
operator
port port
destination mask count byte order fragments no-drop
ack: acknowledgement field fin: finish (no more data from the user) psh: push function rst: reset the connection syn: synchronize sequence numbers urg: urgent field
(OPTIONAL) Enter one of the following logical operand:
eq = equal to neq = not equal to gt = greater than lt = less than range = inclusive range of ports (you must specify two ports for the port
command)
Enter the application layer port number. Enter two port numbers if using the range logical operand. The range is from 0 to 65535.
The following list includes some common TCP port numbers:
23 = Telnet 20 and 21 = FTP 25 = SMTP 169 = SNMP
Enter the IP address of the network or host to which the packets are sent.
Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
(OPTIONAL) Enter the keyword count to count packets the filter processes.
(OPTIONAL) Enter the keyword byte to count bytes the filter processes.
(OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry. The range is from 0 to 254 (where 0 is the highest priority and 254 is the lowest; lower-order numbers have a higher priority) If you did not use the keyword order, the ACLs have the lowest order by default (255).
Enter the keyword fragments to use ACLs to control packet fragments.
Enter the keywords no-drop to match only the forwarded packets.
Defaults
Not configured.
Command Modes CONFIGURATION-EXTENDED-ACCESS-LIST
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.8(0.0) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Added the no-drop parameter. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000.
202 Access Control Lists (ACL)
Usage Information
Example
Example Related Commands
Version
8.3.7.0 8.3.1.0 8.2.1.0 8.1.1.0 7.6.1.0 7.5.1.0 7.4.1.0
6.5.1.0
Description
Introduced on the S4810. Added the keyword dscp. Allows ACL control of fragmented packets for IP (Layer 3) ACLs. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Added support for non-contiguous mask and added the monitor option. Deprecated the keyword established. Expanded to include the optional QoS order priority for the ACL entry.
The order option is relevant in the context of the Policy QoS feature only. For more information, refer to the Quality of Service chapter of the Dell Networking OS Configuration Guide.
The monitor option is relevant in the context of flow-based monitoring only. For more information, refer to the Port Monitoring chapter.
The C-Series and S-Series cannot count both packets and bytes; when you enter the count byte options, only bytes are incremented.
NOTE: When you configure ACL logging and byte counters simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators (for example, gt, lt, or range) may require more than one entry. The range of ports is configured in the CAM based on bit mask boundaries; the space required depends on exactly what ports are included in the range.
An ACL rule with a TCP port range of 4000�8000 uses eight entries in the CAM.
Rule# Data
Mask
From To #Covered
1 0000111110100000 1111111111100000 4000 4031 32 2 0000111111000000 1111111111000000 4032 4095 64 3 0001000000000000 1111100000000000 4096 6143 2048 4 0001100000000000 1111110000000000 6144 7167 1024 5 0001110000000000 1111111000000000 7168 7679 512 6 0001111000000000 1111111100000000 7680 7935 256 7 0001111100000000 1111111111000000 7936 7999 64 8 0001111101000000 1111111111111111 8000 8000 1
Total Ports: 4001
An ACL rule with a TCP port lt 1023 uses only one entry in the CAM.
Rule# Data
Mask
From To #Covered
1 0000000000000000 1111110000000000 0
1023 1024
Total Ports: 1024
deny -- assigns a filter to deny IP traffic. deny udp -- assigns a filter to deny UDP traffic.
Access Control Lists (ACL) 203
deny udp
To drop user datagram protocol (UDP) packets meeting the filter criteria, configure a filter.
Syntax
deny udp {source mask | any | host ip-address} [operator port [port]] {destination mask | any | host ip-address} [dscp] [operator port [port]] [count [byte] [order] [fragments] [no-drop]
To remove this filter, you have two choices:
Use the no seq sequence-number command if you know the filter's sequence number. Use the no deny udp {source mask | any | host ip-address} {destination mask
| any | host ip-address} command.
Parameters
source mask
any host ip-address dscp
operator
Enter the IP address of the network or host from which the packets were sent.
Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
Enter the keyword any to specify that all routes are subject to the filter.
Enter the keyword host then the IP address to specify a host IP address.
Enter this keyword dscp to deny a packet based on the DSCP value. The range is from 0 to 63.
(OPTIONAL) Enter one of the following logical operand:
eq = equal to neq = not equal to gt = greater than lt = less than range = inclusive range of ports (you must specify two ports for the port
command)
port port
Enter the application layer port number. Enter two port numbers if using the range logical operand. The range is from 0 to 65535.
destination mask count byte order
fragments no-drop
Enter the IP address of the network or host to which the packets are sent.
Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
(OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry. The range is from 0 to 254 (where 0 is the highest priority and 254 is the lowest; lower-order numbers have a higher priority) If you did not use the keyword order, the ACLs have the lowest order by default (255).
Enter the keyword fragments to use ACLs to control packet fragments.
Enter the keywords no-drop to match only the forwarded packets.
Defaults
Not configured.
Command Modes CONFIGURATION-EXTENDED-ACCESS-LIST
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2)
Introduced on the S4048-ON. Introduced on the S3048-ON.
204 Access Control Lists (ACL)
Usage Information
Example
Example
Version
9.8(0.0) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0 8.2.1.0 8.1.1.0 7.6.1.0 7.5.1.0 7.4.1.0
6.5.1.0
Description
Added the no-drop parameter. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added the keyword dscp. Allows ACL control of fragmented packets for IP (Layer 3) ACLs. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Added support for non-contiguous mask and added the monitor option. Deprecated the keyword established. Expanded to include the optional QoS order priority for the ACL entry.
The order option is relevant in the context of the Policy QoS feature only. For more information, refer to the Quality of Service chapter of the Dell Networking OS Configuration Guide.
The monitor option is relevant in the context of flow-based monitoring only. For more information, refer to the Port Monitoring chapter.
The C-Series and S-Series cannot count both packets and bytes; when you enter the count byte options, only bytes are incremented.
NOTE: When you configure ACL logging and byte counters simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators (for example, gt, lt or range) may require more than one entry. The range of ports is configured in the CAM based on bit mask boundaries; the space required depends on exactly what ports are included in the range.
An ACL rule with a TCP port range of 4000�8000 uses eight entries in the CAM.
Rule# Data
Mask
From To #Covered
1 0000111110100000 1111111111100000 4000 4031 32 2 0000111111000000 1111111111000000 4032 4095 64 3 0001000000000000 1111100000000000 4096 6143 2048 4 0001100000000000 1111110000000000 6144 7167 1024 5 0001110000000000 1111111000000000 7168 7679 512 6 0001111000000000 1111111100000000 7680 7935 256 7 0001111100000000 1111111111000000 7936 7999 64 8 0001111101000000 1111111111111111 8000 8000 1
Total Ports: 4001
An ACL rule with a TCP port lt 1023 uses only one entry in the CAM.
Rule# Data
Mask
From To #Covered
1 0000000000000000 1111110000000000 0
1023 1024
Total Ports: 1024
Access Control Lists (ACL) 205
Related Commands
deny -- assigns a filter to deny IP traffic. deny tcp -- assigns a filter to deny TCP traffic.
ip access-list extended
Name (or select) an extended IP access list (IP ACL) based on IP addresses or protocols.
Syntax
ip access-list extended access-list-name To delete an access list, use the no ip access-list extended access-list-name command.
Parameters
access-list-name Enter a string up to 140 characters long as the access list name.
Defaults
All access lists contain an implicit "deny any"; that is, if no match occurs, the packet is dropped.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.10.0 8.1.1.0 7.8.1.0
7.6.1.0 7.5.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Increased the name string to accept up to 140 characters. Prior to 7.8.1.0, names were up to 16 characters long. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Example
The number of entries allowed per ACL is hardware-dependent. For detailed specification about entries allowed per ACL, refer to your line card documentation. Prior to 7.8.1.0, names are up to 16 characters long.
Dell(conf)#ip access-list extended TESTListEXTEND Dell(config-ext-nacl)#
Related Commands
ip access-list standard -- configures a standard IP access list. show config -- displays the current configuration.
206 Access Control Lists (ACL)
permit
To pass IP packets meeting the filter criteria, configure a filter.
Syntax
permit {source mask | any | host ip-address} {destination mask | any | host ip-address} [count [bytes]] [dscp value] [order] [fragments] [no-drop]
To remove this filter, you have two choices:
Use the no seq sequence-number command if you know the filter's sequence number. Use the no deny {source mask | any | host ip-address} {destination mask |
any | host ip-address} command.
Parameters
source
mask
any host ip-address
destination count bytes dscp order
fragments no-drop
Enter the IP address in dotted decimal format of the network from which the packet was sent.
(OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
Enter the keyword any to specify that all routes are subject to the filter.
Enter the keyword host then the IP address to specify a host IP address or hostname.
Enter the IP address of the network or host to which the packets are sent.
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
(OPTIONAL) Enter the keyword bytes to count bytes processed by the filter.
(OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP values.
(OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry. The range is from 0 to 254 (where 0 is the highest priority and 254 is the lowest; lower-order numbers have a higher priority). If you do not use the keyword order, the ACLs have the lowest order by default (255).
Enter the keyword fragments to use ACLs to control packet fragments.
Enter the keywords no-drop to match only the forwarded packets.
Defaults
Not configured.
Command Modes CONFIGURATION-EXTENDED-ACCESS-LIST
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.8(0.0) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0 8.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Added the no-drop parameter. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Add the DSCP value for ACL matching. Allows ACL control of fragmented packets for IP (Layer 3) ACLs.
Access Control Lists (ACL) 207
Usage Information
Related Commands
Version
8.1.1.0 7.6.1.0 7.5.1.0 7.4.1.0 6.5.10
Description
Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Added support for the non-contiguous mask and added the monitor option. Expanded to include the optional QoS order priority for the ACL entry.
The order option is relevant in the context of the Policy QoS feature only. For more information, refer to the "Quality of Service" chapter of the Dell Networking OS Configuration Guide. The software cannot count both packets and bytes; when you enter the count byte options, only bytes are incremented.
ip access-list extended -- creates an extended ACL. permit tcp -- assigns a permit filter for TCP packets. permit udp -- assigns a permit filter for UDP packets.
permit tcp
To pass TCP packets meeting the filter criteria, configure a filter.
Syntax
permit tcp {source mask | any | host ip-address} [bit] [operator port [port]] {destination mask | any | host ip-address} [bit] [dscp] [operator port [port]] [count [byte] [order] [fragments] [no-drop]
To remove this filter, you have two choices:
Use the no seq sequence-number command if you know the filter's sequence number. Use the no permit tcp {source mask | any | host ip-address} {destination
mask | any | host ip-address} command.
Parameters
source mask
any host ip-address bit
Enter the IP address of the network or host from which the packets were sent.
Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
Enter the keyword any to specify that all routes are subject to the filter.
Enter the keyword host then the IP address to specify a host IP address.
Enter a flag or combination of bits:
ack: acknowledgement field fin: finish (no more data from the user) psh: push function rst: reset the connection syn: synchronize sequence numbers urg: urgent field
dscp operator
Enter the keyword dscp to deny a packet based on the DSCP value. The range is from 0 to 63.
(OPTIONAL) Enter one of the following logical operand:
eq = equal to neq = not equal to gt = greater than lt = less than
208 Access Control Lists (ACL)
port port
destination mask count byte order
fragments no-drop
range = inclusive range of ports (you must specify two ports for the port parameter)
Enter the application layer port number. Enter two port numbers if you are using the range logical operand. The range is from 0 to 65535.
The following list includes some common TCP port numbers:
23 = Telnet 20 and 21 = FTP 25 = SMTP 169 = SNMP
Enter the IP address of the network or host to which the packets are sent.
Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
(OPTIONAL) Enter the keyword count to count packets the filter processes.
(OPTIONAL) Enter the keyword byte to count bytes the filter processes.
(OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry. The range is from 0 to 254 (where 0 is the highest priority and 254 is the lowest; lower-order numbers have a higher priority). If you do not use the keyword order, the ACLs have the lowest order by default (255).
Enter the keyword fragments to use ACLs to control packet fragments.
Enter the keywords no-drop to match only the forwarded packets.
Defaults
Not configured.
Command Modes CONFIGURATION-EXTENDED-ACCESS-LIST
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.8(0.0) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0 8.2.1.0 8.1.1.0 7.6.1.0 7.5.1.0 7.4.1.0
6.5.10
Introduced on the S4048-ON. Introduced on the S3048-ON. Added the no-drop parameter. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added the keyword dscp. Allows ACL control of fragmented packets for IP (Layer 3) ACLs. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Added support for non-contiguous mask and added the monitor option. Deprecated the keyword established. Expanded to include the optional QoS order priority for the ACL entry.
Access Control Lists (ACL) 209
Usage Information
Example
Example Related Commands
The order option is relevant in the context of the Policy QoS feature only. For more information, refer to the "Quality of Service" chapter of the Dell Networking OS Configuration Guide.
NOTE: When you configure ACL logging and byte counters simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
The S-Series cannot count both packets and bytes; when you enter the count byte options, only bytes increment.
The monitor option is relevant in the context of flow-based monitoring only. For more information, refer to Port Monitoring.
Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators (for example, gt, lt, or range) may require more than one entry. The range of ports is configured in the CAM based on bit mask boundaries; the space required depends on exactly what ports are included in the range.
An ACL rule with a TCP port range of 4000�8000 uses eight entries in the CAM.
Rule# Data
Mask
From To #Covered
1 0000111110100000 1111111111100000 4000 4031 32 2 0000111111000000 1111111111000000 4032 4095 64 3 0001000000000000 1111100000000000 4096 6143 2048 4 0001100000000000 1111110000000000 6144 7167 1024 5 0001110000000000 1111111000000000 7168 7679 512 6 0001111000000000 1111111100000000 7680 7935 256 7 0001111100000000 1111111111000000 7936 7999 64 8 0001111101000000 1111111111111111 8000 8000 1
Total Ports: 4001
An ACL rule with a TCP port lt 1023 uses only one entry in the CAM.
Rule# Data
Mask
From To #Covered
1 0000000000000000 1111110000000000 0
1023 1024
Total Ports: 1024
ip access-list extended -- creates an extended ACL. permit -- assigns a permit filter for IP packets. permit udp -- assigns a permit filter for UDP packets.
permit udp
To pass UDP packets meeting the filter criteria, configure a filter.
Syntax
permit udp {source mask | any | host ip-address} [operator port [port]] {destination mask | any | host ip-address} [dscp] [operator port [port]] [count [byte] [order] [fragments] [no-drop]
To remove this filter, you have two choices:
Use the no seq sequence-number command if you know the filter's sequence number. Use the no permit udp {source mask | any | host ip-address} {destination
mask | any | host ip-address command.
Parameters
source mask
any
Enter the IP address of the network or host from which the packets were sent.
Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
Enter the keyword any to specify that all routes are subject to the filter.
210 Access Control Lists (ACL)
host ip-address dscp operator
port port destination count byte order
fragments no-drop
Enter the keyword host and then enter the IP address to specify a host IP address.
Enter the keyword dscp to deny a packet based on the DSCP value. The range is from 0 to 63.
(OPTIONAL) Enter one of the following logical operand:
eq = equal to neq = not equal to gt = greater than lt = less than range = inclusive range of ports (you must specify two ports for the port
parameter)
Enter the application layer port number. Enter two port numbers if you are using the range logical operand. The range is 0 to 65535.
Enter the IP address of the network or host to which the packets are sent.
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
(OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry. The range is from 0 to 254 (where 0 is the highest priority and 254 is the lowest; lower-order numbers have a higher priority). If you do not use the keyword order, the ACLs have the lowest order by default (255).
Enter the keyword fragments to use ACLs to control packet fragments.
Enter the keywords no-drop to match only the forwarded packets.
Defaults
Not configured.
Command Modes CONFIGURATION-EXTENDED-ACCESS-LIST
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.8(0.0) 9.7(0.0) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0 8.2.1.0 8.1.1.0 7.6.1.0 7.5.1.0 7.4.1.0 6.5.10
Introduced on the S4048-ON. Introduced on the S3048-ON. Added the no-drop parameter. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added the keyword dscp. Allows ACL control of fragmented packets for IP (Layer 3) ACLs. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Added support for non-contiguous mask and added the monitor option. . Expanded to include the optional QoS order priority for the ACL entry.
Access Control Lists (ACL) 211
Usage Information
Example
Example Related Commands
The order option is relevant in the context of the Policy QoS feature only. For more information, refer to the "Quality of Service" chapter of the Dell Networking OS Configuration Guide.
NOTE: When you configure ACL logging and byte counters simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
The S-Series cannot count both packets and bytes; when you enter the count byte options, only bytes increment.
The monitor option is relevant in the context of flow-based monitoring only. For more information, refer to Port Monitoring.
Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators (for example, gt, lt, or range) may require more than one entry. The range of ports is configured in the CAM based on bit mask boundaries; the space required depends on exactly what ports are included in the range.
An ACL rule with a TCP port range of 4000�8000 uses eight entries in the CAM.
Rule# Data
Mask
From To #Covered
1 0000111110100000 1111111111100000 4000 4031 32 2 0000111111000000 1111111111000000 4032 4095 64 3 0001000000000000 1111100000000000 4096 6143 2048 4 0001100000000000 1111110000000000 6144 7167 1024 5 0001110000000000 1111111000000000 7168 7679 512 6 0001111000000000 1111111100000000 7680 7935 256 7 0001111100000000 1111111111000000 7936 7999 64 8 0001111101000000 1111111111111111 8000 8000 1
Total Ports: 4001
An ACL rule with a TCP port lt 1023 uses only one entry in the CAM.
Rule# Data
Mask
From To #Covered
1 0000000000000000 1111110000000000 0
1023 1024
Total Ports: 1024
ip access-list extended -- creates an extended ACL. permit -- assigns a permit filter for IP packets. permit tcp -- assigns a permit filter for TCP packets.
resequence access-list
Re-assign sequence numbers to entries of an existing access-list.
Syntax Parameters
resequence access-list {ipv4 | mac} {access-list-name StartingSeqNum Stepto-Increment}
ipv4 | mac
Enter the keyword ipv4or mac to identify the access list type to resequence.
access-list-name Enter the name of a configured IP access list, up to 140 characters.
StartingSeqNum Enter the starting sequence number to resequence. The range is from 0 to 4294967290.
Step-toIncrement
Enter the step to increment the sequence number. The range is from 1 to 4294967290.
Defaults
none
Command Modes EXEC
212 Access Control Lists (ACL)
Command History
Usage Information
EXEC Privilege
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.11.1 8.1.1.0 7.8.1.0
7.6.1.0 7.5.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the E-Series ExaScale (IPv4). Increased the name string to accept up to 140 characters. Prior to 7.8.1.0, names were up to 16 characters long. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
When all sequence numbers are exhausted, this feature permits re-assigning a new sequence number to entries of an existing access-list.
seq
Assign a sequence number to a deny or permit filter in an extended IP access list while creating the filter.
Syntax Parameters
seq sequence-number {deny | permit} {ip-protocol-number | icmp | ip | tcp | udp} {source mask | any | host ip-address} {destination mask | any | host ip-address} [operator port [port]] [count [byte] | log] [dscp value] [order] [monitor] [fragments] [no-drop]
sequencenumber deny
permit
ip-protocolnumber icmp ip
tcp udp source
mask
Enter a number from 0 to 4294967290.
Enter the keyword deny to configure a filter to drop packets meeting this condition.
Enter the keyword permit to configure a filter to forward packets meeting this criteria.
Enter a number from 0 to 255 to filter based on the protocol identified in the IP protocol header.
Enter the keyword icmp to configure an ICMP access list filter.
Enter the keyword ip to configure a generic IP access list. The keyword ip specifies that the access list permits all IP protocols.
Enter the keyword tcp to configure a TCP access list filter.
Enter the keyword udp to configure a UDP access list filter.
Enter an IP address in dotted decimal format of the network from which the packet was received.
(OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
Access Control Lists (ACL) 213
any host ip-address operator
port port
destination count byte log dscp order
monitor
Enter the keyword any to specify that all routes are subject to the filter.
Enter the keyword host and then enter the IP address to specify a host IP address or hostname.
(OPTIONAL) Enter one of the following logical operands:
eq = equal to neq = not equal to gt = greater than lt = less than range = inclusive range of ports (you must specify two ports for the port
parameter.)
(OPTIONAL) Enter the application layer port number. Enter two port numbers if you are using the range logical operand. The range is from 0 to 65535.
The following list includes some common TCP port numbers:
23 = Telnet 20 and 21 = FTP 25 = SMTP 169 = SNMP
Enter the IP address of the network or host to which the packets are sent.
(OPTIONAL) Enter the keyword count to count packets the filter processes.
(OPTIONAL) Enter the keyword byte to count bytes the filter processes.
(OPTIONAL, E-Series only) Enter the keyword log to enter ACL matches in the log. Supported on Jumbo-enabled line cards only.
(OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP values.
(OPTIONAL) Enter the keyword order to specify the QoS order for the ACL entry. The range is from 0 to 254 (where 0 is the highest priority and 254 is the lowest; lower-order numbers have a higher priority). If you do not use the keyword order, the ACLs have the lowest order by default (255).
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
NOTE: For more information, refer to the Flow-based Monitoring section in the Port Monitoring chapter of the Dell Networking OS Configuration Guide.
fragments no-drop
Enter the keyword fragments to use ACLs to control packet fragments. Enter the keywords no-drop to match only the forwarded packets.
Defaults
Not configured
Command Modes CONFIGURATION-EXTENDED-ACCESS-LIST
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.8(0.0) 9.7(0.0) 9.2(1.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Added the no-drop parameter. Introduced on the S6000�ON. Introduced on the Z9500.
214 Access Control Lists (ACL)
Usage Information
Related Commands
Version
9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0 8.2.1.0 8.1.1.0 7.6.1.0 7.5.1.0 7.4.1.0
6.5.10
Description
Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Add the DSCP value for ACL matching. Allows ACL control of fragmented packets for IP (Layer 3) ACLs. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Added support for the non-contiguous mask and added the monitor option. Deprecated the keyword established. Expanded to include the optional QoS order priority for the ACL entry.
The monitor option is relevant in the context of flow-based monitoring only. For more information, refer to Port Monitoring.
The order option is relevant in the context of the Policy QoS feature only. The following applies:
The seq sequence-number command is applicable only in an ACL group. The order option works across ACL groups that are applied on an interface via the QoS policy
framework. The order option takes precedence over seq sequence-number. If you do not configure sequence-number, the rules with the same order value are ordered
according to their configuration order. If you configure sequence-number, the sequence-number is used as a tie breaker for rules with the
same order.
When you use the log option, the CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets' details.
If you configure the sequence-number, the sequence-number is used as a tie breaker for rules with the same order.
NOTE: When you configure ACL logging and byte counters simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
deny -- configures a filter to drop packets. permit -- configures a filter to forward packets.
Common MAC Access List Commands
The following commands are available within both MAC ACL modes (Standard and Extended) and do not have mode-specific options. These commands allow you to clear, display, and assign MAC ACL configurations.
The platform supports both Ingress and Egress MAC ACLs.
The MAC ACL can be applied on Physical, Port-channel and VLAN interfaces. As per the specified rules in the ACL, the traffic on the interface/ VLAN members or Port-channel members will be permitted or denied.
Access Control Lists (ACL) 215
clear counters mac access-group
Clear counters for all or a specific MAC ACL.
Syntax Parameters
clear counters mac access-group [mac-list-name] mac-list-name (OPTIONAL) Enter the name of a configured MAC access list.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
mac access-group
Apply a MAC ACL to traffic entering or exiting an interface. You can apply a MAC ACL on a physical, port-channel, or VLAN interface.
Syntax
mac access-group access-list-name {in [vlan vlan-range] | out} To delete a MAC access-group, use the no mac access-group mac-list-name command.
Parameters
access-list-name Enter the name of a configured MAC access list, up to 140 characters.
vlan vlan-range
(OPTIONAL) Enter the keyword vlan and then enter a range of VLANs. The range is from 1 to 4094 (you can use IDs 1 to 4094).
NOTE: This option is available only with the keywordin option.
in
Enter the keyword in to configure the ACL to filter incoming traffic.
out
Enter the keyword out to configure the ACL to filter outgoing traffic.
NOTE: The option is not available on the S-Series.
NOTE:
1. If the MAC ACL is applied on VLAN, none of the VLAN members should have an access list applied for that VLAN.
2. If the MAC ACL is applied on a Physical or Port Channel interface, the VLAN in which this port is associated should not have an access list applied.
216 Access Control Lists (ACL)
3. If the MAC ACL is applied on a VLAN, then that VLAN should not belong to VLAN ACL group.
4. If the MAC ACL is applied on a VLAN ACL group, then none of the VLANs in that group should have an access list applied on it.
Defaults
none
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.8.1.0
7.6.1.0 7.5.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Increased the name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
You can assign one ACL (standard or extended) to an interface.
mac access-list standard -- configures a standard MAC ACL. mac access-list extended -- configures an extended MAC ACL.
show mac access-lists
Display all of the Layer 2 ACLs configured in the system, whether or not they are applied to an interface, and the count of matches/mismatches against each ACL entry displayed.
Syntax Parameters
show mac access-lists [access-list-name] [interface interface] [in | out]
access-list-name Enter the name of a configured MAC ACL, up to 140 characters.
interface interface
Enter the keyword interface then the one of the following keywords and slot/ port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
in | out
Identify whether ACL is applied on ingress or egress side.
Command Modes EXEC Privilege
Access Control Lists (ACL) 217
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.5.1.0 8.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for 4-port 40G line cards on ExaScale. Introduced.
show mac accounting access-list
Display MAC access list configurations and counters (if configured).
Syntax Parameters
show mac accounting access-list access-list-name interface interface in | out
access-list-name Enter the name of a configured MAC ACL, up to 140 characters.
interface interface
Enter the keyword interface then the one of the following keywords and slot/ port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
in | out
Identify whether ACL is applied on ingress or egress side.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T.
218 Access Control Lists (ACL)
Usage Information
Example
Version
8.3.11.1 8.3.7.0 8.5.1.0 8.1.1.0 7.8.1.0
7.6.1.0 7.5.1.0 6.1.1.0
Description
Introduced on the Z9000. Introduced on the S4810. Added support for 4-port 40G line cards on ExaScale. Introduced on the E-Series ExaScale. Increased the name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long. Introduced on the S-Series. Introduced on the C-Series Introduced on the E-Series.
The ACL hit counters increment the counters for each matching rule, not just the first matching rule.
Dell#show mac accounting access-list TestMac interface tengigabitethernet 1/8 in Ingress Standard mac access-list TestMac on TenGigabitEthernet 1/89 Total cam count 2
seq 5 permit aa:aa:aa:aa:00:00 00:00:00:00:ff:ff count (0 packets) seq 10 deny any count (20072594 packets) Dell#
Standard MAC ACL Commands
When you create an access control list without any rule and then apply it to an interface, the ACL behavior reflects implicit permit. These commands configure standard MAC ACLs and support both Ingress and Egress MAC ACLs.
NOTE: For more information, also refer to the Commands Common to all ACL Types and Common MAC Access List Commands sections.
deny
To drop packets with a the MAC address specified, configure a filter.
Syntax
deny {any | mac-source-address [mac-source-address-mask]} [count [byte]] [log] [monitor]
To remove this filter, you have two choices:
Use the no seq sequence-number command if you know the filter's sequence number. Use the no deny {any | mac-source-address mac-source-address-mask} command.
Parameters
any mac-sourceaddress mac-sourceaddress-mask
count byte log
Enter the keyword any to specify that all routes are subject to the filter. Enter a MAC address in nn:nn:nn:nn:nn:nn format.
(OPTIONAL) Specify which bits in the MAC address must match. If no mask is specified, a mask of 00:00:00:00:00:00 is applied (in other words, the filter allows only MAC addresses that match). (OPTIONAL) Enter the keyword count to count packets processed by the filter. (OPTIONAL) Enter the keyword byte to count bytes processed by the filter. (OPTIONAL, E-Series only) Enter the keyword log to log the packets.
Access Control Lists (ACL) 219
monitor
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface. For more information, refer to the "Flow-based Monitoring" section in the Port Monitoring chapter of the Dell Networking OS Configuration Guide.
Defaults
Not enabled.
Command Modes CONFIGURATION-MAC ACCESS LIST-STANDARD
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Added the monitor option.
Usage Information
When you use the log option, the CP processor logs detail the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets' details.
NOTE: When you configure ACL logging and byte counters simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
Related Commands
permit -- configures a MAC address filter to pass packets. seq -- configures a MAC address filter with a specified sequence number.
mac access-list standard
To configure a standard MAC ACL, name a new or existing MAC access control list (MAC ACL) and enter MAC ACCESS LIST mode. Also refer to the Commands Common to all ACL Types section and the Common MAC Access List Commands section.
Syntax
mac access-list standard mac-list-name To delete a MAC access list, use the no mac access-list standard mac-list-name command.
Parameters
mac-list-name
Enter a text string as the name of the standard MAC access list (140 character maximum).
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
220 Access Control Lists (ACL)
Usage Information
Example
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.8.1.0
7.6.1.0 7.5.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Increased the name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Dell Networking OS supports one ingress and one egress MAC ACL per interface. The number of entries allowed per ACL is hardware-dependent. For detailed specifications about entries allowed per ACL, refer to your line card documentation.
NOTE: Ingress ACLs are supported on C-Series and S-Series platforms only.
Dell(conf)#mac-access-list access-list standard TestMAC Dell(config-std-macl)#permit 00:00:00:00:00:00 00:00:00:00:ff:ff count Dell(config-std-macl)#deny any count
permit
To forward packets from a specific source MAC address, configure a filter.
Syntax
permit {any | mac-source-address [mac-source-address-mask]} [count [byte]] | [log [interval minutes] [threshold-in-msgs [count]] [monitor]
To remove this filter, you have two choices:
Use the no seq sequence-number command if you know the filter's sequence number. Use the no permit {any | mac-source-address mac-source-address-mask}
command.
Parameters
any mac-sourceaddress mac-sourceaddress-mask
count byte log
Enter the keyword any to forward all packets received with a MAC address. Enter a MAC address in nn:nn:nn:nn:nn:nn format.
(OPTIONAL) Specify which bits in the MAC address must match. If no mask is specified, a mask of 00:00:00:00:00:00 is applied (in other words, the filter allows only MAC addresses that match). (OPTIONAL) Enter the keyword count to count packets processed by the filter. (OPTIONAL) Enter the keyword byte to count bytes processed by the filter. (OPTIONAL) Enter the keyword log to include ACL messages in the log.
Access Control Lists (ACL) 221
threshold-in msgs count
interval minutes monitor
(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100.
(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The threshold range is from 1 to 10 minutes.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface. For more information, refer to the "Flow-based Monitoring" section in the Port Monitoring chapter of the Dell Networking OS Configuration Guide.
Defaults
Not configured.
Command Modes CONFIGURATION-MAC ACCESS LIST-STANDARD
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
When you use the log option, the CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets' details.
NOTE: When you configure the ACL logging and byte counters simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
Related Commands
deny -- configures a MAC ACL filter to drop packets. seq --configure a MAC ACL filter with a specified sequence number.
seq
To a deny or permit filter in a MAC access list while creating the filter, assign a sequence number.
Syntax
deny {any | mac-source-address [mac-source-address-mask]} [count [byte]] [log [interval minutes] [threshold-in-msgs [count]] [monitor]
To remove this filter, you have two choices:
222 Access Control Lists (ACL)
Parameters
Use the no seq sequence-number command if you know the filter's sequence number. Use the no deny {any | mac-source-address mac-source-address-mask} command.
any mac-sourceaddress mac-sourceaddress-mask
count byte log threshold-in msgs count
interval minutes
monitor
Enter the keyword any to specify that all routes are subject to the filter.
Enter a MAC address in nn:nn:nn:nn:nn:nn format.
(OPTIONAL) Specify which bits in the MAC address must match. If no mask is specified, a mask of 00:00:00:00:00:00 is applied (in other words, the filter allows only MAC addresses that match).
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
(OPTIONAL) Enter the keyword log to include ACL messages in the log.
(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100.
(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The threshold range is from 1 to 10 minutes.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface. For more information, refer to the "Flow-based Monitoring" section in the Port Monitoring chapter of the Dell Networking OS Configuration Guide.
Defaults
Not configured
Command Modes CONFIGURATION-MAC ACCESS LIST-STANDARD
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.8(0.0) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 7.4.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Added the no-drop parameter. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Added the monitor option. Introduced on the E-Series.
Access Control Lists (ACL) 223
Usage Information
Related Commands
When you use the log option, the CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets' details.
NOTE: When you configure the ACL logging and byte counters simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
deny -- configures a filter to drop packets. permit -- configures a filter to forward packets.
Extended MAC ACL Commands
When an access-list is created without any rule and then applied to an interface, ACL behavior reflects implicit permit. The following commands configure Extended MAC ACLs.
The platform supports both Ingress and Egress MAC ACLs.
NOTE: For more information, also refer to the Commands Common to all ACL Types and Common MAC Access List Commands sections.
deny
To drop packets that match the filter criteria, configure a filter.
Syntax
deny {any | host mac-address | mac-source-address mac-source-address-mask} {any | host mac-address | mac-destination-address mac-destination-addressmask} [ethertype-operator] [count [byte]] [log [interval minutes] [threshold-in-msgs [count]] [monitor]
To remove this filter, you have two choices:
Use the no seq sequence-number command if you know the filter's sequence number. Use the no deny {any | host mac-address | mac-source-address mac-source-
address-mask} {any | host mac-address | mac-destination-address macdestination-address-mask} command.
Parameters
any
host macaddress
mac-sourceaddress
mac-sourceaddress-mask
Enter the keyword any to drop all packets. Enter the keyword host and then enter a MAC address to drop packets with that host address. Enter a MAC address in nn:nn:nn:nn:nn:nn format.
Specify which bits in the MAC address must match. The MAC ACL supports an inverse mask; therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly.
mac-destination- Enter the destination MAC address and mask in nn:nn:nn:nn:nn:nn format. address
mac-destinationaddress-mask
Specify which bits in the MAC address must match.
The MAC ACL supports an inverse mask; therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly.
ethertype operator
(OPTIONAL) To filter based on protocol type, enter one of the following Ethertypes:
ev2 - is the Ethernet II frame format
224 Access Control Lists (ACL)
count byte log threshold-in msgs count
interval minutes
monitor
llc - is the IEEE 802.3 frame format snap - is the IEEE 802.3 SNAP frame format
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
(OPTIONAL) Enter the keyword log to include ACL messages in the log.
(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100.
(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The threshold range is from 1 to 10 minutes.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface. For more information, refer to the "Flow-based Monitoring" section in the Port Monitoring chapter of the Dell Networking OS Configuration Guide.
Defaults
Not configured.
Command Modes CONFIGURATION-MAC ACCESS LIST-EXTENDED
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 7.4.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Added the monitor option. Introduced on the E-Series.
Usage Information
When you use the log option, the CP processor logs detail the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets' details.
NOTE: When you configure the ACL logging and byte counters simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
Related Commands
permit -- configures a MAC address filter to pass packets. seq -- configures a MAC address filter with a specified sequence number.
Access Control Lists (ACL) 225
mac access-list extended
Name a new or existing extended MAC access control list (extended MAC ACL).
Syntax
mac access-list extended access-list-name [cpu-qos
To delete a MAC access list, use the no mac access-list extended access-list-name command.
Parameters
access-list-name Enter a text string as the MAC access list name, up to 140 characters.
cpu-qos
Enter the keywords cpu-qos to assign this ACL to control plane traffic only (CoPP).
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.10.0 8.1.1.0 7.8.1.0
7.6.1.0 7.5.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Increased the name string to accept up to 140 characters. Prior to 7.8.1.0, names were up to 16 characters long. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Example
The number of entries allowed per ACL is hardware-dependent. For detailed specifications about entries allowed per ACL, refer to your line card documentation. Prior to 7.8.1.0, names are up to 16 characters long.
Dell(conf)#mac-access-list access-list extended TestMATExt Dell(config-ext-macl)#remark 5 IPv4 Dell(config-ext-macl)#seq 10 permit any any ev2 eq 800 count bytes Dell(config-ext-macl)#remark 15 ARP Dell(config-ext-macl)#seq 20 permit any any ev2 eq 806 count bytes Dell(config-ext-macl)#remark 25 IPv6 Dell(config-ext-macl)#seq 30 permit any any ev2 eq 86dd count bytes Dell(config-ext-macl)#seq 40 permit any any count bytes Dell(config-ext-macl)#exit Dell(conf)#do show mac accounting access-list snickers interface tengig 1/17 in Extended mac access-list snickers on TenGigabitEthernet 1/17 seq 10 permit any any ev2 eq 800 count bytes (559851886 packets 191402152148 bytes)
226 Access Control Lists (ACL)
Related Commands
seq 20 permit any any ev2 eq 806 count bytes (74481486 packets 5031686754 bytes) seq 30 permit any any ev2 eq 86dd count bytes (7751519 packets 797843521 bytes)
mac access-list standard -- configures a standard MAC access list. show mac accounting access-list -- displays MAC access list configurations and counters (if configured).
permit
To pass packets matching the criteria specified, configure a filter.
Syntax
permit {any | host mac-address | mac-source-address mac-source-addressmask} {any | host mac-address | mac-destination-address mac-destinationaddress-mask} [ethertype operator] [count [byte]] | [log] [monitor]
To remove this filter, you have two choices:
Use the no seq sequence-number command if you know the filter's sequence number. Use the no permit {any | host mac-address | mac-source-address mac-source-
address-mask} {any | mac-destination-address mac-destination-addressmask} command.
Parameters
any host
mac-sourceaddress mac-sourceaddress-mask
Enter the keyword any to forward all packets. Enter the keyword host then a MAC address to forward packets with that host address. Enter a MAC address in nn:nn:nn:nn:nn:nn format.
(OPTIONAL) Specify which bits in the MAC address must match. The MAC ACL supports an inverse mask; therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly.
mac-destination- Enter the destination MAC address and mask in nn:nn:nn:nn:nn:nn format. address
mac-destinationaddress-mask
Specify which bits in the MAC address must be matched.
The MAC ACL supports an inverse mask; therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly.
ethertype operator
(OPTIONAL) To filter based on protocol type, enter one of the following Ethertypes:
ev2 - is the Ethernet II frame format llc - is the IEEE 802.3 frame format snap - is the IEEE 802.3 SNAP frame format
count byte log monitor
(OPTIONAL) Enter the keyword count to count packets the filter processes.
(OPTIONAL) Enter the keyword byte to count bytes the filter processes.
(OPTIONAL, E-Series only) Enter the keyword log to log the packets.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
NOTE: For more information, refer to the Flow-based Monitoring section in the Port Monitoring chapter of the Dell Networking OS Configuration Guide.
Defaults
Not configured.
Access Control Lists (ACL) 227
Command Modes CONFIGURATION-MAC ACCESS LIST-EXTENDED
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 7.4.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Added the monitor option. Introduced on the E-Series.
Usage Information
When you use the log option, the CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets' details.
NOTE: When you configure the ACL logging and byte counters simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
Related Commands
deny -- configures a MAC ACL filter to drop packets. seq -- configure a MAC ACL filter with a specified sequence number.
IP Prefix List Commands
When you create an access-list without any rule and then apply it to an interface, the ACL behavior reflects implicit permit. To configure or enable IP prefix lists, use these commands.
clear ip prefix-list
Reset the number of times traffic mets the conditions ("hit" counters) of the configured prefix lists.
Syntax Parameters
clear ip prefix-list [prefix-name]
prefix-name
(OPTIONAL) Enter the name of the configured prefix list to clear only counters for that prefix list, up to 140 characters long.
Defaults
Clears "hit" counters for all prefix lists unless a prefix list is specified.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
228 Access Control Lists (ACL)
Related Commands
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.8.1.0
7.6.1.0 7.5.1.0 6.2.1.1
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Increase the name string to accept up to 140 characters. Prior to 7.8.1.0, names were up to 16 characters long. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
ip prefix-list -- configures a prefix list.
deny
To drop packets meeting the criteria specified, configure a filter.
Syntax
deny ip-prefix [ge min-prefix-length] [le max-prefix-length] To delete a drop filter, use the no deny ip-prefix command.
Parameters
ip-prefix
ge min-prefixlength le max-prefixlength
Specify an IP prefix in the network/length format. For example, 35.0.0.0/ 8 means match the first 8 bits of address 35.0.0.0.
(OPTIONAL) Enter the keyword ge and then enter the minimum prefix length, which is a number from zero (0) to 32.
(OPTIONAL) Enter the keyword le and then enter the maximum prefix length, which is a number from zero (0) to 32.
Defaults
Not configured.
Command Modes PREFIX-LIST
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000.
Access Control Lists (ACL) 229
Usage Information
Version
8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 6.1.1.0
Description
Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Sequence numbers for this filter are automatically assigned starting at sequence number 5. If you do not use the ge or le options, only packets with an exact match to the prefix are filtered.
ip prefix-list
Enter the PREFIX-LIST mode and configure a prefix list.
Syntax
ip prefix-list prefix-name To delete a prefix list, use the no ip prefix-list prefix-name command.
Parameters
prefix-name
Enter a string up to 16 characters long as the name of the prefix list, up to 140 characters long.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.8.1.0
7.6.1.0 7.5.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Increased the name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
Prefix lists redistribute OSPF and RIP routes meeting specific criteria.
show ip route list -- displays IP routes in an IP prefix list. show ip prefix-list summary -- displays a summary of the configured prefix lists.
230 Access Control Lists (ACL)
seq
To a deny or permit filter in a prefix list while configuring the filter, assign a sequence number.
Syntax
seq sequence-number {deny | permit} {any} | [ip-prefix /nn {ge min-prefixlength} {le max-prefix-length}] | [bitmask number]
To delete a specific filter, use the no seq sequence-number {deny | permit} {any} | [ipprefix {ge min-prefix-length} {le max-prefix-length}] | [bitmask number].
Parameters
sequencenumber deny
permit
any ip-prefix /nn
ge min-prefixlength le max-prefixlength bitmask number
Enter a number. The range is from 1 to 4294967294.
Enter the keyword deny to configure a filter to drop packets meeting this condition..
Enter the keyword permit to configure a filter to forward packets meeting this condition.
(OPTIONAL) Enter the keyword any to match any packets.
(OPTIONAL) Specify an IP prefix in the network/length format. For example, 35.0.0.0/8 means match the first 8 bits of address 35.0.0.0.
(OPTIONAL) Enter the keyword ge and then enter the minimum prefix length, which is a number from zero (0) to 32.
(OPTIONAL) Enter the keyword le and then enter the maximum prefix length, which is a number from zero (0) to 32.
Enter the keyword bitmask then enter a bit mask number in dotted decimal format.
Defaults
Not configured.
Command Modes PREFIX-LIST
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 6.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Added the bit mask option.
Usage Information
If you do not use the ge or le options, only packets with an exact match to the prefix are filtered.
Access Control Lists (ACL) 231
show config
Display the current PREFIX-LIST configurations.
Syntax
show config
Command Modes PREFIX-LIST
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Example
Dell(conf-nprefixl)#show config ! ip prefix-list snickers Dell(conf-nprefixl)#
show ip prefix-list detail
Display details of the configured prefix lists.
Syntax Parameters
show ip prefix-list detail [prefix-name]
prefix-name
(OPTIONAL) Enter a text string as the name of the prefix list, up to 140 characters.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500.
232 Access Control Lists (ACL)
Example
Version
9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.8.1.0
7.6.1.0 7.5.1.0 6.1.1.0
Description
Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Increased the name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Dell#show ip prefix-list detail Ip Prefix-list with the last deletion/insertion: PL_OSPF_to_RIP ip prefix-list PL_OSPF_to_RIP: count: 3, range entries: 1, sequences: 5 - 25
seq 5 permit 1.1.1.0/24 (hit count: 0) seq 10 deny 2.1.0.0/16 ge 23 (hit count: 0) seq 25 permit 192.0.0.0 bitmask 192.0.0.0 (hit count: 800)
show ip prefix-list summary
Display a summary of the configured prefix lists.
Syntax Parameters
show ip prefix-list summary [prefix-name]
prefix-name
(OPTIONAL) Enter a text string as the name of the prefix list, up to 140 characters.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.8.1.0
7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Increased the name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long. Introduced on the S-Series.
Access Control Lists (ACL) 233
Example
Version
7.5.1.0 6.1.1.0
Description
Introduced on the C-Series. Introduced on the E-Series.
Dell#show ip prefix-list summary Ip Prefix-list with the last deletion/insertion: PL_OSPF_to_RIP ip prefix-list PL_OSPF_to_RIP: count: 3, range entries: 1, sequences: 5 - 25
Route Map Commands
When you create an access-list without any rule and then applied to an interface, the ACL behavior reflects implicit permit. To configure route maps and their redistribution criteria, use the following commands.
continue
To a route-map entry with a higher sequence number, configure a route-map.
Syntax Parameters
continue [sequence-number]
sequencenumber
(OPTIONAL) Enter the route map sequence number. The range is from 1 to 65535.
Defaults
Not configured.
Command Modes ROUTE-MAP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
The continue feature allows movement from one route-map entry to a specific route-map entry (the sequence number). If you do not specify the sequence number, the continue feature simply moves to the next sequence number (also known as an implied continue). If a match clause exists, the continue feature executes only after a successful match occurs. If there are no successful matches, the continue feature is ignored.
234 Access Control Lists (ACL)
Related Commands
Match clause with Continue clause
The continue feature can exist without a match clause. A continue clause without a match clause executes and jumps to the specified route-map entry.
With a match clause and a continue clause, the match clause executes first and the continue clause next in a specified route map entry. The continue clause launches only after a successful match. The behavior is:
A successful match with a continue clause, the route map executes the set clauses and then goes to the specified route map entry upon execution of the continue clause.
If the next route map entry contains a continue clause, the route map executes the continue clause if a successful match occurs.
If the next route map entry does not contain a continue clause, the route map evaluates normally. If a match does not occur, the route map does not continue and falls through to the next sequence number, if one exists.
Set Clause with Continue Clause
If the route-map entry contains sets with the continue clause, set actions are performed first then the continue clause jumps to the specified route map entry.
If a set action occurs in the first route map entry and then the same set action occurs with a different value in a subsequent route map entry, the last set of actions overrides the previous set of actions with the same set command.
If set community additive and set as-path prepend are configure, the communities and AS numbers are prepended.
set community -- specifies a COMMUNITY attribute.
set as-path -- configures a filter to modify the AS path.
description
Add a description to this route map.
Syntax
description {description} To remove the description, use the no description {description} command.
Parameters
description
Enter a description to identify the route map (80 characters maximum).
Defaults
none
Command Modes ROUTE-MAP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale.
Access Control Lists (ACL) 235
Related Commands
Version
pre-7.7.1.0
Description
Introduced.
route-map -- enables a route map.
match as-path
To match routes that have a certain AS number in their BGP path, configure a filter.
Syntax
match as-path as-path-name To delete a match AS path filter, use the no match as-path as-path-name command.
Parameters
as-path-name
Enter the name of an established AS-PATH ACL, up to 140 characters.
Defaults
Not configured.
Command Modes ROUTE-MAP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.8.1.0
7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Increased the name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Related Commands
set as-path -- adds information to the BGP AS_PATH attribute.
match community
To match routes that have a certain COMMUNITY attribute in their BGP path, configure a filter.
Syntax
match community community-list-name [exact] To delete a community match filter, use the no match community command.
Parameters
community-list- Enter the name of a configured community list. name
236 Access Control Lists (ACL)
exact
(OPTIONAL) Enter the keywords exact to process only those routes with this community list name.
Defaults
Not configured.
Command Modes ROUTE-MAP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Related Commands
set community -- specifies a COMMUNITY attribute.
match interface
To match routes whose next hop is on the interface specified, configure a filter.
Syntax
match interface interface To remove a match, use the no match interface interface command.
Parameters
interface
Enter the following keywords and slot/port[/subport] or number information:
. For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet then the slot/port[/subport] information. For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the
slot/port information. For a Loopback interface, enter the keyword loopback then a number from 0
to 16383. For a port channel interface, enter the keywords port-channel then a
number. The range is from 1 to 128. For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Defaults
Not configured.
Command Modes ROUTE-MAP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Access Control Lists (ACL) 237
Related Commands
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.5.1.0 8.1.1.0 7.6.1.0 7.5.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for 4-port 40G line cards on ExaScale. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
match ip address -- redistributes routes that match an IP address. match ip next-hop -- redistributes routes that match the next-hop IP address. match ip route-source -- redistributes routes that match routes advertised by other routers. match metric -- redistributes routes that match a specific metric. match route-type -- redistributes routes that match a route type. match tag -- redistributes routes that match a specific tag.
match ip address
To match routes based on IP addresses specified in an access list, configure a filter.
Syntax
match ip address prefix-list-name To delete a match, use the no match ip address prefix-list-name command.
Parameters
prefix-list-name Enter the name of configured prefix list, up to 140 characters.
Defaults
Not configured.
Command Modes ROUTE-MAP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T.
238 Access Control Lists (ACL)
Related Commands
Version
8.3.11.1 8.3.7.0 8.1.1.0 7.8.1.0
7.6.1.0 7.5.1.0 pre-6.1.1.0
Description
Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Increased the name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
match interface -- redistributes routes that match the next-hop interface. match ip next-hop -- redistributes routes that match the next-hop IP address. match ip route-source -- redistributes routes that match routes advertised by other routers. match metric -- redistributes routes that match a specific metric. match route-type -- redistributes routes that match a route type. match tag -- redistributes routes that match a specific tag.
match ip next-hop
To match based on the next-hop IP addresses specified in an IP access list or IP prefix list, configure a filter.
Syntax
match ip next-hop {prefix-list prefix-list-name}
To delete a match, use the no match ip next-hop {prefix-list prefix-list-name} command.
Parameters
prefix-list prefix- Enter the keywords prefix-list and then enter the name of configured prefix
list-name
list, up 10 140 characters.
Defaults
Not configured.
Command Modes ROUTE-MAP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Increased the name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
Access Control Lists (ACL) 239
Related Commands
Version
7.6.1.0 7.5.1.0 pre-6.1.1.0
Description
Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
match interface -- redistributes routes that match the next-hop interface. match ip address -- redistributes routes that match an IP address. match ip route-source -- redistributes routes that match routes advertised by other routers. match metric -- redistributes routes that match a specific metric. match route-type -- redistributes routes that match a route type. match tag -- redistributes routes that match a specific tag.
match ip route-source
To match based on the routes advertised by routes specified in IP access lists or IP prefix lists, configure a filter.
Syntax
match ip route-source {prefix-list prefix-list-name}
To delete a match, use the no match ip route-source {prefix-list prefix-list-name} command.
Parameters
prefix-list prefix- Enter the keywords prefix-list and then enter the name of configured prefix
list-name
list, up to 140 characters.
Defaults
Not configured.
Command Modes ROUTE-MAP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.8.1.0
7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810 Introduced on the E-Series ExaScale. Increased the name string to accept up to 140 characters. Prior to 7.8.1.0, names were up to 16 characters long. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Related Commands
match interface -- redistributes routes that match the next-hop interface. match ip address -- redistributes routes that match an IP address.
240 Access Control Lists (ACL)
match ip next-hop -- redistributes routes that match the next-hop IP address. match metric -- redistributes routes that match a specific metric. match route-type -- redistributes routes that match a route type. match tag -- redistributes routes that match a specific tag.
match metric
To match on a specified value, configure a filter.
Syntax
match metric metric-value To delete a value, use the no match metric [metric-value] command.
Parameters
metric-value
Enter a value to match. The range is from zero (0) to 4294967295.
Defaults
Not configured.
Command Modes ROUTE-MAP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Related Commands
match interface -- redistributes routes that match the next-hop interface. match ip address -- redistributes routes that match an IP address. match ip next-hop -- redistributes routes that match the next-hop IP address. match ip route-source -- redistributes routes that match routes advertised by other routers. match route-type -- redistributes routes that match a route type. match tag -- redistributes routes that match a specific tag.
match origin
To match routes based on the value found in the BGP path ORIGIN attribute, configure a filter.
Syntax
match origin {egp | igp | incomplete}
Access Control Lists (ACL) 241
Parameters
To disable matching filter, use the no match origin {igp | egp | incomplete} command.
egp igp incomplete
Enter the keyword egp to match routes originating outside the AS.
Enter the keyword igp to match routes originating within the same AS.
Enter the keyword incomplete to match routes with incomplete routing information.
Defaults
Not configured.
Command Modes ROUTE-MAP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the E-Series.
match route-type
To match routes based on the how the route is defined, configure a filter.
Syntax
match route-type {external [type-1 | type-2] | internal | level-1 | level-2 | local}
To delete a match, use the no match route-type {local | internal | external [type-1 | type-2] | level-1 | level-2} command.
Parameters
external [type-1| type-2] internal
level-1 level-2 local
Enter the keyword external then either type-1 or type-2 to match only on OSPF Type 1 routes or OSPF Type 2 routes.
Enter the keyword internal to match only on routes generated within OSPF areas.
Enter the keyword level-1 to match IS-IS Level 1 routes.
Enter the keyword level-2 to match IS-IS Level 2 routes.
Enter the keyword local to match only on routes generated within the switch.
Defaults
Not configured.
Command Modes ROUTE-MAP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
242 Access Control Lists (ACL)
Related Commands
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
match interface -- redistributes routes that match the next-hop interface. match ip address -- redistributes routes that match an IP address. match ip next-hop -- redistributes routes that match the next-hop IP address. match ip route-source -- redistributes routes that match routes advertised by other routers. match metric -- redistributes routes that match a specific metric. match tag -- redistributes routes that match a specific tag.
match tag
To redistribute only routes that match a specified tag value, configure a filter.
Syntax
match tag tag-value To remove a match, use the no match tag command.
Parameters
tag-value
Enter a value as the tag on which to match. The range is from zero (0) to 4294967295.
Defaults
Not configured.
Command Modes ROUTE-MAP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000.
Access Control Lists (ACL) 243
Related Commands
Version
8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Description
Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
match interface -- redistributes routes that match the next-hop interface. match ip address -- redistributes routes that match an IP address. match ip next-hop -- redistributes routes that match the next-hop IP address. match ip route-source -- redistributes routes that match routes advertised by other routers. match metric -- redistributes routes that match a specific metric. match route-type -- redistributes routes that match a route type.
route-map
Enable a route map statement and configure its action and sequence number. This command also places you in ROUTE-MAP mode.
Syntax
route-map map-name [permit | deny] [sequence-number]
To delete a route map, use the no route-map map-name [permit | deny] [sequencenumber] command.
Parameters
map-name
permit
deny sequencenumber
Enter a text string of up to 140 characters to name the route map for easy identification.
(OPTIONAL) Enter the keyword permit to set the route map default as permit. If you do not specify a keyword, the default is permit.
(OPTIONAL) Enter the keyword deny to set the route map default as deny.
(OPTIONAL) Enter a number to identify the route map for editing and sequencing with other route maps. You are prompted for a sequence number if there are multiple instances of the route map. The range is from 1 to 65535.
Defaults
Not configured. If you do not define a keyword (permit or deny) for the route map, the permit action is the default.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000.
244 Access Control Lists (ACL)
Usage Information Example
Related Commands
Version
8.3.7.0 8.1.1.0 7.8.1.0
7.6.1.0 7.5.1.0 pre-6.1.1.0
Description
Introduced on the S4810. Introduced on the E-Series ExaScale. Increased the name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Use caution when you delete route maps because if you do not specify a sequence number, all route maps with the same map-name are deleted when you use the no route-map map-name command.
Dell(conf)#route-map dempsey Dell(config-route-map)#
show config -- displays the current configuration.
set as-path
To modify the AS path for border gateway protocol (BGP) routes, configure a filter.
Syntax
set as-path prepend as-number [... as-number]
To remove an AS-Path setting, use the no set as-path {prepend as-number | tag} command.
Parameters
prepend asnumber
Enter the keyword prepend and then enter up to eight AS numbers to be inserted into the BGP path information. The range is from 1 to 65535.
Defaults
Not configured.
Command Modes ROUTE-MAP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Access Control Lists (ACL) 245
Usage Information
Related Commands
You can prepend up to eight AS numbers to a BGP route. This command influences best path selection in BGP by inserting a tag or AS number into the AS_PATH attribute.
match as-path -- redistributes routes that match an AS-PATH attribute.
set automatic-tag
To automatically compute the tag value of the route, configure a filter.
Syntax
set automatic-tag To return to the default, enter no set automatic-tag.
Defaults
Not configured.
Command Modes ROUTE-MAP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Related Commands
set level -- specify the OSPF area for route redistribution. set metric -- specify the metric value assigned to redistributed routes. set metric-type -- specify the metric type assigned to redistributed routes. set tag -- specify the tag assigned to redistributed routes.
set comm-list delete
To remove the specified community list from the BGP route's COMMUNITY attribute, configure a filter.
Syntax
set comm-list community-list-name delete
To insert the community list into the COMMUNITY attribute, use the no set comm-list community-list-name delete command.
Parameters
community-list- Enter the name of an established Community list, up to 140 characters. name
246 Access Control Lists (ACL)
Defaults
Not configured.
Command Modes ROUTE-MAP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.8.1.0
7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Increased the name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
The community list used in the set comm-list delete command must be configured so that each filter contains only one community. For example, the filter deny 100:12 is acceptable, but the filter deny 120:13 140:33 results in an error.
If the set comm-list delete command and the set community command are configured in the same route map sequence, the deletion command (set comm-list delete) is processed before the insertion command (set community).
match community -- redistributes routes that match the COMMUNITY attribute.
set community -- specifies a COMMUNITY attribute.
set community
Allows you to assign a BGP COMMUNITY attribute.
Syntax
set community {community-number | local-as | no-advertise | no-export | none} [additive]
To delete a BGP COMMUNITY attribute assignment, use the no set community {communitynumber | local-as | no-advertise | no-export | none} command.
Parameters
communitynumber
local-AS
Enter the community number in AA:NN format where AA is the AS number (2 bytes) and NN is a value specific to that autonomous system.
Enter the keywords local-AS to drop all routes with the COMMUNITY attribute of NO_EXPORT_SUBCONFED.
All routes with the NO_EXPORT_SUBCONFED (0xFFFFFF03) community attribute must not be advertised to external BGP peers.
no-advertise
Enter the keywords no-advertise to drop all routes containing the well-known community attribute of NO_ADVERTISE.
Access Control Lists (ACL) 247
no-export
none additive
All routes with the NO_ADVERTISE (0xFFFFFF02) community attribute must not be advertised to other BGP peers.
Enter the keywords no-export to drop all routes containing the well-known community attribute of NO_EXPORT.
All routes with the NO_EXPORT (0xFFFFFF01) community attribute must not be advertised outside a BGP confederation boundary.
Enter the keyword none to remove the community attribute from routes meeting the route map criteria.
(OPTIONAL) Enter the keyword additive to add the communities to already existing communities.
Defaults
Not configured.
Command Modes ROUTE-MAP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Related Commands
match community -- redistributes routes that match the COMMUNITY attribute.
set level
To specify the IS-IS level or OSPF area to which matched routes are redistributed, configure a filter.
Syntax
set level {backbone | level-1 | level-1-2 | level-2 | stub-area}
To remove a set level condition, use the no set level {backbone | level-1 | level-1-2 | level-2 | stub-area} command.
Parameters
backbone level-1 level-1-2 level-2
Enter the keyword backbone to redistribute matched routes to the OSPF backbone area (area 0.0.0.0).
Enter the keyword level-1 to redistribute matched routes to IS-IS Level 1.
Enter the keyword level-1-2 to redistribute matched routes to IS-IS Level 1 and Level 2.
Enter the keyword level-2 to redistribute matched routes to IS-IS Level 2.
248 Access Control Lists (ACL)
stub-area
Enter the keyword stub to redistributed matched routes to OSPF stub areas.
Defaults
Not configured.
Command Modes ROUTE-MAP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Dell Networking OS Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Related Commands
set automatic-tag -- computes the tag value of the route. set metric -- specifies the metric value assigned to redistributed routes. set metric-type -- specifies the metric type assigned to redistributed routes. set tag -- specifies the tag assigned to redistributed routes.
set local-preference
To set the BGP LOCAL_PREF attribute for routers within the local autonomous system, configure a filter.
Syntax
set local-preference value To delete a BGP LOCAL_PREF attribute, use the no set local-preference command.
Parameters
value
Enter a number as the LOCAL_PREF attribute value. The range is from 0 to 4294967295.
Defaults
Not configured.
Command Modes ROUTE-MAP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON.
Access Control Lists (ACL) 249
Usage Information
Related Commands
Version
9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Description
Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
The set local-preference command changes the LOCAL_PREF attribute for routes meeting the route map criteria. To change the LOCAL_PREF for all routes, use the bgp default localpreference command.
bgp default local-preference -- changes the default LOCAL_PREF attribute for all routes.
set metric
To assign a new metric to redistributed routes, configure a filter.
Syntax
set metric [+ | -] metric-value To delete a setting, enter no set metric.
Parameters
+ metric-value
(OPTIONAL) Enter + to add a metric-value to the redistributed routes.
(OPTIONAL) Enter - to subtract a metric-value from the redistributed routes.
Enter a number as the new metric value. The range is from zero (0) to 4294967295.
Defaults
Not configured.
Command Modes ROUTE-MAP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series.
250 Access Control Lists (ACL)
Related Commands
Version
7.5.1.0 pre-6.1.1.0
Description
Introduced on the C-Series. Introduced on the E-Series.
set automatic-tag -- computes the tag value of the route. set level -- specifies the OSPF area for route redistribution. set metric-type -- specifies the route type assigned to redistributed routes. set tag -- specifies the tag assigned to redistributed routes.
set metric-type
To assign a new route type for routes redistributed to OSPF, configure a filter.
Syntax
set metric-type {internal | external | type-1 | type-2} To delete a setting, use the no set metric-type command.
Parameters
internal
external type-1 type-2
Enter the keyword internal to assign the Interior Gateway Protocol metric of the next hop as the route's BGP MULTI_EXIT_DES (MED) value.
Enter the keyword external to assign the IS-IS external metric.
Enter the keyword type-1 to assign the OSPF Type 1 metric.
Enter the keyword type-2 to assign the OSPF Type 2 metric.
Defaults
Not configured.
Command Modes ROUTE-MAP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0 8.1.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Implemented the keyword internal. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Related Commands
set automatic-tag -- computes the tag value of the route. set level -- specifies the OSPF area for route redistribution. set metric -- specifies the metric value assigned to redistributed routes.
Access Control Lists (ACL) 251
set tag -- specifies the tag assigned to redistributed routes.
set next-hop
To specify an IP address as the next hop, configure a filter.
Syntax
set next-hop ip-address To delete the setting, use the no set next-hop ip-address command.
Parameters
ip-address
Specify an IP address in dotted decimal format.
Defaults
Not configured.
Command Modes ROUTE-MAP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
If you configure the set next-hop command, its configuration takes precedence over the neighbor next-hop-self command in the ROUTER BGP mode.
If you configure the set next-hop command with the interface's IP address (either Loopback or physical), the software declares the route unreachable.
match ip next-hop -- redistributes routes that match the next-hop IP address.
set origin
To manipulate the BGP ORIGIN attribute, configure a filter.
Syntax
set origin {igp | egp | incomplete} To delete an ORIGIN attribute setting, use the no set origin command.
Parameters
egp
igp
Enter the keyword egp to set routes originating from outside the local AS. Enter the keyword igp to set routes originating within the same AS.
252 Access Control Lists (ACL)
incomplete
Enter the keyword incomplete to set routes with incomplete routing information.
Defaults
Not configured.
Command Modes ROUTE-MAP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
set tag
To specify a tag for redistributed routes, configure a filter.
Syntax
set tag tag-value To delete a setting, use the no set tag command.
Parameters
tag-value
Enter a number as the tag. The range is from zero (0) to 4294967295.
Defaults
Not configured.
Command Modes ROUTE-MAP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Access Control Lists (ACL) 253
Related Commands
Version
8.1.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Description
Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
set automatic-tag -- computes the tag value of the route. set level -- specifies the OSPF area for route redistribution. set metric -- specifies the metric value assigned to redistributed routes. set metric-type -- specifies the route type assigned to redistributed routes.
set weight
To add a non-RFC compliant attribute to the BGP route to assist with route selection, configure a filter.
Syntax
set weight weight To delete a weight specification, use the no set weight weight command.
Parameters
weight
Enter a number as the weight used by the route meeting the route map specification. The range is from 0 to 65535. The default is router-originated = 32768 and all other routes = 0.
When there are multiple routes to the same destination, the routes with a higher weight are preferred.
Defaults
router-originated = 32768; all other routes = 0
Defaults
Not configured.
Command Modes ROUTE-MAP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
If you do not use the set weight command, router-originated paths have a weight attribute of 32768 and all other paths have a weight attribute of zero.
254 Access Control Lists (ACL)
show config
Display the current route map configuration.
Syntax
show config
Command Modes ROUTE-MAP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Example
Dell(conf-nprefixl)#show config ! ip prefix-list PL_OSPF_to_RIP
seq 5 permit 1.1.1.0/24 seq 10 deny 2.1.0.0/16 ge 23 seq 25 permit 192.0.0.0 bitmask 192.0.0.0
show route-map
Display the current route map configurations.
Syntax Parameters
show route-map [map-name]
map-name
(OPTIONAL) Enter the name of a configured route map, up to 140 characters.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON.
Access Control Lists (ACL) 255
Example
Related Commands
Version
9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.8.1.0
7.6.1.0 7.5.1.0 pre-6.1.1.0
Description
Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Increased the name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Dell#show route-map route-map firpo, permit, sequence 10
Match clauses: Set clauses:
tag 34 Dell# route-map -- configures a route map.
AS-Path Commands
The following commands configure AS-Path ACLs.
ip as-path access-list
Enter AS-PATH ACL mode and configure an access control list based on the BGP AS_PATH attribute.
Syntax Parameters
ip as-path access-list as-path-name
as-path-name
Enter the access-list name, up to 140 characters.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
256 Access Control Lists (ACL)
Usage Information Example
Related Commands
Version
8.1.1.0 7.8.1.0
pre-Version 6.1.1.0
Description
Introduced on the E-Series ExaScale.
Increased the name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
Introduced on the E-Series.
To apply the AS-PATH ACL to BGP routes, use the match as-path or neighbor filter-list commands.
Dell(conf)#ip as-path access-list TestPath Dell(config-as-path)#
match as-path -- matches on routes contain a specific AS-PATH.
show ip as-path-access-lists
Display the all AS-PATH access lists configured on the E-Series.
Syntax
show ip as-path-access-lists
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 pre-Version 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the E-Series.
Example
Dell#show ip as-path-access-lists ip as-path access-list acc
permit 750 deny 10
Access Control Lists (ACL) 257
IP Community List Commands
IP community list commands are supported on the Dell Networking OS.
ip community-list
Enter COMMUNITY-LIST mode and create an IP community-list for BGP.
Syntax
ip community-list comm-list-name To delete a community-list, use the no ip community-list comm-list-name command.
Parameters
comm-list-name Enter a text string as the name of the community-list, up to 140 characters.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.8.1.0
pre-Version 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Increased the name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long. Introduced on the E-Series.
Example
Dell(conf)#ip community-list TestComList Dell(config-community-list)#
show ip community-lists
Display configured IP community lists in alphabetic order.
Syntax Parameters
show ip community-lists [name]
name
(OPTIONAL) Enter the name of the standard or extended IP community list, up to 140 characters.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
258 Access Control Lists (ACL)
Example
Version
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 8.3.19.0 8.3.7.0 8.1.1.0 7.8.1.0
pre-Version 6.1.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the S4810. Introduced on the E-Series ExaScale. Increased the name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long. Introduced on the E-Series.
Dell#show ip community-lists ip community-list ABC
permit local-AS deny no-advertise permit no-export Dell#
UDF ACL Commands
The following commands are available within each UDF ACL mode.
deny ip
Disassociate the UDF in IP access-list.
Syntax
deny ip {source mask | any | host ip-address} {destination mask | any | host ip-address} udf-pkt-format name udf-qualifier-value name
To remove this filter, use the no seq sequence-number command.
Parameters
source mask
any host ip-address destination udf-pkt-format name udf-qualifiervalue name
Enter the IP address of the network or host from which the packets were sent. Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or noncontiguous. Enter the keyword any to specify that all routes are subject to the filter. Enter the keyword host then the IP address to specify a host IP address. Enter the IP address of the network or host to which the packets are sent. Enter the keywords udf-pkt-format then the UDF ACL profile name.
Enter the keywords udf-qualifier-value then the UDF qualifier value profile name.
Command Modes CONFIGURATION-STANDARD-ACCESS-LIST mode CONFIGURATION-EXTENDED-ACCESS-LIST mode
Example
Dell(config-ext-nacl)#deny ip any any udf-pkt-format ipinip udfqualifier-value ipnip_val1
Access Control Lists (ACL) 259
Command History
Related Commands
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0)
Introduced on the S6000, Z9500, and S4048-ON.
ip access-list standard -- configures a standard ACL. ip access-list extended -- creates an extended ACL.
feature udf-acl
Enable udf-acl feature on a switch.
Syntax
feature udf-acl To disable the udf-acl feature, use the no feature udf-acl command.
Defaults
Disabled
Command Modes CONFIGURATION
Example
Dell(conf)#feature udf-acl
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0)
Introduced on the S6000, Z9500, and S4048-ON.
key
Configure UDF data context for parsing the different header location offset and required bytes.
Syntax
key description udf-id id packetbase PacketBase offset bytes length bytes
To return to the default settings, use the no key description udf-id id packetbase PacketBase offset bytes length bytes command.
Parameters
description udf-id id
packetbase PacketBase
Enter the key name for reference, up to 64 characters.
Enter the keywords udf-id then the ID used in the actual UDF ACL group. The range is from 1 to 12.
Enter the keyword packetbase then the option to refer to start of packet offset. The options are:
innerL3Header -- Offset is at inner L3 header. innerL4Header -- Offset is at inner L4 header. outerL3Header -- Offset is at outer L3 header. outerL4Header -- Offset is at outer L4 header. packetStart -- Offset is at packet start.
offset bytes
Enter the keyword offset then the offset value. The range is from 0 to 126, in multiples of 2.
260 Access Control Lists (ACL)
length bytes
Enter the keyword length then the length value. The range is from 2 to 24, in multiples of 2 bytes.
Defaults
None
Command Modes CONFIGURATION-UDF TCAM
Example
Dell(conf-udf-tcam)#key innerL3header udf-id 6 packetbase innerL3Header offset 0 length 2
Command History
Related Commands
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0)
Introduced on the S6000, Z9500, and S4048-ON.
udf-tcam -- creates a context for UDF TCAM. show config -- displays the current UDF TCAM profile configuration.
match
Configure the packet type to match for which the UDF offset bytes have to be parsed.
Syntax
match l2ethertype ipv4 ipprotocol value vlantag tagStatus
To return to the default settings, use the no match l2ethertype ipv4 ipprotocol value vlantag tagStatus command.
Parameters
l2ethertype ipv4 ipprotocol value
Enter the keyword l2ethertype to match the L2 Ethertype.
Enter the keyword ipv4 to match the IPv4 packet.
Enter the keyword ipprotocol then the option to match the IPv4 protocol. The options are:
IP protocol number. The range is from 0 to 255. icmp -- Internet control message protocol. tcp -- Transmission control protocol. udp -- User datagram protocol.
vlantag tagStatus
Enter the keyword vlantag then the option to match the VLAN packet. The options are:
any -- Any VLAN packet. double-tagged -- Double tagged VLAN packet. single-tagged -- Single tagged VLAN packet. untagged -- Untagged VLAN packet.
Defaults
None
Command Modes CONFIGURATION-UDF TCAM
Example
Dell(conf-udf-tcam)#match l2ethertype ipv4 ipprotocol 4 vlantag any
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Access Control Lists (ACL) 261
Related Commands
Version
9.8(0.0)
Description
Introduced on the S6000, Z9500, and S4048-ON.
udf-tcam -- creates a context for UDF TCAM. show config -- displays the current UDF TCAM profile configuration.
permit ip
Associate the UDF in IP access-list.
Syntax
permit ip {source mask | any | host ip-address} {destination mask | any | host ip-address} udf-pkt-format name udf-qualifier-value name
To remove this filter, use the no seq sequence-number command.
Parameters
source mask
any host ip-address destination udf-pkt-format name udf-qualifiervalue name
Enter the IP address of the network or host from which the packets were sent. Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or noncontiguous. Enter the keyword any to specify that all routes are subject to the filter. Enter the keyword host then the IP address to specify a host IP address. Enter the IP address of the network or host to which the packets are sent. Enter the keywords udf-pkt-format then the UDF ACL profile name.
Enter the keywords udf-qualifier-value then the UDF qualifier value profile name.
Command Modes CONFIGURATION-STANDARD-ACCESS-LIST mode CONFIGURATION-EXTENDED-ACCESS-LIST mode
Example
Dell(config-ext-nacl)#permit ip any any udf-pkt-format ipinip udfqualifier-value ipnip_val1
Command History
Related Commands
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0)
Introduced on the S6000, Z9500, and S4048-ON.
ip access-list standard -- configures a standard ACL. ip access-list extended -- creates an extended ACL.
show config
Display the current UDF TCAM profile configuration.
Syntax
show config
Command Modes CONFIGURATION-UDF TCAM
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
262 Access Control Lists (ACL)
Example
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0)
Introduced on the S6000, Z9500, and S4048-ON.
Dell(conf-udf-tcam)#show config ! udf-tcam ipnip seq 1
key innerL3header udf-id 6 packetbase innerL3Header offset 0 length 2 match l2ethertype ipv4 ipprotocol 4 vlantag any ! udf-qualifier-value ipnip_val1 Dell(conf-udf-tcam)#
udf-id
Assign value for each configured UDF ID in the given UDF TCAM profile.
Syntax
udf-id id value mask To return to the default settings, use the no udf-id 1-12 value mask command.
Parameters
id value mask
Enter the UDF ID range. The range is from 1 to 12. Enter the value for the UDF in Hex, up to 24 bytes. Enter the mask for the UDF in Hex, up to 24 bytes.
Defaults
None
Command Modes CONFIGURATION-UDF-Qualifier-Value Profile
Example
Dell(conf-udf-tcam-qual-val)#udf-id 1 aa ff
Command History
Related Commands
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0)
Introduced on the S6000, Z9500, and S4048-ON.
udf-qualifier-value -- creates a UDF qualifier value. udf-tcam -- creates a context for UDF TCAM. show config -- displays the current UDF -Qualifier-Value Profile configuration.
udf-qualifier-value
Create a UDF qualifier value to assign values for all UDF IDs.
Syntax
udf-qualifier-value name To return to the default settings, use the no udf-qualifier-value name command.
Parameters
name
Enter the UDF qualifier value profile name, up to 64 characters.
Defaults
None
Command Modes CONFIGURATION-UDF TCAM
Access Control Lists (ACL) 263
Example Command History
Related Commands
Dell(conf-udf-tcam)# udf-qualifier-value ipnip_val1
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0)
Introduced on the S6000, Z9500, and S4048-ON.
udf-id -- assigns value for each configured UDF ID in the given UDF TCAM profile. udf-tcam -- creates a context for UDF TCAM. show config -- displays the current UDF-Qualifier-Value Profile configuration.
udf-tcam
Create a context for UDF TCAM.
Syntax
udf-tcam name seq number To return to the default settings, use the no udf-tcam name seq number command.
Parameters
name number
Enter the UDF ACL profile name, up to 64 characters.
Enter the keyword seq then the sequence number of the Udf-Tcam table. The range is from 1 to 512.
Defaults
None
Command Modes CONFIGURATION
Example
Dell(conf)#udf-tcam ipnip seq 1
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0)
Introduced on the S6000, Z9500, and S4048-ON.
deny (for Standard IP ACLs)
To drop packets with a certain IP address, configure a filter.
Syntax
deny {source | any | host {ip-address}}[count [byte]] [dscp value] [order] [fragments] [log [interval minutes] [threshold-in-msgs [count]] [monitor]
To remove this filter, you have two choices:
Use the no seq sequence-number command if you know the filter's sequence number. Use the no deny {source [mask] | any | host ip-address} command.
Parameters
log
threshold-in msgs count
(OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which
264 Access Control Lists (ACL)
interval minutes monitor
the generation of ACL logs is terminated. with the seq, permit, or deny commands. The threshold range is from 1 to 100.
(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The time interval range is from 1 to 10 minutes.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
Defaults
By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled.
Command Modes CONFIGURATION-STANDARD-ACCESS-LIST
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000�ON.
9.3(0.0)
Added support for logging of ACLs on the S4810, S4820T, and Z9000 platforms.
9.4(0.0)
Added support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms.
Usage Information
Related Commands
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
ip access-list standard -- configures a standard ACL.
permit -- configures a permit filter.
deny (for Extended IP ACLs)
Configure a filter that drops IP packets meeting the filter criteria.
Syntax
deny {ip | ip-protocol-number} {source mask | any | host ip-address} {destination mask | any | host ip-address} [count [byte]] [dscp value] [order] [monitor] [fragments] [log [interval minutes] [threshold-in-msgs [count]] [monitor]
To remove this filter, you have two choices:
Access Control Lists (ACL) 265
Parameters
Use the no seq sequence-number command if you know the filter's sequence number.
Use the no deny {ip | ip-protocol-number} {source mask | any | host ipaddress} {destination mask | any | host ip-address} command.
log threshold-in msgs count
interval minutes
monitor
(OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated. with the seq, permit, or deny commands. The threshold range is from 1 to 100.
(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The time interval range is from 1 to 10 minutes.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
Defaults
By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled.
Command Modes CONFIGURATION-EXTENDED-ACCESS-LIST
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000�ON.
9.4(0.0)
Added support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms.
9.3(0.0)
Added support for logging of ACLs on the S4810, S4820T, and Z9000 platforms.
Usage Information
Related Commands
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
deny tcp -- Assigns a filter to deny TCP packets.
deny udp -- Assigns a filter to deny UDP packets.
ip access-list extended -- Creates an extended ACL.
266 Access Control Lists (ACL)
seq (for Standard IPv4 ACLs)
Assign a sequence number to a deny or permit filter in an IP access list while creating the filter.
Syntax
seq sequence-number {deny | permit} {source [mask] | any | host ipaddress}} [count [bytes]] [dscp value] [order] [fragments] [log [interval minutes] [threshold-in-msgs [count]] [monitor]
To delete a filter, use the no seq sequence-number command.
Parameters
log threshold-in msgs count
interval minutes
monitor
(OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100.
(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
Defaults
By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled.
Command Modes CONFIGURATION-STANDARD-ACCESS-LIST
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000�ON.
9.4(0.0)
Added support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms.
9.3(0.0)
Added support for logging of ACLs on the S4810, S4820T, and Z9000 platforms.
Usage Information
Related Commands
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
deny -- Configures a filter to drop packets.
permit -- Configures a filter to forward packets.
Access Control Lists (ACL) 267
deny tcp (for Extended IP ACLs)
Configure a filter that drops transmission control protocol (TCP) packets meeting the filter criteria.
Syntax
deny tcp {source mask | any | host ip-address} [bit] [operator port [port]] {destination mask | any | host ip-address} [dscp] [bit] [operator port [port]] [count [byte]] [order] [fragments] [log [interval minutes] [threshold-in-msgs [count]] [monitor]
To remove this filter, you have two choices:
Use the no seq sequence-number command if you know the filter's sequence number. Use the no deny tcp {source mask | any | host ip-address} {destination mask
| any | host ip-address} command.
Parameters
log threshold-in msgs count
interval minutes
monitor
(OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated. with the seq, permit, or deny commands. The threshold range is from 1 to 100.
(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
Defaults
By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled.
Command Modes CONFIGURATION-EXTENDED-ACCESS-LIST
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000�ON.
9.4(0.0)
Added the support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms.
9.3(0.0)
Added the support for logging of ACLs on the S4810, S4820T, and Z9000 platforms.
Usage Information
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing
268 Access Control Lists (ACL)
Related Commands
packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
deny -- assigns a filter to deny IP traffic. deny udp -- assigns a filter to deny UDP traffic.
deny udp (for Extended IP ACLs)
To drop user datagram protocol (UDP) packets meeting the filter criteria, configure a filter.
Syntax
deny udp {source mask | any | host ip-address} [operator port [port]] {destination mask | any | host ip-address} [dscp] [operator port [port]] [count [byte]] [order] [fragments] [log [interval minutes] [threshold-inmsgs [count]]
To remove this filter, you have two choices:
Use the no seq sequence-number command if you know the filter's sequence number. Use the no deny udp {source mask | any | host ip-address} {destination mask
| any | host ip-address} command.
Parameters
log threshold-in msgs count
interval minutes
(OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated. with the seq, permit, or deny commands. The threshold range is from 1 to 100.
(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The time interval range is from 1 to 10 minutes.
Defaults
By default, 10 ACL logs are generated if you do not specify the threshold explicitly. The default frequency at which ACL logs are generated is five minutes.
Command Modes CONFIGURATION-EXTENDED-ACCESS-LIST
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.3(0.0)
Added support for logging of ACLs on the S4810, S4820T, and Z9000 platforms.
Usage Information
Related Commands
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
deny -- assigns a filter to deny IP traffic.
deny tcp -- assigns a filter to deny TCP traffic.
Access Control Lists (ACL) 269
deny arp (for Extended MAC ACLs)
Configure an egress filter that drops ARP packets on egress ACL supported line cards. (For more information, refer to your line card documentation).
Syntax
deny arp {destination-mac-address mac-address-mask | any} vlan vlan-id {ipaddress | any | opcode code-number} [count [byte]] [order] [log [interval minutes] [threshold-in-msgs [count]] [monitor]
To remove this filter, you have two choices:
Use the no seq sequence-number command if you know the filter's sequence number. Use the no deny arp {destination-mac-address mac-address-mask | any} vlan
vlan-id {ip-address | any | opcode code-number} command.
Parameters
log threshold-in msgs count
interval minutes
monitor
(OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100.
(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The time interval range is from 1 to 10 minutes.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
Defaults
By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled.
Command Modes CONFIGURATION-EXTENDED-ACCESS-LIST
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000�ON.
9.4(0.0)
Added support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms.
9.5(0.1)
Introduced on the Z9500.
9.3(0.0)
Added support for logging of ACLs on the S4810, S4820T, and Z9000 platforms.
Usage Information
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may
270 Access Control Lists (ACL)
specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
deny icmp (for Extended IP ACLs)
To drop all or specific internet control message protocol (ICMP) messages, configure a filter. NOTE: Only the options that have been newly introduced in Release 9.3(0.0) and Release 9.4(0.0) are described here. For a complete description on all of the keywords and variables that are available with this command, refer the topic of this command discussed earlier in this guide.
Syntax Parameters
deny icmp {source mask | any | host ip-address} {destination mask | any | host ip-address} [dscp] [message-type] [count [byte]] [order] [fragments] [log [interval minutes] [threshold-in-msgs [count]] [monitor]
To remove this filter, you have two choices:
Use the no seq sequence-number command if you know the filter's sequence number. Use the no deny icmp {source mask | any | host ip-address} {destination
mask | any | host ip-address} command.
log threshold-in msgs count
interval minutes
monitor
(OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100.
(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The time interval range is from 1 to 10 minutes.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
Defaults
By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled.
Command Modes CONFIGURATION-EXTENDED-ACCESS-LIST
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.3(0.0)
Added support for logging of ACLs on the S4810, S4820T, and Z9000 platforms.
9.4(0.0)
Added support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms.
Usage Information
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
Access Control Lists (ACL) 271
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
deny ether-type (for Extended MAC ACLs)
Configure an egress filter that drops specified types of Ethernet packets on egress ACL supported line cards. (For more information, refer to your line card documentation).
Syntax
deny ether-type protocol-type-number {destination-mac-address mac-addressmask | any} vlan vlan-id {source-mac-address mac-address-mask | any} [count [byte]] [order] [log [interval minutes] [threshold-in-msgs [count]] [monitor]
To remove this filter, you have two choices:
Use the no seq sequence-number command if you know the filter's sequence number. Use the no deny ether-type protocol-type-number {destination-mac-address
mac-address-mask | any} vlan vlan-id {source-mac-address mac-address-mask | any} command.
Parameters
log threshold-in msgs count
interval minutes
monitor
(OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100.
(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The time interval range is from 1 to 10 minutes.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
Defaults
By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled.
Command Modes CONFIGURATION-EXTENDED-ACCESS-LIST
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000�ON.
9.4(0.0)
Added support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms.
9.3(0.0)
Added support for logging of ACLs on the S4810, S4820T, and Z9000 platforms.
Usage Information
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and
272 Access Control Lists (ACL)
the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
deny (for Standard MAC ACLs)
To drop packets with a the MAC address specified, configure a filter.
Syntax
deny {any | mac-source-address [mac-source-address-mask]} [count [byte]] [log [interval minutes] [threshold-in-msgs [count]][monitor]
To remove this filter, you have two choices:
Use the no seq sequence-number command if you know the filter's sequence number. Use the no deny {any | mac-source-address mac-source-address-mask} command.
Parameters
log threshold-in msgs count
interval minutes
monitor
(OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated. with the seq, permit, or deny commands. The threshold range is from 1 to 100.
(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The threshold range is from 1 to 10 minutes.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
Defaults
By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled.
Command Modes CONFIGURATION-MAC ACCESS LIST-STANDARD
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000�ON.
9.4(0.0)
Added support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms.
9.3(0.0)
Added support for logging of ACLs on the S4810, S4820T, and Z9000 platforms.
Usage Information
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and
Access Control Lists (ACL) 273
Related Commands
the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
permit -- configures a MAC address filter to pass packets.
seq -- configures a MAC address filter with a specified sequence number.
deny (for Extended MAC ACLs)
To drop packets that match the filter criteria, configure a filter.
Syntax
deny {any | host mac-address | mac-source-address mac-source-address-mask} {any | host mac-address | mac-destination-address mac-destination-addressmask} [ethertype-operator] [count [byte]][log [interval minutes] [threshold-in-msgs [count]] [monitor]
To remove this filter, you have two choices:
Use the no seq sequence-number command if you know the filter's sequence number. Use the no deny {any | host mac-address | mac-source-address mac-source-
address-mask} {any | host mac-address | mac-destination-address macdestination-address-mask} command.
Parameters
log threshold-in msgs count
interval minutes
monitor
(OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated. with the seq, permit, or deny commands. The threshold range is from 1 to 100.
(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The time interval range is from 1 to 10 minutes.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
Defaults
By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled.
Command Modes CONFIGURATION-MAC ACCESS LIST-EXTENDED
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
274 Access Control Lists (ACL)
Usage Information
Related Commands
Version
9.7(0.0) 9.4(0.0)
9.3(0.0)
Description
Introduced on the S6000�ON.
Added support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms.
Added support for logging of ACLs on the S4810, S4820T, and Z9000 platforms.
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
permit -- configures a MAC address filter to pass packets.
seq -- configures a MAC address filter with a specified sequence number.
permit (for Standard IP ACLs)
To permit packets from a specific source IP address to leave the switch, configure a filter.
Syntax
permit {source [mask]| any | host ip-address} [count [byte]] [dscp value] [order] [fragments] [log [interval minutes] [threshold-in-msgs [count]] [monitor]
To remove this filter, you have two choices:
Use the no seq sequence-number command if you know the filter's sequence number. Use the no permit {source [mask] | any | host ip-address} command.
Parameters
log threshold-in msgs count
interval minutes
monitor
(OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100.
(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The threshold range is from 1 to 10 minutes.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
Defaults
By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled.
Command Modes CONFIGURATION-STANDARD-ACCESS-LIST
Access Control Lists (ACL) 275
Command History
Usage Information
Related Commands
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4(0.0)
9.3(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Added support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms. Added support for logging of ACLs on the S4810, S4820T, and Z9000 platforms.
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
You can activate flow-based monitoring for a monitoring session by entering theflow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
deny -- Assigns a IP ACL filter to deny IP packets.
ip access-list standard -- Creates a standard ACL.
permit arp (for Extended MAC ACLs)
Configure a filter that forwards ARP packets meeting this criteria. This command is supported only on 12-port GE line cards with SFP optics; refer to your line card documentation for specifications.
Syntax
permit arp {destination-mac-address mac-address-mask | any} vlan vlan-id {ip-address | any | opcode code-number} [count [byte]] [order] [fragments] [log [interval minutes] [threshold-in-msgs [count]][monitor]
To remove this filter, you have two choices:
Use the no seq sequence-number command if you know the filter's sequence number. Use the {destination-mac-address mac-address-mask | any} vlan vlan-id {ip-
address | any | opcode code-number} command.
Parameters
log threshold-in msgs count
interval minutes
monitor
(OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100.
(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
276 Access Control Lists (ACL)
Defaults
By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled.
Command Modes CONFIGURATION-EXTENDED-ACCESS-LIST
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000�ON.
9.4(0.0)
Added support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms.
9.3(0.0)
Added support for logging of ACLs on the S4810, S4820T, and Z9000 platforms.
Usage Information
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
permit ether-type (for Extended MAC ACLs)
Configure a filter that allows traffic with specified types of Ethernet packets. This command is supported only on 12-port GE line cards with SFP optics. For specifications, refer to your line card documentation.
Syntax
permit ether-type protocol-type-number {destination-mac-address macaddress-mask | any} vlan vlan-id {source-mac-address mac-address-mask | any} [count [byte]] [order] [log [interval minutes] [threshold-in-msgs [count]] [monitor]
To remove this filter, you have two choices:
Use the no seq sequence-number command if you know the filter's sequence number. Use the no permit ether-type protocol-type-number {destination-mac-address
mac-address-mask | any} vlan vlan-id {source-mac-address mac-address-mask | any} command.
Parameters
log threshold-in msgs count
interval minutes
(OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated. with the seq, permit, or deny commands. The threshold range is from 1 to 100.
(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes.
Access Control Lists (ACL) 277
monitor
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
Defaults
By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled.
Command Modes CONFIGURATION-EXTENDED-ACCESS-LIST
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000�ON.
9.4(0.0)
Added support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms.
9.3(0.0)
Added support for logging of ACLs on the S4810, S4820T, and Z9000 platforms.
Usage Information
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
permit icmp (for Extended IP ACLs)
Configure a filter to allow all or specific ICMP messages.
Syntax
permit icmp {source mask | any | host ip-address} {destination mask | any | host ip-address} [dscp] [message-type] [count [byte]] [order] [fragments] [log [interval minutes] [threshold-in-msgs [count]] [monitor]
To remove this filter, you have two choices:
Use the no seq sequence-number command if you know the filter's sequence number. Use the no permit icmp {source mask | any | host ip-address} {destination
mask | any | host ip-address} command.
Parameters
log
threshold-in msgs count
(OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100.
278 Access Control Lists (ACL)
interval minutes monitor
(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
Defaults
By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled.
Command Modes CONFIGURATION-STANDARD-ACCESS-LIST
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000�ON.
9.4(0.0)
Added support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms.
9.3(0.0)
Added support for logging of ACLs on the S4810, S4820T, and Z9000 platforms.
Usage Information
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
You can activate flow-based monitoring for a monitoring session by entering theflow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
permit udp (for Extended IP ACLs)
To pass UDP packets meeting the filter criteria, configure a filter.
Syntax
permit udp {source mask | any | host ip-address} [operator port [port]] {destination mask | any | host ip-address} [dscp] [operator port [port]] [count [byte]] [order] [fragments] [log [interval minutes] [threshold-inmsgs [count]][monitor]
To remove this filter, you have two choices:
Use the no seq sequence-number command if you know the filter's sequence number. Use the no permit udp {source mask | any | host ip-address} {destination
mask | any | host ip-address command.
Parameters
log
(OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
Access Control Lists (ACL) 279
threshold-in msgs count
interval minutes monitor
(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100.
(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
Defaults
By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled.
Command Modes CONFIGURATION-EXTENDED-ACCESS-LIST
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000�ON.
9.4(0.0)
Added support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms.
9.3.0.0
Added support for logging of ACLs on the S4810, S4820T, and Z9000 platforms.
Usage Information
Related Commands
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
ip access-list extended -- creates an extended ACL.
permit -- assigns a permit filter for IP packets.
permit tcp -- assigns a permit filter for TCP packets.
permit (for Extended IP ACLs)
To pass IP packets meeting the filter criteria, configure a filter.
Syntax
permit {source mask | any | host ip-address} {destination mask | any | host ip-address} [count [bytes]] [dscp value] [order] [fragments] [log [interval minutes] [threshold-in-msgs [count]] [monitor]
280 Access Control Lists (ACL)
Parameters
To remove this filter, you have two choices:
Use the no seq sequence-number command if you know the filter's sequence number. Use the no deny {source mask | any | host ip-address} {destination mask |
any | host ip-address} command.
log threshold-in msgs count
interval minutes
monitor
(OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100.
(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
Defaults
By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled.
Command Modes CONFIGURATION-EXTENDED-ACCESS-LIST
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000�ON.
9.4(0.0)
Added the support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms.
9.3(0.0)
Added the support for logging of ACLs on the S4810, S4820T, and Z9000 platforms.
Usage Information
Related Commands
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, standard and extended IPv6 ACLs, and standard and extended MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
You can activate flow-based monitoring for a monitoring session by entering theflow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
ip access-list extended -- creates an extended ACL.
permit tcp -- assigns a permit filter for TCP packets.
permit udp -- assigns a permit filter for UDP packets.
Access Control Lists (ACL) 281
permit (for Standard MAC ACLs)
To forward packets from a specific source MAC address, configure a filter.
Syntax
permit {any | mac-source-address [mac-source-address-mask]} [count [byte]] | [log [interval minutes] [threshold-in-msgs [count]] [monitor]
To remove this filter, you have two choices:
Use the no seq sequence-number command if you know the filter's sequence number. Use the no permit {any | mac-source-address mac-source-address-mask}
command.
Parameters
log threshold-in msgs count
interval minutes
monitor
(OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100.
(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
Defaults
Command History
By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
The default frequency at which ACL logs are generated is 5 minutes. By default, flow-based monitoring is not enabled.
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4(0.0)
9.3(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Added support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms. Added support for logging of ACLs on the S4810, S4820T, and Z9000 platforms.
Usage Information
Related Commands
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
deny -- configures a MAC ACL filter to drop packets.
seq --configure a MAC ACL filter with a specified sequence number.
282 Access Control Lists (ACL)
seq (for Standard MAC ACLs)
To a deny or permit filter in a MAC access list while creating the filter, assign a sequence number.
Syntax
seq sequence-number {deny | permit} {any | mac-source-address [mac-sourceaddress-mask]} [count [byte]] [log [interval minutes] [threshold-in-msgs [count]] [monitor]
To remove this filter, use the no seq sequence-number command.
Parameters
log threshold-in msgs count
interval minutes
monitor
(OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100.
(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
Defaults
By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled.
Command Modes CONFIGURATION-MAC ACCESS LIST-STANDARD
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000�ON.
9.4(0.0)
Added support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms.
9.3(0.0)
Added support for logging of ACLs on the S4810, S4820T, and Z9000 platforms.
Usage Information
Related Commands
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
deny -- configures a filter to drop packets.
permit -- configures a filter to forward packets.
Access Control Lists (ACL) 283
permit tcp (for Extended IP ACLs)
To pass TCP packets meeting the filter criteria, configure a filter.
Syntax
permit tcp {source mask | any | host ip-address} [bit] [operator port [port]] {destination mask | any | host ip-address} [bit] [dscp] [operator port [port]] [count [byte]] [order] [fragments] [log [interval minutes] [threshold-in-msgs [count]] [monitor]
To remove this filter, you have two choices:
Use the no seq sequence-number command if you know the filter's sequence number. Use the no permit tcp {source mask | any | host ip-address} {destination
mask | any | host ip-address} command.
Parameters
log threshold-in msgs count
interval minutes
monitor
(OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100.
(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
Defaults
By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled.
Command Modes CONFIGURATION-EXTENDED-ACCESS-LIST
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000�ON.
9.4(0.0)
Added support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms.
9.3(0.0)
Added support for logging of ACLs on the S4810, S4820T, and Z9000 platforms.
Usage Information
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
284 Access Control Lists (ACL)
Related Commands
ip access-list extended -- creates an extended ACL. permit -- assigns a permit filter for IP packets. permit udp -- assigns a permit filter for UDP packets.
seq arp (for Extended MAC ACLs)
Configure an egress filter with a sequence number that filters ARP packets meeting this criteria. This command is supported only on 12-port GE line cards with SFP optics. For specifications, refer to your line card documentation.
NOTE: Only the options that have been newly introduced in Release 9.3(0.0) and Release 9.4(0.0) are described here. For a complete description on all of the keywords and variables that are available with this command, refer the topic of this command discussed earlier in this guide.
Syntax Parameters
seq sequence-number {deny | permit} arp {destination-mac-address macaddress-mask | any} vlan vlan-id {ip-address | any | opcode code-number} [count [byte]] [order] [log [interval minutes] [threshold-in-msgs [count]] [monitor]
To remove this filter, use the no seq sequence-number command.
log threshold-in msgs count
interval minutes
monitor
(OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated. with the seq, permit, or deny commands. You can enter a threshold in the range of 1-100.
(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. You can enter an interval in the range of 1-10 minutes.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
Defaults
By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
The default frequency at which ACL logs are generated is 5 minutes. By default, flow-based monitoring is not enabled.
Command Modes CONFIGURATION-EXTENDED-ACCESS-LIST
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000�ON.
9.4(0.0)
Added support for flow-based monitoring on the S4810, S4820T, S6000, Z9000, and MXL 10/40GbE Switch IO Module platforms.
9.3.0.0
Added support for logging of ACLs on the S4810, S4820T, Z9000, and MXL 10/40GbE Switch IO Module platforms.
Usage Information
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is reenabled for this new interval.
If ACL logging is stopped because the configured threshold is exceeded, it is reenabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, standard and extended IPv6 ACLs, and standard and extended MAC ACLs. You can configure ACL logging only on ACLs
Access Control Lists (ACL) 285
that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
seq ether-type (for Extended MAC ACLs)
Configure an egress filter with a specific sequence number that filters traffic with specified types of Ethernet packets. This command is supported only on 12-port GE line cards with SFP optics. For specifications, refer to your line card documentation.
NOTE: Only the options that have been newly introduced in Release 9.3(0.0) and Release 9.4(0.0) are described here. For a complete description on all of the keywords and variables that are available with this command, refer the topic of this command discussed earlier in this guide.
Syntax Parameters
seq sequence-number {deny | permit} ether-type protocol-type-number {destination-mac-address mac-address-mask | any} vlan vlan-id {source-macaddress mac-address-mask | any} [count [byte]] [order] [log [interval minutes] [threshold-in-msgs [count]] [monitor]
To remove this filter, use the no seq sequence-number command.
log threshold-in msgs count
interval minutes
monitor
(OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated. with the seq, permit, or deny commands. You can enter a threshold in the range of 1-100.
(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. You can enter an interval in the range of 1-10 minutes.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
Defaults
By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
The default frequency at which ACL logs are generated is 5 minutes. By default, flow-based monitoring is not enabled.
Command Modes CONFIGURATION-EXTENDED-ACCESS-LIST
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000�ON.
9.4(0.0)
Added support for flow-based monitoring on the S4810, S4820T, S6000, Z9000, and MXL 10/40GbE Switch IO Module platforms.
9.3.0.0
Added support for logging of ACLs on the S4810, S4820T, Z9000, and MXL 10/40GbE Switch IO Module platforms.
286 Access Control Lists (ACL)
Usage Information
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is reenabled for this new interval.
If ACL logging is stopped because the configured threshold is exceeded, it is reenabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, standard and extended IPv6 ACLs, and standard and extended MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
seq (for IP ACLs)
Assign a sequence number to a deny or permit filter in an extended IP access list while creating the filter.
Syntax Parameters
seq sequence-number {deny | permit} {ip-protocol-number | icmp | ip | tcp | udp} {source mask | any | host ip-address} {destination mask | any | host ip-address} [operator port [port]] [count [byte]] [dscp value] [order] [fragments] [log [interval minutes] [threshold-in-msgs [count]] [monitor]
log threshold-in msgs count
interval minutes
monitor
(OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100..
(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
Defaults
By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled.
Command Modes CONFIGURATION-EXTENDED-ACCESS-LIST
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000�ON.
9.4(0.0)
Added support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms.
9.3(0.0)
Added support for logging of ACLs on the S4810, S4820T, and Z9000 platforms.
Access Control Lists (ACL) 287
Usage Information
Related Commands
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
deny -- configures a filter to drop packets.
permit -- configures a filter to forward packets.
seq (for IPv6 ACLs)
Assign a sequence number to a deny or permit the filter in an IPv6 access list while creating the filter.
Syntax
seq sequence-number {deny | permit} {ipv6-protocol-number | icmp | ip | tcp | udp} {source address mask | any | host ipv6-address} {destination address | any | host ipv6-address} [operator port [port]] [count [byte]] [log [interval minutes] [threshold-in-msgs [count]] [monitor]
To delete a filter, use the no seq sequence-number command.
Parameters
log threshold-in msgs count
interval minutes
monitor
(OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminate with the seq, permit, or deny commands. The threshold range is from 1 to 100.
(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
Defaults
By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled.
Command Modes ACCESS-LIST
Command History
Version
9.7(0.0)
9.5(0.1)
9.4(0.0)
9.3(0.0)
Description
Introduced on the S6000�ON. Introduced on the Z9500. Added support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms. Added support for logging of ACLs on the S4810, S4820T, and Z9000 platforms.
288 Access Control Lists (ACL)
Usage Information
Related Commands
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
permit � configures a filter to forward packets.
permit udp (for IPv6 ACLs)
Configure a filter to pass UDP packets meeting the filter criteria.
Syntax
permit udp {source address mask | any | host ipv6-address} [operator port [port]] {destination address | any | host ipv6-address} [operator port [port]] [count [byte]] [log [interval minutes] [threshold-in-msgs [count]] [monitor]
To remove this filter, you have two choices:
Use the no seq sequence-number command if you know the filter's sequence number. Use the no permit udp {source address mask | any | host ipv6-address}
{destination address | any | host ipv6-address} command.
Parameters
log threshold-in msgs count
interval minutes
monitor
(OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100.
(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
Defaults
By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled.
Command Modes ACCESS-LIST
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON.
Access Control Lists (ACL) 289
Usage Information
Version
9.5(0.1) 9.4(0.0)
9.3.0.0
Description
Introduced on the Z9500.
Added support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms.
Added support for logging of ACLs on the S4810, S4820T, and Z9000 platforms.
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
permit tcp (for IPv6 ACLs)
Configure a filter to pass TCP packets that match the filter criteria.
Syntax
permit tcp {source address mask | any | host ipv6-address} [operator port [port]] {destination address | any | host ipv6-address} [bit] [operator port [port]] [count [byte]] [log [interval minutes] [threshold-in-msgs [count]] [monitor]
To remove this filter, you have two choices:
Use the no seq sequence-number command if you know the filter's sequence number. Use the no permit tcp {source address mask | any | host ipv6-address}
{destination address | any | host ipv6-address} command.
Parameters
log threshold-in msgs count
interval minutes
monitor
(OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated. with the seq, permit, or deny commands. The threshold range is from 1 to 100.
(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
Defaults
By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
The default frequency at which ACL logs are generated is 5 minutes. By default, flow-based monitoring is not enabled.
Command Modes ACCESS-LIST
290 Access Control Lists (ACL)
Command History
Usage Information
Related Commands
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.4(0.0)
9.3(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Added support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms. Added support for logging of ACLs on the S4810, S4820T, and Z9000 platforms.
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
permit � assigns a permit filter for IP packets.
permit icmp (for IPv6 ACLs)
To allow all or specific internet control message protocol (ICMP) messages, configure a filter.
Syntax
permit icmp {source address mask | any | host ipv6-address} {destination address | any | host ipv6-address} [message-type] [count [byte]] [log [interval minutes] [threshold-in-msgs [count]] [monitor]
To remove this filter, you have two choices:
Use the no seq sequence-number command if you know the filter's sequence number. Use the no permit icmp {source address mask | any | host ipv6-address}
{destination address | any | host ipv6-address} command.
Parameters
log threshold-in msgs count
interval minutes
monitor
(OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100.
(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
Access Control Lists (ACL) 291
Defaults
By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled.
Command Modes ACCESS-LIST
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
9.5(0.1)
9.4(0.0)
9.3(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Added support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms. Added support for logging of ACLs on the S4810, S4820T, and Z9000 platforms.
Usage Information
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
You can activate flow-based monitoring for a monitoring session by entering theflow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
permit (for IPv6 ACLs)
To configure a filter that matches the filter criteria, select an IPv6 protocol number, ICMP, IPv6, TCP, or UDP.
Syntax
permit {ipv6-protocol-number | icmp | ipv6 | tcp | udp} [count [byte]] [dscp value] [order] [fragments] [log [interval minutes] [threshold-in-msgs [count]] [monitor] [no-drop]
To remove this filter, you have two choices:
Use the no seq sequence-number command syntax if you know the filter's sequence number Use the no permit {ipv6-protocol-number | icmp | ipv6 | tcp | udp} command
Parameters
log threshold-in msgs count
interval minutes
(OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100.
(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes.
292 Access Control Lists (ACL)
monitor no-drop
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
Enter the keywords no-drop to match only the forwarded packets.
Defaults
By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled.
Command Modes ACCESS-LIST
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.8(0.0)
9.7(0.0)
9.5(0.1)
9.4(0.0)
9.3(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Added the no-drop parameter. Introduced on the S6000�ON. Introduced on the Z9500. Added support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms. Added support for logging of ACLs on the S4810, S4820T, and Z9000 platforms.
Usage Information
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
You can activate flow-based monitoring for a monitoring session by entering theflow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
deny udp (for IPv6 ACLs)
Configure a filter to drop user datagram protocol (UDP) packets meeting the filter criteria.
Syntax
deny udp {source address mask | any | host ipv6-address} [operator port [port]] {destination address | any | host ipv6-address} [operator port [port]] [count [byte]] [log [interval minutes] [threshold-in-msgs [count]] [monitor]
To remove this filter, you have two choices:
Use the no seq sequence-number command syntax if you know the filter's sequence number Use the no deny udp {source address mask | any | host ipv6-address}
{destination address | any | host ipv6-address} command
Parameters
log
(OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
Access Control Lists (ACL) 293
threshold-in msgs count
interval minutes monitor
(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated. with the seq, permit, or deny commands. The threshold range is from 1 to 100.
(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The threshold range is from 1 to 10 minutes.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
Defaults
By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled.
Command Modes ACCESS-LIST
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
9.5(0.1)
9.4(0.0)
9.3(0.0)
Description
Introduced on the S4048-ON.
Introduced on the S3048-ON.
Introduced on the S6000�ON.
Introduced on the Z9500.
Added support for flow-based monitoring on the S4810, S4820T, S6000, Z9000, and MXL 10/40GbE Switch IO Module platforms.
Added support for logging of ACLs on the S4810, S4820T, Z9000, and MXL 10/40GbE Switch IO Module platforms.
Usage Information
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs.
You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
deny tcp (for IPv6 ACLs)
Configure a filter that drops TCP packets that match the filter criteria.
Syntax
deny tcp {source address mask | any | host ipv6-address} [operator port [port]] {destination address | any | host ipv6-address} [bit] [operator port [port]] [count [byte]] [log [interval minutes] [threshold-in-msgs [count]] [monitor]
294 Access Control Lists (ACL)
Parameters
To remove this filter, you have two choices:
Use the no seq sequence-number command syntax if you know the filter's sequence number Use the no deny tcp {source address mask | any | host ipv6-address}
{destination address | any | host ipv6-address} command
log threshold-in msgs count
interval minutes
monitor
(OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated. with the seq, permit, or deny commands. The threshold range is from 1 to 100..
(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The time interval range is from 1 to 10 minutes.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
Defaults
By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled.
Command Modes ACCESS-LIST
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
9.5(0.1)
9.4(0.0)
9.3(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Added support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms. Added support for logging of ACLs on the S4810, S4820T, and Z9000 platforms.
Usage Information
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
Access Control Lists (ACL) 295
deny icmp (for Extended IPv6 ACLs)
Configure a filter to drop all or specific ICMP messages.
NOTE: Only the options that have been newly introduced in Release 9.3(0.0) and Release 9.4(0.0) are described here. For a complete description on all of the keywords and variables that are available with this command, refer the topic of this command discussed earlier in this guide.
Syntax Parameters
deny icmp {source address mask | any | host ipv6-address} {destination address | any | host ipv6-address} [message-type] [count [byte]] | [log [interval minutes] [threshold-in-msgs [count]] [monitor]
To remove this filter, you have two choices:
Use the no seq sequence-number command syntax if you know the filter's sequence number Use the no deny icmp {source address mask | any | host ipv6-address}
{destination address | any | host ipv6-address} command
log threshold-in msgs count
interval minutes
monitor
(OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated. with the seq, permit, or deny commands. You can enter a threshold in the range of 1-100.
(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. You can enter an interval in the range of 1-10 minutes.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
Defaults
By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
The default frequency at which ACL logs are generated is 5 minutes. By default, flow-based monitoring is not enabled.
Command Modes ACCESS-LIST
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
9.4(0.0)
9.5(0.1) 9.3.0.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Added support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms. Introduced on the Z9500. Added support for logging of ACLs on the S4810, S4820T, and Z9000 platforms.
Usage Information
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be
296 Access Control Lists (ACL)
applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
deny (for IPv6 ACLs)
Configure a filter that drops IPv6 packets that match the filter criteria.
Syntax
deny {ipv6-protocol-number | icmp | ipv6 | tcp | udp} [count [byte]] [dscp value] [order] [fragments] [log [interval minutes] [threshold-in-msgs [count]] [monitor] [no-drop]
To remove this filter, you have two choices:
Use the no seq sequence-number command syntax if you know the filter's sequence number Use the no deny {ipv6-protocol-number | icmp | ipv6 | tcp | udp} command
Parameters
log threshold-in msgs count
interval minutes
monitor
no-drop
(OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated. with the seq, permit, or deny commands. The threshold range is from 1 to 100.
(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The time interval range is from 1 to 10 minutes.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
Enter the keywords no-drop to match only the forwarded packets.
Defaults
By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled.
Command Modes ACCESS-LIST
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.8(0.0)
9.7(0.0)
9.5(0.1)
9.4(0.0)
9.3(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Added the no-drop parameter. Introduced on the S6000�ON. Introduced on the Z9500. Added support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms. Added support for logging of ACLs on the S4810, S4820T, and Z9000 platforms.
Usage Information
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
Access Control Lists (ACL) 297
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces. You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
298 Access Control Lists (ACL)
8
Access Control List (ACL) VLAN Groups and Content Addressable Memory (CAM)
This chapter describes the access control list (ACL) virtual local area network (VLAN) group and content addressable memory (CAM) enhancements.
Topics:
� member vlan � ip access-group � show acl-vlan-group � show cam-acl-vlan � cam-acl-vlan � show cam-usage � show running config acl-vlan-group � acl-vlan-group � show acl-vlan-group detail � description (ACL VLAN Group)
member vlan
Add VLAN members to an ACL VLAN group.
Syntax Parameters
member vlan {VLAN-range}
VLAN-range
Enter the member VLANs using comma-separated VLAN IDs, a range of VLAN IDs, a single VLAN ID, or a combination. For example:
Comma-separated: 3, 4, 6
Range: 5-10
Combination: 3, 4, 5-10, 8
Default
None
Command Modes CONFIGURATION (conf-acl-vl-grp)
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.3.(0.0)
Introduced on the S4810, S4820T, and Z9000 platforms.
Usage Information
At a maximum, there can be only 32 VLAN members in all ACL VLAN groups. A VLAN can belong to only one group at any given time.
You can create an ACL VLAN group and attach the ACL with the VLAN members. The optimization is applicable only when you create an ACL VLAN group. If you apply an ACL separately on the VLAN interface, each ACL has a mapping with the VLAN and increased CAM space utilization occurs.
Attaching an ACL individually to VLAN interfaces is similar to the behavior of ACL-VLAN mapping storage in CAM prior to the implementation of the ACL VLAN group functionality.
Access Control List (ACL) VLAN Groups and Content Addressable Memory (CAM) 299
ip access-group
Apply an egress IP ACL to the ACL VLAN group.
Syntax Parameters
ip access-group {group name} out implicit-permit
group-name
out implicit-permit
Enter the name of the ACL VLAN group where you want the egress IP ACLs applied, up to 140 characters.
Enter the keyword out to apply the ACL to outgoing traffic.
Enter the keyword implicit-permit to change the default action of the ACL from implicit-deny to implicit-permit (that is, if the traffic does not match the filters in the ACL, the traffic is permitted instead of dropped).
Default
None
Command Modes CONFIGURATION (conf-acl-vl-grp)
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.3.(0.0)
Introduced on the S4810, S4820T, and Z9000 platforms.
Usage Information
You can apply only an egress IP ACL on an ACL VLAN group.
show acl-vlan-group
Display all the ACL VLAN groups or display a specific ACL VLAN group, identified by name.
Syntax Parameters
show acl-vlan-group {group-name | detail}
group-name detail
(Optional) Display only the ACL VLAN group that is specified, up to 140 characters.
Display information in a line-by-line format to display the names in their entirety. Without the detail option, the output displays in a table style and information may be truncated.
Default
No default behavior or values
Command Modes EXEC
EXEC Privilege
Command History
Version
9.8(0.0P5) 9.8(0.0P2) 9.3.(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4810, S4820T, Z9000 and MXL platforms
Usage Information
When an ACL-VLAN-Group name or the Access List Group Name contains more than 30 characters, the name is truncated in the show acl-vlan-group command output.
Examples
The following sample illustrates the output of the show acl-vlan-group command.
300 Access Control List (ACL) VLAN Groups and Content Addressable Memory (CAM)
NOTE: Some group names and some access list names are truncated.
Dell#show running-config acl-vlan-group
!
acl-vlan-group Test
member vlan 1-100
ip access-group test in
Dell#show acl-vlan-group
Group Name
Egress IP Acl
Ingress IP Acl
Vlan Members
Test
-
test
1-100
Ingress V6 Acl -
The following sample output is displayed when using the show acl-vlan-group group-name option.
NOTE: The access list name is truncated.
Dell#show acl-vlan-group TestGroupSeventeenTwenty
Group Name
Egress IP Acl
Ingress IP Acl
Acl
Vlan Members Test
-
test
-
1-100
Ingress IPV6
The following sample output shows the line-by-line style display when using the show acl-vlangroup detail option.
NOTE: No group or access list names are truncated
Dell#show acl-vlan-group detail Group Name :
Test Egress IP Acl :
Ingress IP Acl :
test Ingress IPV6 Acl :
Vlan Members :
1-100
show cam-acl-vlan
Display the number of flow processor (FP) blocks that is allocated for the different VLAN services.
Syntax
show cam-acl-vlan
Command Modes EXEC Privilege
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.3.(0.0)
Introduced on the S4810, S4820T, Z9000 and MXL platforms
Usage Information
After CAM configuration for ACL VLAN groups is performed, you must reboot the system to enable the settings to be stored in nonvolatile storage. During the initialization of CAM, the chassis manager reads the NVRAM and allocates the dynamic VCAP regions.
The following table describes the output fields of this show command:
Access Control List (ACL) VLAN Groups and Content Addressable Memory (CAM) 301
Example
Field
Description
Chassis Vlan Cam Details about the CAM blocks allocated for ACLs for various VLAN operations at a
ACL
system-wide, global level.
Stack Unit <number>
Details about the CAM blocks allocated for ACLs for various VLAN operations for a particular stack unit.
Current
Information about the number of FP blocks that are currently in use or allocated.
Settings(in block
sizes)
VlanOpenFlow Number of FP blocks for VLAN open flow operations.
VlanIscsi
Number of FP blocks for VLAN internet small computer system interface (iSCSI) counters.
VlanHp
Number of FP blocks for VLAN high performance processes.
VlanFcoe
Number of FP blocks for VLAN Fiber Channel over Ethernet (FCoE) operations.
VlanAclOpt
Number of FP blocks for ACL VLAN optimzation feature.
Dell#show cam-acl-vlan
-- Chassis Vlan Cam ACL --
Current Settings(in block sizes)
VlanOpenFlow :
0
VlanIscsi
:
0
VlanAclOpt :
2
VlanHp
:
1
VlanFcoe
:
1
cam-acl-vlan
Allocate the number of flow processor (FP) blocks or entries for VLAN services and processes.
Syntax Parameters
cam-acl-vlan { default | vlanopenflow <0-2> | vlaniscsi <0-2> | vlanaclopt <0-2>
default
Reset the number of FP blocks to default. By default, 0 groups are allocated for the ACL in VCAP. ACL VLAN groups or CAM optimization is not enabled by default, and you need to allocate the slices for CAM optimization.
vlanopenflow <0-2>
Allocate the number of FP blocks for VLAN open flow operations.
vlaniscsi <0-2> Allocate the number of FP blocks for VLAN iSCSI counters.
vlanaclopt <0-2> Allocate the number of FP blocks for the ACL VLAN optimization feature.
Default
If you use the default keyword with the cam-acl-vlan command, the FP blocks allocated for VLAN processes are restored to their default values. No FP blocks or dynamic VLAN Content Aware Processor (VCAP) groups are allocated for VLAN operations by default.
Command Modes CONFIGURATION
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.5(0.1)
Introduced on the Z9500.
9.3(0.0)
Introduced on the S4810 and Z9000 platforms.
302 Access Control List (ACL) VLAN Groups and Content Addressable Memory (CAM)
Usage Information
The VLAN ContentAware Processor (VCAP) application is a pre-ingress CAP that modifies the VLAN settings before packets are forwarded. To support the ACL CAM optimization functionality, the CAM carving feature is enhanced. A total of four VACP groups are present, of which two are for fixed groups and the other two are for dynamic groups. Out of the total of two dynamic groups, you can allocate zero, one, or two flow processor (FP) blocks to iSCSI Counters, OpenFlow and ACL Optimization. You can configure only two of these features at a point in time.
show cam-usage
View the amount of CAM space available, used, and remaining in each partition (including IPv4Flow and Layer 2 ACL subpartitions).
Syntax Parameters
show cam-usage [acl | router | switch]
acl
(OPTIONAL) Enter the keyword acl to display Layer 2 and Layer 3 ACL CAM
usage.
router
(OPTIONAL) Enter the keyword router to display Layer 3 CAM usage.
switch
(OPTIONAL) Enter the keyword switch to display Layer 2 CAM usage.
Command Modes EXEC EXEC Privilege
Command History
Version
9.8(0.0P5) 9.8(0.0P2) 9.3.(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4810, S4820T, Z9000 and MXL platforms
Usage Information
The following regions must be provided in the show cam-usage output: L3AclCam L2AclCam V6AclCam
The following table describes the output fields of this show command:
Field
Description
LineCard Portpipe
Number of the line card that contains information on ACL VLAN groups The hardware path that packets follow through a system for ACL optimization
CAM-Region
Type of area in the CAM block that is used for ACL VLAN groups
Total CAM space Total amount of space in the CAM block
Used CAM
Amount of CAM space that is currently in use
Available CAM Amount of CAM space that is free and remaining to be allocated for ACLs
Example 1: Output of the show cam-usage Command
Dell#show cam-usage
Linecard|Portpipe|CAMPartition |TotalCAM|UsedCAM|AvailableCAM
========|========|==============|========|=======|===========
1 | 0
|IN-L2 ACL
|
1008|
320|
688
|
|IN-L2 FIB
| 32768| 1132| 31636
|
|IN-L3 ACL
| 12288|
2| 12286
|
|IN-L3 FIB
| 262141|
14| 262127
|
|IN-L3-SysFlow |
2878|
45|
2833
|
|IN-L3-TrcList |
1024|
0|
1024
Access Control List (ACL) VLAN Groups and Content Addressable Memory (CAM) 303
| | | | | | | | | | 1 | 1 | | | | --More--
|IN-L3-McastFib|
|IN-L3-Qos
|
|IN-L3-PBR
|
|IN-V6 ACL
|
|IN-V6 FIB
|
|IN-V6-SysFlow |
|IN-V6-McastFib|
|OUT-L2 ACL
|
|OUT-L3 ACL
|
|OUT-V6 ACL
|
|IN-L2 ACL
|
|IN-L2 FIB
|
|IN-L3 ACL
|
|IN-L3 FIB
|
|IN-L3-SysFlow |
9215| 8192| 1024|
0| 0| 0| 0| 1024| 1024| 0| 320| 32768| 12288| 262141| 2878|
0| 0| 0| 0| 0| 0| 0| 0| 0| 0| 0| 1136| 2| 14| 44|
9215 8192 1024
0 0 0 0 1024 1024 0 320 31632 12286 262127 2834
Example 2: Output of the show cam-usage acl Command
Dell#show cam-usage acl
Stackunit|Portpipe|CAMPartition|TotalCAM|UsedCAM|AvailableCAM
========|====== ==|============|========|=======|============
0 | 0
|IN-L3 ACL | 1024 | 4 |
1020
|
|IN-V6 ACL | 512 | 0 |
512
|
|IN-L2 ACL | 512 | 6 |
506
|
|OUT-L3 ACL | 123 | 5 |
118
|
|OUT-V6 ACL | 123 | 0 |
123
|
|OUT-L2 ACL | 206 | 7 |
199
Codes: * - cam usage is above 90%.
Example 3: Output of the show cam-usage router Command
Dell#show cam-usage router
Linecard|Portpipe|CAM Partition |TotalCAM |UsedCAM|AvailableCAM
========|========|==============|=========|=======|===========
11 | 0
|IN-L3 ACL
| 8192 |
3|
8189
|
|IN-L3 FIB
|196607 |
1|
196606
|
|IN-L3-SysFlow | 2878 |
0|
2878
|
|IN-L3-TrcList | 1024 |
0|
1024
|
|IN-L3-McastFib| 9215 |
0|
9215
|
|IN-L3-Qos
| 8192 |
0|
8192
|
|IN-L3-PBR
| 1024 |
0|
1024
|
|OUT-L3 ACL
| 16384 |
0|
16384
11 | 1
|IN-L3 ACL
| 8192 |
3|
8189
|
|IN-L3 FIB
|196607 |
1|
196606
|
|IN-L3-SysFlow | 2878 |
0|
2878
|
|IN-L3-TrcList | 1024 |
0|
1024
|
|IN-L3-McastFib| 9215 |
0|
9215
|
|IN-L3-Qos
| 8192 |
0|
8192
|
|IN-L3-PBR
| 1024 |
0|
1024
|
|OUT-L3 ACL
| 16384 |
0|
16384
Example 4: Output of the show cam-usage switch Command
Dell#show cam-usage switch
Linecard|Portpipe|CAMPartition|TotalCAM|UsedCAM|AvailableCAM
========|========|============|========|=======|===========
11 | 0
|IN-L2 ACL | 7152 |
0|
7152
|
|IN-L2 FIB | 32768 | 1081|
31687
|
|OUT-L2 ACL |
0 |
0|
0
11 | 1
|IN-L2 ACL | 7152 |
0|
7152
|
|IN-L2 FIB | 32768 | 1081|
31687
|
|OUT-L2 ACL |
0 |
0|
0
304 Access Control List (ACL) VLAN Groups and Content Addressable Memory (CAM)
show running config acl-vlan-group
Display the running configuration of all or a given ACL VLAN group.
Syntax Parameters
show running config acl-vlan-group group name
group-name
Display only the ACL VLAN group that is specified. The maximum group name is 140 characters.
Default
None
Command Modes EXEC
EXEC Privilege
Command History
Version
9.8(0.0P5) 9.8(0.0P2) 9.3.(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4810, S4820T, Z9000 and MXL platforms
Examples
The following sample output shows the line-by-line style display when using the show runningconfig acl-vlan-group option. Note that no group or access list names are truncated
Dell#show running-config acl-vlan-group ! acl-vlan-group Test
member vlan 1-100 ip access-group test in
Dell#show running-config acl-vlan-group ! acl-vlan-group Test
member vlan 1-100 ip access-group test in
Test
acl-vlan-group
Create an ACL VLAN group.
Syntax
acl-vlan-group {group name} To remove an ACL VLAN group, use the no acl-vlan-group {group name} command.
Parameters
group-name
Specify the name of the ACL VLAN group. The name can contain a maximum 140 characters.
Default
No default behavior or values
Command Modes CONFIGURATION
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.3.(0.0)
Introduced on the S4810, S4820T and Z9000 platforms
Usage Information
You can have up to eight different ACL VLAN groups at any given time. When you configure an ACL VLAN group, you enter the ACL VLAN Group Configuration mode.
Access Control List (ACL) VLAN Groups and Content Addressable Memory (CAM) 305
To avoid the problem of excessive consumption of CAM area, you can configure ACL VLAN groups that combines all the VLANs that are applied with the same ACL in a single group. A unique identifier for each of ACL attached to the VLAN is used as a handle or locator in the CAM area instead of the VLAN id. This method of processing signficiantly reduces the number of entries in the CAM area and saves memory space in CAM.
You can create an ACL VLAN group and attach the ACL with the VLAN members. Optimization is applicable only when you create an ACL VLAN group. If you apply an ACL separately on the VLAN interface, each ACL maps with the VLAN and increased CAM space utilization occurs.
Attaching an ACL individually to VLAN interfaces is similar to the behavior of ACL-VLAN mapping storage in CAM prior to the implementation of the ACL VLAN group functionality.
show acl-vlan-group detail
Display all the ACL VLAN Groups or display a specific ACL VLAN Group by name. To display the names in their entirety, the output displays in a line-by-line format.
Syntax Parameters
show acl-vlan-group detail
detail
Display information in a line-by-line format to display the names in their entirety.
Without the detail option, the output is displayed in a table style and information may be truncated.
Default
No default behavior or values
Command Modes EXEC
EXEC Privilege
Command History
Version
9.8(0.0P5) 9.8(0.0P2) 9.3.(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4810, S4820T, Z9000 and MXL platforms
Usage Information
The output for this command displays in a line-by-line format. This allows the ACL-VLAN-Group names (or the Access List Group Names) to display in their entirety.
Examples
The following sample output shows the line-by-line style display when using the show acl-vlangroup detail option. Note that no group or access list names are truncated
Dell#show acl-vlan-group detail Group Name :
Test Egress IP Acl :
Ingress IP Acl :
test Ingress IPV6 Acl :
Vlan Members :
1-100
306 Access Control List (ACL) VLAN Groups and Content Addressable Memory (CAM)
description (ACL VLAN Group)
Add a description to the ACL VLAN group.
Syntax Parameters
description description
description
Enter a description to identify the ACL VLAN group (80 characters maximum).
Default
No default behavior or values
Command Modes CONFIGURATION (conf-acl-vl-grp)
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.3.(0.0)
Introduced on the S4810, S4820T, and Z9000 platforms
Usage Information
Enter a description for each ACL VLAN group that you create for effective and streamlined administrative and logging purposes.
Access Control List (ACL) VLAN Groups and Content Addressable Memory (CAM) 307
9
Bidirectional Forwarding Detection (BFD)
Bidirectional forwarding detection (BFD) is a detection protocol that provides fast forwarding path failure detection.
The Dell Networking operating software implementation is based on the standards specified in the IETF Draft draft-ietf-bfdbase-03 and supports BFD on all Layer 3 physical interfaces including VLAN interfaces and port-channels
Topics:
� bfd all-neighbors � bfd disable � bfd enable (Configuration) � bfd enable (Interface) � bfd interval � bfd neighbor � bfd protocol-liveness � ip route bfd � ipv6 ospf bfd all-neighbors � isis bfd all-neighbors � neighbor bfd � neighbor bfd disable � show bfd neighbors � vrrp bfd neighbor
bfd all-neighbors
Enable BFD sessions with all neighbors discovered by Layer 3 protocols virtual router redundancy protocol (VRRP), intermediate system to intermediate system (IS-IS), open shortest path first (OSPF), OSPFv3, or border gateway protocol (BGP) on router interfaces, and (optionally) reconfigure the default timer values.
Syntax Parameters
bfd all-neighbors [interval interval min_rx min_rx multiplier value role {active | passive}]
interval milliseconds
min_rx milliseconds
multiplier value
role [active | passive]
(OPTIONAL) Enter the keyword interval to specify non-default BFD session parameters beginning with the transmission interval. The range is from 50 to 1000. The default is 200.
Enter the keyword min_rx to specify the minimum rate at which the local system would like to receive control packets from the remote system. The range is from 50 to 1000. The default is 200.
Enter the keyword multiplier to specify the number of packets that must be missed in order to declare a session down. The range is from 3 to 50. The default is 3.
Enter the role that the local system assumes:
Active -- The active system initiates the BFD session. Both systems can be active for the same session.
Passive -- The passive system does not initiate a session. It only responds to a request for session initialization from the active system.
The default is active.
Defaults
Refer to Parameters.
Command Modes ROUTER OSPF
308 Bidirectional Forwarding Detection (BFD)
Command History
Usage Information
Related Commands
ROUTER OSPFv3 ROUTER BGP ROUTER ISIS
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 9.2(1.0) 9.2.(0.0) 9.0.0.0 8.3.19.0 8.3.8.0 8.4.1.3 8.2.1.0 7.6.1.0 7.5.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the S6000. Introduced on the Z9500. Introduced BFD for VRRP and OSPFv3 on Z9000, S4810, and S4820T. Introduced BFD for BGP on the Z9000. Introduced on the S4820T. Introduced BFD for BGP on the S4810. Introduced BFD for BGP on the E-Series ExaScale. Introduced BFD for OSPF and ISIS on the E-Series ExaScale. Introduced BFD for OSPF on the C-Series. Introduced BFD for ISIS on the E-Series. Introduced BFD for OSPF on the E-Series.
All neighbors inherit the timer values configured with the bfd neighbor command except in the following cases:
Timer values configured with the isis bfd all-neighbors or ip ospf bfd allneighbors commands in INTERFACE mode override timer values configured with the bfd neighbor command. Likewise, using the no bfd neighbor command does not disable BFD on an interface if you explicitly enable BFD using the isis bfd all-neighbors command.
Neighbors that have been explicitly enabled or disabled for a BFD session with the bfd neighbor or neighbor bfd disable commands in ROUTER BGP mode do not inherit the global BFD enable/ disable values configured with the bfd neighbor command or configured for the peer group to which a neighbor belongs. The neighbors inherit only the global timer values (configured with the bfd neighbor command).
You can only enable BFD for VRRP in INTERFACE command mode (vrrp bfd all-neighbors).
neighbor bfd disable -- Explicitly disables a BFD session with a BGP neighbor or a BGP peer group.
bfd disable
Disable BFD on an interface.
Syntax
bfd disable Re-enable BFD using the no bfd disable command.
Defaults
BFD is disabled by default.
Command Modes VRRP
Bidirectional Forwarding Detection (BFD) 309
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.2(0.2) 9.0.0.0 8.3.19.0 8.2.1.0 7.6.1.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on S4810. Introduced on the Z9000. Introduced on the S4820T. Introduced on the E-Series ExaScale. Introduced on the C-Series. Introduced on the E-Series.
bfd enable (Configuration)
Enable BFD on all interfaces.
Syntax
bfd enable Disable BFD using the no bfd enable command.
Defaults
BFD is disabled by default.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.0.0.0 8.3.19.0 8.3.10.0 8.2.1.0 7.6.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the C-Series. Introduced on the E-Series.
bfd enable (Interface)
Enable BFD on an interface.
Syntax Defaults
bfd enable BFD is enabled on all interfaces when you enable BFD from CONFIGURATION mode.
310 Bidirectional Forwarding Detection (BFD)
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.0.0.0 8.3.19.0 8.3.10.0 8.2.1.0 7.6.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the C-Series. Introduced on the E-Series.
bfd interval
Specify non-default BFD session parameters beginning with the transmission interval.
Syntax Parameters
bfd interval interval min_rx min_rx multiplier value role {active | passive}
interval milliseconds
min_rx milliseconds
multiplier value
role [active | passive]
Enter the keywords interval to specify non-default BFD session parameters beginning with the transmission interval. The range is from 50 to 1000. The default is 200.
Enter the keywords min_rx to specify the minimum rate at which the local system would like to receive control packets from the remote system. The range is from 50 to 1000. The default is 200.
Enter the keywords multiplier to specify the number of packets that must be missed in order to declare a session down. The range is from 3 to 50. The default is 3.
Enter the role that the local system assumes:
Active -- The active system initiates the BFD session. Both systems can be active for the same session.
Passive -- The passive system does not initiate a session. It only responds to a request for session initialization from the active system.
The default is Active.
Defaults
Refer to Parameters.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2)
Introduced on the S4048-ON. Introduced on the S3048-ON.
Bidirectional Forwarding Detection (BFD) 311
Example
Version
9.2(1.0) 9.0.0.0 8.3.19.0 8.3.10.0 8.2.1.0 7.6.1.0 7.4.1.0
Description
Introduced on the Z9500. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the C-Series. Introduced on the E-Series.
Dell(conf-if-te-1/3)#bfd interval 250 min_rx 300 multiplier 4 role passive Dell(conf-if-te-1/3)#
bfd neighbor
Establish a BFD session with a neighbor.
Syntax
bfd neighbor ip-address To remove the BFD session with the neighbor, use the no bfd neighbor ip-address command.
Parameters
ip-address
Enter the IP address of the neighbor in dotted decimal format (A.B.C.D).
Defaults
none
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.0.0.0 8.3.19.0 8.3.10.0 8.2.1.0 7.6.1.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the C-Series. Added support for VLAN and port-channel interfaces on the E-Series.
Related Commands
show bfd neighbors -- displays the BFD neighbor information on all interfaces or a specified interface.
bfd protocol-liveness
Enable the BFD protocol liveness feature.
Syntax Defaults
bfd protocol-liveness Disabled
312 Bidirectional Forwarding Detection (BFD)
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.0.0.0 8.3.19.0 8.3.10.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the E-Series.
Usage Information
Protocol Liveness is a feature that notifies the BFD Manager when a client protocol (for example, OSPF and ISIS) is disabled. When a client is disabled, all BFD sessions for that protocol are torn down. Neighbors on the remote system receive an Admin Down control packet and are placed in the Down state. Peer routers might take corrective action by choosing alternative paths for the routes that originally pointed to this router.
ip route bfd
Enable BFD for all neighbors configured through static routes.
Syntax
ip route bfd [interval interval min_rx min_rx multiplier value role {active | passive}]
To disable BFD for all neighbors configured through static routes, use the no ip route bfd [interval interval min_rx min_rx multiplier value role {active | passive}] command.
Parameters
interval milliseconds
min_rx milliseconds
multiplier value
role [active | passive]
(OPTIONAL) Enter the keywords interval to specify non-default BFD session parameters beginning with the transmission interval. The range is from 50 to 1000. The default is 200.
Enter the keywords min_rx to specify the minimum rate at which the local system receives control packets from the remote system. The range is from 50 to 1000. The default is 200.
Enter the keywords multiplier to specify the number of packets that must be missed in order to declare a session down. The range is from 3 to 50. The default is 3.
Enter the role that the local system assumes:
Active -- The active system initiates the BFD session. Both systems can be active for the same session.
Passive -- The passive system does not initiate a session. It only responds to a request for session initialization from the active system.
The default is Active.
Defaults
See Parameters
Command Modes CONFIGURATION
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
Bidirectional Forwarding Detection (BFD) 313
Version
9.8(0.0P2) 9.7(0.0) 9.3.(0.0) 9.2(1.0) 9.2.(0.0) 8.2.1.0 7.6.1.0 7.4.1.0
Description
Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on S6000. Introduced on the Z9500. Introduced on Z9000, S4810, and S4820T. Introduced on the E-Series ExaScale. Introduced on the C-Series. Introduced on the E-Series.
ipv6 ospf bfd all-neighbors
Establish BFD sessions with all OSPFv3 neighbors on a single interface or use non-default BFD session parameters.
Syntax
ipv6 ospf bfd all-neighbors [disable | [interval interval min_rx min_rx multiplier value role {active | passive}]]
To disable all BFD sessions on an OSPFv3 interface implicitly, use the no ipv6 ospf bfd allneighbors disable command in interface mode..
Parameters
disable interval milliseconds
min_rx milliseconds
multiplier value
role [active | passive]
(OPTIONAL) Enter the keyword disable to disable BFD on this interface.
(OPTIONAL) Enter the keyword interval to specify non-default BFD session parameters beginning with the transmission interval. The range is from 50 to 1000. The default is 200.
Enter the keywords min_rx to specify the minimum rate at which the local system receives control packets from the remote system. The range is from 50 to 1000. The default is 200.
Enter the keyword multiplier to specify the number of packets that must be missed in order to declare a session down. The range is from 3 to 50. The default is 3.
Enter the role that the local system assumes:
Active -- The active system initiates the BFD session. Both systems can be active for the same session.
Passive -- The passive system does not initiate a session. It only responds to a request for session initialization from the active system.
The default is Active.
Defaults
See Parameters
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2.0.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9000, S4820T, and S4810.
314 Bidirectional Forwarding Detection (BFD)
Usage Information
This command provides the flexibility to fine-tune the timer values based on individual interface needs when you configure ipv6 ospf BFD in CONFIGURATION mode. Any timer values specified with this command overrides timers set using the bfd all-neighbors command. Using the no form of this command does not disable BFD if you configure BFD in CONFIGURATION mode.
To disable BFD on a specific interface while you configure BFD in CONFIGURATION mode, use the keyword disable.
isis bfd all-neighbors
Enable BFD on all IS-IS neighbors discovered on an interface.
Syntax
isis bfd all-neighbors [disable | [interval interval min_rx min_rx multiplier value role {active | passive}]]
To remove all BFD sessions with IS-IS neighbors discovered on this interface, use the no isis bfd all-neighbors [disable | [interval interval min_rx min_rx multiplier value role {active | passive}]] command.
Parameters
disable interval milliseconds
min_rx milliseconds
multiplier value
role [active | passive]
(OPTIONAL) Enter the keyword disable to disable BFD on this interface.
(OPTIONAL) Enter the keywords interval to specify non-default BFD session parameters beginning with the transmission interval. The range is from 50 to 1000. The default is 200.
Enter the keywords min_rx to specify the minimum rate at which the local system would like to receive control packets from the remote system. The range is from 50 to 1000. The default is 200.
Enter the keywords multiplier to specify the number of packets that must be missed in order to declare a session down. The range is from 3 to 50. The default is 3.
Enter the role that the local system assumes:
Active -- The active system initiates the BFD session. Both systems can be active for the same session.
Passive -- The passive system does not initiate a session. It only responds to a request for session initialization from the active system.
The default is Active.
Defaults
See Parameters
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.0.0.0 8.3.19.0 8.3.12.0 8.2.1.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on Z9000. Introduced on the S4820T. Introduced on S4810. Introduced on the E-Series ExaScale. Introduced on the E-Series.
Bidirectional Forwarding Detection (BFD) 315
Usage Information
This command provides the flexibility to fine-tune the timer values based on individual interface needs when ISIS BFD is configured in CONFIGURATION mode. Any timer values specified with this command overrides timers set using the bfd all-neighbors command. Using the no form of this command does not disable BFD if BFD is configured in CONFIGURATION mode.
To disable BFD on a specific interface while BFD is configured in CONFIGURATION mode, use the keyword disable.
neighbor bfd
Explicitly enable a BFD session with a BGP neighbor or a BGP peer group.
Syntax Parameters
neighbor {ip-address | peer-group-name} bfd
ip-address
Enter the IP address of the BGP neighbor that you want to explicitly enable for BFD sessions in dotted decimal format (A.B.C.D).
peer-group-name Enter the name of the peer group that you want to explicitly enable for BFD sessions.
Defaults
none
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.8.0 8.4.1.3
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the E-Series ExaScale.
Usage Information
Related Commands
When you enable a BFD session with a specified BGP neighbor or peer group using the bfd neighbor command, the default BFD session parameters are used (interval: 200 milliseconds, min_rx: 200 milliseconds, multiplier: 3 packets, and role: active) if you have not specified parameters with the bfd neighbor command.
When you explicitly enable a BGP neighbor for a BFD session with the bfd neighbor command:
The neighbor does not inherit the global BFD enable values configured with the bfd neighbor command or configured for the peer group to which the neighbor belongs.
The neighbor only inherits the global timer values configured with the bfd neighbor command: interval, min_rx, and multiplier.
neighbor bfd disable -- Explicitly disables a BFD session with a BGP neighbor or a BGP peer group.
316 Bidirectional Forwarding Detection (BFD)
neighbor bfd disable
Explicitly disable a BFD session with a BGP neighbor or a BGP peer group.
Syntax Parameters
neighbor {ip-address | peer-group-name} bfd disable
ip-address
Enter the IP address of the BGP neighbor that you want to explicitly disable for BFD sessions in dotted decimal format (A.B.C.D).
peer-group-name Enter the name of the peer group that you want to explicitly disable for BFD sessions.
Defaults
none
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.8.0 8.4.1.3
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the E-Series ExaScale.
Usage Information
Related Commands
When you explicitly disable a BGP neighbor for a BFD session with the neighbor bfd disable command:
The neighbor does not inherit the global BFD disable values configured with the bfd neighbor command or configured for the peer group to which the neighbor belongs.
The neighbor only inherits the global timer values configured with the bfd neighbor command: interval, min_rx, and multiplier.
When you remove the Disabled state of a BFD for a BGP session with a specified neighbor by entering the no neighbor bfd disable command, the BGP link with the neighbor returns to normal operation and uses the BFD session parameters globally configured with the bfd neighbor command or configured for the peer group to which the neighbor belongs.
neighbor bfd -- Explicitly enables a BFD session with a BGP neighbor or a BGP peer group.
show bfd neighbors
Display BFD neighbor information on all interfaces or a specified interface.
Syntax Parameters
show bfd neighbors interface [detail]
interface
Enter one of the following keywords and slot/port or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
Bidirectional Forwarding Detection (BFD) 317
detail
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
(OPTIONAL) Enter the keyword detail to view detailed information about BFD neighbors.
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.0.0.0 8.3.19.0 8.3.8.0 8.4.1.3 8.2.1.0 7.6.1.0 7.5.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the Z9000. Introduced on the S4820T. Added support for BFD for BGP on the S4810. Added support for BFD for BGP on the E-Series ExaScale. Introduced on the E-Series ExaScale. Introduced on the C-Series. Added support for BFD for VLAN and port-channel interfaces on the E-Series. Introduced BFD on physical ports on the E-Series.
Example
Dell#show bfd neighbors
* Ad Dn B C I O O3 R M V VT
- Active session role - Admin Down - BGP - CLI - ISIS - OSPF - OSPFv3 - Static Route (RTM) - MPLS - VRRP - Vxlan Tunnel
LocalAddr RemoteAddr
Interface State Rx-int Tx-int Mult Clients
*1.0.1.1 1.0.1.2
Te 1/49/1 Up
200
200
3
B
*3.3.3.3 192.168.122.135 Te 1/38 Up
1000 1000 3
VT
*3.3.3.3 192.168.122.136 Te 1/42 Up
1000 1000 3
VT
*3.3.3.3 192.168.122.137 Te 1/43 Up
1000 1000 3
VT
*3.3.3.3 192.168.122.138 Te 1/38 Up
1000 1000 3
VT
*3.3.3.3 192.168.122.139 Te 1/42 Up
1000 1000 3
VT
Example (Detail)
Dell#show bfd neighbors detail Session Discriminator: 1 Neighbor Discriminator: 1
318 Bidirectional Forwarding Detection (BFD)
Related Commands
Local Addr: 10.1.3.2 Local MAC Addr: 00:01:e8:02:15:0e Remote Addr: 10.1.3.1 Remote MAC Addr: 00:01:e8:27:2b:f1 Int: TenGigabitEthernet 1/3 State: Up Configured parameters:
TX: 100ms, RX: 100ms, Multiplier: 3 Neighbor parameters:
TX: 250ms, RX: 300ms, Multiplier: 4 Actual parameters:
TX: 300ms, RX: 250ms, Multiplier: 3 Role: Active Delete session on Down: False Client Registered: CLI Uptime: 00:02:04 Statistics:
Number of packets received from neighbor: 376 Number of packets sent to neighbor: 314 Number of state changes: 2 Number of messages from IFA about port state change: 0 Number of messages communicated b/w Manager and Agent: 6 Dell#
bfd all-neighbors -- establishes BFD sessions with all neighbors discovered by the IS-IS protocol or OSPF protocol out of all interfaces.
vrrp bfd neighbor
Establish a BFD for VRRP session with a neighbor.
Syntax
vrrp bfd neighbor ip-address
To remove the BFD session with the neighbor, use the no vrrp bfd neighbor ip-address command.
Parameters
ip-address
Enter the IP address of the neighbor in dotted decimal format (A.B.C.D).
Defaults
none
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.0.0.0 8.3.19.0 8.3.10.0 8.2.1.0 7.6.1.0 7.5.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the C-Series. Added support for VLAN and port-channel interfaces on the E-Series. Introduced on the E-Series.
Related Commands
show bfd neighbors -- displays the BFD neighbor information on all interfaces or a specified interface.
Bidirectional Forwarding Detection (BFD) 319
10
Border Gateway Protocol
BGP is an external gateway protocol that transmits interdomain routing information within and between autonomous systems (AS). BGP version 4 (BGPv4) supports classless inter-domain routing (CIDR) and the aggregation of routes and AS paths. Basically, two routers (called neighbors or peers) exchange information including full routing tables and periodically sent messages to update those routing tables.
NOTE: For more information about configuring the border gateway protocol (BGP), refer to the BGP chapter in the Dell Networking OS Configuration Guide.
Topics:
� BGP IPv4 Commands � MBGP Commands � BGP Extended Communities (RFC 4360) � IPv6 BGP Commands � IPv6 MBGP Commands
BGP IPv4 Commands
Border Gateway Protocol (BGP) is an external gateway protocol that transmits interdomain routing information within and between Autonomous Systems (AS). BGP supports classless interdomain routing (CIDR) and the aggregation of routes and AS paths. Basically, two routers (called neighbors or peers) exchange information including full routing tables and periodically send messages to update those routing tables.
NOTE: Dell Networking OS supports 2-byte (16-bit) and 4-byte (32-bit) format for autonomous system numbers (ASNs), where the 2-byte format is 1 to 65535 and the 4-byte format is 1 to 4294967295.
NOTE: Dell Networking OS supports dotted format as well as the traditional plain format for AS numbers. The dot format is displayed when using the show ip bgp commands. To determine the comparable dot format for an ASN from a traditional format, use ASN/65536. ASN%65536. For more information about using the 2� or 4-byte format, refer to the Dell Networking OS Configuration Guide.
address-family
Enable the IPv4 multicast or the IPv6 address family.
Syntax Parameters
address-family [ipv4 {multicast | vrf vrf-name} | ipv6 unicast [vrf vrfname]]
ipv4 multicast
Enter the keyword ipv4 followed by the keyword multicast to enable BGPv4 multicast mode.
ipv4 vrf vrf-name Enter the keyword ipv4 followed by the keyword vrf and then the name of the VRF to enable VRF mode. NOTE: Use this attribute to start a BGP instance corresponding to either a
specific address family in a default VRF or an IPv4 address family in a non-
default VRF.
ipv6 unicast
Enter the keyword ipv6 followed by the keyword unicast to enable BGPv6 mode.
320 Border Gateway Protocol
vrf vrf-name
(Optional) Enter the keyword vrf followed by the name of the VRF to install the IPv6 route in that VRF.
NOTE: It will not be possible to enable VRF mode for IPv6 unicast without
configuring the corresponding IPv4 unicast mode for the same VRF. While
deletion, whenever the IPv4 VRF mode is deleted for the VRF, it will
automatically delete the IPv6 VRF configurations as well.
Defaults
Not configured.
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 6.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Added support for IPv6 VRF. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced
aggregate-address
To minimize the number of entries in the routing table, summarize a range of prefixes.
Syntax Parameters
aggregate-address ip-address mask [advertise-map map-name] [as-set] [attribute-map map-name] [summary-only] [suppress-map map-name]
ip-address mask
advertise-map map-name as-set
Enter the IP address and mask of the route to be the aggregate address. Enter the IP address in dotted decimal format (A.B.C.D) and mask in /prefix format (/x).
(OPTIONAL) Enter the keywords advertise-map then the name of a configured route map to set filters for advertising an aggregate route.
(OPTIONAL) Enter the keyword as-set to generate path attribute information and include it in the aggregate.
AS_SET includes AS_PATH and community information from the routes included in the aggregated route.
attribute-map map-name
summary-only
suppress-map map-name
(OPTIONAL) Enter the keywords attribute-map then the name of a configured route map to modify attributes of the aggregate, excluding AS_PATH and NEXT_HOP attributes.
(OPTIONAL) Enter the keyword summary-only to advertise only the aggregate address. Specific routes are not advertised.
(OPTIONAL) Enter the keywords suppress-map then the name of a configured route map to identify which more-specific routes in the aggregate are suppressed.
Border Gateway Protocol 321
Defaults
Not configured.
Command Modes ROUTER BGP ADDRESS FAMILY ROUTER BGP ADDRESS FAMILY IPv6
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
At least one of the routes included in the aggregate address must be in the BGP routing table for the configured aggregate to become active.
If routes within the aggregate are constantly changing, do not add the as-set parameter to the aggregate as the aggregate flaps to keep track of the changes in the AS_PATH.
In route maps used in the suppress-map parameter, routes meeting the deny clause are not suppress; in other words, they are allowed. The opposite is also true: routes meeting the permit clause are suppressed.
If the route is injected via the network command, that route still appears in the routing table if the summary-only parameter is configured in the aggregate-address command.
The summary-only parameter suppresses all advertisements. If you want to suppress advertisements to only specific neighbors, use the neighbor distribute-list command.
In the show ip bgp command, aggregates contain an `a' in the first column and routes suppressed by the aggregate contain an `s' in the first column.
When an aggregate address is denied using a peer's outbound route-map, individual routes suppressed by the aggregate address are advertised to that peer.
The attribute-map corresponding to an aggregate address is applied during the outbound update creation time; hence the value set in that attribute-map will not be shown in the output of the show ip bgp aggregate route command.
bgp add-path
Allow the advertisement of multiple paths for the same address prefix without the new paths replacing any previous ones.
Syntax Parameters
bgp add-path [send | receive | both] path-count
send receive
Enter the keyword send to indicate that the system sends multiple paths to peers.
Enter the keyword receive to indicate that the system accepts multiple paths from peers.
322 Border Gateway Protocol
both path-count
Enter the keyword both to indicate that the system sends and accepts multiple paths from peers.
Enter the number paths supported. The range is from 2 to 64.
Defaults
Disabled
Command Modes ROUTER BGP ROUTER BGP-address-family
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.0 8.3.8.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Related Commands
neighbor add-path -- specifies that this neighbor/peer group can send/receive multiple path advertisements.
bgp always-compare-med
Allows you to enable comparison of the MULTI_EXIT_DISC (MED) attributes in the paths from different external ASs.
Syntax
bgp always-compare-med To disable comparison of MED, enter no bgp always-compare-med.
Defaults
Disabled (that is, the software only compares MEDs from neighbors within the same AS).
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Border Gateway Protocol 323
Usage Information
Version
8.2.1.0 7.7.1.0
Description
Introduced command. Introduced on the C-Series.
Any update without a MED attribute is the least preferred route. If you enable this command, use the clear ip bgp * command to recompute the best path.
bgp asnotation
Allows you to implement a method for AS number representation in the command line interface (CLI).
Syntax
bgp asnotation [asplain | asdot+ | asdot]
To disable a dot or dot+ representation and return to ASPLAIN, enter the no bgp asnotation command.
Defaults
asplain
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0 8.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced the dynamic application of AS notation changes. Introduced.
Usage Information
Example
Before enabling this feature, enable the enable bgp four-octet-as-supportcommand. If you disable the four-octect-support command after using dot or dot+ format, the AS numbers revert to asplain text. When you apply an asnotation, it is reflected in the running-configuration. If you change the notation type, the running-config updates dynamically and the new notation shows.
Dell(conf)#router bgp 1 Dell(conf-router_bgp)#bgp asnotation asdot Dell(conf-router_bgp)#ex Dell(conf)#do show run | grep bgp
router bgp 1 bgp four-octet-as-support bgp asnotation asdot
Dell(conf)#router bgp 1
324 Border Gateway Protocol
Related Commands
Dell(conf-router_bgp)#bgp asnotation asdot+ Dell(conf-router_bgp)#ex
Dell(conf)#do show run | grep bgp router bgp 1
bgp four-octet-as-support bgp asnotation asdot+
Dell(conf)#router bgp 1 Dell(conf-router_bgp)#bgp asnotation asplain Dell(conf-router_bgp)#ex Dell(conf)#do show run |grep bgp router bgp 1
bgp four-octet-as-support
Dell(conf)#
bgp four-octet-as-support -- enables 4-byte support for the BGP process.
bgp bestpath as-path ignore
Ignore the AS PATH in BGP best path calculations.
Syntax
bgp bestpath as-path ignore To return to the default, enter the no bgp bestpath as-path ignore command.
Defaults
Disabled (that is, the software considers the AS_PATH when choosing a route as best).
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
If you enable this command, use the clear ip bgp * command to recompute the best path.
Border Gateway Protocol 325
bgp bestpath as-path multipath-relax
Include prefixes received from different AS paths during multipath calculation.
Syntax
bgp bestpath as-path multipath-relax
To return to the default BGP routing process, use the no bgp bestpath as-path multipathrelax command.
Defaults
Disabled
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.4 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Usage Information
The bestpath router bgp configuration mode command changes the default bestpath selection algorithm. The multipath-relax option allows load-sharing across providers with different (but equal-length) autonomous system paths. Without this option, ECMP expects the AS paths to be identical for load-sharing.
bgp bestpath med confed
Enable MULTI_EXIT_DISC (MED) attribute comparison on paths learned from BGP confederations.
Syntax
bgp bestpath med confed
To disable MED comparison on BGP confederation paths, enter the no bgp bestpath med confed command.
Defaults
Disabled
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500.
326 Border Gateway Protocol
Usage Information
Version
9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Description
Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
The software compares the MEDs only if the path contains no external autonomous system numbers. If you enable this command, use the clear ip bgp * command to recompute the best path.
bgp bestpath med missing-as-best
During path selection, indicate preference to paths with missing MED (MULTI_EXIT_DISC) over paths with an advertised MED attribute.
Syntax
bgp bestpath med missing-as-best To return to the default selection, use the no bgp bestpath med missing-as-best command.
Defaults
Disabled
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0 6.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced
Usage Information
The MED is a 4-byte unsigned integer value and the default behavior is to assume a missing MED as 4294967295. This command causes a missing MED to be treated as 0. During path selection, paths with a lower MED are preferred over paths with a higher MED.
Border Gateway Protocol 327
bgp bestpath router-id ignore
Do not compare router-id information for external paths during best path selection.
Syntax
bgp bestpath router-id ignore To return to the default selection, use the no bgp bestpath router-id ignore command.
Defaults
Disabled
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced
Usage Information
Configuring this option retains the current best-path. When sessions are then reset, the oldest received path is chosen as the best-path.
bgp client-to-client reflection
Allows you to enable route reflection between clients in a cluster.
Syntax
bgp client-to-client reflection To disable client-to-client reflection, use the no bgp client-to-client reflection command.
Defaults
Enabled when a route reflector is configured.
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T.
328 Border Gateway Protocol
Usage Information
Related Commands
Version
8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Description
Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Route reflection to clients is not necessary if all client routers are fully meshed.
bgp cluster-id -- assigns an ID to a BGP cluster with two or more route reflectors. neighbor route-reflector-client -- configures a route reflector and clients.
bgp cluster-id
Assign a cluster ID to a BGP cluster with more than one route reflector.
Syntax Parameters
bgp cluster-id {ip-address | number} To delete a cluster ID, use the no bgp cluster-id {ip-address | number} command.
ip-address number
Enter an IP address as the route reflector cluster ID. Enter a route reflector cluster ID as a number from 1 to 4294967295.
Defaults
Not configured.
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
When a BGP cluster contains only one route reflector, the cluster ID is the route reflector's router ID. For redundancy, a BGP cluster may contain two or more route reflectors. Assign a cluster ID with the bgp cluster-id command. Without a cluster ID, the route reflector cannot recognize route updates from the other route reflectors within the cluster.
The default format for displaying the cluster-id is dotted decimal, but if you enter the cluster-id as an integer, it is displayed as an integer.
This command automatically restarts the BGP instance for the configuration to take effect.
Border Gateway Protocol 329
Related Commands
bgp client-to-client reflection -- enables route reflection between the route reflector and clients. neighbor route-reflector-client -- configures a route reflector and clients. show ip bgp cluster-list -- views paths with a cluster ID.
bgp confederation identifier
Configure an identifier for a BGP confederation.
Syntax Parameters
bgp confederation identifier as-number
To delete a BGP confederation identifier, use the no bgp confederation identifier asnumber command.
as-number
Enter the AS number. The range is from 0 to 65535 (2 byte), from 1 to 4294967295 (4 byte), or from 0.1 to 65535.65535 (dotted format).
Defaults
Not configured.
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Added support for the 4-byte format
Usage Information
To accept 4-byte formats before entering a 4-byte AS number, configure your system. All the routers in the Confederation must be 4 byte or 2 byte identified routers. You cannot mix them.
The autonomous systems configured in this command are visible to the EBGP neighbors. Each autonomous system is fully meshed and contains a few connections to other autonomous systems. The next hop, MED, and local preference information is preserved throughout the confederation.
Dell Networking OS accepts confederation EBGP peers without a LOCAL_PREF attribute. The software sends AS_CONFED_SET and accepts AS_CONFED_SET and AS_CONF_SEQ.
If a local-as is configured, BGP does not allow for the configuration of BGP confederation. Similarly, if BGP confederation is configured, then BGP does not allow the configuration of local-as.
If the neighbor is an eBGP neighbor, then BGP performs a check on the first AS number. In this scenario, it is mandatory that the first sequence in the AS path is of type AS_SEQUENCE or AS_CONFED_SEQUENCE (in the case of confederations). If the first entry appears as an AS_CONFED_SET and the neighbor is not in the local AS, then this is strictly a problem with the neighbor node.
This command automatically restarts the BGP instance for the configuration to take effect.
330 Border Gateway Protocol
Related Commands
bgp four-octet-as-support -- enables 4-byte support for the BGP process.
bgp confederation peers
Specify the autonomous systems (ASs) that belong to the BGP confederation.
Syntax Parameters
bgp confederation peers as-number [...as-number] To return to the default, use the no bgp confederation peers command.
as-number ...as-number
Enter the AS number. The range is from 0 to 65535 (2 byte), from 1 to 4294967295 (4 byte), or from 0.1 to 65535.65535 (dotted format).
(OPTIONAL) Enter up to 16 confederation numbers. The range is from 0 to 65535 (2 byte), from 1 to 4294967295 (4 byte), or from 0.1 to 65535.65535 (dotted format).
Defaults
Not configured.
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Added support for the 4-byte format.
Usage Information
Related Commands
All the routers in the Confederation must be 4 byte or 2 byte identified routers. You cannot mix them. The autonomous systems configured in this command are visible to the EBGP neighbors. Each autonomous system is fully meshed and contains a few connections to other autonomous systems. After specifying autonomous systems numbers for the BGP confederation, recycle the peers to update their configuration.
bgp confederation identifier -- configures a confederation ID. bgp four-octet-as-support -- enables 4-byte support for the BGP process.
Border Gateway Protocol 331
bgp connection-retry-timer
Configures the BGP connection retry timer.
Syntax Parameters
bgp connection-retry-timer retry-timer-value To return to the default configuration, enter the no connection-retry-timer retry-timervalue command.
retry-timer-value Enter a value that denotes the time interval after which the session retries the connection. The valid range is from 10 to 65535.
Defaults
60 seconds.
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.4.(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4810.
bgp dampening
Enable BGP route dampening and configure the dampening parameters.
Syntax Parameters
bgp dampening [half-life reuse suppress max-suppress-time] [route-map mapname]
To disable route dampening, use the no bgp dampening [half-life reuse suppress maxsuppress-time] [route-map map-name] command.
half-life
reuse
suppress
max-suppresstime route-map mapname
(OPTIONAL) Enter the number of minutes after which the Penalty is decreased. After the router assigns a Penalty of 1024 to a route, the Penalty is decreased by half after the half-life period expires. The range is from 1 to 45. The default is 15 minutes.
(OPTIONAL) Enter a number as the reuse value, which is compared to the flapping route's Penalty value. If the Penalty value is less than the reuse value, the flapping route is once again advertised (or no longer suppressed). The range is from 1 to 20000. The default is 750.
(OPTIONAL) Enter a number as the suppress value, which is compared to the flapping route's Penalty value. If the Penalty value is greater than the suppress value, the flapping route is no longer advertised (that is, it is suppressed). The range is from 1 to 20000. The default is 2000.
(OPTIONAL) Enter the maximum number of minutes a route can be suppressed. The default is four times the half-life value. The range is from 1 to 255. The default is 60 minutes.
(OPTIONAL) Enter the keyword route-map then the name of a configured route map.
Only match commands in the configured route map are supported.
332 Border Gateway Protocol
Defaults
Disabled.
Command Modes ROUTER BGP ROUTER BGP-address-family
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
Related Commands
If you enter the bgp dampening command, the default values for half-life, reuse, suppress, and max-suppress-time are applied. The parameters are position-dependent; therefore, if you configure one parameter, configure the parameters in the order they appear in the CLI.
Route refresh is sent when you enable BGP dampening.
show ip bgp dampened-paths -- views the BGP paths.
bgp default local-preference
Change the default local preference value for routes exchanged between internal BGP peers.
Syntax
bgp default local-preference value To return to the default value, use the no bgp default local-preference command.
Parameters
value
Enter a number to assign to routes as the degree of preference for those routes. When routes are compared, the higher the degree of preference or local preference value, the more the route is preferred. The range is from 0 to 4294967295. The default is 100.
Defaults
100
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON.
Border Gateway Protocol 333
Usage Information
Related Commands
Version
9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Description
Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
All routers apply the bgp default local-preference command setting within the AS. To set the local preference for a specific route, use the set local-preference command in ROUTE-MAP mode.
set local-preference -- assigns a local preference value for a specific route.
bgp dmzlink-bw
Enables BGP Link Bandwidth.
Syntax Parameters
bgp dmzlink-bw To disable BGP Link Bandwidth, enter the no bgp dmzlink-bw command.
dmzlink-bw
Enter the keyword dmzlink-bw to enable BGP Link Bandwidth in BGP multipath.
Defaults
N/A
Command Modes ROUTER BGP
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
9.2(1.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S-Series. Introduced on the Z9500.
Usage Information
Configuring or un-configuring the command will bring down and bring up the BGP Route Manager, this will result in tear down and re-establishment of all active sessions.
Link Bandwidth has to be configured on the router in order to tell it to associate Link Bandwidth with prefixes (paths) and/or to use Link Bandwidth in BGP Multipath route selection.
This is done under BGP configuration and is supported per address family � for IPv4 and IPv6 address families.
The configuration for a particular address family will apply across all VRFs configured.
This command must be performed on the router which is attaching link bandwidth to prefixes (typically a border router) as well as the router which is expected to load share traffic proportional to the bandwidth of the external links.
334 Border Gateway Protocol
bgp enforce-first-as
Disable (or enable) enforce-first-as check for updates received from EBGP peers.
Syntax
bgp enforce-first-as To turn off the default, use the no bgp enforce-first-as command.
Defaults
Enabled
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced.
Usage Information
Related Commands
This command is enabled by default, that is for all updates received from EBGP peers, BGP ensures that the first AS of the first AS segment is always the AS of the peer. If not, the update is dropped and a counter is increments. Use the show ip bgp neighbors command to view the "failed enforce-firstas check" counter.
If you disable the enforce-first-as command, it can be viewed using the show ip protocols command.
In the event of an enfore-first-as check failure, the existing BGP session is flapped.
show ip bgp neighbors -- views the information the BGP neighbors exchange.
show ip protocols -- views information on routing protocols.
bgp fast-external-fallover
Enable the fast external fallover feature, which immediately resets the BGP session if a link to a directly connected external peer fails.
Syntax
bgp fast-external-fallover To disable fast external fallover, use the no bgp fast-external-fallover command.
Defaults
Enabled
Command Modes ROUTER BGP
Border Gateway Protocol 335
Command History
Usage Information
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
The bgp fast-external-fallover command appears in the show config command output.
The fast external fallover configuration is applied only after you manually reset all the existing BGP sessions. As a result, after you execute this command, you must also manually execute the clear ip bgp command in order for the configuration to take effect.
bgp four-octet-as-support
Enable 4-byte support for the BGP process.
Syntax
bgp four-octet-as-support To disable fast external failover, use the no bgp four-octet-as-support command.
Defaults
Disabled (supports 2�byte format)
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
336 Border Gateway Protocol
Usage Information
Routers supporting 4-byte ASNs advertise that function in the OPEN message. The behavior of a 4-byte router is slightly different depending on whether it is speaking to a 2-byte router or a 4-byte router.
When creating Confederations, all the routers in the Confederation must be 4 byte or 2 byte identified routers. You cannot mix them.
Where the 2-byte format is from 1 to 65535, the 4-byte format is from 1 to 4294967295. Both formats are accepted and the advertisements reflect the entered format.
For more information about using the 2 byte or 4-byte format, refer to the Dell Networking OS Configuration Guide.
This command automatically restarts the BGP instance for the configuration to take effect.
bgp graceful-restart
To support graceful restart as a receiver only, enable graceful restart on a BGP neighbor, a BGP node, or designate a local router.
Syntax Parameters
bgp graceful-restart [restart-time seconds] [stale-path-time seconds] [role receiver-only]
To return to the default, use the no bgp graceful-restart command.
restart-time seconds
Enter the keyword restart-time then the maximum number of seconds to restart and bring-up all the peers. The range is from 1 to 3600 seconds. The default is 120 seconds.
stale-path-time Enter the keyword stale-path-time then the maximum number of seconds to
seconds
wait before restarting a peer's stale paths. The default is 360 seconds.
role receiver-only Enter the keyword role receiver-only to designate the local router to support graceful restart as a receiver only.
Defaults
as above
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
This feature is advertised to BGP neighbors through a capability advertisement. In Receiver Only mode, BGP saves the advertised routes of peers that support this capability when they restart.
Border Gateway Protocol 337
BGP graceful restart is active only when the neighbor becomes established. Otherwise it is disabled. Graceful-restart applies to all neighbors with established adjacency.
This command automatically restarts the BGP instance for the configuration to take effect.
bgp non-deterministic-med
Compare MEDs of paths from different autonomous systems.
Syntax
bgp non-deterministic-med To return to the default, use the no bgp non-deterministic-med command.
Defaults
Disabled (that is, paths/routes for the same destination but from different ASs do not have their MEDs compared).
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
In Non-Deterministic mode, paths are compared in the order in which they arrive. This method can lead to Dell Networking OS choosing different best paths from a set of paths, depending on the order in which they are received from the neighbors because MED may or may not get compared between adjacent paths. In Deterministic mode (no bgp non-deterministic-med), Dell Networking OS compares MED between adjacent paths within an AS group because all paths in the AS group are from the same AS.
When you change the path selection from Deterministic to Non-Deterministic, the path selection for the existing paths remains Deterministic until you enter the clear ip bgp command to clear existing paths.
bgp recursive-bgp-next-hop
Enable next-hop resolution through other routes learned by BGP.
Syntax
bgp recursive-bgp-next-hop To disable next-hop resolution, use the no bgp recursive-bgp-next-hop command.
Defaults
Enabled
Command Modes ROUTER BGP
338 Border Gateway Protocol
Command History
Usage Information Related Commands
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0 7.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced.
This command is a knob to disable BGP next-hop resolution using BGP learned routes. During the nexthop resolution, only the first route that the next-hop resolves through is verified for the route's protocol source and is checked if the route is learned from BGP or not.
The clear ip bgp command is required for this command to take effect and to keep the BGP database consistent. Execute the clear ip bgp command right after executing this command.
clear ip bgp -- clears the ip bgp.
bgp regex-eval-optz-disable
Disables the Regex Performance engine that optimizes complex regular expression with BGP.
Syntax
bgp regex-eval-optz-disable To re-enable optimization engine, use the no bgp regex-eval-optz-disable command.
Defaults
Enabled
Command Modes ROUTER BGP (conf-router_bgp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000.
Border Gateway Protocol 339
Usage Information
Examples
Related Commands
Version
8.3.7.0 7.8.1.0 7.7.1.0 7.6.1.0
Description
Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced
BGP uses regular expressions (regex) to filter route information. In particular, the use of regular expressions to filter routes based on AS-PATHs and communities is common. In a large-scale configuration, filtering millions of routes based on regular expressions can be quite CPU intensive, as a regular expression evaluation involves generation and evaluation of complex finite state machines.
BGP policies, containing regular expressions to match as-path and communities, tend to use much CPU processing time, which in turn affects the BGP routing convergence. Additionally, the show bgp commands, which are filtered through regular expressions, use up CPU cycles particularly with large databases. The Regex Engine Performance Enhancement feature optimizes the CPU usage by caching and reusing regular expression evaluation results. This caching and reuse may be at the expensive of RP1 processor memory.
Dell(conf-router_bgp)#no bgp regex-eval-optz-disable
Dell(conf-router_bgp)#do show ip protocols
Routing Protocol is "ospf 22222"
Router ID is 2.2.2.2
Area
Routing for Networks
51
10.10.10.0/00
Routing Protocol is "bgp 1" Cluster Id is set to 10.10.10.0 Router Id is set to 10.10.10.0 Fast-external-fallover enabled
Regular expression evaluation optimization enabled Capable of ROUTE_REFRESH For Address Family IPv4 Unicast BGP table version is 0, main routing table version 0 Distance: external 20 internal 200 local 200
Dell(conf-router_bgp)#
show ip protocols -- views information on all routing protocols enabled and active on the E-Series.
bgp router-id
Assign a user-given ID to a BGP router.
Syntax Parameters
bgp router-id ip-address To delete a user-assigned IP address, use the no bgp router-id command.
ip-address
Enter an IP address in dotted decimal format to reset only that BGP neighbor.
Defaults
The router ID is the highest IP address of the Loopback interface or, if no Loopback interfaces are configured, the highest IP address of a physical interface on the router.
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
340 Border Gateway Protocol
Usage Information
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Peering sessions are reset when you change the router ID of a BGP router. This command automatically restarts the BGP instance for the configuration to take effect.
clear ip bgp
Reset BGP sessions. The soft parameter (BGP Soft Reconfiguration) clears the policies without resetting the TCP connection.
Syntax Parameters
clear ip bgp [vrf vrf-name] [* | <1�4294967295> | <0.1�65535.65535> | A.B.C.D {soft {in | out}} | X:X:X:X::X {soft {in | out}} | dampening | flap-statistics | ipv4 | ipv6 | peer-group]
vrf vrf-name
Enter the keyword vrf and then the name of the VRF to clear all BGP sessions corresponding to that VRF.
NOTE: Use this attribute to clear a BGP instance corresponding to either a
specific address family in a default VRF or an IPv4 address family in a a non-
default VRF.
*
Enter an asterisk ( * ) to reset all BGP sessions.
<1-4294967295> Enter <1-4294967295> to clear peers with the AS number.
<0.1-65535.6553 Enter <0.1-65535.65535> to clear peers with the AS number in dot format. 5>
A.B.C.D
Enter the BGP neighbor address in the A.B.C.D format to clear.
X:X:X:X::X
Enter the BGP neighbor address in the X:X:X:X::X format to clear.
soft
(OPTIONAL) Enter the keyword soft to configure and activate policies without
resetting the BGP TCP session, that is, BGP Soft Reconfiguration.
NOTE: If you enter the clear ip bgp ip-address soft command,
both inbound and outbound policies are reset.
in
(OPTIONAL) Enter the keyword in to activate only inbound policies.
out
(OPTIONAL) Enter the keyword out to activate only outbound policies.
NOTE: You must execute the clear ip bgp soft out command when
ever there is a change in the local policy. If you do not run this command after
a local policy change, then these policy changes are not reflected in the
responses to the peer's route refresh messages.
dampening
Enter the keyword dampening to clear the flap dampening information.
Border Gateway Protocol 341
flap-statistics ipv4 ipv6 peer-group
Enter the keywords flap-statistics to clear the flap statistics information. Enter the ipv4 address family to clear. Enter the ipv6 address family to clear. Enter the peer-group to clear all members of the peer-group.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0 6.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Expanded to include the as-number option.
Related Commands
bgp recursive-bgp-next-hop -- disables next-hop resolution through other routes learned by the BGP.
clear ip bgp dampening
Clear information on route dampening and return the suppressed route to the Active state.
Syntax Parameters
clear ip bgp [vrf vrf-name] [ipv4 [multicast | unicast] | ipv6 unicast] [dampening [ipv4-address mask | ipv6�address mask]
vrf vrf-name
(OPTIONAL) Enter the keyword vrf and then the name of the VRF to clear information on route dampening corresponding to that VRF
NOTE: You can use this attribute on a specific VRF to remove history routes
corresponding to that VRF. You can also use this attribute to return the
suppressed routes corresponding to a specific VRF to an active state.
ipv4 multicast
ipv4 unicast
ipv6 unicast
ipv4-address mask ipv6�address mask
(OPTIONAL) Enter the keyword ipv4 followed by the keyword multicast to clear the ipv4 multicast routes.
(OPTIONAL) Enter the keyword ipv4 followed by the keyword unicast to clear the ipv4 unicast routes.
(OPTIONAL) Enter the keyword ipv6 followed by the keyword unicast to clear the ipv6 unicast routes.
(OPTIONAL) Enter an IPv4 address in dotted decimal format and the prefix mask in slash format (/x) to clear dampening information only that BGP neighbor.
(OPTIONAL) Enter the IPv6 address and the network mask to clear information on IPv6 route dampening.
342 Border Gateway Protocol
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Added the ipv4 multicast and ipv6 unicast parameters. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
After you enter this command, the software deletes the history routes and returns the suppressed routes to the Active state.
The clear ip bgp dampening command does not clear the history paths.
clear ip bgp flap-statistics
Clear BGP flap statistics, which includes number of flaps and the time of the last flap.
Syntax Parameters
clear ip bgp [vrf vrf-name] [ipv4 [multicast | unicast] | ipv6 unicast] [flap-statistics [ipv4-address mask | ipv6�address mask] | filter-list aspath-name | regexp regular-expression]
vrf vrf-name
(OPTIONAL) Enter the keyword vrf and then the name of the VRF to clear BGP flap statistics corresponding to that VRF.
NOTE: You can use this attribute on a specific VRF to remove history routes
corresponding to that VRF. You can also use this attribute to return the
suppressed routes corresponding to a specific VRF to an active state.
ipv4 multicast
ipv4 unicast
ipv6 unicast
ipv4-address mask ipv6�address mask filter-list aspath-name
(OPTIONAL) Enter the keyword ipv4 followed by the keyword multicast to clear information related only to ipv4 multicast routes.
(OPTIONAL) Enter the keyword ipv4 followed by the keyword unicast to clear information related only to ipv4 unicast routes.
(OPTIONAL) Enter the keyword ipv6 followed by the keyword unicast to clear information related only to ipv6 unicast routes.
(OPTIONAL) Enter an IPv4 address in dotted decimal format and the prefix mask in slash format (/x) to reset only that prefix.
(OPTIONAL) Enter the IPv6 address followed by the network mask to reset only that prefix.
(OPTIONAL) Enter the keywords filter-list then the name of a configured AS-PATH list.
Border Gateway Protocol 343
regexp regularexpression
(OPTIONAL) Enter the keyword regexp then regular expressions. Use one or a combination of the following:
. = (period) any single character (including a white space). * = (asterisk) the sequences in a pattern (0 or more sequences). + = (plus) the sequences in a pattern (1 or more sequences). ? = (question mark) sequences in a pattern (either 0 or 1 sequences).
NOTE: Enter an escape sequence (CTRL+v) prior to entering the ? regular
expression.
[ ] = (brackets) a range of single-character patterns. ( ) = (parenthesis) groups a series of pattern elements to a single element. { } = (braces) minimum and the maximum match count. ^ = (caret) the beginning of the input string. If you use the caret at the
beginning of a sequence or range, it matches on everything BUT the characters specified. $ = (dollar sign) the end of the output string.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Added the ipv4 multicast and ipv6 unicast parameters. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
Related Commands
If you enter the clear ip bgp flap-statistics command without any parameters, all statistics are cleared.
show debugging -- views the enabled debugging operations. show ip bgp flap-statistics -- views the BGP flap statistics. undebug all -- disables all debugging operations.
clear ip bgp peer-group
Reset a peer-group's BGP sessions.
Syntax Parameters
clear ip bgp [vrf vrf-name] peer-group peer-group-name [ipv4 [multicast | unicast] | ipv6 unicast] [soft {in | out}]
vrf vrf-name
Enter the keyword vrf and then the name of the VRF to reset the peer group corresponding to that VRF.
344 Border Gateway Protocol
NOTE: You can use this attribute on a specific VRF to remove history routes corresponding to that VRF. You can also use this attribute to return the suppressed routes corresponding to a specific VRF to an active state.
peer-group-name Enter the peer group name to reset the BGP sessions within that peer group.
ipv4 multicast
(OPTIONAL) Enter the keyword ipv4 followed by the keyword multicast to reset ipv4 multicast routes.
ipv4 unicast
(OPTIONAL) Enter the keyword ipv4 followed by the keyword unicast to reset ipv4 unicast routes.
ipv6 unicast
(OPTIONAL) Enter the keyword ipv6 followed by the keyword unicast to reset ipv6 unicast routes.
soft
(OPTIONAL) Enter the keyword soft to reset soft configuration.
in
Enter the keyword in to re-configure soft inbound updates.
out
Enter the keyword out to re-configure soft outbound updates.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Added the ipv4 multicast and ipv6 unicast parameters. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
deny bandwidth
Enables you to specify link band width extended-community attribute as the matching criteria to deny incoming or outgoing traffic.
Syntax
deny bandwidth To disable this setting, enter the no deny bandwidth command.
Parameters
bandwidth
Enter the keyword bandwidth to specify extended-community attribute as the matching criteria for denying traffic. The range is from 0 to 102400.
Defaults
N/A
Command Modes EXTENDED COMMUNITY LIST
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
Border Gateway Protocol 345
Related Commands
Version
9.7(0.0)
Description
Introduced on the S-Series and Z9500.
permit bandwidth � specify link band width extended-community attribute as the matching criteria to permitting incoming or outgoing traffic..
debug ip bgp
Display all information on BGP, including BGP events, keepalives, notifications, and updates.
Syntax Parameters
debug ip bgp [ vrf vrf-name | A.B.C.D | X:X:X:X::X | peer-group peer-groupname] [in | out]
To disable all BGP debugging, use the no debug ip bgp command.
vrf vrf-name
Enter the keyword vrf and then the name of the VRF to debug BGP information corresponding to that VRF.
NOTE: Use this attribute to debug BGP protocol operations corresponding to
either a default or non-default VRF.
A.B.C.D
Enter the IPv4 address of the neighbor in dotted decimal format.
X:X:X:X::X
(OPTIONAL) Enter an IPv6 address.
peer-group peer- Enter the keywords peer-group then the name of the peer group to debug. group-name
in
(OPTIONAL) Enter the keyword in to view only information on inbound BGP
routes.
out
(OPTIONAL) Enter the keyword out to view only information on outbound BGP
routes.
A.B.C.D
Enter the IP address of peer in the A.B.C.D format.
X:X:X:X::X
Enter the IPv6 IP address of peer in the X:X:X:X::X format.
dampening
Enter the keyword dampening to view BGP dampening.
events
Enter the keyword events to view BGP protocol events.
ipv4
Enter the ipv4 IP address to view the IPV4 route information.
ipv6
Enter the ipv6 IP address to view the IPV6 route information.
keepalives
Enter the keyword keepalives to view BGP keepalives.
notifications
Enter the keyword notifications to view BGP notifications.
soft-
Enter the keywords soft-reconfiguration to view only information on
reconfiguration inbound BGP soft reconfiguration.
updates
Enter the keyword updates to view BGP updates.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON.
346 Border Gateway Protocol
Usage Information
Related Commands
9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
To view information on both incoming and outgoing routes, do not include the in and out parameters in the debugging command. The in and out parameters cancel each other; for example, if you enter the debug ip bgp in command and then enter the debug ip bgp out command, you do not see information on the incoming routes.
Entering a no debug ip bgp command removes all configured debug commands for BGP.
debug ip bgp events -- views information about BGP events.
debug ip bgp keepalives -- views information about BGP keepalives.
debug ip bgp notifications -- views information about BGP notifications.
debug ip bgp updates -- views information about BGP updates.
show debugging -- views enabled debugging operations.
debug ip bgp dampening
View information on routes being dampened.
Syntax Parameters
debug ip bgp [vrf vrf-name] [ipv4 {unicast | multicast} | ipv6 unicast] dampening
To disable debugging, use the no debug ip bgp dampening command.
vrf vrf-name ipv4 multicast ipv4 unicast ipv6 unicast
Enter the keyword vrf followed by the name of the VRF to view information on dampened routes corresponding to that VRF.
(OPTIONAL) Enter the keyword ipv4 followed by the keyword multicast to view dampened-route information related only to ipv4 multicast routes.
(OPTIONAL) Enter the keyword ipv4 followed by the keyword multicast to view dampened-route information related only to ipv4 unicast routes.
(OPTIONAL) Enter the keyword ipv4 followed by the keyword unicast to view dampened-route information related only to ipv6 unicast routes.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
b
Version
Description
9.8(0.0P5) 9.8(0.0P2)
Introduced on the S4048-ON. Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000�ON.
9.2(1.0)
Introduced on the Z9500.
Border Gateway Protocol 347
Version
9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0 7.6.1.0
Description
Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced IPv6 MGBP support for the E-Series.
debug ip bgp events
Display information on local BGP state changes and other BGP events.
Syntax Parameters
debug ip bgp [vrf vrf-name] [A.B.C.D | X:X:X:X::X | peer-group peer-groupname] events [in | out]
To disable debugging, use the no debug ip bgp [vrf vrf-name] [A.B.C.D | X:X:X:X::X | peer-group peer-group-name] events [in | out] command.
vrf vrf-name
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to display BGP state changes corresponding to that VRF.
A.B.C.D
(OPTIONAL) Enter the IPv4 address of the neighbor.
X:X:X:X::X
(OPTIONAL) Enter an IPv6 address.
peer-group peer- (OPTIONAL) Enter the keyword peer-group then the name of the peer group. group-name
in
(OPTIONAL) Enter the keyword in to view only events on inbound BGP messages.
out
(OPTIONAL) Enter the keyword out to view only events on outbound BGP
messages.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
348 Border Gateway Protocol
Usage Information
To remove all configured debug commands for BGP, enter the no debug ip bgp command.
debug ip bgp keepalives
Display information about BGP keepalive messages.
Syntax Parameters
debug ip bgp [vrf vrf-name] [A.B.C.D | X:X:X:X::X | peer-group peer-groupname] keepalives [in | out]
To disable debugging, use the no debug ip bgp [vrf vrf-name] [A.B.C.D | X:X:X:X::X | peer-group peer-group-name] keepalives [in | out] command.
vrf vrf-name
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to display BGP keepalive information corresponding to that VRF.
A.B.C.D
(OPTIONAL) Enter the IPv4 address of the neighbor.
X:X:X:X::X
(OPTIONAL) Enter an IPv6 address.
peer-group peer- (OPTIONAL) Enter the keyword peer-group then the name of the peer group. group-name
in
(OPTIONAL) Enter the keyword in to view only inbound keepalive messages.
out
(OPTIONAL) Enter the keyword out to view only outbound keepalive messages.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
To remove all configured debug commands for BGP, enter the no debug ip bgp command.
debug ip bgp notifications
Allows you to view information about BGP notifications received from neighbors.
Syntax
debug ip bgp [vrf vrf-name] [A.B.C.D | X:X:X:X::X | peer-group peer-groupname] notifications [in | out]
Border Gateway Protocol 349
Parameters
To disable debugging, use the no debug ip bgp [vrf vrf-name] [A.B.C.D | X:X:X:X::X | peer-group peer-group-name] notifications [in | out] command.
vrf vrf-name
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to view neighbor BGP notification information corresponding to that VRF.
A.B.C.D
(OPTIONAL) Enter the IPv4 address of the neighbor.
X:X:X:X::X
(OPTIONAL) Enter an IPv6 address.
peer-group peer- (OPTIONAL) Enter the keyword peer-group then the name of the peer group. group-name
in
(OPTIONAL) Enter the keyword in to view BGP notifications received from
neighbors.
out
(OPTIONAL) Enter the keyword out to view BGP notifications sent to neighbors
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Added ipv6 support. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
To remove all configured debug commands for BGP, enter the no debug ip bgp command.
debug ip bgp soft-reconfiguration
Enable soft-reconfiguration debug.
Syntax Parameters
debug ip bgp [vrf vrf-name] [A.B.C.D | X:X:X:X::X | peer-group-name] softreconfiguration
To disable, use the debug ip bgp [vrf vrf-name] [A.B.C.D | X:X:X:X::X | peergroup-name] soft-reconfiguration command.
vrf vrf-name
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to enable soft-reconfiguration debugging on that VRF.
A.B.C.D
(OPTIONAL) Enter the IPv4 address of the neighbor in dotted decimal format.
X:X:X:X::X
(OPTIONAL) Enter an IPv6 address.
peer-group-name (OPTIONAL) Enter the name of the peer group to disable or enable all routers within the peer group..
350 Border Gateway Protocol
Defaults
Disabled
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0 7.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced.
Usage Information
This command turns on BGP soft-reconfiguration inbound debugging. If no neighbor is specified, debug turns on for all neighbors.
debug ip bgp updates
Allows you to view information about BGP updates.
Syntax Parameters
debug ip bgp [vrf vrf-name] [A.B.C.D | X:X:X:X::X | peer-group peer-groupname] updates [in | out | prefix-list prefix-list-name]
To disable debugging, use the no debug ip bgp [vrf vrf-name] [A.B.C.D | X:X:X:X::X | peer-group peer-group-name] updates [in | out | prefix-list prefix-listname] command.
vrf vrf-name
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to view BGP updates information corresponding to that VRF.
A.B.C.D
(OPTIONAL) Enter an IPv4 address of the neighbor.
X:X:X:X::X
(OPTIONAL) Enter an IPv6 address.
peer-group peer- (OPTIONAL) Enter the keyword peer-group followed by the name of the peer
group-name
group.
in
(OPTIONAL) Enter the keyword in to view only BGP updates received from
neighbors.
out
(OPTIONAL) Enter the keyword out to view only BGP updates sent to neighbors.
prefix-list prefix- (OPTIONAL) Enter the keyword prefix-list then the name of an established
list-name
prefix list. If the prefix list is not configured, the default is permit (to allow all
routes).
ip-address
(OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.
peer-group-name (OPTIONAL) Enter the name of the peer group to disable or enable all routers within the peer group.
Border Gateway Protocol 351
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
To remove all configured debug commands for BGP, enter the no debug ip bgp command.
default-metric
Allows you to change the metric of redistributed routes to locally originated routes. Use this command with the redistribute command.
Syntax Parameters
default-metric number To return to the default setting, use the no default-metric command.
number
Enter a number as the metric to be assigned to routes from other protocols. The range is from 1 to 4294967295.
Defaults
0
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series.
352 Border Gateway Protocol
Usage Information
Related Commands
Version
7.7.1.0
Description
Introduced on the C-Series.
The default-metric command in BGP sets the value of the BGP MULTI_EXIT_DISC (MED) attribute for redistributed routes only.
bgp always-compare-med -- enables comparison of all BGP MED attributes. redistribute -- redistributes routes from other routing protocols into BGP.
description
Enter a description of the BGP routing protocol
Syntax Parameters
description {description} To remove the description, use the no description {description} command.
description
Enter a description to identify the BGP protocol (80 characters maximum).
Defaults
none
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0 pre-7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced.
Related Commands
router bgp -- enters ROUTER mode on the switch.
maximum-paths
Configure the maximum number of parallel routes (multipath support) BGP supports.
Syntax
maximum-paths {ebgp | ibgp} number
Border Gateway Protocol 353
Parameters
To return to the default values, enter the no maximum-paths command.
ebgp ibgp number
Enter the keyword ebgp to enable multipath support for External BGP routes.
Enter the keyword ibgp to enable multipath support for Internal BGP routes.
Enter a number as the maximum number of parallel paths. The range is from 2 to 64.
Defaults
none
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.8.0
8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Support from 2 to 64 paths on the S4810. Command syntax changed to maxpath (was maximum-paths). Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
If you enable this command, use the clear ip bgp * command to recompute the best path.
neighbor activate
This command allows the specified neighbor/peer group to be enabled for the current AFI/SAFI (Address Family Identifier/ Subsequent Address Family Identifier).
Syntax Parameters
neighbor [ip-address | peer-group-name] activate To disable, use the no neighbor [ip-address | peer-group-name] activate command.
ip-address
(OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.
peer-group-name (OPTIONAL) Enter the name of the peer group.
activate
Enter the keyword activate to enable the neighbor/peer group in the new AFI/ SAFI.
Defaults
Disabled
Command Modes CONFIGURATION-ROUTER-BGP-ADDRESS FAMILY
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
354 Border Gateway Protocol
Usage Information
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
By default, when you create a neighbor/peer group configuration in the Router BGP context, this enables IPv4/Unicast AFI/SAFI. When you use activate in the new context, the neighbor/peer group enables for AFI/SAFI.
It is not possible to de-activate a peer from the IPv4 unicast address family.
neighbor add-path
This command allows the specified neighbor/peer group to send/receive multiple path advertisements.
Syntax Parameters
neighbor [ip-address | peer-group-name] add-path [send | receive | both] path-count
ip-address
(OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.
peer-group-name (OPTIONAL) Enter the name of the peer group.
send
Enter the keyword send to indicate that the system sends multiple paths to peers.
receive
Enter the keyword receive to indicate that the system accepts multiple paths from peers.
both
Enter the keyword both to indicate that the system sends and accepts multiple paths from peers.
path-count
Enter the number paths supported. The range is from 2 to 64.
Defaults
none
Command Modes CONFIGURATION-ROUTER-BGP-ADDRESS FAMILY
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500.
Border Gateway Protocol 355
Related Commands
Version
9.0.2.0 8.3.19.0 8.3.11.1 8.3.8.0
Description
Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
bgp add-path -- allows the advertisement of multiple paths for the same address prefix without the new paths implicitly replacing any previous ones.
neighbor advertisement-interval
Set the advertisement interval between BGP neighbors or within a BGP peer group.
Syntax Parameters
neighbor {ip-address | peer-group-name} advertisement-interval seconds
To return to the default value, use the no neighbor {ip-address | peer-group-name} advertisement-interval command.
ip-address
(OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.
peer-group-name Enter the name of the peer group to set the advertisement interval for all routers in the peer group.
seconds
Enter a number as the time interval, in seconds, between BGP advertisements. The range is from 0 to 600 seconds. The default is 5 seconds for internal BGP peers and 30 seconds for external BGP peers.
Defaults
seconds = 5 seconds (internal peers) seconds = 30 seconds (external peers)
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
356 Border Gateway Protocol
neighbor advertisement-start
To send BGP routing updates, set the minimum interval before starting.
Syntax
neighbor {ip-address} advertisement-start seconds
To return to the default value, use the no neighbor {ip-address} advertisement-start command.
Parameters
ip-address seconds
(OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.
Enter a number as the time interval, in seconds, before BGP route updates are sent. The range is from 0 to 3600 seconds.
Defaults
none
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
neighbor allowas-in
Set the number of times an AS number can occur in the AS path.
Syntax Parameters
neighbor {ip-address | peer-group-name} allowas-in number
To return to the default value, use the no neighbor {ip-address | peer-group-name} allowas-in command.
ip-address
(OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.
peer-group-name Enter the name of the peer group to set the advertisement interval for all routers in the peer group.
number
Enter a number of times to allow this neighbor ID to use the AS path. The range is from 1 to 10.
Defaults
Not configured.
Command Modes ROUTER BGP
Border Gateway Protocol 357
Command History
Usage Information Related Commands
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
You cannot set this configuration for a peer that is associated with a peer group. Similarly, you cannot associate a peer to a peer group if that peer is already configured with these settings.
bgp four-octet-as-support -- enables 4-byte support for the BGP process.
neighbor default-originate
Inject the default route to a BGP peer or neighbor.
Syntax Parameters
neighbor {ip-address | peer-group-name} default-originate [route-map mapname]
To remove a default route, use the no neighbor {ip-address | peer-group-name} default-originate command.
ip-address
(OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.
peer-group-name Enter the name of the peer group to set the default route of all routers in that peer group.
route-map map- (OPTIONAL) Enter the keyword route-map then the name of a configured route
name
map.
Defaults
Not configured.
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000.
358 Border Gateway Protocol
Usage Information
Version
8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Description
Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
If you apply a route map to a BGP peer or neighbor with the neighbor default-originate command configured, the software does not apply the set filters in the route map to that BGP peer or neighbor.
When you configure a route-map for a BGP peer or peer group with the neighbor defaultoriginate command, the command checks for the existence of the route in BGP RIB.
Route-map configuration on a BGP peer or peer group works only when the LOC-RIB contains at least one route.
When you apply a default route to a BGP peer or peer group using the neighbor defaultoriginate command, changes to the configured default route-map are applied to the BGP peer or peer group only after a delay of 15 seconds. As a result, you must wait for a period of 15 seconds before manually resetting BGP using the clear ip bgp command.
In case of eBGP, the neighbor default-originate command does not support extendedcommunity as a non-transtive route-map attribute.
You cannot set this configuration for a peer that is associated with a peer group. Similarly, you cannot associate a peer to a peer group if that peer is already configured with these settings.
In order that settings corresponding to the neighbor default-originate command take effect, you must execute the clear ip bgp command immediately after you execute the neighbor default-originate command.
neighbor description
Assign a character string describing the neighbor or group of neighbors (peer group).
Syntax Parameters
neighbor {ip-address | peer-group-name} description text
To delete a description, use the no neighbor {ip-address | peer-group-name} description command.
ip-address
Enter the IP address of the neighbor in dotted decimal format.
peer-group-name Enter the name of the peer group.
text
Enter a continuous text string up to 80 characters.
Defaults
Not configured.
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2)
Introduced on the S4048-ON. Introduced on the S3048-ON.
Border Gateway Protocol 359
Version
9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Description
Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
neighbor distribute-list
Distribute BGP information via an established prefix list.
Syntax Parameters
neighbor {ip-address | peer-group-name} distribute-list prefix-list-name {in | out}
To delete a neighbor distribution list, use the no neighbor {ip-address | peer-group-name} distribute-list prefix-list-name {in | out} command.
ip-address
Enter the IP address of the neighbor in dotted decimal format.
peer-group-name Enter the name of the peer group to apply the distribute list filter to all routers in the peer group.
prefix-list-name Enter the name of an established prefix list.
If the prefix list is not configured, the default is permit (to allow all routes).
in
Enter the keyword in to distribute only inbound traffic.
out
Enter the keyword out to distribute only outbound traffic.
Defaults
Not configured.
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
360 Border Gateway Protocol
Usage Information
Related Commands
Other BGP filtering commands include: neighbor filter-list, ip as-path access-list, and neighbor route-map.
neighbor route-map -- assigns a route map to a neighbor or peer group.
neighbor ebgp-multihop
Attempt and accept BGP connections to external peers on networks that are not directly connected.
Syntax Parameters
neighbor {ip-address | peer-group-name} ebgp-multihop [ttl]
To disallow and disconnect connections, use the no neighbor {ip-address | peer-groupname} ebgp-multihop command.
ip-address
Enter the IP address of the neighbor in dotted decimal format.
peer-group-name Enter the name of the peer group.
ttl
(OPTIONAL) Enter the number of hops as the Time to Live (ttl) value. The range is
from 1 to 255. The default is 255.
Defaults
Disabled.
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
To prevent loops, the neighbor ebgp-multihop command does not install the default routes of the multihop peer. Networks not directly connected are not considered valid for best-path selection.
neighbor fall-over
Enable or disable fast fall-over for BGP neighbors.
Syntax
neighbor {ipv4-address | peer-group-name} fall-over To disable, use the no neighbor {ipv4-address | peer-group-name} fall-over command.
Border Gateway Protocol 361
Parameters
ipv4-address
Enter the IP address of the neighbor in dotted decimal format.
peer-group-name Enter the name of the peer group.
Defaults
Disabled.
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0 7.4.1.0
Introduced on the S3048�ON and S4048�ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced
Usage Information
Related Commands
When you enable failover, BGP keeps track of IP or IPv6 ability to reach the peer remote address and the peer local address. Whenever either address becomes unreachable (for example, no active route exists in the routing table for the peer IP or IPv6 destination/local address), BGP brings down the session with the peer.
show ip bgp neighbors -- displays information on the BGP neighbors.
neighbor local-as
To accept external routes from neighbors with a local AS number in the AS number path, configure Internal BGP (IBGP) routers.
Syntax Parameters
neighbor {ip-address | peer-group-name} local-as as-number [no-prepend]
To return to the default value, use the no neighbor {ip-address | peer-group-name} local-as command.
ip-address
Enter the IP address of the neighbor in dotted decimal format.
peer-group-name Enter the name of the peer group to set the advertisement interval for all routers in the peer group.
as-number
Enter the AS number to reset all neighbors belonging to that AS. The range is from 0 to 65535 (2 byte), from 1 to 4294967295 (4 byte) or from 0.1 to 65535.65535 (dotted format).
no prepend
Specifies that local AS values do not prepend to announcements from the neighbor.
Defaults
Not configured.
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
362 Border Gateway Protocol
Usage Information
Related Commands
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
If a local-as is configured, BGP does not allow for the configuration of BGP confederation. Similarly, if BGP confederation is configured, then BGP does not allow the configuration of local-as. This command automatically restarts the neighbor session for the configuration to take effect.
bgp four-octet-as-support -- enables 4-byte support for the BGP process.
neighbor maximum-prefix
Control the number of network prefixes received.
Syntax Parameters
neighbor {ip-address | peer-group-name} maximum-prefix maximum [threshold] [warning-only]
To return to the default values, use the no neighbor {ip-address | peer-group-name} maximum-prefix maximum command.
ip-address
Enter the IP address of the neighbor in dotted decimal format.
peer-group-name Enter the name of the peer group.
maximum
Enter a number as the maximum number of prefixes allowed for this BGP router. The range is from 1 to 4294967295.
threshold
(OPTIONAL) Enter a number to be used as a percentage of the maximum value. When the number of prefixes reaches this percentage of the maximum value, the E-Series software sends a message. The range is from 1 to 100 percent. The default is 75.
warning-only
(OPTIONAL) Enter the keyword warning-only to set the router to send a log message when the maximum value is reached. If this parameter is not set, the router stops peering when the maximum number of prefixes is reached.
NOTE: When you set this option, the router accepts BGP prefixes only until
the maximum configured value. After the maximum number is reached, the
router drops any additional prefixes that it receives.
Defaults
threshold = 75
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Border Gateway Protocol 363
Usage Information
Related Commands
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
If you configure the neighbor maximum-prefix command and the neighbor receives more prefixes than the neighbor maximum-prefix command configuration allows, the neighbor goes down and the show ip bgp summary command displays (prfxd) in the State/PfxRcd column for that neighbor. The neighbor remains down until you enter the clear ip bgp command for the neighbor or the peer group to which the neighbor belongs or you enter the neighbor shutdown and neighbor no shutdown commands.
show ip bgp summary -- displays the current BGP configuration.
neighbor password
Enable message digest 5 (MD5) authentication on the TCP connection between two neighbors.
Syntax Parameters
neighbor {ip-address | peer-group-name} password [encryption-type] password
To delete a password, use the no neighbor {ip-address | peer-group-name} password command.
ip-address
Enter the IP address of the router to be included in the peer group.
peer-group-name Enter the name of a configured peer group.
encryption-type (OPTIONAL) Enter 7 as the encryption type for the password entered. 7 means that the password is encrypted and hidden.
password
Enter a text string up to 80 characters long. The first character of the password must be a letter.
You cannot use spaces in the password.
Defaults
Not configured.
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
364 Border Gateway Protocol
Usage Information
Version
9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Description
Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
This command automatically restarts the neighbor session for the configuration to take effect.
Configure the same password on both BGP peers or a connection does not occur. When you configure MD5 authentication between two BGP peers, each segment of the TCP connection between them is verified and the MD5 digest is checked on every segment sent on the TCP connection.
Configuring a password for a neighbor causes an existing session to be torn down and a new one established.
If you specify a BGP peer group by using the peer-group-name parameter, all the members of the peer group inherit the characteristic configured with this command.
If you configure a password on one neighbor, but you have not configured a password for the neighboring router, the following message appears on the console while the routers attempt to establish a BGP session between them:
%RPM0-P:RP1 %KERN-6-INT: No BGP MD5 from [peer's IP address] :179 to [local router's IP address]:65524
Also, if you configure different passwords on the two routers, the following message appears on the console:
%RPM0-P:RP1 %KERN-6-INT: BGP MD5 password mismatch from [peer's IP address] : 11502 to [local router's IP address] :179
neighbor peer-group (assigning peers)
Allows you to assign one peer to an existing peer group.
Syntax Parameters
neighbor {ip-address | peer-group peer-group-name} dmzlink-bw
To delete a peer from a peer group, use the no neighbor {ip-address | peer-group peergroup-name} command.
To disable dmzlink-dw for the peer group, use the no neighbor ip-address dmzlink-dw command.
ip-address
Enter the IP address of the router to be included in the peer group.
peer-group-name Enter the name of a configured peer group.
dmzlink-bw
Enter the keyword dmzlink-bw to attach a link bandwidth to received routes. NOTE: If dmzlink-bw is configured for a peer, in order for the BGP peer to advertise the prefixes with dmzlink-bw attached to it, you must reset the the peer or peer-group using the clear ip bgp session command.
Border Gateway Protocol 365
Defaults
Not configured.
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Added the dmzlink-bw parameter. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
Related Commands
You can assign up to 256 peers to one peer group.
When you add a peer to a peer group, it inherits all the peer group's configured parameters. A peer cannot become part of a peer group if any of the following commands are configured on the peer:
neighbor advertisement-interval neighbor distribute-list neighbor route-map neighbor route-reflector-client
if a neighbor's configuration is more specific than its peer group's configuration, the neighbor may retain its configuration after it is added to the peer group. The neighbor's configuration does not affect outgoing updates.
A peer group must exist (be enabled) before you add a peer to it. If the peer group is disabled (shutdown), the peers within that group are also disabled (shutdown).
In BGP, you cannot associate a peer to a peer-group without configuring the remote-as for Internal BGP (IBGP) or External BGP (EBGP).
This command automatically restarts the neighbor session for the configuration to take effect.
clear ip bgp -- resets BGP sessions.
neighbor peer-group (creating group) -- creates a peer group.
show ip bgp peer-group -- views BGP peers.
show ip bgp neighbors -- views BGP neighbors configurations.
neighbor peer-group (creating group)
Allows you to create a peer group and assign it a name.
Syntax
neighbor peer-group-name peer-group To delete a peer group, use the no neighbor peer-group-name peer-group command.
366 Border Gateway Protocol
Parameters
peer-group-name Enter a text string up to 16 characters long as the name of the peer group.
Defaults
Not configured.
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
Related Commands
When you create a peer group, it is disabled (Shut mode).
neighbor peer-group (assigning peers) -- assigns routers to a peer group. neighbor remote-as -- assigns a indirectly connected AS to a neighbor or peer group. neighbor shutdown -- disables a peer or peer group.
neighbor peer-group passive
Enable passive peering on a BGP peer group, that is, the peer group does not send an OPEN message, but responds to one.
Syntax Parameters
neighbor peer-group-name peer-group passive [limit sessions]
To delete a passive peer-group, use the no neighbor peer-group-name peer-group passive command.
peer-group-name Enter a text string up to 16 characters long as the name of the peer group.
limit
(Optional) Enter the keyword limit to constrain the numbers of sessions for this peer-group. The range is from 2 to 256. The default is 256.
Defaults
Not configured.
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
Border Gateway Protocol 367
Usage Information
Related Commands
Version
9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.8.0 8.3.7.0 7.8.1.0 7.7.1.0
Description
Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced the limit keyword on the S4810. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
After you configure a peer group as passive, assign it a subnet using the neighbor softreconfiguration inbound command. For passive eBGP limits, the Remote AS must be different from the AS for this neighbor.
neighbor soft-reconfiguration inbound -- assigns a subnet to a dynamically configured BGP neighbor. neighbor remote-as -- assigns an indirectly connected AS to a neighbor or peer group.
neighbor remote-as
Create and specify the remote peer to the BGP neighbor.
Syntax Parameters
neighbor {ip-address | peer-group-name} remote-as number
To delete a remote AS entry, use the no neighbor {ip-address | peer-group-name} remote-as number command.
ip-address
Enter the IP address of the neighbor to enter the remote AS in its routing table.
peer-group-name Enter the name of the peer group to enter the remote AS into routing tables of all routers within the peer group.
number
Enter a number of the AS. The range is from 0 to 65535 (2 byte) or from 1 to 4294967295 (4 byte).
Defaults
Not configured.
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S4820T.
368 Border Gateway Protocol
Usage Information
Related Commands
Version
8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Description
Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Added 4-byte support.
To accept 4-byte formats before entering a 4 byte AS Number, configure your system. If the number parameter is the same as the AS number used in the router bgp command, the remote AS entry in the neighbor is considered an internal BGP peer entry. This command creates a peer and the newly created peer is disabled (Shutdown). This command automatically restarts the neighbor session for the configuration to take effect.
router bgp -- enters ROUTER BGP mode and configures routes in an AS. bgp four-octet-as-support -- enables 4-byte support for the BGP process.
neighbor remove-private-as
Remove private AS numbers from the AS-PATH of outgoing updates.
Syntax Parameters
neighbor {ip-address | peer-group-name} remove-private-as
To return to the default, use the no neighbor {ip-address | peer-group-name} removeprivate-as command.
ip-address
Enter the IP address of the neighbor to remove the private AS numbers.
peer-group-name Enter the name of the peer group to remove the private AS numbers.
Defaults
Disabled (that is, private AS number are not removed).
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Added 4-byte support.
Usage Information
Applies to EBGP neighbors only. Configure your system to accept 4-byte formats before entering a 4 byte AS Number.
Border Gateway Protocol 369
If the AS-PATH contains both public and private AS number or contains AS numbers of an EBGP neighbor, the private AS numbers are not removed. If a confederation contains private AS numbers in its AS-PATH, the software removes the private AS numbers only if they follow the confederation numbers in the AS path. Private AS numbers are from 64512 to 65535 (2 byte).
neighbor route-map
Apply an established route map to either incoming or outbound routes of a BGP neighbor or peer group.
Syntax Parameters
neighbor {ip-address | peer-group-name} route-map map-name {in | out}
To remove the route map, use the no neighbor {ip-address | peer-group-name} routemap map-name {in | out} command.
ip-address
Enter the IP address of the neighbor in dotted decimal format.
peer-group-name Enter the name of the peer group.
map-name
Enter the name of an established route map.
If the Route map is not configured, the default is deny (to drop all routes).
in
Enter the keyword in to filter inbound routes.
out
Enter the keyword out to filter outbound routes.
NOTE: This command sends routes to peers only if an outbound policy is
configured and if there is a change in the existing outbound policy.
Defaults
Not configured.
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
When you apply a route map to outbound routes, only routes that match at least one section of the route map are permitted.
If you identify a peer group by name, the peers in that peer group inherit the characteristics in the Route map used in this command. If you identify a peer by IP address, the Route map overwrites either the inbound or outbound policies on that peer.
370 Border Gateway Protocol
neighbor route-reflector-client
Configure the router as a route reflector and the specified neighbors as members of the cluster.
Syntax Parameters
neighbor {ip-address | peer-group-name} route-reflector-client
To remove one or more neighbors from a cluster, use the no neighbor {ip-address | peergroup-name} route-reflector-client command. If you delete all members of a cluster, you also delete the route-reflector configuration on the router.
ip-address
Enter the IP address of the neighbor in dotted decimal format.
peer-group-name Enter the name of the peer group.
All routers in the peer group receive routes from a route reflector.
Defaults
Not configured.
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
Related Commands
A route reflector reflects routes to the neighbors assigned to the cluster. Neighbors in the cluster do not need not to be fully meshed. By default, when you use no route reflector, the internal BGP (IBGP) speakers in the network must be fully meshed.
The first time you enter this command, the router configures as a route reflector and the specified BGP neighbors configure as clients in the route-reflector cluster.
When you remove all clients of a route reflector using the no neighbor route-reflector-client command, the router no longer functions as a route reflector.
If the clients of a route reflector are fully meshed, you can configure the route reflector to not reflect routes to specified clients by using the no bgp client-to-client reflection command.
This command automatically restarts the neighbor session for the configuration to take effect.
bgp client-to-client reflection -- enables route reflection between the route reflector and the clients.
Border Gateway Protocol 371
neighbor send-community
Send a COMMUNITY attribute to a BGP neighbor or peer group. A COMMUNITY attribute indicates that all routes with that attribute belong to the same community grouping.
Syntax Parameters
neighbor {ip-address | peer-group-name} send-community [extended | standard]
To disable sending a COMMUNITY attribute, use the no neighbor {ip-address | peer-groupname} send-community command.
ip-address
Enter the IP address of the peer router in dotted decimal format.
peer-group-name Enter the name of the peer group to send a COMMUNITY attribute to all routers within the peer group.
extended
(OPTIONAL) Enter the keyword extended to send extended community attribute.
standard
(OPTIONAL) Enter the keyword standard to send standard community attribute.
Defaults
Not configured and COMMUNITY attributes are not sent to neighbors.
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) Version 9.0.2.0 8.3.11.1 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
To configure a COMMUNITY attribute, use the set community command in ROUTE-MAP mode.
In order that settings corresponding to the neighbor send-community command take effect, you must execute the clear ip bgp command immediately after you execute the neighbor sendcommunity command.
If you do not set any of the optional parameters (standard or extended), then both standard as well as extended attributes are sent. If you set either the standard or extended parameter, only the attribute that is specified is sent.
neighbor sender-side-loopdetect
Enables sender-side loop detection for BGP.
Syntax
neighbor {ip-address | peer-group-name} sender-side-loopdetect
To disable sender-side loop detection, use the no neighbor {ip-address | peer-group-name} sender-side-loopdetect command.
372 Border Gateway Protocol
Parameters
ip-address
Enter the IP address of the neighbor in dotted decimal format.
peer-group-name Enter the name of the peer group to enable or disable all routers with in the peer group.
All routers in the peer group receive routes from a route reflector.
Defaults
Enabled.
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
This command enables sender-side-loopdetect for a specified BGP neighbor. BGP does not advertise a route to a peer if the AS-Path of the route already contains the peer's AS.
NOTE: If you configure a neighbor to accept such routes using the neighbor allowas-in command, you must disable sender-side loop detection for that neighbor.
Related Commands
bgp client-to-client reflection -- enables route reflection between the route reflector and the clients.
neighbor shutdown
Disable a BGP neighbor or peer group.
Syntax Parameters
neighbor {ip-address | peer-group-name} shutdown
To enable a disabled neighbor or peer group, use the neighbor {ip-address | peer-groupname}no shutdown command.
ip-address
Enter the IP address of the neighbor in dotted decimal format.
peer-group-name Enter the name of the peer group to disable or enable all routers within the peer group.
Defaults
Enabled (that is, BGP neighbors and peer groups are disabled.)
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Border Gateway Protocol 373
Usage Information
Related Commands
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Peers that are enabled within a peer group are disabled when their peer group is disabled. The neighbor shutdown command terminates all BGP sessions on the BGP neighbor or BGP peer group. Use this command with caution as it terminates the specified BGP sessions. When a neighbor or peer group is shut down, use the show ip bgp summary command to confirm its status.
show ip bgp summary -- displays the current BGP configuration. show ip bgp neighbors -- displays the current BGP neighbors.
neighbor soft-reconfiguration inbound
Enable soft-reconfiguration for BGP.
Syntax Parameters
neighbor {ip-address | peer-group-name} soft-reconfiguration inbound
To disable, use the no neighbor {ip-address | peer-group-name} softreconfiguration inbound command.
ip-address
Enter the IP address of the neighbor in dotted decimal format.
peer-group-name Enter the name of the peer group to disable or enable all routers within the peer group.
Defaults
Disabled
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T.
374 Border Gateway Protocol
Usage Information
Related Commands
Version
8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0 7.4.1.0
Description
Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced.
This command enables soft-reconfiguration for the BGP neighbor specified. BGP stores all the updates the neighbor receives but does not reset the peer-session.
You cannot set this configuration for a peer that is associated with a peer group. Similarly, you cannot associate a peer to a peer group if that peer is already configured with these settings.
CAUTION: Inbound update storage is a memory-intensive operation. The entire BGP update database from the neighbor is stored in memory regardless of the inbound policy results applied on the neighbor.
NOTE: This command is supported in BGP Router Configuration mode for IPv4 Unicast address only.
show ip bgp neighbors -- displays routes received by a neighbor.
neighbor timers
Set keepalive and hold time timers for a BGP neighbor or a peer group.
Syntax Parameters
neighbor {ip-address | peer-group-name} timers keepalive holdtime
To return to the default values, use the no neighbor {ip-address | peer-group-name} timers command.
ip-address
Enter the IP address of the peer router in dotted decimal format.
peer-group-name Enter the name of the peer group to set the timers for all routers within the peer group.
keepalive
Enter a number for the time interval, in seconds, between keepalive messages sent to the neighbor routers. The range is from 1 to 65535. The default is 60 seconds.
holdtime
Enter a number for the time interval, in seconds, between the last keepalive message and declaring the router dead. The range is from 3 to 65535. The default is 180 seconds.
Defaults
keepalive = 60 seconds holdtime = 180 seconds
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON.
Border Gateway Protocol 375
Usage Information
Version
9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Description
Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Timer values configured with the neighbor timers command override the timer values configured with any other command.
When two neighbors, configured with different keepalive and holdtime values, negotiate for new values, the resulting values are as follows:
the lower of the holdtime value is the new holdtime value, and whichever is the lower value; one-third of the new holdtime value, or the configured keepalive
value, is the new keepalive value.
neighbor update-source
Enable the E-Series software to use Loopback interfaces for TCP connections for BGP sessions.
Syntax Parameters
neighbor {ip-address | peer-group-name} update-source interface
To use the closest interface, use the no neighbor {ip-address | peer-group-name} update-source interface command.
ip-address
Enter the IP address of the peer router in dotted decimal format.
peer-group-name Enter the name of the peer group to disable all routers within the peer group.
interface
Enter the keyword loopback then a number of the Loopback interface. The range is from 0 to 16383.
Defaults
Not configured.
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
376 Border Gateway Protocol
Usage Information
Version
7.8.1.0 7.7.1.0
Description
Introduced on the S-Series. Introduced on the C-Series.
Loopback interfaces are up constantly and the BGP session may need one interface constantly up to stabilize the session. The neighbor update-source command is not necessary for directly connected internal BGP sessions.
Neighbors are sorted according to the source and destination ip addresses. If an update-source ip address exists, then the source ip address determines the order in which the neighbors are displayed.
neighbor weight
Assign a weight to the neighbor connection, which is used to determine the best path.
Syntax Parameters
neighbor {ip-address | peer-group-name} weight weight
To remove a weight value, use the no neighbor {ip-address | peer-group-name} weight command.
ip-address
Enter the IP address of the peer router in dotted decimal format.
peer-group-name Enter the name of the peer group to disable all routers within the peer group.
weight
Enter a number as the weight. The range is from 0 to 65535. The default is 0.
Defaults
0
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
In the Dell Networking OS best path selection process, the path with the highest weight value is preferred.
NOTE: In the Dell Networking OS best-path selection process, the path with the highest weight value is preferred.
If you configure the set weight command in a route map applied to this neighbor, the weight set in that command overrides the weight set in the neighbor weight command.
Border Gateway Protocol 377
Related Commands
set weight -- assigns a weight to all paths meeting the route map criteria.
network
Specify the networks for the BGP process and enter them in the BGP routing table.
Syntax Parameters
network ip-address mask [route-map map-name]
To remove a network, use the no network ip-address mask [route-map map-name] command.
ip-address mask
route-map mapname
Enter an IP address in dotted decimal format of the network.
Enter the mask of the IP address in the slash prefix length format (for example, /24).
The mask appears in command outputs in dotted decimal format (A.B.C.D).
(OPTIONAL) Enter the keyword route-map then the name of an established route map.
Only the following ROUTE-MAP mode commands are supported:
match ip address set community set local-preference set metric set next-hop set origin set weight
If the route map is not configured, the default is deny (to drop all routes).
Defaults
Not configured.
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
378 Border Gateway Protocol
Usage Information
Related Commands
Dell Networking OS software resolves the network address the network command configures with the routes in the main routing table to ensure that the networks are reachable using non-BGP routes and non-default routes.
As BGP does not query next-hop information corresponding to locally originated routes, a local route with an unreachable next-hop is chosen as the best route.
When a combination of locally originated and peer originated routes occurs, both these routes will exist in the RTM. However, only the best route is kept active in the RTM and the remaining route is rendered inactive.
It is possible to keep only one locally originated route in the BGP database. Network command has preference over the re-distributed routes. When the locally originated route is no longer present in the database the other route is automatically installed.
In BGP, the next-hop for the route is calculated from the information that is acquired through IGP or static routes.
redistribute -- redistributes routes into BGP.
network backdoor
Specify this IGP route as the preferred route.
Syntax Parameters
network ip-address mask backdoor To remove a network, use the no network ip-address mask backdoor command.
ip-address mask
Enter an IP address in dotted decimal format of the network.
Enter the mask of the IP address in the slash prefix length format (for example, /24). The mask appears in command outputs in dotted decimal format (A.B.C.D).
Defaults
Not configured.
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
Although Dell Networking OS does not generate a route due to the backdoor config, there is an option for injecting/sourcing a local route in the presence of network backdoor config on a learned route.
Border Gateway Protocol 379
permit bandwidth
Enables you to specify link band width extended-community attribute as the matching criteria to permit incoming or outgoing traffic.
Syntax
permit bandwidth To disable this setting, enter the no permit bandwidth command.
Parameters
bandwidth
Enter the keyword bandwidth to specify extended-community attribute as the matching criteria for permitting traffic. The range is from 0 to 102400.
Defaults
N/A
Command Modes EXTENDED COMMUNITY LIST
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S-Series.
Related Commands
deny bandwidth � link band width extended-community attribute as the matching criteria to deny incoming or outgoing traffic..
redistribute
Redistribute routes into BGP.
Syntax Parameters
redistribute {connected | static} [route-map map-name] To disable redistribution, use the no redistribution {connected | static} command.
connected static
route-map mapname
Enter the keyword connected to redistribute routes from physically connected interfaces.
Enter the keyword static to redistribute manually configured routes.
These routes are treated as incomplete routes.
(OPTIONAL) Enter the keyword route-map then the name of an established route map.
Only the following ROUTE-MAP mode commands are supported:
match ip address set community set local-preference set metric set next-hop set origin set weight
If the route map is not configured, the default is deny (to drop all routes).
Defaults
Not configured.
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
380 Border Gateway Protocol
Usage Information
Related Commands
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0
7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced the ability to substitute IGP cost for MED when a peer/peer-group outbound route-map is set as internal. Introduced on the S-Series. Introduced on the C-Series.
You can use the redistribute command to advertise the IGP cost as the MED on redistributed routes. When you set the route-map with metric-type internal and applied outbound to an EBGP peer/peergroup, the advertised routes corresponding to those peer/peer-groups have the IGP cost set as MED.
If you do not configure the default-metric command, in addition to the redistribute command, or there is no route map to set the metric, the metric for redistributed static and connected is "0".
To redistribute the default route (0.0.0.0/0), configure the neighbor default-originate command.
As BGP does not query next-hop information corresponding to locally originated routes, a local route with an unreachable next-hop is chosen as the best route.
When a combination of locally originated and peer originated routes occurs, both these routes will exist in the RTM. However, only the best route is kept active in the RTM and the remaining route is rendered inactive.
It is possible to keep only one locally originated route in the BGP database. Network command has preference over the re-distributed routes. When the locally originated route is no longer present in the database the other route is automatically installed.
neighbor default-originate -- injects the default route.
redistribute ospf
Redistribute OSPF routes into BGP.
Syntax Parameters
redistribute ospf process-id [[match external {1 | 2}] [match internal]] [route-map map-name]
To stop redistribution of OSPF routes, use the no redistribute ospf process-id command.
process-id
Enter the number of the OSPF process. The range is from 1 to 65535.
match external {1 (OPTIONAL) Enter the keywords match external to redistribute OSPF external
| 2}
routes. You can specify 1 or 2 to redistribute those routes only.
match internal
(OPTIONAL) Enter the keywords match internal to redistribute OSPF internal routes only.
Border Gateway Protocol 381
route-map map- (OPTIONAL) Enter the keywords route-map then the name of a configured route
name
map.
Defaults
Not configured.
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0
7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced the ability to substitute IGP cost for MED when a peer/peer-group outbound route-map is set as internal. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
You can use the redistribute command to advertise the IGP cost as the MED on redistributed routes. When you set the route-map with metric-type internal and apply outbound to an EBGP peer/peer-group, the advertised routes corresponding to those peer/peer-groups have the IGP cost set as MED.
When you enter the redistribute isis process-id command without any other parameters, Dell Networking OS redistributes all OSPF internal routes, external type 1 routes, and external type 2 routes. RFC does not support this feature.
router bgp
To configure and enable BGP, enter ROUTER BGP mode.
Syntax Parameters
router bgp as-number To disable BGP, use the no router bgp as-number command.
as-number
Enter the AS number. The range is from 1 to 65535 (2 byte), from 1 to 4294967295 (4 byte), or from 0.1 to 65535.65535 (dotted format).
Defaults
Not enabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
382 Border Gateway Protocol
Usage Information
Example
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
At least one interface must be in Layer 3 mode for the router bgp command to be accepted. If no interfaces are enabled for Layer 3, an error message appears:
% Error: No router id configured
BGP does not allow 23456 (AS-TRANS) as a configured AS number.
Dell(conf)#router bgp 3 Dell(conf-router_bgp)#
set extcommunity bandwidth
Enables you to set extended community bandwidth.
Syntax
set extcommunity bandwidth To disable extended community bandwidth, enter the no set extcommunity bandwidth command.
Parameters
bandwidth
Enter the keyword bandwidth to enable extended community bandwidth. The range is from 0 to 102400.
Defaults
N/A
Command Modes ROUTER MAP
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S-Series.
Usage Information
A new policy command is introduced in order to attach the Link Bandwidth extended community only to the prefixes that are received from a neighbor that satisfy the desired conditions. This command is relevant for both inbound as well as outbound policy handling (for received prefixes). Also, there is no change to the set of supported conditions or filters.
During configuration, the bandwidth is specified in Mbps, not in bytes/second. While creating the actual LB extended community, the system will attach the AS number and encode the bandwidth in floating point format.
Border Gateway Protocol 383
show capture bgp-pdu neighbor
Display BGP packet capture information for an IPv4 address on the system.
Syntax Parameters
show capture bgp-pdu neighbor ipv4-address
ipv4-address
Enter the IPv4 address (in dotted decimal format) of the BGP address to display packet information for that address.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced.
Example
Dell(conf-router_bgp)#show capture bgp-pdu neighbor 20.20.20.2 Incoming packet capture enabled for BGP neighbor 20.20.20.2 Available buffer size 40958758, 26 packet(s) captured using 680 bytes
PDU[1] : len 101, captured 00:34:51 ago ffffffff ffffffff ffffffff ffffffff 00650100 00000013 00000000
00000000 419ef06c 00000000 00000000 00000000 00000000 00000000 0181a1e4 0181a25c 41af92c0
00000000 00000000 00000000 00000000 00000001 0181a1e4 0181a25c 41af9400 00000000
PDU[2] : len 19, captured 00:34:51 ago ffffffff ffffffff ffffffff ffffffff 00130400
PDU[3] : len 19, captured 00:34:51 ago ffffffff ffffffff ffffffff ffffffff 00130400
[. . .] Outgoing packet capture enabled for BGP neighbor 20.20.20.2 Available buffer size 40958758, 27 packet(s) captured using 562 bytes
PDU[1] : len 41, captured 00:34:52 ago ffffffff ffffffff ffffffff ffffffff 00290104 000100b4 14141401
0c020a01 04000100 01020080 00000000
PDU[2] : len 19, captured 00:34:51 ago ffffffff ffffffff ffffffff ffffffff 00130400
PDU[3] : len 19, captured 00:34:50 ago ffffffff ffffffff ffffffff ffffffff 00130400
[. . .] Dell#
384 Border Gateway Protocol
show config
View the current ROUTER BGP configuration.
Syntax
show config
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Example
Dell(conf-router_bgp)#show config ! router bgp 100
network 1.1.11.1/32 network 1.1.12.1/32 network 1.1.13.1/32 neighbor 10.1.1.2 remote-as 200 neighbor 10.1.1.2 no shutdown
show ip bgp
View the current BGP IPv4 routing table for the system.
Syntax Parameters
show ip bgp [vrf vrf-name] [ipv4 unicast] [network [network-mask] [longerprefixes]]
vrf vrf-name ipv4 unicast network network-mask
(OPTIONAL) Enter the keyword vrf and then the name of the VRF to view ipv4� unicast route information corresponding to that VRF.
(OPTIONAL) Enter the keywords ipv4 unicast to view information only related to ipv4 unicast routes.
(OPTIONAL) Enter the network address (in dotted decimal format) of the BGP network to view information only on that network.
(OPTIONAL) Enter the network mask (in slash prefix format) of the BGP network address.
Border Gateway Protocol 385
longer-prefixes (OPTIONAL) Enter the keywords longer-prefixes to view all routes with a common prefix.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.8.0
8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added the add-path option to the S4810. Output on the S4810 shows the ADDPATH parameters. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
Example
When you enable the bgp non-deterministic-med command, the show ip bgp command output for a BGP route does not list the INACTIVE reason.
In BGP, this command displays the exact reason why the route is discarded.
The following describes the show ip bgp command shown in the following example.
Field
Description
Network Next Hop
Metric LocPrf Weight Path
Displays the destination network prefix of each BGP route. Displays the next hop address of the BGP router. If 0.0.0.0 is listed in this column, then local routes exist in the routing table. Displays the BGP route's metric, if assigned. Displays the BGP LOCAL_PREF attribute for the route. Displays the route's weight. Lists all the ASs the route passed through to reach the destination network.
The show ip bgp command displays the dmzlink-dw details only if dmzlink-bw is enabled using the bgp dmzlink-dw command.
Dell#show ip bgp BGP local RIB : Routes to be Added 0, Replaced 0, Withdrawn 0 BGP local router ID is 192.168.11.5 Status codes: s suppressed, S stale, d dampened, h history, * valid, > best Path source: I - internal, a - aggregate, c - confed-external, r redistributed
n - network, D - denied, S - stale Origin codes: i - IGP, e - EGP, ? - incomplete
Network
Next Hop
Metric LocPrf Weight Path
*> 55.0.0.0/24 172.16.0.2
0 200 i
386 Border Gateway Protocol
*> 66.0.0.0/24 172.16.0.2
0 200 i
Related Commands
All the show and debugs commands display the link band width extended-community prefixed with DMZLink-bw along with other extended communities.
Dell#show ip bgp 3.3.3.0/24 BGP routing table entry for 3.3.3.0/24 Paths: (1 available, table Default-IP-Routing-Table.) Not advertised to any peer Received from :
1.1.1.2 (3.3.3.1) Best AS_PATH : Next-Hop : 1.1.1.2, Cost : 0 Origin IGP, Metric 0, LocalPref 100, Weight 0, internal
Extended Communities : DMZ-Link Bw: 2000 kbytes*
show ip bgp community -- views the BGP communities. neighbor maximum-prefix -- controls the number of network prefixes received.
show ip bgp cluster-list
View BGP neighbors in a specific cluster.
Syntax Parameters
show ip bgp [vrf vrf-name] [ipv4 {multicast | unicast} | ipv6 unicast] cluster-list [cluster-id]
vrf vrf-name ipv4 multicast ipv4 unicast ipv6 unicast cluster-id
(OPTIONAL) Enter the keyword vrf and then the name of the VRF to view cluster information of BGP neighbors corresponding to that VRF.
(OPTIONAL) Enter the keywords ipv4 followed by the keyword multicast to view information related only to ipv4 multicast routes.
(OPTIONAL) Enter the keyword ipv4 followed by the keyword unicast to view information related only to ipv4 multicast routes.
(OPTIONAL) Enter the keyword ipv6 followed by the keyword unicast to view information related to only to the ipv6 unicast routes.
(OPTIONAL) Enter the cluster id in dotted decimal format. The range is 1 -- 4294967295.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4.(0.0) 9.2(1.0) 9.0.2.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Added the ipv4 multicast and ipv6 unicast parameters. Added support for VRF. Introduced on the Z9500. Introduced on the S6000.
Border Gateway Protocol 387
Usage Information
Example
Version
8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Description
Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
The following describes the show ip bgp cluster-list command shown in the following example.
Field
Description
Network
Displays the destination network prefix of each BGP route.
Next Hop
Displays the next hop address of the BGP router. If 0.0.0.0 is listed in this column, then local routes exist in the routing table.
Metric
Displays the BGP route's metric, if assigned.
LocPrf
Displays the BGP LOCAL_PREF attribute for the route.
Weight
Displays the route's weight.
Path
Lists all the ASs the route passed through to reach the destination network.
Dell#show ip bgp cluster-list BGP local RIB : Routes to be Added 0, Replaced 0, Withdrawn 0 BGP local router ID is 192.168.11.6 Status codes: s suppressed, S stale, d dampened, h history, * valid, > best Path source: I - internal, a - aggregate, c - confed-external, r redistributed
n - network, D - denied, S - stale Origin codes: i - IGP, e - EGP, ? - incomplete
Network *>I 55.0.0.0/24 *>I 66.0.0.0/24 *>I 77.0.0.0/24
Next Hop 172.16.0.2 172.16.0.2 172.16.0.2
Metric
LocPrf Weight Path
0
0 400 500 600 i
0
0 500 i
0
0 i
Dell#show ip bgp cluster-list 4.4.4.4 BGP local RIB : Routes to be Added 0, Replaced 0, Withdrawn 0 BGP local router ID is 192.168.11.6 Status codes: s suppressed, S stale, d dampened, h history, * valid, > best Path source: I - internal, a - aggregate, c - confed-external, r redistributed
n - network, D - denied, S - stale Origin codes: i - IGP, e - EGP, ? - incomplete
Network *>I 55.0.0.0/24 *>I 66.0.0.0/24 *>I 77.0.0.0/24 Dell#
Next Hop 172.16.0.2 172.16.0.2 172.16.0.2
Metric
LocPrf Weight Path
0
0 400 500 600 i
0
0 500 i
0
0 i
show ip bgp community
View information on all routes with Community attributes or view specific BGP community groups.
Syntax
show ip bgp [vrf vrf-name] [ipv4 {multicast | unicast} | ipv6 unicast] community [community-number] [local-as] [no-export] [no-advertise]
388 Border Gateway Protocol
Parameters
vrf vrf-name ipv4 unicast ipv4 multicast ipv6 unicast communitynumber
local-AS
no-advertise
no-export
(OPTIONAL) Enter the keywords vrf and then the name of the VRF to view information either on all routes with community attributes or specific BGP community routes corresponding to that VRF.
(OPTIONAL) Enter the keywords ipv4 followed by the keyword unicast to view information related only to ipv4 unicast routes.
(OPTIONAL) Enter the keyword ipv4 followed by the keyword multicast to view information related only to ipv4 multicast routes.
(OPTIONAL) Enter the keyword ipv6 followed by the keyword unicast to view information related only to ipv6 unicast routes.
Enter the community number in AA:NN format where AA is the AS number (2 bytes) and NN is a value specific to that autonomous system.
You can specify up to eight community numbers to view information on those community groups.
Enter the keywords local-AS to view all routes with the COMMUNITY attribute of NO_EXPORT_SUBCONFED.
All routes with the NO_EXPORT_SUBCONFED (0xFFFFFF03) community attribute must not be advertised to external BGP peers.
Enter the keywords no-advertise to view all routes containing the well-known community attribute of NO_ADVERTISE.
All routes with the NO_ADVERTISE (0xFFFFFF02) community attribute must not be advertised to other BGP peers.
Enter the keywords no-export to view all routes containing the well-known community attribute of NO_EXPORT.
All routes with the NO_EXPORT (0xFFFFFF01) community attribute must not be advertised outside a BGP confederation boundary.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4.(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Added the ipv4 multicast and ipv6 unicast parameters. Added support for VRF. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
To view the total number of COMMUNITY attributes found, use the show ip bgp summary command. The text line above the route table states the number of COMMUNITY attributes found.
Border Gateway Protocol 389
Example
The show ip bgp community command without any parameters lists BGP routes with at least one BGP community attribute and the output is the same as for the show ip bgp command output.
The following describes the show ip bgp community command shown in the following example.
Field
Description
Network Next Hop
Metric LocPrf Weight Path
Displays the destination network prefix of each BGP route. Displays the next hop address of the BGP router. If 0.0.0.0 is listed in this column, then local routes exist in the routing table. Displays the BGP route's metric, if assigned. Displays the BGP LOCAL_PREF attribute for the route. Displays the route's weight. Lists all the ASs the route passed through to reach the destination network.
Dell#show ip bgp community ?
local-AS
Do not export outside local AS (well-known community)
no-advertise Do not advertise to any peer (well-known community)
no-export
Do not export to next AS (well-known community)
aa:nn
Community number in aa:nn format
|
Pipe through a command
Dell#show ip bgp community BGP local RIB : Routes to be Added 0, Replaced 0, Withdrawn 0 BGP local router ID is 192.168.11.5 Status codes: s suppressed, S stale, d dampened, h history, * valid, > best Path source: I - internal, a - aggregate, c - confed-external, r redistributed
n - network, D - denied, S - stale Origin codes: i - IGP, e - EGP, ? - incomplete
Network *> 55.0.0.0/24 *> 66.0.0.0/24
Next Hop
Metric
172.16.0.2
172.16.0.2
LocPrf Weight Path 0 200 i 0 200 i
Dell#show ip bgp community no-advertise BGP local RIB : Routes to be Added 0, Replaced 0, Withdrawn 0 BGP local router ID is 192.168.11.5 Status codes: s suppressed, S stale, d dampened, h history, * valid, > best Path source: I - internal, a - aggregate, c - confed-external, r redistributed
n - network, D - denied, S - stale Origin codes: i - IGP, e - EGP, ? - incomplete
Network
Next Hop
Metric
*> 66.0.0.0/24 172.16.0.2
LocPrf Weight Path 0 200 i
show ip bgp community-list
View routes that a specific community list affects.
Syntax Parameters
show ip bgp [vrf vrf-name] [ipv4 {unicast | multicast} | ipv6 unicast] community-list community-list-name [exact-match]
vrf vrf-name ipv4 unicast
(OPTIONAL) Enter the keywords vrf and then the name of the VRF to view routes affected by a specific community list corresponding to that VRF.
(OPTIONAL) Enter the keywords ipv4 unicast to view information only related to ipv4 unicast routes.
390 Border Gateway Protocol
ipv4 multicast
ipv6 unicast
community-listname exact-match
(OPTIONAL) Enter the keyword ipv4 followed by the keyword multicast to view information related only to ipv4 multicast routes. (OPTIONAL) Enter the keyword ipv6 followed by the keyword unicast to view information related only to ipv6 unicast routes. Enter the name of a configured IP community list (maximum 140 characters).
Enter the keyword for an exact match of the communities.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4.(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Added ipv4 multicast and ipv6 unicast parameters. Added support for VRF. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
The show ip bgp community-list command without any parameters lists BGP routes matching the Community List and the output is the same as for the show ip bgp command output.
The following describes the show ip bgp community-list pass command shown in the following example.
Field
Description
Network Next Hop
Metric LocPrf Weight Path
Displays the destination network prefix of each BGP route. Displays the next hop address of the BGP router. If 0.0.0.0 is listed in this column, then local routes exist in the routing table. Displays the BGP route's metric, if assigned. Displays the BGP LOCAL_PREF attribute for the route. Displays the route's weight. Lists all the ASs the route passed through to reach the destination network.
Example
Dell#conf t Dell(conf)#ip community-list cl1 Dell(config-community-list)#permit 1000:1 Dell(config-community-list)#end Dell#show ip bgp community-list cl1 BGP local RIB : Routes to be Added 0, Replaced 0, Withdrawn 0 BGP local router ID is 192.168.11.5 Status codes: s suppressed, S stale, d dampened, h history, * valid, >
Border Gateway Protocol 391
best Path source: I - internal, a - aggregate, c - confed-external, r redistributed
n - network, D - denied, S - stale Origin codes: i - IGP, e - EGP, ? - incomplete
Network
Next Hop
Metric
LocPrf Weight Path
*> 55.0.0.0/24
172.16.0.2
0 200 i
Dell#show ip bgp 55.0.0.0/24
BGP routing table entry for 55.0.0.0/24
Paths: (1 available, table Default-IP-Routing-Table.)
Not advertised to any peer
Received from : 172.16.0.2 (172.16.0.2) AS_PATH : 200
Best
Next-Hop : 172.16.0.2, Cost : 0 Origin IGP, Metric 4294967295 (Default), LocalPref 100, Weight 0, external
Communities :
200:1
1000:1
3000:1
show ip bgp dampened-paths
View BGP routes that are dampened (non-active).
Syntax Parameters
show ip bgp [vrf vrf-name] [ipv4 {multicast | unicast} | ipv6 unicast] dampened-paths
vrf vrf-name ipv4 unicast ipv6 unicast
(OPTIONAL) Enter the keywords vrf and then the name of the VRF to view routes that are affected by a specific community list corresponding to that VRF.
(OPTIONAL) Enter the keywords ipv4 followed by the keyword unicast to view information related only to ipv4 unicast routes.
(OPTIONAL) Enter the keyword ipv6 followed by the keyword unicast to view information related only to ipv6 unicast routes.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Added the ipv4 multicast and ipv6 unicast parameters. Added support for VRF. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T.
392 Border Gateway Protocol
Usage Information
Example
Version
8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Description
Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
To determine a BGP session flap, both a route-down event and a subsequent route-up event corresponding to a single route are considered. As a result, a flap event is penalized only one time during the route-down event. The subsequent route-up event corresponding to the same route is not considered as a flap and is not penalized.
The history paths that the show ip bgp command displays contain only the prefix and the next-hop information. The next-hop information shows the ip address of the neighbor. It does not show the actual next-hop details.
The following describes the show ip bgp damp command shown in the following example.
Field
Description
Network
Displays the network ID to which the route is dampened.
From
Displays the IP address of the neighbor advertising the dampened route.
Reuse
Displays the hour:minutes:seconds until the dampened route is available.
Path
Lists all the ASs the dampened route passed through to reach the destination network.
Dell#show ip bgp dampened-paths BGP local RIB : Routes to be Added 0, Replaced 0, Withdrawn 0 BGP local router ID is 192.168.11.5 Status codes: s suppressed, S stale, d dampened, h history, * valid, > best Path source: I - internal, a - aggregate, c - confed-external, r redistributed
n - network, D - denied, S - stale Origin codes: i - IGP, e - EGP, ? - incomplete
Network
From
Reuse
Path
d 55.0.0.0/24
172.16.0.2
00:36:23
200
Dell#
show ip bgp detail
Display BGP internal information for the IPv4 Unicast address family.
Syntax
show ip bgp [ipv4 unicast] detail
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Border Gateway Protocol 393
Example
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0 7.5.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced.
Dell#show ip bgp detail Detail information for BGP Node bgpNdP 0x41a17000 : NdTmrP 0x41a17000 : NdKATmrP 0x41a17014 : NdTics 74857 : NhLocAS 1 : NdState 2 : NdRPMPrim 1 : NdListSoc 13 NdAuto 1 : NdEqCost 1 : NdSync 0 : NdDefOrg 0 NdV6ListSoc 14 NdDefDid 0 : NdConfedId 0 : NdMedConfed 0 : NdMedMissVal -1 : NdIgnrIllId 0 : NdRRC2C 1 : NdClstId 33686273 : NdPaTblP 0x41a19088 NdASPTblP 0x41a19090 : NdCommTblP 0x41a19098 : NhOptTransTblP 0x41a190a0 : NdRRClsTblP 0x41a190a8 NdPktPA 0 : NdLocCBP 0x41a6f000 : NdTmpPAP 0x419efc80 : NdTmpASPAP 0x41a25000 : NdTmpCommP 0x41a25800 NdTmpRRClP 0x41a4b000 : NdTmpOptP 0x41a4b800 : NdTmpNHP : NdOrigPAP 0 NdOrgNHP 0 : NdModPathP 0x419efcc0 : NdModASPAP 0x41a4c000 : NdModCommP 0x41a4c800 NdModOptP 0x41a4d000 : NdModNHP : NdComSortBufP 0x41a19110 : NdComSortHdP 0x41a19d04 : NdUpdAFMsk 0 : AFRstSet 0x41a1a298 : NHopDfrdHdP 0x41a1a3e0 : NumNhDfrd 0 : CfgHdrAFMsk 1 AFChkNetTmrP 0x41ee705c : AFRtDamp 0 : AlwysCmpMed 0 : LocrHld 10 : LocrRem 10 : softReconfig 0x41a1a58c DefMet 0 : AutoSumm 1 : NhopsP 0x41a0d100 : Starts 0 : Stops 0 : Opens 0 Closes 0 : Fails 0 : Fatals 0 : ConnExps 0 : HldExps 0 : KeepExps 0 RxOpens 0 : RxKeeps 0 : RxUpds 0 : RxNotifs 0 : TxUpds 0 : TxNotifs 0 BadEvts 0 : SynFails 0 : RxeCodeP 0x41a1b6b8 : RxHdrCodeP 0x41a1b6d4 : RxOpCodeP 0x41a1b6e4 RxUpdCodeP 0x41a1b704 : TxEcodeP 0x41a1b734 : TxHdrcodeP 0x41a1b750 : TxOpCodeP 0x41a1b760 TxUpdCodeP 0x41a1b780 : TrEvt 0 : LocPref 100 : tmpPathP 0x41a1b7b8 : LogNbrChgs 1 RecursiveNH 1 : PgCfgId 0 : KeepAlive 0 : HldTime 0 : DioHdl 0 : AggrValTmrP 0x41ee7024 UpdNetTmrP 0 : RedistTmrP 0x41ee7094 : PeerChgTmrP 0 : CleanRibTmrP 0x41ee7104 PeerUpdTmrP 0x41ee70cc : DfrdNHTmrP 0x41ee7174 : DfrdRtselTmrP 0x41ee713c : FastExtFallover 1 : FastIntFallover 0 : Enforce1stAS 1 PeerIdBitsP 0x41967120 : softOutSz 16 : RibUpdCtxCBP 0 UpdPeerCtxCBP 0 : UpdPeerCtxAFI 0 : TcpioCtxCB 0 : RedistBlk 1 NextCBPurg 1101119536 : NumPeerToPurge 0 : PeerIBGPCnt 0 : NonDet 0 : DfrdPathSel 0
394 Border Gateway Protocol
BGPRst 0 : NumGrCfg 1 : DfrdTmestmp 0 : SnmpTrps 0 : IgnrBestPthASP 0 RstOn 1 : RstMod 1 : RstRole 2 : AFFalgs 7 : RstInt 120 : MaxeorExtInt 361 FixedPartCrt 1 : VarParCrt 1 Packet Capture max allowed length 40960000 : current length 0 Peer Grp List Nbr List Confed Peer List Address Family specific Information AFIndex 0 NdSpFlag 0x41a190b0 : AFRttP 0x41a0d200 : NdRTMMkrP 0x41a19d28 : NdRTMAFTblVer 0 : NdRibCtxAddr 1101110688 NdRibCtxAddrLen 255 : NdAFPrefix 0 : NdAfNLRIP 0 : NdAFNLRILen 0 : NdAFWPtrP 0 NdAFWLen 0 : NdAfNH : NdAFRedRttP 0x41a0d400 : NdRecCtxAdd 1101110868 NdRedCtxAddrLen 255 : NdAfRedMkrP 0x41a19e88 : AFAggRttP 0x41a0d600 : AfAggCtxAddr 1101111028 : AfAggrCtxAddrLen 255 AfNumAggrPfx 0 : AfNumAggrASSet 0 : AfNumSuppmap 0 : AfNumAggrValidPfx 0 : AfMPathRttP 0x41a0d700 MpathCtxAddr 1101111140 : MpathCtxAddrlen 255 : AfEorSet 0x41a19f98 : NumDfrdPfx 0 AfActPeerHd 0x41a1a3a4 : AfExtDist 1101112312 : AfIntDist 200 : AfLocDist 200 AfNumRRc 0 : AfRR 0 : AfNetRttP 0x41a0d300 : AfNetCtxAddr 1101112392 : AfNetCtxAddrlen 255 AfNwCtxAddr 1101112443 : AfNwCtxAddrlen 255 : AfNetBKDrRttP 0x41a0d500 : AfNetBKDRCnt 0 : AfDampHLife 0 AfDampReuse 0 : AfDampSupp 0 : AfDampMaxHld 0 : AfDampCeiling 0 : AfDampRmapP
show ip bgp extcommunity-list
View information on all routes with Extended Community attributes.
Syntax Parameters
show ip bgp [vrf vrf-name] [ipv4 {multicast | unicast} | ipv6 unicast] extcommunity-list [list name]
vrf vrf-name
ipv4 multicast ipv4 unicast ipv6 unicast list name
(OPTIONAL) Enter the keywords vrf and then the name of the VRF to view information on all routes with extended community attributes corresponding to that VRF.
(OPTIONAL) Enter the keyword ipv4 followed by the keyword multicast to view information related only to ipv4 multicast routes.
(OPTIONAL) Enter the keywords ipv4 unicast to view information only related to ipv4 unicast routes.
(OPTIONAL) Enter the keyword ipv6 followed by the keyword unicast to view information related only to ipv6 unicast routes.
Enter the extended community list name you wish to view. The range is 140 characters.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Border Gateway Protocol 395
Usage Information
Example
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Added the ipv4 multicast and ipv6 unicast parameters. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
To view the total number of COMMUNITY attributes found, use the show ip bgp summary command. The text line above the route table states the number of COMMUNITY attributes found.
The show ip bgp community command without any parameters lists BGP routes with at least one BGP community attribute and the output is the same as for the show ip bgp command output.
Dell#show run extcommunity-list ! ip extcommunity-list ecl1
permit rt 100:4 permit soo 40:4 Dell#show ip bgp extcommunity-list ecl1 BGP local RIB : Routes to be Added 0, Replaced 0, Withdrawn 0 BGP local router ID is 192.168.11.5 Status codes: s suppressed, S stale, d dampened, h history, * valid, > best Path source: I - internal, a - aggregate, c - confed-external, r redistributed
n - network, D - denied, S - stale Origin codes: i - IGP, e - EGP, ? - incomplete
Network
Next Hop
Metric
*> 55.0.0.0/24
172.16.0.2
*> 77.0.0.0/24
172.16.0.2
Dell#show ip bgp extcommunity-list ec
% Error: Extended community list does not exist.
LocPrf Weight Path 0 200 i 0 200 i
Dell#
show ip bgp filter-list
View the routes that match the filter lists.
Syntax Parameters
show ip bgp [vrf vrf-name] [ipv4 {multicast | unicast} | ipv6 unicast] filter-list as-path-name
vrf vrf-name ipv4 multicast ipv4 unicast
(OPTIONAL) Enter the keyword vrf and then the name of the VRF to view route information that matches the filter lists corresponding to that VRF.
(OPTIONAL) Enter the keyword ipv4 followed by the keyword multicast to view information related only to ipv4 multicast routes.
(OPTIONAL) Enter the keyword ipv4 followed by the keyword unicast to view information related only to ipv4 unicast routes.
396 Border Gateway Protocol
ipv6 unicast as-path-name
(OPTIONAL) Enter the keyword ipv6 followed by the keyword unicast to view information related only to ipv6 unicast routes.
Enter an AS-PATH access list name. The range is 140 characters.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Added the ipv4 multicast and ipv6 unicast parameters. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
The following describes the show ip bgp filter-list hello command shown in the following example.
Field
Description
Path source codes
Lists the path sources shown to the right of the last AS number in the Path column:
i = internal route entry a = aggregate route entry c = external confederation route entry n = network route entry r = redistributed route entry
Next Hop
Metric LocPrf Weight Path
Displays the next hop address of the BGP router. If 0.0.0.0 is listed in this column, then local routes exist in the routing table. Displays the BGP route's metric, if assigned. Displays the BGP LOCAL_PREF attribute for the route. Displays the route's weight. Lists all the ASs the route passed through to reach the destination network.
Example
Dell#show run as-path a1 ! ip as-path access-list a1
permit 500 Dell# Dell#show ip bgp filter-list a1 BGP local RIB : Routes to be Added 0, Replaced 0, Withdrawn 0 BGP local router ID is 192.168.11.5 Status codes: s suppressed, S stale, d dampened, h history, * valid, > best
Border Gateway Protocol 397
Path source: I - internal, a - aggregate, c - confed-external, r redistributed
n - network, D - denied, S - stale Origin codes: i - IGP, e - EGP, ? - incomplete
Network *> 55.0.0.0/24 *> 66.0.0.0/24
Next Hop 172.16.0.2 172.16.0.2
Metric
LocPrf Weight Path 0 200 400 500 600 i 0 200 500 i
show ip bgp flap-statistics
View flap statistics on BGP routes.
Syntax Parameters
show ip bgp [vrf vrf-name] [ipv4 {multicast | unicast} | ipv6 unicast] flap-statistics [ip-address [mask]] [filter-list as-path-name] [regexp regular-expression]
vrf vrf-name
ipv4 multicast
ipv4 unicast
ipv6 unicast
ip-address
mask
filter-list aspath-name regexp regularexpression
(OPTIONAL) Enter the keywords vrf and then the name of the VRF to view flap statistics on BGP routes corresponding to that VRF.
(OPTIONAL) Enter the keyword ipv4 followed by the keyword multicast to view information related only to ipv4 multicast routes.
(OPTIONAL) Enter the keyword ipv4 followed by the keyword unicast to view information related only to ipv4 unicast routes.
(OPTIONAL) Enter the keyword ipv6 followed by the keyword unicast to view information related only to ipv6 unicast routes.
(OPTIONAL) Enter the IP address (in dotted decimal format) of the BGP network to view information only on that network.
(OPTIONAL) Enter the network mask (in slash prefix (/x) format) of the BGP network address.
(OPTIONAL) Enter the keyword filter-list then the name of a configured ASPATH ACL. The range is 140 characters.
Enter a regular expression then use one or a combination of the following characters to match. The range is 256 characters.
. = (period) any single character (including a white space). * = (asterisk) the sequences in a pattern (zero or more sequences). + = (plus) the sequences in a pattern (one or more sequences). ? = (question mark) sequences in a pattern (either zero or one sequences).
NOTE: Enter an escape sequence (CTRL+v) prior to entering the ? regular expression. [ ] = (brackets) a range of single-character patterns. ( ) = (parenthesis) groups a series of pattern elements to a single element. { } = (braces) minimum and the maximum match count. ^ = (caret) the beginning of the input string. If you use the caret at the beginning of a sequence or range, it matches on everything BUT the characters specified. $ = (dollar sign) the end of the output string.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
398 Border Gateway Protocol
Usage Information
Example
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Added the ipv4 multicast and ipv6 unicast parameters. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
The following describes the show ip bgp flap command shown in the following example.
Field
Description
Network From Flaps Duration Reuse Path
Displays the network ID to which the route is flapping. Displays the IP address of the neighbor advertising the flapping route. Displays the number of times the route flapped. Displays the hours:minutes:seconds since the route first flapped. Displays the hours:minutes:seconds until the flapped route is available. Lists all the ASs the flapping route passed through to reach the destination network.
Dell#show ip bgp flap-statistics BGP local RIB : Routes to be Added 0, Replaced 0, Withdrawn 0 BGP local router ID is 192.168.11.5 Status codes: s suppressed, S stale, d dampened, h history, * valid, > best Path source: I - internal, a - aggregate, c - confed-external, r redistributed
n - network, D - denied, S - stale Origin codes: i - IGP, e - EGP, ? - incomplete
Network
From
Reuse
Path
h 77.0.0.0/24
172.16.0.2
00:00:00
d 55.0.0.0/24
172.16.0.2
00:30:44 200 i
*> 66.0.0.0/24
172.16.0.2
00:00:00 200 i
Dell#*>n 66.66.77.77/32 0.0.0.0
Flaps 1 3 1
0
Duration 00:00:03 00:00:25 00:00:23 32768 i
show ip bgp inconsistent-as
View routes with inconsistent originating autonomous system (AS) numbers; that is, prefixes that are announced from the same neighbor AS but with a different AS-Path.
Syntax
show ip bgp [vrf vrf-name] [ipv4 unicast] inconsistent-as
Border Gateway Protocol 399
Parameters
vrf vrf-name ipv4 unicast
(OPTIONAL) Enter the keyword vrf and then the name of the VRF to view routes corresponding to the VRF that contain inconsistent originating AS numbers.
(OPTIONAL) Enter the keywords ipv4 unicast to view information only related to ipv4 unicast routes.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
The following describes the show ip bgp inconsistent-as command shown in the following example.
Field
Description
Network Next Hop
Metric LocPrf Weight Path
Displays the destination network prefix of each BGP route. Displays the next hop address of the BGP router. If 0.0.0.0 is listed in this column, then local routes exist in the routing table. Displays the BGP route's metric, if assigned. Displays the BGP LOCAL_PREF attribute for the route. Displays the route's weight. Lists all the ASs the route passed through to reach the destination network.
Example
Dell>show ip bgp inconsistent-as BGP table version is 280852, local router ID is 10.1.2.100 Status codes: s suppressed, d damped, h history, * valid, > best Path source: I - internal, c - confed-external, r - redistributed, n network Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop
Metric LocPrf Weight Path
* 3.0.0.0/8
63.114.8.33
0 18508 209 7018 80 i
*
63.114.8.34
0 18508 209 7018 80 i
*
63.114.8.60
0 18508 209 7018 80 i
*>
63.114.8.33
0 18508 701 80 i
*> 3.18.135.0/24 63.114.8.60
0 18508 209 7018 ?
*
63.114.8.34
0 18508 209 7018 ?
*
63.114.8.33
0 18508 701 7018 ?
*
63.114.8.33
0 18508 209 7018 ?
*> 4.0.0.0/8
63.114.8.60
0 18508 209 1 i
*
63.114.8.34
0 18508 209 1 i
*
63.114.8.33
0 18508 701 1 i
400 Border Gateway Protocol
*
63.114.8.33
* 6.0.0.0/20
63.114.8.60
*
63.114.8.34
*>
63.114.8.33
0
*
63.114.8.33
* 9.2.0.0/16
63.114.8.60
*
63.114.8.34
--More--
0 18508 209 1 i 0 18508 209 3549 i 0 18508 209 3549 i 0 18508 ? 0 18508 209 3549 i 0 18508 209 701 i 0 18508 209 701 i
Dell>sho ip bgp vrf testinconsistent-as BGP table version is 11, local router ID is 66.66.77.77 Status codes: s suppressed, S stale, d dampened, h history, * valid, > best Path source: I - internal, a - aggregate, c - confed-external, r redistributed
n - network, D - denied, S - stale Origin codes: i - IGP, e - EGP, ? - incomplete
Network
Next Hop Metric LocPrf Weight Path
*>n 11.11.11.11/32 0.0.0.0
0
32768 i
*>n 22.22.22.22/32 0.0.0.0
0
32768 i
I 32.32.32.32/32
60.0.0.2 100
0 400 500 i
I 32.32.33.33/32 60.0.0.2 100
0 400 500 i
*>n 33.33.33.33/32 0.0.0.0
0
32768 i
*>n 33.33.44.55/32 0.0.0.0
0
32768 i
*>n 44.44.44.44/32 0.0.0.0
0
32768 i
*>I 55.55.0.0/16
72.1.1.2
100
0 i
*>I 55.55.55.55/32 72.1.1.2
0
100
0 i
*>I 55.55.66.66/32 72.1.1.2
0
100
0 i
*>a 66.66.0.0/16
0.0.0.0
32768 i
*>n 66.66.66.77/32 0.0.0.0
0
32768 i
*>n 66.66.77.77/32 0.0.0.0
0
32768 i
show ip bgp neighbors
Allows you to view the information BGP neighbors exchange.
Syntax Parameters
show ip bgp [vrf vrf-name] [ipv4 {multicast | unicast} | ipv6 unicast] neighbors [ip-address [advertised-routes | dampened-routes | detail | flapstatistics | routes | {received-routes [network [network-mask]]} | {deniedroutes [network [network-mask]]}]
vrf vrf-name
(OPTIONAL) Enter the keyword vrf and then the name of the VRF to view information exchanged by BGP neighbors corresponding to that VRF.
NOTE: You can use this attribute to view information exchanged by BGP
neighbors that correspond to either a default or a non-default VRF.
ipv4 multicast
(OPTIONAL) Enter the keyword ipv4 followed by the keyword multicast to view information related only to ipv4 multicast routes.
ipv4 unicast
(OPTIONAL) Enter the keyword ipv4 followed by the keyword unicast to view information related only to ipv4 unicast routes.
ipv6 unicast
(OPTIONAL) Enter the keyword ipv6 followed by the keyword unicast to view information related only to ipv6 unicast routes.
ip-address
(OPTIONAL) Enter the IP address of the neighbor to view only BGP information exchanged with that neighbor.
advertisedroutes
(OPTIONAL) Enter the keywords advertised-routes to view only the routes the neighbor sent.
dampened-routes (OPTIONAL) Enter the keywords dampened-routes to view information on dampened routes from the BGP neighbor.
Border Gateway Protocol 401
detail
flap-statistics
routes
received-routes [network [network-mask]
(OPTIONAL) Enter the keyword detail to view neighbor-specific internal information for the IPv4 Unicast address family.
(OPTIONAL) Enter the keywords flap-statistics to view flap statistics on the neighbor's routes.
(OPTIONAL) Enter the keyword routes to view only the neighbor's feasible routes.
(OPTIONAL) Enter the keywords received-routes then either the network address (in dotted decimal format) or the network mask (in slash prefix format) to view all information received from neighbors.
NOTE: Configure the neighbor soft-reconfiguration inbound command prior to viewing all the information received from the neighbors.
denied-routes [network [network-mask]
(OPTIONAL) Enter the keywords denied-routes then either the network address (in dotted decimal format) or the network mask (in slash prefix format) to view all information on routes denied via neighbor inbound filters.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.8.0
8.3.7.0 7.8.1.0 7.7.1.0 7.5.1.0 7.2.1.0 6.3.10
Introduced on the S4048-ON. Introduced on the S3048-ON. Added the ipv4 multicast and ipv6 unicast parameters. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added the add-path option to the S4810. Output on the S4810 shows the ADDPATH parameters. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Added the detail option. Output now displays the default MED value. Added the received and denied route options. The output is changed to display the total number of advertised prefixes.
Usage Information
After a peer reset, the contents of the notification log messages is displayed in hex values for debugging.
The neighbor information that this command displays does not include counts corresponding to ignored prefixes and updates. However, the martian case is an exception where neighbor information corresponding to ignored updates is displayed.
BGP shows the exact information that is exchanged between the BGP peers. It also indicates whether or not this information is received by the BGP peer.
The following describes the show ip bgp neighbors command shown in the following examples.
402 Border Gateway Protocol
Example
The Lines Beginning with:
Description
BGP neighbor
BGP version BGP state Last read
Displays the BGP neighbor address and its AS number. The last phrase in the line indicates whether the link between the BGP router and its neighbor is an external or internal one. If they are located in the same AS, the link is internal; otherwise the link is external.
Displays the BGP version (always version 4) and the remote router ID.
Displays the neighbor's BGP state and the amount of time in hours:minutes:seconds it has been in that state.
This line displays the following information:
last read is the time (hours:minutes:seconds) the router read a message from its neighbor
hold time is the number of seconds configured between messages from its neighbor
keepalive interval is the number of seconds between keepalive messages to help ensure that the TCP session is still alive.
Received messages
This line displays the number of BGP messages received, the number of notifications (error messages), and the number of messages waiting in a queue for processing.
Sent messages
The line displays the number of BGP messages sent, the number of notifications (error messages), and the number of messages waiting in a queue for processing.
Received updates This line displays the number of BGP updates received and sent.
Soft
This line indicates that soft reconfiguration inbound is configured.
reconfiguration
Minimum time Displays the minimum time, in seconds, between advertisements.
(list of inbound and outbound policies)
Displays the policy commands configured and the names of the Route map, ASPATH ACL, or Prefix list configured for the policy.
For address family:
Displays the IPv4 Unicast as the address family.
BGP table version
Displays which version of the primary BGP routing table the router and the neighbor are using.
accepted prefixes
Displays the number of network prefixes the router accepts and the amount of memory used to process those prefixes.
Prefix advertised Displays the number of network prefixes advertised, the number rejected, and the number withdrawn from the BGP routing table.
Connections established
Displays the number of TCP connections established and dropped between the two peers to exchange BGP information.
Last reset
Displays the amount of time since the peering session was last reset. Also states if the peer resets the peering session. If the peering session was never reset, the word never is displayed.
Local host:
Displays the peering address of the local router and the TCP port number.
Foreign host:
Displays the peering address of the neighbor and the TCP port number.
Dell#show ip bgp neighbors 172.16.0.2 BGP neighbor is 172.16.0.2, remote AS 200, external link
Member of peer-group port0 for session parameters BGP remote router ID 172.16.0.2 BGP state ESTABLISHED, in this state for 00:13:55 Last read 00:00:03, Last write 00:00:55
Border Gateway Protocol 403
Hold time is 180, keepalive interval is 60 seconds Received 50 messages, 0 in queue
1 opens, 0 notifications, 34 updates 15 keepalives, 0 route refresh requests Sent 18 messages, 0 in queue 1 opens, 0 notifications, 0 updates 16 keepalives, 0 route refresh requests Route refresh request: received 0, sent messages 1 Minimum time between advertisement runs is 30 seconds Minimum time before advertisements start is 0 seconds Capabilities received from neighbor for IPv4 Unicast : MULTIPROTO_EXT(1) ROUTE_REFRESH(2)
Capabilities advertised to neighbor for IPv4 Unicast : MULTIPROTO_EXT(1) ROUTE_REFRESH(2) ADD_PATH(69) CISCO_ROUTE_REFRESH(128)
Related Commands
For address family: IPv4 Unicast BGP local RIB : Routes to be Added 0, Replaced 0, Withdrawn 0 InQ : Added 0, Replaced 0, Withdrawn 0 OutQ : Added 0, Withdrawn 0 Allow local AS number 0 times in AS-PATH attribute Prefixes accepted 2, withdrawn 15 by peer, martian prefixes ignored 0 Prefixes advertised 0, denied 0, withdrawn 0 from peer Connections established 1; dropped 0 Last reset never Local host: 172.16.0.1, Local port: 58145 Foreign host: 172.16.0.2, Foreign port: 179 Dell#
show ip bgp -- views the current BGP routing table.
show ip bgp next-hop
View all next hops (using learned routes only) with current reachability and flap status. This command only displays one path, even if the next hop is reachable by multiple paths.
Syntax
show ip bgp [vrf vrf-name] next-hop
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2)
Introduced on the S4048-ON. Introduced on the S3048-ON.
404 Border Gateway Protocol
Usage Information
Example
Version
9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Description
Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
The following describes the show ip bgp next-hop command shown in the following example.
Field
Description
Next-hop Via RefCount Cost Flaps Flaps
Displays the next-hop IP address. Displays the IP address and interface used to reach the next hop. Displays the number of BGP routes using this next hop. Displays the cost associated with using this next hop. Displays the number of times the next hop has flapped. Displays the number of times the next hop has flapped.
Dell# show ip bgp next-hop
Next-hop
Resolved
172.16.0.2
YES
Dell#
show ip bgp paths
View all the BGP path attributes in the BGP database.
Syntax
show ip bgp[vrf vrf-name] paths [regexp regular-expression]
Parameters
vrf vrf-name
(OPTIONAL) Enter the keyword vrf to view all path attributes in the BGP database corresponding to that VRF.
NOTE: DescriptionYou can use this attribute to view information on all path
attributes in the BGP database that correspond to either a default or a non-
default VRF.
regexp regularexpression
Enter a regular expression then use one or a combination of the following characters to match:
. = (period) any single character (including a white space). * = (asterisk) the sequences in a pattern (zero or more sequences). + = (plus) the sequences in a pattern (one or more sequences). ? = (question mark) sequences in a pattern (either zero or one sequences).
NOTE: Enter an escape sequence (CTRL+v) prior to entering the ? regular expression.
[ ] = (brackets) a range of single-character patterns. ( ) = (parenthesis) groups a series of pattern elements to a single element. { } = (braces) minimum and the maximum match count.
Border Gateway Protocol 405
^ = (caret) the beginning of the input string. If you use the caret at the beginning of a sequence or range, it matches on everything BUT the characters specified.
$ = (dollar sign) the end of the output string.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Added support for VRF for the S4810, S4820T, and S6000. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
Example
The following describes the show ip bgp path command shown in the following example.
Field
Description
Total Address Hash Refcount Metric Path
Displays the total number of BGP path attributes. Displays the internal address where the path attribute is stored. Displays the hash bucket where the path attribute is stored. Displays the number of BGP routes using this path attribute. Displays the MED attribute for this path attribute. Displays the AS path for the route, with the origin code for the route listed last. Numbers listed between braces {} are AS_SET information.
Dell#show ip bgp paths ?
community
Display community information
extcommunity
Display extended community information
regexp
Display path information based on a regular
expression
|
Pipe through a command
Dell#show ip bgp paths
Total 2 Paths
Refcount Metric Path
1
0
200 i
1
0
200 i
406 Border Gateway Protocol
show ip bgp paths community
View all unique COMMUNITY numbers in the BGP database.
Syntax
show ip bgp [vrf vrf-name] paths community
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
The following describes the show ip bgp paths community command shown in the following example.
Field
Description
Address Hash Refcount Community
Displays the internal address where the path attribute is stored. Displays the hash bucket where the path attribute is stored. Displays the number of BGP routes using these communities. Displays the community attributes in this BGP path.
Example
Dell#show ip bgp paths community
Total 2 communities
Refcount Community
1
NO-ADVERTISE
1
200:1
1000:1
3000:1
show ip bgp peer-group
Allows you to view information on the BGP peers in a peer group.
Syntax Parameters
show ip bgp [vrf vrf-name] [ipv4 {multicast | unicast} | ipv6 unicast] peer-group [peer-group-name [detail | summary]]
vrf vrf-name
(OPTIONAL) Enter the keyword vrf to view information on BGP peers in a peer group corresponding to that VRF.
Border Gateway Protocol 407
NOTE: You can use this attribute to view information on BGP peers in a peer group that correspond to either a default or a non-default VRF.
ipv4 multicast
(OPTIONAL) Enter the keyword ipv4 followed by the keyword multicast to view information related only to ipv4 multicast routes.
ipv4 unicast
(OPTIONAL) Enter the keyword ipv4 followed by the keyword unicast to view information related only to ipv4 unicast routes.
ipv6 unicast
(OPTIONAL) Enter the keyword ipv6 followed by the keyword unicast to view information related only to ipv6 unicast routes.
peer-group-name (OPTIONAL) Enter the name of a peer group to view information about that peer group only.
detail
(OPTIONAL) Enter the keyword detail to view detailed status information of the peers in that peer group.
summary
(OPTIONAL) Enter the keyword summary to view status information of the peers in that peer group. The output is the same as that found in the show ip bgp summary command.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.8.0
8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Added the add-path option to the S4810. Output on the S4810 shows the ADDPATH parameters. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
The following describes the show ip bgp peer-group command shown in the following example.
Line beginning Description with:
Peer-group
Administratively shut
BGP version
Minimum time
For address family
BGP neighbor
Number of peers
Displays the peer group's name. Displays the peer group's status if the peer group is not enabled. If you enable the peer group, this line is not displayed. Displays the BGP version supported. Displays the time interval between BGP advertisements. Displays IPv4 Unicast as the address family.
Displays the name of the BGP neighbor. Displays the number of peers currently configured for this peer group.
408 Border Gateway Protocol
Example
Related Commands
Line beginning Description with:
Peer-group members:
Lists the IP addresses of the peers in the peer group. If the address is outbound optimized, an * is displayed next to the IP address.
Dell#show ip bgp peer-group Peer-group port0, remote AS 200 BGP version 4 Minimum time between advertisement runs is 30 seconds For address family: IPv4 Unicast BGP neighbor is port0, peer-group external Update packing has 4_OCTET_AS support enabled Number of peers in this group 1 Maximum limit on the accepted connections 256
Peer-group members (* - outbound optimized): 172.16.0.2 Dell#
neighbor peer-group (assigning peers) -- assigns a peer to a peer-group. neighbor peer-group (creating group) -- creates a peer group.
show ip bgp regexp
Display the subset of the BGP routing tables matching the regular expressions specified.
Syntax Parameters
show ip bgp [vrf vrf-name] regexp regular-expression [character]
vrf vrf-name
Enter the keyword vrf and then the name of the VRF to view the subset of BGP routing tables that match the regular expression specified on that VRF.
NOTE: You can use this attribute to view the subset of BGP routing tables
that match the regular expression that is specified on either a default or a non-
default VRF.
regularexpression [character]
Enter a regular expression then use one or a combination of the following characters to match:
. = (period) any single character (including a white space). * = (asterisk) the sequences in a pattern (zero or more sequences). + = (plus) the sequences in a pattern (one or more sequences). ? = (question mark) sequences in a pattern (either zero or one sequences).
NOTE: Enter an escape sequence (CTRL+v) prior to entering the ? regular
expression.
[ ] = (brackets) a range of single-character patterns. ( ) = (parenthesis) groups a series of pattern elements to a single element. { } = (braces) minimum and the maximum match count. ^ = (caret) the beginning of the input string. If you use the caret at the
beginning of a sequence or range, it matches on everything BUT the characters specified. $ = (dollar sign) the end of the output string.
Command Modes EXEC EXEC Privilege
Border Gateway Protocol 409
Command History
Usage Information
Example
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.4.(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Added support for VRF. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
The following describes the show ip bgp regexp command shown in the following example.
Field
Description
Network Next Hop
Metric LocPrf Weight Path
Displays the destination network prefix of each BGP route. Displays the next hop address of the BGP router. If 0.0.0.0 is listed in this column, then non-BGP routes exist in the router's routing table. Displays the BGP router's metric, if assigned. Displays the BGP LOCAL_PREF attribute for the route. Displays the route's weight Lists all the AS paths the route passed through to reach the destination network.
Dell#show ip bgp regexp ^200 BGP local RIB : Routes to be Added 0, Replaced 0, Withdrawn 0 BGP local router ID is 192.168.11.5 Status codes: s suppressed, S stale, d dampened, h history, * valid, > best Path source: I - internal, a - aggregate, c - confed-external, r redistributed
n - network, D - denied, S - stale Origin codes: i - IGP, e - EGP, ? - incomplete
Network *> 55.0.0.0/24 *> 66.0.0.0/24
Next Hop
Metric
172.16.0.2
172.16.0.2
LocPrf Weight Path 0 200 i 0 200 i
show ip bgp summary
Allows you to view the status of all BGP connections.
Syntax Parameters
show ip bgp [vrf vrf-name] [ipv4 {multicast | unicast} | ipv6 unicast] summary
vrf vrf-name
(OPTIONAL) Enter the keyword vrf and then the name of the VRF to view the status of all BGP connections corresponding to that VRF.
410 Border Gateway Protocol
ipv4 multicast ipv4 unicast ipv6 unicast
(OPTIONAL) Enter the keyword ipv4 followed by the keyword multicast to view information related only to ipv4 multicast routes.
(OPTIONAL) Enter the keyword ipv4 followed by the keyword unicast to view information related only to ipv4 unicast routes.
(OPTIONAL) Enter the keyword ipv6 followed by the keyword unicast to view information related only to ipv6 unicast routes.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
In BGP, route attributes are maintained at different locations. When attributes that correspond to multiple routes change, then attribute counts that the show ip bgp summary command displays are calculated as summations of attributes corresponding to all the associated routes. For example, if cluster_id is an attribute associated with thousand routes that contain exactly the same set of attributes, then the cluster_id count is 1. If these thousand routes are set with different attribute values with the same cluster_id, then the cluster_id count is 1000, since the same value is stored for thousand different attribute records.
The attribute next-hop is a part of the BGP attribute data structure.
If two peers send the same route that contains similar path attributes, then two entries are maintained in the back-end, as both these entries have different next-hops. If this same route is sent to a different peer, an entry for each peer is created, as the next-hop is different. As a result, the BGP attributes count in the summary output will differ accordingly.
The following describes the show ip bgp summary command shown in the following example.
Field
Description
BGP router identifier BGP table version network entries
paths denied paths BGP path attribute entries
Displays the local router ID and the AS number.
Displays the BGP table version and the main routing table version.
Displays the number of network entries, route paths, and the amount of memory used to process those entries. Displays the number of paths and the amount of memory used. Displays the number of denied paths and the amount of memory used. Displays the number of BGP path attributes and the amount of memory used to process them.
Border Gateway Protocol 411
Example
Field
BGP AS-PATH entries BGP community entries
Dampening enabled Neighbor AS MsgRcvd MsgSent TblVer InQ OutQ
Up/Down
Description
Displays the number of BGP AS_PATH attributes processed and the amount of memory used to process them.
Displays the number of BGP COMMUNITY attributes processed and the amount of memory used to process them. The show ip bgp community command provides more details on the COMMUNITY attributes.
Displayed only when you enable dampening. Displays the number of paths designated as history, dampened, or penalized.
Displays the BGP neighbor address.
Displays the AS number of the neighbor.
Displays the number of BGP messages that neighbor received.
Displays the number of BGP messages that neighbor sent.
Displays the version of the BGP table that was sent to that neighbor.
Displays the number of messages from that neighbor waiting to be processed.
Displays the number of messages waiting to be sent to that neighbor. If a number appears in parentheses, the number represents the number of messages waiting to be sent to the peer group.
Displays the amount of time that the neighbor is in the Established stage. If the neighbor has never moved into the Established stage, the word never is displayed.
The output format is:
Time Established
Display Example
< 1 day < 1 week > 1 week
00:12:23 (hours:minutes:seconds) 1d21h (DaysHours) 11w2d (WeeksDays)
State/Pfxrcd
If the neighbor is in Established stage, the number of network prefixes received.
If a maximum limit was configured with the neighbor maximum-prefix command, (prfxd) appears in this column.
If the neighbor is not in Established stage, the current stage is displayed (Idle, Connect, Active, OpenSent, OpenConfirm). When the peer is transitioning between states and clearing the routes received, the phrase (Purging) may appear in this column.
If the neighbor is disabled, the phrase (Admin shut) appears in this column.
Dell#show ip bgp summary BGP router identifier 192.168.11.5, local AS number 100 BGP local RIB : Routes to be Added 0, Replaced 0, Withdrawn 0 2 network entrie(s) using 152 bytes of memory 2 paths using 208 bytes of memory BGP-RIB over all using 210 bytes of memory 2 BGP path attribute entrie(s) using 144 bytes of memory 1 BGP AS-PATH entrie(s) using 10 bytes of memory 2 neighbor(s) using 16384 bytes of memory
Neighbor
AS
Down State/Pfx
172.16.0.2
200
00:05:34 2
192.168.10.2
100
00:00:00 (shut)
Dell#
MsgRcvd MsgSent
10
8
0
22
TblVer InQ OutQ Up/
0
0
0
0
0
0
412 Border Gateway Protocol
show running-config bgp
To display the current BGP configuration, use this feature.
Syntax
show running-config bgp
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Example
Dell#show running-config bgp ! router bgp 100
network 1.1.11.1/32 network 1.1.12.1/32 network 1.1.13.1/32 neighbor 10.1.1.2 remote-as 200 neighbor 10.1.1.2 no shutdown Dell#
timers bgp
Adjust the BGP Keep Alive and Hold Time timers.
Syntax Parameters
Defaults
timers bgp keepalive holdtime To return to the default, use the no timers bgp command.
keepalive holdtime
Enter a number for the time interval, in seconds, between keepalive messages sent to the neighbor routers. The range is from 1 to 65535. The default is 60 seconds.
Enter a number for the time interval, in seconds, between the last keepalive message and declaring the router dead. The range is from 3 to 65535. The default is 180 seconds.
none
Border Gateway Protocol 413
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
MBGP Commands
Multiprotocol BGP (MBGP) is an enhanced BGP that enables multicast routing policy throughout the internet and connecting multicast topologies between BGP and autonomous systems (ASs).
Dell Networking OS MBGP is implemented as per IETF RFC 1858.
BGPv4 is supported in the following:
Dell Networking OS Version
Platform Support
7.8.1.0, MBGP for IPv4 Multicast Only
S-Series
debug ip bgp dampening
View information on routes being dampened.
Syntax Parameters
debug ip bgp [vrf vrf-name] [ipv4 {unicast | multicast} | ipv6 unicast] dampening
To disable debugging, use the no debug ip bgp dampening command.
vrf vrf-name ipv4 multicast ipv4 unicast
Enter the keyword vrf followed by the name of the VRF to view information on dampened routes corresponding to that VRF.
(OPTIONAL) Enter the keyword ipv4 followed by the keyword multicast to view dampened-route information related only to ipv4 multicast routes.
(OPTIONAL) Enter the keyword ipv4 followed by the keyword multicast to view dampened-route information related only to ipv4 unicast routes.
414 Border Gateway Protocol
ipv6 unicast
(OPTIONAL) Enter the keyword ipv4 followed by the keyword unicast to view dampened-route information related only to ipv6 unicast routes.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
b
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
9.8(0.0P2) 9.7(0.0)
Introduced on the S3048-ON. Introduced on the S6000�ON.
9.2(1.0)
Introduced on the Z9500.
9.0.2.0 8.3.19.0
Introduced on the S6000. Introduced on the S4820T.
8.3.11.1
Introduced on the Z9000.
8.3.7.0 7.8.1.0
Introduced on the S4810. Introduced on the S-Series.
7.7.1.0
Introduced on the C-Series.
7.6.1.0
Introduced IPv6 MGBP support for the E-Series.
distance bgp
Configure three administrative distances for routes.
Syntax Parameters
distance bgp external-distance internal-distance local-distance To return to default values, use the no distance bgp command.
external-distance Enter a number to assign to routes learned from a neighbor external to the AS. The range is from 1 to 255. The default is 20.
internal-distance Enter a number to assign to routes learned from a router within the AS. The range is from 1 to 255. The default is 200.
local-distance
Enter a number to assign to routes learned from networks listed in the network command. The range is from 1 to 255. The default is 200.
Defaults
external-distance = 20 internal-distance = 200 local-distance = 200
Command Modes ROUTER BGP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
Border Gateway Protocol 415
Usage Information
Related Commands
Version
9.8(0.0P2) 9.2(1.0) 8.3.19.0 8.3.7.0 7.8.1.0 7.7.1.0
Description
Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
CAUTION: Dell Networking recommends not changing the administrative distance of internal routes. Changing the administrative distances may cause routing table inconsistencies.
The higher the administrative distance assigned to a route means that your confidence in that route is low. Routes assigned an administrative distance of 255 are not installed in the routing table. Routes from confederations are treated as internal BGP routes.
router bgp -- enters ROUTER mode on the switch.
show ip bgp dampened-paths
View BGP routes that are dampened (non-active).
Syntax Parameters
show ip bgp [vrf vrf-name] [ipv4 {multicast | unicast} | ipv6 unicast] dampened-paths
vrf vrf-name ipv4 unicast ipv6 unicast
(OPTIONAL) Enter the keywords vrf and then the name of the VRF to view routes that are affected by a specific community list corresponding to that VRF.
(OPTIONAL) Enter the keywords ipv4 followed by the keyword unicast to view information related only to ipv4 unicast routes.
(OPTIONAL) Enter the keyword ipv6 followed by the keyword unicast to view information related only to ipv6 unicast routes.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Added the ipv4 multicast and ipv6 unicast parameters. Added support for VRF. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000.
416 Border Gateway Protocol
Usage Information
Example
Version
8.3.7.0 7.8.1.0 7.7.1.0
Description
Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
To determine a BGP session flap, both a route-down event and a subsequent route-up event corresponding to a single route are considered. As a result, a flap event is penalized only one time during the route-down event. The subsequent route-up event corresponding to the same route is not considered as a flap and is not penalized.
The history paths that the show ip bgp command displays contain only the prefix and the next-hop information. The next-hop information shows the ip address of the neighbor. It does not show the actual next-hop details.
The following describes the show ip bgp damp command shown in the following example.
Field
Description
Network From Reuse Path
Displays the network ID to which the route is dampened.
Displays the IP address of the neighbor advertising the dampened route.
Displays the hour:minutes:seconds until the dampened route is available.
Lists all the ASs the dampened route passed through to reach the destination network.
Dell#show ip bgp dampened-paths BGP local RIB : Routes to be Added 0, Replaced 0, Withdrawn 0 BGP local router ID is 192.168.11.5 Status codes: s suppressed, S stale, d dampened, h history, * valid, > best Path source: I - internal, a - aggregate, c - confed-external, r redistributed
n - network, D - denied, S - stale Origin codes: i - IGP, e - EGP, ? - incomplete
Network
From
Reuse
Path
d 55.0.0.0/24
172.16.0.2
00:36:23
200
Dell#
BGP Extended Communities (RFC 4360)
BGP Extended Communities, as defined in RFC 4360, is an optional transitive BGP attribute. BGP Extended Communities provides two major advantages over Standard Communities: The range is extended from 4-octet (AA:NN) to 8-octet (Type:Value) to provide enough number communities. Communities are structured using a new "Type" field (1 or 2-octets), allowing you to provide granular control/filter routing
information based on the type of extended communities.
set extcommunity rt
To set Route Origin community attributes in Route Map, use this feature.
Syntax
set extcommunity rt {as4 ASN4:NN [non-trans] | ASN:NNNN [non-trans] | IPADDR:NN [non-trans]} [additive]
Border Gateway Protocol 417
Parameters
To delete the Route Origin community, use the no set extcommunity command.
as4 ASN4:NN ASN:NNNN IPADDR:NN additive non-trans
Enter the keyword as4 then the 4-octet AS specific extended community number in the format ASN4:NN (4-byte AS number:2-byte community value).
Enter the 2-octet AS specific extended community number in the format ASN:NNNN (2-byte AS number:4-byte community value).
Enter the IP address specific extended community in the format IPADDR:NN (4byte IPv4 Unicast Address:2-byte community value).
(OPTIONAL) Enter the keyword additive to add to the existing extended community.
(OPTIONAL) Enter the keywords non-trans to indicate a non-transitive BGP extended community.
Defaults
none
Command Modes ROUTE MAP (config-route-map)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T Introduced on the Z-9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
If the set community rt and soo are in the same route-map entry, the behavior defines as:
If the rt option comes before soo, with or without the additive option, soo overrides the communities rt sets.
If the rt option comes after soo, without the additive option, rt overrides the communities soo sets.
If the rt with the additive option comes after soo, rt adds the communities soo sets.
set extcommunity soo -- sets the extended community site-of-origin in the route-map.
set extcommunity soo
To set extended community site-of-origin in Route Map, use this feature.
Syntax
set extcommunity soo {as4 ASN4:NN | ASN:NNNN | IPADDR:NN [non-trans]} To delete the site-of-origin community, use the no set extcommunity command.
418 Border Gateway Protocol
Parameters
as4 ASN4:NN ASN:NNNN IPADDR:NN non-trans
Enter the keyword as4 then the 4-octet AS specific extended community number in the format ASN4:NN (4-byte AS number:2-byte community value).
Enter the 2-octet AS specific extended community number in the format ASN:NNNN (2-byte AS number:4-byte community value).
Enter the IP address specific extended community in the format IPADDR:NN (4byte IPv4 Unicast Address:2-byte community value).
(OPTIONAL) Enter the keywords non-trans to indicate a non-transitive BGP extended community.
Defaults
none
Command Modes ROUTE MAP (config-route-map)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
If the set community rt and soo are in the same route-map entry, the behavior defines as:
If the rt option comes before soo, with or without the additive option, soo overrides the communities rt sets.
If the rt option comes after soo, without the additive option, rt overrides the communities soo sets.
If the rt with the additive option comes after soo, rt adds the communities soo sets.
set extcommunity rt -- sets the extended community route origins using the route-map.
show ip bgp paths extcommunity
To display all BGP paths having extended community attributes, use this feature.
Syntax
show ip bgp paths extcommunity
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Border Gateway Protocol 419
Usage Information
Example
Version
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.7.0 Version 7.8.1.0 7.7.1.0 7.6.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
The following describes the show ip bgp paths extcommunity command shown in the following example.
Field
Description
Address Hash Refcount Community
Displays the internal address where the path attribute is stored. Displays the hash bucket where the path attribute is stored. Displays the number of BGP routes using these extended communities. Displays the extended community attributes in this BGP path.
Dell#show ip bgp paths extcommunity Total 1 Extended Communities
Address
Hash Refcount Extended Community
0x41d57024 12272 1
RT:7:200 SoO:5:300 SoO:0.0.0.3:1285
Dell#
show ip extcommunity-list
Display the IP extended community list.
Syntax Parameters
show ip extcommunity-list [word]
word
Enter the name of the extended community list you want to view.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T.
420 Border Gateway Protocol
Example
Version
8.3.7.0 7.8.1.0 7.7.1.0 7.6.1.0
Description
Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Dell#show ip extcommunity-list test ip extcommunity-list test
deny RT:1234:12 permit regexp 123 deny regexp 234 deny regexp 123 Dell#
IPv6 BGP Commands
IPv6 border gateway protocol (IPv6 BGP) is supported on the platform. BGP is an external gateway protocol that transmits interdomain routing information within and between Autonomous Systems (AS). Basically, two routers (called neighbors or peers) exchange information including full routing tables and periodically send messages to update those routing tables.
clear ip bgp ipv6 unicast soft
Clear and reapply policies for IPv6 unicast routes without resetting the TCP connection; that is, perform BGP soft reconfiguration.
Syntax Parameters
clear ip bgp {* | as-number | ipv4-neighbor-addr | ipv6-neighbor-addr | peer-group name} ipv6 unicast soft [in | out]
*
Clear and reapply policies for all BGP sessions.
as-number
Clear and reapply policies for all neighbors belonging to the AS. The range is from 0 to 65535 (2 Byte), from 1 to 4294967295 (4 Byte), or from 0.1 to 0.65535.65535 (Dotted format).
ipv4-neighboraddr | ipv6neighbor-addr
Clear and reapply policies for a neighbor.
peer-group name Clear and reapply policies for all BGP routers in the specified peer group.
ipv6 unicast
Clear and reapply policies for all IPv6 unicast routes.
in
Reapply only inbound policies.
NOTE: If you enter soft, without an in or out option, both inbound and
outbound policies are reset.
out
Reapply only outbound policies.
NOTE: If you enter soft, without an in or out option, both inbound and
outbound policies are reset.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Border Gateway Protocol 421
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.4.1.0 7.8.1.0 7.7.1.0 7.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Added support for IPv4 multicast and IPv6 unicast routes. Introduced on the S4810. Introduced on the C-Series. Introduced on the E-Series TeraScale.
debug ip bgp ipv6 unicast soft-reconfiguration
Enable soft-reconfiguration debugging for IPv6 unicast routes.
Syntax Parameters
debug ip bgp [ipv4-address | ipv6-address | peer-group-name] ipv6 unicast soft-reconfiguration
To disable debugging, use the no debug ip bgp [ipv4-address | ipv6-address | peergroup-name] ipv6 unicast soft-reconfiguration command.
ipv4-address | ipv6-address
Enter the IP address of the neighbor on which you want to enable softreconfiguration debugging.
peer-group-name Enter the name of the peer group on which you want to enable softreconfiguration debugging.
ipv6 unicast
Debug soft reconfiguration for IPv6 unicast routes.
Defaults
Disabled.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.4.1.0 7.8.1.0 7.7.1.0 7.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Added support for IPv4 multicast and IPv6 unicast routes. Introduced on the S4810. Introduced on the C-Series. Introduced on the E-Series TeraScale.
Usage Information
This command turns on BGP soft-reconfiguration inbound debugging for IPv6 unicast routes. If no neighbor is specified, debug is turned on for all neighbors.
422 Border Gateway Protocol
ipv6 prefix-list
Configure an IPv6 prefix list.
Syntax Parameters
ipv6 prefix-list prefix-list name
prefix-list name Enter the name of the prefix list. NOTE: There is a 140-character limit for prefix list names.
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant FTOS Command Line Reference Guide.
The following is a list of the FTOS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.0.0.0 8.3.19.0 8.3.10.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810.
neighbor soft-reconfiguration inbound
Enable a BGP soft-reconfiguration and start storing updates for inbound IPv6 unicast routes.
Syntax Parameters
neighbor {ipv4-address | ipv6-address | peer-group-name} softreconfiguration inbound
ipv4-address | ipv6-address
Enter the IP address of the neighbor for which you want to start storing inbound routing updates.
peer-group-name Enter the name of the peer group for which you want to start storing inbound routing updates.
Defaults
Disabled.
Command Modes ROUTER BGPv6 ADDRESS FAMILY (conf-router_bgpv6_af)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.4.1.0 8.3.19.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Added support for IPv4 multicast and IPv4 unicast address families. Introduced on the S4820T. Introduced on the S4810.
Border Gateway Protocol 423
Usage Information
Version
7.7.1.0 7.4.1.0
Description
Introduced on the C-Series. Introduced
This command enables soft-reconfiguration for the specified BGP neighbor. BGP stores all updates for inbound IPv6 unicast routes the neighbor receives but does not reset the peer-session.
CAUTION: Inbound update storage is a memory-intensive operation. The entire BGP update
database from the neighbor is stored in memory regardless of the inbound policy results
applied on the neighbor.
show ipv6 prefix-list
Displays the specified IPv6 prefix list.
Syntax Parameters
show ipv6 prefix-list detail {prefix-list name} | summary
detail prefix-list name
Display a detailed description of the selected IPv6 prefix list. Enter the name of the prefix list.
NOTE: There is a 140-character limit for prefix list names.
summary
Display a summary of RPF routes.
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant FTOS Command Line Reference Guide.
The following is a list of the FTOS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.0.0.0 8.3.10.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9000. Introduced on the S4810.
Related Commands
ipv6 prefix-list -- configures an IPv6 prefix-list.
IPv6 MBGP Commands
Multiprotocol BGP (MBGP) is an enhanced BGP that enables the multicast routing policy throughout the internet and connecting multicast topologies between BGP and autonomous systems (AS). FTOS MBGP is implemented as per IETF RFC 1858.
show ipv6 mbgproutes
Display the selected IPv6 MBGP route or a summary of all MBGP routes in the table.
Syntax
show ipv6 mbgproutes ipv6-address prefix-length | summary
424 Border Gateway Protocol
Parameters
ipv6-address prefix-length
(OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format then the prefix length in the /x format. The range is from /0 to /128.
NOTE: The :: notation specifies successive hexadecimal fields of zeros.
summary
Display a summary of RPF routes.
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant FTOS Command Line Reference Guide.
The following is a list of the FTOS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.0.0.0 8.3.19.0 8.3.10.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810.
Border Gateway Protocol 425
11
Content Addressable Memory (CAM)
You can use Content Addressable Memory (CAM) commands to configure the amount of memory allocated to CAM memory partitions.
NOTE: Not all CAM commands are supported on all platforms. Be sure to note the platform when looking for a command.
NOTE: If you are using these features for the first time, contact Dell Networking Technical Assistance Center (TAC) for guidance.
CAM Profile Commands
The CAM profiling feature allows you to partition the CAM to best suit your application. For example: Configure more Layer 2 forwarding information base (FIB) entries when the system is deployed as a switch. Configure more Layer 3 FIB entries when the system is deployed as a router. Configure more access control lists (ACLs) (when IPv6 is not employed). Hash multi-protocol label switching (MPLS) packets based on source and destination IP addresses for link aggregation
groups (LAGs). Hash based on bidirectional flow for LAGs. Optimize the virtual local area network (VLAN) ACL Group feature, which permits group VLANs for IP egress ACLs.
Important Points to Remember
Dell Networking OS supports CAM allocations on the C-Series and S-Series. All line cards within a single system must have the same CAM profile (including CAM sub-region configurations); this profile
must match the system CAM profile (the profile on the primary route processor module [RPM]). Dell Networking OS automatically reconfigures the CAM profile on line cards and the secondary RPM to match the system
CAM profile by saving the correct profile on the card and then rebooting it. The CAM configuration is applied to the entire system when you use the CONFIGURATION mode commands. Save the
running-configuration to affect the change. When budgeting your CAM allocations for ACLs and quality of service (QoS) configurations, remember that ACL and QoS
rules might consume more than one CAM entry depending on complexity. For example, transmission control protocol (TCP) and user datagram protocol (UDP) rules with port range options might require more than one CAM entry. After you install a secondary RPM, copy the running-configuration to the startup-configuration so that the new RPM has the correct CAM profile. You MUST save your changes and reboot the system for CAM profiling or allocations to take effect.
Topics:
� CAM Profile Commands
CAM Profile Commands
The CAM profiling feature allows you to partition the CAM to best suit your application. For example: Configure more Layer 2 forwarding information base (FIB) entries when the system is deployed as a switch. Configure more Layer 3 FIB entries when the system is deployed as a router. Configure more access control lists (ACLs) (when IPv6 is not employed). Hash multi-protocol label switching (MPLS) packets based on source and destination IP addresses for link aggregation
groups (LAGs).
426 Content Addressable Memory (CAM)
Hash based on bidirectional flow for LAGs. Optimize the virtual local area network (VLAN) ACL Group feature, which permits group VLANs for IP egress ACLs.
Important Points to Remember
Dell Networking OS supports CAM allocations on the C-Series and S-Series. All line cards within a single system must have the same CAM profile (including CAM sub-region configurations); this profile
must match the system CAM profile (the profile on the primary route processor module [RPM]). Dell Networking OS automatically reconfigures the CAM profile on line cards and the secondary RPM to match the system
CAM profile by saving the correct profile on the card and then rebooting it. The CAM configuration is applied to the entire system when you use the CONFIGURATION mode commands. Save the
running-configuration to affect the change. When budgeting your CAM allocations for ACLs and quality of service (QoS) configurations, remember that ACL and QoS
rules might consume more than one CAM entry depending on complexity. For example, transmission control protocol (TCP) and user datagram protocol (UDP) rules with port range options might require more than one CAM entry. After you install a secondary RPM, copy the running-configuration to the startup-configuration so that the new RPM has the correct CAM profile. You MUST save your changes and reboot the system for CAM profiling or allocations to take effect.
cam-acl (Configuration)
Select the default CAM allocation settings or reconfigure a new CAM allocation for Layer 2, IPv4, and IPv6 ACLs, Layer 2 and Layer 3 (IPv4) QoS, Layer 2 Protocol Tunneling (L2PT), IP and MAC source address validation for DHCP, Ethernet Connectivity Fault Management (CFM) ACLs, OpenFlow, and Policy-based Routing (PBR).
Syntax Parameters
cam-acl {default | l2acl number ipv4acl number ipv6acl number ipv4qos number l2qos number l2pt number ipmacacl number [vman-qos | vman-dual-qos number] ecfmacl number [nlbclusteracl number] ipv4pbr number }openflow number | fcoe number} [iscsioptacl number] [vrfv4acl number]
default
l2acl number ipv4acl number
Use the default CAM profile settings and set the CAM as follows:
L2Acl : 6 IPV4Acl : 4 IPV6Acl : 0 IPV4Qos : 2 L2Qos : 1 L2PT : 0 IpMacAcl : 0 VmanQos : 0 VmanDualQos : 0 EcfmAcl : 0 nlbclusteracl: 0 FcoeAcl : 0 iscsiOptAcl : 0 ipv4pbr : 0 vrfv4Acl :0 Openflow : 0 fedgovacl : 0
Enter the keyword l2acl and then the number of l2acl blocks. The range is from 1 to 8.
Enter the keyword ipv4acl and then the number of FP blocks for IPv4. The range is from 0 to 8.
Content Addressable Memory (CAM) 427
ipv6acl number
Enter the keyword ipv6acl and then the number of FP blocks for IPv6. The range is from 0 to 4.
ipv4qos number Enter the keyword ipv4qos and then the number of FP blocks for IPv4. The range is from 0 to 8.
l2qos number
Enter the keyword l2qos and then the number of FP blocks for l2 qos. The range is from 1to 8.
l2pt number
Enter the keyword l2pt and then the number of FP blocks for l2 protocol tunnelling. The range is from 0 to 1.
Ipmacacl number Enter the keyword ipmacacl and then the number of FP blocks for IP and MAC ACL. The range is from 0 to 6.
ecfmacl number Enter the keyword ecfmacacl and then the number of FP blocks for ECFM ACL. The range is from 0 to 5.
nlbclusteracl number
Enter the keyword nlbclusteracl and then the number of FP blocks for nlbcluster ACL. The range is from 0 to 2. By default the value is 0 and it supports 8 NLB arp entries reserved for internal functionality.
NOTE: When you reconfigure CAM allocation, use the nlbclusteracl number command to change the number of NLB ARP entries. The range is from 0 to 2. The default value is 0. At the default value of 0, eight NLB ARP entries are available for use. This platform supports up to 512 CAM entries. Select 1 to configure 256 entries. Select 2 to configure 512 entries. Even though you can perform CAM carving to allocate the maximum number of NLB entries, Dell Networking recommends that you use a maximum of 64 NLB ARP entries.
Vman-qos|vman- Enter the keyword evman-qos and then the number of FP blocks for VMAN QoS. dual-qos number The range is from 0 to 6.
vman-dual-qos number
Enter the keyword vman-dual-qos and then the number of FP blocks for VMAN dual QoS. The range is from 0 to 4.
Ipv4pbr number Enter the keyword ipv4pbr and then the number of FP blocks for ipv4pbr ACL. The range is from 0 to 8.
Openflow number Enter the keyword openflow and then the number of FP blocks for open flow (multiples of 4). The range is from 0 to 8.
fcoeacl number
Enter the keyword fcoeacl and then the number of FP blocks for FCOE ACL. The range is from 0 to 6.
Iscsioptacl number
Enter the keyword iscsioptacl and then the number of FP blocks for iSCSI optimization ACL. The range is from 0 to 2.
l2acl number ipv4acl number ipv6acl number,
Allocate space to each CAM region. Enter 4 or 8 for the number of OpenFlow FP blocks.
ipv4qos number 4: Creates 242 entries for use by the OpenFlow controller (256 total entries
l2qos numberl2pt
minus the 14 entries reserved for internal functionality)
number ipmacacl number ecfmacl number
8: Creates 498 entries for use by the OpenFlow controller (512 total entries minus the 14 entries reserved for internal functionality)
{nlbclusteracl] The fcoe range is 0�6 groups. Each group has 128 entries; the value given must be
[vman-qos |
an even number. This information is stored in the NVRAM and is effective after
vman-dual-qos rebooting the switch.
number] ipv4pbr
numberopenflow
{4|8} | fcoe
number
[iscsioptacl
number]
428 Content Addressable Memory (CAM)
[vrfv4acl number]
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4.(0.0) 9.2(1.0) 9.2(0.2) 9.1.(0.0) 8.3.19.0 8.3.11.1 8.3.10.2 8.3.10.0 8.3.1.0 8.2.1.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Added the nlbcluster ACL keyword. Introduced on the S6000-ON. Added support for PBR and VRF. Introduced on the Z9500. Added support for fcoe. Added support for OpenFlow. Introduced on the S4820T. Introduced on the Z9000. Clarified block information for the S4810. Introduced on the S4810. Added the keywords ecfmacl, vman-qos, and vman-dual-qos. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
Save the new CAM settings to the startup-config (write-mem or copy run start) then reload the system for the new settings to take effect.
The total amount of space allowed is 16 FP Blocks. System flow requires three blocks; these blocks cannot be reallocated. Only 13 number of blocks can be configured by the user .
The ipv6acl allocation must be a factor of 2.
If allocation values are not entered for the CAM regions, the value is 0.
If you enable BMP, to perform a reload on the chassis to upgrade any configuration changes that have changed the NVRAM content, use the command reload conditional nvram-cfg-change.
cam-acl-egress
Allocate CAM for egress ACLs.
Syntax Parameters
cam-acl-egress default | l2acl number ipv4acl number ipv6acl number
default l2acl number
Reset egress CAM ACL entries to default settings.
Allocate space to each CAM region. The total space allocated must equal 4. The ipv6acl range must be a factor of 2.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Content Addressable Memory (CAM) 429
The following is a list of the Dell Networking OS version history for this command..
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
cam-optimization
Optimize CAM utilization for QoS Entries by minimizing require policy-map CAM space.
Syntax Parameters
cam-optimization [qos]
qos
Optimize CAM usage for QoS.
Defaults
Disabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0. 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
When you enable this command, if a Policy Map containing classification rules (ACL and/or dscp/ ipprecedence rules) is applied to more than one physical interface on the same port pipe, only a single copy of the policy is written (only one FP entry is used).
NOTE: An ACL itself may still require more that a single FP entry, regardless of the number of
interfaces. For more information, refer to the "IP Access Control Lists", "Prefix Lists", and "Route-
map" sections in the Dell Networking OS Configuration Guide.
430 Content Addressable Memory (CAM)
show cam-acl
Display the details of the CAM profiles on the chassis and all stack units.
Syntax
show cam-acl
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series.
Usage Information
Example
The display reflects the settings implemented with the cam-acl command.
Dell#show cam-acl
-- Chassis Cam ACL --
Current Settings(in block sizes)
1 block = 256 entries
L2Acl
:
2
Ipv4Acl
:
4
Ipv6Acl
:
4
Ipv4Qos
:
2
L2Qos
:
1
L2PT
:
0
IpMacAcl
:
0
VmanQos
:
0
EcfmAcl
:
0
FcoeAcl
:
0
iscsiOptAcl :
0
ipv4pbr
:
0
vrfv4Acl
:
0
Openflow
:
0
fedgovacl
:
0
nlbclusteracl:
0
-- stack-unit 1 --
Current Settings(in block sizes)
1 block = 256 entries
L2Acl
:
2
Ipv4Acl
:
4
Ipv6Acl
:
4
Ipv4Qos
:
2
L2Qos
:
1
L2PT
:
0
IpMacAcl
:
0
Content Addressable Memory (CAM) 431
VmanQos
:
0
EcfmAcl
:
0
FcoeAcl
:
0
iscsiOptAcl :
0
ipv4pbr
:
0
vrfv4Acl
:
0
Openflow
:
0
fedgovacl
:
0
nlbclusteracl:
0
-- stack-unit 3 --
Current Settings(in block sizes)
1 block = 256 entries
L2Acl
:
2
Ipv4Acl
:
4
Ipv6Acl
:
4
Ipv4Qos
:
2
L2Qos
:
1
L2PT
:
0
IpMacAcl
:
0
VmanQos
:
0
EcfmAcl
:
0
FcoeAcl
:
0
iscsiOptAcl :
0
ipv4pbr
:
0
vrfv4Acl
:
0
Openflow
:
0
fedgovacl
:
0
nlbclusteracl:
0
test cam-usage
Verify that enough CAM space is available for the IPv6 ACLs you have created.
Syntax Parameters
test cam-usage service-policy input input policy name stack-unit {number | all}
policy-map name Enter the name of the policy-map to verify. Maximum is 32 characters.
number
Enter all to get information for all the linecards/stack-units or enter the linecard/ stack-unit to get information for a specific card. The range is 0-7 for all other S-Series. The range is 1-6.
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networkin Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
432 Content Addressable Memory (CAM)
Usage Information
Example (SSeries)
Usage Information
Example (SSeries)
Version
7.8.1.0
Description
Introduced.
This command applies to both IPv4 and IPv6 CAM Profiles, but is best used when verifying QoS optimization for IPv
QoS Optimization for IPv6 ACLs does not impact the CAM usage for applying a policy on a single (or the first of seve interfaces. It is most useful when a policy is applied across multiple interfaces; it can reduce the impact to CAM usag subsequent interfaces.
The following describes the test cam-usage command shown in the following example.
Term
Explanation
Stack-Unit
Lists the stack unit or units that are checked. Entering all shows the status for all stacks.
Portpipe
CAM Partition Available CAM Estimated CAM per Port Status
Lists the portpipe (port-set) or port pipes (port-sets) that are checked. Entering all shows th status for linecards or stack units and port-pipes in the chassis. The port set value is from 0 to Shows the CAM profile of the CAM. Identifies the amount of CAM space remaining for that profile. Estimates the amount of CAM space the listed policy will require.
Indicates whether or not the policy will be allowed in the CAM.
Dell#test cam-usage service-policy input In stack-unit all Stack-Unit | Portpipe | CAM Partition | Available CAM | Estimated CAM per Port| St ---------------------------------------------------------------------------------1 | 0 | IPv4Flow | 102 | 0| Allowed 1 | 0 | IPv4Flow | 102 | 0| Allowed Dell# ! Dell#test cam-usage service-policy input In stack-unit 1 port-set 0 Stack-Unit | Portpipe | CAM Partition | Available CAM | Estimated CAM per Port| St ---------------------------------------------------------------------------------1 | 0 | IPv4Flow | 102 | 0| Allowed Dell#
The following describes the test cam-usage command shown in the Example below.
Term
Explanation
Stack-Unit
Lists the stack unit or units that are checked. Entering all shows the status for all stacks.
Portpipe CAM Partition
Lists the portpipe (port-set) or port pipes (port-sets) that are checked. Entering all shows th status for linecards and port-pipes in the chassis.
Shows the CAM profile of the CAM.
Available CAM Identifies the amount of CAM space remaining for that profile.
Estimated CAM per Port
Status
Estimates the amount of CAM space the listed policy will require. Indicates whether or not the policy will be allowed in the CAM.
Dell#test cam-usage service-policy input LauraIn stack-unit all
Stack-Unit|Portpipe|CAM Partition|AvailableCAM|EstimatedCAM per Port|Status
------------------------------------------------------------------------
1|
0|
IPv4Flow|
102|
0|Allowed
1|
0|
IPv4Flow|
102|
0|Allowed
Dell#
!
Dell#test cam-usage service-policy input LauraIn stack-unit 0 port-set 0
Content Addressable Memory (CAM) 433
Stack-Unit|Portpipe|CAM Partition|Available CAM|EstimatedCAM per Port|Status
--------------------------------------------------------------------------
1|
0|
IPv4Flow|
102|
0|Allowed
Dell#
434 Content Addressable Memory (CAM)
12
Control Plane Policing (CoPP)
Control plane policing (CoPP) uses access control list (ACL) rules and quality of service (QoS) policies to create filters for a system's control plane. The CoPP filters prevent traffic that is not identified as legitimate from reaching the control plane, and rate-limit traffic to an acceptable level. On the Z9500 switch, the control plane has 24 queues (0 to 23) divided into groups of eight queues for the Route Processor, Control Processor, and line-card CPUs as follows: Queues 0 to 7 process packets destined to the Control Processor CPU . Queues 8 to 15 process packets destined to the Route Processor CPU. Queues 16 to 23 process packets destined to the line card CPU.
Topics:
� control-plane-cpuqos � service-policy rate-limit-cpu-queues � service-policy rate-limit-protocols � ip unknown-unicast � ipv6 unknown-unicast � show cpu-queue rate cp � show ip protocol-queue-mapping � show ipv6 protocol-queue-mapping � show mac protocol-queue-mapping
control-plane-cpuqos
To manage control-plane traffic, enter control-plane mode and configure the switch.
Syntax
control-plane-cpuqos
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.8.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Control Plane Policing (CoPP) 435
service-policy rate-limit-cpu-queues
Apply a policy map for the system to rate limit control traffic on a per-queue basis.
Syntax Parameters
service-policy rate-limit-cpu-queues policy-name
policy-name
Enter the service-policy name, using a string up to 32 characters.
Defaults
Not configured.
Command Modes CONTROL-PLANE-CPUQOS
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.8.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Usage Information
Related Commands
Create a policy-map by associating a queue number with the qos-policy. Create QoS policies prior to enabling this command. For CoPP, use the keyword cpu-qos when creating qos-policy-input.
qos-policy-input -- creates a QoS input policy map. policy-map-input -- creates an input policy map.
service-policy rate-limit-protocols
Apply a policy for the system to rate limit control protocols on a per-protocol basis.
Syntax Parameters
service-policy rate-limit-protocols policy-name
policy-name
Enter the service-policy name, using a string up to 32 characters.
Defaults
Not configured.
Command Modes CONTROL-PLANE-CPUQOS
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
436 Control Plane Policing (CoPP)
Usage Information
Related Commands
Version
9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.8.0
Description
Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
This command applies the service-policy based on the type of protocol defined in the ACL rules. Create ACL and QoS policies prior to enabling this command. For CoPP, use the keyword cpu-qos when creating qos-policy-input.
ip access-list extended -- creates an extended IP ACL. mac access-list extended -- creates an extended MAC ACL. qos-policy-input -- creates a QoS input policy map. class-map -- creates a QoS class map. policy-map-input -- creates an input policy map.
ip unknown-unicast
Enable IPv4 catch-all route.
Syntax
Defaults Parameters
ip unknown-unicast
To remove the IPv4 catch-all route (0.0.0.0/0) from the LPM route forwarding table in hardware which gets added as a default configuration after the initialization of FIB Agent module, use the no ip unknown-unicast command.
None
vrf vrf-name
(Optional) Enter the keyword vrf followed by the name of the VRF to enable catch-all routes corresponding to that VRF.
Command Modes CONFIGURATION
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
9.4(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S�Series.
Usage Information
Use this command to add the IPv4 catch-all route (0.0.0.0/0) in the LPM route forwarding table if it was deleted using the no ip unknown-unicast command previously. This will be the default configuration after reload.
Control Plane Policing (CoPP) 437
ipv6 unknown-unicast
Disable soft forwarding of unknown IPv6 destination packets.
Syntax
[no] ipv6 unknown-unicast
Defaults
Soft forwarding is enabled.
Command Modes CONFIGURATION
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000-ON.
9.4(0.0)
Introduced on the S4810, S4820T, S6000, and Z9000.
Usage Information
All the default catch-all entries in the longest prefix match (LPM) table collect and transmit all unresolved IPv6 packets to the CPU, even if they are destined for unknown destinations.
show cpu-queue rate cp
Display the rates for each CPU queue.
Syntax
show cpu-queue rate cp
Defaults
Not configured.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.8.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Usage Information
Example
This command applies the service-policy based on the type of protocol defined in the ACL rules. Create ACL and QoS policies prior to enabling this command.
Dell#show cpu-queue rate cp
Service-Queue
Rate (PPS)
--------------
-----------
Q0
1300
Burst () ----------512
438 Control Plane Policing (CoPP)
Q1
300
50
Q2
300
50
Q3
400
50
Q4
2000
50
Q5
300
50
Q6
400
50
Q7
400
50
Q8
400
50
Q9
600
50
Q10
300
50
Q11
300
50
show ip protocol-queue-mapping
Display the queue mapping for each configured protocol.
Syntax
show ip protocol-queue-mapping
Defaults
Not configured.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.8.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Example
Dell#show ip protocol-queue-mapping
Protocol Src-Port Dst-Port TcpFlag Queue EgPort Rate(kbps)
-------- -------- -------- ------- ----- ----------------
TCP (BGP)
any/179 179/any _
Q9
_
_
UDP (DHCP) 67/68
68/67
_
Q10 _
_
UDP (DHCP-R) 67
67
_
Q10 _
_
TCP (FTP)
any
21
_
Q6
_
_
ICMP
any
any
_
Q6
_
_
IGMP
any
any
_
Q11 _
_
TCP (MSDP) any/639 639/any _
Q11 _
_
UDP (NTP)
any
123
_
Q6
_
_
OSPF
any
any
_
Q9
_
_
PIM
any
any
_
Q11 _
_
UDP (RIP)
any
520
_
Q9
_
_
TCP (SSH)
any
22
_
Q6
_
_
TCP (TELNET) any
23
_
Q6
_
_
VRRP
any
any
_
Q10 _
_
Dell#
Control Plane Policing (CoPP) 439
show ipv6 protocol-queue-mapping
Display the queue mapping for each configured IPv6 protocol.
Syntax
show ipv6 protocol-queue-mapping
Defaults
Not configured.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.8.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810.
Example
Dell#show ipv6 protocol-queue-mapping
Protocol Src-Port Dst-Port TcpFlag Queue EgPort Rate (kbps)
-------- -------- -------- ------- ----- ------ -------
TCP (BGP) any/179 179/any _
Q9
_
_
ICMPV6 NA any
any
_
Q6
_
_
ICMPV6 RA any
any
_
Q6
_
_
ICMPV6 NS any
any
_
Q5
_
_
ICMPV6 RS any
any
_
Q5
_
_
ICMPV6
any
any
_
Q6
_
_
VRRPV6
any
any
_
Q10 _
_
OSPFV3
any
any
_
Q9
_
_
Dell#
show mac protocol-queue-mapping
Display the queue mapping for the MAC protocols.
Syntax
show mac protocol-queue-mapping
Defaults
Not configured.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
440 Control Plane Policing (CoPP)
Example
Version
9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.8.0
Description
Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Dell#show mac protocol-queue-mapping
Protocol Destination Mac
EtherType Queue EgPort Rate(kbps)
-------- -------------- --------- ----- ------ -----------
ARP
any
0x0806 Q5/Q6 CP
_
FRRP
01:01:e8:00:00:10/11 any
Q7
CP
_
LACP
01:80:c2:00:00:02
0x8809 Q7
CP
_
LLDP
any
0x88cc Q8
CP
_
GVRP
01:80:c2:00:00:21
any
Q8
CP
_
STP
01:80:c2:00:00:00
any
Q7
CP
_
ISIS
01:80:c2:00:00:14/15 any
Q9
CP
_
09:00:2b:00:00:04/05 any
Q9
CP
Dell#
Control Plane Policing (CoPP) 441
13
Data Center Bridging (DCB)
Data center bridging (DCB) refers to a set of IEEE Ethernet enhancements that provide data centers with a single, robust, converged network to support multiple traffic types, including local area network (LAN), server, and storage traffic.
The Dell Networking operating software commands for data center bridging features include 802.1Qbb priority-based flow control (PFC), 802.1Qaz enhanced transmission selection (ETS), and the data center bridging exchange (DCBX) protocol.
This chapter includes the following sections:
DCB Command PFC Commands ETS Commands DCBX Commands
Topics:
� DCB Command � PFC Commands � ETS Commands � DCBX Commands � dcb-map � priority-pgid � pfc mode on � priority-group bandwidth pfc � dcb-map stack-unit all stack-ports all � show qos dcb-map � dcb pfc-shared-buffer-size � dcb-buffer-threshold � priority � qos-policy-buffer � dcb-policy buffer-threshold (Interface Configuration) � dcb-policy dcb-buffer-threshold (Global Configuration) � show qos dcb-buffer-threshold � dcb pfc-total-buffer-size � show running-config dcb-buffer-threshold � service-class buffer shared-threshold-weight � dcb pfc-queues � dcb {ets | pfc} enable
DCB Command
The following DCB command is supported on the Dell Networking OS.
dcb-enable
Enable data center bridging.
Syntax
dcb enable[pfc-queues 1|4] To disable DCB, use the no dcb enable command.
442 Data Center Bridging (DCB)
Parameters
pfc-queues
Enter the pfc-queue range. To disable DCB, use the no dcb enable command. The range is from 1 or 2.
Defaults
None
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Version
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.16.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON and Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the MXL 10/40GbE Switch IO Module.
Usage Information
Related Commands
By default, iSCSI is enabled on the unit and the flow control is enabled on all of the interfaces. It is also acts as defaults when the link-level flow control is enabled on one or more interfaces. Enables priority flow control or enhance transmission selection on interface.
dcb <ets | pfc> enable -- enable priority flow control or enhanced transmission selection on interface.
PFC Commands
The following PFC commands are supported on the Dell Networking OS.
clear pfc counters
Clear the PFC TLV counters and PFC statistics on an interface or stack unit.
Syntax Parameters
clear pfc counters [port-type slot/port[/subport] | stack-unit {unit number | all } all stack-ports all}]
port-type
Enter the keywords port-type then the slot/port[/subport] information.
stack-unit unit number
Enter the keywords stack-unit then the stack-unit number to be cleared.
all stack-ports all Enter the keywords all stack-ports all to clear the counters on all interfaces.
statistics
Enter the keyboard statistics to clear the hardware PFC counters.
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Data Center Bridging (DCB) 443
Usage Information
Version
9.8(0.0) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.16.0
Description
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON and Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the MXL 10/40GbE Switch IO Module.
If you do not use the statistics parameter, both hardware and DCBx counters clear.
description
Enter a text description of the DCB policy (PFC input or ETS output).
Syntax
description text To remove the text description, use the no description command.
Parameters
text
Enter the description of the output policy. The maximum is 32 characters.
Defaults
none
Command Modes DCB INPUT POLICY DCB OUTPUT POLICY
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 8.3.19.0 8.3.12.0 8.3.16.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S4820T. Introduced on the S4810. Introduced on the MXL 10/40GbE Switch IO Module.
pfc mode on
Enable the PFC configuration on the port so that the priorities are included in DCBX negotiation with peer PFC devices.
Syntax
pfc mode on To disable the PFC configuration, use the no pfc mode on command.
Defaults
PFC mode is on.
Command Modes DCB INPUT POLICY
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0)
Introduced on the S3048-ON and S4048-ON.
444 Data Center Bridging (DCB)
Usage Information
Version
9.7(0.0) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.16.0
Description
Introduced on the S6000-ON and Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the MXL 10/40GbE Switch IO Module.
NOTE: Please note that Dell Networking does not recommended to use this command as it has been deprecated in the current 9.4.(0.0) release. A warning message appears when you try to run this command indicating that you have to use the dcb-map commands in the future.
By applying a DCB input policy with PFC enabled, you enable PFC operation on ingress port traffic. To achieve complete lossless handling of traffic, also enable PFC on all DCB egress ports or configure the dot1p priority-queue assignment of PFC priorities to lossless queues (refer to pfc no-drop queues).
To disable PFC operation on an interface, enter the no pfc mode on command in DCB Input Policy Configuration mode. PFC is enabled and disabled as global DCB operation is enabled (dcb-enable) or disabled (no dcb-enable).
You cannot enable PFC and link-level flow control at the same time on an interface.
pfc no-drop queues
Configure the port queues that still function as no-drop queues for lossless traffic.
Syntax
pfc no-drop queues queue-range To remove the no-drop port queues, use the no pfc no-drop queues command.
Parameters
queue-range
Enter the queue range. Separate the queue values with a comma; specify a priority range with a dash; for example, pfc no-drop queues 1,3 or pfc no-drop queues 7 or pfc no-drop queues 0,7. The range is from 0 to 3.
Defaults
No lossless queues are configured.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.16.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON and Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the MXL 10/40GbE Switch IO Module.
Usage Information
When you configure lossless queues on an interface, PFC priority configuration is not allowed on the dcb-input profile applied on the interface.
The maximum number of lossless queues globally supported on the switch is two.
The following lists the dot1p priority-queue assignments.
Data Center Bridging (DCB) 445
dot1p Value in Description heading the Incoming Frame
0
0
1
0
2
0
3
1
4
2
5
3
6
3
7
3
show dcb
Displays the data center bridging status, the number of PFC-enabled ports, and the number of PFC-enabled queues.
Syntax Parameters
show dcb [stack-unit unit-number] [port-set port-set-number]
unit-number
Enter the DCB unit number.
port-set-number Enter the port-set number.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.16.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON and Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the MXL 10/40GbE Switch IO Module.
Usage Information
Example
Specify a stack-unit number on the Master switch in a stack. Dell# show dcb stack-unit 1 port-set 0 DCB Status : Enabled PFC Port Count : 56 (current), 56 (configured) PFC Queue Count : 2 (current), 2 (configured)
show interface pfc
Displays the PFC configuration applied to ingress traffic on an interface, including priorities and link delay.
Syntax
show interface port-type slot/port[/subport] pfc {summary | detail | buffer-threshold}
446 Data Center Bridging (DCB)
Parameters
port-type slot/ port[/subport]
pfc
Enter the port-type slot and port PFC information. Enter the subport number if a 40G port is fanned-out into 10G ports.
{summary | detail Enter the keyword summary for a summary list of results or enter the keyword
| buffer-
detail for a full list of results. Use the keyword buffer-threshold to display
threshold}
the buffer threshold details.
NOTE: This command also enables you to view information corresponding to a range of ports. However, for Open Networking (ON) platforms the notation for specifying port range in the command is different from how you specify in non-ON platforms.
For non-ON platforms, you can specify multiple ports as slot/port-range. For example, if you want to display information corresponding to all ports between 1 and 4, specify the port range as show interfaces interface-type 1/1 - 4.
For ON platforms, you can specify multiple ports as slot/port/[subport] - slot/port/ [subport]. For example, if you want to display information corresponding to all ports between 1 and 4, specify the port range as show interfaces interface-type 1/1/1 - 1/1/4.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.9(0.0)
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2.(0.0) 8.3.19.0 8.3.12.0 8.3.16.0
Added support to display the interface configurations corresponding to a range of ports. Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Down status messages added. Introduced on the S4820T. Introduced on the S4810. Introduced on the MXL 10/40GbE Switch IO Module.
Usage Information
To clear the PFC TLV counters, use the clear pfc counters interface port-type slot/ port[/subport] command.
The following describes the show interface pfc summary command shown in the following example.
Field
Description
Interface
Interface type with stack-unit and port number.
Admin mode is on PFC admin mode is on or off with a list of the configured PFC priorities. When the Admin is enabled PFC admin mode is on, PFC advertisements are enabled to be sent and received
from peers; received PFC configuration take effect. The admin operational status for a DCBX exchange of PFC configuration is enabled or disabled.
Remote is enabled, Priority list Remote Willing Status is enabled
Operational status (enabled or disabled) of peer device for DCBX exchange of PFC configuration with a list of the configured PFC priorities. Willing status of peer device for DCBX exchange (Willing bit received in PFC TLV): enabled or disable.
Local is enabled DCBX operational status (enabled or disabled) with a list of the configured PFC priorities.
Data Center Bridging (DCB) 447
Field
Description
Operational status (local port)
Port state for current operational PFC configuration:
Init: Local PFC configuration parameters were exchanged with the peer. Recommend: Remote PFC configuration parameters were received from the
peer. Internally propagated: PFC configuration parameters were received
from the configuration source.
PFC DCBX Oper Operational status for the exchange of the PFC configuration on the local port:
status
match (up) or mismatch (down).
State Machine Type
Type of state machine used for DCBX exchanges of the PFC parameters: Feature -- for legacy DCBX versions; Symmetric -- for an IEEE version.
TLV Tx Status
Status of the PFC TLV advertisements: enabled or disabled.
PFC Link Delay Link delay (in quanta) used to pause specified priority traffic.
Application Priority TLV: FCOE TLV Tx Status
Status of FCoE advertisements in application priority TLVs from the local DCBX port: enabled or disabled.
Application Priority TLV: SCSI TLV Tx Status
Status of ISCSI advertisements in application priority TLVs from the local DCBX port: enabled or disabled.
Application Priority TLV: Local FCOE Priority Map
Priority bitmap the local DCBX port uses in FCoE advertisements in application priority TLVs.
Application Priority TLV: Local ISCSI Priority Map
Priority bitmap the local DCBX port uses in ISCSI advertisements in application priority TLVs.
Application Priority TLV: Remote FCOE Priority Map
Status of FCoE advertisements in application priority TLVs from the remote peer port: enabled or disabled.
Application Priority TLV: Remote ISCSI Priority Map
Status of iSCSI advertisements in application priority TLVs from the remote peer port: enabled or disabled.
PFC TLV Statistics: Input TLV pkts
Number of PFC TLVs received.
PFC TLV
Number of PFC TLVs transmitted.
Statistics:
Output TLV pkts
PFC TLV Statistics: Error pkts
Number of PFC error packets received.
PFC TLV
Number of PFC pause frames transmitted.
Statistics: Pause
Tx pkts
PFC TLV
Number of PFC pause frames received.
Statistics: Pause
Rx pkts
448 Data Center Bridging (DCB)
Example (Summary)
Dell# show interfaces tengigabitethernet 1/4 pfc summary Interface TenGigabitEthernet 1/4
Admin mode is on Admin is enabled Remote is enabled, Priority list is 4 Remote Willing Status is enabled Local is enabled Oper status is Recommended PFC DCBX Oper status is Up State Machine Type is Feature TLV Tx Status is enabled PFC Link Delay 45556 pause quantams Application Priority TLV Parameters : -------------------------------------FCOE TLV Tx Status is disabled ISCSI TLV Tx Status is disabled Local FCOE PriorityMap is 0x8 Local ISCSI PriorityMap is 0x10 Remote FCOE PriorityMap is 0x8 Remote ISCSI PriorityMap is 0x8 Dell# show interfaces tengigabitethernet 1/4 pfc detail Interface TenGigabitEthernet 1/4 Admin mode is on Admin is enabled Remote is enabled Remote Willing Status is enabled Local is enabled Oper status is recommended PFC DCBX Oper status is Up State Machine Type is Feature TLV Tx Status is enabled PFC Link Delay 45556 pause quanta Application Priority TLV Parameters : -------------------------------------FCOE TLV Tx Status is disabled ISCSI TLV Tx Status is disabled Local FCOE PriorityMap is 0x8 Local ISCSI PriorityMap is 0x10 Remote FCOE PriorityMap is 0x8 Remote ISCSI PriorityMap is 0x8 0 Input TLV pkts, 1 Output TLV pkts, 0 Error pkts, 0 Pause Tx pkts, 0 Pause Rx pkts
show interface pfc statistics
Displays counters for the PFC frames received and transmitted (by dot1p priority class) on an interface.
Syntax Parameters
show interface port-type slot/port[/subport] pfc statistics
port-type
slot/port [/ subport]
Enter the port type. Enter the slot/port number. Enter the subport number if a 40G port is fanned-out into 10G ports.
NOTE: This command also enables you to view information corresponding to a range of ports. However, for Open Networking (ON) platforms the notation for specifying port range in the command is different from how you specify in non-ON platforms.
For non-ON platforms, you can specify multiple ports as slot/port-range. For example, if you want to display information corresponding to all ports between 1 and 4, specify the port range as show interfaces interface-type 1/1 - 4.
Data Center Bridging (DCB) 449
For ON platforms, you can specify multiple ports as slot/port/[subport] - slot/port/ [subport]. For example, if you want to display information corresponding to all ports between 1 and 4, specify the port range as show interfaces interface-type 1/1/1 - 1/1/4.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.9(0.0)
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.16.0
Added support to display the interface configurations corresponding to a range of ports. Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the MXL 10/40GbE Switch IO Module.
Example (Summary)
Dell#show int te 1/1 pfc statistics
Interface TenGigabitEthernet 1/1
Priority Rx XOFF Frames Rx Total Frames Tx Total Frames
-------------------------------------------------
-
0
0
0
0
1
0
0
0
2
0
0
0
3
0
0
0
4
0
0
0
5
0
0
0
6
0
0
0
7
0
0
0
show stack-unit stack-ports pfc details
Displays the PFC configuration applied to ingress traffic on stacked ports, including PFC Operational mode on each unit with the configured priorities, link delay, and number of pause packets sent and received.
Syntax Parameters
show stack-unit {all | stack-unit} stack-ports {all | port-number} pfc details
stack-unit port-number
Enter the stack unit. Enter the port number.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 8.3.19.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S4820T.
450 Data Center Bridging (DCB)
Example (Summary)
Version
8.3.12.0 8.3.16.0
Description
Introduced on the S4810. Introduced on the MXL 10/40GbE Switch IO Module.
Dell(conf)# show stack-unit all stack-ports all pfc details stack unit 1 stack-port all
Admin mode is On Admin is enabled, Priority list is 4-5 Local is enabled, Priority list is 4-5 Link Delay 45556 pause quantum 0 Pause Tx pkts, 0 Pause Rx pkts stack unit 2 stack-port all Admin mode is On Admin is enabled, Priority list is 4-5 Local is enabled, Priority list is 4-5 Link Delay 45556 pause quantum 0 Pause Tx pkts, 0 Pause Rx pkts
ETS Commands
The following ETS commands are supported on the Dell Networking OS.
bandwidth-percentage
Configure the bandwidth percentage allocated to priority traffic in port queues.
Syntax
bandwidth-percentage percentage To remove the configured bandwidth percentage, use the no bandwidth-percentage command.
Parameters
percentage
(Optional) Enter the bandwidth percentage. The percentage range is from 1 to 100% in units of 1%.
Defaults
none
Command Modes QOS-POLICY-OUT-ETS
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.16.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON and Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the MXL 10/40GbE Switch IO Module.
Usage Information
By default, equal bandwidth is assigned to each port queue and each dot1p priority in a priority group. To configure bandwidth amounts in associated dot1p queues, use the bandwidth-percentage command. When specified bandwidth is assigned to some port queues and not to others, the remaining bandwidth (100% minus assigned bandwidth amount) is equally distributed to unassigned non-strict priority queues in
Data Center Bridging (DCB) 451
Related Commands
the priority group. The sum of the allocated bandwidth to all queues in a priority group must be 100% of the bandwidth on the link.
ETS-assigned bandwidth allocation applies only to data queues, not to control queues.
The configuration of bandwidth allocation and strict-queue scheduling is not supported at the same time for a priority group. If you configure both, the configured bandwidth allocation is ignored for prioritygroup traffic when you apply the output policy on an interface.
By default, equal bandwidth is assigned to each priority group in the ETS output policy applied to an egress port if you did not configure bandwidth allocation. The sum of configured bandwidth allocation to dot1p priority traffic in all ETS priority groups must be 100%. Allocate at least 1% of the total bandwidth to each priority group and queue. If bandwidth is assigned to some priority groups but not to others, the remaining bandwidth (100% minus assigned bandwidth amount) is equally distributed to nonstrict-priority groups which have no configured scheduler.
qos-policy-output ets -- creates a QoS output policy. scheduler -- schedules priority traffic in port queues.
clear ets counters
Clear all ETS TLV counters on an interface.
Syntax Parameters
clear ets counters port-type slot/port[/subport]
port-type
Enter the keywords port-type then the slot/port information.
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.16.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON and Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the MXL 10/40GbE Switch IO Module.
dcb-enable
Enable data center bridging.
Syntax
dcb enable[pfc-queues 1|4] To disable DCB, use the no dcb enable command.
Parameters
pfc-queues
Enter the pfc-queue range. To disable DCB, use the no dcb enable command. The range is from 1 or 2.
Defaults
None
Command Modes CONFIGURATION
452 Data Center Bridging (DCB)
Command History
Usage Information Related Commands
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Version
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.16.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON and Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the MXL 10/40GbE Switch IO Module.
By default, iSCSI is enabled on the unit and the flow control is enabled on all of the interfaces. It is also acts as defaults when the link-level flow control is enabled on one or more interfaces. Enables priority flow control or enhance transmission selection on interface.
dcb <ets | pfc> enable -- enable priority flow control or enhanced transmission selection on interface.
description
Enter a text description of the DCB policy (PFC input or ETS output).
Syntax
description text To remove the text description, use the no description command.
Parameters
text
Enter the description of the output policy. The maximum is 32 characters.
Defaults
none
Command Modes DCB INPUT POLICY DCB OUTPUT POLICY
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 8.3.19.0 8.3.12.0 8.3.16.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S4820T. Introduced on the S4810. Introduced on the MXL 10/40GbE Switch IO Module.
priority-list
Configure the 802.1p priorities for the traffic on which you want to apply an ETS output policy.
Syntax
priority-list value To remove the priority list, use the no priority-list command.
Data Center Bridging (DCB) 453
Parameters
value
Enter the priority list value. Separate priority values with a comma; specify a priority range with a dash; for example, priority-list 3,5-7. The range is from 0 to 7.
Defaults
none
Command Modes PRIORITY-GROUP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 8.3.19.0 8.3.12.0 8.3.16.0
Introduced on the S3048-ON and S4048-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the S4810. Introduced on the MXL 10/40GbE Switch IO Module.
Usage Information
By default:
All 802.1p priorities are grouped in priority group 0. 100% of the port bandwidth is assigned to priority group 0. The complete bandwidth is equally
assigned to each priority class so that each class has 12 to 13%.
qos-policy-output ets
To configure the ETS bandwidth allocation and scheduling for priority traffic, create a QoS output policy.
Syntax
qos-policy-output policy-name ets To remove the QoS output policy, use the no qos-policy-output ets command.
Parameters
policy-name
Enter the policy name. The maximum is 32 characters.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version 8.3.19.0 Version 8.3.12.0 Version 8.3.16.0
Introduced on the S4820T. Introduced on the S4810. Introduced on the MXL 10/40GbE Switch IO Module.
Usage Information
If an error occurs in an ETS output-policy configuration, the configuration is ignored and the scheduler and bandwidth allocation settings are reset to the ETS default values (all priorities are in the same ETS priority group and bandwidth is allocated equally to each priority).
If an error occurs when a port receives a peer's ETS configuration, the port's configuration is reset to the previously configured ETS output policy. If no ETS output policy was previously applied, the port is reset to the default ETS parameters.
You can only associate output QoS policy profiles with the priority groups in the DCB output profile context; output QoS policy profiles are not permitted on output policy-maps.
WRED, ECN, rate shaping, and rate limiting are not supported in output policies because DCBx does not negotiate these parameters with peer devices. You can apply a QoS output policy with WRED and/or rate shaping on a DCBx CIN-enabled interface.
454 Data Center Bridging (DCB)
Related Commands
If you enable the scheduler command for a QoS ETS output policy, no bandwidth percentage is assigned to the policy.
scheduler -- schedules the priority traffic in port queues. bandwidth-percentage -- bandwidth percentage allocated to the priority traffic in port queues.
scheduler
Configure the method used to schedule priority traffic in port queues.
Syntax
scheduler value To remove the configured priority schedule, use the no scheduler command.
Parameters
value
Enter schedule priority value. The range: strict: strict-priority traffic is serviced before any other queued traffic.
Defaults
Weighted Elastic Round Robin (WERR) scheduling is used to queue priority traffic.
Command Modes POLICY-MAP-OUT-ETS
Command History
This guide is platform-specific. For command information about other platformsand S4048�, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 8.3.19.0 8.3.12.0 8.3.16.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S4820T. Introduced on the S4810. Introduced on the MXL 10/40GbE Switch IO Module.
Usage Information
Related Commands
dot1p priority traffic on the switch is scheduled to the current queue mapping. dot1p priorities within the same queue must have the same traffic properties and scheduling method.
ETS-assigned scheduling applies only to data queues, not to control queues.
The configuration of bandwidth allocation and strict-queue scheduling is not supported at the same time for a priority group. If you configure both, the configured bandwidth allocation is ignored for prioritygroup traffic when you apply the output policy on an interface.
If you enable this command for a QoS ETS output policy, no bandwidth percentage is assigned to the policy.
qos-policy-output ets -- configures the ETS bandwidth allocation. bandwidth-percentage -- bandwidth percentage allocated to priority traffic in port queues.
show interface ets
Displays the ETS configuration applied to egress traffic on an interface, including priority groups with priorities and bandwidth allocation.
Syntax Parameters
show interface port-type slot/port[/subport] ets {summary | detail}
port-type slot/ port[/subport] ets
{summary | detail}
Enter the port-type slot and port ETS information. Enter the subport number if a 40G port is fanned-out into 10G ports.
Enter the keyword summary for a summary list of results or enter the keyword detail for a full list of results.
Data Center Bridging (DCB) 455
NOTE: This command also enables you to view information corresponding to a range of ports. However, for Open Networking (ON) platforms the notation for specifying port range in the command is different from how you specify in non-ON platforms.
For non-ON platforms, you can specify multiple ports as slot/port-range. For example, if you want to display information corresponding to all ports between 1 and 4, specify the port range as show interfaces interface-type 1/1 - 4.
For ON platforms, you can specify multiple ports as slot/port/[subport] - slot/port/ [subport]. For example, if you want to display information corresponding to all ports between 1 and 4, specify the port range as show interfaces interface-type 1/1/1 - 1/1/4.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.9(0.0)
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 9.2(0.2) 8.3.19.0 8.3.12.0 8.3.16.0
Added support to display the interface configurations corresponding to a range of ports. Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON and Z9500. Introduced on the S6000. Down status messages added. Introduced on the S4820T. Introduced on the S4810. Introduced on the MXL 10/40GbE Switch IO Module.
Example (Summary)
Dell#show interface te 1/3 ets de
Interface TenGigabitEthernet 1/3 Max Supported TC Groups is 4 Number of Traffic Classes is 8 Admin mode is on
Admin Parameters : -----------------Admin is enabled
TC-grp Priority# Bandwidth TSA
------------------------------------------------
0
-
-
1
0,1,2
100%
ETS
2
3
0 %
SP
3
4,5,6,7
0 %
SP
4
-
-
5
-
-
6
-
-
7
-
-
Remote Parameters : ------------------Remote is disabled
Local Parameters : -----------------Local is enabled
TC-grp Priority# Bandwidth TSA ------------------------------------------------
456 Data Center Bridging (DCB)
0
-
-
1
0,1,2
100%
ETS
2
3
0 %
SP
3
4,5,6,7
0 %
SP
4
-
-
5
-
-
6
-
-
7
-
-
Oper status is init ETS DCBX Oper status is Down State Machine Type is Asymmetric Conf TLV Tx Status is enabled Reco TLV Tx Status is enabled
0 Input Conf TLV Pkts, 1955 Output Conf TLV Pkts, 0 Error Conf TLV Pkts 0 Input Reco TLV Pkts, 1955 Output Reco TLV Pkts, 0 Error Reco TLV Pkts
Dell# show int te 1/3 ets de
Interface TenGigabitEthernet 1/3 Max Supported TC Groups is 4 Number of Traffic Classes is 8 Admin mode is on
Admin Parameters : -----------------Admin is enabled
TC-grp Priority# Bandwidth TSA
------------------------------------------------
0
-
-
1
0,1,2
100%
ETS
2
3
0 %
SP
3
4,5,6,7
0 %
SP
4
-
-
5
-
-
6
-
-
7
-
-
Remote Parameters : ------------------Remote is disabled
Local Parameters : -----------------Local is enabled
TC-grp Priority# Bandwidth TSA
------------------------------------------------
0
-
-
1
0,1,2
100%
ETS
2
3
0 %
SP
3
4,5,6,7
0 %
SP
4
-
-
5
-
-
6
-
-
7
-
-
Oper status is init ETS DCBX Oper status is Down State Machine Type is Asymmetric Conf TLV Tx Status is enabled Reco TLV Tx Status is enabled
0 Input Conf TLV Pkts, 1955 Output Conf TLV Pkts, 0 Error Conf TLV Pkts 0 Input Reco TLV Pkts, 1955 Output Reco TLV Pkts, 0 Error Reco TLV Pkts
Dell# show interfaces tengigabitethernet 1/1 ets detail Interface TenGigabitEthernet 1/1 Max Supported TC Groups is 4 Number of Traffic Classes is 8
Data Center Bridging (DCB) 457
Admin mode is on Admin Parameters : -----------------Admin is enabled TC-grp Priority# Bandwidth TSA 0 0,1,2,3,4,5,6,7 100% ETS 1 0% ETS 2 0% ETS 3 0% ETS 4 0% ETS 5 0% ETS 6 0% ETS 7 0% ETS Priority# Bandwidth TSA 0 13% ETS 1 13% ETS 2 13% ETS 3 13% ETS 4 12% ETS 5 12% ETS 6 12% ETS 7 12% ETS Remote Parameters: ------------------Remote is disabled Local Parameters : -----------------Local is enabled TC-grp Priority# Bandwidth TSA 0 0,1,2,3,4,5,6,7 100% ETS 1 0% ETS 2 0% ETS 3 0% ETS 4 0% ETS 5 0% ETS 6 0% ETS 7 0% ETS Priority# Bandwidth TSA 0 13% ETS 1 13% ETS 2 13% ETS 3 13% ETS 4 12% ETS 5 12% ETS 6 12% ETS 7 12% ETS Oper status is init Conf TLV Tx Status is disabled Traffic Class TLV Tx Status is disabled 0 Input Conf TLV Pkts, 0 Output Conf TLV Pkts, 0 Error Conf TLV Pkts 0T LIVnput Traffic Class TLV Pkts, 0 Output Traffic Class TLV Pkts, 0 Error Traffic Class Pkts
Example (Detail)
Dell(conf)# show interfaces tengigabitethernet 1/1 ets detail
Interface TenGigabitEthernet 1/1
Max Supported TC Groups is 4
Number of Traffic Classes is 8
Admin mode is on
Admin Parameters :
------------------
Admin is enabled
TC-grp Priority#
Bandwidth TSA
0
0,1,2,3,4,5,6,7 100%
ETS
1
0%
ETS
2
0%
ETS
3
0%
ETS
4
0%
ETS
5
0%
ETS
458 Data Center Bridging (DCB)
6
0%
ETS
7
0%
ETS
Priority# 0 1 2 3 4 5 6 7 Remote Parameters: ------------------Remote is disabled
Bandwidth TSA
13%
ETS
13%
ETS
13%
ETS
13%
ETS
12%
ETS
12%
ETS
12%
ETS
12%
ETS
Local Parameters :
------------------
Local is enabled
TC-grp Priority#
0
0,1,2,3,4,5,6,7
1
2
3
4
5
6
7
Bandwidth TSA
100%
ETS
0%
ETS
0%
ETS
0%
ETS
0%
ETS
0%
ETS
0%
ETS
0%
ETS
Priority#
Bandwidth TSA
0
13%
ETS
1
13%
ETS
2
13%
ETS
3
13%
ETS
4
12%
ETS
5
12%
ETS
6
12%
ETS
7
12%
ETS
Oper status is init
Conf TLV Tx Status is disabled
Traffic Class TLV Tx Status is disabled
0 Input Conf TLV Pkts, 0 Output Conf TLV Pkts, 0 Error Conf TLV Pkts
0 Input Traffic Class TLV Pkts, 0 Output Traffic Class TLV Pkts, 0 Error
Traffic Class
TLV
Pkts
show qos priority-groups
Displays the ETS priority groups configured on the switch, including the 802.1p priority classes and ID of each group.
Syntax
show qos priority-groups
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 8.3.19.0 8.3.12.0 8.3.16.0
Introduced on the S3048�ON and S4048�ON. Introduced on the S4820T. Introduced on the S4810. Introduced on the MXL 10/40GbE Switch IO Module.
Data Center Bridging (DCB) 459
Example (Summary)
Del#show qos priority-groups priority-group ipc
priority-list 4 set-pgid 2
show stack-unit stack-ports ets details
Displays the ETS configuration applied to egress traffic on stacked ports, including ETS Operational mode on each unit and the configurated priority groups with dot1p priorities, bandwidth allocation, and scheduler type.
Syntax Parameters
show stack-unit {all | stack-unit} stack-ports {all | port-number} ets details
stack-unit port-number
Enter the stack unit identification. Enter the port number.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 8.3.19.0 8.3.12.0 8.3.16.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S4820T. Introduced on the S4810. Introduced on the MXL 10/40GbE Switch IO Module.
Example (Summary)
Dell(conf)# show stack-unit all stack-ports all ets details
Stack unit 1 stack port all Max Supported TC Groups is 4 Number of Traffic Classes is 1 Admin mode is on
Admin Parameters:
--------------------
Admin is enabled
TC-grp Priority#
Bandwidth TSA
------------------------------------------------
0
0,1,2,3,4,5,6,7 100%
ETS
1
- -
2
- -
3
- -
4
- -
5
- -
6
- -
7
- -
8
- -
Stack unit 2 stack port all
Max Supported TC Groups is 4
Number of Traffic Classes is 1
Admin mode is on
Admin Parameters:
--------------------
Admin is enabled
TC-grp Priority#
Bandwidth TSA
------------------------------------------------
0
0,1,2,3,4,5,6,7 100%
ETS
1
-
-
460 Data Center Bridging (DCB)
2
-
-
3
-
-
4
-
-
5
-
-
6
-
-
7
-
-
8
-
-
DCBX Commands
The following DCBX commands are supported on the Dell Networking OS.
advertise dcbx-app-tlv
Configure DCBX to send iSCSI TLV advertisements.
Syntax
advertise dcbx-app-tlv iscsi
To disable DCBX iSCSI TLV advertisements, use the no advertise dcbx-app-tlv iscsi command.
Defaults
Enabled
Command Modes PROTOCOL LLDP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 8.3.19.0 8.3.12.0 8.3.16.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S4820T. Introduced on the S4810. Introduced on MXL 10/40GbE Switch IO Module.
Usage Information
You can configure iSCSI TLVs to send either globally or on a specified interface. The interface configuration takes priority over global configuration.
advertise dcbx-appln-tlv
On a DCBX port with a manual role, configure the application priority TLVs advertised on the interface to DCBX peers.
Syntax
advertise dcbx-appln-tlv {fcoe | iscsi}
To remove the application priority TLVs, use the no advertise dcbx-appln-tlv {fcoe | iscsi} command.
Parameters
{fcoe | iscsi}
Enter the application priority TLVs, where:
fcoe: enables the advertisement of FCoE in application priority TLVs. iscsi: enables the advertisement of iSCSI in application priority TLVs.
Defaults
Application priority TLVs are enabled to advertise FCoE and iSCSI.
Command Modes PROTOCOL LLDP
Data Center Bridging (DCB) 461
Command History
Usage Information
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.16.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON and Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the MXL 10/40GbE Switch IO Module.
To disable TLV transmission, use the no form of the command; for example, no advertise dcbxappln-tlv iscsi.
advertise dcbx-tlv
On a DCBX port with a manual role, configure the PFC and ETS TLVs advertised to DCBX peers.
Syntax
advertise dcbx-tlv {ets-conf | ets-reco | pfc} [ets-conf | ets-reco | pfc] [ets-conf | ets-reco | pfc]
To remove the advertised ETS TLVs, use the no advertise dcbx-tlv command.
Parameters
{ets-conf | etsreco | pfc}
Enter the PFC and ETS TLVs advertised, where:
ets-conf: enables the advertisement of ETS configuration TLVs. ets-reco: enables the advertisement of ETS recommend TLVs. pfc: enables the advertisement of PFC TLVs.
Defaults
All PFC and ETS TLVs are advertised.
Command Modes PROTOCOL LLDP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.16.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON and Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the MXL 10/40GbE Switch IO Module.
Usage Information
You can configure the transmission of more than one TLV type at a time; for example: advertise dcbx-tlv ets-conf ets-reco.
You can enable ETS recommend TLVs (ets-reco) only if you enable ETS configuration TLVs (etsconf). To disable TLV transmission, use the no form of the command; for example, no advertise dcbx-tlv pfc ets-reco.
DCBX requires that you enable LLDP to advertise DCBX TLVs to peers.
462 Data Center Bridging (DCB)
Configure DCBX operation at the INTERFACE level on a switch or globally on the switch. To verify the DCBX configuration on a port, use the show interface dcbx detail command.
dcbx port-role
Configure the DCBX port role the interface uses to exchange DCB information.
Syntax
dcbx port-role {config-source | auto-downstream | auto-upstream | manual}
To remove DCBX port role, use the no dcbx port-role {config-source | auto-downstream | auto-upstream | manual} command.
Parameters
config-source | Enter the DCBX port role, where:
auto-downstream | auto-upstream |
manual
config-source: configures the port to serve as the configuration source on the switch.
auto-upstream: configures the port to receive a peer configuration. The
configuration source is elected from auto-upstream ports.
auto-downstream: configures the port to accept the internally propagated DCB configuration from a configuration source.
manual: configures the port to operate only on administer-configured DCB parameters. The port does not accept a DCB configuration received form a peer or a local configuration source.
Defaults
Manual
Command Modes INTERFACE PROTOCOL LLDP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.16.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON and Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the MXL 10/40GbE Switch IO Module.
Usage Information
DCBX requires that you enable LLDP to advertise DCBX TLVs to peers.
Configure DCBX operation at the INTERFACE level on a switch or globally on the switch. To verify the DCBX configuration on a port, use the show interface dcbx detail command.
dcbx version
Configure the DCBX version used on the interface.
Syntax
dcbx version {auto | cee | cin | ieee-v2.5}
To remove the DCBX version, use the dcbx version {auto | cee | cin | ieee-v2.5} command.
Parameters
auto | cee | cin | Enter the DCBX version type used on the interface, where: ieee-v2.5
Data Center Bridging (DCB) 463
auto: configures the port to operate using the DCBX version received from a peer.
cee: configures the port to use CDD (Intel 1.01). cin: configures the port to use Cisco-Intel-Nuova (DCBX 1.0). ieee-v2: configures the port to use IEEE 802.1az (Draft 2.5).
Defaults
Auto
Command Modes INTERFACE PROTOCOL LLDP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.16.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON and Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the MXL 10/40GbE Switch IO Module.
Usage Information
DCBX requires that you enable LLDP to advertise DCBX TLVs to peers.
Configure DCBX operation at the INTERFACE level on a switch or globally on the switch. To verify the DCBX configuration on a port, use the show interface dcbx detail command.
debug dcbx
Enable DCBX debugging.
Syntax
debug dcbx {all | auto-detect-timer | config-exchng | fail | mgmt | resource | sem | tlv}
To disable DCBX debugging, use the no debug dcbx command.
Parameters
{all | autodetect-timer | config-exchng | fail | mgmt | resource | sem | tlv}
Enter the type of debugging, where:
all: enables all DCBX debugging operations. auto-detect-timer: enables traces for DCBX auto-detect timers. config-exchng: enables traces for DCBX configuration exchanges. fail: enables traces for DCBX failures. mgmt: enables traces for DCBX management frames. resource: enables traces for DCBX system resource frames. sem: enables traces for the DCBX state machine. tlv: enables traces for DCBX TLVs.
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
464 Data Center Bridging (DCB)
Version
9.8(0.0) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.16.0
Description
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON and Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the MXL 10/40GbE Switch IO Module.
fcoe priority-bits
Configure the FCoE priority advertised for the FCoE protocol in application priority TLVs.
Syntax
fcoe priority-bits priority-bitmap To remove the configured FCoE priority, use the no fcoe priority-bits command.
Parameters
priority-bitmap Enter the priority-bitmap range. The range is from 1 to FF.
Defaults
0x8
Command Modes PROTOCOL LLDP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.16.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON and Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the MXL 10/40GbE Switch IO Module.
Usage Information
This command is available at the global level only.
iscsi priority-bits
Configure the iSCSI priority advertised for the iSCSI protocol in application priority TLVs.
Syntax
iscsi priority-bits priority-bitmap To remove the configured iSCSI priority, use the no iscsi priority-bits command.
Parameters
priority-bitmap Enter the priority-bitmap range. The range is from 1 to FF.
Defaults
0x10
Command Modes PROTOCOL LLDP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Data Center Bridging (DCB) 465
Usage Information
Version
9.8(0.0) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.16.0
Description
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON and Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the MXL 10/40GbE Switch IO Module.
This command is available at the global level only.
show interface dcbx detail
Displays the DCBX configuration on an interface.
Syntax Parameters
show interface port-type slot/port[/subport] dcbx detail
port-type
slot/port[/ subport]
Enter the port type.
Enter the slot/port number. Enter the subport number if a 40G port is fanned-out into 10G ports.
NOTE: This command also enables you to view information corresponding to a range of ports. However, for Open Networking (ON) platforms the notation for specifying port range in the command is different from how you specify in non-ON platforms.
For non-ON platforms, you can specify multiple ports as slot/port-range. For example, if you want to display information corresponding to all ports between 1 and 4, specify the port range as show interfaces interface-type 1/1 - 4.
For ON platforms, you can specify multiple ports as slot/port/[subport] - slot/port/ [subport]. For example, if you want to display information corresponding to all ports between 1 and 4, specify the port range as show interfaces interface-type 1/1/1 - 1/1/4.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.9(0.0)
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 9.2.(0.0) 8.3.19.0 8.3.12.0 8.3.16.0
Added support to display the interface configurations corresponding to a range of ports. Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON and Z9500. Introduced on the S6000. Down status messages added. Introduced on the S4820T. Introduced on the S4810. Introduced on the MXL 10/40GbE Switch IO Module.
Usage Information
To clear DCBX frame counters, use the clear dcbx counters interface stack-unit/port command.
466 Data Center Bridging (DCB)
The following describes the show interface dcbx detail command shown in the following example.
Field
Description
Interface
Interface type with chassis slot and port number.
Port-Role
Configured the DCBX port role: auto-upstream, auto-downstream, config-source, or manual.
DCBX Operational Status
Operational status (enabled or disabled) used to elect a configuration source and internally propagate a DCB configuration. The DCBX operational status is the combination of PFC and ETS operational status.
Configuration Source
Specifies whether the port serves as the DCBX configuration source on the switch: true (yes) or false (no).
Local DCBX Compatibility mode
DCBX version accepted in a DCB configuration as compatible. In auto-upstream mode, a port can only receive a DCBX version supported on the remote peer.
Local DCBX
DCBX version configured on the port: CEE, CIN, IEEE v2.5, or Auto (port auto-
Configured mode configures to use the DCBX version received from a peer).
Peer Operating version
DCBX version that the peer uses to exchange DCB parameters.
Local DCBX TLVs Transmission status (enabled or disabled) of advertised DCB TLVs (see TLV code
Transmitted
at the top of the show command output).
Local DCBX Status: DCBX Operational Version
DCBX version advertised in Control TLVs.
Local DCBX Status: DCBX Max Version Supported
Highest DCBX version supported in Control TLVs.
Local DCBX
Sequence number transmitted in Control TLVs.
Status: Sequence
Number
Local DCBX Status: Acknowledgment Number
Acknowledgement number transmitted in Control TLVs.
Local DCBX Status: Protocol State
Current operational state of the DCBX protocol: ACK or IN-SYNC.
Peer DCBX Status: DCBX Operational Version
DCBX version advertised in Control TLVs received from the peer device.
Peer DCBX Status: DCBX Max Version Supported
Highest DCBX version supported in Control TLVs received from the peer device.
Peer DCBX
Sequence number transmitted in Control TLVs received from the peer device.
Status: Sequence
Number
Peer DCBX Status: Acknowledgment Number
Acknowledgement number transmitted in Control TLVs received from the peer device.
Data Center Bridging (DCB) 467
Example
Field
Total DCBX Frames transmitted
Total DCBX Frames received
Total DCBX Frame errors
Total DCBX Frames unrecognized
Description
Number of DCBX frames sent from the local port.
Number of DCBX frames received from the remote peer port. Number of DCBX frames with errors received. Number of unrecognizable DCBX frames received.
Dell#show interface tengigabitethernet 1/9 dcbx detail E-ETS Configuration TLV enabled
e-ETS Configuration TLV disabled R-ETS Recommendation TLV enabled
r-ETS Recommendation TLV disabled P-PFC Configuration TLV enabled
p-PFC Configuration TLV disabled F-Application priority for FCOE enabled
f-Application Priority for FCOE disabled I-Application priority for iSCSI enabled
i-Application Priority for iSCSI disabled ----------------------------------------------------------Interface TenGigabitEthernet 1/9
Remote Mac Address 00:00:00:00:00:11 Port Role is Auto-Upstream
DCBX Operational Status is Enabled Is Configuration Source? TRUE Local DCBX Compatibility mode is CEE Local DCBX Configured mode is CEE Peer Operating version is CEE Local DCBX TLVs Transmitted: ErPfi Local DCBX Status ----------------DCBX Operational Version is 0 DCBX Max Version Supported is 0 Sequence Number: 2 Acknowledgment Number: 2 Protocol State: In-Sync Peer DCBX Status: ---------------DCBX Operational Version is 0 DCBX Max Version Supported is 255 Sequence Number: 2 Acknowledgment Number: 2 Total DCBX Frames transmitted 27 Total DCBX Frames received 6 Total DCBX Frame errors 0 Total DCBX Frames unrecognized 0
dcb-map
Create a DCB map to configure priority flow control (PFC) and enhanced transmission selection (ETS) on Ethernet ports that support converged Ethernet traffic. Apply the DCB map to an Ethernet interface.
Syntax
dcb-map map-name
468 Data Center Bridging (DCB)
Parameters
map-name
Enter a DCB map name. The maximum number of alphanumeric characters is 32.
Defaults
None. There are no pre-configured PFC and ETS settings on S5000 Ethernet interfaces.
Command Modes CONFIGURATION
INTERFACE
Command History
Version
9.8(0.0) 9.7(0.0) 9.3(0.0)
Description
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON and Z9500. Introduced on the S4810 and S6000 platforms.
Usage Information
A DCB map is a template used to configure DCB parameters and apply them on converged Ethernet interfaces. DCB parameters include priority-based flow control (PFC) and enhanced traffic selection (ETS).
To display the PFC and ETS settings in DCB maps, enter the show qos dcb-map command.
Use the dcb-map command to create a DCB map to specify PFC and ETS settings and apply it on Ethernet ports. After you apply a DCB map to an interface, the PFC and ETS settings in the map are applied when the Ethernet port is enabled. DCBx is enabled on Ethernet ports by default.
The dcb-map command is supported only on physical Ethernet interfaces.
To remove a DCB map from an interface, enter the no dcb-map map-name command in Interface configuration mode.
priority-pgid
Assign 802.1p priority traffic to a priority group in a DCB map.
Syntax Parameters
priority-pgid dot1p0_group-num dot1p1_group-num dot1p2_group-num dot1p3_group-num dot1p4_group-num dot1p5_group-num dot1p6_group-num dot1p7_group-num
dot1p0_groupnum
dot1p1_groupnum
dot1p2_groupnum
dot1p3_groupnum
dot1p4_groupnum
dot1p5_groupnum
dot1p6_groupnum
dot1p7_groupnum
Enter the priority group number for each 802.1p class of traffic in a DCB map.
Defaults
None
Command Modes DCB MAP
Data Center Bridging (DCB) 469
Command History
Usage Information
Version
9.8(0.0) 9.7(0.0) 9.3(0.0)
Description
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON and Z9500. Introduced on the S4810, S6000 platforms.
PFC and ETS settings are not pre-configured on Ethernet ports. You must use the dcb-map command to configure different groups of 802.1p priorities with PFC and ETS settings.
Using the priority-pgid command, you assign each 802.1p priority to one priority group. A priority group consists of 802.1p priority values that are grouped together for similar bandwidth allocation and scheduling, and that share latency and loss requirements. All 802.1p priorities mapped to the same queue must be in the same priority group. For example, the priority-pgid 0 0 0 1 2 4 4 4 command creates the following groups of 802.1p priority traffic:
Priority group 0 contains traffic with dot1p priorities 0, 1, and 2.
Priority group 1 contains traffic with dot1p priority 3.
Priority group 2 contains traffic with dot1p priority 4.
Priority group 4 contains traffic with dot1p priority 5, 6, and 7.
To remove a priority-pgid configuration from a DCB map, enter the no priority-pgid command.
pfc mode on
Enable the PFC configuration on the port so that the priorities are included in DCBX negotiation with peer PFC devices.
Syntax
pfc mode on To disable the PFC configuration, use the no pfc mode on command.
Defaults
PFC mode is on.
Command Modes DCB MAP
Command History
Version
9.8(0.0)
9.7(0.0)
9.3(0.0)
Description
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON. Introduced on the MXL 10/40GbE Switch with the FC Flex IO module.
Usage Information
By applying a DCB input policy with PFC enabled, you enable PFC operation on ingress port traffic. To achieve complete lossless handling of traffic, also enable PFC on all DCB egress ports or configure the dot1p priority-queue assignment of PFC priorities to lossless queues (refer to pfc no-drop queues).
To disable PFC operation on an interface, enter the no pfc mode on command in DCB Input Policy Configuration mode. PFC is enabled and disabled as global DCB operation is enabled (dcb-enable) or disabled (no dcb-enable).
You cannot enable PFC and link-level flow control at the same time on an interface.
NOTE: Please note that Dell Networking does not recommended to use this command as it has been deprecated in the current 9.4(0.0) release. A warning message appears when you try to run this command indicating that you have to use the dcb-map commands in the future.
470 Data Center Bridging (DCB)
priority-group bandwidth pfc
Configure the ETS bandwidth allocation and PFC mode used to manage port traffic in an 802.1p priority group.
Syntax Parameters
priority-group group-num {bandwidth percentage| strict-priority} pfc {on | off}
priority-group group-num
bandwidth percentage
strict-priority
pfc {on | off}
Enter the keyword priority-group followed by the number of an 802.1p priority group. Use the priority-pgid command to create the priority groups in a DCB map.
Enter the keyword bandwidth followed by a bandwidth percentage allocated to the priority group. The range of valid values is 1 to 100. The sum of all allocated bandwidth percentages in priority groups in a DCB map must be 100%.
Configure the priority-group traffic to be handled with strict priority scheduling. Strict-priority traffic is serviced first, before bandwidth allocated to other priority groups is made available.
Configure whether priority-based flow control is enabled (on) or disabled (off) for port traffic in the priority group.
Defaults
None
Command Modes DCB MAP
Command History
Version
9.8(0.0)
9.7(0.0)
9.3(0.0)
Description
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON and Z9500. Introduced on the S4810, S6000 platforms.
Usage Information
Use the dcb-map command to configure priority groups with PFC and/or ETS settings and apply them to Ethernet interfaces.
Use the priority-pgid command to map 802.1p priorities to a priority group. You can assign each 802.1p priority to only one priority group. A priority group consists of 802.1p priority values that are grouped together for similar bandwidth allocation and scheduling, and that share latency and loss requirements. All 802.1p priorities mapped to the same queue must be in the same priority group.
Repeat the priority-group bandwidth pfc command to configure PFC and ETS traffic handling for each priority group in a DCB map.
You can enable PFC on a maximum of two priority queues.
If you configure more than one priority group as strict priority, the higher numbered priority queue is given preference when scheduling data traffic.
If a priority group does not use its allocated bandwidth, the unused bandwidth is made available to other priority groups.
To remove a priority-group configuration in a DCB map, enter the no priority-group bandwidth pfc command.
By default, equal bandwidth is assigned to each dot1p priority in a priority group. Use the bandwidth parameter to configure the bandwidth percentage assigned to a priority group. The sum of the bandwidth allocated to all priority groups in a DCB map must be 100% of the bandwidth on the link. You must allocate at least 1% of the total port bandwidth to each priority group.
dcb-map stack-unit all stack-ports all
Apply the specified DCB map on all ports of the switch stack.
Syntax
dcb-map stack-unit all stack-ports all dcb-map-name
Data Center Bridging (DCB) 471
Parameters
To remove the PFC and ETS settings in a DCB map from all stack units, use the no dcb-map stackunit all stack-ports all command.
dcb-map-name Enter the name of the DCB map.
Defaults
None
Command Modes CONFIGURATION
Command History
Version
9.8(0.0)
9.7(0.0)
9.3(0.0)
Description
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON. Introduced on the S4810 and S6000 platforms.
Usage Information
The dcb-map stack-unit all stack-ports all command overwrites any previous DCB maps applied to stack ports.
show qos dcb-map
Display the DCB parameters configured in a specified DCB map.
Syntax Parameters
show qos dcb-map map-name
map-name
Displays the PFC and ETS parameters configured in the specified map.
Command Modes EXEC EXEC Privilege
Command History
Version
9.8(0.0) 9.7(0.0) 9.3(0.0) 9.3(0.0)
Description
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON. Introduced on the S4810 and S6000 platforms. Introduced on the FC Flex IO module installed in the MXL 10/40GbE Switch.
Usage Information
Use the show qos dcb-map command to display the enhanced transmission selection (ETS) and priority-based flow control (PFC) parameters used to configure server-facing Ethernet ports. S5000 Ethernet ports are DCBx-enabled by default.
The following table describes the show qos dcb-map output shown in the example below.
Field
Description
State
PFC Mode PG TSA
BW PFC
Complete: All mandatory DCB parameters are correctly configured. In progress: The DCB map configuration is not complete. Some mandatory parameters are not configured.
PFC configuration in DCB map: On (enabled) or Off.
Priority group configured in the DCB map.
Transmission scheduling algorithm used by the priority group: Enhanced Transmission Selection (ETS).
Percentage of bandwidth allocated to the priority group.
PFC setting for the priority group: On (enabled) or Off.
472 Data Center Bridging (DCB)
Example
Field
Priorities
Description
802.1p priorities configured in the priority group.
Dell# show qos dcb-map dcbmap2 State :Complete PfcMode:ON -------------------PG:0 TSA:ETS BW:50 PFC:OFF Priorities:0 1 2 4 5 6 7
PG:1 TSA:ETS BW:50 PFC:ON Priorities:3
dcb pfc-shared-buffer-size
Configure the maximum amount of shared buffer size for PFC packets in kilobytes.
Syntax Parameters
dcb pfc-shared--buffer--size KB
KB
Enter a number in the range of 0 to 7787.
Default
The default is 832KB.
Command Modes CONFIGURATION mode
Command History
Version
9.8(0.0)
Description
Introduced on the S4048-ON.
9.7(0.0)
Introduced on the S6000-ON and Z9500.
9.6(0.0)
Introduced on the S5000.
9.3(0.0)
Introduced on the S4810, S4820T, and S6000 platforms.
Usage Information
Configure the maximum shared buffer available for PFC traffic. You can choose to increase or decrease the shared buffer that is allocated in the system by default. Configure the shared buffer size less than the total PFC buffer size. If the buffer size and DCB buffer threshold settings are applied on one or more ports, a validation is performed to determine whether following condition is satisfied: If the shared buffer size is more than the total PFC buffer size value, the configuration is not saved and a system logging message is generated as follows:
Shared-pfc-buffer-size <= (Total-pfc-buffer-size -- pfc priority <> buffer-size on each port, priority).
Dell(conf)#dcb pfc-shared-buffer-size 2000 %ERROR: pfc shared buffer size configured cannot accommodate existing buffer requirement in the system.
Enter a smaller value for the shared buffer size or increase the total buffer size appropriately by using the dcb pfc-total- buffer-size command.
Example
Dell(conf)#dcb pfc-shared-buffer-size 5000
dcb-buffer-threshold
Configure the profile name for the DCB buffer threshold.
Syntax
dcb buffer--threshold
Data Center Bridging (DCB) 473
Parameters
profile-name
Enter the name of the profile, which can be a string of up to 32 characters in length.
Default
None
Command Modes CONFIGURATION mode
Command History
Version
9.8(0.0)
Description
Introduced on the S4048-ON.
9.7(0.0)
Introduced on the S6000-ON and Z9500.
9.6(0.0)
Introduced on the S5000.
9.3(0.0)
Introduced on the S4810, S4820T, and S6000.
Usage Information
When you enter the profile name, you enter the DCB buffer threshold configuration mode. You can specify the shared buffer threshold limit, the ingress buffer size, buffer limit for pausing the acceptance of packets, and the buffer offset limit for resuming the acceptance of received packets.
Example
S4810-YU-MR-Dell(conf)#dcb buffer--threshold test
Example of
qos-policy-buffer queue queue-num pause no-drop queue buffer-size size
commands in dcb pause-threshold threshold-value resume-offset threshold-value shared-
buffer--
threshold-weight size
threshold mode
Dell(conf)# qos-policy-buffer test Dell(conf-qos-policy-buffer)#queue 0 pause no-drop buffer-size 128000 pause-threshold 103360 resume-threshold 83520 Dell(conf-qos-policy-buffer)# queue 4 pause no-drop buffer-size 128000 pause-threshold 103360 resume-threshold 83520
priority value buffer-size size pause-threshold threshold-value resumeoffset threshold-value shared-threshold-weight size
Dell(conf-dcb-buffer-thr)#priority 0 buffer-size 52 pause-threshold 16 resume-offset 10 shared-threshold-weight 7
priority
Configure the priority for the PFC threshold to be allocated to the buffer space parameters. This utility is supported on the platforms.
Syntax Parameters
priority value buffer-size size pause-threshold threshold-value resumeoffset threshold-value shared-threshold-weight size
priority value
buffer-size size
pause-threshold threshold-value
resume-offset threshold-value
Specify the priority of the queue for which the buffer space settings apply
Enter a number in the range of 0 to 7 to denote the priority to be allocated to the dynamic buffer control mechanism
Ingress buffer size
Size of the ingress buffer in KB. Enter a number in the range of 0 to 7787. The default is 45 KB.
Buffer limit for pause frames to be sent
Buffer limit at which the port sends the pause to peer in KB. Enter a number in the range of 0 to 7787. The default is 10 KB.
Buffer offset limit for resuming in KB
Buffer offset limit at which the port resumes the peer in KB. Enter a number in the range of 1 to 7787. The default is 10 KB.
474 Data Center Bridging (DCB)
shared-
Buffer shared threshold weight
threshold-weight
size
Weightage of the priorities on the shared buffer size in the system. Enter a number
in the range of 0 to 9. The default shared threshold weight is 10.
Default
The default size of the ingress buffer is 45 KB. The default buffer limit at which the port sends the pause to peer and recommences the sending of packets to the peer is 10 KB. The default threshold weight of the shared buffer space is 10.
Command Modes DCB-BUFFER-THRESHOLD mode
Command History
Version
9.8(0.0)
Description
Introduced on the S3048-ON and S4048-ON.
9.7(0.0)
Introduced on the S6000-ON.
9.3(0.0)
Introduced on the S4810, S4820T, and S6000 platforms.
Usage Information
For each priority, you can specify the shared buffer threshold limit, the ingress buffer size, buffer limit for pausing the acceptance of packets, and the buffer offset limit for resuming the acceptance of received packets. When PFC detects congestion on a queue for a specified priority, it sends a pause frame for the 802.1p priority traffic to the transmitting device.
You can use the priority command to set up both the administrative and peer-related PFC priorities. For example, you can configure the intended buffer configuration for all eight priorities. If you configure the number of lossless queues as 4 and if the administrator-configured priorities configured within the DCB input policy is applied, then the configuration for those priorities are pre-designed. However, if the peer-provided priorities are applied, although a DCB input policy is present, the peer-provided priorities become effective for buffer configuration. This method of configuration provides an easy and flexible technique to accommodate both administratively-configured and peer-configured priorities.
Example
Dell(conf-dcb-buffer-thr)#priority 0 buffer-size 52 pause-threshold 16 resume-offset 10 shared-threshold-weight 7
qos-policy-buffer
Create a QoS policy buffer and enter the configuration mode to configure the no-drop queues, ingress buffer size, buffer limit for pausing, and buffer offset limit for resuming.
Syntax Parameters
qos-policy-buffer queue queue-num pause no-drop queue buffer-size size pause-threshold threshold-value resume-offset threshold-value sharedthreshold-weight size
policy-name
Name of the QoS policy buffer that is applied to an interface for this setting to be effective in conjunction with the DCB input policy. You can specify the shared buffer threshold limit, the ingress buffer size, buffer limit for pausing the acceptance of packets, and the buffer offset limit for resuming the acceptance of received packets. This method of configuration enables different peer-provided and administrative priorities to be set up because the intended queue is directly configured instead of determining the priority to queue mapping for local and remote parameters.
queue 0 to queue Specify the queue number to which the QoS policy buffer parameters apply 7
pause
Pause frames to be sent at the specified buffer limit levels and pause packet settings
no-drop
The packets for this queue must not be dropped
value
Enter a number in the range of 0 to 7 to denote the priority to be allocated to the dynamic buffer control mechanism
buffer-size
Ingress buffer size
Data Center Bridging (DCB) 475
size
Size of the ingress buffer in KB. Enter a number in the range of 0 to 7787. The
default is 45 KB.
pause-threshold Buffer limit for pause frames to be sent
threshold-value Buffer limit at which the port sends the pause to peer in KB. Enter a number in the range of 0 to 7787. The default is 10 KB.
resume-offset Buffer offset limit for resuming in KB
threshold-value Buffer offset limit at which the port resumes the peer in KB. Enter a number in the range of 1 to 7787. The default is 10 KB.
shared-
Buffer shared threshold weight
threshold-weight
size
Weightage of the priorities on the shared buffer size in the system. Enter a number
in the range of 0 to 9. The default shared threshold weight is 10.
Default
The default size of the ingress buffer is 45 KB. The default buffer limit at which the port sends the pause to peer and recommences the sending of packets to the peer is 10 KB. The default threshold weight of the shared buffer space is 10.
Command Modes DCB-BUFFER-THRESHOLD mode
Command History
Version
9.8(0.0)
Description
Introduced on the S3048-ON and S4048-ON.
9.7(0.0)
Introduced on the S6000-ON and Z9500.
9.3(0.0)
Introduced on the S4810, S4820T, S6000, and MXL platforms.
Usage Information
You must apply this buffer policy at the interface level for the attributes to be applicable in conjunction with the DCB input policy.
For each QoS policy buffer, you can specify the shared buffer threshold limit, the ingress buffer size, buffer limit for pausing the acceptance of packets, and the buffer offset limit for resuming the acceptance of received packets. When PFC detects congestion on a queue for a specified priority, it sends a pause frame for the 802.1p priority traffic to the transmitting device.
You can use set up both the administrative and peer-related PFC priorities. For example, you can configure the intended buffer configuration for all 8 priorities. If you configure the number of lossless queues as 4 and if the administrator-configured priorities configured within the DCB input policy is applied, then the configuration for those priorities are pre-designed. However, if the peer-provided priorities are applied, although a DCB input policy is present, the peer-provided priorities become effective for buffer configuration. This method of configuration provides an easy and flexible technique to accommodate both administratively-configured and peer-configured priorities.
Example
Dell(conf)# qos-policy-buffer test
Dell(conf-qos-policy-buffer)#queue 0 pause no-drop buffer-size 128000 pause-threshold 103360 resume-threshold 83520
Dell(conf-qos-policy-buffer)# queue 4 pause no-drop buffer-size 128000 pause-threshold 103360 resume-threshold 83520
dcb-policy buffer-threshold (Interface Configuration)
Assign the DCB policy to the DCB buffer threshold profile on interfaces. This setting takes precedence over the global bufferthreshold setting.
Syntax Parameters
dcb-policy buffer-threshold profile-name buffer-threshold Configure the profile name for the DCB buffer threshold
476 Data Center Bridging (DCB)
profile-name
Enter the name of the profile, which can be a string of up to 32 characters in length.
Default
None
Command Modes INTERFACE mode
Command History
Version
9.8(0.0)
9.7(0.0)
9.3(0.0)
Description
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON and Z9500. Introduced on the S4810, S4820T, and S6000 platforms.
Usage Information
You can configure up to a maximum of four lossless (PFC) queues. By configuring four lossless queues, you can configure four different priorities and assign a particular priority to each application that your network is used to process. For example, you can assign a higher priority for time-sensitive applications and a lower priority for other services, such as file transfers. You can configure the amount of buffer space to be allocated for each priority and the pause or resume thresholds for the buffer. This method of configuration enables you to effectively manage and administer the behavior of lossless queues.
Example
Dell(conf-if-te-1/1)#dcb-policy buffer-threshold test
dcb-policy dcb-buffer-threshold (Global Configuration)
Assign the dcb buffer threshold policy on the stack ports. To apply the dcb buffer threshold policy on the stack-units, use the configuration mode. To apply on front-end ports, use the interface mode.
Syntax Parameters
dcb-policy buffer-threshold stack-unit all stack-ports all profile-name
dcb-bufferthreshold profile-name
stack-unit all
stack-port all
Configure the profile name for the DCB buffer threshold
Enter the name of the profile, which can be a string of up to 32 characters in length. Enter the stack unit identification. Indicates the specific the stack unit or units. Entering all shows the status for all stacks. Enter the port number of a port in a switch stack.
Default
None
Command Modes CONFIGURATION mode
Command History
Version
9.9(0.0)
Description
Introduced on the S6000 and the S6000�ON.
9.8(0.0)
Introduced on the S4048-ON.
9.6(0.0)
Introduced on the S5000.
9.3(0.0)
Introduced on the S4810 and S4820T platforms.
Usage Information
You can configure up to a maximum of four lossless (PFC) queues. By configuring four lossless queues, you can configure four different priorities and assign a particular priority to each application that your network is used to process. For example, you can assign a higher priority for time-sensitive applications and a lower priority for other services, such as file transfers. You can configure the amount of buffer space for each priority and the pause or resume thresholds for the buffer. This method of configuration enables you to manage and administer the behavior of lossless queues.
Data Center Bridging (DCB) 477
Example for Configuration Mode
Example for Interface Mode
Dell(conf)# dcb-policy buffer-threshold stack-unit all stack-ports all test Dell(conf-if-te-1/1)#dcb-policy buffer-threshold test
show qos dcb-buffer-threshold
Displays the DCB buffer threshold assigned to a QoS policy. This command is supported on the platform.
Syntax Parameters
show qos dcb buffer-threshold {name}
name
Enter the name of the profile, which can be a string of up to 32 characters in length.
Command Modes EXEC EXEC Privilege
Usage Information
The following table describes the output fields displayed for the show command:
Field
Description
Name
Buffer threshold parameters
Name of the DCB buffer threshold profile Buffer size allocated for the PFC priority queue and the priority of the queue
Example
Dell#show qos dcb buffer-threshold
Name :
test1
Buffer threshold parameters:
pfc priority 0 buffer-size 40
pfc priority 3 buffer-size 50
Command History
Version
9.7(0.0) 9.3(0.0)
Description
Introduced on the S6000-ON and Z9500. Introduced on the S6000 platform.
dcb pfc-total-buffer-size
Configure the total buffer size for PFC in kilobytes.
Syntax Parameters
dcb pfc-total--buffer--size KB
KB
Enter a number in the range of 0 to 7787.
Default
The default is 6592KB.
Command Modes CONFIGURATION mode
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048�ON.
9.7(0.0)
Introduced on the S6000-ON.
9.6(0.0)
Introduced on the S5000.
478 Data Center Bridging (DCB)
Usage Information
Example
Version
9.3(0.0)
Description
Introduced on the S6000, S4810, and S4820T.
Configure the maximum buffer available for PFC traffic. You can choose to increase or decrease the buffer size that is allocated in the system by default. However, if you modify the PFC buffer size lower than the previously configured size, the system determines whether this reduction in size is valid without disrupting the existing configuration. In such a scenario, disable and re-enable DCB. For example, if you modify the total buffer size as 4000 KB from the previous size of 5000 KB, an error message is displayed that this reduction cannot be performed owing to existing system configuration because of queues that are being currently in process.
The lossless queue limit per port is validated based on the dcb pfc-queues command. PFC queue configuration identifies the maximum number of queues a port can support. Although the queue limit per port is a baseline when dynamic buffering is enabled, the limit per port for queues depends on the availability of the buffer.
Dell(conf)#dcb pfc-total-buffer-size 5000
Dell(conf)#dcb pfc-total-buffer-size 4000
%ERROR: Total pfc buffer size configured cannot accommodate existing buffer requirement in the system.
show running-config dcb-buffer-threshold
Displays the DCB buffer threshold details in the running configuration.
Syntax
show running--config buffer-threshold
Command Modes EXEC
EXEC Privilege
Command History
Version
9.7(0.0) 9.3(0.0)
Description
Introduced on the S6000-ON and Z9500. Introduced on the S6000 platform.
Usage Information
The following table describes the output fields displayed for the show running-config dcbbuffer-threshold command:
Field
Description
Field
Description
Profile name
Name of the DCB buffer threshold profile
Priority
The priority of the queue for which the buffer space settings apply
buffer-size
Ingress buffer size
pause-threshold- Buffer limit at which the port sends the pause to peer in KB. value
resume-
Buffer offset limit at which the port resumes the peer in KB.
threshold-value
Example
Dell#show run buffer-threshold ! dcb-buffer-threshold test1 pfc priority 0 buffer-size 40
Data Center Bridging (DCB) 479
pfc priority 3 buffer-size 50 ! dcb-buffer-threshold test2 pfc priority 0 buffer-size 80 pause-threshold 50 ! dcb-buffer-threshold test3 pfc priority 0 buffer-size 80 pause-threshold 60 resume-threshold 30
On interface on which PFC is enabled:
Show interface tengigabitethernet 1/1 pfc buffer-threshold
----------------------------------------------------------------------
Queue# Lossless Buffer-size Pause-threshold Resume-offset Shared
threshold
(KB)
(KB)
(KB)
weight
-----------------------------------------------------------------------
0
No
-
-
-
-
1
No
-
-
-
-
2
Yes
-
20
-
9
3
Yes
52
25
15
0
4
Yes
-
45
25
5
5
No
-
-
-
-
6
No
-
-
-
-
7
No
-
-
-
-
-
Denotes dynamic buffering is enabled in respective queues
On interface in which PFC is not enabled: Dell#show interface tengigabitethernet 1/20 pfc buffer-threshold
The following table describes the output fields displayed for the show interface pfc bufferthreshold command:
Field
Description
queue
Number of the queue
lossless
Whether the queue is a lossy or lossless queue for which buffer threshold is configured
buffer-size
Ingress buffer size
pause-threshold- Buffer limit at which the port sends the pause to peer in KB. value
resume-
Buffer offset limit at which the port resumes the peer in KB.
threshold-value
shared threshold Weightage of the priorities on the shared buffer size in the system. weight
service-class buffer shared-threshold-weight
Create a service class and associate the threshold weight of the shared buffer with each of the queues per port in the egress direction.
Syntax Parameters
[No] Service-class buffer shared-threshold-weight {[queue0 number] || [queue1 number] || [queue2 number] || [queue3 number] || [queue4 number] || [queue5 number] || [queue6 number] || [queue7 number]}
buffer
Define the shared buffer settings
shared-
Specify the weight of a queue for the shared buffer space
threshold-weight
480 Data Center Bridging (DCB)
queue 0 to queue To apply the shared-threshold weight, specify the queue number 7
number
Enter a weight for the queue on the shared buffer as a number in the range of 1 to 11.
Default
The default threshold weight on the shared buffer for each queue is 9. Therefore, each queue can consume up to 66.67 percent of available shared buffer by default.
Command Modes INTERFACE mode
Command History
Version
9.9(0.0)
Description
Introduced on the Z9500, S4810, S4820T, S5000, and S4048�ON.
9.7(0.0)
Introduced on the S6000-ON.
9.3(0.0)
Introduced on the S6000.
Usage Information
You can configure all the data queues. You can configure queues 0-7.
The following table describes the mapping between the threshold weight of the shared buffer on the queue. It also shows the percentage of the available shared buffer used by the queues for each of the corresponding threshold weights of the shared buffer:
sharedthresholdweight on the queue
% of available shared buffer that can be consumed by the queue
0
No dynamic sharing; shared buffer = 0.
1
0.77%
2
1.54%
3
3.03%
4
5.88%
5
11.11%
6
20%
7
33.33%
8
50%
9
66.67%
10
80%
11
88.89%
Example
Dell(conf-if-te-1/8)#Service-class buffer shared-threshold-weight queue5 4 queue7 6
dcb pfc-queues
Configure the number of PFC queues.
Syntax Parameters
dcb pfc-queues value
value
Enter the number of PFC queues in the range of 0 through 4. The number of ports supported based on lossless queues configured will depend on the buffer.
Default
The default number of PFC queues in the system is 2 for S4810 and 1 for S6000 platforms.
Data Center Bridging (DCB) 481
Command Modes CONFIGURATION mode
Command History
Version
9.8(0.0)
Description
Introduced on the S3048-ON and S4048-ON.
9.7(0.0)
Introduced on the S6000-ON and Z9500.
9.3(0.0)
Introduced on the S4810 and S6000 platforms.
Usage Information
You can configure up to a maximum of four lossless (PFC) queues. By configuring four lossless queues, you can configure four different priorities and assign a particular priority to each application that your network is used to process. For example, you can assign a higher priority for time-sensitive applications and a lower priority for other services, such as file transfers. You can configure the amount of buffer space to be allocated for each priority and the pause or resume thresholds for the buffer. This method of configuration enables you to effectively manage and administer the behavior of lossless queues.
Example
Dell(conf)#dcb pfc-queues 4
dcb {ets | pfc} enable
Enable priority flow control or enhanced transmission selection on interface.
Syntax
dcb {ets | pfc} enable To disable ETS on interface, use "no dcb ets enable" command.
To disable PFC on interface, use "no dcb pfc enable" command.
Defaults
Enable
Command Modes INTERFACE
Command History
Version
9.8(0.0)
9.7(0.0)
9.3 (0.1)
Description
Introduced on the S3048�ON and S4048-ON. Introduced on the S6000-ON and Z9500. Introduced on S6000, S4810, and S4820T.
Usage Information
Limitations
PFC and ETS are enabled by default on the interfaces when DCB is globally enabled (refer to dcb enable). In some network topology, you may want to disable PFC on an interface and apply link level flow control; Similarly you may want to disable ETS on an interface and apply QoS bandwidth configurations.
"dcb-map" CLI on interface is mutually exclusive to "no dcb ets enable" and "no dcb pfc enable".
"pfc priority" CLI is mutually exclusive to "no dcb pfc enable" command.
Deprecated CLI "dcb-policy input" and "no dcb pfc enable" cannot coexist at interface level.
Deprecated CLI "dcb-policy output" and "no dcb ets enable" cannot coexist at interface level.
482 Data Center Bridging (DCB)
14
Debugging and Diagnostics
The basic debugging and diagnostic commands are supported by the Dell Networking OS.
Topics:
� Diagnostics and Monitoring Commands � Offline Diagnostic Commands � Hardware Commands
Diagnostics and Monitoring Commands
The following section describes the diagnostics and monitoring commands. For similar commands, refer to the Control and Monitoring chapter.
logging coredump stack-unit
Enable coredump on a stack.
Syntax Parameters
logging coredump stack-unit {stack-unit-number | all} stack-unit stack- Enter the stack-unit id. unit-number
The range is from 1 to 6.
all
Enable coredump on all stack-unit.
Defaults
Enabled by default on customer builds.
Command Modes CONFIGURATION
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000-ON.
9.0.2.0
Introduced on the S6000.
8.3.19.0
Introduced on the S4820T.
8.3.11.1
Introduced on the Z9000.
8.3.7.0
Introduced on the S4810.
Usage Information
The Kernel core dump can be large and may take up to 5 to 30 minutes to upload. Dell Networking OS does not overwrite application core dumps so you should delete them as necessary to conserve space on the flash; if the flash is out of memory, the coredump is aborted. On the S-Series, if the FTP server is not reachable, the application coredump is aborted. Dell Networking OS completes the coredump process and wait until the upload is complete before rebooting the system.
Debugging and Diagnostics 483
Offline Diagnostic Commands
The offline diagnostics test suite is useful for isolating faults and debugging hardware. While tests are running, Dell Networking OS results are saved as a text file (TestReport-SU-X.txt) in the flash directory. This show file command is available only on master and standby.
Important Points to Remember
Offline diagnostics can only be run when the unit is offline. You can only run offline diagnostics on a unit to which you are connected via the console. In other words, you cannot run
diagnostics on a unit to which you are connected to via a stacking link. The system stores the diagnostic results in the flash directory (TestReport-SU-X.txt). The system displays the following
message after the diagnostic test is over.
05:37:17 : Diagnostic test results are stored on file: flash:/TestReport-SU-1.txt 05:37:22: %S3048-ON:1 %DIAGAGT-6-DA_DIAG_DONE: Diags finished on stack-unit 1
Diagnostics only test connectivity, not the entire data path.
diag stack-unit
Run offline diagnostics on a stack unit.
Syntax
diag stack-unit number [alllevels | level0 | level1 | level2] verbose [testname | no-reboot]
Parameters
number
Enter the stack-unit id. The range is from 1 to 6.
alllevels level0 level1
level2
verbose testname
Enter the keyword alllevels to run the complete set of offline diagnostic tests.
Enter the keyword level0 to run Level 0 diagnostics. Level 0 diagnostics check for the presence of various components and perform essential path verifications. In addition, they verify the identification registers of the components on the board.
Enter the keyword Level1 to run Level 1 diagnostics. Level 1 diagnostics is a smaller set of diagnostic tests with support for automatic partitioning. They perform status/self test for all the components on the board and test their registers for appropriate values. In addition, they perform extensive tests on memory devices (for example, SDRAM, flash, NVRAM, EEPROM, and CPLD) wherever possible. There are no tests on 10G links. At this level, stack ports are shut down automatically.
Enter the keyword level2 to run Level 2 diagnostics. Level 2 diagnostics are a full set of diagnostic tests with no support for automatic partitioning. Level 2 diagnostics are used primarily for on-board loopback tests and more extensive component diagnostics. Various components on the board are put into Loopback mode and test packets are transmitted through those components. These diagnostics also perform snake tests using VLAN configurations. To test 10G links, physically remove the unit from the stack.
Enter the keyword verbose to run the diagnostic in Verbose mode. Verbose mode gives more information in the output than Standard mode.
Enter the keyword testname to run a specific test case. Enclose the test case name in double quotes (" "). For example: diag stack-unit 1 level1 testname "first". You can use this option only for interactive tests.
484 Debugging and Diagnostics
no-reboot
Enter the keyword no-reboot to prevent the system from rebooting after the test. To bring the stack unit to online state, use the online stack-unit command.
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced the verbose option. Introduced on the S-Series.
offline stack-unit
Place a stack unit in the offline state.
Syntax Parameters
offline stack-unit number
number
Enter the stack-unit id. The range is from 1 to 6.
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added a warning message to the off-line diagnostic. Introduced on the S-Series.
Debugging and Diagnostics 485
Usage Information
You cannot enter this command on a Master or Standby unit.
The system reboots when the off-line diagnostics complete. This reboot is an automatic process. A warning message appears when the offline stack-unit command is implemented.
Warning - Diagnostic execution will cause stack-unit to reboot after completion of diags.
Proceed with Offline-Diags [confirm yes/no]:y
online stack-unit
Place a stack unit in the online state.
Syntax Parameters
online stack-unit number
number
Enter the stack-unit number. The range is from 1 to 6.
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4810. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series.
Usage Information
You cannot enter this command on a Master or Standby unit.
The system reboots when the off-line diagnostics complete. This reboot is an automatic process. A warning message appears when the offline stack-unit command is implemented.
Warning - Diagnostic execution will cause stack-unit to reboot after completion of diags.
Proceed with Offline-Diags [confirm yes/no]:y
Hardware Commands
These commands display information from a hardware sub-component or ASIC.
clear hardware stack-unit
Clear statistics from selected hardware components.
Syntax
clear hardware stack-unit id {counters | unit 0�0 counters | cpu data-plane statistics | cpu i2c statistics | cpu party-bus statistics | cpu satainterface statistics | stack-port 0�127}
486 Debugging and Diagnostics
Parameters
stack-unit id
counters unit number counters cpu data-plane statistics cpu party-bus statistics stack-port
Enter the keywords stack-unit then a number to select a particular stack member and then enter one of the following command options to clear a specific collection of data. The range is from 1 to 6.
Enter the keyword counters to clear the counters on the selected stack member.
Enter the keyword unit along with a port-pipe number, then the keyword counters to clear the counters on the selected port-pipe. The range is from 0 to 0.
Enter the keywords cpu data-plane statistics to clear the data plane statistics.
Enter the keywords cpu party-bus statistics to clear the management statistics.
Enter the keywords stack-port then the port number of the stacking port to clear the statistics of the particular stacking port. The range is from 1 to 72.
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.0 8.3.7.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series.
Related Commands
show hardware stack-unit -- displays the data plane or management plane input and output statistics of the designated component of the designated stack member.
clear hardware system-flow
Clear system-flow statistics from selected hardware components.
Syntax Parameters
clear hardware system-flow layer2 stack-unit number port-set 0�0 counters
stack-unit number
port-set 0�0 counters
Enter the keywords stack-unit then a number to select a particular stack member and then enter one of the following command options to clear a specific collection of data. The range is from 1 to 6.
Enter the keywords port-set along with a port-pipe number, then the keyword counters to clear the system-flow counters on the selected port-pipe. The range is from 0 to 0.
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Debugging and Diagnostics 487
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.0 8.3.7.0 7.8.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series.
clear hardware vlan-counters
Clear VLAN statistics.
Syntax Parameters
clear hardware vlan-couters vlan-id
vlan-id
Enter the interface VLAN number. The range is from 1 to 4094.
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced this command.
hardware watchdog
To trigger a reboot and restart the system, set the watchdog timer.
Syntax
hardware watchdog stack-unit {stack-unit-number | all}
Defaults
Enabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000.
488 Debugging and Diagnostics
Usage Information
Version
8.3.19.0 8.3.11.0 8.3.7.0 7.8.1.0
Description
Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series.
This command enables a hardware watchdog mechanism that automatically reboots an Dell Networking OS switch/ router with a single unresponsive unit. This behavior is a last-resort mechanism intended to prevent a manual power cycle.
show hardware layer2
Display Layer 2 ACL or eg data for the selected stack member and stack member port-pipe.
Syntax Parameters
show hardware layer2 {eg-acl | in-acl} stack-unit id port-set 0�0
eg-acl | in-acl
stack-unit id port-set 0�0
Enter either the keyword eg-acl or the keyword in-acl to select between ingress or egress ACL data.
Enter the keyword stack-unit to select a stack ID. The range is from 1 to 6.
Enter the keywords port-set with a port-pipe number. . The range is from 0 to 0.
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series.
Usage Information
The unit numbers given are internal port numbers.
show hardware layer3
Display Layer 3 ACL or QoS data for the selected stack member and stack member port-pipe.
Syntax Parameters
show hardware layer3 {acl | qos} stack-unit number port-set 0�0
acl | qos
Enter either the keyword acl or the keyword qos to select between ACL or QoS data.
Debugging and Diagnostics 489
stack-unit number
port-set 0�0
Enter the keywords stack-unit then a number to select a stack ID. The range is from 1 to 6.
Enter the keyword port-set with a port-pipe number. The range is from 0 to 0.
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.0 8.3.7.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series.
show hardware stack-unit
Display the data plane or management plane input and output statistics of the designated component of the designated stack member.
Syntax Parameters
stack-unit stack-unit-number {buffer [ unit 0 ] total buffer | buffer unit 0 interface all queue [(0-14) | a11] buffer-info}{cpu data-plane statistics | cpu management statistics | drops [unit number] | fpga register | partybus statistics | stack-port | ti-monitor | unit 0-1 {counters | details | port-stats [detail] | register}}
stack-unit stackunit-number {command-
option}
Enter the keywords stack-unit to select a particular stack member and then enter one of the following command options to display a collection of data based on the option entered. The range is from 1 to 6.
buffer
Enter the keyword buffer. To display the total buffer statistics for the stack unit, enter the keyword total-buffer. To display buffer statistics for a all interface, enter the keyword interface followed by the keyword all.
To display total buffer information for the port, enter the keywords bufferinfo. To display a queue range, enter 0 to 14 for a specfic queue or all.
cpu data-plane statistics
(Optional) Enter the keywords cpu data-plane statistics then the keywords stack port and its number, from 1 to 72 to display the data plane statistics, which shows the High Gig (Higig) port raw input/output counter statistics to which the stacking module is connected.
cpu management Enter the keywords cpu management statistics to display the counters of
statistics
the management port.
cpu party-bus statistics
Enter the keywords cpu party-bus statistics, to display the Management plane input/output counter statistics of the pseudo party bus interface.
490 Debugging and Diagnostics
cpu satainterface statistics
Enter the keywords cpu sata-interface statistics to display the sata interface error counter statistics.
drops [unit unit- Enter the keyword drops to display internal drops on the selected stack member.
number]
Enter the drops keyword to display internal drops on the selected stack member.
fpga register
Enter the keyword to display the register value of fpga resgister details in S4810, Z9000 and S6000.
unit unit-number {counters | details | portstats [detail] | register}
Enter the keyword unit then a number and then enter one of the following keywords to troubleshoot errors on the selected port-pipe and to give status on why a port is not coming up to register level: counters, details, port-stats [detail], or register.
TI monitor
Enter the unit keyword to show information regarding the TI register.
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.8(0.0) 9.7(0.0) 9.2(0.2)
9.0.2.0 8.3.19.0 8.3.11.5 8.3.11.4 8.3.11.1 8.3.7.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Replaced the keyword port with interface. Introduced on the S6000-ON. Modified the drops keyword range, unit keyword range and added the buffer and cpu management statistics options. Introduced on the S6000. Introduced on the S4820T. Added i2c statistics and sata-interfaces statistics. Added user port information. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series.
Example (DataPlane)
Dell#show hardware stack-unit 1 cpu data-plane statistics Input Statistics:
1856 packets, 338262 bytes 141 64-byte pkts, 1248 over 64-byte pkts, 11 over 127-byte pkts 222 over 255-byte pkts, 236 over 511-byte pkts, 0 over 1023-byte pkts 919 Multicasts, 430 Broadcasts 0 runts, 0 giants, 0 throttles 0 CRC, 0 overrun, 0 discarded Output Statistics: 325 packets, 27629 bytes, 0 underruns 9 64-byte pkts, 310 over 64-byte pkts, 1 over 127-byte pkts 1 over 255-byte pkts, 2 over 511-byte pkts, 2 over 1023-byte pkts 0 Multicasts, 3 Broadcasts, 322 Unicasts 0 throttles, 0 discarded, 0 collisions Rate info (interval 299 seconds): Input 00.00 Mbits/sec
Debugging and Diagnostics 491
Output 00.00 Mbits/sec Dell#
Example (PartyBus)
Dell#show hardware stack-unit 1 cpu party-bus statistics Input Statistics:
8189 packets, 8076608 bytes 0 dropped, 0 errors Output Statistics: 366 packets, 133100 bytes 0 errors Dell#
Example (Drops Unit)
Dell#sh hard stack-unit 1 drops unit 0
PortNumberIngress Drops IngMac Drops Total Mmu Drops
1
0
0
0
2
0
0
0
3
0
0
0
4
0
0
0
EgMac Drops Egress Drops
0
0
0
0
0
0
0
0
Dell#
Example (PortStats)
Dell#show hardware stack-unit 1 unit 0 port-stats
ena/ speed/ link auto STP
lrn inter max loop
port link duplex scan neg? state pause discrd ops face frame back
ge0 down -
SW Yes Block
Untag FA SGMII 1554
ge1 !ena -
SW Yes Block
Tag
FA SGMII 1554
ge2 !ena -
SW Yes Block
Tag
FA SGMII 1554
ge3 !ena -
SW Yes Block
Tag
FA SGMII 1554
ge4 !ena -
SW Yes Forward
Tag
F SGMII 1554
ge5 !ena -
SW Yes Forward
Tag
F SGMII 1554
ge6 !ena -
SW Yes Forward
Tag
F SGMII 1554
ge7 !ena -
SW Yes Forward
Tag
F SGMII 1554
ge8 !ena -
SW Yes Forward
Tag
F SGMII 1554
ge9 !ena -
SW Yes Forward
Tag
F SGMII 1554
ge10 !ena -
SW Yes Forward
Tag
F SGMII 9252
ge11 !ena -
SW Yes Forward
Tag
F SGMII 9252
ge12 !ena -
SW Yes Forward
Tag
F SGMII 1554
ge13 !ena -
SW Yes Forward
Tag
F SGMII 1554
ge14 !ena -
SW Yes Forward
Tag
F SGMII 1554
ge15 !ena -
SW Yes Forward
Tag
F SGMII 1554
ge16 !ena -
SW Yes Forward
Tag
F SGMII 1554
ge17 !ena -
SW Yes Forward
Tag
F SGMII 1554
ge18 !ena -
SW Yes Forward
Tag
F SGMII 1554
ge19 !ena -
SW Yes Forward
Tag
F SGMII 1554
ge20 !ena -
SW Yes Forward
Tag
F SGMII 1554
ge21 !ena -
SW Yes Forward
Tag
F SGMII 1554
ge22 !ena -
SW Yes Forward
Tag
F SGMII 1554
ge23 !ena -
SW Yes Forward
Tag
F SGMII 1554
hg0 up 12G FD
SW No Forward
None F XGMII 16360
hg1 up 12G FD
SW No Forward
None F XGMII 16360
hg2 down 10G FD SW No Forward
None F XGMII 16360
hg3 down 10G FD SW No Forward
None F XGMII 16360
0
Dell#
Example (Register)
Dell#show hardware stack-unit 1 unit 1 register 0x0068003c AGINGCTRMEMDEBUG.mmu0 = 0x00000000 0x0068003d AGINGEXPMEMDEBUG.mmu0 = 0x00000000 0x00680017 ASFCONFIG.mmu0 = 0x0000000e 0x0060004c ASFPORTSPEED.ge0 = 0x00000000 0x0060104c ASFPORTSPEED.ge1 = 0x00000000 0x0060204c ASFPORTSPEED.ge2 = 0x00000000
492 Debugging and Diagnostics
0x0060304c ASFPORTSPEED.ge3 = 0x00000000 0x0060404c ASFPORTSPEED.ge4 = 0x00000000 0x0060504c ASFPORTSPEED.ge5 = 0x00000000 0x0060604c ASFPORTSPEED.ge6 = 0x00000000 0x0060704c ASFPORTSPEED.ge7 = 0x00000000 0x0060804c ASFPORTSPEED.ge8 = 0x00000000 0x0060904c ASFPORTSPEED.ge9 = 0x00000000 0x0060a04c ASFPORTSPEED.ge10 = 0x00000000 0x0060b04c ASFPORTSPEED.ge11 = 0x00000000 0x0060c04c ASFPORTSPEED.ge12 = 0x00000000 0x0060d04c ASFPORTSPEED.ge13 = 0x00000000 0x0060e04c ASFPORTSPEED.ge14 = 0x00000000 0x0060f04c ASFPORTSPEED.ge15 = 0x00000000 0x0061004c ASFPORTSPEED.ge16 = 0x00000000 0x0061104c ASFPORTSPEED.ge17 = 0x00000000 0x0061204c ASFPORTSPEED.ge18 = 0x00000000 0x0061304c ASFPORTSPEED.ge19 = 0x00000000 0x0061404c ASFPORTSPEED.ge20 = 0x00000000 0x0061504c ASFPORTSPEED.ge21 = 0x00000000 0x0061604c ASFPORTSPEED.ge22 = 0x00000000 0x0061704c ASFPORTSPEED.ge23 = 0x00000005 0x0061804c ASFPORTSPEED.hg0 = 0x00000007 0x0061904c ASFPORTSPEED.hg1 = 0x00000007 0x0061a04c ASFPORTSPEED.hg2 = 0x00000000 0x0061b04c ASFPORTSPEED.hg3 = 0x00000000 0x0061c04c ASFPORTSPEED.cpu0 = 0x00000000 0x00780000 AUX_ARB_CONTROL.ipipe0 = 0x0000001c 0x0e700102 BCAST_BLOCK_MASK.ge0 = 0x00000000 0x0e701102 BCAST_BLOCK_MASK.ge1 = 0x00000000 0x0e702102 BCAST_BLOCK_MASK.ge2 = 0x00000000 0x0e703102 BCAST_BLOCK_MASK.ge3 = 0x00000000 0x0e704102 BCAST_BLOCK_MASK.ge4 = 0x00000000 0x0e705102 BCAST_BLOCK_MASK.ge5 = 0x00000000 0x0e706102 BCAST_BLOCK_MASK.ge6 = 0x00000000 0x0e707102 BCAST_BLOCK_MASK.ge7 = 0x00000000 0x0e708102 BCAST_BLOCK_MASK.ge8 = 0x00000000 0x0e709102 BCAST_BLOCK_MASK.ge9 = 0x00000000 0x0e70a102 BCAST_BLOCK_MASK.ge10 = 0x00000000 0x0e70b102 BCAST_BLOCK_MASK.ge11 = 0x00000000 0x0e70c102 BCAST_BLOCK_MASK.ge12 = 0x00000000 0x0e70d102 BCAST_BLOCK_MASK.ge13 = 0x00000000 0x0e70e102 BCAST_BLOCK_MASK.ge14 = 0x00000000 0x0e70f102 BCAST_BLOCK_MASK.ge15 = 0x00000000 0x0e710102 BCAST_BLOCK_MASK.ge16 = 0x00000000 0x0e711102 BCAST_BLOCK_MASK.ge17 = 0x00000000 0x0e712102 BCAST_BLOCK_MASK.ge18 = 0x00000000 0x0e713102 BCAST_BLOCK_MASK.ge19 = 0x00000000 0x0e714102 BCAST_BLOCK_MASK.ge20 = 0x00000000 0x0e715102 BCAST_BLOCK_MASK.ge21 = 0x00000000 0x0e716102 BCAST_BLOCK_MASK.ge22 = 0x00000000 0x0e717102 BCAST_BLOCK_MASK.ge23 = 0x00000000 0x0e718102 BCAST_BLOCK_MASK.hg0 = 0x00000000 0x0e719102 BCAST_BLOCK_MASK.hg1 = 0x00000000 0x0e71a102 BCAST_BLOCK_MASK.hg2 = 0x00000000 0x0e71b102 BCAST_BLOCK_MASK.hg3 = 0x00000000 0x0e71c102 BCAST_BLOCK_MASK.cpu0 = 0x00000000 0x0b700001 BCAST_STORM_CONTROL.ge0 = 0x00000000 0x0b701001 BCAST_STORM_CONTROL.ge1 = 0x00000000 0x0b702001 BCAST_STORM_CONTROL.ge2 = 0x00000000 0x0b703001 BCAST_STORM_CONTROL.ge3 = 0x00000000 0x0b704001 BCAST_STORM_CONTROL.ge4 = 0x00000000 0x0b705001 BCAST_STORM_CONTROL.ge5 = 0x00000000 0x0b706001 BCAST_STORM_CONTROL.ge6 = 0x00000000 0x0b707001 BCAST_STORM_CONTROL.ge7 = 0x00000000 0x0b708001 BCAST_STORM_CONTROL.ge8 = 0x00000000 0x0b709001 BCAST_STORM_CONTROL.ge9 = 0x00000000 0x0b70a001 BCAST_STORM_CONTROL.ge10 = 0x00000000 !------------------ output truncated ---------------!
Debugging and Diagnostics 493
Example (Counters)
Dell#show hardware stack-unit 1 unit 0 counters
unit: 0 port: 1 (interface Te 1/1)
Description
Value
RX - IPV4 L3 Unicast Frame Counter RX - IPV4 L3 Routed Multicast Packets RX - IPV6 L3 Unicast Frame Counter RX - IPV6 L3 Routed Multicast Packets RX - Unicast Packet Counter RX - 64 Byte Frame Counter RX - 65 to 127 Byte Frame Counter RX - 128 to 255 Byte Frame Counter RX - 256 to 511 Byte Frame Counter RX - 512 to 1023 Byte Frame Counter RX - 1024 to 1518 Byte Frame Counter RX - 1519 to 1522 Byte Good VLAN Frame Counter RX - 1519 to 2047 Byte Frame Counter RX - 2048 to 4095 Byte Frame Counter RX - 4096 to 9216 Byte Frame Counter RX - Good Packet Counter RX - Packet/Frame Counter RX - Unicast Frame Counter RX - Multicast Frame Counter RX - Broadcast Frame Counter RX - Byte Counter RX - Control Frame Counter RX - Pause Control Frame Counter RX - Oversized Frame Counter RX - Jabber Frame Counter RX - VLAN Tag Frame Counter RX - Double VLAN Tag Frame Counter RX - RUNT Frame Counter RX - Fragment Counter RX - VLAN Tagged Packets RX - Ingress Dropped Packet RX - MTU Check Error Frame Counter RX - PFC Frame Priority 0 RX - PFC Frame Priority 1 RX - PFC Frame Priority 2 RX - PFC Frame Priority 3 RX - PFC Frame Priority 4 RX - PFC Frame Priority 5 RX - PFC Frame Priority 6 RX - PFC Frame Priority 7 RX - Debug Counter 0 RX - Debug Counter 1 RX - Debug Counter 2 RX - Debug Counter 3 RX - Debug Counter 4 RX - Debug Counter 5 RX - Debug Counter 6 RX - Debug Counter 7 RX - Debug Counter 8 TX - 64 Byte Frame Counter TX - 65 to 127 Byte Frame Counter TX - 128 to 255 Byte Frame Counter TX - 256 to 511 Byte Frame Counter TX - 512 to 1023 Byte Frame Counter TX - 1024 to 1518 Byte Frame Counter TX - 1519 to 1522 Byte Good VLAN Frame Counter TX - 1519 to 2047 Byte Frame Counter TX - 2048 to 4095 Byte Frame Counter TX - 4096 to 9216 Byte Frame Counter TX - Good Packet Counter TX - Packet/Frame Counter TX - Unicast Frame Counter TX - Multicast Frame Counter TX - Broadcast Frame Counter TX - Byte Counter TX - Control Frame Counter TX - Pause Control Frame Counter
0 0 0 0 0 336186 0 0 0 0 0 0 0 0 0 336186 336186 0 336186 0 21515904 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 336186 336186 0 0 0 336186 0 0 0 166 112 0 0 0 0 0 0 0 0 278 278 0 278 0 18688 0 0
494 Debugging and Diagnostics
TX - Oversized Frame Counter TX - Jabber Counter TX - VLAN Tag Frame Counter TX - Double VLAN Tag Frame Counter TX - RUNT Frame Counter TX - Fragment Counter TX - PFC Frame Priority 0 TX - PFC Frame Priority 1 TX - PFC Frame Priority 2 TX - PFC Frame Priority 3 TX - PFC Frame Priority 4 TX - PFC Frame Priority 5 TX - PFC Frame Priority 6 TX - PFC Frame Priority 7 TX - Debug Counter 0 TX - Debug Counter 1 TX - Debug Counter 2 TX - Debug Counter 3 TX - Debug Counter 4 TX - Debug Counter 5 TX - Debug Counter 6 TX - Debug Counter 7 TX - Debug Counter 8 TX - Debug Counter 9 TX - Debug Counter 10 TX - Debug Counter 11 --------------------unit: 0 port: 61 (interface Fo 1/60) Description RX - IPV4 L3 Unicast Frame Counter RX - IPV4 L3 Routed Multicast Packets RX - IPV6 L3 Unicast Frame Counter RX - IPV6 L3 Routed Multicast Packets RX - Unicast Packet Counter RX - 64 Byte Frame Counter RX - 65 to 127 Byte Frame Counter RX - 128 to 255 Byte Frame Counter RX - 256 to 511 Byte Frame Counter RX - 512 to 1023 Byte Frame Counter RX - 1024 to 1518 Byte Frame Counter RX - 1519 to 1522 Byte Good VLAN Frame Counter RX - 1519 to 2047 Byte Frame Counter RX - 2048 to 4095 Byte Frame Counter RX - 4096 to 9216 Byte Frame Counter RX - Good Packet Counter RX - Packet/Frame Counter RX - Unicast Frame Counter RX - Multicast Frame Counter RX - Broadcast Frame Counter RX - Byte Counter RX - Control Frame Counter RX - Pause Control Frame Counter RX - Oversized Frame Counter RX - Jabber Frame Counter RX - VLAN Tag Frame Counter RX - Double VLAN Tag Frame Counter RX - RUNT Frame Counter RX - Fragment Counter RX - VLAN Tagged Packets RX - Ingress Dropped Packet RX - MTU Check Error Frame Counter RX - PFC Frame Priority 0 RX - PFC Frame Priority 1 RX - PFC Frame Priority 2 RX - PFC Frame Priority 3 RX - PFC Frame Priority 4
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
Value 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
Debugging and Diagnostics 495
Example (Details)
RX - PFC Frame Priority 5
0
RX - PFC Frame Priority 6
0
RX - PFC Frame Priority 7
0
RX - Debug Counter 0
0
RX - Debug Counter 1
0
RX - Debug Counter 2
0
RX - Debug Counter 3
0
RX - Debug Counter 4
0
RX - Debug Counter 5
0
RX - Debug Counter 6
0
RX - Debug Counter 7
0
RX - Debug Counter 8
0
TX - 64 Byte Frame Counter
0
TX - 65 to 127 Byte Frame Counter
0
TX - 128 to 255 Byte Frame Counter
0
TX - 256 to 511 Byte Frame Counter
0
TX - 512 to 1023 Byte Frame Counter
0
TX - 1024 to 1518 Byte Frame Counter
0
TX - 1519 to 1522 Byte Good VLAN Frame Counter
0
TX - 1519 to 2047 Byte Frame Counter
0
TX - 2048 to 4095 Byte Frame Counter
0
TX - 4096 to 9216 Byte Frame Counter
0
TX - Good Packet Counter
0
TX - Packet/Frame Counter
0
TX - Unicast Frame Counter
0
TX - Multicast Frame Counter
0
TX - Broadcast Frame Counter
0
TX - Byte Counter
0
TX - Control Frame Counter
0
TX - Pause Control Frame Counter
0
TX - Oversized Frame Counter
0
TX - Jabber Counter
0
TX - VLAN Tag Frame Counter
0
TX - Double VLAN Tag Frame Counter
0
TX - RUNT Frame Counter
0
TX - Fragment Counter
0
TX - PFC Frame Priority 0
0
TX - PFC Frame Priority 1
0
TX - PFC Frame Priority 2
0
TX - PFC Frame Priority 3
0
TX - PFC Frame Priority 4
0
TX - PFC Frame Priority 5
0
TX - PFC Frame Priority 6
0
TX - PFC Frame Priority 7
0
TX - Debug Counter 0
0
TX - Debug Counter 1
0
TX - Debug Counter 2
0
TX - Debug Counter 3
0
TX - Debug Counter 4
0
TX - Debug Counter 5
0
TX - Debug Counter 6
0
TX - Debug Counter 7
0
TX - Debug Counter 8
0
TX - Debug Counter 9
0
TX - Debug Counter 10
0
TX - Debug Counter 11
0
Dell#show hardware stack-unit 1 unit 1 details ****************************************************** The total no of FP & CSF Devices in the Card is 2 The total no of FP Devices in the Card is 2 The total no of CSF Devices in the Card is 0 The number of ports in device 0 is - 24 The number of Hg ports in devices 0 is - 4 The CPU Port of the device is 28 The number of ports in device 1 is - 24 The number of Hg ports in devices 1 is - 4 The CPU Port of the device is 28
496 Debugging and Diagnostics
The staring unit no the SWF in the device is 0 ****************************************************** The Current Link Status Is Front End Link Status 0x000000000000400000000000 Front End Port Present Status 0x000000000000000000000000 Back Plane Link Status 0x00000000 ****************************************************** Link Status of all the ports in the Device - 1 The linkStatus of Front End Port 0 is FALSE The linkStatus of Front End Port 1 is FALSE The linkStatus of Front End Port 2 is FALSE The linkStatus of Front End Port 3 is FALSE The linkStatus of Front End Port 4 is FALSE The linkStatus of Front End Port 5 is FALSE The linkStatus of Front End Port 6 is FALSE The linkStatus of Front End Port 7 is FALSE The linkStatus of Front End Port 8 is FALSE The linkStatus of Front End Port 9 is FALSE The linkStatus of Front End Port 10 is FALSE The linkStatus of Front End Port 11 is FALSE The linkStatus of Front End Port 12 is FALSE The linkStatus of Front End Port 13 is FALSE The linkStatus of Front End Port 14 is FALSE The linkStatus of Front End Port 15 is FALSE The linkStatus of Front End Port 16 is FALSE The linkStatus of Front End Port 17 is FALSE The linkStatus of Front End Port 18 is FALSE The linkStatus of Front End Port 19 is FALSE The linkStatus of Front End Port 20 is FALSE The linkStatus of Front End Port 21 is FALSE The linkStatus of Front End Port 22 is FALSE The linkStatus of Front End Port 23 is TRUE The linkStatus of Hg Port 24 is TRUE The linkStatus of Hg Port 25 is TRUE The linkStatus of Hg Port 26 is FALSE The linkStatus of Hg Port 27 is FALSE !------------------ output truncated ---------------!
Example (TotalBuffer)
Dell#show hardware stack-unit 1 buffer total-buffer Dell#show hardware stack-unit 1 buffer total-buffer ----- Buffer Details for Stack-Unit 1 ----Total Buffers allocated per Stack-Unit 46080
Example displaying queue range
Dell#show hardware stack-unit 0 buffer unit 0 interface all queue 6 buffer-info
Buffer Stats for Front End Ports ================================ ----- Buffer Stats for Interface Te 1/0 Queue 6 ----Maximum Shared Limit: 7667 Default Packet Buffer allocate for the Queue: 8 Used Packet Buffer: 0 ----- Buffer Stats for Interface Te 1/1 Queue 6 ----Maximum Shared Limit: 7667 Default Packet Buffer allocate for the Queue: 8 Used Packet Buffer: 0 ----- Buffer Stats for Interface Te 1/2 Queue 6 ----Maximum Shared Limit: 7667 Default Packet Buffer allocate for the Queue: 8 Used Packet Buffer: 0 ----- Buffer Stats for Interface Te 1/3 Queue 6 ----Maximum Shared Limit: 7667 Default Packet Buffer allocate for the Queue: 8 Used Packet Buffer: 0 ----- Buffer Stats for Interface Te 1/4 Queue 6 -----
Debugging and Diagnostics 497
Related Commands
Maximum Shared Limit: 7667 Default Packet Buffer allocate for the Queue: 8 Used Packet Buffer: 0 ----- Buffer Stats for Interface Te 1/5 Queue 6 ----Maximum Shared Limit: 7667 Default Packet Buffer allocate for the Queue: 8 Used Packet Buffer: 0 ----- Buffer Stats for Interface Te 1/6 Queue 6 ----<output truncated for brevity>
clear hardware system-flow -- clears the statistics from selected hardware components. show interfaces stack-unit -- displays information on all interfaces on a specific S-Series stack member. show system (S-Series and Z-Series) -- displays the current status of all the stack members or a specific member.
show hardware system-flow
Display Layer 3 ACL or QoS data for the selected stack member and stack member port-pipe.
Syntax Parameters
show hardware system-flow layer2 stack-unit id port-set number [counters]
acl | qos
stack-unit id port-set number [counters]
For the selected stack member and stack member port-pipe, display which system flow entry the packet hits and what queue the packet takes as it dumps the raw system flow tables.
Enter the keywords stack-unit to select a stack member ID. The range is from 1 to 6.
Enter the keywords port-set with a port-pipe number.
(OPTIONAL) Enter the keyword counters to display hit counters for the selected ACL or QoS option.
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series.
Example
Dell#show hardware system-flow layer2 stack-unit 1 port-set 0 counters
-----------------------------------------------------------
EntryId Description
#HITS
-----------------------------------------------------------
2048
STP BPDU Redirects
0
2047
LLDP BPDU Redirects
0
2045
LACP traffic Redirects
0
498 Debugging and Diagnostics
Example
2044 2043 2042 2041 2040 2039 2038 2037 2036 2035 2034 2033 384 383 382 380 379 4 3 2 1 25 Dell#
GVRP traffic Redirects
0
ARP Reply Redirects
0
802.1x frames Redirects
0
VRRP frames Redirects
0
GRAT ARP
0
DROP Cases
0
OSPF1 STUB
0
OSPF2 STUB
0
VRRP STUB
0
L2_DST_HIT+BC MAC+VLAN 4095 0
L2_DST_HIT+BC MAC
0
Catch all
0
OSPF[224.0.0.5] Packets
0
OSPF[224.0.0.6] Packets
0
VRRP Packets
0
BCast L2_DST_HIT on VLAN 4095 0
BCAST L2_DST_HIT Packets
0
Unknown L2MC Packets
0
L2DLF Packets
0
L2UCAST Packets
0
L2BCASTPackets
0
param1=0(0x00)}, action={act=CosQCpuNew, param0=7(0x07), param1=0(0x00)}, action={act=CopyToCpu, param0=0(0x00), param1=0(0x00)}, action={act=UpdateCounter, param0=1(0x01), param1=0(0x00)}, meter=NULL, counter={idx=1, mode=0x01, entries=1}
############## FP Entry for redirecting LACP traffic to CPU Port
############
EID 2045: gid=1,
slice=15, slice_idx=0x02, prio=0x7fd, flags=0x82, Installed
tcam: color_indep=0, higig=0, higig_mask=0,
KEY=0x00000000 00000000 00000000 0180c200 00020000 00000000 00000000
, FPF4=0x00
MASK=0x00000000 00000000 00000000 ffffffff ffff0000 00000000 00000000
,
0x00
action={act=Drop, param0=0(0x00), param1=0(0x00)},
action={act=CosQCpuNew, param0=7(0x07), param1=0(0x00)},
action={act=CopyToCpu, param0=0(0x00), param1=0(0x00)},
action={act=UpdateCounter, param0=1(0x01), param1=0(0x00)},
meter=NULL,
counter={idx=2, mode=0x01, entries=1}
################# FP Entry for redirecting GVRP traffic to RSM
###########
EID 2044: gid=1,
slice=15, slice_idx=0x03, prio=0x7fc, flags=0x82, Installed
tcam: color_indep=0, higig=0, higig_mask=0,
KEY=0x00000000 00000000 00000000 0180c200 00210000 00000000 00000000
, FPF4=0x00
MASK=0x00000000 00000000 00000000 ffffffff ffff0000 00000000 00000000
,
0x00
action={act=Drop, param0=0(0x00), param1=0(0x00)},
action={act=CosQCpuNew, param0=7(0x07), param1=0(0x00)},
action={act=CopyToCpu, param0=0(0x00), param1=0(0x00)},
action={act=UpdateCounter, param0=1(0x01), param1=0(0x00)},
meter=NULL,
counter={idx=3, mode=0x01, entries=1}
################# FP Entry for redirecting ARP Replies to RSM #############
EID 2043: gid=1, slice=15, slice_idx=0x04, prio=0x7fb, flags=0x82, Installed tcam: color_indep=0, higig=0, higig_mask=0, KEY=0x00000000 00000000 00000000 00000000 00000000 00000806 00001600 , FPF4=0x00
Debugging and Diagnostics 499
MASK=0x00000000 00000000 00000000 00000000 00000000 0000ffff 00001600
,
0x00
action={act=Drop, param0=0(0x00), param1=0(0x00)},
action={act=CosQCpuNew, param0=6(0x06), param1=0(0x00)},
action={act=CopyToCpu, param0=0(0x00), param1=0(0x00)},
action={act=UpdateCounter, param0=1(0x01), param1=0(0x00)},
!--------- output truncated -----------------!
show hardware vlan-counters
Display the hardware VLAN statistics.
Syntax Parameters
show hardware vlan-counters vlan-id
vlan-id
Enter the interface VLAN number. The range is from 1 to 4094.
Defaults
None
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced this command.
Example
Dell#show hardware vlan-counters 1
Counters for vlanid: 1
------------------------
Total number of inpackets: 0
Total number of inbytes:
0
Total number of outpackets: 0
Total number of outbytes: 0
Dell#
Related Commands
clear hardware system-flow -- clears the statistics from selected hardware components.
show hardware counters interface
Display the counter information for a specific interface.
Syntax Parameters
show hardware counters interface interface
counters
interface interface
Enter the keywords counters to display counter value for the specified stackmember the port-pipe.
Enter any of the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
500 Debugging and Diagnostics
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.8(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4810, S4820T, S5000, S6000, S6000�ON, and Z9500.
Example
Dell#show hardware counters interfac tengigabitethernet 5/1
unit: 0 port: 2 (interface Te 5/1)
Description
Value
RX - IPV4 L3 Unicast Frame Counter
0
RX - IPV4 L3 Routed Multicast Packets
0
RX - IPV6 L3 Unicast Frame Counter
0
RX - IPV6 L3 Routed Multicast Packets
0
RX - Unicast Packet Counter
0
RX - 64 Byte Frame Counter
0
RX - 65 to 127 Byte Frame Counter
0
RX - 128 to 255 Byte Frame Counter
0
RX - 256 to 511 Byte Frame Counter
0
RX - 512 to 1023 Byte Frame Counter
0
RX - 1024 to 1518 Byte Frame Counter
0
RX - 1519 to 1522 Byte Good VLAN Frame Counter
0
RX - 1519 to 2047 Byte Frame Counter
0
RX - 2048 to 4095 Byte Frame Counter
0
RX - 4096 to 9216 Byte Frame Counter
0
RX - Good Packet Counter
0
RX - Packet/Frame Counter
0
RX - Unicast Frame Counter
0
RX - Multicast Frame Counter
0
RX - Broadcast Frame Counter
0
RX - Byte Counter
0
RX - Control Frame Counter
0
RX - Pause Control Frame Counter
0
RX - Oversized Frame Counter
0
RX - Jabber Frame Counter
0
RX - VLAN Tag Frame Counter
0
RX - Double VLAN Tag Frame Counter
0
RX - RUNT Frame Counter
0
RX - Fragment Counter
0
RX - VLAN Tagged Packets
0
RX - Ingress Dropped Packet
0
RX - MTU Check Error Frame Counter
0
RX - PFC Frame Priority 0
0
RX - PFC Frame Priority 1
0
RX - PFC Frame Priority 2
0
RX - PFC Frame Priority 3
0
RX - PFC Frame Priority 4
0
RX - PFC Frame Priority 5
0
RX - PFC Frame Priority 6
0
RX - PFC Frame Priority 7
0
RX - Debug Counter 0
0
RX - Debug Counter 1
0
RX - Debug Counter 2
0
<output truncated for brevity>
Debugging and Diagnostics 501
show hardware drops
Displays internal drops on the specified interface or for a range of interface.
Syntax
show hardware drops interface interface
Parameters
interface
Enter any of the following keywords and slot/port[/subport] or slot/port-range or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
drops
Enter the keyword drops to display internal drops.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.8(0.0) 9.7(0.0) 9.2(0.2)
9.0.2.0 8.3.19.0 8.3.11.5 8.3.11.4 8.3.11.1 8.3.7.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Removed the keywords stack-unit. Introduced on the Z9500. Introduced on the S6000-ON. Modified the drops keyword range, unit keyword range and added the buffer and cpu management statistics options. Introduced on the S6000. Introduced on the S4820T. Added i2c statistics and sata-interfaces statistics. Added user port information. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series.
Example displaying internal drops for the specific interface
Dell#show hardware drops interface tengigabitethernet 2/1
Drops in Interface Te 2/1:
--- Ingress Drops
---
Ingress Drops
: 0
IBP CBP Full Drops
: 0
PortSTPnotFwd Drops
: 0
IPv4 L3 Discards
: 0
Policy Discards
: 0
Packets dropped by FP
: 0
(L2+L3) Drops
: 0
Port bitmap zero Drops
: 0
Rx VLAN Drops
: 0
--- Ingress MAC counters---
Ingress FCSDrops
: 0
Ingress MTUExceeds
: 0
--- MMU Drops
---
502 Debugging and Diagnostics
Ingress MMU Drops
: 0
HOL DROPS(TOTAL)
: 0
HOL DROPS on COS0
: 0
HOL DROPS on COS1
: 0
HOL DROPS on COS2
: 0
HOL DROPS on COS3
: 0
HOL DROPS on COS4
: 0
HOL DROPS on COS5
: 0
HOL DROPS on COS6
: 0
HOL DROPS on COS7
: 0
HOL DROPS on COS8
: 0
HOL DROPS on COS9
: 0
HOL DROPS on COS10
: 0
HOL DROPS on COS11
: 0
HOL DROPS on COS12
: 0
HOL DROPS on COS13
: 0
HOL DROPS on COS14
: 0
HOL DROPS on COS15
: 0
HOL DROPS on COS16
: 0
HOL DROPS on COS17
: 0
TxPurge CellErr
: 0
Aged Drops
: 0
--- Egress MAC counters---
Egress FCS Drops
: 0
--- Egress FORWARD PROCESSOR Drops ---
IPv4 L3UC Aged & Drops
: 0
TTL Threshold Drops
: 0
INVALID VLAN CNTR Drops
: 0
L2MC Drops
: 0
PKT Drops of ANY Conditions : 0
Hg MacUnderflow
: 0
TX Err PKT Counter
: 0
--- Error counters---
Internal Mac Transmit Errors : 0
Unknown Opcodes
: 0
Internal Mac Receive Errors : 0
show hardware stack-unit buffer-stats-snapshot (Total Buffer Information)
View the buffer statistics tracking resource information depending on the type of buffer information, such as device-level details, port-level counters, queue-based snapshots, or priority group-level snapshot in the egress and ingress direction of traffic.
Syntax Parameters
show hardware stack-unit <id> buffer-stats-snapshot unit <id> resource x
stack-unit stack- Unique ID of the stack unit to select a particular stack member and then enter one
unit-number
of the following command options to display a collection of data based on the
option entered. The unit ID range from 1 to 6.
buffer-stats-
snapshot unit number
Display the historical snapshot of buffer statistical values unit Enter the keyword unit along with a port-pipe number. The range is from 0 to 0.
buffer-info
Buffer and traffic manager resources usage, where X can be one of the following:
All - Displays ingress and egress device, port, and queue snapshots
Interface all queue {all} - egress queue-level snapshot for both unicast and multicast packets
Interface all queue ucast {id | all} - egress queue-level snapshot for unicast packets only
Interface all queue mcast {id | all} - egress queue-level snapshot for multicast packets only
Debugging and Diagnostics 503
Interface all prio-group {id | all} - ingress priority-group level snapshot
Command Modes EXEC EXEC Privilege
Command History
Version
9.8(0.0P5) 9.8(0.0P2) 9.8(0.0)
9.7(0.0) 9.6(0.0) 9.3(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Added the keyword interface all. Introduced on the S6000-ON. Introduced on the S5000. Introduced on the S6000, S4810, and S4820T.
Usage Information
The following information is displayed based on the buffer-info type, such as device-level details, queuebased snapshots, or priority group-level snapshot in the egress and ingress direction of traffic:
Device-ingress � Displays total buffer accounting usage for the unit.
Device-egress �Display total buffer usage for the unit, total multicast buffer usage for the unit and also on per-service-pool basis. Counters will be displayed for the 2 service-pools � one for normal traffic and other for DCB traffic.
Example
When the buffer-stats-snapshot is disabled, the following informational message is displayed when you run the show command: %Info: Buffer-stats-snapshot feature is disabled.
Dell#show hardware stack-unit 1 buffer-stats-snapshot unit 3 resource
interface all queue mcast 3
Unit 1 unit: 3 port: 1 (interface Fo 1/144)
---------------------------------------
Q# TYPE
Q#
TOTAL BUFFERED CELLS
---------------------------------------
MCAST
3
0
Unit 1 unit: 3 port: 5 (interface Fo 1/148)
---------------------------------------
Q# TYPE
Q#
TOTAL BUFFERED CELLS
---------------------------------------
MCAST
3
0
Unit 1 unit: 3 port: 9 (interface Fo 1/152)
---------------------------------------
Q# TYPE
Q#
TOTAL BUFFERED CELLS
---------------------------------------
MCAST
3
0
Unit 1 unit: 3 port: 13 (interface Fo 1/156)
---------------------------------------
Q# TYPE
Q#
TOTAL BUFFERED CELLS
---------------------------------------
MCAST
3
0
Unit 1 unit: 3 port: 17 (interface Fo 1/160)
---------------------------------------
Q# TYPE
Q#
TOTAL BUFFERED CELLS
---------------------------------------
MCAST
3
0
Unit 1 unit: 3 port: 21 (interface Fo 1/164)
---------------------------------------
Q# TYPE
Q#
TOTAL BUFFERED CELLS
---------------------------------------
MCAST
3
0
504 Debugging and Diagnostics
Unit 1 unit: 3 port: 25 (interface Fo 1/168)
---------------------------------------
Q# TYPE
Q#
TOTAL BUFFERED CELLS
---------------------------------------
MCAST
3
0
Unit 1 unit: 3 port: 29 (interface Fo 1/172)
---------------------------------------
Q# TYPE
Q#
TOTAL BUFFERED CELLS
---------------------------------------
MCAST
3
0
Unit 1 unit: 3 port: 33 (interface Fo 1/176)
---------------------------------------
Q# TYPE
Q#
TOTAL BUFFERED CELLS
---------------------------------------
MCAST
3
0
Unit 1 unit: 3 port: 37 (interface Fo 1/180)
---------------------------------------
Q# TYPE
Q#
TOTAL BUFFERED CELLS
---------------------------------------
show hardware buffer interface
Display buffer statistics for a specific interface.
Syntax
show hardware buffer interface interface{priority-group { id | all } | queue { id| all} ] buffer-info
Parameters
interface interface
Enter any of the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
priority-group
queue buffer-info
Enter the keyword priority-group followed by id for specific priority-group or keyword all.
Enter the keyword queue followed by id for specific queue or keyword all.
To display total buffer information for the interface, enter the keywords bufferinfo.
Command Modes EXEC EXEC Privilege
Command History
Version
9.8(0.0P5) 9.8(0.0P2) 9.8(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4810, S4820T, S5000, S6000, S6000�ON, Z9000, and Z9500.
Example displaying totalbuffer information for the interface
Dell# show hardware buffer interface tengigabitethernet 1/1 buffer-info ----- Buffer Stats for Interface Te 1/1 -----
Maximum Shared Limit for the Interface: 38336 Default Packet Buffer allocate for the Interface: 120 Used Packet Buffer for the Interface: 0
Debugging and Diagnostics 505
Example displaying priority-group range
Dell#show hardware buffer interface tengigabitethernet 1/1 priority-
group 0 buffer-info
----- Buffer stats for unit: 0 port: 1 (interface Te 1/1) -----
-----------------------------------------------------------
PG# PRIORITIES
ALLOTED (CELLS)
COUNTER (CELLS)
MIN
SHARED MODE HDRM MIN SHARED HDRM
-----------------------------------------------------------
0 -
61440 0
STATIC 174 0
0
0
Dell#
Example displaying queue range
show hardware buffer-stats-snapshot
Displays buffer statistics tracking resource information for a specific interface.
Syntax
show hardware buffer-stats-snapshot resource interface interface{prioritygroup { id | all } | queue { ucast{id | all}{ mcast {id | all} | all}
Parameters
buffer-statssnapshot unit number
interface interface
Display the historical snapshot of buffer statistical values unit Enter the keyword unit along with a port-pipe number. The range is from 0 to 0.
Enter any of the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
queue priority-group
Enter the keyword queue after id for specific queue or keyword all.
Enter the keyword priority-group followed by id for specific priority-group or keyword all.
Command Modes EXEC EXEC Privilege
Command History
Version
9.8(0.0P5) 9.8(0.0P2) 9.8(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4810, S4820T, S5000, S6000, S6000�ON, Z9000, Z9500.
Usage Information
<Interface><slot/port>-Queue ucast/mcast -- Displays the total unicast/multicast buffer usage on per-port per-queue basis. For CPU port, counters for queues 0 to 11 displays and there is no differentiation between unicast and multicast queues.
Example displaying egress queue-level snapshot for both unicast and multicast packets for the specific interface
Dell# show hardware buffer-stats-snapshot resource interface fortyGigE
1/1 queue all
Unit 1 unit: 0 port: 1 (interface Fo 1/49)
---------------------------------------
Q# TYPE
Q#
TOTAL BUFFERED CELLS
---------------------------------------
UCAST
0
0
UCAST
1
0
506 Debugging and Diagnostics
UCAST UCAST UCAST UCAST UCAST UCAST UCAST UCAST UCAST UCAST MCAST MCAST MCAST MCAST MCAST MCAST MCAST MCAST MCAST
2
0
3
0
4
0
5
0
6
0
7
0
8
0
9
0
10
0
11
0
0
0
1
0
2
0
3
0
4
0
5
0
6
0
7
0
8
0
Example displaying egress queue-level snapshot for unicast packets for the specific interface
Del#show hardware buffer-stats-snapshot resource interface fortyGigE
1/49 queue ucast 10
Unit 0 unit: 0 port: 1 (interface Fo 1/49)
---------------------------------------
Q# TYPE
Q#
TOTAL BUFFERED CELLS
---------------------------------------
UCAST
10
0
Dell#show hardware buffer-stats-snapshot resource interface fortyGigE
1/49 queue ucast all
Unit 1 unit: 0 port: 1 (interface Fo 1/49)
---------------------------------------
Q# TYPE
Q#
TOTAL BUFFERED CELLS
---------------------------------------
UCAST
0
0
UCAST
1
0
UCAST
2
0
UCAST
3
0
UCAST
4
0
UCAST
5
0
UCAST
6
0
UCAST
7
0
UCAST
8
0
UCAST
9
0
UCAST
10
0
UCAST
11
0
Example displaying egress queue-level snapshot for multicast packets for the specific interface
Dell#show hardware buffer-stats-snapshot resource interface fortyGigE
1/49 queue mcast 3
Unit 1 unit: 0 port: 1 (interface Fo 1/49)
---------------------------------------
Q# TYPE
Q#
TOTAL BUFFERED CELLS
---------------------------------------
MCAST
3
0
Dell#show hardware buffer-stats-snapshot resource interface fortyGigE 1/49 queue mcast all
Unit 1 unit: 0 port: 1 (interface Fo 1/49)
---------------------------------------
Q# TYPE
Q#
TOTAL BUFFERED CELLS
---------------------------------------
MCAST
0
0
MCAST
1
0
MCAST
2
0
MCAST
3
0
MCAST
4
0
Debugging and Diagnostics 507
MCAST MCAST MCAST MCAST
5
0
6
0
7
0
8
0
Example displaying ingress prioritygroup level snapshot for the specific interface
Dell#show hardware buffer-stats-snapshot resource interface fortyGigE 1/49 priority-group 7
Unit 1 unit: 0 port: 1 (interface Fo 1/49)
---------------------------------------
PG#
SHARED CELLS
HEADROOM CELLS
---------------------------------------
7
0
0
Dell#show hardware buffer-stats-snapshot resource interface fortyGigE 1/49 priority-group all
Unit 1 unit: 0 port: 1 (interface Fo 1/49)
---------------------------------------
PG#
SHARED CELLS
HEADROOM CELLS
---------------------------------------
0
0
0
1
0
0
2
0
0
3
0
0
4
0
0
5
0
0
6
0
0
7
0
0
508 Debugging and Diagnostics
15
Dynamic Host Configuration Protocol (DHCP)
Dynamic host configuration protocol (DHCP) is an application layer protocol that dynamically assigns IP addresses and other configuration parameters to network end-stations (hosts) based on the configuration policies the network administrators determine.
Topics:
� Commands to Configure the System to be a DHCP Server � Commands to Configure Secure DHCP � Commands to Configure DNS
Commands to Configure the System to be a DHCP Server
To configure the system to be a DHCP server, use the following commands.
clear ip dhcp
Reset the DHCP counters.
Syntax Parameters
clear ip dhcp [binding {address} | conflict | server statistics]
binding address conflicts
server statistics
Enter the keyword binding to delete all entries in the binding table.
Enter the IP address to clear the binding entry for a single IP address.
Enter the keyword conflicts to delete all of the log entries created for IP address conflicts.
Enter the keywords server statistics to clear all the server counter information.
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000.
Dynamic Host Configuration Protocol (DHCP) 509
Usage Information
Version
8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0
Description
Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series.
Entering <CR> after the clear ip dhcp binding command clears all the IPs from the binding table.
debug ip dhcp server
Display FTOS debugging messages for DHCP.
Syntax Parameters
debug ip dhcp server [events | packets]
events packet
Enter the keyword events to display the DHCP state changes. Enter the keyword packet to display packet transmission/reception.
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series.
debug ipv6 dhcp
To enable debug logs for DHCPv6 relay agent transactions.
Syntax
debug ipv6 dhcp To disable the debug logs for dhcpv6 relay agent transactions, use the debug ipv6 dhcp command.
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command-Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
510 Dynamic Host Configuration Protocol (DHCP)
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4810, S4820T, S6000 and Z-Series.
default-router
Assign a default gateway to clients based on the address pool.
Syntax Parameters
default-router address [address2...address8]
address
Enter a list of routers that may be the default gateway for clients on the subnet. You may specify up to eight routers. List them in order of preference.
Defaults
none
Command Modes DHCP <POOL>
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series.
disable
Disable the DHCP server.
Syntax
disable
DHCP Server is disabled by default. To enable the system to be a DHCP server, use the no disable command.
Defaults
Disabled
Command Modes CONFIGURATION
DHCP <POOL>
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Dynamic Host Configuration Protocol (DHCP) 511
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series.
dns-server
Assign a DNS server to clients based on address pool.
Syntax Parameters
dns-server address [address2...address8]
address
Enter a list of DNS servers that may service clients on the subnet. You may list up to eight servers, in order of preference.
Defaults
none
Command Modes DHCP <POOL>
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series.
domain-name
Assign a domain to clients based on the address pool.
Syntax
domain-name name
512 Dynamic Host Configuration Protocol (DHCP)
Parameters
name
Give a name to the group of addresses in a pool.
Defaults
none
Command Modes DHCP <POOL>
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series.
excluded-address
Prevent the server from leasing an address or range of addresses in the pool.
Syntax Parameters
excluded-address [address | low-address high-address]
address low-address high-address
Enter a single address to be excluded from the pool. Enter the lowest address in a range of addresses to be excluded from the pool. Enter the highest address in a range of addresses to be excluded from the pool.
Defaults
none
Command Modes DHCP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Dynamic Host Configuration Protocol (DHCP) 513
Version
8.2.1.0
Description
Introduced on the C-Series and S-Series.
hardware-address
For manual configurations, specify the client hardware address.
Syntax Parameters
hardware-address address
address
Enter the hardware address of the client.
Defaults
none
Command Modes DHCP <POOL>
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series.
host
For manual (rather than automatic) configurations, assign a host to a single-address pool.
Syntax Parameters
host address address/mask
Enter the host IP address and subnet mask.
Defaults
none
Command Modes DHCP <POOL>
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2)
Introduced on the S4048-ON. Introduced on the S3048-ON.
514 Dynamic Host Configuration Protocol (DHCP)
Version
9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0
Description
Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series.
lease
Specify a lease time for the addresses in a pool.
Syntax Parameters
lease {days [hours] [minutes] | infinite}
days hours minutes infinite
Enter the number of days of the lease. The range is from 0 to 31. Enter the number of hours of the lease. The range is from 0 to 23. Enter the number of minutes of the lease. The range is from 0 to 59. Specify that the lease never expires.
Defaults
24 hours
Command Modes DHCP <POOL>
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series.
netbios-name-server
Specify the NetBIOS Windows Internet Naming Service (WINS) name servers, in order of preference, that are available to Microsoft Dynamic Host Configuration Protocol (DHCP) clients.
Syntax
netbios-name-server address [address2...address8]
Dynamic Host Configuration Protocol (DHCP) 515
Parameters
address
Enter the address of the NETBIOS name server. You may enter up to eight, in order of preference.
Defaults
none
Command Modes DHCP <POOL>
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series.
netbios-node-type
Specify the NetBIOS node type for a Microsoft DHCP client. Dell Networking recommends specifying clients as hybrid.
Syntax Parameters
netbios-node-type type
type
Enter the NETBIOS node type:
Broadcast: Enter the keyword b-node. Hybrid: Enter the keyword h-node. Mixed: Enter the keyword m-node. Peer-to-peer: Enter the keyword p-node.
Defaults
Hybrid
Command Modes DHCP <POOL>
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T.
516 Dynamic Host Configuration Protocol (DHCP)
Version
8.3.11.1 8.3.7.0 8.2.1.0
Description
Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series.
network
Specify the range of addresses in an address pool.
Syntax Parameters
network network /prefix-length
network/ prefix- Specify a range of addresses. Prefix-length range is from 17 to 31. length
Defaults
none
Command Modes DHCP <POOL>
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series.
pool
Create an address pool.
Syntax Parameters
pool name name
Enter the address pool's identifying name.
Defaults
none
Command Modes DHCP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Dynamic Host Configuration Protocol (DHCP) 517
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series.
show ip dhcp binding
Display the DHCP binding table.
Syntax
show ip dhcp binding
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series.
show ip dhcp configuration
Display the DHCP configuration.
Syntax Parameters
Defaults
show ip dhcp configuration [global | pool name]
pool name global
Display the configuration for a DHCP pool. Display the DHCP configuration for the entire system.
none
518 Dynamic Host Configuration Protocol (DHCP)
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series.
Example
Dell# show ip dhcp configuration global
Protocol status
: Enabled
Number of ping packets : 1
Dell#
Dell# show ip dhcp configuration pool p1
Pool Name Pool Type Domain Name Lease Time DNS Servers Default Routers Network
: p1 : Dynamic : dell.com : 2Days 0Hrs 0Mins : 10.11.0.1 : 1.1.1.1 : 1.1.1.0 255.255.255.0
show ip dhcp conflict
Display the address conflict log.
Syntax Parameters
show ip dhcp conflict address
address
Display a particular conflict log entry.
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON.
Dynamic Host Configuration Protocol (DHCP) 519
Version
9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0
Description
Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series.
show ip dhcp server
Display the DHCP server statistics.
Syntax
show ip dhcp server statistics
Defaults
none
Command Modes EXEC Privilege
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000-ON.
9.0.2.0
Introduced on the S6000.
8.3.19.0
Introduced on the S4820T.
8.3.11.1
Introduced on the Z9000.
8.3.7.0
Introduced on the S4810.
8.2.1.0
Introduced on the C-Series and S-Series.
Commands to Configure Secure DHCP
DHCP, as defined by RFC 2131, provides no authentication or security mechanisms. Secure DHCP is a suite of features that protects networks that use dynamic address allocation from spoofing and attacks.
arp inspection
Enable dynamic arp inspection (DAI) on a VLAN.
Syntax
arp inspection
Defaults
Disabled
Command Modes INTERFACE VLAN
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
520 Dynamic Host Configuration Protocol (DHCP)
Related Commands
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0 8.2.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series. Introduced on the C-Series and S-Series.
arp inspection-trust -- specifies a port as trusted so that ARP frames are not validated against the binding table.
arp inspection-trust
Specify a port as trusted so that ARP frames are not validated against the binding table.
Syntax
arp inspection-trust
Defaults
Disabled
Command Modes INTERFACE INTERFACE PORT-CHANNEL
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0 8.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series. Introduced on the C-Series and S-Series.
Related Commands
arp inspection -- enables dynamic ARP inspection on a VLAN.
Dynamic Host Configuration Protocol (DHCP) 521
clear ip dhcp snooping
Clear the DHCP binding table.
Syntax Parameters
clear ip dhcp snooping {binding | source-address-validation discardcounters [interface interface]}
binding
Clears the binding table.
source-address- Clears discard counters from all the interfaces configured with IP Source Guard. validation discard-counters
interface interface
(OPTIONAL) Specifies an interface to clear the discard counters.
Enter any of the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number.
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.6(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON.
Added the keywords discard-counters, interface, and the variable interface on the S4810, S4820T, S5000, S6000, Z9000, Z9500.
9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0 8.2.1.0
Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series. Introduced on the C-Series and S-Series.
Example
The following example shows how to clear the discard counters globally:
Dell> clear ip dhcp snooping source-address-validation discard-counters
The following example shows how to clear the discard counters on an interface:
Dell> clear ip dhcp snooping source-address-validation discard-counters interface TenGigE 1/10
522 Dynamic Host Configuration Protocol (DHCP)
Related Commands
The following example shows how to clear the discard counters on a port channel interface: Dell> clear ip dhcp snooping source-address-validation discard-counters interface portchannel 1
show ip dhcp snooping -- displays the contents of the DHCP binding table.
clear ipv6 dhcp snooping binding
Clear all the DHCPv6 snooping binding database entries.
Syntax
clear ipv6 dhcp snooping binding
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command-Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4810, S4820T, S6000, S6000-ON, and Z-Series.
Example
Dell# clear ipv6 dhcp snooping? binding Clear the snooping binding database
ip dhcp relay
Enable Option 82.
Syntax Parameters
ip dhcp relay information-option [remote-id | trust-downstream]
remote-id
trustdownstream
Configure the system to enable the remote-id string in option-82.
Configure the system to trust Option 82 when it is received from the previous-hop router.
Defaults
Disabled
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(0.2)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9000.
Dynamic Host Configuration Protocol (DHCP) 523
Version
8.3.19.0 8.3.7.0 8.3.1.0 7.8.1.0
ip dhcp snooping
Enable DHCP snooping globally.
Description
Introduced on the S4820T. Introduced on the S4810. Introduced on the E-Series. Introduced on the C-Series and S-Series.
Syntax
[no] ip dhcp snooping
Defaults
Disabled
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.2.(0.0) 9.0.2.0 8.3.11.1 8.3.1.0 8.2.1.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S4810 and S4820T. Introduced on the S6000. Introduced on the Z9000. Introduced on the E-Series. Introduced on the C-Series and S-Series on Layer 2 interfaces. Introduced on the C-Series and S-Series on Layer 3 interfaces.
Usage Information
When enabled, no learning takes place until you enable snooping on a VLAN. After disabling DHCP snooping, the binding table deletes and Option 82, IP Source Guard, and Dynamic ARP Inspection are disabled.
Introduced in Dell Networking OS version 7.8.1.0, DHCP snooping was available for Layer 3 only and dependent on DHCP Relay Agent (ip helper-address). Dell Networking OS version 8.2.1.0 extends DHCP Snooping to Layer 2. You do not have to enable relay agent to snoop on Layer 2 interfaces.
ipv6 dhcp snooping
Enable DHCPv6 snooping globally for ipv6.
Syntax
[no] ipv6 dhcp snooping To disable the snooping globally, use the no ipv6 dhcp snooping command.
Defaults
Disabled
Command Modes CONFIGURATION
524 Dynamic Host Configuration Protocol (DHCP)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4810, S4820T, S6000, S6000-ON, and Z-Series.
ipv6 dhcp snooping vlan
Enable ipv6 DHCP Snooping on VLAN or range of VLANs.
Syntax
[no] ip dhcp snooping vlan vlan-id
To disable the ipv6 dhcp snooping on VLAN basis or range of VLAN, use the no ipv6 dhcp snooping vlan <vlan-id> command.
Parameters
vlan-id
Enter the name of a VLAN id or list of the VLANs to enable DHCP Snooping.
Defaults
Disabled
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command-Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4810, S4820T, S6000, S6000-ON, and Z-Series.
ip dhcp snooping binding
Create a static entry in the DHCP binding table.
Syntax Parameters
[no] ip dhcp snooping binding mac address vlan-id vlan-id ip ip-address interface type slot/port[/subport] lease number
mac address
vlan-id vlan-id
ip ip-address interface type
Enter the keyword mac then the MAC address of the host to which the server is leasing the IP address.
Enter the keywords vlan-id then the VLAN to which the host belongs. The range is from 2 to 4094.
Enter the keyword ip then the IP address that the server is leasing.
Enter the keyword interface then the type of interface to which the host is connected:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
Dynamic Host Configuration Protocol (DHCP) 525
slot/port[/ subport]
lease time
Enter the slot and port number of the interface. Enter the subport number if a 40G port is fanned-out into 10G ports.
Enter the keyword lease then the amount of time the IP address are leased. The range is from 1 to 4294967295.
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.5.1.0 8.3.7.0 8.3.1.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Introduced on the E-Series. Introduced on the C-Series and S-Series.
Related Commands
show ip dhcp snooping -- displays the contents of the DHCP binding table.
IPv6 DHCP Snooping Binding
Create a static DHCP snooping binding entry in the snooping database.
Syntax
[no] ipv6 dhcp snooping binding mac address vlan-id vlan-id ipv6 ipv6address interface interface-type | interface-number lease value
To delete the DHCP snooping binding entry from DHCP snooping database, use the [no] ipv6 dhcp snooping binding mac address vlan-id vlan-id ipv6 ipv6-address interface interface-type | interface-number lease valuecommand.
Parameters
mac address
vlan-id
ipv6 ipv6address interface type
Enter the keyword mac then the MAC address of the host to which the server is leasing the IPv6 address.
Enter the keywords vlan-id then the VLAN to which the host belongs. The range is from 2 to 4094.
Enter the keyword ipv6 then the IPv6 address that is leased to the client.
Enter the keyword interface then the type of interface to which the host is connected:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
526 Dynamic Host Configuration Protocol (DHCP)
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
interface number Enter the number of the interface.
lease value
Enter the keyword lease then the amount of time the IPv6 address are leased. The range is from 1 to 4294967295.
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4810, S4820T, S6000, S6000-ON, and Z-Series.
ip dhcp snooping database
Delay writing the binding table for a specified time.
Syntax Parameters
ip dhcp snooping database write-delay minutes
minutes
The range is from 5 to 21600.
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series. Introduced on the C-Series and S-Series.
Dynamic Host Configuration Protocol (DHCP) 527
ipv6 dhcp snooping database write-delay
To set time interval for storing the snooping binding entries in a file.
Syntax Parameters
[no] ipv6 dhcp snooping database write-delay value
To disable the storing of snooping binding entries in a file, use the no ipv6 dhcp snooping writedelay command.
value
The range is from 5 to 21600. The value of the minutes range is from 5 min. to 15 days.
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4810, S4820T, S6000, S6000-ON, and Z-Series.
ip dhcp snooping database renew
Renew the binding table.
Syntax
ip dhcp snooping database renew
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series. Introduced on the C-Series and S-Series.
528 Dynamic Host Configuration Protocol (DHCP)
ipv6 dhcp snooping database renew
To load the binding entries from the file to DHCPv6 snooping binding database.
Syntax
ipv6 dhcp snooping database renew
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4810, S4820T, S6000, S6000-ON, and Z-Series.
ip dhcp snooping trust
Configure an interface as trusted.
Syntax
[no] ip dhcp snooping trust
Defaults
Untrusted
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series. Introduced on the C-Series and S-Series.
ipv6 dhcp snooping trust
Configure an interface as trusted for DHCP snooping.
Syntax
[no] ipv6 dhcp snooping trust
Dynamic Host Configuration Protocol (DHCP) 529
To disable dhcp snooping trusted capability on this interface, use the no ipv6 dhcp snooping trust command.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4810, S4820T, S6000, S6000-ON, and Z-Series.
ip dhcp source-address-validation
Enable the IP Source Guard.
Syntax Parameters
[no] ip dhcp source-address-validation [ipmac] [vlan vlan-id]
ipmac vlan vlan-id
Enable IP+MAC Source Address Validation.
(OPTIONAL) SAV validates the source IP address along with the source VLAN ID against the DHCP snooping binding table.
Defaults
Disabled
Command Modes INTERFACE
INTERFACE PORTCHANNEL
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.6(0.0)
9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0 8.2.1.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Added the vlan keyword and the vlan-id variable . Introduced support for SAV on port channels interfaces. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series. Added the keyword ipmac. Introduced on the C-Series and S-Series.
Usage Information
Allocate at least one FP block to ipmacacl before you can enable IP+MAC Source Address Validation and SAV with VLAN option.
530 Dynamic Host Configuration Protocol (DHCP)
1. Use the cam-acl l2acl command from CONFIGURATION mode. 2. Save the running-config to the startup-config. 3. Reload the system.
ip dhcp relay information-option
Enable Option 82.
Syntax Parameters
ip dhcp relay information-option [trust-downstream] [vpn]
trustdownstream
vpn
Configure the system to trust Option 82 when it is received from the previous-hop router.
Enter the keyword vpn to add VPN/VRF related sub-option to relay agent information Option 82.
NOTE: Adds the VPN/VRF related sub-options into the relay agent information option(82). When DHCP broadcasts are forwarded by the relay agent from clients to DHCP server.
Default
Disabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4.(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Added support for VRF. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series. Introduced on C-Series and S-Series.
Example
Dell(conf)#ip dhcp relay information-option vpn
ip dhcp snooping verify mac-address
Validate a DHCP packet's source hardware address against the client hardware address field (CHADDR) in the payload.
Syntax
[no] ip dhcp snooping verify mac-address
Defaults
Disabled
Command Modes CONFIGURATION
Dynamic Host Configuration Protocol (DHCP) 531
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0 7.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series. Introduced on the C-Series and S-Series.
ipv6 dhcp snooping verify mac-address
Configure to enable verify source mac-address against ipv6 DHCP packet mac address.
Syntax
[no] ipv6 dhcp snooping verify mac-address
To disable verify source mac-address against IPv6 DHCP packet MAC address, use the no ipv6 dhcp snooping verify mac-address command.
Defaults
Disabled
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4810, S4820T, S6000, S6000-ON, and Z-Series.
ip helper-address
Configures the destination broadcast address or the host address for DHCP server requests.
Syntax Parameters
ip helper-address [vrf vrf-name] ip-address
To disable the destination broadcast address or the host address for DHCP server requests, use the ip helper-address [vrf vrf-name] ip-address command.
vrf vrf-name ip-address
(Optional) Enter the keyword vrf and then the name of the VRF through which the host address can be reached.
Enter an IP address through which the host address can be reached.
532 Dynamic Host Configuration Protocol (DHCP)
Default
Disabled.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
Version 9.4.(0.0) Introduced on the S-Series and Z-Series.
Usage Information
Example
Use this command on the interfaces where the DHCP clients are connected to forward the packets from clients to DHCP server and vice-versa.
Dell(conf-if-te-1/12)#ip helper-address vrf jay 10.0.0.2
ipv6 helper-address
Configures the ipv6 DHCP helper addresses without VRF.
Syntax
[no] ipv6 helper-address ipv6-address To delete the ipv6 helper address, use the [no] ipv6 helper-address ipv6-address command.
Parameters
ipv6-address
Enter the keywordipv6�address through which the server address can be reached.
Default
Disabled.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4810, S4820T, S6000, S6000�ON, Z9000, and Z9500.
Usage Information
Example
Use this command on the interfaces where the DHCP clients are connected to forward the packets from clients to DHCP server and vice-versa.
Dell(conf-if-te-1/1)#ipv6 helper-address
X:X:X:X::X
IPv6 helper address
VRF
VRF name.
Global
Global address space
Dynamic Host Configuration Protocol (DHCP) 533
show ip dhcp snooping
Display the contents of the DHCP binding table or display the interfaces configured with IP Source Guard.
Syntax Parameters
show ip dhcp snooping [binding | source-address-validation [discardcounters [interface interface]]]
Parameters Description
binding
Display the binding table.
source-address- Display the interfaces configured with IP Source Guard. validation discard-counters (OPTIONAL) Display the number of dropped packets.
interface interface
(OPTIONAL) Specifies an interface to show the discard counters.
Enter any of the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.6(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON.
Added the discard-counters, interface keywords, and the interface variable.
9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0 7.8.1.0
Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series. Introduced on the C-Series and S-Series.
Example
The following example displays the interfaces configured with IP Source Guard:
Dell> show ip dhcp snooping source-address-validation ip sav access-list on TenGigabitEthernet 1/1 Total cam count 3 permit host 0.0.0.0 count (0 packets)
534 Dynamic Host Configuration Protocol (DHCP)
permit host 10.1.1.252 count (0 packets) permit host 10.1.1.253 count (0 packets) ipmac-vlan sav access-list on TenGigabitEthernet 1/2 Total cam count 4 permit host 0.0.0.0 host 00:00:00:00:00:00 count (0 packets) permit vlan 10 host 10.1.1.1 host 00:00:00:aa:00:01 count (0 packets) permit vlan 10 host 10.1.1.2 host 00:00:00:aa:00:02 count (0 packets) permit vlan 20 host 10.2.2.1 host 00:00:00:aa:00:03 count (0 packets) permit vlan 20 host 10.2.2.2 host 00:00:00:aa:00:04 count (0 packets) The following example displays the port channel interfaces configured with IP Source Guard: Dell> show ip dhcp snooping source-address-validation interface portchannel 10 ipmac-vlan sav access-list on Port-channel 10 on stack-unit 1 Total cam count 5 permit host 0.0.0.0 host 00:00:00:00:00:00 count (0 packets) permit vlan 10 host 1.1.1.1 host 00:00:00:00:01:01 count (0 packets) permit vlan 10 host 1.1.1.2 host 00:00:00:00:01:02 count (0 packets) permit vlan 10 host 1.1.1.3 host 00:00:00:00:01:03 count (0 packets) ipmac-vlan sav access-list on Port-channel 10 on stack-unit 2 Total cam count 5 permit host 0.0.0.0 host 00:00:00:00:00:00 count (0 packets) permit vlan 10 host 1.1.1.1 host 00:00:00:00:01:01 count (0 packets) permit vlan 10 host 1.1.1.2 host 00:00:00:00:01:02 count (0 packets) permit vlan 10 host 1.1.1.3 host 00:00:00:00:01:03 count (0 packets) ipmac-vlan sav access-list on Port-channel 10 on stack-unit 3 Total cam count 5 permit host 0.0.0.0 host 00:00:00:00:00:00 count (0 packets) permit vlan 10 host 1.1.1.1 host 00:00:00:00:01:01 count (0 packets) permit vlan 10 host 1.1.1.2 host 00:00:00:00:01:02 count (0 packets) permit vlan 10 host 1.1.1.3 host 00:00:00:00:01:03 count (0 packets)
NOTE: The output for port-channel interfaces does not display the physical interface. The following example displays the SAV discard counters on all interfaces:
Dell> show ip dhcp snooping source-address-validation discard-counters deny access-list on TenGigabitEthernet 1/1 Total cam count 1 deny count (0 packets) deny access-list on TenGigabitEthernet 1/2 Total cam count 2 deny vlan 10 count (0 packets) deny vlan 20 count (0 packets) The following example displays the SAV discard counters on a particular interface: Dell> show ip dhcp snooping source-address-validation discard-counters interface TenGigabitEthernet 1/1 deny access-list on TenGigabitEthernet 1/1 Total cam count 2 deny vlan 10 count (0 packets) deny vlan 20 count (0 packets) The following example displays the SAV discard counters on a port channel interface: Dell> show ip dhcp snooping source-address-validation discard-counters interface portchannel 10 deny access-list on Port-channel 10 on stack-unit 1 Total cam count 1 deny vlan 10 count (0 packets) deny access-list on Port-channel 10 on stack-unit 2 Total cam count 1 deny vlan 10 count (0 packets) deny access-list on Port-channel 10 on stack-unit 3 Total cam count 1 deny vlan 10 count (0 packets)
Dynamic Host Configuration Protocol (DHCP) 535
NOTE: The output for port-channel interfaces does not display the physical interface. If the LAG member interfaces belong to different stack-units, the counters are displayed per stack-unit for that port channel.
show ipv6 dhcp snooping
Display the DHCPv6 snooping binding database.
Syntax
show ipv6 dhcp snooping
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4810, S4820T, S6000, S6000-ON, and Z-Series.
Example
Dell#show ipv6 dhcp snooping IPv6 DHCP Snooping IPv6 DHCP Snooping Mac Verification Database write-delay (In minutes) DHCP packets information Snooping packets Snooping packets processed on L2 vlans DHCP Binding File Details Invalid File Invalid Binding Entry Binding Entry lease expired Dell#
: Enabled. : Disabled. : 5 : 0 : 0 : 0 : 0 : 0
Commands to Configure DNS
To configure the Domain Names Systems (DNS) on the system, use the following commands:
ip name-server
Configures the name server IP addresses for VRF. Using this command, you can configure up to a maximum of six IP addresses per VRF.
Syntax
ip name-server [vrf vrf-name] ip-address [ip-address2] [ip-address3] [ipaddress4] [ip-address5] [ip-address6]
To undo the name server ip address configuration for VRF, use the no ip name-server [vrf vrfname] ip-address command.
536 Dynamic Host Configuration Protocol (DHCP)
Parameters
vrf vrf-name
ip-address [ipaddress2] [ipaddress3] [ipaddress4] [ipaddress5] [ipaddress6]
(Optional) Enter the key word vrf and then the name of the VRF to configure the name server IP addresses for that VRF.
Enter the IP address of the name server in dotted decimal format. NOTE: Use the additional ip-address parameters (ip-address2 to ipaddress6) in a sequential order to specify up to a maximum of six IP addresses per VRF.
Defaults
None
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4.(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S-Series and Z-Series.
Usage Information
Example
Use this command to associate name server IP addresses to a specific VRF.
�
Dell(conf)#ip name-server vrf jay 2.2.2.2
�
Dell(conf)#ip name-server vrf jay 2.2.2.2 3.3.3.3 4.4.4.4 5.5.5.5
6.6.6.6 7.7.7.7
ip domain-name
Configures the default domain corresponding to a specific VRF. This domain is appended to the in complete DNS requests corresponding to the specified VRF.
Syntax Parameters
ip domain-name [vrf vrf-name] name
To undo the domain name configuration corresponding to a specific VRF, use the no ip domain-name [vrf vrf-name] name command.
vrf vrf-name name
(Optional) Enter the key word vrf and then the name of the VRF to configure the domain corresponding to that VRF.
Enter the name of the domain to be appended to the in complete DNS requests corresponding to the specified VRF.
Defaults
None
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
Dynamic Host Configuration Protocol (DHCP) 537
Usage Information
Example
Version
9.8(0.0P2) 9.7(0.0) 9.4.(0.0)
Description
Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S-Series and Z-Series.
Use this command to configure a domain name corresponding to a VRF. This domain is appended to the in complete DNS requests corresponding to the specified VRF.
Dell(conf)#ip domain-name vrf jay dell.com
ip domain-list
Adds a domain name to the DNS list. This domain name is appended to incomplete host names in DNS requests corresponding to a specific VRF.
Syntax Parameters
ip domain-list [vrf vrf-name] name
To remove a domain name from DNS list, use the no ip domain-list [vrf vrf-name] name command.
vrf vrf-name name
(Optional) Enter the key word vrf and then the name of the VRF to add a domain name to the DNS list corresponding to that VRF.
Enter the name of the domain to be appended to the DNS list corresponding to the VRF.
Defaults
None
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4.(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S-Series and Z-Series.
Usage Information
Example
Use this command to add domain names to the DNS lists corresponding to a specific VRF. You can add up to a maximum of six domain names to the DNS list corresponding to a VRF. This domain is used to complete the unqualified host names.
Dell(conf)#ip domain-list vrf jay dell.com Dell(conf)#ip domain-list vrf jay force10.com
538 Dynamic Host Configuration Protocol (DHCP)
ip host
Configures a mapping between the host name server and the IP address for a specific VRF. This mapping information is used by the name-to-IP address table to resolve host names.
Syntax Parameters
ip host [vrf vrf-name] name ip-address
To undo the host name server to IP address mapping for VRFs, use the no ip host [vrf vrfname] name ip-address command.
vrf vrf-name
name ip-address
(Optional) Enter the key word vrf and then the name of the VRF to configure the name server to IP address mapping for that VRF.
Enter the name od the host to be associated with an IP address.
Enter the IP address of the name server in dotted decimal format.
Defaults
None
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4.(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S-Series and Z-Series.
Usage Information
Example
Use this command to create a mapping between a host name server and its IP addresses for a specific VRF.
Dell(conf)#ip host vrf jay dell 1.1.1.1
clear host
Removes one or all dynamically learned host table entries for a specific VRF.
Syntax Parameters
clear host [vrf vrf-name] {* | host-name}
vrf vrf-name host-name *
(Optional) Enter the key word vrf and then the name of the VRF to delete dynamically learned host table entries corresponding to that VRF.
Enter the name of the host corresponding to which you want to delete the dynamically learnt host table entries.
Enter * to delete all host table entries.
Defaults
None
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Dynamic Host Configuration Protocol (DHCP) 539
Usage Information
Example
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4.(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S-Series and Z-Series.
Use this command to delete one or all dynamically learned host table entries corresponding to a specific VRF.
Dell#clear host vrf jay dell Dell#clear host vrf jay *
540 Dynamic Host Configuration Protocol (DHCP)
16
Equal Cost Multi-Path (ECMP)
Equal cost multi-path (ECMP) supports multiple "best paths" in next-hop packet forwarding to a destination device.
Topics:
� ecmp-group � hash-algorithm � hash-algorithm ecmp � hash-algorithm seed � ip ecmp-group � ip ecmp weighted � link-bundle-monitor enable � link-bundle-distribution trigger-threshold � show config � show link-bundle distribution
ecmp-group
Provides a mechanism to monitor traffic distribution on an ECMP link bundle. A system log is generated when the standard deviation of traffic distribution on a member link exceeds a defined threshold.
Syntax Parameters
ecmp-group {ecmp-group-id interface interface | link-bundle-monitor} To remove the selected interface, use the ecmp-group no interface command. To disable link bundle monitoring, use the ecmp-group no link-bundle-monitor command.
ecmp-group ID interface
Enter the identifier number for the ECMP group. The range is from 2 to 64.
Enter the following keywords and slot/port[/subport] to add the interface to the ECMP group:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a LAG interface, enter the keywords port-channel then the slot/port information. The range is from 1 to 128.
Defaults
Off
Command Modes CONFIGURATION CONFIGURATION ECMP-GROUP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2)
Introduced on the S4048-ON. Introduced on the S3048-ON.
Equal Cost Multi-Path (ECMP) 541
Usage Information
Version
9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.10.0
Description
Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810.
Using CONFIGURATION mode, create an ECMP group ID. You can then assign interfaces to the ECMP group using CONFIGURATION ECMP-GROUP mode. You can also enable on the port-channel configuration using the CONFIGURATION ECMP-GROUP command mode.
hash-algorithm
Changes the hash algorithm used to distribute traffic flows across a Port Channel and ECMP. The ECMP and LAG options are supported on the S-Series and Z-Series.
Syntax Parameters
hash-algorithm {ecmp {crc16 | crc16cc | crc32MSB | crc32LSB | crc-upper | dest-ip | flow-based-hashing {crc16|crc16cc|crc32MSB|crc32LSB|xor1|xor2| xor4|xor8|xor16}|lsb | xor1 | xor2 | xor4 | xor8 | xor16}[[hg {crc16 | crc16cc | crc32MSB | crc32LSB | xor1 | xor2 | xor4 | xor8 | xor16}]| [lag {crc16 | crc16cc | crc32MSB | crc32LSB | xor1 | xor2 | xor4 | xor8 | xor16 }][stack-unit|linecard number | port-set number] | [hg--seed value] | [seedvalue]
To return to the default hash algorithm, use the no hash-algorithm command.
To return to the default ECMP hash algorithm, use the no hash-algorithm ecmp algorithm-value command.
To remove the hash algorithm on a particular stack-unit / line-card, use the no hash-algorithm linecard number command.
ecmp crc16 |
Enter the keyword ecmp then one of the following options:
crc16cc | crc32MSB | crc32LSB | crc-
crc16: Use CRC16_BISYNC -- 16 bit CRC16-bisync polynomial (default) crc16cc: Use CRC16_CCITT -- 16 bit CRC16 using CRC16-CCITT polynomial
upper | dest-ip | crc32MSB: Use CRC32_UPPER -- MSB 16 bits of computed CRC32
flow-basedhashing | crc16| crc16cc| crc32MSB|
crc32LSB: Use CRC32_LOWER -- LSB 16 bits of computed CRC32 crc-upper: Uses the upper 32 bits of the key for the hash computation dest-ip: Uses the destination IP for ECMP hashing
crc32LSB|xor1 | flow-based-hashing: Enter the keywords flow-based-hashing
xor2 | xor4 | xor8
followed by the algorithm
| xor16}|lsb | xor1 | xor2 | xor4 |
crc16 |crc16cc |crc32MSB |crc32LSB |xor1 |xor2 |xor4 |xor8 | xor16
xor8 | xor16
lsb: Returns the LSB of the key as the hash
xor1: Use CRC16_BISYNC_AND_XOR1 -- Upper 8 bits of CRC16-BISYNC and
lower 8 bits of xor1
xor2: Use CRC16_BISYNC_AND_XOR2 -- Upper 8 bits of CRC16-BISYNC and
lower 8 bits of xor2
xor4: Use CRC16_BISYNC_AND_XOR4 -- Upper 8 bits of CRC16-BISYNC and
lower 8 bits of xor4
xor8: Use CRC16_BISYNC_AND_XOR8 -- Upper 8 bits of CRC16-BISYNC and
lower 8 bits of xor8
542 Equal Cost Multi-Path (ECMP)
xor16: Use CR16 -- 16 bit XOR
hg {crc16 | crc16cc | crc32MSB | crc32LSB | xor1 | xor2 | xor4 | xor8 | xor16}
Enter the keyword hg then one of the following options available in the stack-unit and linecard provisioned devices:
crc16: Use CRC16_BISYNC -- 16 bit CRC16-bisync polynomial (default) crc16cc: Use CRC16_CCITT -- 16 bit CRC16 using CRC16-CCITT polynomial crc32MSB: Use CRC32_UPPER -- MSB 16 bits of computed CRC32 crc32LSB: Use CRC32_LOWER -- LSB 16 bits of computed CRC32 xor1: Use CRC16_BISYNC_AND_XOR1 -- Upper 8 bits of CRC16-BISYNC and
lower 8 bits of xor1 xor2: Use CRC16_BISYNC_AND_XOR2 -- Upper 8 bits of CRC16-BISYNC and
lower 8 bits of xor2 xor4: Use CRC16_BISYNC_AND_XOR4 -- Upper 8 bits of CRC16-BISYNC and
lower 8 bits of xor4 xor8: Use CRC16_BISYNC_AND_XOR8 -- Upper 8 bits of CRC16-BISYNC and
lower 8 bits of xor8 xor16: Use CR16 -- 16 bit XOR
lag {crc16 | crc16cc | crc32MSB | crc32LSB | xor1 | xor2 | xor4 | xor8 | xor16}
Enter the keyword hg then one of the following options available in the stack-unit and linecard provisioned devices::
crc16: Use CRC16_BISYNC -- 16 bit CRC16-bisync polynomial (default) crc16cc: Use CRC16_CCITT -- 16 bit CRC16 using CRC16-CCITT polynomial crc32MSB: Use CRC32_UPPER -- MSB 16 bits of computed CRC32 crc32LSB: Use CRC32_LOWER -- LSB 16 bits of computed CRC32 xor1: Use CRC16_BISYNC_AND_XOR1 -- Upper 8 bits of CRC16-BISYNC and
lower 8 bits of xor1 xor2: Use CRC16_BISYNC_AND_XOR2 -- Upper 8 bits of CRC16-BISYNC and
lower 8 bits of xor2 xor4: Use CRC16_BISYNC_AND_XOR4 -- Upper 8 bits of CRC16-BISYNC and
lower 8 bits of xor4 xor8: Use CRC16_BISYNC_AND_XOR8 -- Upper 8 bits of CRC16-BISYNC and
lower 8 bits of xor8 xor16: Use CR16 -- 16 bit XOR
hg-seed seedvalue
(This option is available in stack-unit and linecard provisioned devices): Enter the keywords hg-seed then the hash algorithm seed value. The range is from 0 to 2147483646.
stack-unit number
linecard number
(OPTIONAL) : Enter the keyword stack-unit then the stack-unit slot number. (OPTIONAL) : Enter the keyword linecard then the linecard slot number.
port-set number (OPTIONAL) Enter the keyword port-set then the port-set slot number.
Defaults
IPSA and IPDA mask value is FF for the stack-unit.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.9(0.0)
9.8(0.0P5) 9.8(0.0P2)
Added flow-based-hashing support for hashing on ECMP for S4820T, S6000, S4048 and Z9500.
Introduced on the S4048-ON.
Introduced on the S3048-ON.
Equal Cost Multi-Path (ECMP) 543
Usage Information
Version
9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.10.0 8.1.1.0 7.8.1.0 7.7.1.1
Description
Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Added the nh-ecmp option. Added the nh-ecmp option.
To ensure that CRC is not used for LAG, set the default hash-algorithm method on ExaScale systems. For example,hash-algorithm ecmp xor lag checksum nh-ecmp checksum.
The hash value calculated with the hash-algorithm command is unique to the entire chassis. The hash algorithm command with the stack--unit option changes the hash for a particular stack--unit by applying the mask specified in the IPSA and IPDA fields.
The stack-unit option is applicable with the lag-hash-align microcode only. Any other microcode returns an error message as follows:
Dell(conf)#hash-algorithm linecard 5 ip-sa-mask ff ip-da-mask ff % Error: This command is not supported in the current microcode
configuration
In addition, the linecard number ip-sa-mask value ip-da-mask value option has the following behavior to maintain bi-directionality:
When hashing is done on both IPSA and IPDA, the ip-sa-mask and ip-da-mask values must be equal. (Single Linecard).
When hashing is done only on IPSA or IPDA, Dell Networking OS maintains bi-directionality with masks set to XX 00 for stack-unit 1 and 00 XX for stack-unit 2 (ip-sa-mask and ip-da-mask). The mask value must be the same for both stack-units when using multiple stack-units as ingress (where XX is any value from 00 to FF for both stack-units). For example, assume that traffic is flowing between linecard 1 and linecard 2:
hash-algorithm linecard 1 ip-sa-mask aa ip-da-mask 00 hash-algorithm linecard 2 ip-sa-mask 00 ip-da-mask aa
The different hash algorithms are based on the number of Port Channel members and packet values. The default hash algorithm (number 0) yields the most balanced results in various test scenarios, but if the default algorithm does not provide a satisfactory distribution of traffic, use the hash-algorithm command to designate another algorithm.
When a Port Channel member leaves or is added to the Port Channel, the hash algorithm is recalculated to balance traffic across the members.
hash-algorithm ecmp
Change the hash algorithm used to distribute traffic flows across an ECMP (equal-cost multipath routing) group.
Term heading
Syntax
Description heading
hash-algorithm ecmp {crc-upper} | {dest-ip} | {lsb} To return to the default hash algorithm, use the no hash-algorithm ecmp command.
544 Equal Cost Multi-Path (ECMP)
Term heading
Parameters
Description heading
crc-upper
dest-ip lsb
Uses the upper 32 bits of the key for the hash computation. The default is crclower.
Uses the destination IP for ECMP hashing. The default is enabled.
Returns the LSB of the key as the hash. The default is crc-lower.
Defaults
crc-lower dest-ip enabled
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
The hash value calculated with the hash-algorithm command is unique to the entire chassis. The default ECMP hash configuration is crc-lower. This command takes the lower 32 bits of the hash key to compute the egress port and is the "fall-back" configuration if you have not configured anything else.
The different hash algorithms are based on the number of ECMP group members and packet values. The default hash algorithm yields the most balanced results in various test scenarios, but if the default algorithm does not provide satisfactory distribution of traffic, use this command to designate another algorithm.
When a member leaves or is added to the ECMP group, the hash algorithm is recalculated to balance traffic across the members.
hash-algorithm seed
Select the seed value for the ECMP, LAG, and NH hashing algorithm.
Syntax Parameters
hash-algorithm seed value [stack-unitslot/port] [port-set number]
seed value
stack�unit slot/ port port-set number
Enter the keyword seed then the seed value. The range is from 0 to 2,147,483,646. Enter the keyword stack-unit then the slot/port[subport] number.
Enter the keyword port-set then the port-pipe number. The value is 0.
Defaults
None
Command Modes CONFIGURATION
Equal Cost Multi-Path (ECMP) 545
Command History
Usage Information
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series.
Deterministic ECMP sorts ECMPs in order even though RTM provides them in a random order. However, the hash algorithm uses as a seed the lower 12 bits of the chassis MAC, which yields a different hash result for every chassis. This behavior means that for a given flow, even though the prefixes are sorted, two unrelated chassis select different hops.
FTOS provides a CLI-based solution for modifying the hash seed to ensure that on each configured system, the ECMP selection is same. When configured, the same seed is set for ECMP, LAG, and NH, and is used for incoming traffic only.
NOTE: While the seed is stored separately on each port-pipe, the same seed is used across all CAMs.
You cannot separate LAG and ECMP but you can use different algorithms across the chassis with the same seed. If LAG member ports span multiple port-pipes and line cards, set the seed to the same value on each port-pipe to achieve deterministic behavior.
If the hash algorithm configuration is removed, the hash seed does not go to the original factory default setting.
ip ecmp-group
Enable and specify the maximum number of ecmp that the L3 CAM hold for a route, By default, when maximum paths are not configured, the CAM can hold a maximum of 16 ecmp per route.
Syntax Parameters
ip ecmp-group {maximum-paths | {number} {path-fallback} To negate a command, use the no ip ecmp-group maximum-paths {number} command.
maximum-paths path-fallback
Specify the maximum number of ECMP for a route. The range is 2 to 64.
Use the keywords path-fallback to enable this feature. If you enable the feature, re-enter this keyword to disable the feature.
Defaults
16
Command Modes CONFIGURATION
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON.
546 Equal Cost Multi-Path (ECMP)
Usage Information
Version
9.2(1.0) 9.0.2.0 9.0.0.0 8.3.10.0
Description
Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4810.
You must save the new ECMP settings to the startup-config (write-mem) then reload the system for the new settings to take effect.
ip ecmp weighted
Enables weighted ECMP calculations.
Syntax
ip ecmp weighted To disable weighted ECMP calculations, enter the no ip ecmp weighted command.
Defaults
N/A
Command Modes CONFIGURATION
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S-Series.
Usage Information
Example
Enabling this CLI would inform the FIB to re-program the destination prefix paths with weights in the HW/CAM on the fly.
If disabled, the CLI would inform the FIB to re-program the destination prefix paths with no weights or regular ECMP.
Dell(conf)#ip ecmp ?
weighted
Enables Weighted ECMP
Dell(conf)#ip ecmp weighted
Dell(conf)#do show running-config | grep ecmp
ip ecmp weighted
Dell(conf)#
Dell(conf)#no ip ecmp ?
weighted
Disables Weighted ECMP
Dell(conf)#no ip ecmp weighted
Dell(conf)#do show running-config | grep ecmp
link-bundle-monitor enable
Provides a mechanism to enable monitoring of traffic distribution on an ECMP link bundle.
Syntax
link-bundle-monitor enable To exit from ECMP group mode, use the exit command.
Command Modes ECMP-GROUP PORT-CHANNEL INTERFACE
Equal Cost Multi-Path (ECMP) 547
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.10.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810.
link-bundle-distribution trigger-threshold
Provides a mechanism to set the threshold to trigger when traffic distribution begins being monitored on an ECMP link bundle.
Syntax Parameters
link-bundle-distribution trigger-threshold [percent] To exit from ecmp group mode, use the exit command.
percent
Indicate the threshold value when traffic distribution starts being monitored on an ECMP link bundle. The range is from 1 to 90%. The default is 60%.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.10.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810.
show config
Display the ECMP configuration.
Syntax
show config
Command Modes CONFIGURATION-ECMP-GROUP
548 Equal Cost Multi-Path (ECMP)
Command History
Related Commands
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
show running-config ecmp-group -- displays interfaces, LAG, or LAG link bundles being monitored for uneven traffic distribution.
show link-bundle distribution
Display the link-bundle distribution for the interfaces in the bundle, type of bundle (LAG or ECMP), and the most recently calculated interface utilization (either bytes per second rate or maximum rate) for each interface.
Syntax
show link-bundle-distribution
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Example
Dell#show link-bundle-distribution Link-bundle trigger threshold - 30
ECMP bundle - 64 Inactive
Utilization[In Percent] - 0
Alarm State -
Interface Te 1/1 Po 128 Po 100 Dell#
Line Protocol Up Up Up
Utilization[In Percent] 0 0 0
Equal Cost Multi-Path (ECMP) 549
17
FIPS Cryptography
To configure federal information processing standards (FIPS) cryptography, use the following commands:
Topics:
� fips mode enable � show fips status � show ip ssh � ssh
fips mode enable
Enable the FIPS cryptography mode on the platform.
Syntax
[no] fips mode enable To disable the FIPS cryptography mode, use the no fips mode enable command.
Default
Disabled
Command Modes CONFIGURATION
Example
Dell (conf)#fips mode enable WARNING: Enabling FIPS mode will close all SSH/Telnet connection, restart those servers, and destroy all configured host keys. proceed (y/n) ? y Dell (conf)#
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 9.1(0.0) 8.3.19.0 8.3.12.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810.
show fips status
Displays the status of the FIPS mode.
Syntax
show fips status
Defaults
None
Command Modes EXEC
550 FIPS Cryptography
Example
Command History
Dell#show fips status
FIPS Mode
: Disabled
Dell#
Dell#show fips status
FIPS Mode
: Enabled
Dell#
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 9.1(0.0) 8.3.19.0 8.3.12.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810.
show ip ssh
Display information about established SSH sessions
Syntax
show ip ssh
Defaults
none
Command Modes EXEC
EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 9.1(0.0) 8.3.19.0 8.3.12.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the Z9000. Introduced on the S4820T. Introduced on S4810.
Example
Dell#show ip ssh
SSH server
: enabled.
SSH server version
: v2.
SSH server vrf
: default.
SSH server ciphers
: 3des-cbc,aes128-cbc,aes192-cbc,aes256-
cbc,aes128-ctr,aes192-ctr,aes256-ctr.
SSH server macs
: hmac-sha1-96.
SSH server kex algorithms : diffie-hellman-group14-sha1.
Password Authentication : enabled.
Hostbased Authentication : disabled.
FIPS Cryptography 551
RSA Vty
Authentication : disabled.
Encryption
HMAC
Remote IP
With FIPS Mode enabled:
Dell#show ip ssh
SSH server
: enabled.
SSH server version
: v2.
SSH server vrf
: default.
SSH server ciphers
: 3des-cbc,aes128-cbc,aes192-cbc,aes256-
cbc,aes128-ctr,aes192-ctr,aes256-ctr.
SSH server macs
: hmac-sha1-96.
SSH server kex algorithms : diffie-hellman-group14-sha1.
Password Authentication : enabled.
Hostbased Authentication : disabled.
RSA
Authentication : disabled.
Vty
Encryption
HMAC
Remote IP
0 3des-cbc hmac-sha1-96 10.1.20.48
1 3des-cbc hmac-sha1-96 10.1.20.48
With FIPS Mode disabled:
Dell#show ip ssh
SSH server
: enabled.
SSH server version
: v1 and v2.
SSH server vrf
: default.
SSH server ciphers
: 3des-cbc,aes128-cbc,aes192-cbc,aes256-
cbc,aes128-ctr,aes192-ctr,aes256-ctr.
SSH server macs
: hmac-md5,hmac-md5-96,hmac-sha1,hmac-
sha1-96,hmac-sha2-256,hmac-sha2-256-96.
SSH server kex algorithms : diffie-hellman-group-exchange-sha1,diffie-
hellman-group1-sha1,diffie-hellman-group14-sha1.
Password Authentication : enabled.
Hostbased Authentication : disabled.
RSA
Authentication : disabled.
Vty
Encryption
HMAC
Remote IP
0 3des-cbc hmac-sha1-96 10.1.20.48
1 3des-cbc hmac-sha1-96 10.1.20.48
ssh
Open an SSH connection specifying the hostname, username, port number, and version of the SSH client.
Syntax Parameters
ssh {hostname|ipv4 address|ipv6 address} [-c encryption cipher|-l username|m HMAC alogorithm|-p port-number|-v {1|2}]
hostname
ipv4 address
ipv6 addressprefix
(OPTIONAL) Enter the IP address or the hostname of the remote device.
(OPTIONAL) Enter the IP address in dotted decimal format A.B.C.D.
(OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format then the prefix length in the /x format. The range is from /0 to /128
NOTE: The :: notation specifies successive hexadecimal fields of zeros.
-c encryption cipher
Enter the following encryption cipher to use. (For v2 clients only.) 3des-cbc: Force ssh to use 3des-cbc encryption cipher. FIPS mode is enabled or disabled: 3des-cbc: Force ssh to use 3des-cbc encryption cipher. aes128�cbc: Force ssh to use the aes128�cbc encryption cipher.
aes192�cbc: Force ssh to use the aes256�cbc encryption cipher.
552 FIPS Cryptography
-l username
-m HMAC algorithm
aes256�cbc: Force ssh to use the aes128�cbc encryption cipher.
aes128�ctr: Force ssh to use the aes256�cbc encryption cipher.
aes192�ctr: Force ssh to use the aes128�cbc encryption cipher.
aes256�cbc: Force ssh to use the aes256�cbc encryption cipher.
(OPTIONAL) Enter the keyword --l then the user name used in this SSH session. The default is the user name of the user associated with the terminal. Enter one of the following HMAC algorithms to use. (For v2 clients only.): Without the FIPS mode enabled: hmac-sha1: Force ssh to use the hmac-sha1 HMAC algorithm. hmac-shal-96: Force ssh to use the hmac-sha1�96 HMAC algorithm. hmac-md5: Force ssh to use the hmac-md5 HMAC algorithm. hmac-md5�96: Force ssh to use the hmac-md5�96 HMAC algorithm. With the FIPS mode enabled: hmac-md5: Force ssh to use the hmac-md5 HMAC algorithm.
hmac-md5�96: Force ssh to use the hmac-md5�96 HMAC algorithm.
hmac-sha1: Force ssh to use the hmac-sha1 HMAC algorithm.
hmac-shal-96: Force ssh to use the hmac-sha1�96 HMAC algorithm.
hmac-sha2-256: Force ssh to use the hmac-sha2-256 HMAC algorithm.
hmac-sha2-256-96: Force ssh to use the hmac-sha2-256-96 HMAC algorithm.
-p port-number -v {1|2}
(OPTIONAL) Enter the keyword --p then the port number. The range is 1 to 65535. (OPTIONAL) Enter the keyword --v then the SSH version 1 or 2. The default: The version from the protocol negotiation.
NOTE: If the FIPS mode is enabled, this option does not display in the output.
Defaults
As indicated above.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 9.1(0.0) 8.3.19.0 8.3.12.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810.
Related Commands
ip ssh server
Configure an SSH server.
FIPS Cryptography 553
Usage Information
Example
show ip ssh
Display the client-public keys.
client-pub-keys
Dell Networking OS supports both inbound and outbound SSH sessions using IPv4 or IPv6 addressing. Inbound SSH supports accessing the system through the management interface as well as through a physical Layer 3 interface.
NOTE: Some of the parameters in this command require licensing to access. For more information, contact your Dell Networking representative.
If FIPS mode is not enabled:
Dell#ssh 10.10.10.10 ?
-c Encryption cipher to use (for v2 clients only)
-l User name option
-m HMAC algorithm to use (for v2 clients only)
-p SSH server port option (default 22)
-v SSH protocol version
<cr>
Dell#ssh 10.10.10.10 -c ?
3des-cbc
Force ssh to use 3des-cbc encryption cipher
aes128-cbc
Force ssh to use aes128-cbc encryption cipher
aes192-cbc
Force ssh to use aes192-cbc encryption cipher
aes256-cbc
Force ssh to use aes256-cbc encryption cipher
aes128-ctr
Force ssh to use aes128-ctr encryption cipher
aes192-ctr
Force ssh to use aes192-ctr encryption cipher
aes256-ctr
Force ssh to use aes256-ctr encryption cipher
Dell#ssh 10.10.10.10 -m ?
hmac-md5
Force ssh to use hmac-md5 HMAC algorithm
hmac-md5-96
Force ssh to use hmac-md5-96 HMAC algorithm
hmac-sha1
Force ssh to use hmac-sha1 HMAC algorithm
hmac-sha1-96
Force ssh to use hmac-sha1-96 HMAC algorithm
hmac-sha2-256
Force ssh to use hmac-sha2-256 HMAC algorithm
hmac-sha2-256-96 Force ssh to use hmac-sha2-256-96 HMAC algorithm
With FIPS mode enabled:
Dell#ssh 10.10.10.10 ?
-c Encryption cipher to use (for v2 clients only)
-l User name option
-m HMAC algorithm to use (for v2 clients only)
-p SSH server port option (default 22)
<cr>
Dell#ssh 10.10.10.10 -c ?
3des-cbc
Force ssh to use 3des-cbc encryption cipher
aes128-cbc
Force ssh to use aes128-cbc encryption cipher
aes192-cbc
Force ssh to use aes192-cbc encryption cipher
aes256-cbc
Force ssh to use aes256-cbc encryption cipher
aes128-ctr
Force ssh to use aes128-ctr encryption cipher
aes192-ctr
Force ssh to use aes192-ctr encryption cipher
aes256-ctr
Force ssh to use aes256-ctr encryption cipher
Dell#ssh 10.10.10.10 -m ?
hmac-sha1
Force ssh to use hmac-sha1 HMAC algorithm
hmac-sha1-96
Force ssh to use hmac-sha1-96 HMAC algorithm
hmac-sha2-256
Force ssh to use hmac-sha2-256 HMAC algorithm
hmac-sha2-256-96 Force ssh to use hmac-sha2-256-96 HMAC algorithm
554 FIPS Cryptography
18
FIP Snooping
In a converged Ethernet network, a switch can operate as an intermediate Ethernet bridge to snoop on FIP packets during the login process on Fibre Channel over Ethernet (FCoE) forwarders (FCFs). Acting as a transit FIP snooping bridge, the switch uses dynamically created access control lists (ACLs) to permit only authorized FCoE traffic to transmit between an FCoE enddevice and an FCF.
To enable the FCoE Transit feature and configure FIP snooping, use the following Dell Networking Operating System commands.
Topics:
� clear fip-snooping database interface vlan � clear fip-snooping statistics � debug fip snooping � debug fip snooping rx � feature fip-snooping � fip-snooping enable � fip-snooping fc-map � fip-snooping max-sessions-per-enodemac � fip-snooping port-mode fcf � fip-snooping port-mode fcoe-trusted � show fip-snooping config � show fip-snooping enode � show fip-snooping fcf � show fip-snooping statistics � show fip-snooping system � show fip-snooping vlan � show fips status
clear fip-snooping database interface vlan
Clear FIP snooping information on a VLAN for a specified FCoE MAC address, ENode MAC address, or FCF MAC address, and remove the corresponding ACLs FIP snooping generates.
Syntax Parameters
clear fip-snooping database interface vlan {vlan-id} enode {enode-macaddress} | fcf {fcf-mac-address} | session {session-mac-address}
enode-macaddress
fcf-mac-address
session-macaddress
Enter the ENode MAC address to be cleared of FIP snooping information.
Enter the FCF MAC address to be cleared of FIP snooping information. Enter the MAC address for the session to be cleared of FIP snooping information.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0)
Introduced on the S3048-ON and S4048-ON.
FIP Snooping 555
Version
9.7(0.0) 8.3.19.0 8.3.12.0
Description
Introduced on the Z9500 and S6000-ON. Introduced on the S4820T. Introduced on the S4810.
clear fip-snooping statistics
Clears the statistics on the FIP packets snooped on all VLANs, a specified VLAN, or a specified port interface.
Syntax Parameters
clear fip-snooping statistics [interface vlan vlan-id | interface fortyGigEport-type port/slot[/subport] | interface port-channel portchannel-number]
vlan-id
port-type port/ slot
portchannelnumber
Enter the VLAN ID of the FIP packet statistics to be cleared.
Enter the port-type and slot number of the FIP packet statistics to be cleared. Enter the subport number if a 40G port is fanned-out into 10G ports.
Enter the port channel number of the FIP packet statistics to be cleared.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 8.3.19.0 8.3.12.0
Introduced on the S3048-ON and S4048-ON. Introduced on the Z9500 and S6000-ON. Introduced on the S4820T. Introduced on the S4810.
debug fip snooping
Enable debugging on FIP snooping.
Syntax Parameters
debug fip-snooping [all | acl | error | ifm | info | ipc | tx]
all acl error ifm info ipc tx
Enter the keyword all to enable debugging on all the options. Enter the keyword acl for ACL-specific debugging. Enter the keyword error for error-specific debugging. Enter the keyword ifm for IFM-specific debugging. Enter the keyword info for information-specific debugging. Enter the keyword ipc for IPC-specific debugging. Enter the keyword tx for packet transmit-specific debugging.
556 FIP Snooping
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 8.3.19.0 8.3.12.0
Introduced on the S3048-ON and S4048-ON. Introduced on the Z9500 and S6000-ON. Introduced on the S4820T. Introduced on the S4810.
debug fip snooping rx
Enable debugging for FIP snooping receive-specific packets.
Syntax Parameters
debug fip-snooping rx packet-type [all | discovery | virtual-linkinstantiation | virtual-link-maintenance| vlan-discovery] [interface]
packet-type interface
Enter the keyword packet-type and then the option type on which to enable debugging. The options are:
all -- Enter the keyword all to enable debugging on all the options. discovery -- Enter the keyword discovery to enable debugging on FCF
advertisements and ENode solicitation. virtual-link-instantiation -- Enter the keywords virtual-link-
instantiation to enable debugging on FLOGI, FDISC, and FLOGO packets. virtual-link-maintenance -- Enter the keywords virtual-link-
maintenance to enable debugging on FIP clear virtual link frames and keepalives. vlan-discovery -- Enter the keywords vlan-discovery to enable debugging on VLAN requests and notifications.
Enter the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 9.2(0.2)
Introduced on the S3048-ON and S4048-ON.
Introduced on the Z9500 and S6000-ON.
Introduced on the S4810 and S4820T. Added the receive parameters packettype and interfaces and their options.
FIP Snooping 557
feature fip-snooping
Enable FCoE transit and FIP snooping on a switch.
Syntax
feature fip-snooping To disable the FCoE transit feature, use the no feature fip-snooping command.
Defaults
Disabled
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 9.7(0.0) 8.3.19.0 8.3.12.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the S4810.
fip-snooping enable
Enable FIP snooping on all VLANs or on a specified VLAN.
Syntax
fip-snooping enable
To disable the FIP snooping feature on all or a specified VLAN, use the no fip-snooping enable command.
Defaults
FIP snooping is disabled on all VLANs.
Command Modes CONFIGURATION VLAN INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 8.3.19.0 8.3.12.0
Introduced on the S3048-ON and S4048-ON. Introduced on the Z9500 and S6000-ON. Introduced on the S4820T. Introduced on the S4810.
Usage Information
The maximum number of FCFs supported per FIP snooping-enabled VLAN is four. The maximum number of FIP snooping sessions supported per ENode server is 16.
558 FIP Snooping
fip-snooping fc-map
Configure the FC-MAP value FIP snooping uses on all VLANs.
Syntax Parameters
fip-snooping fc-map fc-map-value
To return the configured FM-MAP value to the default value, use the no fip-snooping fc-map command.
fc-map-value
Enter the FC-MAP value FIP snooping uses. The range is from 0EFC00 to 0EFCFF.
Defaults
0x0EFC00
Command Modes CONFIGURATION VLAN INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 8.3.19.0 8.3.12.0
Introduced on the S3048-ON and S4048-ON. Introduced on the Z9500 and S6000-ON. Introduced on the S4820T. Introduced on the S4810.
fip-snooping max-sessions-per-enodemac
Configure the maximum session limit per ENode MAC address.
Syntax Parameters
fip-snooping max--sessions--per--enode--mac max-sessions-value
To return the configured maximum sessions to the default value, use the no fip-snooping max-- sessions--per--enode--mac command.
max-sessionsvalue
Enter the maximum number of sessions allowed per ENode MAC address. The range is from 1 to 64.
Defaults
32
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 9.2(0.2)
Introduced on the S3048-ON and S4048-ON. Introduced on the Z9500 and S6000-ON. Introduced on the S4810 and S4820T.
FIP Snooping 559
fip-snooping port-mode fcf
Configure the port for bridge-to-FCF links.
Syntax
fip-snooping port-mode fcf To disable the bridge-to-FCF link on a port, use the no fip-snooping port-mode fcf command.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 8.3.19.0 8.3.12.0
Introduced on the S3048-ON and S4048-ON. Introduced on the Z9500 and S6000-ON. Introduced on the S4820T. Introduced on the S4810.
Usage Information
The maximum number of FCFs supported per FIP snooping-enabled VLAN is four.
fip-snooping port-mode fcoe-trusted
Configure the port for bridge-to-bridge links.
Syntax
fip-snooping port-mode fcoe-trusted
To remove the bridge-to-bridge link configuration from the port, use the no fip-snooping portmode fcoe-trusted command.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 8.3.19.0 8.3.12.0 8.3.16.0
Introduced on the S3048-ON and S4048-ON. This command is deprecated. Introduced on the S4820T. Introduced on the S4810. Introduced on MXL 10/40GbE Switch IO Module.
Usage Information
NOTE: This command is deprecated from the Dell Networking OS.
560 FIP Snooping
show fip-snooping config
Display the FIP snooping status and configured FC-MAP values.
Syntax
show fip-snooping config
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 8.3.19.0 8.3.12.0
Introduced on the S3048-ON and S4048-ON. Introduced on the Z9500 and S6000-ON. Introduced on the S4820T. Introduced on the S4810.
Example
Dell# show fip-snooping config FIP Snooping Feature enabled Status: Enabled FIP Snooping Global enabled Status: Enabled Global FC-MAP Value: 0X0EFC00
FIP Snooping enabled VLANs
VLAN Enabled FC-MAP
---- ------- --------
100
TRUE
0X0EFC00
show fip-snooping enode
Display information on the ENodes in FIP-snooped sessions, including the ENode interface and MAC address, FCF MAC address, VLAN ID and FC-ID.
Syntax Parameters
show fip-snooping enode [enode-mac-address]
enode-macaddress
Enter the MAC address of the ENodes to display.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 8.3.19.0
Introduced on the S3048-ON and S4048-ON. Introduced on the Z9500 and S6000-ON. Introduced on the S4820T.
FIP Snooping 561
Usage Information
Example
Version
8.3.12.0
Description
Introduced on the S4810.
The following describes the show fip-snooping enode command shown in the following example.
Field
Description
ENode MAC
MAC address of the ENode.
ENode Interface Slot/ port number of the interface connected to the ENode.
FCF MAC
MAC address of the FCF.
VLAN
VLAN ID number the session uses.
FC-ID
Fibre Channel session ID the FCF assigns.
Dell# show fip-snooping enode
Enode MAC
Enode Interface FCF MAC
VLAN FC-ID
--------- --------------- ------- ---- -----
d4:ae:52:1b:e3:cd Te 1/11
54:7f:ee:37:34:40 100 62:00:11
show fip-snooping fcf
Display information on the FCFs in FIP-snooped sessions, including the FCF interface and MAC address, FCF interface, VLAN ID, FC-MAP value, FKA advertisement period, and number of ENodes connected.
Syntax Parameters
show fip-snooping fcf [fcf-mac-address] fcf-mac-address Enter the MAC address of the FCF to display.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 8.3.19.0 8.3.12.0
Introduced on the S3048-ON and S4048-ON. Introduced on the Z9500 and S6000-ON. Introduced on the S4820T. Introduced on the S4810.
Usage Information
The following describes the show fip-snooping fcf command shown in the following example.
Field
Description
FCF MAC
MAC address of the FCF.
FCF Interface VLAN
Slot/port number of the interface to which the FCF is connected. VLAN ID number the session uses.
FC-MAP
FC-Map value the FCF advertises.
ENode Interface Slot/ number of the interface connected to the ENode.
562 FIP Snooping
Example
Field
Description
FKA_ADV_PERIO Time (in milliseconds) during which FIP keep-alive advertisements transmit. D
No of ENodes
Number of ENodes connected to the FCF.
FC-ID
Fibre Channel session ID the FCF assigns.
Dell# show fip-snooping fcf
FCF MAC
FCF Interface VLAN FC-MAP FKA_ADV_PERIOD No. of Enodes
------- ------------- ---- ------ -------------- -------------
54:7f:ee:37:34:40 Po 22
100 0e:fc:00 4000
2
show fip-snooping statistics
Display statistics on the FIP packets snooped on all interfaces, including VLANs, physical ports, and port channels.
Syntax Parameters
show fip-snooping statistics [interface vlan vlan-id | interface port-type port/slot[/subport] | interface port-channel port-channel-number]
vlan-id
port-type port/ slot
port-channelnumber
Enter the VLAN ID of the FIP packet statistics displays. Enter the port-type and slot number of the FIP packet statistics displays.
Enter the port channel number of the FIP packet statistics displays.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 8.3.19.0 8.3.12.0
Introduced on the S3048-ON and S4048-ON. Introduced on the Z9500 and S6000-ON. Introduced on the S4820T. Introduced on the S4810.
Usage Information
The following describes the show fip-snooping statistics command shown in the following example.
Field
Description
Number of VLAN Number of FIP-snoop VLAN request frames received on the interface. Requests
Number of VLAN Number of FIP-snoop VLAN notification frames received on the interface. Notifications
Number of Multicast Discovery Solicits
Number of FIP-snoop multicast discovery solicit frames received on the interface.
FIP Snooping 563
Example
Field
Description
Number of Unicast Discovery Solicits
Number of FIP-snoop unicast discovery solicit frames received on the interface.
Number of FLOGI Number of FIP-snoop FLOGI request frames received on the interface.
Number of FDISC Number of FIP-snoop FDISC request frames received on the interface.
Number of FLOGO
Number of FIP-snoop FLOGO frames received on the interface
Number of ENode Number of FIP-snoop ENode keep-alive frames received on the interface. Keep Alives
Number of VN
Number of FIP-snoop VN port (Virtual N-port) keep-alive frames received on the
Port Keep Alives interface
Number of Multicast Discovery Advertisements
Number of FIP-snoop multicast discovery advertisements received on the interface.
Number of Unicast Discovery Advertisements
Number of FIP-snoop unicast discovery advertisements received on the interface.
Number of FLOGI Number of FIP FLOGI accept frames received on the interface. Accepts
Number of FLOGI Number of FIP FLOGI reject frames received on the interface. Rejects
Number of FDISC Number of FIP FDISC accept frames received on the interface. Accepts
Number of FDISC Number of FIP FDISC reject frames received on the interface. Rejects
Number of
Number of FIP FLOGO accept frames received on the interface.
FLOGO Accepts
Number of FLOGO Rejects
Number of FIP FLOGO reject frames received on the interface.
Number of CVLs Number of FIP clear virtual link frames received on the interface.
Number of FCF Discovery Timeouts
Number of FCF discovery timeouts that occurred on the interface.
Number of VN Port Session Timeouts
Number of VN port session timeouts that occurred on the interface.
Number of Session failures due to Hardware Config
Number of session failures due to hardware configuration that occurred on the interface.
Dell# show fip-snooping statistics interface vlan 100
Number of Vlan Requests
:0
Number of Vlan Notifications
:0
Number of Multicast Discovery Solicits :2
Number of Unicast Discovery Solicits :0
Number of FLOGI
:2
Number of FDISC
:16
Number of FLOGO
:0
564 FIP Snooping
Example (Port Channel)
Number of Enode Keep Alive
:9021
Number of VN Port Keep Alive
:3349
Number of Multicast Discovery Advertisement :4437
Number of Unicast Discovery Advertisement :2
Number of FLOGI Accepts
:2
Number of FLOGI Rejects
:0
Number of FDISC Accepts
:16
Number of FDISC Rejects
:0
Number of FLOGO Accepts
:0
Number of FLOGO Rejects
:0
Number of CVL
:0
Number of FCF Discovery Timeouts
:0
Number of VN Port Session Timeouts
:0
Number of Session failures due to Hardware Config :0
Dell(conf)#
Dell# show fip-snooping statistics int tengigabitethernet 1/11
Number of Vlan Requests
:1
Number of Vlan Notifications
:0
Number of Multicast Discovery Solicits :1
Number of Unicast Discovery Solicits :0
Number of FLOGI
:1
Number of FDISC
:16
Number of FLOGO
:0
Number of Enode Keep Alive
:4416
Number of VN Port Keep Alive
:3136
Number of Multicast Discovery Advertisement :0
Number of Unicast Discovery Advertisement :0
Number of FLOGI Accepts
:0
Number of FLOGI Rejects
:0
Number of FDISC Accepts
:0
Number of FDISC Rejects
:0
Number of FLOGO Accepts
:0
Number of FLOGO Rejects
:0
Number of CVL
:0
Number of FCF Discovery Timeouts
:0
Number of VN Port Session Timeouts
:0
Number of Session failures due to Hardware Config :0
Dell# show fip-snooping statistics interface port-channel 22
Number of Vlan Requests
:0
Number of Vlan Notifications
:2
Number of Multicast Discovery Solicits :0
Number of Unicast Discovery Solicits :0
Number of FLOGI
:0
Number of FDISC
:0
Number of FLOGO
:0
Number of Enode Keep Alive
:0
Number of VN Port Keep Alive
:0
Number of Multicast Discovery Advertisement :4451
Number of Unicast Discovery Advertisement :2
Number of FLOGI Accepts
:2
Number of FLOGI Rejects
:0
Number of FDISC Accepts
:16
Number of FDISC Rejects
:0
Number of FLOGO Accepts
:0
Number of FLOGO Rejects
:0
Number of CVL
:0
Number of FCF Discovery Timeouts
:0
Number of VN Port Session Timeouts
:0
Number of Session failures due to Hardware Config :0
FIP Snooping 565
show fip-snooping system
Display information on the status of FIP snooping on the switch (enabled or disabled), including the number of FCoE VLANs, FCFs, ENodes, and currently active sessions.
Syntax
show fip-snooping system
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 8.3.19.0 8.3.12.0
Introduced on the S3048-ON and S4048-ON. Introduced on the Z9500 and S6000-ON. Introduced on the S4820T. Introduced on the S4810.
Example
Dell# show fip-snooping system
Global Mode : Enabled
FCOE VLAN List (Operational) : 1, 100
FCFs
: 1
Enodes
: 2
Sessions
: 17
show fip-snooping vlan
Display information on the FCoE VLANs on which FIP snooping is enabled.
Syntax
show fip-snooping vlan
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 8.3.19.0 8.3.12.0
Introduced on the S3048-ON and S4048-ON. Introduced on the Z9500 and S6000-ON. Introduced on the S4820T. Introduced on the S4810.
Example
Dell# show fip-snooping vlan
* = Default VLAN
VLAN FC-MAP
FCFs Enodes Sessions
---- ------ ---- ------ --------
566 FIP Snooping
*1
-
-
-
-
100 0X0EFC00 1
2
17
show fips status
Display the FIPs status on the platform.
Syntax
show fips status
Defaults
none
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 9.5(0.1) 8.3.19.0 8.3.12.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the S4810.
FIP Snooping 567
19
Force10 Resilient Ring Protocol (FRRP)
FRRP is a proprietary protocol for that offers fast convergence in a Layer 2 network without having to run the spanning tree protocol (STP). The resilient ring protocol is an efficient protocol that transmits a high-speed token across a ring to verify the link status. All the intelligence is contained in the master node with practically no intelligence required of the transit mode.
Important Points to Remember
FRRP is media- and speed-independent. FRRP is a Dell Networking proprietary protocol that does not interoperate with any other vendor. Spanning Tree must be disabled on both primary and secondary interfaces before Resilient Ring protocol is enabled. A VLAN configured as the control VLAN for a ring cannot be configured as a control or member VLAN for any other ring. Member VLANs across multiple rings are not supported in Master nodes. If multiple rings share one or more member VLANs, they cannot share any links between them. Each ring can have only one Master node; all others are Transit nodes.
Topics:
� clear frrp � debug frrp � description � disable � interface � member-vlan � mode � protocol frrp � show frrp � timer
clear frrp
Clear the FRRP statistics counters.
Syntax Parameters
clear frrp [ring-id]
ring-id
(Optional) Enter the ring identification number. The range is from 1 to 255.
Defaults
none
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON.
568 Force10 Resilient Ring Protocol (FRRP)
Usage Information
Example
Related Commands
Version
9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 7.5.1.0
Description
Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series. Introduced.
Executing this command without the optional ring-id command clears the statistics counters on all the available rings. Dell Networking OS requires a command line confirmation before the command executes. This command clears the following counters:
hello Rx and Tx counters Topology change Rx and Tx counters The number of state change counters
Dell#clear frrp Clear frrp statistics counter on all ring [confirm] yes Dell#clear frrp 4 Clear frrp statistics counter for ring 4 [confirm] yes Dell#
show frrp -- displays the Resilient Ring Protocol configuration.
debug frrp
Clear the FRRP statistics counters.
Syntax Parameters
debug frrp {event | packet | detail} [ring-id] [count number]
To disable debugging, use the no debug frrp {event | packet | detail} {ring-id} [countnumber] command.
event packet detail ring-id count number
Enter the keyword event to display debug information related to ring protocol transitions.
Enter the keyword packet to display brief debug information related to control packets.
Enter the keyword detail to display detailed debug information related to the entire ring protocol packets.
(Optional) Enter the ring identification number. The range is from 1 to 255.
Enter the keyword count then the number of debug outputs. The range is from 1 to 65534.
Defaults
Disabled.
Command Modes CONFIGURATION (conf-frrp)
Force10 Resilient Ring Protocol (FRRP) 569
Command History
Usage Information
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series. Introduced.
Because the resilient ring protocol can potentially transmit 20 packets per interface, restrict debug information.
description
Enter an identifying description of the ring.
Syntax Parameters
description Word To remove the ring description, use the no description [Word] command.
Word
Enter a description of the ring. Maximum: 255 characters.
Defaults
none
Command Modes CONFIGURATION (conf-frrp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series. Introduced.
570 Force10 Resilient Ring Protocol (FRRP)
disable
Disable the resilient ring protocol.
Syntax
disable To enable the Resilient Ring Protocol, use the no disable command.
Defaults
Disabled
Command Modes CONFIGURATION (conf-frrp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series. Introduced.
interface
Configure the primary, secondary, and control-vlan interfaces.
Syntax Parameters
interface {primary interface secondary interface control-vlan vlan-id}
To return to the default, use the no interface {primary interface secondary interface control-vlan vlan-id} command.
primary interface Enter the keyword primary to configure the primary interface then one of the following interfaces and slot/port[/subport] information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
secondary interface
Enter the keyword secondary to configure the secondary interface then one of the following interfaces and slot/port[/subport] information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
Force10 Resilient Ring Protocol (FRRP) 571
control-vlan vlan-id
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number.
Enter the keyword control-vlan then the VLAN ID. The range is from 1 to 4094.
Defaults
none
Command Modes CONFIGURATION (conf-frrp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series. Introduced.
Usage Information
Related Commands
This command causes the Ring Manager to take ownership of the two ports after IFM validates the configuration. Ownership is relinquished for a port only when the interface does not play a part in any control VLAN, that is, the interface does not belong to any ring.
show frrp -- displays the Resilient Ring Protocol configuration information.
member-vlan
Specify the member VLAN identification numbers.
Syntax Parameters
member-vlan {vlan-range} To return to the default, use the no member-vlan [vlan-range] command.
vlan-range
Enter the member VLANs using VLAN IDs (separated by commas), a range of VLAN IDs (separated by a hyphen), a single VLAN ID, or a combination. For example: VLAN IDs (comma-separated): 3, 4, 6. Range (hyphen-separated): 5-10. Combination: 3, 4, 5-10, 8.
Defaults
none
Command Modes CONFIGURATION (conf-frrp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
572 Force10 Resilient Ring Protocol (FRRP)
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.11.1 8.3.7.0 8.2.1.0 7.4.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series. Introduced.
mode
Set the Master or Transit mode of the ring.
Syntax Parameters
mode {master | transit} To reset the mode, use the no mode {master | transit} command.
master transit
Enter the keyword master to set the Ring node to Master mode. Enter the keywordtransit to set the Ring node to Transit mode.
Defaults
Mode None
Command Modes CONFIGURATION (conf-frrp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series. Introduced.
Force10 Resilient Ring Protocol (FRRP) 573
protocol frrp
Enter the Resilient Ring Protocol and designate a ring identification.
Syntax Parameters
protocol frrp {ring-id} To exit the ring protocol, use the no protocol frrp {ring-id} command.
ring-id
Enter the ring identification number. The range is from 1 to 255.
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series. Introduced
Usage Information
This command places you into the resilient ring protocol. After executing this command, the command line prompt changes to conf-frrp.
show frrp
Display the resilient ring protocol configuration.
Syntax Parameters
show frrp [ring-id [summary]] | [summary]
ring-id summary
Enter the ring identification number. The range is from 1 to 255
(OPTIONAL) Enter the keyword summary to view just a summarized version of the Ring configuration.
Defaults
none
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
574 Force10 Resilient Ring Protocol (FRRP)
Usage Information
Usage Information
Example (Summary)
Example (1)
Example (2 Summary)
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 7.4.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series. Introduced.
Executing this command without the optional ring-id command clears the statistics counters on all the available rings. Dell Networking OS requires a command line confirmation before the command executes. This command clears the following counters:
hello Rx and Tx counters Topology change Rx and Tx counters The number of state change counters
Executing this command without the optional ring-id command clears the statistics counters on all the available rings. Dell Networking OS requires a command line confirmation before the command is executed. This command clears the following counters:
hello Rx and Tx counters Topology change Rx and Tx counters The number of state change counters
Dell#show frrp summary
Ring-ID State Mode Ctrl_Vlan Member_Vlans
----------------------------------------------
2
UP Master 2
11-20, 25,27-30
31
UP Transit 31
40-41
50
Down Transit 50
32
Dell#
Dell#show frrp 1 Ring protocol 1 is in Master mode Ring Protocol Interface: Primary : TenGigabitEthernet 1/16 State: Forwarding Secondary: Port-channel 100 State: Blocking Control Vlan: 1 Ring protocol Timers: Hello-Interval 50 msec Dead-Interval 150 msec Ring Master's MAC Address is 00:01:e8:13:a3:19 Topology Change Statistics: Tx:110 Rx:45 Hello Statistics: Tx:13028 Rx:12348 Number of state Changes: 34 Member Vlans: 1000-1009 Dell#
Dell#show frrp 2 summary
Dell#show frrp 2 summary
Ring-ID State Mode Ctrl_Vlan Member_Vlans
-----------------------------------------------
2
Up
Master 2
11-20, 25, 27-30
Dell#
Force10 Resilient Ring Protocol (FRRP) 575
Related Commands
protocol frrp -- enters the resilient ring protocol and designate a ring identification.
timer
Set the hello interval or dead interval for the Ring control packets.
Syntax Parameters
timer {hello-interval milliseconds}| {dead-interval milliseconds}
To remove the timer, use the no timer {hello-interval [milliseconds]}| {deadinterval milliseconds} command.
hello-interval milliseconds
dead-interval milliseconds
Enter the keyword hello-interval then the time, in milliseconds, to set the hello interval of the control packets. The milliseconds must be entered in increments of 50 millisecond; for example, 50, 100, 150, and so on. If an invalid value is entered, an error message is generated. The range is from 50 to 2000 ms. Default: 500 ms.
Enter the keyword dead-interval then the time, in milliseconds, to set the dead interval of the control packets. The range is from 50 to 6000 ms. Default: 1500 ms.
NOTE: The configured dead interval must be at least three times the hello
interval.
Defaults
500 ms for hello-interval milliseconds 1500 ms for dead-intervalmilliseconds
Command Modes CONFIGURATION (conf-frrp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series. Introduced.
Usage Information
The hello interval command is the interval at which ring frames are generated from the primary interface of the master node. The dead interval command is the time that elapses before a time-out occurs.
576 Force10 Resilient Ring Protocol (FRRP)
20
GARP VLAN Registration (GVRP)
The Dell Networking operating system supports the basic GVRP commands on the Dell Networking OS.
The generic attribute registration protocol (GARP) mechanism allows the configuration of a GARP participant to propagate through a network quickly. A GARP participant registers or de-registers its attributes with other participants by making or withdrawing declarations of attributes. At the same time, based on received declarations or withdrawals, GARP handles attributes of other participants.
GVRP enables a device to propagate local VLAN registration information to other participant devices and dynamically update the VLAN registration information from other devices. The registration information updates local databases regarding active VLAN members and through which port the VLANs can be reached.
GVRP ensures that all participants on a bridged LAN maintain the same VLAN registration information. The VLAN registration information propagated by GVRP includes both manually configured local static entries and dynamic entries from other devices.
GVRP participants have the following components:
The GVRP application GARP information propagation (GIP) GARP information declaration (GID)
Important Points to Remember
GVRP is supported on Layer 2 ports only. All VLAN ports added by GVRP are tagged. GVRP is supported on untagged ports belonging to a default VLAN and tagged ports. GVRP cannot be enabled on untagged ports belonging to a non-default VLAN unless native VLAN is turned on. GVRP requires end stations with dynamic access NICs. Based on updates from GVRP-enabled devices, GVRP allows the system to dynamically create a port-based VLAN
(unspecified) with a specific VLAN ID and a specific port. On a port-by-port basis, GVRP allows the system to learn about GVRP updates to an existing port-based VLAN with that
VLAN ID and IEEE 802.1Q tagging. GVRP allows the system to send dynamic GVRP updates about your existing port-based VLAN. GVRP updates are not sent to any blocked spanning tree protocol (STP) ports. GVRP operates only on ports that are in the
forwarding state. GVRP operates only on ports that are in the STP forwarding state. If you enable GVRP, a port that changes to the STP
Forwarding state automatically begin to participate in GVRP. A port that changes to an STP state other than forwarding no longer participates in GVRP. VLANs created dynamically with GVRP exist only as long as a GVRP-enabled device is sending updates. If the devices no longer send updates, or GVRP is disabled, or the system is rebooted, all dynamic VLANs are removed. GVRP manages the active topology, not non-topological data such as VLAN protocols. If a local bridge must classify and analyze packets by VLAN protocols, manually configure protocol-based VLANs, and simply rely on GVRP for VLAN updates. But if the local bridge must know only how to reach a given VLAN, then GVRP provides all necessary information. The VLAN topologies that GVRP learns are treated differently from VLANs that are statically configured. The GVRP dynamic updates are not saved in NVRAM, while static updates are saved in NVRAM. When GVRP is disabled, the system deletes all VLAN interfaces that were learned through GVRP and leaves unchanged all VLANs that were manually configured.
Topics:
� clear gvrp statistics � debug gvrp � disable � garp timers � gvrp enable � gvrp registration
GARP VLAN Registration (GVRP) 577
� protocol gvrp � show config � show garp timers � show gvrp � show gvrp statistics
clear gvrp statistics
Clear GVRP statistics on an interface.
Syntax Parameters
clear gvrp statistics interface interface
interface interface
Enter the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
Defaults
none
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on C-Series, E-Series, and S-Series
Related Commands
show gvrp statistics -- displays the GVRP statistics.
debug gvrp
Enable debugging on GVRP.
Syntax
debug gvrp {config | events | pdu} To disable debugging, use the no debug gvrp {config | events | pdu} command.
578 GARP VLAN Registration (GVRP)
Parameters
config event pdu
Enter the keyword config to enable debugging on the GVRP configuration.
Enter the keyword event to enable debugging on the JOIN/LEAVE events.
Enter the keyword pdu then one of the following Interface keywords and slot/ port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
Defaults
Disabled.
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on C-Series, E-Series, and S-Series
disable
Globally disable GVRP.
Syntax
disable To re-enable GVRP, use the no disable command.
Defaults
Enabled.
Command Modes CONFIGURATION-GVRP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON.
GARP VLAN Registration (GVRP) 579
Related Commands
Version
9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0
Description
Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on C-Series, E-Series, and S-Series
gvrp enable -- enables GVRP on physical interfaces and LAGs. protocol gvrp -- access GVRP protocol.
garp timers
Set the intervals (in milliseconds) for sending GARP messages.
Syntax Parameters
garp timers {join | leave | leave-all}
To return to the previous setting, use the no garp timers {join | leave | leave-all} command.
join
Enter the keyword join then the number of milliseconds to configure the join
time. The range is from 100 to 147483647 milliseconds. The default is 200
milliseconds.
NOTE: Designate the milliseconds in multiples of 100.
leave
Enter the keyword leave then the number of milliseconds to configure the leave time. The range is from 100 to 2147483647 milliseconds. The default is 600 milliseconds.
NOTE: Designate the milliseconds in multiples of 100.
leave-all
Enter the keywords leave-all then the number of milliseconds to configure the leave-all time. The range is from 100 to 2147483647 milliseconds. The default is 1000 milliseconds.
NOTE: Designate the milliseconds in multiples of 100.
Defaults
As above.
Command Modes CONFIGURATION-GVRP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T.
580 GARP VLAN Registration (GVRP)
Usage Information
Related Commands
Version
8.3.11.1 8.3.7.0 7.6.1.0
Description
Introduced on the Z9000. Introduced on the S4810. Introduced on C-Series, E-Series, and S-Series
Join Timer -- Join messages announce the willingness to register some attributes with other participants. For reliability, each GARP application entity sends a Join message twice and uses a join timer to set the sending interval.
Leave Timer -- Leave announces the willingness to de-register with other participants. Together with Join, Leave messages help GARP participants complete attribute reregistration and deregistration. The leave timer starts after receipt of a leave message sent for de-registering some attribute information. If a Join message is not received before the Leave time expires, the GARP application entity removes the attribute information as requested.
Leave All Timer -- The Leave All timer starts when a GARP application entity starts. When this timer expires, the entity sends a Leave-all message so that other entities can reregister their attribute information. Then the Leave-all time begins again.
show garp timers -- displays the current GARP times.
gvrp enable
Enable GVRP on physical interfaces and LAGs.
Syntax
gvrp enable To disable GVRP on the interface, use the no gvrp enable command.
Defaults
Disabled.
Command Modes CONFIGURATION-INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on C-Series, E-Series, and S-Series
Related Commands
disable -- globally disables GVRP.
GARP VLAN Registration (GVRP) 581
gvrp registration
Configure the GVRP register type.
Syntax Parameters
gvrp registration {fixed | normal | forbidden} To return to the default, use the gvrp register normal command.
fixed normal forbidden
Enter the keyword fixed then the VLAN range in a comma-separated VLAN ID set.
Enter the keyword normal then the VLAN range in a comma-separated VLAN ID set. This setting is the default.
Enter the keyword forbidden then the VLAN range in a comma-separated VLAN ID set.
Defaults
normal
Command Modes CONFIGURATION-INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on C-Series, E-Series, and S-Series
Usage Information
Related Commands
Fixed registration prevents an interface, configured using the command line, to belong to a VLAN (static configuration) from being unconfigured when it receives a Leave message. Therefore, Registration mode on that interface is fixed.
Normal registration is the default registration. The port's membership in the VLAN depends on GVRP. The interface becomes a member of a VLAN after learning about the VLAN through GVRP. If the VLAN is removed from the port that sends GVRP advertisements to this device, the port stops being a member of the VLAN.
To advertise or learn about VLANs through GVRP, use the forbidden command when you do not want the interface.
show gvrp -- displays the GVRP configuration including the registration.
582 GARP VLAN Registration (GVRP)
protocol gvrp
Access GVRP protocol -- (config-gvrp)#.
Syntax
protocol gvrp
Defaults
Disabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on C-Series, E-Series, and S-Series
Related Commands
disable -- globally disables GVRP.
show config
Display the global GVRP configuration.
Syntax
show config
Command Modes CONFIGURATION-GVRP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000.
GARP VLAN Registration (GVRP) 583
Related Commands
Version
8.3.7.0 7.6.1.0
Description
Introduced on the S4810. Introduced on C-Series, E-Series, and S-Series
gvrp enable -- enables GVRP on physical interfaces and LAGs. protocol gvrp -- accesses the GVRP protocol.
show garp timers
Display the GARP timer settings for sending GARP messages.
Syntax
show garp timers
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on C-Series, E-Series, and S-Series
Example
Dell#show garp timers
GARP Timers
Value (milliseconds)
----------------------------------------
Join Timer
200
Leave Timer
600
LeaveAll Timer
10000
Dell#
Related Commands
garp timers -- sets the intervals (in milliseconds) for sending GARP messages.
584 GARP VLAN Registration (GVRP)
show gvrp
Display the GVRP configuration.
Syntax Parameters
show gvrp [brief | interface]
brief interface
(OPTIONAL) Enter the keyword brief to display a brief summary of the GVRP configuration.
(OPTIONAL) Enter the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on C-Series, E-Series, and S-Series
Usage Information
Example
If no ports are GVRP participants, the message output changes from GVRP Participants running on <port_list> to GVRP Participants running on no ports.
R3#show gvrp brief
GVRP Feature is currently enabled.
Port
GVRP Status
Edge-Port
----------------------------------------------
Te 3/1
Disabled
No
Te 3/2
Enabled
No
Te 3/3
Disabled
No
Te 3/4
Disabled
No
Te 3/5
Disabled
No
Te 3/6
Disabled
No
Te 3/7
Disabled
No
Te 3/8
Disabled
No
R3#show gvrp brief
GARP VLAN Registration (GVRP) 585
Related Commands
show gvrp statistics -- displays the GVRP statistics.
show gvrp statistics
Display the GVRP configuration statistics.
Syntax Parameters
show gvrp statistics {interface interface | summary}
interface interface
summary
(OPTIONAL) Enter the keyword interface then one of the interface keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
Enter the keyword summary to display just a summary of the GVRP statistics.
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.11.1 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on C-Series, E-Series, and S-Series
Usage Information
Invalid messages/attributes skipped can occur in the following cases:
The incoming GVRP PDU has an incorrect length. "End of PDU" was reached before the complete attribute could be parsed. The Attribute Type of the attribute that was being parsed was not the GVRP VID Attribute Type
(0x01). The attribute that was being parsed had an invalid attribute length. The attribute that was being parsed had an invalid GARP event. The attribute that was being parsed had an invalid VLAN ID. The valid range is from 1 to 4095.
A failed registration can occur for the following reasons:
Join requests were received on a port that was blocked from learning dynamic VLANs (GVRP Blocking state).
An entry for a new GVRP VLAN could not be created in the GVRP database.
586 GARP VLAN Registration (GVRP)
Example
Related Commands
Dell#show gvrp statistics int tengigabitethernet 1/1 Join Empty Received: 0 Join In Received: 0 Empty Received: 0 LeaveIn Received: 0 Leave Empty Received: 0 Leave All Received: 40 Join Empty Transmitted: 156 Join In Transmitted: 0 Empty Transmitted: 0 Leave In Transmitted: 0 Leave Empty Transmitted: 0 Leave All Transmitted: 41 Invalid Messages/Attributes skipped: 0 Failed Registrations: 0 Dell# show gvrp -- displays the GVRP configuration.
GARP VLAN Registration (GVRP) 587
21
High Availability (HA)
High availability (HA) in the Dell Networking operating software is configuration synchronization to minimize recovery time in the event of a route processor module (RPM) failure. The feature is available on Dell Networking OS. In general, a protocol is defined as "hitless" in the context of an RPM failure/failover and not failures of a line card, SFM, or power module. A protocol is defined as hitless if an RPM failover has no impact on the protocol. You must specifically enable some protocols for HA. Some protocols are only hitless if related protocols are also enabled as hitless (for example, the redundancy protocol command).
Topics:
� patch flash://RUNTIME_PATCH_DIR � process restartable � redundancy auto-failover-limit � redundancy disable-auto-reboot � redundancy force-failover � redundancy primary � redundancy protocol � redundancy reset-counter � redundancy sfm standby � redundancy synchronize � show patch � show processes restartable � show redundancy
patch flash://RUNTIME_PATCH_DIR
Insert an In-Service Modular Hot-Fix patch.
Syntax
patch flash://RUNTIME_PATCH_DIR/patch-filename
To remove the patch, use the no patch flash://RUNTIME_PATCH_DIR/patch-filename command.
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.3.12.0 8.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the S4810. Introduced.
588 High Availability (HA)
Usage Information
Related Commands
The patch filename includes the Dell Networking OS version, the platform, the CPU, and the process it affects (FTOS-platform-cpu-process-patchversion.rtp). For example, a patch labeled "7.8.1.0-EH-rp2-l2mgr-1.rtp" identifies that this patch applies to Dell Networking OS version 7.8.1.0 -- ESeries platform, for RP2, addressing the layer 2 management process, and this patch is the first version of this patch.
There is no need to reload or reboot the system when you insert the patch. The In-Service Modular patch replaces the existing process code. After installation is complete, the system executes the patch code as though it was always there.
show patch -- displays the system patches loaded with the in-service modular hot fix command.
process restartable
Enable a process to be restarted. Restartability is subject to a maximum restart limit. This limit is defined as a configured number of restarts within a configured amount of time. On the software exception that exceeds the limit, the system reloads (for systems with a single RPM) or fails over (for systems with dual RPMs).
Syntax Parameters
process restartable [process] [count number] [period minutes]
process count number
period minutes
Configure a process to be restartable.
Enter the number of times a process can restart within the configured period. The range is from 1 to 3. The default is 3.
Enter the amount of time within which the process can restart count times. The range is from 1 to 60 minutes. The default is 60 minutes.
Default
By default, a process can be restarted a maximum of three times within one hour. On the exception that exceeds this limit, the system reloads or fails over.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.3.12.0 8.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the S4810. Introduced on the E-Series.
Related Commands
show processes restartable
redundancy auto-failover-limit
Specify an auto-failover limit for RPMs. When a non-recoverable fatal error is detected, an automatic RPM failover occurs. This command does not affect user-initiated (manual) failovers.
Syntax
redundancy auto-failover-limit [count number [period minutes] | period minutes]]
High Availability (HA) 589
Parameters
To disable the auto-failover limit control, use the no redundancy auto-failover-limit command.
count number period minutes
Enter the number of times the RPMs can automatically failover within the period defined in the period parameter. The range is from 2 to 10. The default is 3.
Enter a duration in which to allow a number of automatic failovers (limited to the number defined in the count parameter). The range is from 5 to 9000 minutes. The default is 60 minutes.
Default
Count: 3 Period: 60 minutes
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.3.12.0 8.1.1.0 7.5.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the C-Series. Introduced on the E-Series
Usage Information
If you disable auto failover, enter the redundancy auto-failover-limit (without any parameters) to set auto failover to the default parameters (Count 3, Period 60 minutes). To view the redundancy status, use the show redundancy command.
When you change one or both of the optional parameters, Dell Networking OS checks that the interval between auto failovers is more than five (5) minutes. If the interval is less, Dell Networking OS returns a configuration error message.
redundancy disable-auto-reboot
Prevent the system from auto-rebooting the failed module.
Syntax Parameters
redundancy disable-auto-reboot stack-unit [0�11 | members} [rpm| card number | all]
To return to the default, use the no redundancy disable-auto-reboot stack-unit rpm command.
rpm stack-unit
Enter the keyword rpm to disable auto-reboot of the failed RPM. Enter the keyword stack-unit then the stack-unit ID number.
Default
Disabled (that is, the failed module is automatically rebooted).
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
590 High Availability (HA)
Usage Information
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(0.0)
8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0 8.1.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added the all option. Introduced on the E-Series ExaScale. Introduced on the E-Series
Enabling this command keeps the failed RPM in the failed state. If there are two RPMs in the system, enabling this command prevents the failed RPM from becoming a working Standby RPM. If there is only one RPM in the system, the failed RPM does not recover and affects the system.
redundancy force-failover
Force the secondary stack unit to become the primary stack unit. You can also use this command to upgrade the software on one stack unit from the other when the other has been loaded with the upgraded software.
Syntax Parameters
redundancy force-failover stack-unit
stack-unit
Enter the keyword stack-unit then the stack-unit ID number.
Default
Not configured.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(0.0)
8.3.19.0 8.3.12.0 8.1.1.0 7.5.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S4820T. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
To provide a hitless or warm upgrade, use this command. A hitless upgrade means that a software upgrade does not require a reboot of the line cards. A warm upgrade means that a software upgrade requires a reset of the line cards. A warm upgrade is possible for major releases and lower, while a hitless upgrade can only support patch releases.
High Availability (HA) 591
redundancy primary
Set an RPM as the primary RPM.
Syntax Parameters
redundancy primary [rpm0 | rpm1] To delete a configuration, use the no redundancy primary command.
rpm0 rpm1
Enter the keyword rpm0 to set the RPM in slot R0 as the primary RPM. Enter the keyword rpm1 to set the RPM in slot R1 as the primary RPM.
Default
The RPM in slot R0 is the Primary RPM.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.3.12.0 8.1.1.0 7.5.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the C-Series. Introduced on the E-Series.
redundancy protocol
Enable hitless protocols.
Syntax Parameters
redundancy protocol {lacp | xstp} To disable a hitless protocol, use the no redundancy protocol {lacp | xstp} command.
lacp xstp
Enter the keyword lacp to make LACP hitless.
Enter the keyword xstp to invoke hitless STP (all STP modes -- MSTP, PVST+, RSTP, and STP).
Default
Disabled
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2)
Introduced on the S4048-ON. Introduced on the S3048-ON.
592 High Availability (HA)
Related Commands
Version
8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 8.1.1.0 7.6.1.0
Description
Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series. Introduced on the E-Series ExaScale. Introduced on the E-Series.
show lacp -- displays the lacp configuration. show redundancy -- displays the current redundancy configuration.
redundancy reset-counter
Reset failover counter and timestamp information displayed in the show redundancy command.
Syntax
redundancy reset-counter
Default
Not configured.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the E-Series.
redundancy sfm standby
Place the SFM in an offline state.
Syntax
redundancy sfm standby To place the SFM in an online state, use the no redundancy sfm standby command.
Default
The SFM is online by default.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
High Availability (HA) 593
Usage Information
Example
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.3.12.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the S4810. Introduced on the C-Series.
When you insert or remove a secondary RPM with logical SFM, the system must add or remove the backplane links to the switch fabric trunk. To avoid traffic disruption, use this command when you insert the secondary RPM. When you execute this command, the logical SFM on the standby RPM is immediately taken offline and the SFM state is set as "standby".
NOTE: This command could affect traffic when taking the secondary SFM offline.
Dell#show sfm all
Switch Fabric State: up
-- Switch Fabric Modules --
Slot Status
--------------------------------------
0
active
1
active
Dell#configure Dell(conf)#redundancy sfm standby Taking secondary SFM offline... ! Dell(conf)#do show sfm all
Switch Fabric State: up
-- Switch Fabric Modules --
Slot Status
-----------------------------------------
0
active
1
standby
Dell(conf)#no redundancy sfm Taking secondary SFM online... ! 10Dell(conf)#do show sfm all
Switch Fabric State: up
-- Switch Fabric Modules --
Slot Status
-------------------------------------------
0
active
1
active
redundancy synchronize
Manually synchronize data once between the Master and Stand-by stack units.
Syntax Parameters
redundancy synchronize [full]
full
Enter the keyword full to synchronize all data.
594 High Availability (HA)
Default
Not configured.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.5.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the C-Series. Introduced on the E-Series.
show patch
Display the system patches loaded with the In-Service Modular Hot Fix command.
Syntax
show patch
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.3.12.0 8.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the S4810. Introduced on the E-Series.
Related Commands
patch flash://RUNTIME_PATCH_DIR -- inserts an In-Service Modular Hot-Fix patch.
show processes restartable
Display the processes and tasks configured for restartability.
Syntax Parameters
show processes restartable [history]
history
Display the last time the restartable processes crashed.
Command Modes EXEC Privilege
High Availability (HA) 595
Command History
Example
Related Commands
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.3.12.0 8.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the S4810. Introduced on the E-Series.
Dell#sho processes restartable
------------------------------------------------------
Process name State How many times restarted Timestamp last restarted
-------------------------------------------------------
radius
enabled
0 [-]
tacplus
enabled
0 [-]
-------------------------------------------------------
Dell#show processes restartable history
--------------------------------------------------------
Process name Timestamp last crashed
---------------------------------------------------------
radius
[5/23/2001 10:11:47]
----------------------------------------------------------
process restartable
show redundancy
Display the current redundancy configuration.
Syntax
show redundancy
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(0.0)
8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the C-Series.
596 High Availability (HA)
Usage Information
Example
Version
7.6.1.0
Description
Introduced on the E-Series.
The following describes the show redundancy command shown in the following example.
Field
Description
RPM Status
Displays the following information:
Slot number of the RPM. Whether the RPM is Primary or Standby. The state of the RPM: Active, Standby, Booting, or Offline. Whether the link to the second RPM is up or down.
PEER RPM Status
Displays the state of the second RPM, if present
RPM Redundancy Displays the following information:
Configuration
which RPM is the preferred Primary on next boot (the redundancy primary
command)
the data sync method configured (the redundancy synchronize
command)
the failover type (you cannot change this type; it is software-dependent). Hot Failover means that the running configuration and routing table are applied on secondary RPM. Fast Failover means that the running configuration is not applied on the secondary RPM until failover occurs, and the routing table on line cards is cleared during failover.
the status of auto booting the RPM (the redundancy disable-autoreboot command)
the parameter for auto failover limit control (the redundancy autofailover-limit command)
RPM Failover Record
Displays the following information:
RPM failover counter (to reset the counter, use the redundancy resetcounter command)
the time and date of the last RPM failover the reason for the last RPM failover
Last Data Sync Record
Displays the data sync information and the timestamp for the data sync:
Start-up Config is the contents of the startup-config file. Line Card Config is the line card types configured and interfaces on those line
cards. Runtime Event Log is the contents of the Event log. Running Config is the current running-config.
This field only appears when you enter the command from the Primary RPM.
Dell#show redundancy
-- RPM Status --
------------------------------------------------
RPM Slot ID:
1
RPM Redundancy Role: Primary
RPM State:
Active
RPM SW Version:
7.5.1.0
Link to Peer:
Up
-- PEER RPM Status --
------------------------------------------------
RPM State:
Standby
High Availability (HA) 597
RPM SW Version: 7.5.1.0
-- RPM Redundancy Configuration --
------------------------------------------------
Primary RPM:
rpm0
Auto Data Sync:
Full
Failover Type:
Hot Failover
Auto reboot RPM:
Enabled
Auto failover limit: 3 times in 60 minutes
-- RPM Failover Record --
------------------------------------------------
Failover Count:
1
Last failover timestamp: Jul 13 2007 21:25:32
Last failover Reason:
User request
-- Last Data Block Sync Record: --
------------------------------------------------
Line Card Config: succeeded Jul 13 2007 21:28:53
Start-up Config: succeeded Jul 13 2007 21:28:53
SFM Config State: succeeded Jul 13 2007 21:28:53
Runtime Event Log: succeeded Jul 13 2007 21:28:53
Running Config:
succeeded Jul 13 2007 21:28:53
Dell#
598 High Availability (HA)
22
ICMP Message Types
This chapter lists and describes the possible ICMP message type resulting from a ping. The first three columns list the possible symbol or type/code. For example, you would receive a ! or 03 as an echo reply from your ping.
ICMP Messages and their Definitions.
Table 1. ICMP Messages and their Definitions
Symbol
Type
Code
Description
Query
Error
.
Timeout (no reply)
!
0
3
echo reply
.
U
3
destination unreachable:
0
network unreachable
.
1
host unreachable
.
2
protocol unreachable
.
3
port unreachable
.
4
fragmentation needed but don't fragment
.
bit set
5
source route failed
.
6
destination network unknown
.
7
destination host unknown
.
8
source host isolated (obsolete)
.
9
destination network administratively
.
prohibited
10
destination host administratively prohibited
.
11
network unreachable for TOS
.
12
host unreachable for TOS
.
13
communication administratively prohibited
.
by filtering
14
host precedence violation
.
15
precedence cutoff in effect
.
C
4
0
source quench
.
5
redirect
.
0
redirect for network
.
1
redirect for host
.
2
redirect for type-of-service and network
.
3
redirect for type-of-service and host
.
8
0
echo request
.
9
0
router advertisement
.
10
0
router solicitation
.
ICMP Message Types 599
Table 1. ICMP Messages and their Definitions (continued)
Symbol
Type
Code
Description
&
11
time exceeded:
0
time-to-live equals 0 during transit
1
time-to-live equals 0 during reassembly
12
parameter problem:
1
IP header bad (catchall error)
2
required option missing
13
0
timestamp request
14
0
timestamp reply
15
0
information request (obsolete)
16
0
information reply (obsolete)
17
0
address mask request
18
0
address mask reply
Query
. . . . . .
Error
. .
. .
600 ICMP Message Types
23
Internet Group Management Protocol (IGMP)
The IGMP commands are supported by the Dell Networking operating software on the Dell Networking OS.
Topics:
� IGMP Commands � IGMP Snooping Commands
IGMP Commands
Dell Networking OS supports IGMPv1/v2/v3 and is compliant with RFC-3376.
Important Points to Remember
Dell Networking OS supports protocol-independent multicast-sparse (PIM-SM) and protocol-independent source-specific multicast (PIM-SSM) include and exclude modes.
IGMPv2 is the default version of IGMP on interfaces. You can configure IGMPv3 on interfaces. It is backward compatible with IGMPv2.
The maximum number of interfaces supported 95. There is no hard limit on the maximum number of groups supported. IGMPv3 router interoperability with IGMPv2 and IGMPv1 routers on the same subnet is not supported. An administrative command (ip igmp version) is added to manually set the IGMP version. All commands previously used for IGMPv2 are compatible with IGMPv3.
clear ip igmp groups
Clear entries from the group cache table.
Syntax Parameters
clear ip igmp [vrf vrf-name] groups [group-address | interface]
vrf vrf-name
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to configure this setting on that VRF.
NOTE: Applies to specific VRF if input is provided, else applies to default VRF.
group-address
interface interface
(OPTIONAL) Enter the IP multicast group address in dotted decimal format.
Enter the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Command Modes EXEC
Internet Group Management Protocol (IGMP) 601
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 E-Series legacy command
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
debug ip igmp
Enable debugging of IGMP packets.
Syntax Parameters
debug ip igmp [vrf vrf-name] [group address | interface]
To disable IGMP debugging, use the no debug ip igmp [vrf vrf-name] [group address | interface] command.
To disable all debugging, use the undebug all command.
vrf vrf-name
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to enable debugging of IGMP packets corresponding to that VRF.
NOTE: Applies to specific VRF if input is provided, else applies to Default VRF.
group-address
interface interface
(OPTIONAL) Enter the IP multicast group address in dotted decimal format.
Enter the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number.
Defaults
Disabled.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
602 Internet Group Management Protocol (IGMP)
Usage Information
Version
9.8(0.0P2) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 E-Series legacy command
Description
Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
IGMP commands accept only non-VLAN interfaces -- specifying VLAN does not yield results. This command displays packets for IGMP and IGMP snooping.
ip igmp access-group
To specify access control for packets, use this feature.
Syntax Parameters
ip igmp access-group access-list To remove the feature, use the no ip igmp access-group access-list command.
access-list
Enter the name of the extended ACL (16 characters maximum).
Defaults
Not configured
Command Modes INTERFACE (conf-if-interface-slot/port)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series. Introduced on E-Series.
Usage Information
The access list accepted is an extended ACL. To block IGMP reports from hosts, on a per-interface basis based on the group address and source address that you specify in the access list, use this feature.
Internet Group Management Protocol (IGMP) 603
ip igmp immediate-leave
Enable IGMP immediate leave.
Syntax Parameters
ip igmp immediate-leave [group-list prefix-list-name] To disable ip igmp immediate leave, use the no ip igmp immediate-leave command.
group-list prefix- Enter the keywords group-list then a string up to 16 characters long of the
list-name
prefix-list-name.
Defaults
Not configured.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0 E-Series legacy command
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
Querier normally sends some group-specific queries when a leave message is received for a group prior to deleting a group from the membership database. There may be situations when you require immediate deletion of a group from the membership database. This command provides a way to achieve the immediate deletion. In addition, this command provides a way to enable immediate-leave processing for specified groups.
ip igmp last-member-query-interval
Change the last member query interval, which is the Max Response Time inserted into Group-Specific Queries sent in response to Leave Group messages. This interval is also the interval between Group-Specific Query messages.
Syntax Parameters
ip igmp last-member-query-interval milliseconds To return to the default value, use the no ip igmp last-member-query-interval command.
milliseconds
Enter the number of milliseconds as the interval. For IGMP version 2, the range is from 100 to 25599. For IGMP version 3, the range is from 100 to 65535. The default value is 1000 milliseconds.
604 Internet Group Management Protocol (IGMP)
Defaults
1000 milliseconds
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
9.5(0.1) 9.2(0.0)
9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0 E-Series legacy command
Introduced on the S4048-ON. Introduced on the S3048-ON. For IGMP version 2, the Interval range is from 100 to 25599. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
ip igmp query-interval
Change the transmission frequency of IGMP general queries the Querier sends.
Syntax Parameters
ip igmp query-interval seconds To return to the default values, use the no ip igmp query-interval command.
seconds
Enter the number of seconds between queries sent out. The range is from 1 to 18000. The default is 60 seconds.
Defaults
60 seconds
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
9.5(0.0)
Introduced on the S4048-ON.
Introduced on the S3048-ON.
Maximum range of the Hello interval value is changed to 18000. Introduced on the S6000-ON.
Introduced on the Z9500.
Internet Group Management Protocol (IGMP) 605
Usage Information
Version
9.2(0.0)
9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0 7.6.1.0
7.5.1.0
E-Series legacy command.
Description
Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only.
Introduced on the S6000.
Introduced on the S4820T.
Introduced on the Z9000.
Introduced on the S4810.
Introduced on the S-Series.
Introduced on the C-Series.
Introduced on the S-Series in Interface VLAN mode only to enable the system to act as an IGMP Proxy Querier.
Introduced on the C-Series in Interface VLAN mode only to enable the system to act as an IGMP Proxy Querier.
If you have configured the hello interval value to be greater than 18000, you must first reset that value to be less than or equal to 18000 before upload. Otherwise, the command execution fails during bootup and the hello interval value is set to the default value.
ip igmp query-max-resp-time
Set the maximum query response time advertised in general queries. NOTE: The IGMP query-max-resp-time value must be less than the IGMP query-interval value.
Syntax Parameters
ip igmp query-max-resp-time seconds To return to the default values, use the no ip igmp query-max-resp-time command.
seconds
Enter the number of seconds for the maximum response time. The range is from 1 to 25. The default is 10 seconds.
Defaults
10 seconds
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.0) 9.2(0.0)
9.0.2.0 8.3.19.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000.
606 Internet Group Management Protocol (IGMP)
Version
8.3.7.0 7.6.1.0 7.5.1.0 7.6.1.0
7.5.1.0
E-Series legacy command.
Description
Introduced on the S4810.
Introduced on the S-Series.
Introduced on the C-Series.
Introduced on the S-Series in Interface VLAN mode only to enable the system to act as an IGMP Proxy Querier.
Introduced on the C-Series in Interface VLAN mode only to enable the system to act as an IGMP Proxy Querier.
ip igmp ssm-map
To translate (*,G) memberships to (S,G) memberships, use a statically configured list.
Syntax Parameters
ip igmp [vrf vrf-name] ssm-map std-access-list source-address
Undo this configuration, that is, remove SSM map (S,G) states and replace them with (*,G) state, use the ip igmp [vrf vrf-name] ssm-map std-access-list source-address command.
vrf vrf-name
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to configure this setting on that VRF.
NOTE: Applies to specific VRF if input is provided, else applies to Default VRF.
std-access-list source-address
Specify the standard IP access list that contains the mapping rules for multicast groups.
Specify the multicast source address to which the groups are mapped.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series. Introduced on the E-Series.
Usage Information
Mapping applies to both v1 and v2 IGMP joins; any updates to the ACL are reflected in the IGMP groups. You may not use extended access lists with this command. When you configure a static SSM map and the router cannot find any matching access lists, the router continues to accept (*,G) groups.
Internet Group Management Protocol (IGMP) 607
Related Commands
ip access-list standard -- creates a standard access list to filter based on IP address.
ip igmp version
Manually set the version of the router to IGMPv2 or IGMPv3.
Syntax Parameters
ip igmp version {2 | 3}
2
Enter the number 2 to set the IGMP version number to IGMPv2.
3
Enter the number 3 to set the IGMP version number to IGMPv3.
Defaults
2 (that is, IGMPv2)
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
9.5(0.0) 9.0.2.0 9.2(0.0)
8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Changed the default IGMP from version 2 to version 3. Introduced on the S6000ON Introduced on the Z9500. Introduced on the S6000. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
show ip igmp groups
View the IGMP groups.
Syntax Parameters
show ip igmp [vrf vrf-name] groups [group-address [detail] | detail | interface [group-address [detail]]]
vrf vrf-name group-address interface
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to configure this setting on that VRF.
(OPTIONAL) Enter the group address in dotted decimal format to view information on that group only.
(OPTIONAL) Enter the interface type and slot/port[/subport] information:
608 Internet Group Management Protocol (IGMP)
detail
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For a port channel interface, enter the keywords port-channel then a number.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
(OPTIONAL) Enter the keyword detail to display the IGMPv3 source information.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 E-Series legacy command.
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series and C-Series. Expanded to support the detail option.
Usage Information
This command displays the IGMP database, including configured entries for either all groups on all interfaces, all groups on specific interfaces, or specific groups on specific interfaces.
The following describes the show ip igmp groups command shown in the following example.
Field
Description
Group Address Interface Mode Uptime Expires Last Reporter
Lists the multicast address for the IGMP group. Lists the interface type, slot and port number. Displays the IGMP version used. Displays the amount of time the group has been operational. Displays the amount of time until the entry expires. Displays the IP address of the last host to be a member of the IGMP group.
Example
Dell#show ip igmp groups
Total Number of Groups: 5
IGMP Connected Group Membership
Group Address Interface Uptime Expires
225.0.0.0
Vlan 100 00:00:05 00:02:04
225.0.0.1
Vlan 100 00:00:05 00:02:04
Internet Group Management Protocol (IGMP) 609
225.0.0.2 225.0.0.3 225.0.0.4
Vlan 100 Vlan 100 Vlan 100
00:00:05 00:02:04 00:00:05 00:02:04 00:00:05 00:02:04
Example (VLT)
NOTE: The asterisk (*) after the port channel number (Po 2) highlighted in the following example indicates the port channel is VLT, that the local VLT port channel is down and the remote VLT port is up.
Dell#show ip igmp groups
Total Number of Groups: 5
IGMP Connected Group Membership
Group Address Interface Mode Uptime Expires Last Reporter
225.0.0.0
Vlan 100 IGMPv2 00:00:05 00:02:04 3.0.0.51
225.0.0.1
Vlan 100 IGMPv2 00:00:05 00:02:04 3.0.0.51
225.0.0.2
Vlan 100 IGMPv2 00:00:05 00:02:04 3.0.0.51
225.0.0.3
Vlan 100 IGMPv2 00:00:05 00:02:04 3.0.0.51
225.0.0.4
Vlan 100 IGMPv2 00:00:05 00:02:04 3.0.0.51
Example (Details)
Dell#show ip igmp group details
Interface
Vlan 20
Group
232.1.1.5
Uptime
00:11:22
Expires
Never
Router mode
INCLUDE
Last reporter
35.0.0.2
Group source list
Source address
Expires
65.0.0.1
00:01:22
65.0.0.2
00:01:22
65.0.0.3
00:01:22
65.0.0.4
00:01:22
65.0.0.5
00:01:22
show ip igmp interface
View information on the interfaces participating in IGMP.
Syntax Parameters
show ip igmp [vrf vrf-name] interface [interface]
vrf vrf-name interface
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to view IGMP interfaces associated with that VRF.
(OPTIONAL) Enter the interface type and slot/port[/subport] information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For a port channel interface, enter the keywords port-channel then a number.
610 Internet Group Management Protocol (IGMP)
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 E-Series legacy command.
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
Example
IGMP commands accept only non-VLAN interfaces -- specifying VLAN does not yield results. The show ip igmp interface command does not display information corresponding to the loopback interfaces.
Dell#show ip igmp interface TenGigabitEthernet 1/1 is down, line protocol is down
Internet protocol processing disabled TenGigabitEthernet 1/5 is down, line protocol is down
Internet protocol processing disabled TenGigabitEthernet 1/6 is down, line protocol is down
Internet protocol processing disabled TenGigabitEthernet 1/7 is up, line protocol is down
Internet protocol processing disabled Vlan 20
Inbound IGMP access group is not set Internet address is 35.0.0.1/24 IGMP is enabled on interface IGMP query interval is 60 seconds IGMP querier timeout is 125 seconds IGMP max query response time is 10 seconds IGMP last member query response interval is 1000 ms IGMP immediate-leave is enabled for all groups IGMP activity: 0 joins IGMP querying router is 35.0.0.1 (this system) IGMP version is 2
show ip igmp ssm-map
Display is a list of groups that are currently in the IGMP group table and contain SSM mapped sources.
Syntax
show ip igmp [vrf vrf-name] ssm-map [group]
Internet Group Management Protocol (IGMP) 611
Parameters
vrf vrf-name
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to configure this setting on that VRF.
NOTE: Applies to specific VRF if input is provided, else applies to Default VRF.
group
(OPTIONAL) Enter the multicast group address in the form A.B.C.D to display the list of sources to which this group is mapped.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series. Introduced on the E-Series.
Example
Dell#show ip igmp ssm-map
Interface
Vlan 20
Group
232.1.1.5
Uptime
00:11:22
Expires
Never
Router mode
INCLUDE
Last reporter
35.0.0.2
Group source list
Source address
Expires
65.0.0.1
00:01:22
65.0.0.2
00:01:22
65.0.0.3
00:01:22
65.0.0.4
00:01:22
65.0.0.5
00:01:22
Related Commands
ip igmp ssm-map -- uses a statically configured list to translate (*,G) memberships to (S,G) memberships.
IGMP Snooping Commands
Dell Networking OS supports IGMP Snooping version 2 and 3 on all Dell Networking systems.
Important Points to Remember for IGMP Snooping
Dell Networking OS supports version 1, version 2, and version 3 hosts. Dell Networking OS IGMP snooping implementation is based on IP multicast address (not based on Layer 2 multicast mac
address) and the IGMP snooping entries are in Layer 3 flow table not in Layer 2 forwarding information base (FIB). Dell Networking OS IGMP snooping implementation is based on draft-ietf-magma-snoop-10. Dell Networking OS supports IGMP snooping on JUMBO-enabled cards.
612 Internet Group Management Protocol (IGMP)
IGMP snooping is not enabled by default on the switch. A maximum of 1800 groups and 600 VLAN are supported. IGMP snooping is not supported on a default VLAN interface. IGMP snooping is not supported over VLAN-Stack-enabled VLAN interfaces (you must disable IGMP snooping on a VLAN
interface before configuring VLAN-Stack-related commands). IGMP snooping does not react to Layer 2 topology changes triggered by spanning tree protocol (STP). IGMP snooping reacts to Layer 2 topology changes multiple spanning tree protocol (MSTP) triggers by sending a general
query on the interface that comes in the FWD state.
Important Points to Remember for IGMP Querier
The IGMP snooping Querier supports version 2. You must configure an IP address to the VLAN interface for IGMP snooping Querier to begin. The IGMP snooping Querier
disables itself when a VLAN IP address is cleared, and then it restarts itself when an IP address is reassigned to the VLAN interface. When enabled, IGMP snooping Querier does not start if there is a statically configured multicast router interface in the VLAN. When enabled, IGMP snooping Querier starts after one query interval in case no IGMP general query (with IP SA lower than its VLAN IP address) is received on any of its VLAN members. When enabled, IGMP snooping Querier periodically sends general queries with an IP source address of the VLAN interface. If it receives a general query on any of its VLAN member, it checks the IP source address of the incoming frame.
If the IP SA in the incoming IGMP general query frame is lower than the IP address of the VLAN interface, the switch disables its IGMP snooping Querier functionality.
If the IP SA of the incoming IGMP general query is higher than the VLAN IP address, the switch continues to work as an IGMP snooping Querier.
clear ip igmp snooping groups
Clear snooping entries from the group cache table.
Syntax Parameters
clear ip igmp snooping groups [group-address interface | interface]
group-address
interface interface
(OPTIONAL) Enter the IP multicast group address in dotted decimal format.
Enter the following keywords and slot/port or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number.
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on S-Series and Z�Series.
Internet Group Management Protocol (IGMP) 613
Usage Information
IGMP commands accept only non-VLAN interfaces -- specifying VLAN does not yield results.
debug ip igmp snooping
Enable debugging of IGMP snooping packets on interfaces and groups.
Syntax Parameters
debug ip igmp snooping [group address | interface]
To disable debugging of IGMP snooping, use the no debug ip igmp snooping [group address | interface] command.
To disable all debugging, use the undebug all command.
snooping
group-address
interface interface
Enter the keyword snooping to enable debugging of IGMP snooping.
(OPTIONAL) Enter the IP multicast group address in dotted decimal format.
Enter the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number.
Defaults
Disabled.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4810, S4820T, S5000, S6000, S6000�ON, Z9000, and Z9500.
Usage Information
IGMP commands accept only non-VLAN interfaces -- specifying VLAN does not yield results. This command displays packets for IGMP and IGMP snooping.
ip igmp snooping enable
Enable IGMP snooping on all or a single VLAN. This command is the master on/off switch to enable IGMP snooping.
Syntax
ip igmp snooping enable To disable IGMP snooping, use the no ip igmp snooping enable command.
Defaults
Disabled.
Command Modes CONFIGURATION INTERFACE VLAN
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
614 Internet Group Management Protocol (IGMP)
Usage Information
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.2(0.0)
9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
To enable IGMP snooping, enter this command. When you enable this command from CONFIGURATION mode, IGMP snooping enables on all VLAN interfaces (except the default VLAN).
NOTE: Execute the no shutdown command on the VLAN interface for IGMP Snooping to function.
ip igmp snooping fast-leave
Enable IGMP snooping fast-leave for this VLAN.
Syntax
ip igmp snooping fast-leave To disable IGMP snooping fast leave, use the no igmp snooping fast-leave command.
Defaults
Not configured.
Command Modes INTERFACE VLAN -- (conf-if-vl-n)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.2(0.0)
9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Internet Group Management Protocol (IGMP) 615
Usage Information
Version
E-Series legacy command.
Description
Queriers normally send some queries when a leave message is received prior to deleting a group from the membership database. There may be situations when you require a fast deletion of a group. When you enable IGMP fast leave processing, the switch removes an interface from the multicast group as soon as it detects an IGMP version 2 leave message on the interface.
ip igmp snooping flood
This command controls the flooding behavior of unregistered multicast data packets.
Syntax
ip igmp snooping flood
To undo this configuration, use the no ip igmp snooping flood command.
Defaults
Enabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 7.7.1.0 E-Series legacy command
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Seris and S-Series. Introduced on the E-Series.
Usage Information
On the C-Series and S-Series, unregistered multicast data traffic drops when you disable flooding; they do not forward the packets to multicast router ports. On the C-Series and S-Series, in order to disable Layer 2 multicast flooding, disable Layer 3 multicast (no ip multicast-routing).
ip igmp snooping last-member-query-interval
The last member query interval is the maximum response time inserted into Group-Specific queries sent in response to GroupLeave messages.
Syntax
ip igmp snooping last-member-query-interval milliseconds
To return to the default value, use the no ip igmp snooping last-member-query-interval command.
616 Internet Group Management Protocol (IGMP)
Parameters
milliseconds
Enter the interval in milliseconds. The range is from 100 to 65535. The default is 1000 milliseconds.
Defaults
1000 milliseconds
Command Modes INTERFACE VLAN
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.2(0.0)
9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 E-Series legacy command
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
This last-member-query-interval is also the interval between successive Group-Specific Query messages. To change the last-member-query interval, use this command.
ip igmp snooping mrouter
Statically configure a VLAN member port as a multicast router interface.
Syntax Parameters
ip igmp snooping mrouter interface interface
To delete a specific multicast router interface, use the no igmp snooping mrouter interface interface command.
interface interface
Enter the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
Defaults
Not configured.
Command Modes INTERFACE VLAN -- (conf-if-vl-n)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Internet Group Management Protocol (IGMP) 617
Usage Information
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.2(0.0)
9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 E-Series legacy command.
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Dell Networking OS provides the capability of statically configuring the interface to which a multicast router is attached. To configure a static connection to the multicast router, enter the ip igmp snooping mrouter interface command in the VLAN context. The interface to the router must be a part of the VLAN where you are entering the command.
ip igmp snooping querier
Enable IGMP querier processing for the VLAN interface.
Syntax
ip igmp snooping querier
To disable IGMP querier processing for the VLAN interface, use the no ip igmp snooping querier command.
Defaults
Not configured.
Command Modes INTERFACE VLAN -- (conf-if-vl-n)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.2(0.0)
9.0.2.0 8.3.19.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000.
618 Internet Group Management Protocol (IGMP)
Usage Information
Version
8.3.7.0 7.6.1.0 7.5.1.0 E-Series legacy command
Description
Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
This command enables the IGMP switch to send General Queries periodically. This behavior is useful when there is no multicast router present in the VLAN because the multicast traffic is not routed. Assign an IP address to the VLAN interface for the switch to act as a querier for this VLAN.
show ip igmp snooping groups
Display snooping related information for all the IGMP groups, interface or one group of one interface.
Syntax Parameters
show ip igmp snooping groups [group-address [detail] | detail | interface [group-address [detail]]]
group-address interface
(OPTIONAL) Enter the group address in dotted decimal format to view information on that group only.
(OPTIONAL) Enter the interface type and slot/port[subport] information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For a port channel interface, enter the keywords port-channel then a number.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
detail
(OPTIONAL) Enter the keyword detail to display the IGMPv3 source information.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4810, S4820T, S5000, S6000, Z9000, and Z9500.
Usage Information
This command displays the IGMP database, including configured entries for either all groups on all interfaces, all groups on specific interfaces, or specific groups on specific interfaces.
The following describes the show ip igmp groups command shown in the following example.
Field
Description
Group Address Lists the multicast address for the IGMP group.
Internet Group Management Protocol (IGMP) 619
Example
Field
Interface Mode Uptime Expires Last Reporter Member Ports
Description
Lists the interface type, slot and port number.
Displays the IGMP version used.
Displays the amount of time the group has been operational.
Displays the amount of time until the entry expires.
Displays the IP address of the last host to be a member of the IGMP group.
Indicates the port channel. If the port channel is VLT, an asterisk (*) after the port channel number indicates the port channel is locally down and that a remote VLT port is up.
Dell#show ip igmp snooping groups
Total Number of Groups: 1
IGMP Connected Group Membership
Group Address
Interface
Mode
Reporter
225.1.1.1
Vlan 10
IGMPv2-Compat
Member Ports: Te 1/17
Dell#
Uptime 00:00:07
Expires 00:02:09
Last 1.1.1.2
show ip igmp snooping mrouter
Display multicast router interfaces.
Syntax Parameters
show ip igmp snooping mrouter [vlan number]
vlan number
Enter the keyword vlan then the vlan number. The range is from 1 to 4094.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 E-Series legacy command.
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
620 Internet Group Management Protocol (IGMP)
Usage Information Example
Related Commands
If the port channel is a VLT port channel, an asterisk (*) after the port channel number (Po 100*) indicates the port channel is locally down and that a remote VLT port is up.
Dell#show ip igmp snooping mrouter Interface Router Ports Vlan 2 Te 1/3, Po 1 Dell#
ip igmp snooping mrouter -- configures a static connection to the multicast router. show ip igmp groups -- view groups.
Internet Group Management Protocol (IGMP) 621
24
Interfaces
To configure egress, port channel, time domain, and UDP, use these interface commands.
Topics:
� Basic Interface Commands � Egress Interface Selection (EIS) Commands � Port Channel Commands � Time Domain Reflectometer (TDR) Commands � UDP Broadcast Commands � ip http source-interface
Basic Interface Commands
The following commands are for Physical, Loopback, and Null interfaces.
clear counters
Clear the counters used in the show interfaces commands for all virtual router redundancy protocol (VRRP) groups, virtual local area networks (VLANs), and physical interfaces, or selected ones.
Syntax Parameters
clear counters [interface] [vrrp [ipv6 {vrid} | learning-limit | vlan vlanid]
interface
(OPTIONAL) Enter any of the following keywords and slot/port[/subport] or number to clear counters from a specified interface:
For IPv4 access-group counters, enter the keyword ip. For IPv6 access-group counters, enter the keyword ipv6. For a Loopback interface, enter the keyword loopback then a number from 0
to 16383. For MAC access-group counters, enter the keyword mac. For a Port Channel interface, enter the keywords port-channel then a
number. The range is from 1 to 128. For the management interface, enter the keyword ManagementEthernet
then slot/port information. For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet then the slot/port[/subport] information. For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the
slot/port information. For a tunnel interface, enter the keyword tunnel. The range is from 1 to
16383.
NOTE: This command also enables you to clear the port configurations corresponding to a range of ports. However, for Open Networking (ON) platforms the notation for specifying port range in the command is different from how you specify in non-ON platforms.
For non-ON platforms, you can specify multiple ports as slot/portrange. For example, if you want to clear the port configurations
622 Interfaces
corresponding to all ports between 1 and 4, specify the port range as show interfaces interface-type 1/1 - 4.
For ON platforms, you can specify multiple ports as slot/port/ [subport] - slot/port/[subport]. For example, if you want to clear the port configurations corresponding to all ports between 1 and 4, specify the port range as show interfaces interface-type 1/1/1 - 1/1/4.
vrrp [[ipv6] vrid] (OPTIONAL) Enter the keyword vrrp to clear the counters of all VRRP groups. To clear the counters of VRRP groups on all IPv6 interfaces, enter ipv6. To clear the counters of a specified group, enter a VRID number from 1 to 255.
learning-limit
(OPTIONAL) Enter the keywords learning-limit to clear unknown source address (SA) drop counters when MAC learning limit is configured on the interface.
vlan vlan-id
Enter the keyword vlan followed by the interface VLAN number. The range is from 1 to 4094.
Defaults
Without an interface specified, the command clears all interface counters.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.9(0.0)
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.5.1.0 8.4.1.0 8.3.7.0 8.2.1.0
8.1.1.0 7.6.1.0 7.5.1.0 6.5.1.0
Added support to clear the interface configurations corresponding to a range of ports. Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Added support (E-Series only) for VRRP groups in a VRF instance. Introduced on the S4810. Added support for 4093 VLANs on the E-Series ExaScale. Prior to the release, 2094 was supported. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Updated the definition of the learning-limit option for clarity.
Example
Dell#clear counters Clear counters on all interfaces [confirm]
Related Commands
mac learning-limit -- allows aging of MACs even though a learning-limit is configured or disallow station move on learned MACs.
show interfaces -- displays information on the interfaces.
Interfaces 623
clear dampening
Clear the dampening counters on all the interfaces or just the specified interface.
Syntax Parameters
clear dampening [interface]
interface
(OPTIONAL) Enter any of the following keywords and slot/port[/subport] or number to clear counters from a specified interface:
For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
Defaults
Without an interface specified, the command clears all interface dampening counters.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.5.1.0 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Example
Related Commands
Dell#clear dampening tegigabitethernet 1/10 Clear dampening counters on TeGi 1/10 [confirm] y Dell#
show interfaces dampening -- displays interface dampening information. dampening -- configures dampening on an interface.
624 Interfaces
dampening
Configure dampening on an interface.
Syntax Parameters
dampening [[[[half-life] [reuse-threshold]] [suppress-threshold]] [maxsuppress-time]]
half-life
reuse-threshold
suppressthreshold
max-suppresstime
Enter the number of seconds after which the penalty is decreased. The penalty decreases half after the half-life period expires. The range is from 1 to 30 seconds. The default is 5 seconds.
Enter a number as the reuse threshold, the penalty value below which the interface state is changed to "up". The range is from 1 to 20000. The default is 750.
Enter a number as the suppress threshold, the penalty value above which the interface state is changed to "error disabled". The range is from 1 to 20000. The default is 2500.
Enter the maximum number for which a route can be suppressed. The default is four times the half-life value. The range is from 1 to 86400. The default is 20 seconds.
Defaults
Disabled.
Command Modes INTERFACE (conf-if-)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 8.1.1.0 7.6.1.0 7.5.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
With each flap, Dell Networking OS penalizes the interface by assigning a penalty (1024) that decays exponentially depending on the configured half-life. After the accumulated penalty exceeds the suppress threshold value, the interface moves to the Error-Disabled state. This interface state is deemed as "down" by all static/dynamic Layer 2 and Layer 3 protocols. The penalty is exponentially decayed based on the half-life timer. After the penalty decays below the reuse threshold, the interface enables. The configured parameters are as follows:
suppress-threshold should be greater than reuse-threshold max-suppress-time should be at least 4 times half-life
NOTE: You cannot apply dampening on an interface that is monitoring traffic for other interfaces.
Interfaces 625
Example
Related Commands
Dell(conf-if-te-1/10)#dampening 20 800 4500 120 Dell(conf-if-te-1/10)#
clear dampening -- clears the dampening counters on all the interfaces or just the specified interface. show interfaces dampening -- displays interface dampening information.
default interface
Reset a physical interface to its factory default settings.
Syntax Parameters
default interface interface-type slot/port[/subport] - range
interface-type slot/port[/ subport]
Enter the interface type and slot/port [/subport] information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
range
For non-ON platforms, you can specify multiple ports as slot/port-range. For example, if you want to display information corresponding to all ports between 1 and 4, specify the port range as show interfaces interfacetype 1/1 - 4.
For ON platforms, you can specify multiple ports as slot/port/[subport] - slot/port/[subport]. For example, if you want to display information corresponding to all ports between 1 and 4, specify the port range as show interfaces interface-type 1/1/1 - 1/1/4.
Defaults
None
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.9(0.0)
Introduced on the S4810, S4820T, S3048-ON, S4048-ON, S5000, S6000, S6000� ON, and Z9500.
Usage Information
Example
Use the default interface command to set a Gigabit Ethernet, 10- Gigabit Ethernet, or 40-Gigabit Ethernet interface to its factory-default state. By default, a physical interface is disabled (shutdown) with no assigned IP address or switchport (no ip address). This command removes all software settings and all L3, VLAN, VXLAN, and port-channel configurations on a physical interface.
Dell(conf-if-te-1/5)#show config ! interface TenGigabitEthernet 1/5
description testconfig no ip address portmode hybrid switchport rate-interval 8 mac learning-limit 10 no-station-move no shutdown Dell(conf-if-te-1/5)#
Dell(conf)#default interface tengigabitethernet 1/5
Dell(conf-if-te-1/5)#show config
626 Interfaces
Related Commands
! interface TenGigabitEthernet 1/5
no ip address shutdown show running-config � displays the current configuration.
description
Assign a descriptive text string to the interface.
Syntax Parameters
description desc_text To delete a description, use the no description command.
desc_text
Enter a text string up to 240 characters long.
Defaults
none
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Modified for E-Series: Revised from 78 to 240 characters.
Usage Information
Important Points to Remember:
To use special characters as a part of the description string, you must enclose the whole string in double quotes.
Spaces between characters are not preserved after entering this command unless you enclose the entire description in quotation marks ("desc_text").
Entering a text string after the description command overwrites any previous text string that you previously configured as the description.
The shutdown and description commands are the only commands that you can configure on an interface that is a member of a port-channel.
Use the show interfaces description command to display descriptions configured for each interface.
Interfaces 627
duplex (10/100 Interfaces)
Configure duplex mode on any physical interfaces where the speed is set to 10/100.
Syntax
duplex {half | full} To return to the default setting, use the no duplex command.
Parameters
half
full
Enter the keyword half to set the physical interface to transmit only in one direction.
Enter the keyword full to set the physical interface to transmit in both directions.
Defaults
Not configured.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 6.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced
Usage Information
This command applies to any physical interface with speed set to 10/100. NOTE: Starting with Dell Networking OS version 7.8.1.0, when you use a copper SFP2 module with catalog number GP-SFP2-1T in the S25P model of the S-Series, you can manually set its speed with the speed command. When you set the speed to 10 Mbps or 100 Mbps, you can also execute the duplex command.
Related Commands
negotiation auto -- enables or disables auto-negotiation on an interface.
flowcontrol
Control how the system responds to and generates 802.3x pause frames on 10 Gig ports.
Syntax
flowcontrol rx {off | on} tx {off | on} [pause- threshold {<1-12480>] [resume-offset <1-12480>] [negotiate]
To return to the default, use the no form of this command.
Parameters
rx on
Enter the keywords rx on to process the received flow control frames on this port.
628 Interfaces
rx off tx on tx off pause-threshold resume-offset
Enter the keywords rx off to ignore the received flow control frames on this port.
Enter the keywords tx on to send control frames from this port to the connected device when a higher rate of traffic is received.
Enter the keywords tx off so that flow control frames are not sent from this port to the connected device when a higher rate of traffic is received.
Enter the buffer threshold limit for generating PAUSE frames.
Enter the offset value for generating PAUSE frames to resume traffic.
Defaults
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 6.5.1.9 and 7.4.1.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the E-Series.
Introduced on the C-Series and S-Series with the thresholds option.
Usage Information
The globally assigned 48-bit Multicast address 01-80-C2-00-00-01 is used to send and receive pause frames. To allow full-duplex flow control, stations implementing the pause operation instruct the MAC to enable the reception of frames with a destination address equal to this multicast address.
When a port receives traffic at a higher rate than it can process, the frames are stored in the port buffer. As a result, buffer usage increases. When the buffer usage reaches the value specified in the "pausethreshold" argument, the port sends PAUSE frame to the connected link partner to stop sending the traffic. Eventually this reduces the buffer usage. When the buffer usage drops by the value specified in the "resume-threshold", the port again sends a PAUSE frame with 0 as wait-time. This results in resume of the paused traffic flow.
Important Points to Remember
Do not enable tx pause when buffer carving is enabled. For information and assistance, consult Dell Networking TAC.
The only configuration applicable to half duplex ports is rx off tx off. The following error is returned:
Can't configure flowcontrol when half duplex is configure, config ignored
Half duplex cannot be configured when the flow control configuration is on (default is rx on tx on). The following error is returned:
Can't configure half duplex when flowcontrol is on, config ignored
Interfaces 629
Example
NOTE: The flow control must be off (rx off tx off) before configuring the half duplex.
Speeds less than 1 Gig cannot be configured when the asymmetric flow control configuration is on. The following error is returned: Can't configure speed <1G when Asymmetric flowcontrol is on, config ignored
Dell Networking OS only supports rx on tx on and rx off tx off for speeds less than 1 Gig (Symmetric). NOTE: If you use the disable rx flow control command, Dell Networking recommends rebooting the system.
Dell(conf-if-Te-1/1)#show config ! interface TenGigabitEthernet 1/1 no ip address switchport no negotiation auto flowcontrol rx off tx on no shutdown ...
Example (Values) This Example shows how Dell Networking OS negotiates the flow control values between two Dell Networking chassis connected back-to-back using 1G copper ports.
Configured
LocRxConf LocTxConf RemoteRxConf RemoteTxConf
off
off
off
off
off
on
on
off
on
on
off
on
off
off
off
on
on
off
on
on
on
off
off
off
off
on
on
off
on
on
on
on
off
off
off
on
on
off
on
on
LocNegRx LocNegTx RemNegRx RemNegTx
off
off
off
off
off
off
off
off
off
off
off
off
off
off
off
off
off
off
off
off
off
off
off
off
off
on
on
off
off
off
off
off
off
off
off
off
on
off
off
on
on
on
on
on
on
on
on
on
off
off
off
off
off
off
off
off
on
on
on
on
on
on
on
on
630 Interfaces
Related Commands
show running-config -- displays the flow configuration parameters (non-default values only). show interfaces -- displays the negotiated flow control parameters.
interface
Configure a physical interface on the switch.
Syntax Parameters
interface interface range
interface
Enter one of the following keywords and slot/port[/subport] or number information:
For a null interface, enter the keyword null then the slot/port information. The Null interface number is 0.
For the Management interface on the stack-unit, enter the keyword ManagementEthernet then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Tunnel interface, enter the keyword tunnel then the tunnel ID. The range is from 1 to 16383.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
range
(Optional) Enter the keyword range to configure an interface range.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.5.1.0 8.1.1.0 7.6.1.0 7.5.1.0 6.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Added the support for interfaces. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for 4-port 40G line cards on ExaScale. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced
Interfaces 631
Usage Information
Example Related Commands
You cannot delete a physical interface. By default, physical interfaces are disabled (shutdown) and are not assigned to an IP address or switchport. To place an interface in Layer 2 mode, ensure that the interface's configuration does not contain an IP address and enter the switchport command. You can create up to 64 tunnel interfaces. The tunnel is added as a logical interface with no default configuration. To delete a tunnel interface, use the no interface tunnel tunnel-id command. The tunnel interface operates as an ECMP (equal cost multi path) only when the next hop to the tunnel destination is over a physical interface. If you select any other interface as the next hop to the tunnel destination, the tunnel interface does not operate as an ECMP.
Dell(conf)#int tengigabitethernet 1/10 Dell(conf-if-te-1/10)#exit Dell(conf)#
interface loopback -- configures a Loopback interface. interface null -- configures a Null interface. interface port-channel -- configures a port channel. interface vlan -- configures a VLAN. show interfaces -- displays the interface configuration.
interface group
Create or delete group of VLANs with a single command. You can also use this command to apply a set of configurations on a group of interfaces.
Syntax Parameters
interface group [fortyGigE slot/port { - port }| tengigabitethernet slot/ port { - port } | vlan vlanid {- vlanid } ]
To delete a range of VLANs, use the following command:
no interface group vlan vlanid {- vlanid}
interface, interface,...
Enter the keywords interface group and one of the interfaces -- slot/port or VLAN number. Select the range of interfaces for bulk configuration. Spaces are not required between the commas. Comma-separated ranges can include VLANs and physical interfaces.
Enter the member VLANs using VLAN IDs (separated by commas), a range of VLAN IDs (separated by a hyphen), a single VLAN ID, or a combination. For example: VLAN IDs (comma-separated): 3, 4, 6. Range (hyphen-separated): 5-10.
Slot/Port information need not contain a space before and after the dash. For example. both of the following commands are valid: interface group tengigabitethernet 1/1 - 5 ; interface group tengigabitethernet 1/1-5; ; .
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Command Modes CONFIGURATION
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
632 Interfaces
Usage Information
Example
Related Commands
Version
9.8(0.0P2) 9.7(0.0) 9.4(0.0)
Description
Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S4810, S4820T, S6000, Z9000, and MXL Switch.
The interface group command will create all the non-existent VLANs specified in the range. On successful command execution, the CLI switches to the interface group context.
The configuration commands inside the group context will be the similar to that of the existing range command.
Note: For release 9.4(0.0), the group command is supported only for VLANs and physical interfaces.
Dell(conf)#interface group ?
fortyGigE
FortyGigabit Ethernet interface
gigabitethernet
GigabitEthernet interface IEEE 802.3z
tengigabitethernet
TenGigabit Ethernet interface
vlan
VLAN keyword
Dell(conf)# interface group vlan 1 - 2 , tengigabitethernet 1/10 Dell(conf-if-group-vl-1-2,te-1/10)# no shutdown Dell(conf-if-group-vl-1-2,te-1/10)# end
interface range -- Configures a range of interfaces.interface vlan -- Configures a VLAN.
interface loopback
Configure a Loopback interface.
Syntax Parameters
interface loopback number To remove a loopback interface, use the no interface loopback number command.
number
Enter a number as the interface number. The range is from 0 to 16383.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale.
Interfaces 633
Example
Related Commands
Version
7.6.1.0 7.5.1.0 6.4.1.0
Description
Introduced on the S-Series. Introduced on the C-Series. Introduced
Dell(conf)#interface loopback 1655 Dell(conf-if-lo-1655)#
interface -- configures a physical interface. interface null -- configures a Null interface. interface port-channel -- configures a port channel. interface vlan -- configures a VLAN.
interface ManagementEthernet
Configure the Management port on the system (either the Primary or Standby RPM).
Syntax Parameters
interface ManagementEthernet slot/port slot/port
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.11.1 8.1.1.0 7.5.1.0 6.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S55, S60, and S4810. Introduced on the E-Series ExaScale. Introduced on the C-Series. Introduced
Usage Information
You cannot delete a Management port.
The Management port is enabled by default (no shutdown). To assign an IP address to the Management port, use the ip address command.
If your system has two RPMs installed, use the show redundancy command to display which RPM is the Primary RPM.
634 Interfaces
Example
Related Commands
management route -- configures a static route that points to the Management interface or a forwarding router.
speed (Management interface) -- clears the FIB entries on a specified line card.
interface null
Configure a Null interface on the switch.
Syntax Parameters
interface null number
number
Enter zero (0) as the Null interface number.
Defaults
Not configured; number = 0
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 6.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced
Usage Information
Example
You cannot delete the Null interface. The only configuration command possible in a Null interface is ip unreachables.
Dell(conf)#interface null 0 Dell(conf-if-nu-0)#
Related Commands
interface -- configures a physical interface. interface loopback -- configures a Loopback interface. interface port-channel -- configures a port channel. interface vlan -- configures a VLAN. ip unreachables -- enables generation of internet control message protocol (ICMP) unreachable messages.
Interfaces 635
interface range
This command permits configuration of a range of interfaces to which subsequent commands are applied (bulk configuration). Using the interface range command, you can enter identical commands for a range of interface.
Syntax Parameters
interface range interface {slot/port[subport] | port} -- {slot/port[subport] | port}, interface {slot/port[subport] | port} -- {slot/port[subport] | port},...
interface {slot/ port[subport] | port} -- {slot/ port[subport] | port}, interface {slot/ port[subport] | port} -- {slot/ port[subport] | port},...
Enter interface range and one of the interfaces and then slot/port[/subport], port-channel, or VLAN number information. Select the range of interfaces for bulk configuration. You can enter up to six comma-separated ranges. Spaces are not required between the commas. The ranges can include VLANs, port-channels, and physical interfaces.
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
For a Tunnel interface, enter the keyword Tunnel then a number from 1 to 16383.
Defaults
None
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P2) 9.8(0.0P5) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.5.1.0 8.2.1.0
8.1.1.0 7.6.1.0 7.5.1.0 6.1.1.0
Introduced on the S4038-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for 4-port 40G line cards on ExaScale. Added support for 4093 VLANs on E-Series ExaScale. Prior releases supported 2094. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
When creating an interface range, interfaces appear in the order they are entered; they are not sorted. The command verifies that interfaces are present (physical) or configured (logical).
Important Points to Remember:
636 Interfaces
Example (Bulk)
Bulk configuration is created if at least one interface is valid. Non-existing interfaces are excluded from the bulk configuration with a warning message. The interface range prompt includes interface types with slot/port[/subport] information for
valid interfaces. The prompt allows for a maximum of 32 characters. If the bulk configuration exceeds 32 characters, it is represented by an ellipsis ( ... ). When the interface range prompt has multiple port ranges, the smaller port range is excluded from the prompt. If overlapping port ranges are specified, the port range is extended to the smallest start port and the biggest end port.
Dell(conf)#interface range tengigbitethernet 1/1 - 1/11, fortyGigbE 3/50, tengigbitethernet 3/10 % Warning: Non-existing ports (not configured) are ignored by interface-range
Example (Multiple Ports)
Dell(conf)#interface range tengigabitethernet 2/10 - 2/23, tengigabitethernet 2/12 - 2/17 Dell(conf-if-range-te-2/10-2/23)#
Example (Overlapping Ports)
Dell(conf)#interface range tengigabitethernet 2/3 - 2/11, tengigabitethernet 2/3 - 2/23 Dell(conf-if-range-te-2/3-2/23)#
Usage Information
Only VLAN and port-channel interfaces created using the interface vlan and interface portchannel commands can be used in the interface range command.
Use the show running-config command to display the VLAN and port-channel interfaces. VLAN or port-channel interfaces that are not displayed in the show running-config command cannot be used with the bulk configuration feature of the interface range command. You cannot create virtual interfaces (VLAN, Port-channel) using the interface range command.
NOTE: If a range has VLAN, physical and port-channel interfaces, only commands related to physical interfaces can be bulk configured. To configure commands specific to VLAN and port-channel only those respective interfaces should be configured in a particular range.
Example (Single Range)
This example shows a single range bulk configuration. Dell(config)# interface range tengigabitethernet 5/3 - 5/23 Dell(config-if-range-te-5/3-5/23)# no shutdown Dell(config-if-range-te-5/3-5/23)#
Example
This example shows how to use commas to add different interface types to the range enabling all
(Multiple Range) Tengigabit Ethernet interfaces in the range 5/1 to 5/23 and both Tengigabit Ethernet interfaces 1/1 and
1/2.
Dell(config-if)# interface range tengigabitethernet 5/1 - 5/23, tengigabitethernet 1/1 - 1/2 Dell(config-if-range-te-1/1-1/2,te-5/1-5/23)# no shutdown Dell(config-if-range-te-1/1-1/2,te-5/1-5/23)#
Example (Multiple Range)
This example shows how to use commas to add VLAN and port-channel interfaces to the range. Dell(config-if)# interface range tengigabitethernet 5/1 - 1/23, tengigabitethernet 1/1 � 1/2, Vlan 2�100, Port 1�25 Dell(config-if-range-te-1/1-1/2,te-5/1-5/23,vl-2-100,po-1-25)# no shutdown Dell(config-if-range)#
Related Commands
interface port-channel -- configures a port channel group.
Interfaces 637
interface vlan -- configures a VLAN interface. show config (from INTERFACE RANGE mode) -- shows the bulk configuration interfaces. show range -- shows the bulk configuration ranges. interface range macro (define) -- defines a macro for an interface-range.
interface range macro (define)
Defines a macro for an interface range and then saves the macro in the running configuration.
Syntax Parameters
define interface range macro name interface , interface , ...
name
interface, interface,...
Enter up to 16 characters for the macro name.
Enter the keywords interface range and one of the interfaces -- slot/port[/ subport], port-channel, or VLAN number. Select the range of interfaces for bulk configuration. You can enter up to six comma-separated ranges. Spaces are not required between the commas. Comma-separated ranges can include VLANs, portchannels, and physical interfaces.
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Tunnel interface, enter the keyword tunnel then the tunnel ID. The range is from 1 to 16383.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.5.1.0 8.2.1.0
8.1.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for 4-port 40G line cards on ExaScale. Added support for 4093 VLANs on E-Series ExaScale. Prior releases supported 2094. Introduced on the E-Series ExaScale. Introduced on the S-Series.
638 Interfaces
Version
7.5.1.0
pre-Version 6.1.1.0
Description
Introduced on the C-Series. Introduced on the E-Series.
Example (Single This example shows how to define an interface range macro named test. Execute the show running-
Range)
config command to display the macro definition.
Dell(config)# define interface-range test tengigabitethernet 1/1 - 1/3, tengigabitethernet 5/1 - 5/47, tengigabitethernet 3/1 - 3/8 Dell# show running-config | grep define define interface-range test tengigabitethernet 1/1 - 1/3, tengigabitethernet 5/1 - 5/47, tengigabitethernet 3/1 - 3/8 Dell(config)#interface range macro test Dell(config-if-range-1/1-1/3,te-5/1-5/47,te-3/1-3/8)#
Related Commands
interface range � configures a range of command (bulk configuration) interface range macro name � runs an interface range macro.
interface range macro name
Run the interface-range macro to automatically configure the pre-defined range of interfaces.
Syntax Parameters
interface range macro name
name
Enter the name of an existing macro.
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 6.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced
Interfaces 639
Example (Single Range)
This example shows the macro named test that was defined earlier. Dell(config)#interface range macro test Dell(config-if-range-te-1/1-3,te-5/1-47,te-13/1-89)# Dell
Related Commands
interface range -- configures a range of command (bulk configuration). interface range macro (define) -- defines a macro for an interface range (bulk configuration).
interface vlan
Configure a VLAN. You can configure up to 4094 VLANs.
Syntax Parameters
interface vlan vlan-id [of-instance{of-id}]
vlan-id
of-instance{ofid}
Enter a number as the VLAN Identifier. The range is from 1 to 4094.
Enter the keyword of-instance then the OpenFlow instance ID to add the VLAN to the specified OpenFlow instance. The range is from 1 to 8.
NOTE: Associate the OpenFlow instance with the VLAN when the VLAN is created. An existing VLAN cannot be associated with an OpenFlow instance.
Defaults
Not configured, except for the Default VLAN, which is configured as VLAN 1.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.0.2.0 9.1.(0.0) 8.3.19.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4810; added support for OpenFlow. Introduced on the S4820T. Introduced on the Z9000.
Usage Information
Example (Single Range)
For more information about VLANs and the commands to configure them, refer to the Virtual LAN (VLAN) Commands section of the Layer 2 chapter.
FTP, TFTP, and SNMP operations are not supported on a VLAN. MAC ACLs are not supported in VLANs. IP ACLs are supported. For more information, refer to the Access Control Lists (ACL) chapter.
The following features are not supported on VLANs associated with an OpenFlow instance:
IPv4 IPv6 MTU
If OpenFlow VLANs are configured on the switch, spanning-tree protocols cannot be enabled simultaneously.
Dell(conf)#int vlan 3 Dell(conf-if-vl-3)#
640 Interfaces
Related Commands
interface -- configures a physical interface. interface loopback -- configures a loopback interface. interface null -- configures a null interface. interface port-channel -- configures a port channel group. show vlan -- displays the current VLAN configuration on the switch. shutdown -- disables/enables the VLAN. tagged -- adds a Layer 2 interface to a VLAN as a tagged interface. untagged -- adds a Layer 2 interface to a VLAN as an untagged interface.
intf-type cr4 autoneg
Set the interface type as CR4 with auto-negotiation enabled. To set the interface type as CR4 with autonegotiation disabled, use the no intf-type cr4 autoneg command.
Syntax Defaults
intf-type cr4 autoneg Enabled
Command Modes INTERFACE
Command History
Version
9.8(0.0)
9.7(0.0)
9.0.2.0
8.3.19.0
8.3.11.1
8.3.7.0
8.3.16.1
Description
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the MXL 10/40GbE Switch IO Module.
Usage Information
Related Commands
If you configure the interface type as CR4 with auto-negotiation enabled. Many DAC cable link issues are resolved by setting the interface type as CR4.
If the CR4 optic fails to come up, use the autoneg option.
Interfaces -- configures a physical interface. interface loopback -- configures a loopback interface. interface null -- configures a null interface. interface port-channel -- configures a port channel group.
keepalive
Send keepalive packets periodically to keep an interface alive when it is not transmitting data.
Syntax
keepalive To stop sending keepalive packets, use the no keepalive command.
Defaults
Enabled.
Command Modes INTERFACE
Interfaces 641
Command History
Usage Information
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.2 7.6.1.0 7.5.1.0 pre-Version 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
When you configure keepalive, the system sends a self-addressed packet out of the configured interface to verify that the far end of a WAN link is up. When you configure no keepalive, the system does not send keepalive packets and so the local end of a WAN link remains up even if the remote end is down.
negotiation auto
Enable auto-negotiation on an interface.
Syntax
negotiation auto To disable auto-negotiation, use the no negotiation auto command.
Defaults
Enabled.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.0 8.3.7.0 8.1.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series.
642 Interfaces
Usage Information
Example (Master/Slave)
Version
7.5.1.0 pre-6.2.1.0
Description
Introduced on the C-Series. Introduced on the E-Series.
This command is supported on C-Series, S-Series, and E-Series (TeraScale and ExaScale) 10/100/1000 Base-T Ethernet interfaces.
The no negotiation auto command is only available if you first manually set the speed of a port to 10Mbits or 100Mbits.
The negotiation auto command provides a mode option for configuring an individual port to forcedmaster/forced slave after you enable auto-negotiation.
NOTE: The mode option is not available on non-10/100/1000 Base-T Ethernet line cards.
If you do not use the mode option, the default setting is slave. If you do not configure forced-master or forced-slave on a port, the port negotiates to either a master or a slave state. Port status is one of the following:
Forced-master Force-slave Master Slave Auto-neg Error -- typically indicates that both ends of the node are configured with forced-master or
forced-slave.
CAUTION: Ensure that one end of your node is configured as forced-master and one is configured as forced-slave. If both are configured the same (that is, forced-master or forced-slave), the show interfaces command flaps between an auto-neg-error and forced-master/slave states.
You can display master/slave settings with the show interfaces command.
Dell(conf)# interface tengigabitethernet 1/1 Dell(conf-if)#neg auto Dell(conf-if-autoneg)# ?
end
Exit from configuration mode
exit
Exit from autoneg configuration mode
mode
Specify autoneg mode
no
Negate a command or set its defaults
show
Show autoneg configuration information
Dell(conf-if-autoneg)#mode ?
forced-master Force port to master mode
forced-slave Force port to slave mode
Dell(conf-if-autoneg)#
Example (Configured)
Dell#show interfaces configured TenGigabitEthernet 13/18 is up, line protocol is up Hardware is Force10Eth, address is 00:01:e8:05:f7:fc
Current address is 00:01:e8:05:f7:fc Interface index is 474791997 Internet address is 1.1.1.1/24 MTU 1554 bytes, IP MTU 1500 bytes LineSpeed 1000 Mbit, Mode full duplex, Master ARP type: ARPA, ARP Timeout 04:00:00 Last clearing of "show interfaces" counters 00:12:42 Queueing strategy: fifo Input Statistics: ...
User Information Both sides of the link must have auto-negotiation enabled or disabled for the link to come up.
Interfaces 643
The following details the possible speed and auto-negotiation combinations for a line between two 10/100/1000 Base-T Ethernet interfaces.
Port 0
auto-negotiation enabled* speed 1000 or auto auto-negotiation enabled speed 100 auto-negotiation disabled speed 100 auto-negotiation disabled speed 100 auto-negotiation enabled* speed 1000 or auto
Port 1
auto-negotiation enabled* speed 1000 or auto auto-negotiation enabled speed 100 auto-negotiation disabled speed 100 auto-negotiation enabled speed 100 auto-negotiation disabled speed 100
Link Status Between Port 1 and Port 2
Up at 1000 Mb/s Up at 100 Mb/s Up at 100 Mb/s Down Down
* You cannot disable auto-negotiation when the speed is set to 1000 or auto.
monitor interface
Monitor counters on a single interface or all interfaces. The screen is refreshed every five seconds and the CLI prompt disappears.
Syntax
monitor interface [interface] To disable monitoring and return to the CLI prompt, press the q key.
Parameters
interface
(OPTIONAL) Enter the following keywords and slot/port[/subport] or number information:
For the Management interface on the stack-unit, enter the keyword ManagementEthernet then the slot/port information. The slot range is from 1 to 11. The port range is 1.
For a Tunnel interface, enter the keyword tunnel then the slot/port. The range is from 1 to 16383.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
644 Interfaces
Version
9.8(0.0P2) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.5.1.0 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 pre-Version 6.2.1.0
Description
Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
In the Example, the delta column displays changes since the last screen refresh. The following are the monitor command menu options.
Key
Description
systest-3 monitor time
time m
c b r
l
a
T t q
Displays the host name assigned to the system.
Displays the amount of time since the monitor interface command was entered.
Displays the amount of time the chassis is up (since last reboot).
Change the view from a single interface to all interfaces on the line card or visaversa.
Refresh the view.
Change the counters displayed from Packets on the interface to Bytes.
Change the [delta] column from change in the number of packets/bytes in the last interval to rate per second.
Change the view to the next interface on the line card, or if in line card mode, the next line card in the chassis.
Change the view to the previous interface on the line card, or if in line card mode, the previous line card in the chassis.
Increase the screen refresh rate.
Decrease the screen refresh rate.
Return to the CLI prompt.
Example (Single Interface)
Example (All Interfaces)
systest-3 Monitor time: 00:01:31 Refresh Intvl.: 2s Time: 03:54:14
Interface [delta]
Te 1/1 Te 1/2 Te 1/3 Te 1/4 2661385 Te 1/5 Te 1/6
Link Down Up Up Up Up Up
In Packets [delta] Out Packets
0
0
61512
52
63086
20
14697471418 2661481
0 66160 9405888 13392989657
3759 4070
3 161959604
3
8680346
0 42 24 832816
5
Interfaces 645
Te 1/7 Up
61934
34 138734357
72
Te 1/8 Up
61427
1
59960
1
Te 1/9 Up
62039
53 104239232
3
Te 1/10 Up
17740044091
372 7373849244
79
Te 1/11 Up
18182889225
44 7184747584
138
Te 1/12 Up
18182682056
0
3682
1
Te 1/13 Up
18182681434
43 6592378911
144
Te 1/14 Up
61349
55
86281941
15
Te 1/15 Up
59808
58
62060
27
Te 1/16 Up
59889
1
61616
1
Te 1/17 Up
0
0
14950126
81293
Te 1/18 Up
0
0
0
0
Te 1/19 Down
0
0
0
0
Te 1/20 Up
62734
54
62766
18
Te 1/21 Up
60198
9
200899
9
Te 1/22 Up
17304741100 3157554 10102508511
1114221
Te 1/23 Up
17304769659 3139507 7133354895
523329
m - Change mode
c - Clear screen
b - Display bytes
r - Display pkts/bytes per sec
l - Page up
a - Page down
mtu
Set the link maximum transmission unit (MTU) (frame size) for an Ethernet interface.
Syntax Parameters
mtu value To return to the default MTU value, use the no mtu command.
value
Enter a maximum frame size in bytes. The default is 1554.
Defaults
1554
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.5.1.0 pre-Version 6.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the C-Series. Introduced on the E-Series.
646 Interfaces
Usage Information
If the packet includes a Layer 2 header, the difference between the link MTU and IP MTU (ip mtu command) must be enough bytes to include the Layer 2 header.
When you enter the no mtu command, Dell Networking OS reduces the IP MTU value to 1536 bytes.
Link MTU and IP MTU considerations for port channels and VLANs are as follows.
port channels:
All members must have the same link MTU value and the same IP MTU value. The port channel link MTU and IP MTU must be less than or equal to the link MTU and IP MTU values
configured on the channel members. For example, if the members have a link MTU of 2100 and an IP MTU 2000, the port channel's MTU values cannot be higher than 2100 for link MTU or 2000 bytes for IP MTU.
VLANs:
All members of a VLAN must have same IP MTU value. Members can have different Link MTU values. Tagged members must have a link MTU 4 bytes higher
than untagged members to account for the packet tag. The VLAN link MTU and IP MTU must be less than or equal to the link MTU and IP MTU values
configured on the VLAN members. For example, the VLAN contains tagged members with Link MTU of 1522 and IP MTU of 1500 and untagged members with Link MTU of 1518 and IP MTU of 1500. The VLAN's Link MTU cannot be higher than 1518 bytes and its IP MTU cannot be higher than 1500 bytes.
The following shows the difference between Link MTU and IP MTU.
Layer 2 Overhead
Link MTU and IP MTU Delta
Ethernet (untagged)
18 bytes
VLAN Tag
22 bytes
Untagged Packet 22 bytes with VLAN-Stack Header
Tagged Packet 26 bytes with VLAN-Stack Header
portmode hybrid
To accept both tagged and untagged frames, set a physical port or port-channel. A port configured this way is identified as a hybrid port in report displays.
Syntax
portmode hybrid
To return a port to accept either tagged or untagged frames (non-hybrid), use the no portmode hybrid command.
Defaults
non-hybrid
Command Modes INTERFACE (conf-if-interface-slot/port[/subport])
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2)
Introduced on the S4048-ON. Introduced on the S3048-ON.
Interfaces 647
Usage Information
Example
Version
9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0
Description
Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series.
The following describes the interface command shown in the following example. This example sets a port as hybrid, makes the port a tagged member of VLAN 20, and an untagged member of VLAN 10, which becomes the native VLAN of the port. The port now accepts:
untagged frames and classify them as VLAN 10 frames VLAN 20 tagged frames
The following describes the do show interfaces command shown in the following example. This example shows output with "Hybrid" as the newly added value for 802.1QTagged. The options for this field are:
True -- port is tagged False -- port is untagged Hybrid -- port accepts both tagged and untagged frames
The following describes the interface vlan command shown in the following example. This example shows unconfiguration of the hybrid port using the no portmode hybrid command.
NOTE: Remove all other configurations on the port before you can remove the hybrid configuration from the port.
Dell(conf)#interface tengigabitethernet 7/1 Dell(conf-if-gi-7/0)#portmode hybrid Dell(conf-if-gi-7/0)#interface vlan 10 Dell(conf-if-vl-10)#untagged tengigabitethernet 7/1 Dell(conf-if-vl-10)#interface vlan 20 Dell(conf-if-vl-20)#tagged tengigabitethernet 7/1 Dell(conf-if-vl-20)#
Example
Dell(conf-if-vl-20)#do show interfaces switchport Name: TenGigabitEthernet 7/1 802.1QTagged: Hybrid Vlan membership: Vlan 10, Vlan 20 Native VlanId: 10 Dell(conf-if-vl-20)#
Example (Vlan)
Dell(conf-if-vl-20)#interface vlan 10 Dell(conf-if-vl-10)#no untagged tengigabitethernet 7/1 Dell(conf-if-vl-10)#interface vlan 20 Dell(conf-if-vl-20)#no tagged tengigabitethernet 7/1 Dell(conf-if-vl-20)#interface tengigabitethernet 7/1 Dell(conf-if-gi-7/0)#no portmode hybrid Dell(conf-if-vl-20)#
648 Interfaces
rate-interval
Configure the traffic sampling interval on the selected interface.
Syntax Parameters
rate-interval seconds
seconds
Enter the number of seconds for which to collect traffic data. The range is from 5 to 299 seconds.
NOTE: Because polling occurs every 15 seconds, the number of seconds
designated here rounds to the multiple of 15 seconds lower than the entered
value. For example, if 44 seconds is designated, it rounds to 30; 45 to 59
seconds rounds to 45.
Defaults
299 seconds
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced
Usage Information
Related Commands
The output of the show interfaces command displays the configured rate interval, along with the collected traffic data.
show interfaces -- displays information on physical and virtual interfaces.
show config
Display the interface configuration.
Syntax
show config
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Interfaces 649
Example
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 pre-Version 6.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Dell(conf-if-fo-1/49)#show config ! interface fortyGigE 1/49
no ip address mtu 12000 switchport no shutdown Dell(conf-if-fo-1/49)# Dell(conf-if-te-1/49)#show config ! interface Tengigabitethernet 1/49 no ip address mtu 12000 switchport no shutdown Dell(conf-if-te-1/49)#
show config (from INTERFACE RANGE mode)
Display the bulk configured interfaces (interface range).
Syntax
show config
Command Modes CONFIGURATION INTERFACE (conf-if-range)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500.
650 Interfaces
Example
Version
9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 6.1.1.0
Description
Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Dell(conf)#interface range tengigabitethernet 1/1 - 2 Dell(conf-if-range-gi-1/1-2)#show config ! interface TenGigabitEthernet 1/1
no ip address switchport no shutdown ! interface TenGigabitEthernet 1/2 no ip address switchport no shutdown Dell(conf-if-range-gi-1/1-2)#
show interfaces
Display information on a specific physical interface or virtual interface.
Syntax Parameters
show interfaces interface-type slot/port//[subport]
interface
Enter one of the following keywords and slot/port[/subport] or number information:
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For stack-units, enter the keywords stack-unit then the slot/port information.
For a Null interface, enter the keyword null then the Null interface number. For a port channel interface, enter the keywords port-channel then a
number. The range is from 1 to 128. For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet then the slot/port[/subport] information. For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the
slot/port information. For a VLAN interface, enter the keyword vlan then a number from 1 to 4094. For a tunnel interface, enter the keyword tunnel then the tunnel ID. The
range is from 1 to 16383.
NOTE: This command also enables you to view information corresponding to a
range of ports. However, for Open Networking (ON) platforms the notation for
specifying port range in the command is different from how you specify in non-
ON platforms.
Interfaces 651
For non-ON platforms, you can specify multiple ports as slot/port-range. For example, if you want to display information corresponding to all ports between 1 and 4, specify the port range as show interfaces interfacetype 1/1 - 4.
For ON platforms, you can specify multiple ports as slot/port/[subport] - slot/port/[subport]. For example, if you want to display information corresponding to all ports between 1 and 4, specify the port range as show interfaces interface-type 1/1/1 - 1/1/4.
Command Modes EXEC EXEC Privilege
Command History
Version
9.9(0.0)
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.2(0.2) 9.1(0.0)
8.3.12.1 8.3.11.4 8.3.11.1 8.5.1.0 8.3.7.0 8.2.1.2 8.2.1.0
8.1.1.0 7.8.1.0 7.6.1.0 7.5.1.0 6.4.1.0 6.3.1.0
Description
Added support to display the interface configurations corresponding to a range of ports. Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Added support for the tunnel interface type. Updated Management Ethernet output to include two global IPv6 addresses on S4810 and Z9000 and added output example showing OpenFlow instance ID. Updated command output to support multiple IPv6 addresses on S4810. Output expanded to support eSR4 optics in Z9000. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Included SFP and SFP+ optics power detail in the E-Series and C-Series output. Added support for 4093 VLANs on the E-Series ExaScale. Prior releases supported 2094. Introduced on the E-Series ExaScale. Output expanded to include SFP+ media on the C-Series. Introduced on the S Series. Introduced on the C-Series. Changed the organization of the display output. Added the Pluggable Media Type field in the E-Series TeraScale output.
Usage Information
Use the show interfaces command for details on a specific interface.
NOTE: In the CLI output, the power value is rounded to a 3-digit value. For receive/transmit power that is less than 0.000, an snmp query returns the corresponding dbm value even though the CLI displays as 0.000.
NOTE: After the counters are cleared, the line-rate continues to increase until it reaches the maximum line rate. When the maximum line rate is reached, there is no change in the line-rate.
User Information The following table describes the show interfaces command shown in the 10G (TeraScale) Example.
652 Interfaces
Line
Description
TenGigabitEther net 1/1...
Hardware is...
Pluggable media present...
Interface type, slot/port[/subport], and administrative and line protocol status.
Interface hardware information, assigned MAC address, and current address.
Present pluggable media wavelength, type, and rate. The error scenarios are:
Wavelength, Non-qualified -- Dell Force10 ID is not present, but wavelength information is available from XFP or SFP serial data
Wavelength, F10 unknown -- Dell Force10 ID is present, but not able to determine the optics type
Unknown, Non-qualified -- if wavelength is reading error, and F10 ID is not present
Dell Networking allows unsupported SFP and XFP transceivers to be used, but Dell Networking OS might not be able to retrieve some data about them. In that case, typically when the output of this field is "Pluggable media present, Media type is unknown", the Medium and the XFP/SFP receive power reading data might not be present in the output.
Interface index... Displays the interface index number the SNMP uses to identify the interface.
Internet address...
States whether an IP address is assigned to the interface. If an IP address is assigned, that address is displayed.
MTU 1554...
Displays link and IP MTU information.
LineSpeed
Displays the interface's line speed, duplex mode, and negotiation mode.
ARP type:...
Displays the ARP type and the ARP timeout value for the interface.
Last clearing... Displays the time when the show interfaces counters where cleared.
Queuing strategy...
States the packet queuing strategy. FIFO means first in first out.
Input Statistics: Displays all the input statistics including:
Number of packets and bytes into the interface Number of packets with VLAN tagged headers Packet size and the number of those packets inbound to the interface Number of Multicast and Broadcast packets:
Multicasts = number of MAC multicast packets Broadcasts = number of MAC broadcast packets Number of runts, giants, and throttles packets:
runts = number of packets that are less than 64B giants = packets that are greater than the MTU size throttles = packets containing PAUSE frames Number of CRC, overrun, and discarded packets:
CRC = packets with CRC/FCS errors
overrun = number of packets discarded due to FIFO overrun conditions
discarded = the sum of runts, giants, CRC, and overrun packets discarded without any processing
Output Statistics:
Displays output statistics sent out of the interface including:
Number of packets, bytes, and underruns out of the interface Packet size and the number of the packets outbound to the interface Number of Multicast, Broadcast, and Unicast packets:
Multicasts = number of MAC multicast packets Broadcasts = number of MAC broadcast packets Unicasts = number of MAC unicast packets Number of VLANs, throttles, discards, and collisions:
Interfaces 653
Example
Usage Information Example (1G SFP)
Line
Rate information... Time since...
Description
Vlans = number of VLAN tagged packets throttles = packets containing PAUSE frames discarded = number of packets discarded without any processing collisions = number of packet collisions wred=count both packets discarded in the MAC and in the hardware-based
queues
Estimate of the input and output traffic rate over a designated interval (30 to 299 seconds). Traffic rate is displayed in bits, packets per second, and percent of line rate.
Elapsed time since the last interface status change (hh:mm:ss format).
Dell#show interfaces TenGigabitEthernet 2/1 is down, line protocol is down Hardware is DellForce10Eth, address is 00:01:e8:8b:3d:e7 Current address is 00:01:e8:8b:3d:e7 Pluggable media present, Media type is unknown Wavelength unknown Interface index is 100992002 Internet address is not set MTU 1554 bytes, IP MTU 1500 bytes LineSpeed auto Flowcontrol rx on tx off ARP type: ARPA, ARP Timeout 04:00:00 Last clearing of "show interface" counters 3d17h53m Queueing strategy: fifo Input Statistics:
0 packets, 0 bytes 0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts 0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts 0 Multicasts, 0 Broadcasts 0 runts, 0 giants, 0 throttles 0 CRC, 0 overrun, 0 discarded Output Statistics: 0 packets, 0 bytes, 0 underruns 0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts 0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts 0 Multicasts, 0 Broadcasts, 0 Unicasts 0 throttles, 0 discarded, 0 collisions, 0 wreddrops Rate info (interval 299 seconds): Input 00.00 Mbits/sec, 0 packets/sec, 0.00% of line-rate Output 00.00 Mbits/sec, 0 packets/sec, 0.00% of line-rate Time since last interface status change: 3d17h51m
The Management port is enabled by default (no shutdown). If necessary, use the ip address command to assign an IP address to the Management port. If two RPMs are installed in your system, use the show redundancy command to display which RPM is the Primary RPM.
Dell#show interfaces tengigabitethernet 2/1 TenGigabitEthernet 2/1 is up, line protocol is down Hardware is Force10Eth, address is 00:01:e8:41:77:95
Current address is 00:01:e8:41:77:95 Pluggable media present, SFP type is 1000BASE-SX
Wavelength is 850nm Interface index is 100974648 Port will not be disabled on partial SFM failure Internet address is not set MTU 1554 bytes, IP MTU 1500 bytes LineSpeed 1000 Mbit Flowcontrol rx on tx on ARP type: ARPA, ARP Timeout 04:00:00 Last clearing of "show interface" counters 1w0d5h Queueing strategy: fifo Input Statistics:
654 Interfaces
0 packets, 0 bytes 0 Vlans 0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts 0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts 0 Multicasts, 0 Broadcasts 0 runts, 0 giants, 0 throttles 0 CRC, 0 overrun, 0 discarded Output Statistics: 0 packets, 0 bytes, 0 underruns 0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts 0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts 0 Multicasts, 0 Broadcasts, 0 Unicasts 0 Vlans, 0 throttles, 0 discarded, 0 collisions, 0 wreddrops Rate info (interval 299 seconds): Input 00.00 Mbits/sec, 0 packets/sec, 0.00% of line-rate Output 00.00 Mbits/sec, 0 packets/sec,0.00% of line-rate Time since last interface status change: 1w0d5h Dell#
Example (Management Ethernet)
Dell#show interfaces managementethernet 1/1 ManagementEthernet 1/1 is up, line protocol is up Hardware is Force10Eth, address is 00:01:e8:0b:a9:4c
Current address is 00:01:e8:0b:a9:4c Pluggable media not present Interface index is 503595208 Internet address is 10.11.201.5/16 Link local IPv6 address: fe80::201:e8ff:fe0b:a94c/64 Global IPv6 address: 2222::5/64 Virtual-IP is not set Virtual-IP IPv6 address is not set MTU 1554 bytes, IP MTU 1500 bytes LineSpeed 10 Mbit, Mode half duplex ARP type: ARPA, ARP Timeout 04:00:00 Last clearing of "show interface" counters 04:01:08 Queueing strategy: fifo
Input 943 packets, 78347 bytes, 190 multicast Received 0 errors, 0 discarded Output 459 packets, 102388 bytes, 15 multicast Output 0 errors, 0 invalid protocol Time since last interface status change: 00:03:09
Example (Management Ethernet, two IPv6 addresses)
Dell#show interfaces managementethernet 1/1 ManagementEthernet 1/1 is up, line protocol is up Hardware is DellForce10Eth, address is 00:01:e8:a0:bf:f3 Current address is 00:01:e8:a0:bf:f3 Pluggable media not present Interface index is 302006472 Internet address is 10.16.130.5/16 Link local IPv6 address: fe80::201:e8ff:fea0:bff3/64 Global IPv6 address: 1::1/ Global IPv6 address: 2::1/64 Virtual-IP is not set Virtual-IP IPv6 address is not set MTU 1554 bytes, IP MTU 1500 bytes LineSpeed 1000 Mbit, Mode full duplex ARP type: ARPA, ARP Timeout 04:00:00 Last clearing of "show interface" counters 00:06:14 Queueing strategy: fifo
Interfaces 655
Example (OpenFlow instance)
Related Commands
Input 791 packets, 62913 bytes, 775 multicast Received 0 errors, 0 discarded Output 21 packets, 3300 bytes, 20 multicast Output 0 errors, 0 invalid protocol Time since last interface status change: 00:06:03
Dell#show interfaces vlan 6 Vlan 6 is down, line protocol is down Address is 00:01:e8:8a:e1:8c, Current address is 00:01:e8:8a:e1:8c Interface index is 1107525638 of-instance: 2 Internet address is not set MTU 1554 bytes, IP MTU 1500 bytes LineSpeed auto ARP type: ARPA, ARP Timeout 04:00:00 Last clearing of "show interface" counters 00:05:12 Queueing strategy: fifo Time since last interface status change: 00:05:12
show interfaces configured � displays any interface with a non-default configuration. show inventory (S-Series and Z-Series) � displays the S-Series and Z-Series switch types, components (including media), Dell Networking OS version including hardware identification numbers, and configured protocols. show range � displays all interfaces configured using the interface range command.
show interfaces configured
Display any interface with a non-default configuration.
Syntax
show interfaces configured
Command Modes EXEC EXEC Privilege
Command History
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series.
656 Interfaces
Example
Related Commands
Version
7.5.1.0 6.4.1.0
Description
Introduced on the C-Series. Changed the organization of the display output.
Dell#show interfaces configured TenGigabitEthernet 13/18 is up, line protocol is up Hardware is Force10Eth, address is 00:01:e8:05:f7:fc
Current address is 00:01:e8:05:f7:fc Interface index is 474791997 Internet address is 1.1.1.1/24 MTU 1554 bytes, IP MTU 1500 bytes LineSpeed 1000 Mbit, Mode full duplex, Master ARP type: ARPA, ARP Timeout 04:00:00 Last clearing of "show interfaces" counters 00:12:42 Queueing strategy: fifo Input Statistics:
10 packets, 10000 bytes 0 Vlans 0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts 0 over 255-byte pkts, 10 over 511-byte pkts, 0 over 1023-byte pkts 0 Multicasts, 0 Broadcasts 0 runts, 0 giants, 0 throttles 0 CRC, 0 overrun, 0 discarded Output Statistics: 1 packets, 64 bytes, 0 underruns 1 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts 0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts 0 Multicasts, 1 Broadcasts, 0 Unicasts 0 Vlans, 0 throttles, 0 discarded, 0 collisions Rate info (interval 299 seconds): Input 00.00 Mbits/sec, 0 packets/sec, 0.00% of line-rate Output 00.00 Mbits/sec, 0 packets/sec, 0.00% of line-rate Time since last interface status change: 00:04:59 Dell# show interfaces -- displays information on a specific physical interface or virtual interface.
show interfaces dampening
Display interface dampening information.
Syntax Parameters
show interfaces dampening [[interface] [summary] [detail]]
interface
(Optional) Enter one of the following keywords and slot/port[/subport] or number information:
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
NOTE: This command also enables you to view information corresponding to a range of ports. However, for Open Networking (ON) platforms the notation for specifying port range in the command is different from how you specify in nonON platforms.
Interfaces 657
summary detail
For non-ON platforms, you can specify multiple ports as slot/port-range. For example, if you want to display information corresponding to all ports between 1 and 4, specify the port range as show interfaces interfacetype 1/1 - 4.
For ON platforms, you can specify multiple ports as slot/port/[subport] - slot/port/[subport]. For example, if you want to display information corresponding to all ports between 1 and 4, specify the port range as show interfaces interface-type 1/1/1 - 1/1/4.
(OPTIONAL) Enter the keyword summary to display the current summary of dampening data, including the number of interfaces configured and the number of interfaces suppressed, if any.
(OPTIONAL) Enter the keyword detail to display detailed interface dampening data.
Defaults
none
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.9(0.0)
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.5.1.0 8.1.1.0 7.6.1.0 7.5.1.0 7.4.1.0
Added support to display the interface configurations corresponding to a range of ports. Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for 4-port 40G line cards on ExaScale. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced
Example
Dell#show interfaces dampening
Interface Supp Flaps Penalty Half-Life Reuse Suppress Max-Sup
State
Te 3/2
Up
0
0
20
800 4500
120
Te 3/10 Up
0
0
5
750 2500
20
Dell#
Related Commands
dampening -- configures dampening on an interface. show interfaces -- displays information on a specific physical interface or virtual interface. show interfaces configured -- displays any interface with a non-default configuration.
658 Interfaces
show interfaces phy
Display auto-negotiation and link partner information.
Syntax Parameters
show interfaces gigabitethernet slot/port phy
tengigabitethern et
Enter the keyword tengigabitethernet then the slot or port information. NOTE: This command also enables you to view information corresponding to a range of ports. However, for Open Networking (ON) platforms the notation for specifying port range in the command is different from how you specify in nonON platforms.
For non-ON platforms, you can specify multiple ports as slot/port-range. For example, if you want to display information corresponding to all ports between 1 and 4, specify the port range as show interfaces interfacetype 1/1 - 4.
For ON platforms, you can specify multiple ports as slot/port/[subport] - slot/port/[subport]. For example, if you want to display information corresponding to all ports between 1 and 4, specify the port range as show interfaces interface-type 1/1/1 - 1/1/4.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.9(0.0)
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 6.5.4.0
Added support to display the interface configurations corresponding to a range of ports. Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the C-Series and S-Series. Introduced on the E-Series.
Usage Information
The following describes the show interfaces gigabitethernet command following example.
Mode Control Mode Status
AutoNegotiation Advertise
Indicates if auto negotiation is enabled. If so, indicates the selected speed and duplex.
Displays auto negotiation fault information. When the interface completes auto negotiation successfully, the autoNegComplete field and the linkstatus field read "True."
Displays the control words the local interface advertises during negotiation. Duplex is either half or full. Asym- and Sym Pause is the types of flow control the local interface supports.
Interfaces 659
Example
AutoNegotiation Displays the control words the remote interface advertises during negotiation.
Remote Partner's Duplex is either half or full. Asym- and Sym Pause is the types of flow control the
Ability
remote interface supports.
AutoNegotiation Expansion
ParallelDetectionFault is the handshaking scheme in which the link partner continuously transmit an "idle" data packet using the Fast Ethernet MLT-3 waveform. Equipment that does not support auto-negotiation must be configured to exactly match the mode of operation as the link partner or else no link can be established.
1000Base-T Control
1000Base-T requires auto-negotiation. The IEEE Ethernet standard does not support setting a speed to 1000 Mbps with the speed command without autonegotiation. E-Series line cards support both full-duplex and half-duplex 1000BaseT.
Phy Specific Control
Values are:
0 - Manual MDI 1 - Manual MDIX 2 - N/A 3 - Auto MDI/MDIX
Phy Specific Status
Displays PHY-specific status information. Cable length represents a rough estimate in meters:
0 - < 50 meters 1 - 50 - 80 meters 2 - 80 - 110 meters 3 - 110 - 140 meters 4 - 140 meters
Link Status: Up or Down
Speed:
Auto 1000MB 100MB 10MB
Dell#show interfaces tengigabitethernet 1/1 phy
Mode Control:
SpeedSelection:
10b
AutoNeg:
ON
Loopback:
False
PowerDown:
False
Isolate:
False
DuplexMode:
Full
Mode Status:
AutoNegComplete:
False
RemoteFault:
False
LinkStatus:
False
JabberDetect:
False
AutoNegotation Advertise:
100MegFullDplx:
True
100MegHalfDplx:
True
10MegFullDplx:
False
10MegHalfDplx:
True
Asym Pause:
False
Sym Pause:
False
AutoNegotiation Remote Partner's Ability:
100MegFullDplx:
False
100MegHalfDplx:
False
10MegFullDplx:
False
10MegHalfDplx:
False
Asym Pause:
False
Sym Pause:
False
AutoNegotiation Expansion:
660 Interfaces
Related Commands
ParallelDetectionFault: False ... show interfaces -- displays information on a specific physical interface or virtual interface.
show interfaces stack-unit
Display information on all interfaces on a specific S-Series or Z-Series stack member.
Syntax Parameters
show interfaces stack-unit unit-number
unit-number
Enter the stack member number.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series.
Example
Dell#show interfaces stack-unit 1 TenGigabitEthernet 1/1 is down, line protocol is down Hardware is Force10Eth, address is 00:01:e8:4c:f2:82
Current address is 00:01:e8:4c:f2:82 Pluggable media not present Interface index is 34129154 Internet address is not set MTU 1554 bytes, IP MTU 1500 bytes LineSpeed auto, Mode auto ARP type: ARPA, ARP Timeout 04:00:00 Last clearing of "show interface" counters 3w0d17h Queueing strategy: fifo Input Statistics:
0 packets, 0 bytes 5144 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts 0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts 0 Multicasts, 0 Broadcasts 0 runts, 0 giants, 0 throttles 0 CRC, 0 overrun, 0 discarded Output Statistics: 0 packets, 0 bytes, 0 underruns 0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts 0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts 0 Multicasts, 0 Broadcasts, 0 Unicasts 0 throttles, 0 discarded, 0 collisions Rate info (interval 299 seconds):
Interfaces 661
Related Commands
Input 00.00 Mbits/sec, 0 packets/sec, 0.00% of line-rate Output 00.00 Mbits/sec, 0 packets/sec, 0.00% of line-rate Time since last interface status change: 3w0d17h TenGigabitEthernet 1/2 is down, line protocol is down Hardware is Force10Eth, address is 00:01:e8:4c:f2:83 Current address is 00:01:e8:4c:f2:83 !-------------output truncated ----------------!
show hardware stack-unit -- displays data plane and management plane input/output statistics. show interfaces -- displays information on a specific physical interface or virtual interface.
show interfaces status
To display status information on a specific interface only, display a summary of interface information or specify a stack-unit slot and interface.
Syntax Parameters
show interfaces [interface | stack--unit slot-number] status
interface
(OPTIONAL) Enter one of the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then the slot/port information. The range is from 0 to 16383.
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
NOTE: This command also enables you to view information corresponding to a
range of ports. However, for Open Networking (ON) platforms the notation for
specifying port range in the command is different from how you specify in non-
ON platforms.
For non-ON platforms, you can specify multiple ports as slot/port-range. For example, if you want to display information corresponding to all ports between 1 and 4, specify the port range as show interfaces interfacetype 1/1 - 4.
For ON platforms, you can specify multiple ports as slot/port/[subport] - slot/port/[subport]. For example, if you want to display information corresponding to all ports between 1 and 4, specify the port range as show interfaces interface-type 1/1/1 - 1/1/4.
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.9(0.0) 9.8(0.0P5)
Added support to display the interface configurations corresponding to a range of ports.
Introduced on the S4048-ON.
662 Interfaces
Example
Related Commands
Version
9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.5.1.0 8.1.1.0 7.6.1.0 7.5.1.0 7.5.1.0
Description
Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for 4-port 40G line cards on ExaScale. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Dell#show interfaces status
Port
Description Status
Te 1/1
Up
Te 1/2
Down
Te 1/3
Down
Te 1/4
Down
Te 1/5 DellPort
Up
Te 1/6
Down
Te 1/7
Down
Te 1/8
Up
Te 1/9
Down
Te 1/10
Down
Te 1/11
Down
Te 1/12
Down
Te 1/13
Down
Te 1/14
Down
Te 1/15
Down
Te 1/16
Down
Dell#
Speed
Duplex
1000 Mbit Auto
Auto
Auto
Auto
Auto
Auto
Auto
1000 Mbit Auto
Auto
Auto
Auto
Auto
1000 Mbit Auto
Auto
Auto
Auto
Auto
Auto
Auto
Auto
Auto
Auto
Auto
Auto
Auto
Auto
Auto
Auto
Auto
Vlan -1 1 -30-130 --1502,1504,1506-1508,1602 --------
show interfaces -- displays information on a specific physical interface or virtual interface.
show interfaces switchport
Display only virtual and physical interfaces in Layer 2 mode. This command displays the Layer 2 mode interfaces' IEEE 802.1Q tag status and VLAN membership.
Syntax Parameters
show interfaces switchport [interface | stack-unit unit-id ]
interface
(OPTIONAL) Enter one of the following keywords and slot/port[/subport] or number information:
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a backup interface for this interface, enter the keyword backup.
Interfaces 663
NOTE: This command also enables you to view information corresponding to a
range of ports.
For physical interfaces, you can specify multiple ports as slot/port-range. For example, if you want to display information corresponding to all ports between 1 and 4, specify the port range as show interfaces interfacetype 1/1 - 4.
For port�channel interfaces, you can specify multiple ports as port-range. For example, if you want to display information corresponding to all ports between 1 and 4, specify the port range as show interfaces port-- channel 1 - 4.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.9(0.0)
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.5.1.0 8.2.1.0 8.1.1.0 7.6.1.0 7.5.1.0 E-Series legacy command
Added support to display the interface configurations corresponding to a range of ports. Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for 4-port 40G line cards on ExaScale. Added support for 4093 VLANs on E-Series ExaScale. Introduced on the E-Series ExaScale. Support added for hybrid port/native VLAN, introduced on the S-Series. Introduced on the C-Series.
Usage Information
The following describes the show interfaces switchport command for the following example.
Items
Description
Name
Displays the interface's type, slot/port[/subport] number.
802.1QTagged
Displays whether if the VLAN tagged ("True"), untagged ("False"), or hybrid ("Hybrid"), which supports both untagged and tagged VLANs by port 13/0.
Vlan membership Lists the VLANs to which the interface is a member. Starting with Dell Networking OS version 7.6.1, this field can display native VLAN membership by port 13/0.
Example
Dell#show interfaces switchport Name: TenGigabitEthernet 13/1 802.1QTagged: Hybrid Vlan membership:
664 Interfaces
Related Commands
Vlan 2, Vlan 20 Native VlanId: 20 Name: TenGigabitEthernet 13/2 802.1QTagged: True Vlan membership: Vlan 2 Name: TenGigabitEthernet 13/3 802.1QTagged: True Vlan membership: Vlan 2 Name: TenGigabitEthernet 13/4 802.1QTagged: True Vlan membership: Vlan 2 --More--
interface -- configures a physical interface on the switch. show ip interface -- displays Layer 3 information about the interfaces. show interfaces -- displays information on a specific physical interface or virtual interface. show interfaces transceiver -- displays the physical status and operational status of an installed transceiver. The output also displays the transceiver's serial number.
show interfaces transceiver
Display the physical status and operational status of an installed transceiver. The output also displays the transceiver's serial number.
Syntax Parameters
show interfaces [tengigabitethernet slot/port[/subport - RANGE] | fortyGigE slot/port] transceiver
tengigabitethern For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet
et
then the slot/port[/subport] information.
fortyGigE
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/ port information.
NOTE: This command also enables you to view information corresponding to a
range of ports. However, for Open Networking (ON) platforms the notation for
specifying port range in the command is different from how you specify in non-
ON platforms.
For non-ON platforms, you can specify multiple ports as slot/port-range. For example, if you want to display information corresponding to all ports between 1 and 4, specify the port range as show interfaces interfacetype 1/1 - 4.
For ON platforms, you can specify multiple ports as slot/port/[subport] - slot/port/[subport]. For example, if you want to display information corresponding to all ports between 1 and 4, specify the port range as show interfaces interface-type 1/1/1 - 1/1/4.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Interfaces 665
Usage Information
Version
9.9(0.0)
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.5.1.0 8.1.1.0 7.8.1.0 7.7.1.0 7.6.1.0 6.5.4.0
Description
Added support to display the interface configurations corresponding to a range of ports. Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for 4-port 40G line cards on ExaScale. Introduced on the E-Series ExaScale. Output augmented with diagnostic data for pluggable media. Removed three fields in the output: Vendor Name, Vendor OUI, and Vendor PN. Introduced on the C-Series and S-Series. Introduced on the E-Series.
The following describes the show interfaces transceiver command shown in the following example.
Line
Description
Rx Power measurement type
Output depends on the vendor, typically either "Average" or "OMA" (Receiver optical modulation amplitude).
Temp High Alarm Factory-defined setting, typically in Centigrade. Value differs between SFPs and
threshold
SFP+.
Voltage High
Displays the interface index number used by SNMP to identify the interface.
Alarm threshold
Bias High Alarm threshold
TX Power High Alarm threshold
Factory-defined setting. Value can differ between SFP and SFP+. Factory-defined setting. Value can differ between SFP and SFP+.
RX Power High Factory-defined setting. Value can differ between SFP and SFP+. Alarm threshold
Temp Low Alarm threshold
Voltage Low Alarm threshold
Factory-defined setting. Value can differ between SFP and SFP+. Factory-defined setting. Value can differ between SFP and SFP+.
Bias Low Alarm threshold
Factory-defined setting. Value can differ between SFP and SFP+.
TX Power Low Alarm threshold
RX Power Low Alarm threshold
Factory-defined setting. Value can differ between SFP and SFP+. Factory-defined setting. Value can differ between SFP and SFP+.
Temp High Warning threshold
Factory-defined setting. Value can differ between SFP and SFP+.
666 Interfaces
Line
Description
Voltage High Warning threshold
Factory-defined setting. Value can differ between SFP and SFP+.
Bias High Warning threshold
Factory-defined setting. Value can differ between SFP and SFP+.
TX Power High Warning threshold
Factory-defined setting. Value can differ between SFP and SFP+.
RX Power High Warning threshold
Factory-defined setting. Value can differ between SFP and SFP+.
Temp Low Warning threshold
Factory-defined setting. Value can differ between SFP and SFP+.
Voltage Low Warning threshold
Factory-defined setting. Value can differ between SFP and SFP+.
Bias Low Warning Factory-defined setting. Value can differ between SFP and SFP+. threshold
TX Power Low Warning threshold
Factory-defined setting. Value can differ between SFP and SFP+.
Power Low Warning threshold
Factory-defined setting. Value can differ between SFP and SFP+.
Temperature
Current temperature of the SFPs. If this temperature crosses Temp High alarm/ warning thresholds, the temperature high alarm/warning flag is set to true.
Voltage
Current voltage of the SFPs. If this voltage crosses voltage high alarm/warning thresholds, the voltage high alarm/warning flag is set to true.
Tx Bias Current
Present transmission (Tx) bias current of the SFP. If this crosses bias high alarm/ warning thresholds, the TX bias high alarm/warning flag is set to true. If it falls below the low alarm/warning thresholds, the TX bias low alarm/warning flag is set to true.
Tx Power
Present Tx power of the SFP. If this crosses Tx power alarm/warning thresholds, the Tx power high alarm/warning flag is set to true. If it falls below the low alarm/ warning thresholds, the Tx power low alarm/ warning flag is set to true.
Rx Power
Present receiving (Rx) power of the SFP. This value is either average Rx power or OMA. This depends on the Rx Power measurement type displayed above. If this crosses Rx power alarm/warning thresholds, the Rx power high alarm/warning flag is set to true. If it falls below the low alarm/warning thresholds, the Rx power low alarm/warning flag is set to true.
Data Ready state This field indicates that the transceiver has achieved power up and data is ready.
Bar
This is set to true if data is ready to be sent and set to false if data is being
transmitted.
Rx LOS state
This is the digital state of the Rx_LOS output pin. This is set to true if the operating status is down.
Tx Fault state
This is the digital state of the Tx Fault output pin.
Rate Select state This is the digital state of the SFP rate_select input pin.
RS state
This is the reserved digital state of the pin AS(1) per SFF-8079 and RS(1) per SFF-8431.
Interfaces 667
Example
Line
Description
Tx Disable state If the admin status of the port is down then this flag is set to true.
Temperature
This can be either true or false, depending on the Current voltage value displayed
High Alarm Flag above.
Voltage High Alarm Flag
This can be either true or false, depending on the Current Temperature value displayed above.
Tx Bias High Alarm Flag
This can be either true or false, depending on the present Tx bias current value displayed above.
Tx Power High Alarm Flag
This can be either true or false, depending on the Current Tx bias power value displayed above.
Rx Power High Alarm Flag
This can be either true or false, depending on the Current Rx power value displayed above.
Temperature Low This can be either true or false, depending on the Current Temperature value
Alarm Flag
displayed above.
Voltage Low Alarm Flag
This can be either true or false, depending on the Current voltage value displayed above.
Tx Bias Low Alarm Flag
This can be either true or false, depending on the Tx bias current value displayed above.
Tx Power Low Alarm Flag
This can be either true or false, depending on the Current Tx power value displayed above.
Rx Power Low Alarm Flag
This can be either true or false, depending on the Current Rx power value displayed above.
Temperature High Warning Flag
This can be either true or false, depending on the Current Temperature value displayed above.
Voltage High Warning Flag
This can be either true or false, depending on the Current Voltage value displayed above.
Tx Bias High Warning Flag
This can be either true or false, depending on the Tx bias current value displayed above.
Tx Power High Warning Flag
This can be either true or false, depending on the Current Tx power value displayed above.
Rx Power High Warning Flag
This can be either true or false, depending on the Current Tx power value displayed above.
Temperature Low This can be either true or false, depending on the Current Temperature value
Warning Flag
displayed above.
Voltage Low Warning Flag
This can be either true or false, depending on the Current Voltage value displayed above.
Tx Bias Low Warning Flag
This can be either true or false, depending on the present Tx bias current value displayed above.
Tx Power Low Warning Flag
This can be either true or false, depending on the Current Tx power value displayed above.
Rx Power Low Warning Flag
This can be either true or false, depending on the Current Rx power value displayed above.
Dell#show interfaces TengigabitEthernet 1/1 transceiver SFP is present.
SFP 0 Serial Base ID fields
SFP 0 Id
= 0x03
SFP 0 Ext Id
= 0x04
SFP 0 Connector
= 0x07
668 Interfaces
SFP 0 Transciever Code = 0x00 0x00 0x00 0x01 0x20 0x40 0x0c 0x05
SFP 0 Encoding
= 0x01
SFP 0 BR Nominal
= 0x15
SFP 0 Length(9um) Km
= 0x00
SFP 0 Length(9um) 100m
= 0x00
SFP 0 Length(50um) 10m
= 0x1e
SFP 0 Length(62.5um) 10m = 0x0f
SFP 0 Length(Copper) 10m = 0x00
SFP 0 Vendor Rev
= A
SFP 0 Laser Wavelength
= 850 nm
SFP 0 CheckCodeBase
= 0x66
SFP 0 Serial Extended ID fields
SFP 0 Options
= 0x00 0x12
SFP 0 BR max= 0
SFP 0 BR min= 0
SFP 0 Vendor SN= P5N1ACE
SFP 0 Datecode
= 040528
SFP 0 CheckCodeExt
= 0x5b
SFP 1 Diagnostic Information
===================================
SFP 1 Rx Power measurement type
= Average
===================================
SFP 1 Temp High Alarm threshold
= 95.000C
SFP 1 Voltage High Alarm threshold
= 3.900V
SFP 1 Bias High Alarm threshold
= 17.000mA
SFP 1 TX Power High Alarm threshold = 0.631mW
SFP 1 RX Power High Alarm threshold = 1.259mW
SFP 1 Temp Low Alarm threshold
= -25.000C
SFP 1 Voltage Low Alarm threshold
= 2.700V
SFP 1 Bias Low Alarm threshold
= 1.000mA
SFP 1 TX Power Low Alarm threshold
= 0.067mW
SFP 1 RX Power Low Alarm threshold
= 0.010mW
===================================
SFP 1 Temp High Warning threshold
= 90.000C
SFP 1 Voltage High Warning threshold = 3.700V
SFP 1 Bias High Warning threshold
= 14.000mA
SFP 1 TX Power High Warning threshold = 0.631mW
SFP 1 RX Power High Warning threshold = 0.794mW
SFP 1 Temp Low Warning threshold
= -20.000C
SFP 1 Voltage Low Warning threshold = 2.900V
SFP 1 Bias Low Warning threshold
= 2.000mA
SFP 1 TX Power Low Warning threshold = 0.079mW
SFP 1 RX Power Low Warning threshold = 0.016mW
===================================
SFP 1 Temperature
= 39.930C
SFP 1 Voltage
= 3.293V
SFP 1 Tx Bias Current
= 6.894mA
SFP 1 Tx Power
= 0.328mW
SFP 1 Rx Power
= 0.000mW
===================================
SFP 1 Data Ready state Bar
= False
SFP 1 Rx LOS state
= True
SFP 1 Tx Fault state
= False
SFP 1 Rate Select state
= False
SFP 1 RS state
= False
SFP 1 Tx Disable state
= False
===================================
SFP 1 Temperature High Alarm Flag
= False
SFP 1 Voltage High Alarm Flag
= False
SFP 1 Tx Bias High Alarm Flag
= False
SFP 1 Tx Power High Alarm Flag
= False
SFP 1 Rx Power High Alarm Flag
= False
SFP 1 Temperature Low Alarm Flag
= False
SFP 1 Voltage Low Alarm Flag
= False
SFP 1 Tx Bias Low Alarm Flag
= False
SFP 1 Tx Power Low Alarm Flag
= False
SFP 1 Rx Power Low Alarm Flag
= True
===================================
!-------output truncated -------------------------
Interfaces 669
Related Commands
interface -- configures a physical interface on the switch.
show ip interface -- displays Layer 3 information about the interfaces.
show interfaces -- displays information on a specific physical interface or virtual interface.
show inventory (S-Series and Z-Series) -- displays the switch type, components (including media), Dell Networking OS version including hardware identification numbers and configured protocols.
show interfaces vlan
Display VLAN statistics.
Syntax Parameters
show interfaces vlan {vlan-id} [LINE] {description}
vlan-id LINE description
Enter the interface VLAN number. The range is from 1 to 4094. (OPTIONAL) Enter the name of the VLAN. Displays the VLAN interface information with description.
Command Modes EXEC EXEC Privilege
Command History
Version
9.9(0.0)
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Description
Added support to display the interface configurations corresponding to a range of ports. Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S-Series and Z-Series.
Usage Information
NOTE: This command also enables you to view information corresponding to a range of ports.
You can specify multiple ports as port-range. For example, if you want to display information corresponding to all ports between 1 and 4, specify the port range as show interfaces interface-type 1 - 4.
Example
Dell#show interfaces vlan 10 Vlan 10 is up, line protocol is down Address is 90:b1:1c:f4:99:ce, Current address is 90:b1:1c:f4:99:ce Interface index is 1107787786 Internet address is not set Mode of IPv4 Address Assignment: NONE DHCP Client-ID: 90b11cf499ce MTU 1554 bytes, IP MTU 1500 bytes LineSpeed auto ARP type: ARPA, ARP Timeout 04:00:00 Last clearing of "show interface" counters 2d17h26m Queueing strategy: fifo Time since last interface status change: 2d17h26m Input Statistics:
0 packets, 0 bytes Output Statistics:
0 packets, 0 bytes, 0 underruns
Related Commands
show interfaces -- displays information on a specific physical interface or virtual interface.
670 Interfaces
show range
Display all interfaces configured using the interface range command.
Syntax
show range
Command Modes INTERFACE RANGE (config-if-range)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 8.1.1.0 7.6.1.0 7.5.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for 4093 VLANs on E-Series ExaScale. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced.
Example
Dell(conf-if-range-te-2/2,fo-2/56)#show range 2/2 - 0 2/56 - 0 Dell(conf-if-range-te-2/2,fo-2/56)#
Related Commands
interface -- configures a physical interface on the switch. show ip interface -- displays Layer 3 information about the interfaces. show interfaces -- displays information on a specific physical interface or virtual interface.
show running-config ecmp-group
Display interfaces, LAG, or LAG link bundles being monitored for uneven traffic distribution using the ecmp-group monitoring enable command. The ECMP group could have a LAG or a list of 10G/40 interfaces (not just LAG link-bundles).
Syntax
show running-config ecmp-group
Defaults
Disabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Interfaces 671
Related Commands
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.10.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
ecmp-group -- configures a mechanism to monitor traffic distribution.
shutdown
Disable an interface.
Syntax
shutdown To activate an interface, use the no shutdown command.
Defaults
The interface is disabled.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 E-Series legacy command
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
The shutdown command marks a physical interface as unavailable for traffic. To discover if an interface is disabled, use the show ip interface brief command. Disabled interfaces are listed as down.
Disabling a VLAN or a port channel causes different behavior. When a VLAN is disabled, the Layer 3 functions within that VLAN are disabled. Layer 2 traffic continues to flow. Entering the shutdown
672 Interfaces
Related Commands
command on a port channel disables all traffic on the port channel and the individual interfaces within the port channel. To enable a port channel, enter no shutdown on the port channel interface and at least one interface within that port channel.
The shutdown and description commands are the only commands that you can configure on an interface that is a member of a port channel.
interface port-channel -- creates a port channel interface.
interface vlan -- creates a VLAN.
show ip interface -- displays the interface routing status. Add the keyword brief to display a table of interfaces and their status.
speed (for 10/100/1000 interfaces)
Set the speed for 10/100/1000 Base-T Ethernet interfaces. Set both sides of a link to the same speed (10/100/1000) or to auto or the link may not come up.
Syntax Parameters
speed {10 | 100 | 1000 | auto} To return to the default setting, use the no speed {10 | 100 | 1000} command.
10
Enter the keyword 10 to set the interface's speed to 10 Mb/s.
NOTE: This interface speed is not supported on the LC-EH-GE-50P or the
LC-EJ-GE-50P card. If the command is entered for these interfaces, an error
message appears.
100
Enter the keyword 100 to set the interface's speed to 10/100 Mb/s.
NOTE: When this setting is enabled, only 100Base-FX optics are supported on
the LC-EH-GE-50P or the LC-EJ-GE-50P card.
1000
Enter the keyword 1000 to set the interface's speed to 1000 Mb/s. Autonegotiation is enabled. For more information, refer to negotiation auto.
NOTE: When this setting is enabled, only 100oBase-FX optics are supported
on the LC-EH-GE-50P or the LC-EJ-GE-50P card.
auto
Enter the keyword auto to set the interface to auto-negotiate its speed. Autonegotiation is enabled. For more information, refer to negotiation auto.
Defaults
auto
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Supported on LC-EH-GE-50P or the LC-EJ-GE-50P cards.
Interfaces 673
Usage Information
Related Commands
Version
8.1.1.0 7.6.1.0 7.5.1.0 E-Series legacy command
Description
Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series.
This command is found on the 10/100/1000 Base-T Ethernet interfaces.
When you enable auto, the system performs an automatic discovery to determine the optics installed and configure the appropriate speed.
When you configure a speed for the 10/100/1000 interface, confirm the negotiation auto command setting. Both sides of the link must have auto-negotiation either enabled or disabled. For speed settings of 1000 or auto, the software sets the link to auto-negotiation and you cannot change that setting.
NOTE: Starting with Dell Networking OS version 7.8.1.0, when you use a copper SFP2 module with catalog number GP-SFP2-1T in the S25P model of the S-Series, you can manually set its speed with the speed command. When you set the speed to 10 or 100 Mbps, you can also use the duplex command.
duplex (10/100 Interfaces) -- configures duplex mode on physical interfaces with the speed set to 10/100.
negotiation auto -- enables or disables auto-negotiation on an interface.
speed (Management interface)
Set the speed for the Management interface.
Syntax Parameters
speed {10 | 100 | 1000 | auto} To return to the default setting, use the no speed command.
10 100 1000 auto
Enter the keyword 10 to set the interface's speed to 10 Mb/s. Enter the keyword 100 to set the interface's speed to 10/100 Mb/s. Enter the keyword 1000 to set the interface to auto-negotiate its speed. Enter the keyword auto to set the interface to auto-negotiate its speed.
Defaults
auto
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T.
674 Interfaces
Usage Information
Related Commands
Version
8.3.11.1 8.3.11.1 8.1.1.0 7.5.1.0 pre-Version 6.2.1.0
Description
Introduced on the Z9000. Introduced on the S55, S60, and S4810 Introduced on the E-Series ExaScale. Introduced on the C-Series. Introduced on the E-Series.
This command is found on the Management interface only.
interface ManagementEthernet -- configures the Management port on the system (either the Primary or Standby RPM).
management route -- configures a static route that points to the Management interface or a forwarding router.
stack-unit portmode
Split a single 40G port into four-10G portsConvert a single 100G port into one 40G port, or four 10G, 25G, or two 50G, or one 40G ports.
S4048�ON
Syntax Parameters
stack-unit stack-unit port number portmode quad
stack-unit number
Enter the stack member unit identifier of the stack member to reset. For the S6000�ON, the range is from 1 to 6.
Enter the port number of the 40G port to be split.
Defaults
Disabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0)
9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.1
Introduced on the S4048-ON. Added support for dynamically fanning-out of interfaces on S6000. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Usage Information
Splitting a 40G port into 4x10G port is supported on standalone and stacked units. stack-unit stack-unit port number portmode quad dynamically fan-out 40G ports to 10G ports and viceversa without reload in switch.
Interfaces 675
The quad port must be in a default configuration before it can be split into 4x10G ports. The 40G port is lost in the config when the port is split, so be sure that the port is also removed from other L2/L3 feature configurations.
This command cannot be used if LR4 optics are inserted on the 40G interface.
Example (stack unit � Warning message when 13 ports are configured in any port range)
Dell(conf)#stack-unit 0 port 48 portmode quad Maximum number of ports that can be made Quad mode in the range <0-63> is configured. Ports 52,56,60, will be disabled on reload. Do you wish to continue? [confirm yes/no]:yes Please save and reset unit 0 for the changes to take effect. Dell(conf)#
switchport
Place an interface in Layer 2 mode.
Syntax Parameters
switchport [backup interface {gigabit slot/port[/subport] | tengigabit slot/port[/subport] | fortyGigE slot/port | port-channel number}]
To remove an interface from Layer 2 mode and place it in Layer 3 mode, enter the no switchport command. If a switchport backup interface is configured, first remove the backup configuration. To remove a switchport backup interface, enter the no switchport backup interface {gigabit slot/port[/subport] | tengigabit slot/port[/subport] | fortyGigE slot/port | port-channel number} command.
backup interface
Use this option to configure a redundant Layer 2 link without using Spanning Tree. The keywords backup interface configures a backup port so that if the primary port fails, the backup port changes to the up state. If the primary later comes up, it becomes the backup.
tengigabit
Enter the keyword tengigabit if the backup port is a 10G port.
fortyGigE
Enter the keyword fortyGigE if the backup port is a 40G port.
port-channel
Enter the keywords port-channel if the backup port is a static or dynamic port channel.
slot/port[/ subport]
Specify the line card and port number of the backup port.
Defaults
Disabled (The interface is in Layer 3 mode.)
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000.
676 Interfaces
Usage Information
Version
8.5.1.0 8.4.1.0 8.3.7.0 8.1.1.0 7.7.1.0 7.6.1.0 7.5.1.0 pre-Version 6.2.1.0
Description
Added support for 4-port 40G line cards on ExaScale. Added support for port-channel interfaces (the port-channel number option). Introduced on the S4810. Introduced on the E-Series ExaScale. Added the backup interface option. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
If an IP address or VRRP group is assigned to the interface, you cannot use the switchport command on the interface. To use the switchport command on an interface, only the no ip address and no shutdown statements must be listed in the show config output.
When you enter the switchport command, the interface is automatically added to the default VLAN.
To use the switchport backup interface command on a port, first enter the switchport command. For more information, refer to the "Configuring Redundant Links" section in the "Layer 2" chapter of the Dell Networking OS Configuration Guide.
Egress Interface Selection (EIS) Commands
The following commands are Egress Interface Selection (EIS) commands.
application
Configure the management egress interface selection.
Syntax Parameters
application {all | application-type}
To remove a management application configuration, use the no application {all | application-type} command.
application-type
Enter any of the following keywords:
For DNS, enter the keyword dns. For FTP, enter the keyword ftp. For NTP, enter the keyword ntp. For Radius, enter the keyword radius. For sFlow collectors, enter the keyword sflow-collector. For SNMP (traps and MIB responses), enter the keywords snmp . For SSH, enter the keyword ssh . For Syslog, enter the keyword syslog. For TACACS, enter the keyword tacacs. For Telnet, enter the keyword telnet. For TFTP, enter the keyword tftp.
all
Configure all applications.
Defaults
None.
Command Modes EIS Mode (conf-mgmt-eis)
Interfaces 677
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.2.(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the Z9000, S4810, and S4820T.
application (for HTTP and ICMP)
Configure the management egress interface selection for HTTP and ICMP. NOTE: Only the options that have been newly introduced are described here. For a complete description on all of the keywords and variables that are available with this command, refer the respective Command Reference Guide of the applicable platform of the Release 9.2(0.0) documentation set.
Syntax Parameters
application {all | application-type}
To remove a management application configuration, use the no application {all | application-type} command.
application-type
Enter any of the following keywords:
For HTTP, enter the keyword http. For ICMP, enter the keyword icmp.
all
Configure all applications.
Defaults
None.
Command Modes EIS Mode (conf-mgmt-eis)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.3.(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Added support for the HTTP and ICMP traffic on the Z9000, S4810, and S4820T.
clear management application pkt-cntr
Clear management application packet counters for all management application types.
Syntax
clear management application pkt-cntr
Defaults
None.
Command Modes EXEC Privilege
678 Interfaces
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.2.(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the Z9000, S4810, and S4820T.
clear management application pkt-fallback-cntr
Clear management application packet fallback counters for all management application types.
Syntax
clear management application pkt--fallback-cntr
Defaults
None.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.2.(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the Z9000, S4810, and S4820T.
management egress-interface-selection
To make configured application traffic egress through the management port instead of the front-end (FE) port, enable and configure a management egress interface.
Syntax
management egress-interface-selection
To disable and remove management egress interface selection (EIS) configurations, use the no management egress-interface-selection command.
Defaults
None.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2)
Introduced on the S4048-ON. Introduced on the S3048-ON.
Interfaces 679
Version
9.2(1.0) 9.2(0.2)
Description
Introduced on the Z9500. Introduced on the Z9000, S4810, and S4820T.
show ip management-eis-route
Display the management routes used by EIS.
Syntax
show ip management-eis-route
Defaults
None.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.2.(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the Z9000, S4810, and S4820T.
Example
Dell#show ip management-eis-route
Destination
Gateway
-----------
-------
10.11.0.0/16 ManagementEthernet 1/1
172.16.1.0/24 10.11.192.4
State ----Connected Active
Route Source -----------Connected Static
show management application pkt-cntr
Display the number of packets for each application type that have taken the management route.
Syntax
show management application pkt-cntr
Defaults
None.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.2.(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the Z9000, S4810, and S4820T.
680 Interfaces
Example
Dell#show management application pkt-cntr
dns
: 2
ftp
: 0
ntp
: 0
radius
: 0
sflow-collector : 0
snmp
: 0
ssh
: 0
syslog
: 0
tacacs
: 0
telnet
: 0
tftp
: 0
show management application pkt-fallback-cntr
Display the number of packets for each application type that have been rerouted to the default routing table due to management port or route lookup failure.
Syntax
show management application pkt--fallback-cntr
Defaults
None.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.2.(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the Z9000, S4810, and S4820T.
Example
Dell#show management application pkt-fallback-cntr
dns
: 0
ftp
: 0
ntp
: 0
radius
: 0
sflow-collector : 0
snmp
: 0
ssh
: 2
syslog
: 0
tacacs
: 0
telnet
: 0
tftp
: 0
Port Channel Commands
A Link Aggregation Group (LAG) is a group of links that appear to a MAC client as if they were a single link according to IEEE 802.3ad. In Dell Networking OS, a LAG is referred to as a Port Channel.
The platform supports 128 port channels and 16 members per port channel.
Because each port can be assigned to only one Port Channel, and each Port Channel must have at least one port, some of those nominally available Port Channels might have no function because they could have no members if there are not enough ports installed. In the S-Series, stack members can provide those ports.
Interfaces 681
NOTE: The Dell Networking OS implementation of LAG or Port Channel requires that you configure a LAG on both switches manually. For information about Dell Networking OS link aggregation control protocol (LACP) for dynamic LAGs, refer to the Link Aggregation Control Protocol (LACP) chapter. For more information about configuring and using Port Channels, refer to the Dell Networking OS Configuration Guide.
channel-member
Add an interface to the Port Channel, while in INTERFACE PORTCHANNEL mode.
Syntax Parameters
channel-member interface To delete an interface from a Port Channel, use the no channel-member interface command.
interface
(OPTIONAL) Enter any of the following keywords and slot/port[/subport] or number information:
For a 100/1000 Ethernet interface, enter the keyword GigabitEthernet then the slot/port[/subport] information.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
Defaults
Not configured.
Command Modes INTERFACE PORTCHANNEL
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.5.1.0 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 pre-Version 6.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Use the interface port-channel command to access this command.
You cannot add an interface to a Port Channel if the interface contains an IP address in its configuration. Only the shutdown, description, mtu, and ip mtu commands can be configured on an interface if it is added to a Port Channel. The mtu and ip mtu commands are only available when the chassis is in Jumbo mode.
682 Interfaces
Related Commands
Link MTU and IP MTU considerations for Port Channels are:
All members must have the same link MTU value and the same IP MTU value. The Port Channel link MTU and IP MTU must be less than or equal to the link MTU and IP MTU values
configured on the channel members. For example, if the members have a link MTU of 2100 and an IP MTU 2000, the Port Channel's MTU values cannot be higher than 2100 for link MTU or 2000 bytes for IP MTU.
When an interface is removed from a Port Channel with the no channel-member command, the interface reverts to its configuration prior to joining the Port Channel.
An interface can belong to only one Port Channel.
You can have 16 interfaces per Port Channel on the S-Series and Z-Series. The interfaces can be located on different line cards but must be the same physical type and speed (for example, all 1-Gigabit Ethernet interfaces). However, you can combine 100/1000 interfaces and GE interfaces in the same Port Channel.
If the Port Channel contains a mix of interfaces with 100 Mb/s speed and 1000 Mb/s speed, the software disables those interfaces whose speed does not match the speed of the first interface configured and enabled in the Port Channel. If that first interface goes down, the Port Channel does not change its designated speed; disable and re-enable the Port Channel or change the order of the channel members configuration to change the designated speed. If the Port Channel contains a mix of interfaces with 100 Mb/s speed and 1000 Mb/s speed, the software disables those interfaces whose speed does not match the speed of the first interface configured and enabled in the Port Channel. If that first interface goes down, the Port Channel does not change its designated speed; disable and re-enable the Port Channel or change the order of the channel members configuration to change the designated speed. For more information about Port Channels, refer to the Dell Networking OS Configuration Guide.
description -- assigns a descriptive text string to the interface.
interface port-channel -- creates a Port Channel interface.
shutdown -- disables/enables the port channel.
group
Group two LAGs in a supergroup ("fate-sharing group" or "failover group").
Syntax Parameters
group group_number port-channel number port-channel number To remove an existing LAG supergroup, use the no group group_number command.
group_number
port-channel number
Enter an integer from 1 to 32 that uniquely identifies this LAG fate-sharing group.
Enter the keywords port-channel then an existing LAG number. Enter this keyword/variable combination twice, identifying the two paired LAGs.
Defaults
none
Command Modes PORT-CHANNEL FAILOVER-GROUP (conf-po-failover-grp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000.
Interfaces 683
Related Commands
Version
8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0
Description
Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the C-Series, E-Series, and S-Series.
port-channel failover-group -- accesses PORT-CHANNEL FAILOVER-GROUP mode to configure a LAG failover group.
show interfaces port-channel -- displays information on configured Port Channel groups.
interface port-channel
Create a Port Channel interface, which is a link aggregation group (LAG) containing 16 physical interfaces on the S-Series.
Syntax Parameters
interface port-channel channel-number To delete a Port Channel, use the no interface port-channel channel-number command.
channel-number For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 8.1.1.0 7.6.1.0 7.5.1.0 pre-Version 6.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on S4810. Introduced on Z9000. Introduced on E-Series ExaScale. Introduced on S-Series. Introduced on C-Series. Introduced on E-Series.
Usage Information
Port Channel interfaces are logical interfaces and can be either in Layer 2 mode (by using the switchport command) or Layer 3 mode (by configuring an IP address). You can add a Port Channel in Layer 2 mode to a VLAN.
684 Interfaces
Example
Related Commands
The shutdown, description, and name commands are the only commands that you can configure on an interface while it is a member of a Port Channel. To add a physical interface to a Port Channel, the interface can only have the shutdown, description, and name commands configured. The Port Channel's configuration is applied to the interfaces within the Port Channel. A Port Channel can contain both 100/1000 interfaces and GE interfaces. Based on the first interface configured in the Port Channel and enabled, Dell Networking OS determines if the Port Channel uses 100 Mb/s or 1000 Mb/s as the common speed. For more information, refer to channel-member. If the line card is in a Jumbo mode chassis, you can also configure the mtu and ip mtu commands. The Link MTU and IP MTU values configured on the channel members must be greater than the Link MTU and IP MTU values configured on the Port Channel interface.
NOTE: In a Jumbo-enabled system, all members of a Port Channel must be configured with the same link MTU values and the same IP MTU values.
Dell(conf)#int port-channel 2 Dell(conf-if-po-2)#
channel-member -- adds a physical interface to the LAG. interface -- configures a physical interface. interface loopback -- configures a Loopback interface. interface null -- configures a null interface. interface vlan -- configures a VLAN. shutdown -- disables/enables the port channel.
minimum-links
Configure the minimum number of links in a LAG (Port Channel) that must be in "oper up" status for the LAG to be also in "oper up" status.
Syntax Parameters
minimum-links number
number
Enter the number of links in a LAG that must be in "oper up" status. The range is from 1 to 16. The default is 1.
Defaults
1
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Interfaces 685
Usage Information
Version
8.1.1.0 7.6.1.0 7.5.1.0 pre-Version 6.2.1.0
Description
Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
If you use this command to configure the minimum number of links in a LAG that must be in "oper up" status, the LAG must have at least that number of "oper up" links before it can be declared as up. For example, if the required minimum is four, and only three are up, the LAG is considered down.
port-channel failover-group
To configure a LAG failover group, access PORT-CHANNEL FAILOVER-GROUP mode.
Syntax
port-channel failover-group To remove all LAG failover groups, use the no port-channel failover-group command.
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series.
Usage Information
Related Command
This feature groups two LAGs to work in tandem as a supergroup. For example, if one LAG goes down, the other LAG is taken down automatically, providing an alternate path to reroute traffic, avoiding oversubscription on the other LAG. You can use both static and dynamic (LACP) LAGs to configure failover groups. For more information, refer to the "Port Channel" chapter in the Dell Networking OS Configuration Guide.
group -- groups two LAGs in a supergroup ("fate-sharing group").
show interfaces port-channel -- displays information on configured Port Channel groups.
686 Interfaces
show config
Display the current configuration of the selected LAG.
Syntax
show config
Command Modes INTERFACE PORTCHANNEL
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre-Version 6.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Example
Dell(conf-if-po-1)#show config ! interface Port-channel 1
no ip address shutdown Dell(conf-if-po-1)#
show interfaces port-channel
Display information on configured Port Channel groups.
Syntax Parameters
show interfaces port-channel [channel-number] [brief] [description]
channel-number
For a Port Channel interface, enter the keyword port-channel then a number. For the C-Series and S-Series, the range is from 1 to 128.
NOTE: This command also enables you to view information corresponding to a range of ports.
For port-channel interfaces, you can specify multiple ports as portrange. For example, if you want to display information corresponding to all ports between 1 and 4, specify the port range as show interfaces port-channel 1 - 4.
brief
(OPTIONAL) Enter the keyword brief to display only the port channel number, the state of the port channel, and the number of interfaces in the port channel.
Interfaces 687
description
(OPTIONAL) Displays the port-channel information with description.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.9(0.0)
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 E-Series legacy command
Added support to display the interface configurations corresponding to a range of ports. Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Modified to display the LAG failover group status. Introduced on the C-Series.
Usage Information
The following describes the show interfaces port-channel command shown in the following example.
Field
Description
Port-Channel 1... Displays the LAG's status. In the Example, the status of the LAG's LAG fatesharing group ("Failover-group") is listed.
Hardware is...
Port-channel is part...
Displays the interface's hardware information and its assigned MAC address. Indicates whether the LAG is part of a LAG fate-sharing group ("Failover-group").
Internet address...
States whether an IP address is assigned to the interface. If an IP address is assigned, that address is displayed.
MTU 1554... LineSpeed
Displays link and IP MTU.
Displays the interface's line speed. For a port channel interface, it is the line speed of the interfaces in the port channel.
Members in this...
Displays the interfaces belonging to this port channel.
ARP type:...
Last clearing...
Queueing strategy.
packets input...
Displays the ARP type and the ARP timeout value for the interface. Displays the time when the show interfaces counters were cleared. States the packet queuing strategy. FIFO means first in first out.
Displays the number of packets and bytes into the interface.
688 Interfaces
Example
Field
Input 0 IP packets...
0 64-byte...
Received 0...
Output 0...
Rate information... Time since...
Description
Displays the number of packets with IP headers, VLAN tagged headers, and MPLS headers. The number of packets may not add correctly because a VLAN tagged IP packet counts as both a VLAN packet and an IP packet.
Displays the size of packets and the number of those packets entering that interface. This information is displayed over two lines.
Displays the type and number of errors or other specific packets received. This information is displayed over three lines.
Displays the type and number of packets sent out the interface. This information is displayed over three lines.
Displays the traffic rate information into and out of the interface. Traffic rate is displayed in bits and packets per second.
Displays the time since the last change in the configuration of this interface.
Dell#show interfaces port-channel 20 Port-channel 20 is up, line protocol is up (Failover-group 1 is down) Hardware address is 00:01:e8:01:46:fa Port-channel is part of failover-group 1 Internet address is 1.1.120.1/24 MTU 1554 bytes, IP MTU 1500 bytes LineSpeed 2000 Mbit Members in this channel: Te 2/5 Te 2/18 ARP type: ARPA, ARP timeout 04:00:00 Last clearing of "show interfaces" counters 00:00:00 Queueing strategy: fifo
44507301 packets input, 3563070343 bytes Input 44506754 IP Packets, 0 Vlans 0 MPLS 41 64-byte pkts, 44502871 over 64-byte pkts, 249 over 127-byte pkts 407 over 255-byte pkts, 3127 over 511-byte pkts, 606 over 1023-byte pkts Received 0 input symbol errors, 0 runts, 0 giants, 0 throttles 0 CRC, 0 IP Checksum, 0 overrun, 0 discarded 1218120 packets output, 100745130 bytes, 0 underruns Output 5428 Multicasts, 4 Broadcasts, 1212688 Unicasts 1216142 IP Packets, 0 Vlans, 0 MPLS 0 throttles, 0 discarded Rate info (interval 299 sec): Input 01.50Mbits/sec, 2433 packets/sec Output 00.02Mbits/sec,4 packets/sec Time since last interface status change: 00:22:34 Dell#
User Information The following describes the show interfaces port-channel brief command shown in the following example.
Field
Description
LAG Mode
Lists the port channel number.
Lists the mode: L3 -- for Layer 3 L2 -- for Layer 2
Status
Displays the status of the port channel.
down -- if the port channel is disabled (shutdown) up -- if the port channel is enabled (no shutdown)
Uptime Ports (untitled)
Displays the age of the port channel in hours:minutes:seconds. Lists the interfaces assigned to this port channel. Displays the status of the physical interfaces (up or down).
Interfaces 689
Example
Related Commands
Field
Description
In Layer 2 port channels, an * (asterisk) indicates which interface is the primary port of the port channel. The primary port sends out interface PDU.
In Layer 3 port channels, the primary port is not indicated.
Dell#show interfaces port-channel 1 brief
LAG Mode Status Uptime
1 L2 up
00:00:08
Dell#
Ports Te 3/1 (Up) * Te 3/2 (Down) Te 3/3 (Up)
show lacp -- displays the LACP matrix.
show port-channel-flow
Display an egress port in a given port-channel flow.
Syntax Parameters
show port-channel-flow outgoing-port-channel number incoming-interface interface {source-ip address destination-ip address} | {source-port number destination-port number} | {source-mac address destination-mac address {vlan vlanid | ether-type}}
outgoing-portchannel number
Enter the keywords outgoing-port-channel then the number of the port channel to display flow information.
For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
incoming-
interface interface
Enter the keywords incoming-interface then the interface type and slot/ port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
source-ip address
destination-ip address
source-port number
destination-port number
source-mac address
destination-mac address
vlan vlan-id
ether-type
Enter the keywords source-ip then the IP source address in IP address format.
Enter the keywords destination-ip then the IP destination address in IP address format.
Enter the keywords source-port then the source port number. The range is from 1 to 65536. The default is None.
Enter the keywords destination-port then the destination port number. The range is from 1 to 65536. The default is None.
Enter the keywords source-mac then the MAC source address in the nn:nn:nn:nn:nn:nn format.
Enter the keywords destination-mac then the MAC destination address in the nn:nn:nn:nn:nn:nn format.
Enter the keywords vlan then the VLAN-id. The range is from 0 to 4094.
Enter the keywords ether-type in the XX:XX format.
Command Modes EXEC
690 Interfaces
Command History
Usage Information
Example
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.10.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Because this command calculates based on a Layer 2 hash algorithm, use this command to display flows for switched Layer 2 packets, not for routed packets (use the show ip flow command to display routed packets).
The show port-channel-flow command returns the egress port identification in a given portchannel if a valid flow is entered. A mismatched flow error occurs if MAC-based hashing is configured for a Layer 2 interface and you are trying to display a Layer 3 flow.
The output displays three entries:
Egress port for unfragmented packets. In the event of fragmented packets, the egress port of the first fragment. In the event of fragmented packets, the egress port of the subsequent fragments.
NOTE: In the show port channel flow command output, the egress port for an unknown unicast, multicast, or broadcast traffic is not displayed.
The following example shows the show port-channel-flow outgoing-port-channel number incoming-interface interface source-mac address destination-mac address
Load-balance is configured for MAC Load-balance is configured for IP 4-tuple/2-tuple A non-IP payload is going out of Layer 2 LAG interface that is a member of VLAN with an IP address
Dell#show port-channel-flow outgoing-port-channel 1 incoming-interface te 3/3 source-mac 00:00:50:00:00:00 destination-mac 00:00:a0:00:00:00
Egress Port for port-channel 1, for the given flow, is Te 13/2
Time Domain Reflectometer (TDR) Commands
TDR is useful for troubleshooting an interface that is not establishing a link; either it is flapping or not coming up at all. TDR detects open or short conditions of copper cables on 100/1000 Base-T modules.
Important Points to Remember
The interface and port must be enabled (configured--refer to the interface command) before running TDR. An error message is generated if you have not enabled the interface.
The interface on the far-end device must be shut down before running TDR. Because TDR is an intrusive test on an interface that is not establishing a link, do not run TDR on an interface that is passing
traffic. When testing between two devices, do not run the test on both ends of the cable.
Interfaces 691
tdr-cable-test
Test the condition of copper cables on 100/1000 Base-T modules.
Syntax Parameters
tdr-cable-test interface
interface
Enter the keyword TenGigabitEthernet then the slot/port information for the 100/1000 Ethernet interface.
Defaults
none
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7.0.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 7.7.1.0 7.6.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S5000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
The interface must be enabled to run the test or an error message is generated: Dell#tdr-cable-test tengigabitethernet 11/1 % Error: Interface is disabled Te 11/1.
Related Commands
Syslog messages are generated when the link flaps during TDR tests. show tdr -- displays the results of the TDR test.
show tdr
Display the TDR test results.
Syntax Parameters
show tdr interface
interface
Enter the keyword TenGigabitEthernet then the slot/port information for the 100/1000 Ethernet interface.
Defaults
none
Command Modes EXEC
692 Interfaces
Command History
Usage Information
Example Related Commands
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7.0.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 7.7.1.0 7.6.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S5000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced.
If the TDR test has not been run, an error message is generated: %Error: Please run the TDR test first The following describes the TDR test status.
Status
Definition
OK Status: Terminated
Length: 92 (+/1) meters, Status: Shorted
Length: 93 (+/1) meters, Status: Open
Status: Impedance Mismatch
TDR test is complete, no fault is detected on the cable, and the test is terminated.
A short is detected on the cable. The location, in this Example is 92 meters. The short is accurate to plus or minus one meter.
An opening is detected on the cable. The location, in this Example is 93 meters. The open is accurate to plus or minus one meter.
There is an impedance mismatch in the cables.
Dell#show tdr tengigabitethernet 11/2 Time since last test: 00:00:11
Pair A, Length: OK Status: Terminated Pair B, Length: OK Status: Terminated Pair C, Length: OK Status: Terminated Pair D, Length: OK Status: Terminated tdr-cable-test -- runs the TDR test.
UDP Broadcast Commands
The user datagram protocol (UDP) broadcast feature is a software-based method to forward low throughput (not to exceed 200 pps) IP/UDP broadcast traffic arriving on a physical or VLAN interface.
Important Points to Remember
This feature is available only on the S4810, S4820T, S3048�ON, S4048�ON, Z9000 platforms.
Interfaces 693
Routing information protocol (RIP) is not supported with the UDP Broadcast feature. If you configure this feature on an interface using the ip udp-helper udp-port command, the ip directed-
broadcast command becomes ineffective on that interface. The existing show interface command has been modified to display the configured broadcast address.
debug ip udp-helper
Enable UDP debug and display the debug information on a console.
Syntax
debug ip udp-helper To disable debug information, use the no debug ip udp-helper command.
Defaults
Debug disabled.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.7.0 Pre-version 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale.
Example
Dell#debug ip udp-helper UDP helper debugging is on 01:20:22: Pkt rcvd on Gi 3/0 with IP DA (0xffffffff) will be sent on Gi 5/1 Gi 5/2 Vlan 3 01:44:54: Pkt rcvd on Gi 4/0 is handed over for DHCP processing.
Related Commands
Dell#debug ip udp-helper UDP helper debugging is on 01:20:22: Pkt rcvd on Te 3/0 with IP DA (0xffffffff) will be sent on Gi 5/1 Gi 5/2 Vlan 3 01:44:54: Pkt rcvd on Te 4/0 is handed over for DHCP processing.
ip udp-helper udp-port -- enables the UDP broadcast feature on an interface.show ip udp-helper -- displays the configured UDP helper(s) on all interfaces.
694 Interfaces
ip udp-helper udp-port
Enable the UDP broadcast feature on an interface either for all UDP ports or a specified list of UDP ports.
Syntax Parameters
ip udp-helper udp-port [udp-port-list]
To disable the UDP broadcast on a port, use the no ip udp-helper udp-port [udp-portlist] command.
udp-port-list
(OPTIONAL) Enter up to 16 comma-separated UDP port numbers. NOTE: If you do not use this option, all UDP ports are considered by default.
Defaults
none
Command Modes INTERFACE (config-if)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.7.0 Pre-version 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale.
Usage Information
Related Commands
If you configure the ip helper-address command and ip udp-helper udp-port command, the behavior is that the UDP broadcast traffic with port numbers 67/68 is unicast relayed to the DHCP server per the ip helper-address configuration. This occurs regardless if the ip udp-helper udp-port command contains port numbers 67/68 or not.
If you only configure the ip udp-helper udp-port command, all the UDP broadcast traffic is flooded, including ports 67/68 traffic if those ports are part of the udp-port-list.
ip helper-address -- configures the destination broadcast or host address for the DHCP server.
debug ip udp-helper -- enables debug and displays the debug information on a console.
show ip udp-helper -- displays the configured UDP helpers on all interfaces.
show ip udp-helper
Display the configured UDP helpers on all interfaces.
Syntax
show ip udp-helper
Defaults
none
Command Modes EXEC
Interfaces 695
Command History
Example Related Commands
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.7.0 Pre-version 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale.
Dell#show ip udp-helper
--------------------------------------------------
Port
UDP port list
--------------------------------------------------
Te 10/2 656, 658
Te 10/3 All
debug ip udp-helper -- enables debug and displays the debug information on a console.
ip udp-helper udp-port -- enables the UDP broadcast feature on an interface either for all UDP ports or a specified list of UDP ports.
ip http source-interface
Specify an interface as the source interface for HTTP connections. This feature is supported on platform.
Syntax
ip http source-interface interface To delete an interface, use theno ip http source-interface interface command.
Parameters
interface
Enter the following keywords and slot/port or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For a port channel interface, enter the keywords port-channel then a number.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Defaults
The IP address on the system that is closest to the Telnet address is used in the outgoing packets.
Command Modes CONFIGURATION
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
696 Interfaces
Related Commands
Version
9.7(0.0) 9.3(0.1) 8.3.11.1 8.2.1.0 8.1.1.0 7.6.1.0 7.5.1.0
Description
Introduced on the S6000-ON. Introduced on the S4810, S4820T, S6000, and Z9000. Introduced on the Z9000 Increased number of VLANs on ExaScale to 4094 (was 2094) Introduced on E-Series ExaScale Support added for S-Series Introduced on C-Series
ip ftp source interface Configuring source interface for ftp communications.
Interfaces 697
25
Internet Protocol Security (IPSec)
Internet protocol security (IPSec) is an end-to-end security scheme for securing IP communications by authenticating and encrypting all packets in a session. Use IPSec between hosts, gateways, or hosts and gateways. IPSec uses a series of protocol functions to achieve information security: Authentication Headers (AH) -- Connectionless integrity and origin authentication for IP packets. Encapsulating Security Payloads (ESP) -- Confidentiality, authentication, and data integrity for IP packets. Security Associations (SA) -- Algorithm-provided parameters required for AH and ESP protocols. IPSec capability is available on control (protocol) and management traffic; end-node support is required. IPSec supports two operational modes: Transport and Tunnel. Transport is the default mode for IPSec and encrypts only the payload of the packet. Routing information is unchanged. Tunnel mode is used to encrypt the entire packet, including the routing information in the IP header. Tunnel mode is typically
used in creating virtual private networks (VPNs). Transport mode provides IP packet payload protection using ESP. You can use ESP alone or in combination with AH to provide additional authentication. AH protects data from modification but does not provide confidentiality. SA is the configuration information that specifies the type of security provided to the IPSec flow. The SA is a set of algorithms and keys used to authenticate and encrypt the traffic flow. The AH and ESP use SA to provide traffic protection for the IPSec flow.
NOTE:
Due to performance limitations on the control processor, you cannot enable IPSec on all packets in a communication session.
Topics:
� crypto ipsec transform-set � crypto ipsec policy � management crypto-policy � match � session-key � show crypto ipsec transform-set � show crypto ipsec policy � transform-set
crypto ipsec transform-set
Create a transform set, or combination of security algorithms and protocols, of cryptos.
Syntax Parameters
crypto ipsec transform-set name {ah-authentication {md5|sha1|null} | espauthentication {md5|sha1|null} | esp-encryption {3des|cbc|des|null}}
To delete a transform set, use the no crypto ipsec transform-set name {ahauthentication {md5|sha1|null} | esp-authentication {md5|sha1|null} | espencryption {3des|cbc|des|null}} command.
name
Enter the name for the transform set.
698 Internet Protocol Security (IPSec)
ahauthentication
espauthentication
esp-encryption
Enter the keywords ah-authentication then the transform type of operation to apply to traffic. The transform type represents the encryption or authentication applied to traffic.
md5 -- Use Message Digest 5 (MD5) authentication. sha1 -- Use Secure Hash Algorithm 1 (SHA-1) authentication. null -- Causes an encryption policy configured for the area to not be inherited
on the interface.
Enter the keywords esp-authentication then the transform type of operation to apply to traffic. The transform type represents the encryption or authentication applied to traffic.
md5 -- Use Message Digest 5 (MD5) authentication. sha1 -- Use Secure Hash Algorithm 1 (SHA-1) authentication. null -- Causes an encryption policy configured for the area to not be inherited
on the interface.
Enter the keywords esp-encryption then the transform type of operation to apply to traffic. The transform type represents the encryption or authentication applied to traffic.
3des -- Use 3DES encryption. cbc -- Use CDC encryption. des -- Use DES encryption. null -- Causes an encryption policy configured for the area to not be inherited
on the interface.
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(0.2) 9.2(1.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9000, S4810, and S4820T. Introduced on the Z9500.
Usage Information
Example
Both sides of the link must specify the same transform set. You can create up to 64 transform sets.
Dell(conf)#do show crypto ipsec transform-set
Transform-Set Name Transform-Set refCnt AH Transform ESP Auth Transform ESP Encry Transform
: ts1 : 0 : md5 : :
Dell(conf)#
Internet Protocol Security (IPSec) 699
crypto ipsec policy
Create a crypto policy used by ipsec.
Syntax Parameters
crypto ipsec policy name seq-num ipsec-manual
To delete a crypto policy entry, use the no crypto ipsec policy name seq-num ipsecmanual command.
name seq-num
Enter the name for the crypto policy set. Enter the sequence number assigned to the crypto policy entry.
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(0.2) 9.2(1.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9000, S4810, and S4820T. Introduced on the Z9500.
Usage Information
Example
This command creates a crypto policy entry and enters the crypto policy configuration mode for configuring the flow parameters.
Dell(conf)#crypto ipsec policy West 10 ipsec-manual Dell(conf-crypto-policy)#
management crypto-policy
Apply the crypto policy to management traffic.
Syntax Parameters
management crypto-policy name
To remove the management traffic crypto policy, use the no management crypto-policy name command.
name
Enter the name for the crypto policy..
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
700 Internet Protocol Security (IPSec)
Version
9.8(0.0P2) 9.2(0.2) 9.2(1.0)
Description
Introduced on the S3048-ON. Introduced on the Z9000, S4810, and S4820T. Introduced on the Z9500.
match
Apply an match filter to the crypto policy.
Syntax Parameters
match seq-num tcp [sourceip address | ipv6 address {mask} {source-port number}] [destination ip address | ipv6 address {mask} {destination-port number}]
To remove the match filter for the crypto map, use the no match seq-num tcp [source ip address | ipv6 address {mask} {source-port number}] [destination ip address | ipv6 address {mask} {destination-port number}] command.
seq-num
Enter the match command sequence number.
sourceip-address Enter the keyword source then the IPv4 or IPv6 address for the source. | ipv6 address
mask
Enter the mask prefix length in /nn format.
source-port number
Enter the source port number.
destination-port Enter the destination port number. number
Defaults
none
Command Modes CONFIG-CRYPTO-POLICY
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(0.2) 9.2(1.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9000, S4810, and S4820T. Introduced on the Z9500.
Usage Information
Example
IPv4 addresses support only -/32 mask types. IPv6 addresses support only -/128 mask types. Configure match for bi-directional traffic for optimal routing. Only TCP is supported.
match 0 tcp a::1 /128 0 a::2 /128 23 match 1 tcp a::1 /128 23 a::2 /128 0 match 2 tcp a::1 /128 0 a::2 /128 21 match 3 tcp a::1 /128 21 a::2 /128 0 match 4 tcp 1.1.1.1 /32 0 1.1.1.2 /32 23 match 5 tcp 1.1.1.1 /32 23 1.1.1.2 /32 0
Internet Protocol Security (IPSec) 701
match 6 tcp 1.1.1.1 /32 0 1.1.1.2 /32 21 match 7 tcp 1.1.1.1 /32 21 1.1.1.2 /32 0
session-key
Specify the session keys used in the crypto policy entry.
Syntax Parameters
session-key {inbound | outbound} {ah spi hex-key-string | esp spi encrypt hex-key-string auth hex-key-string
To delete the session key information from the crypto policy, use the no session-key {inbound | outbound} {ah | esp} command.
name inbound outbound ah esp spi hex-key-string
encrypt auth
Enter the name for the transform set. Specify the inbound session key for IPSec. Specify the outbound session key for IPSec. Use the AH protocol when you select the AH transform set in the crypto policy. Use the ESP protocol when you select the ESP transform set in the crypto policy. Enter the security parameter index number. Enter the session key in hex format (a string of 8, 16, or 20 bytes). For DES algorithms, specify at least 16 bytes per key. For SHA algorithms, specify at least 20 bytes per key. Indicates the ESP encryption transform set key string. Indicates the ESP authentication transform set key string.
Defaults
none
Command Modes CONF-CRYPTO-POLICY
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(0.2) 9.2(1.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9000, S4810, and S4820T. Introduced on the Z9500.
Usage Information
This command is only available in the ipsec-manual model.
The key information entry is associated with the global method for enabling clear text or encrypted display in the running config.
show crypto ipsec transform-set
Display the transform set configuration.
Syntax
show crypto ipsec transform-set name
702 Internet Protocol Security (IPSec)
Parameters
name
Enter the name of the transform set.
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(0.2) 9.2(1.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9000, S4810, and S4820T. Introduced on the Z9500.
Example
Dell#show crypto ipsec transform-set
Transform-Set Name Transform-Set refCnt AH Transform ESP Auth Transform ESP Encry Transform Dell#
: dallas : 0 : : : 3des
show crypto ipsec policy
Display the crypto policy configuration.
Syntax
show crypto ipsec policy
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(0.2) 9.2(1.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9000, S4810, and S4820T. Introduced on the Z9500.
Example
Dell(conf-crypto-policy)#do show crypto ipsec policy
Policy name
: pol1
Policy refcount
: 0
Sequence Num
: 1
SA Mode
: IPSEC-MANUAL
Transform-Set Name
:
Peer IP Address
:
Inbound AH SPI
: 0
Inbound ESP Auth SPI : 0
Inbound ESP Encry SPI : 0
Inbound AH Key
: [0]::
Inbound ESP Auth Key : [0]::
Inbound ESP Encry Key : [0]::
Internet Protocol Security (IPSec) 703
Outbound AH SPI
: 0
Outbound ESP Auth SPI : 0
Outbound ESP Encry SPI: 0
Outound AH Key
: [0]::
Outound ESP Auth Key : [0]::
Outound ESP Encry Key : [0]::
Match sequence Num
: 2
Protocol type
: tcp
IP or IPv6
: IP
Source address
: 1.1.1.1
Source mask
: /32
Source port
: 0
Destination address : 1.1.1.2
Destination mask
: /32
Destination port
: 23
source-interface name :
source-interface num :
Dell(conf-crypto-policy)#
transform-set
Specify the transform set the crypto policy uses.
Syntax Parameters
transform-set transform-set-name
To delete a transform set from the crypto policy, use the no transform-set transform-setname command.
transform-setname
Enter the name for the crypto policy transform set.
Defaults
none
Command Modes CONFIG-CRYPTO-POLICY
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(0.2) 9.2(1.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9000, S4810, and S4820T. Introduced on the Z9500.
704 Internet Protocol Security (IPSec)
26
IPv4 Routing
The basic IPv4 commands are supported by Dell Networking operating system on the platform.
Topics:
� arp � arp backoff-time � arp learn-enable � arp max-entries � arp retries � arp timeout � clear arp-cache � clear host � clear ip fib stack-unit � clear ip route � clear tcp statistics � debug arp � debug ip dhcp � debug ipv6 dhcp � debug ip icmp � debug ip packet � ip address � ip directed-broadcast � ip domain-list � ip domain-lookup � ip domain-name � ip helper-address � ip helper-address hop-count disable � ip host � ip icmp source-interface � ipv6 icmp source-interface � ip max-frag-count � ip max-routes � ip mtu � ip name-server � ip proxy-arp � ip route � ip source-route � ip unreachables � load-balance � load-balance hg � management route � show arp � show arp retries � show hosts � show ip cam stack-unit � show ip fib stack-unit � show ip flow � show ip interface � show ip management-route � show ipv6 management-route
IPv4 Routing 705
� show ip protocols � show ip route � show ip route list � show ip route summary � show ip traffic � show tcp statistics
arp
To associate an IP address with a MAC address in the switch, use address resolution protocol (ARP).
Syntax Parameters
arp [vrf vrf-name] ip-address mac-address interface To remove an ARP address, use the no arp ip-address command.
vrf vrf-name
ip-address mac-address interface
Enter a VRF name to configure an ARP entry for that VRF. Use the VRF option after the keyword arp to configure a static arp on that particular VRF.
Enter an IP address in dotted decimal format.
Enter a MAC address in nnnn.nnnn.nnnn format.
(OPTIONAL) Enter any of the following keywords and slot/port or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For the Management interface on the stack-unit, enter the keyword ManagementEthernet then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.5.1.0 8.3.7.0 8.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Added support for VRF. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Introduced on the E-Series ExaScale.
706 IPv4 Routing
Usage Information
Related Commands
Version
7.6.1.0 7.5.1.0 pre-6.2.1.0
Description
Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
You cannot use Class D or Class E IP addresses or zero IP address (0.0.0.0) when creating a static ARP. Zero MAC addresses (00:00:00:00:00:00) are also invalid.
You can use the vrf attribute of this command to create a static ARP entry on either a default or a nondefault VRF. You cannot use this parameter to create any static ARPs corresponding to management VRFs. When a VRF is deleted using the no ip vrf command, all the static ARP configurations that belong to that VRF are removed automatically.
clear arp-cache -- clears dynamic ARP entries from the ARP table. show arp -- displays the ARP table.
arp backoff-time
Set the exponential timer for resending unresolved ARPs.
Syntax Parameters
arp backoff-time seconds
seconds
Enter the number of seconds an ARP entry is black-holed. The range is from 1 to 3600. The default is 30.
Defaults
Command Mode
Command History
30 CONFIGURATION
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.8.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Usage Information
Related Commands
This timer is an exponential backoff timer. Over the specified period, the time between ARP requests increases. This behavior reduces the potential for the system to slow down while waiting for a multitude of ARP responses.
show arp retries -- displays the configured number of ARP retries.
IPv4 Routing 707
arp learn-enable
Enable ARP learning using gratuitous ARP.
Syntax
arp learn-enable
Defaults
Disabled
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced.
Usage Information
In Dell Networking OS versions prior to 8.3.1.0, if a gratuitous ARP is received some time after an ARP request is sent, only RP2 installs the ARP information. For example:
1. At time t=0, Dell Networking OS sends an ARP request for IP A.B.C.D. 2. At time t=1, Dell Networking OS receives an ARP request for IP A.B.C.D. 3. At time t=2, Dell Networking OS installs an ARP entry for A.B.C.D only on RP2.
Beginning with Dell Networking OS version 8.3.1.0, when a gratuitous ARP is received, Dell Networking OS installs an ARP entry on all three CPUs.
arp max-entries
Enables you to configure the maximum number of ARP entries per VRF that are allowed for IPv4..
Syntax Parameters
arp max-entries [vrf vrf-name] max-number
vrf vrf-name max-number
Enter the name of a specific VRF for which you want to configure maximum number of ARP entries that IPv4 allows.
Enter the maximum number of ARP entries that a VRF RTM can hold. The range is from 0 to 65535.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
708 IPv4 Routing
Usage Information
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4.(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S4810 and S4820T.
Use this command to specify the maximum number of ARP entries that the Route Table Manager can hold for a specific VRF. This command does not apply to the management VRFs.
arp retries
Set the number of ARP retries in case the system does not receive an ARP reply in response to an ARP request.
Syntax Parameters
arp retries number
number
Enter the number of retries. The range is from 1 to 20. The default is 5.
Defaults
5
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced.
Usage Information
Related Commands
Retries are 20 seconds apart. show arp retries -- displays the configured number of ARP retries.
arp timeout
Set the time interval for an ARP entry to remain in the ARP cache.
Syntax
arp timeout minutes
IPv4 Routing 709
Parameters
minutes
Enter the number of minutes. The range is from 0 to 35790. The default is 240 minutes.
Defaults
240 minutes (4 hours)
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 pre-6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Related Commands
show interfaces -- displays the ARP timeout value for all available interfaces.
clear arp-cache
Clear the dynamic ARP entries from a specific interface or optionally delete (no-refresh) ARP entries from the content addressable memory (CAM).
Syntax Parameters
clear arp-cache [vrf vrf-name | interface | ip ip-address] [no-refresh]
vrf vrf-name interface
ip ip-address
(OPTIONAL) Enter the keyword vrf and then the name of the VRF to clear the ARP cache corresponding to that VRF.
(OPTIONAL) Enter the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For the Management interface on the stack-unit, enter the keyword ManagementEthernet then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
(OPTIONAL) Enter the keyword ip then the IP address of the ARP entry you wish to clear.
710 IPv4 Routing
no-refresh
(OPTIONAL) Enter the keywords no-refresh to delete the ARP entry from CAM. Or use this option with interface or ip ip-address to specify which dynamic ARP entries you want to delete.
NOTE: Transit traffic may not be forwarded during the period when deleted
ARP entries are resolved again and re-installed in CAM. Use this option with
extreme caution.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.5.1.0 8.3.7.0 8.2.1.0
8.1.1.0 7.9.1.0 7.6.1.0 7.5.1.0 pre-6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Added support for 4094 VLANs on the E-Series ExaScale (the prior limit was 2094). Introduced on the E-Series ExaScale. Introduced VRF on the E-Series. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
clear host
Remove one or all dynamically learned host table entries.
Syntax Parameters
clear host name
name
Enter the name of the host to delete. Enter * to delete all host table entries.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2)
Introduced on the S4048-ON. Introduced on the S3048-ON.
IPv4 Routing 711
Version
9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0
Description
Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series.
clear ip fib stack-unit
Clear all FIB entries in the specified stack unit (use this command with caution, refer to Usage Information.)
Syntax Parameters
clear ip fib stack-unit unit-number vrf vrf-name
unit-number vrf vrf-name
Enter the number of the stack unit.
Enter the keyword vrf followed by the name of the VRF to clear all FIB entries corresponding to that VRF.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4(0.0) 9.0.2.0 9.0.0.0 8.3.7.0 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Added support for VRF. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4810. Introduced on the S4820T.
Usage Information
To clear Layer 3 CAM inconsistencies, use this command. CAUTION: Executing this command causes traffic disruption.
Related Commands
show ip fib stack-unit -- shows FIB entries on a specified stack-unit.
712 IPv4 Routing
clear ip route
Clear one or all routes in the routing table.
Syntax Parameters
clear ip route [vrf vrf-name] {* | ip-address mask}
vrf vrf-name
* ip-address mask
(Optional) Enter the keyword vrf and then the name of the VRF to clear the routes corresponding to that VRF.
Enter an asterisk (*) to clear all learned IP routes.
Enter a specific IP address and mask in dotted decimal format to clear that IP address from the routing table.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.9.1.0 7.6.1.0 7.5.1.0 pre-6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced VRF on the E-Series. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
Use the vrf vrf-name attribute of this command to clear routes corresponding to either a specific VRF or the default VRF. You cannot use this attribute to clear routes corresponding to a management VRF.
ip route -- assigns an IP route to the switch. show ip route -- views the routing table. show ip route summary -- views a summary of the routing table.
clear tcp statistics
Clear TCP counters.
Syntax
clear tcp statistics [all | cp]
IPv4 Routing 713
Parameters
all
cp rp
Enter the keyword all to clear all TCP statistics maintained on all switch processors.
(OPTIONAL) Enter the cp to clear only statistics from the Control Processor.
(OPTIONAL) Enter the keyword rp to clear only the statistics from Route Processor.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
debug arp
View information on ARP transactions.
Syntax Parameters
debug arp [interface] [count value] To stop debugging ARP transactions, use the no debug arp command.
interface count value
(OPTIONAL) Enter the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For the Management interface on the stack-unit, enter the keyword ManagementEthernet then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
(OPTIONAL) Enter the keyword count then the count value. The range is from 1 to 65534.
Defaults
none
Command Modes EXEC Privilege
714 IPv4 Routing
Command History
Usage Information
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.5.1.0 8.3.7.0 8.2.1.0
8.1.1.0 7.6.1.0 7.5.1.0 6.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Added support for 4094 VLANs on the E-Series ExaScale (the prior limit was 2094). Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Added the count option.
To stop packets from flooding the user terminal when debugging is turned on, use the count option.
debug ip dhcp
Enable debug information for dynamic host configuration protocol (DHCP) relay transactions and display the information on the console.
Syntax
debug ip dhcp To disable debug, use the no debug ip dhcp command.
Defaults
Debug disabled
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T.
IPv4 Routing 715
Example
Related Commands
Version
8.3.11.1 8.5.1.0 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 6.4.10
Description
Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Dell#debug ip dhcp 00:12:21 : %RELAY-I-PACKET: BOOTP REQUEST (Unicast) received at interface 113.3.3.17 BOOTP Request, hops = 0, XID = 0xbf05140f, secs = 0, hwaddr = 00:60:CF:20:7B:8C, giaddr = 0.0.0.0 00:12:21 : %RELAY-I-BOOTREQUEST: Forwarded BOOTREQUEST for 00:60:CF:20:7B:8C to 14.4.4.2 00:12:26 : %RELAY-I-PACKET: BOOTP REQUEST (Unicast) received at interface 113.3.3.17 BOOTP Request, hops = 0, XID = 0xbf05140f, secs = 5, hwaddr = 00:60:CF:20:7B:8C, giaddr = 0.0.0.0 00:12:26 : %RELAY-I-BOOTREQUEST: Forwarded BOOTREQUEST for 00:60:CF:20:7B:8C to 14.4.4.2 00:12:40 : %RELAY-I-PACKET: BOOTP REQUEST (Unicast) received at interface 113.3.3.17 BOOTP Request, hops = 0, XID = 0xda4f9503, secs = 0, hwaddr = 00:60:CF:20:7B:8C, giaddr = 0.0.0.0 00:12:40 : %RELAY-I-BOOTREQUEST: Forwarded BOOTREQUEST for 00:60:CF:20:7B:8C to 14.4.4.2 00:12:42 : %RELAY-I-PACKET: BOOTP REPLY (Unicast) received at interface 14.4.4.1 BOOTP Reply, hops = 0, XID = 0xda4f9503, secs = 0, hwaddr = 00:60:CF:20:7B:8C, giaddr = 113.3.3.17 00:12:42 : %RELAY-I-BOOTREPLY: Forwarded BOOTREPLY for 00:60:CF:20:7B:8C to 113.3.3.254 00:12:42 : %RELAY-I-PACKET: BOOTP REQUEST (Unicast) received at interface 113.3.3.17 BOOTP Request, hops = 0, XID = 0xda4f9503, secs = 0, hwaddr = 00:60:CF:20:7B:8C, giaddr = 0.0.0.0 00:12:42 : %RELAY-I-BOOTREQUEST: Forwarded BOOTREQUEST for 00:60:CF:20:7B:8C to 14.4.4.2 00:12:42 : %RELAY-I-PACKET: BOOTP REPLY (Unicast) received at interface 14.4.4.1 BOOTP Reply, hops = 0, XID = 0xda4f9503, secs = 0, hwaddr = 00:60:CF:20:7B:8C, giaddr = 113.3.3.17 00:12:42 : %RELAY-I-BOOTREPLY: Forwarded BOOTREPLY for 00:60:CF:20:7B:8C to 113.3.3.254 Dell#
ip helper-address � specifies the destination broadcast or host address for the DHCP server request. ip helper-address hop-count disable � disables the hop-count increment for the DHCP relay agent.
debug ipv6 dhcp
To enable debug logs for DHCPv6 relay agent transactions.
Syntax
debug ipv6 dhcp To disable the debug logs for dhcpv6 relay agent transactions, use the debug ipv6 dhcp command.
Defaults
none
716 IPv4 Routing
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command-Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4810, S4820T, S6000 and Z-Series.
debug ip icmp
View information on the internal control message protocol (ICMP).
Syntax Parameters
debug ip icmp [interface] [count value] To disable debugging, use the no debug ip icmp command.
interface count value
(OPTIONAL) Enter the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For the Management interface on the stack-unit, enter the keyword ManagementEthernet then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
(OPTIONAL) Enter the keyword count then the count value. The range is from 1 to 65534. The default is Infinity.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.5.1.0 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810.
IPv4 Routing 717
Example
Usage Information
Version
8.2.1.0
8.1.1.0 7.6.1.0 7.5.1.0 6.3.1.0
Description
Added support for 4094 VLANs on the E-Series ExaScale (the prior limit was 2094). Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Added the count option.
ICMP: echo request rcvd from src 40.40.40.40 ICMP: src 40.40.40.40, dst 40.40.40.40, echo reply ICMP: src 40.40.40.40, dst 40.40.40.40, echo reply ICMP: echo request sent to dst 40.40.40.40 ICMP: echo request rcvd from src 40.40.40.40 ICMP: src 40.40.40.40, dst 40.40.40.40, echo reply ICMP: src 40.40.40.40, dst 40.40.40.40, echo reply ICMP: echo request sent to dst 40.40.40.40 To stop packets from flooding the user terminal when debugging is turned on, use the count option.
debug ip packet
View a log of IP packets sent and received.
Syntax Parameters
debug ip packet [access-group name] [count value] [interface]
To disable debugging, use the no debug ip packet [access-group name] [count value] [interface] command.
access-group name count value
interface
Enter the keyword access-group then the access list name (maximum 16 characters) to limit the debug output based on the defined rules in the ACL.
(OPTIONAL) Enter the keyword count then the count value. The range is from 1 to 65534. The default is Infinity.
(OPTIONAL) Enter the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For the Management interface on the stack-unit, enter the keyword ManagementEthernet then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
718 IPv4 Routing
Usage Information
Example
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.5.1.0 8.3.7.0 8.2.1.0
8.1.1.0 7.6.1.0 7.6.1.0 7.5.1.0 6.3.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Added support for 4094 VLANs on the E-Series ExaScale (the prior limit was 2094). Introduced on the E-Series ExaScale. Added the access-group option. Introduced on the S-Series. Introduced on the C-Series. Added the count option.
The following describes the debug ip packet command in the following example.
Field
Description
s=
Lists the source address of the packet and the name of the interface (in
parentheses) that received the packet.
d=
Lists the destination address of the packet and the name of the interface (in
parentheses) through which the packet is being sent out on the network.
len
Displays the packet's length.
sending, rcvd, fragment, sending broad/ multicast proto, unroutable
TCP src=
The last part of each line lists the status of the packet.
Displays the source and destination ports, the sequence number, the acknowledgement number, and the window size of the packets in that TCP packets.
UDP src=
Displays the source and destination ports for the UDP packets.
ICMP type= IP Fragment
Displays the ICMP type and code.
States that it is a fragment and displays the unique number identifying the fragment (Ident) and the offset (in 8-byte units) of this fragment (fragment offset) from the beginning of the original datagram.
IP: s=10.1.2.62 (local), d=10.1.2.206 (Ma 1/1), len 54, sending TCP src=23, dst=40869, seq=2112994894, ack=606901739, win=8191 ACK
PUSH IP: s=10.1.2.206 (Ma 1/1), d=10.1.2.62, len 40, rcvd
TCP src=0, dst=0, seq=0, ack=0, win=0 IP: s=10.1.2.62 (local), d=10.1.2.206 (Ma 1/1), len 226, sending
TCP src=23, dst=40869, seq=2112994896, ack=606901739, win=8192 ACK PUSH IP: s=10.1.2.216 (Ma 1/1), d=10.1.2.255, len 78, rcvd
UDP src=0, dst=0
IPv4 Routing 719
IP: s=10.1.2.62 (local), d=10.1.2.3 (Ma 1/1), len 1500, sending fragment IP Fragment, Ident = 4741, fragment offset = 0 ICMP type=0, code=0
IP: s=10.1.2.62 (local), d=10.1.2.3 (Ma 1/1), len 1500, sending fragment IP Fragment, Ident = 4741, fragment offset = 1480
IP: s=40.40.40.40 (local), d=224.0.0.5 (Te 4/11), len 64, sending broad/ multicast proto=89 IP: s=40.40.40.40 (local), d=224.0.0.6 (Te 4/11), len 28, sending broad/ multicast proto=2 IP: s=0.0.0.0, d=30.30.30.30, len 100, unroutable
ICMP type=8, code=0 IP: s=0.0.0.0, d=30.30.30.30, len 100, unroutable
ICMP type=8, code=0
Usage Information
Example (Error Messages)
To stop packets from flooding the user terminal when debugging is turned on, use the count option.
The access-group option supports only the equal to (eq) operator in TCP ACL rules. Port operators not equal to (neq), greater than (gt), less than (lt), or range are not supported in access-group option (refer to the following example). ARP packets (arp) and Ether-type (ether-type) are also not supported in the access-group option. The entire rule is skipped to compose the filter.
The access-group option pertains to:
IP protocol number: from 0 to 255 Internet control message protocol (icmp) but not the ICMP message type (from 0 to 255) Any internet protocol (ip) Transmission Control Protocol (tcp) but not on the rst, syn, or urg bits User Datagram Protocol (udp)
In the case of ambiguous access control list rules, the debug ip packet access-control command is disabled. A message appears identifying the error (refer to the Example below).
Dell#debug ip packet access-group test %Error: port operator GT not supported in access-list debug %Error: port operator LT not supported in access-list debug %Error: port operator RANGE not supported in access-list debug %Error: port operator NEQ not supported in access-list debug
Dell#00:10:45: %RPM0-P:CP %IPMGR-3-DEBUG_IP_PACKET_ACL_AMBIGUOUS_EXP: Ambiguous rules not supported in access-list debug, access-list debugging is turned off Dell#
ip address
Assign a primary and secondary IP address to the interface.
Syntax Parameters
ip address ip-address mask [secondary] To delete an IP address from an interface, use the no ip address [ip-address] command.
ip-address mask secondary
Enter an IP address in dotted decimal format.
Enter the mask of the IP address in slash prefix format (for example, /24).
(OPTIONAL) Enter the keyword secondary to designate the IP address as the secondary address.
Defaults
Not configured.
Command Modes INTERFACE
720 IPv4 Routing
Command History
Usage Information
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series.
You must be in INTERFACE mode before you add an IP address to an interface. Assign an IP address to an interface prior to entering ROUTER OSPF mode.
ip directed-broadcast
Enables the interface to receive directed broadcast packets.
Syntax
ip directed-broadcast
To disable the interface from receiving directed broadcast packets, use the no ip directedbroadcast command.
Defaults
Disabled (that is, the interface does not receive directed broadcast packets)
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series.
IPv4 Routing 721
Version
7.5.1.0
Description
Introduced on the C-Series.
ip domain-list
Configure names to complete unqualified host names.
Syntax Parameters
ip domain-list name To remove the name, use the no ip domain-list name command.
name
Enter a domain name to be used to complete unqualified names (that is, incomplete domain names that cannot be resolved).
Defaults
Disabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
Related Commands
To configure a list of possible domain names, configure the ip domain-list command up to six times.
If you configure both the ip domain-name and ip domain-list commands, the software tries to resolve the name using the ip domain-name command. If the name is not resolved, the software goes through the list of names configured with the ip domain-list command to find a match.
To enable dynamic resolution of hosts, use the following steps:
specify a domain name server with the ip name-server command enable DNS with the ip domain-lookup command
To view current bindings, use the show hosts command. To view a DNS-related configuration, use the show running-config resolve command.
ip domain-name -- specifies a DNS server.
722 IPv4 Routing
ip domain-lookup
To address resolution (that is, DNS), enable dynamic host-name.
Syntax
ip domain-lookup To disable DNS lookup, use the no ip domain-lookup command.
Defaults
Disabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
Related Commands
To fully enable DNS, also specify one or more domain name servers with the ip name-server command. Dell Networking OS does not support sending DNS queries over a VLAN. DNS queries are sent out all other interfaces, including the Management port. To view current bindings, use the show hosts command.
ip name-server -- specifies a DNS server. show hosts -- Views the current bindings.
ip domain-name
Configure one domain name for the switch.
Syntax Parameters Defaults
ip domain-name name To remove the domain name, use the no ip domain-name command.
name Not configured.
Enter one domain name to be used to complete unqualified names (that is, incomplete domain names that cannot be resolved).
IPv4 Routing 723
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
Related Commands
You can only configure one domain name with the ip domain-name command. To configure more than one domain name, configure the ip domain-list command up to six times. To enable dynamic resolution of hosts, use the following steps: specify a domain name server with the ip name-server command enable DNS with the ip domain-lookup command To view current bindings, use the show hosts command.
ip domain-list -- configures additional names.
ip helper-address
Specify the address of a DHCP server so that DHCP broadcast messages can be forwarded when the DHCP server is not on the same subnet as the client.
Syntax Parameters
ip helper-address ip-address To remove a DHCP server address, use the no ip helper-address command.
ip-address
Enter an IP address in dotted decimal format (A.B.C.D).
Defaults
Not configured.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2)
Introduced on the S4048-ON. Introduced on the S3048-ON.
724 IPv4 Routing
Usage Information
Version
9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.9.1.0 7.6.1.0 7.5.1.0 pre-6.2.1.1
Description
Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Added support for IPv6. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced VRF on the E-Series. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
You can add multiple DHCP servers by entering the ip helper-address command multiple times. If multiple servers are defined, an incoming request is sent simultaneously to all configured servers and the reply is forwarded to the DHCP client.
Dell Networking OS uses standard DHCP ports, that is UDP ports 67 (server) and 68 (client) for DHCP relay services. It listens on port 67 and if it receives a broadcast, the software converts it to unicast, and forwards to it to the DHCP-server with source port=68 and destination port=67.
The server replies with source port=67, destination port=67 and Dell Networking OS forwards to the client with source port=67, destination port=68.
ip helper-address hop-count disable
Disable the hop-count increment for the DHCP relay agent.
Syntax
ip helper-address hop-count disable
To re-enable the hop-count increment, use the no ip helper-address hop-count disable command.
Defaults
Enabled; the hops field in the DHCP message header is incremented by default.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000.
IPv4 Routing 725
Usage Information
Related Commands
Version
8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 6.3.1.0
Description
Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced for the E-Series.
This command disables the incrementing of the hops field when boot requests are relayed to a DHCP server through Dell Networking OS. If the incoming boot request already has a non-zero hops field, the message is relayed with the same value for hops. However, the message is discarded if the hops field exceeds 16, to comply with the relay agent behavior specified in RFC 1542.
ip helper-address -- specifies the destination broadcast or host address for DHCP server requests.
show running-config -- displays the current configuration and changes from the default values.
ip host
Assign a name and an IP address to the host-to-IP address mapping table.
Syntax Parameters
ip host name ip-address To remove an IP host, use the no ip host name [ip-address] command.
name ip address
Enter a text string to associate with one IP address. Enter an IP address, in dotted decimal format, to be mapped to the name.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced for the E-Series.
726 IPv4 Routing
ip icmp source-interface
Enable the ICMP error and unreachable messages to be sent with the source interface IP address, such as the loopback address, instead of the hops of the preceding devices along the network path to be used for easy debugging and diagnosis of network disconnections and reachability problems with IPv4 packets.
Syntax Parameters
ip icmp source-interface interface
interface
Enter one of the following keywords and slot/port[/subport] or number information:
For a Management Ethernet interface, enter the keyword managementethernet. NOTE: When you configure the capability to enable the loopback IP
address to be sent for easy debugging and diagnosis (IP addresses of the
devices for which the ICMP source interface is configured), the source IP
address of the outgoing ICMP error message is modified, although the
packets are not sent out using the configured interface. Because the
management interface is configured without any parameters such as the IP
address, it is treated to the management interface of the primary unit or
the existing unit.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For a port channel interface, enter the keywords port-channel then a number.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
9.3(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S4810, S4820T, S6000, and Z9000 platforms.
Usage Information
You can enable the mechanism to configure the source or the originating interface from which the packet (the device that generates the ICMP error messages) is received by the switch to send the loopback address instead of its source IP address to be used in the ICMP unreachable messages and in the traceroute command output. The loopback address must be unique in a particular domain.
In network environments that contain a large number of devices, ranging up to thousands of systems, and with each device configured for equal-cost multipath (ECMP) links, you cannot effectively and optimally use the traceroute and ping applications to examine the network reachablity and identify any broken links for diagnostic purposes. In such cases, if the reply that is obtained from each hop on the network path contains the IP address of the adjacent, neighboring interface from which the packet is received, it is difficult to employ the ping and traceroute utilites. You can enable the ICMP unreachable messages to contain the loopback address of the source device instead of the previous hop's IP address to be able to easily and quickly identify the device and devices along the path because the DNS server maps the loopback IP address to the hostname and does not translate the IP address of every interface of the switch to the hostname.
IPv4 Routing 727
Example
Dell(conf)#ip icmp source-interface tengigabitethernet 1/1 Dell(conf)#
ipv6 icmp source-interface
Enable the ICMP error and unreachable messages to be sent with the source interface IP address, such as the loopback address, instead of the hops of the preceding devices along the network path to be used for easy debugging and diagnosis of network disconnections and reachability problems with IPv6 packets.
Syntax Parameters
ipv6 icmp source-interface interface
interface
Enter one of the following keywords and slot/port[/subport] or number information:
For a Management Ethernet interface, enter the keyword managementethernet. NOTE: When you configure the capability to enable the loopback IP
address to be sent for easy debugging and diagnosis (IP addresses of the
devices for which the ICMP source interface is configured), the source IP
address of the outgoing ICMP error message is modified, although the
packets are not sent out using the configured interface. Because the
management interface is configurable only without any parameters such as
the IP address, it is treated to the management interface of the primary
unit or the existing unit.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For a port channel interface, enter the keywords port-channel then a number.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
9.3(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S4810, S4820T, S6000, and Z9000 platforms.
Usage Information
You can enable the mechanism to configure the source or the originating interface from which the packet (the device that generates the ICMP error messages) is received by the switch to send the loopback address instead of its source IP address to be used in the ICMP unreachable messages and in the traceroute command output. The loopback address must be unique in a particular domain.
In network environments that contain a large number of devices, ranging up to thousands of systems, and with each device configured for equal-cost multipath (ECMP) links, you cannot effectively and optimally use the traceroute and ping applications to examine the network reachablity and identify any broken links for diagnostic purposes. In such cases, if the reply that is obtained from each hop on the network path contains the IP address of the adjacent, neighboring interface from which the packet is received, it is difficult to employ the ping and traceroute utilites. You can enable the ICMP unreachable messages to contain the loopback address of the source device instead of the previous hop's IP address to be able to
728 IPv4 Routing
Example
easily and quickly identify the device and devices along the path because the DNS server maps the loopback IP address to the hostname and does not translate the IP address of every interface of the switch to the hostname
Dell(conf)#ipv6 icmp source-interface tengigabitethernet 1/1 Dell(conf)#
ip max-frag-count
Set the maximum number of fragments allowed in one packet for packet re-assembly.
Syntax Parameters
ip max-frag-count count To place no limit on the number of fragments allowed, use the no ip max-frag-count command.
count
Enter a number for the number of fragments allowed for re-assembly. The range is from 2 to 256.
Defaults
No limit is set on number of fragments allowed.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced for the E-Series.
Usage Information
To avoid denial of service (DOS) attacks, keep the number of fragments allowed for re-assembly low.
ip max-routes
Enables you to configure the maximum number of protocol routes per VRF that are allowed for IPv4.
Syntax
ip max-routes [vrf vrf-name] max-number
IPv4 Routing 729
Parameters
vrf vrf-name max-number
Enter the keyword vrf and then the name of the VRF for which you want to configure maximum number of protocol routes that IPv4 allows.
Enter the maximum number of protocol routes that a VRF RTM can hold. The range is from 0 to 7500.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version 9.4.(0.0) Introduced on the S4810 and S4820T.
Usage Information
Related Commands
Use this command to specify the maximum number of protocol routes that the Route Table Manager can hold for a specific VRF. This command does not apply to the management VRFs.
show ip route -- views the switch routing table.
show ipv6 route -- displays the IPv6 routes.
ip mtu
Set the IP MTU (frame size) of the packet the RPM transmits for the line card interface. If the packet must be fragmented, Dell Networking OS sets the size of the fragmented packets to the size specified in this command.
Syntax Parameters
ip mtu value To return to the default IP MTU value, use the no ip mtu command.
value
Enter the maximum MTU size if the IP packet is fragmented. The range is from 576 to 9234. The default is 1500 bytes.
Defaults
1500 bytes
Command Modes INTERFACE (Gigabit Ethernet and 10-Gigabit Ethernet interfaces)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Verison
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 8.3.19.0 8.3.7.0 8.1.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the E-Series.
Usage Information
When you enter the no mtu command, Dell Networking OS reduces the ip mtu value to 1536 bytes. To return the IP MTU value to the default, use the no ip mtu command.
Starting with Dell Networking OS Release 9.2(0.2), the ip mtu command is not supported to configure the IP MTU value that is used when the IP packet is fragmented. Instead of having to configure the IP
730 IPv4 Routing
Related Commands
MTU value, this value is automatically computed by the software when you configure an interface. As a result, the ip mtu command is not available for configuration. However, you can continue to specify the link MTU value by using the mtu command.
Compensate for Layer 2 header when configuring link MTU on an Ethernet interface or Dell Networking OS may not fragment packets. If the packet includes a Layer 2 header, the difference between the link MTU and IP MTU (the ip mtu command) must be enough bytes to include for the Layer 2 header.
Link MTU and IP MTU considerations for Port Channels and VLANs are as follows
Port Channels:
All members must have the same link MTU value and the same IP MTU value. The Port Channel link MTU and IP MTU must be less than or equal to the link MTU and IP MTU values
configured on the channel members. For example, if the members have a link MTU of 2100 and an IP MTU 2000, the Port Channel's MTU values cannot be higher than 2100 for link MTU or 2000 bytes for IP MTU.
VLANs:
All members of a VLAN must have same IP MTU value. Members can have different Link MTU values. Tagged members must have a link MTU 4 bytes higher
than untagged members to account for the packet tag. The VLAN link MTU and IP MTU must be less than or equal to the link MTU and IP MTU values
configured on the VLAN members. For example, the VLAN contains tagged members with Link MTU of 1522 and IP MTU of 1500 and untagged members with Link MTU of 1518 and IP MTU of 1500. The VLAN's Link MTU cannot be higher than 1518 bytes and its IP MTU cannot be higher than 1500 bytes.
The following describes the difference between Link MTU and IP MTU.
Layer 2 Overhead
Difference between Link MTU and IP MTU
Ethernet (untagged)
18 bytes
VLAN Tag
Tag 22 bytes
Untagged Packet 22 bytes with VLAN-Stack Header
Tagged Packet 26 bytes with VLAN-Stack Header
mtu -- sets the link MTU for an Ethernet interface.
ip name-server
Enter up to six IPv4 addresses of name servers. The order you enter the addresses determines the order of their use.
Syntax Parameters
ip name-server ipv4-address [ipv4-address2...ipv4-address6] To remove a name server, use the no ip name-server ip-address command.
ipv4-address
ipv4-address2... ipv4-address6
Enter the IPv4 address, in dotted decimal format, of the name server to be used.
(OPTIONAL) Enter up five more IPv4 addresses, in dotted decimal format, of name servers to be used. Separate the addresses with a space.
Defaults
No name servers are configured.
Command Modes CONFIGURATION
IPv4 Routing 731
Command History
Usage Information
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Dell Networking OS does not support sending DNS queries over a VLAN. DNS queries are sent out on all other interfaces, including the Management port.
You can separately configure both IPv4 and IPv6 domain name servers.
ip proxy-arp
Enable proxy ARP on an interface.
Syntax
ip proxy-arp To disable proxy ARP, use the no ip proxy-arp command.
Defaults
Enabled.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
732 IPv4 Routing
Related Commands
Version
8.1.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Description
Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
show ip interface -- displays the interface routing status and configuration.
ip route
Assign a static route to the switch.
Syntax Parameters
ip route [vrf vrf-name] ip-address mask {ip-address | interface [ipaddress]} [distance] [permanent] [tag tag-value] [vrf vrf-name] [weight weight-value]
To delete a specific static route, use the no ip route destination mask command.
To delete all routes matching a certain route, use the no ip route destination mask command.
vrf vrf-name destination mask ip-address interface
interface ipaddress distance
(Optoinal) Enter the keyword vrf and then the name of the VRF to configure a static route corresponding to that VRF. Use this VRF option after the ip route keyword to configure a static route on that particular VRF.
Enter the IP address in dotted decimal format of the destination device.
Enter the mask in the slash prefix format (/x) of the destination IP address.
Enter the IP address of the forwarding router in dotted decimal format.
Enter one of the following keyword followed by the slot/port[/subport] number:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For the Management interface on the stack-unit, enter the keyword ManagementEthernet then the slot/port information. The slot range is from 1 to 11. The port range is 1.
For a port channel interface, enter the keywords port-channel then a number.
For a Null interface, enter the keyword null then the Null interface number. For a VLAN interface, enter the keyword vlan then a number from 1 to 4094. For a tunnel interface, enter the keyword tunnel then the tunnel interface
number. The range is from 1 to 16383.
If you configure a static IPv6 route using an egress interface and enter the ping command to reach the destination IPv6 address, the ping operation may not work. Configure the IPv6 route using a next-hop IPv6 address in order for the ping command to detect the destination address.
Enter the keyword interface then the IP address.
(OPTIONAL) Enter the value of the distance metric assigned to the route. The range is from 1 to 255.
IPv4 Routing 733
permanent
tag tag-value vrf vrf-name
weight weightvalue
(OPTIONAL) Enter the keyword permanent to specify that the route must not be removed even if the interface assigned to that route goes down. The route must be currently active to be installed in the routing table. If you disable the interface, the route is removed from the routing table.
(OPTIONAL) Enter the keyword tag then a number to assign to the route. The range is from 1 to 4294967295.
Enter the keyword vrf followed by the name of the VRF. Use this VRF option after the next hop to specify which VRF the next hop belongs to. This setting is used in route leaking cases. Refer to the Route Leaking VRFs section in the Virtual Routing and Forwarding (VRF) chapter of the Configuration guide.
Enter the keyword weight followed by a weight value. The range is from 0 to 255. NOTE: Weight for a static route can be added only for the destination address and not for the route pointing to destination a interface.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.2.(0.0) 8.3.19.0 8.3.11.1 8.5.1.0 8.3.7.0 8.2.1.0
8.1.1.0 7.9.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Added support for tunnel interface type. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Added support for 4094 VLANs on the E-Series ExaScale (the prior limit was 2094). Introduced on the E-Series ExaScale. Introduced VRF on the E-Series. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Using the following example of a static route: ip route 33.33.33.0 /24 tengigabitethernet 1/1 172.31.5.43
The software installs a next hop that is not on the directly connected subnet but which recursively resolves to a next hop on the interface's configured subnet. In the example, if tengig 1/1 has an ip address on subnet 2.2.2.0 and if 172.31.5.43 recursively resolves to 2.2.2.0, Dell Networking OS installs the static route.
When the interface goes down, Dell Networking OS withdraws the route. When the interface comes up, Dell Networking OS re-installs the route. When recursive resolution is "broken," Dell Networking OS withdraws the route. When recursive resolution is satisfied, Dell Networking OS re-installs the route.
734 IPv4 Routing
Example
Related Commands
You can specify a weight for an IPv4 or IPv6 static route. If the weight value of a path is 0, then that path is not used for forwarding when weighted ECMP is in effect. Also, if a path corresponding to a static route (destination) has a non-zero weight assigned to it and other paths do not have any weight configured, then regular ECMP is used for forwarding. You can specify the weight value only to destination address and not on the egress port. A route is considered for weighted ECMP calculations only if each paths corresponding to that route is configured with a weight. You cannot use the VRF attribute of this command to configure routes in a management VRF. When a specific VRF is deleted, all the configured static routes corresponding to that VRF are automatically removed.
Dell(conf)#ip route 1.1.1.0/24 4.4.4.2 weight 100 Dell(conf)#ip route 1.1.1.0/24 6.6.6.2 weight 200 Dell(conf)#do show running-config | grep route ip route 1.1.1.0/24 4.4.4.2 weight 100 ip route 1.1.1.0/24 6.6.6.2 weight 200 Dell(conf)#ip route vrf test 1.1.1.0/24 4.4.4.2 weight 100 Dell(conf)#ip route vrf test 1.1.1.0/24 6.6.6.2 weight 200 Dell(conf)# Dell(conf)#do show running-config | grep route ip route vrf test 1.1.1.0/24 4.4.4.2 weight 100 ip route vrf test 1.1.1.0/24 6.6.6.2 weight 200
show ip route -- views the switch routing table.
ip source-route
Enable Dell Networking OS to forward IP packets with source route information in the header.
Syntax
ip source-route To drop packets with source route information, use the no ip route-source command.
Defaults
Enabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series.
IPv4 Routing 735
Version
pre-6.1.1.0
Description
Introduced on the E-Series.
ip unreachables
Enable the generation of internet control message protocol (ICMP) unreachable messages.
Syntax
ip unreachables To disable the generation of ICMP messages, use the no ip unreachables command.
Defaults
Disabled.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
load-balance
By default, for C-Series and S-Series, Dell Networking OS uses an IP 4-tuple (IP SA, IP DA, Source Port, and Destination Port) to distribute IP traffic over members of a Port Channel as well as equal-cost paths. To designate another method to balance traffic over Port Channel members, use the load-balance command.
Syntax
load-balance {ip-selection [dest-ip | source-ip]} | {mac [dest-mac | source-dest-mac | source-mac]} | {tcp-udp | ingress-port [enable]}
To return to the default setting (IP 4-tuple), use the no load-balance {ip-selection [destip | source-ip]} | {mac [dest-mac | source-dest-mac | source-mac]} | {tcpudp | ingress-port [enable]}command.
736 IPv4 Routing
Parameters
ip-selection {dest-ip | source-ip}
Enter the keywords to distribute IP traffic based on the following criteria:
dest-ip -- Uses destination IP address and destination port fields to hash. The hashing mechanism returns a 3-bit index indicating which port the packet should be forwarded.
source-ip -- Uses source IP address and source port fields to hash. The hashing mechanism returns a 3-bit index indicating which port the packet should be forwarded.
mac {dest-mac | source-dest-mac | source-mac}
Enter the keywords to distribute MAC traffic based on the following criteria:
dest-mac -- Uses the destination MAC address, VLAN, Ethertype, source module ID and source port ID fields to hash. The hashing mechanism returns a 3-bit index indicating which port the packet should be forwarded.
source-dest-mac -- Uses the destination and source MAC address, VLAN, Ethertype, source module ID and source port ID fields to hash. The hashing mechanism returns a 3-bit index indicating which port the packet should be forwarded.
source-mac -- Uses the source MAC address, VLAN, Ethertype, source module ID and source port ID fields to hash. The hashing mechanism returns a 3-bit index indicating which port the packet should be forwarded.
tcp-udp enable
Enter the keywords to distribute traffic based on the following:
enable -- Takes the TCP/UDP source and destination ports into consideration when doing hash computations. This option is enabled by default.
ingress-port enable
Enter the keywords to distribute traffic based on the following:
enable -- Takes the source port into consideration when doing hash computations. This option is disabled by default.
Defaults
IP 4-tuple (IP SA, IP DA, Source Port, Destination Port)
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.10.0 8.3.7.0 7.6.1.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added the ingress-port parameter for the S4810. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
By default, Dell Networking OS distributes incoming traffic based on a hash algorithm using the following criteria:
IP source address IP destination address TCP/UDP source port
IPv4 Routing 737
TCP/UDP destination port
load-balance hg
Choose the traffic flow parameters the hash calculation uses while distributing the traffic across internal higig links.
Syntax Parameters
[no] load-balance hg {ip-selection | ipv6-selection [source-ip | sourceipv6 | source-port-id | source-module-id | dest-ip | dest-ipv6 | dest-portid | dest-module-id | protocol | vlan | L4-source-port | L4-dest-port ] | mac [source-mac | source-port-id | source-module-id | dest-mac | dest-portid | dest-module-id | vlan | ethertype | source-dest-mac ] | tunnel [ipv4over-ipv4 | ipv4-over-gre-ipv4 | mac-in-mac]}
{{ip-selection| To use IPv4 key fields in hash computation, enter the keyword ip-selection
ipv6-selection then one of the parameters. To use IPv6 key fields in hash computation, enter the
[source-ip |
keyword ipv6-selection then one of the parameters.
source-ipv6 | source-port-id |
source-ip -- Use IPv4 src-ip field in hash calculation.
source-module-id source-ipv6 -- Use IPv6 src-ip field in hash calculation
| dest-ip | dest- source-port-id -- Use src-port-id field in hash calculation.
ipv6 | dest-port- source-module-id -- Use src-module-id field in hash calculation.
id | dest-module- dest-ip -- Use IPv4 dest-ip field in hash calculation.
id | protocol | vlan | L4-sourceport | L4-destport ]
dest-ipv6 -- Use IPv6 dest-ip field in hash calculation dest-port-id -- Use dest-port-id field in hash calculation. dest-module-id -- Use dest-module-id field in hash calculation.
protocol -- Use IPv4 protocol field in hash calculation.
vlan -- Use vlan field in hash calculation.
L4-source-port -- Use IPv4 L4-source-port field in hash calculation.
L4-dest-port -- Use IPv4 L4-dest-port field in hash calculation.
mac [source-mac To use MAC key fields in hash computation, enter the keyword mac then one of
| source-port-id | the parameters:
source-module-id | dest-mac |
source-mac -- Use source-mac field in hash calculation.
dest-port-id |
source-port-id -- Use src-port-id field in hash calculation.
dest-module-id | source-module-id -- Use src-module-id field in hash calculation.
vlan | ethertype | dest-mac -- Use dest-mac field in hash calculation.
source-destmac ]
dest-port-id -- Use dest-port-id field in hash calculation. dest-module-id -- Use dest-module-id field in hash calculation.
vlan -- Use vlan field in hash calculation .
ethertype -- Use Ethertype field in hash calculation.
source-dest-mac -- Use SMAC and DMAC fields in hash calculation.
tunnel [ipv4over-ipv4 | ipv4over-gre-ipv4 | mac-in-mac]}
To use tunnel key fields in hash computation, enter the keyword tunnel then one of the parameters:
ipv4-over-ipv4 -- Use ipv4-over-ipv4 field in hash calculation. ipv4-over-gre-ipv4 -- Use ipv4-over-gre-ipv4 field in hash calculation. mac-in-mac -- Use mac-in-mac field in hash calculation.
Defaults
IP selection 5-tuples (source-ip dest-ip vlan protocol L4-source-port L4-dest-port).
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
738 IPv4 Routing
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.11.1 8.3.7.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Added support for IPv6. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
management route
Configure a static route that points to the Management interface or a forwarding router.
Syntax Parameters
management route {{ip-address mask | {ipv6-address prefix-length}} {forwarding-router-address | managementethernet | fortyGigE | vlan | tengigabitethernet}
To remove a static route, use the no management route{{ip-address mask | {ipv6address prefix-length}}{forwarding-router-address | managementethernet | fortyGigE | vlan | gigabitethernet | tengigabitethernet} command.
ip-address mask
ipv6-address prefix-length
Enter an IP address (dotted decimal format) and mask (/prefix format) of the destination subnet.
Enter an IPv6 address (x:x:x:x::x format) and mask (/prefix format) of the destination subnet. Enter the IPv6 address in the x:x:x:x::x format followed by the prefix length in the /x format.
The range is from /0 to /128.
NOTE: The :: notation specifies successive hexadecimal fields of zeros.
forwardingrouter-address
Enter an IP address (dotted decimal format) or an IPv6 address (x:x:x:x::x format) of a forwarding router.
managementethe Enter the keyword managementethernet for the Management interface on the
rnet
Primary RPM.
fortyGigE
Enter the keyword fortyGigE to specify a forty Gigbit Ethernet interface.
vlan
Enter the keyword vlan to specify a vlan interface.
tengigabitethern Enter the keyword tengigabitethernet to specify a ten Gigabit Ethernete interface. et
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
IPv4 Routing 739
Usage Information
Related Commands
Version
9.8(0.0P2) 9.7(0.0)
9.0.2.0 9.0.0.0 8.3.19.0 8.3.11.1 8.1.1.0 7.5.1.0 pre-6.1.1.0
Description
Introduced on the S3048-ON. Added support for forty gigabit, vlan, and tengigabit ethernet interfaces. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the Z9000 and added support for IPv6. Introduced on the S4820T. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the C-Series. Introduced on the E-Series.
When a static route (or a protocol route) overlaps with Management static route, the static route (or a protocol route) is preferred over the Management Static route. Also, Management static routes and the Management Connected prefix are not reflected in the hardware routing tables. Separate routing tables are maintained for IPv4 and IPv6 management routes. This command manages both tables.
interface ManagementEthernet -- configures the Management port on the system (either the Primary or Standby RPM).
speed (Management interface) -- sets the speed for the Management interface.
show arp
Display the ARP table.
Syntax Parameters
show arp [vrf vrf-name] [interface interface | ip ip-address [mask] | macaddress mac-address [mac-address mask]] [retries] [static | dynamic] [inspection {database | statistics][summary]
vrf vrf-name
(OPTIONAL) Enter the keyword vrf and then the name of the VRF. NOTE: Use this attribute to start a BGP instance for either a specific address family corresponding to the default VRF or an IPv4 address family corresponding to a non-default VRF.
interface interface
ip ip-address mask inspection
(OPTIONAL) Enter the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For the Management interface on the stack-unit, enter the keyword ManagementEthernet then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
(OPTIONAL) Enter the keyword ip then an IP address in the dotted decimal format. Enter the optional IP address mask in the slash prefix format (/ x).
Enter the keyword inspection with one of the following keywords to view ARP entries:
740 IPv4 Routing
database -- view a list of ARP entries learned using DAI statistics -- view DAI statistics
macaddress mac- (OPTIONAL) Enter the keyword macaddress then a MAC address in
address mask
nn:nn:nn:nn:nn:nn format. Enter the optional MAC address mask in nn:nn:nn:nn:nn
format also.
static
(OPTIONAL) Enter the keyword static to view entries entered manually.
retries
(OPTIONAL) Enter the keyword retries to show the number of ARP retries before a 20�second back off.
dynamic
(OPTIONAL) Enter the keyword dynamic to view dynamic entries.
summary
(OPTIONAL) Enter the keyword summary to view a summary of ARP entries.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.5.1.0 8.3.7.0 8.2.1.0
8.1.1.0 7.9.1.0 7.8.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Added support for 4094 VLANs on the E-Series ExaScale (the prior limit was 2094). Introduced on the E-Series ExaScale. Introduced VRF on the E-Series. Augmented to display local ARP entries learned from private VLANs (PVLANs). Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
The following example shows two VLANs that are associated with a private VLAN (PVLAN) (refer to Private VLAN (PVLAN)).
If you have entered the clear arp-cache command to remove a large number of ARP entries and the command is still being processed in the background, an error message display if you attempt to enter the show arp command:
Clear arp in-progress. Please try after sometime!
The following describes the show arp command shown in the following example.
Description
Protocol Address
Displays the protocol type. Displays the IP address of the ARP entry.
IPv4 Routing 741
Example
Description
Age(min) Hardware Address Interface
VLAN CPU
Displays the age (in minutes) of the ARP entry. Displays the MAC address associated with the ARP entry.
Displays the first two letters of the interfaces type and the slot/port associated with the ARP entry. Displays the VLAN ID, if any, associated with the ARP entry. Lists which CPU the entries are stored on.
Dell>show arp
Protocol Address Age(min) Hardware Address Interface VLAN CPU
-------------------------------------------------------------
Internet 192.2.1.254 1 00:00:c0:02:01:02 Te 2/13 -
CP
Internet 192.2.1.253 1 00:00:c0:02:01:02 Te 2/13 -
CP
Internet 192.2.1.252 1 00:00:c0:02:01:02 Te 2/13 -
CP
Internet 192.2.1.251 1 00:00:c0:02:01:02 Te 2/13 -
CP
Internet 192.2.1.250 1 00:00:c0:02:01:02 Te 2/13 -
CP
Internet 192.2.1.251 1 00:00:c0:02:01:02 Te 2/13 -
CP
Internet 192.2.1.250 1 00:00:c0:02:01:02 Te 2/13 -
CP
Internet 192.2.1.249 1 00:00:c0:02:01:02 Te 2/13 -
CP
Internet 192.2.1.248 1 00:00:c0:02:01:02 Te 2/13 -
CP
Internet 192.2.1.247 1 00:00:c0:02:01:02 Te 2/13 -
CP
Internet 192.2.1.246 1 00:00:c0:02:01:02 Te 2/13 -
CP
Internet 192.2.1.245 1 00:00:c0:02:01:02 Te 2/13 -
CP
Example (Private VLAN)
NOTE: In this example, Line 1 shows community VLAN 200 (in primary VLAN 10) in a PVLAN. Line 2 shows primary VLAN 10.
Dell#show arp
Protocol Address Age(min) Hardware Address Interface VLAN CPU
---------------------------------------------------------------
Internet 5.5.5.1
- 00:01:e8:43:96:5e -
Vl 10 pv 200 CP
Internet 5.5.5.10
- 00:01:e8:44:99:55 -
Vl 10
CP
Internet 10.1.2.4
1 00:01:e8:d5:9e:e2 Ma 1/1 -
CP
Internet 10.10.10.4
1 00:01:e8:d5:9e:e2 Ma 1/1 -
CP
Internet 10.16.127.53 1 00:01:e8:d5:9e:e2 Ma 1/1 -
CP
Internet 10.16.134.254 20 00:01:e8:d5:9e:e2 Ma 1/1 -
CP
Internet 133.33.33.4 1 00:01:e8:d5:9e:e2 Ma 1/1 -
CP
Usage Information
Example (Summary)
The following describes the show arp summary command shown in the following example.
Description
Total Entries Static Entries Dynamic Entries CPU
Lists the total number of ARP entries in the ARP table. Lists the total number of configured or static ARP entries. Lists the total number of learned or dynamic ARP entries. Lists which CPU the entries are stored on.
#show arp summary
TotalEntries Static Entries Dynamic Entries CPU
----------------------------------------------
83
0
83
CP
Dell
Related Commands
ip local-proxy-arp -- enables/disables Layer 3 communication in secondary VLANs. switchport mode private-vlan -- sets PVLAN mode of the selected port.
742 IPv4 Routing
show arp retries
Display the configured number of ARP retries.
Syntax
show arp retries
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced.
Related Commands
arp retries -- sets the number of ARP retries in case the system does not receive an ARP reply in response to an ARP request.
show hosts
View the host table and DNS configuration.
Syntax
show hosts
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Added support for IPv6 addresses. Introduced on the S4820T.
IPv4 Routing 743
Usage Information
Example Related Commands
Version
8.3.11.1 8.1.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Description
Introduced on the Z9000. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
The following describes the show hosts command in the following example.
Field
Description
Default domain... Displays the domain name (if configured).
Name/address lookup...
States if DNS is enabled on the system.
If DNS is enabled, the Name/Address lookup is domain service. If DNS is not enabled, the Name/Address lookup is static mapping
Name servers are...
Host
Flags
Lists the name servers, if configured.
Displays the host name assigned to the IP address. Classifies the entry as one of the following: perm -- the entry was manually configured and will not time out temp -- the entry was learned and will time out after 72 hours of inactivity. Also included in the flag is an indication of the validity of the route: ok -- the entry is valid. ex -- the entry expired. ?? -- the entry is suspect.
TTL
Type Address
Displays the amount of time until the entry ages out of the cache. For dynamically learned entries only.
Displays IP as the type of entry.
Displays the IP addresses assigned to the host.
Dell#show hosts
Default domain is not set
Name/address lookup uses static mappings
Name servers are not set
Host
Flags
TTL Type Address
-------- -----
---- ---- -------
ks
(perm, OK) -
IP
2.2.2.2
4200-1 (perm, OK) -
IP
192.68.69.2
1230-3 (perm, OK) -
IP
192.68.99.2
ZZr
(perm, OK) -
IP
192.71.18.2
Z10-3 (perm, OK) -
IP
192.71.23.1
Dell#
traceroute -- views the DNS resolution. ip host -- configures a host.
744 IPv4 Routing
show ip cam stack-unit
Display CAM entries for a port-pipe of a stack-unit on a S-Series or Z-Series switch.
Syntax Parameters
show ip cam stack-unit {stack-unit-number} [port-set {pipe-number} | vrf vrf-name {ip-address mask [longer-prefixes [ecmp-group detail]]}| ecmpgroup {detail | member-info [detail [group-index index-number]]}| summary]
stack-unitnumber
port-set pipenumber
vrf vrf-name
network mask [longer-prefixes [ecmp-group detail]]
Enter the stack-unit ID. The unit ID range is from 1 to 6.
Enter the keyword port-set then the number of the stack unit's port-pipe. The unit ID range is from 0 to 0.
Enter the keyword vrf followed by the name of the VRF to display CAM entries corresponding to that VRF.
(OPTIONAL) Enter the IP address and mask of a route to CAM entries for that route only. You can enter one of the following keywords to filter results. Enter the keyword longer-prefixes to view routes with a common prefix. Enter the keyword ecmp-group detail to view the ECMP group index.
ecmp-group
(OPTIONAL) Enter the keyword ecmp-group then one of the following keywords
{detail | member- to filter results.
info [detail
[group-index index-number]]}
Enter the keyword detail to view the ECMP group index.
Enter the keyword member-info to view the member information for the ECMP group.
Enter the keyword member-info detail to view detailed ECMP
membership and n-hop information.
Enter the keyword group-index then the index number to show ECMP
membership per group. The range is from 0 to 1022.
summary
(OPTIONAL) Enter the keyword summary to view a table listing route prefixes and the total number routes which can be entered in to CAM.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4(0.0) 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Added support for VRF. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for up to seven stack members. Introduced on the S-Series.
Usage Information
The following describes the show ip cam command shown in the following example.
IPv4 Routing 745
Field
Destination EC C
V Id Mac Addr Port
Description
Displays the destination route of the index.
Displays 1 if the route is an ECMP route. Else, displays 0.
This is the CPU bit. If it displays 1, then it indicates that a packet hitting this entry will be forwarded to the CPU.
Displays the VLAN ID. If the entry is 0, the entry is not part of a VLAN.
Displays the next-hop router's MAC address.
Displays the egress interface. CP = control processor Gi = Gigabit Ethernet interface Te = 10�Gigabit Ethernet interface
Example
Dell#show ip cam stack-unit 3 po 0 1.1.1.0/24 longer-prefixes
Destination EC C VId Mac-Addr
Port
----------------------------------------------------------
1.1.1.2/32
0 0 3000 00:05:00:00:00:02 Te 3/44
1.1.1.1/32
0 1
0 00:00:00:00:00:00 CP
1.1.1.0/24
0 1
0 00:00:00:00:00:00 CP
Dell#
Example (ECMPGroup)
Dell#show ip cam stack-unit 3 po 0 ecmp-group detail
Destination EC C VId Mac-Addr
Port
ECMP Group-Index
----------------------------------------------------------------------
1.1.1.2/32
0 0 1000 00:01:00:00:00:02 Te 3/42
-
2.1.1.2/32
0 0
20 00:03:00:00:00:02 Po 10
-
2.1.1.1/32
0 1
0 00:00:00:00:00:00
CP
-
1.1.1.1/32
0 1
0 00:00:00:00:00:00
CP
-
2.1.1.0/24
0 1
0 00:00:00:00:00:00
CP
-
1.1.1.0/24
0 1
0 00:00:00:00:00:00
CP
-
100.1.1.0/24 1 0
20 00:03:00:00:00:02 Po 10
0
100.1.1.0/24 1 0 1000 00:01:00:00:00:02 Te 3/42
0
0.0.0.0/0
0 1
0 00:00:00:00:00:00
CP
-
Dell#
Example (Member-Info)
Dell#show ip cam stack-unit 3 po 0 ecmp-group member-info detail
Group Index Member Count Mac-Addr
Port
VLan ID
----------------------------------------------------------
0
2
00:03:00:00:00:02 Po 10
20
00:01:00:00:00:02 Te 3/42 1000
Dell#
show ip fib stack-unit
View all Forwarding Information Base (FIB) entries of a specific stack-unit.
Syntax Parameters
show ip fib stack-unit id vrf vrf-name [ip-address [mask] [longer-prefixes] | summary]
id vrf vrf-name
Enter the S-Series stack unit ID. The unit ID range is from 1 to 6.
Enter the keyword vrf followed by the name of the VRF to view FIB entries corresponding to that VRF.
746 IPv4 Routing
ip-address mask longer-prefixes summary
(OPTIONAL) Enter the IP address of the network destination to view only information on that destination. Enter the IP address in dotted decimal format (A.B.C.D). Enter the mask in slash prefix format (/X).
(OPTIONAL) Enter the keywords longer-prefixes to view all routes with a common prefix.
(OPTIONAL) Enter the keyword summary to view the total number of prefixes in the FIB.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for up to seven stack members. Introduced on the S-Series.
Usage Information
Example
The following describes the show ip fib stack-unit command shown in the following example.
Field
Description
Destination Gateway
First-Hop Mac-Addr Port VId EC
Lists the destination IP address. Displays either the word "direct" and an interface for a directly connected route or the remote IP address used to forward the traffic. Displays the first hop IP address. Displays the MAC address. Displays the egress-port information. Displays the VLAN ID. If no VLAN is assigned, zero (0) is listed. Displays the number of ECMP paths.
If weighted ECMP is enabled, then the show ip fib stack-unit command display a new column named W-EC (Weighted ECMP). This column displays either a value of 1 or 0 depending on whether or not a route is assigned with a weight.
Dell#show ip fib stack-unit 1
Destination Gateway
First-Hop Mac-Addr Port
VId EC
---------------------------------------------------------
1.1.1.2/32 via 1.1.1.2, Vl 1000 1.1.1.2 00:01:00:00:00:02
Te 3/42 1000 0
2.1.1.2/32 via 2.1.1.2, Vl 20
2.1.1.2 00:03:00:00:00:02
Po 10
20 0
0.0.0.0/0
-
0.0.0.0 00:00:00:00:00:00
IPv4 Routing 747
CP
0 0
1.1.1.0/24 Direct, Vl 1000
0.0.0.0 00:00:00:00:00:00
CP 1000 0
1.1.1.1/32 via 127.0.0.1
127.0.0.1 00:00:00:00:00:00
CP 0 0
2.1.1.0/24 Direct, Vl 20
0.0.0.0 00:00:00:00:00:00
CP 20 0
2.1.1.1/32 via 127.0.0.1
127.0.0.1 00:00:00:00:00:00
CP 0 0
100.1.1.0/24 via 1.1.1.2, Vl 1000 1.1.1.2 00:01:00:00:00:02
Te 3/42 1000 1
100.1.1.0/24 via 2.1.1.2, Vl 20
2.1.1.2 00:03:00:00:00:02
Po 10 20 1
Dell#
Dell#show ip route
S
10.1.1.0/24
S
20.1.1.0/24
S
100.1.1.0/24
via 1.1.1.2, Vl 10 via 2.1.1.2, Vl 20 via 3.1.1.2, Vl 30 via 10.1.1.0, weight 7 via 20.1.1.0, weight 1
Example (Show command output with Weighted ECMP Enabled)
Dell#show ip fib stack-unit 1
Destination Gateway
First-Hop Mac-Addr
Port
VId EC RC W
--------------------------------------------------
0.0.0.0/0 -
0.0.0.0 00:00:00:00:00:00
CP 0 0 - -
1.1.1.0/24 Direct, Lo 0 0.0.0.0 00:00:00:00:00:00
CP 0 0 - -
1.1.1.1/32 via 127.0.0.1 127.0.0.1 00:00:00:00:00:00
CP 0 0 - -
Related Commands
The RC and W columns in the show output appear only if the weighted ECMP is enabled using the ip ecmp weighted command.
clear ip fib stack-unit -- clear FIB entries on a specified stack-unit. ip ecmp weighted-- enables weighted ECMP calculations.
show ip flow
Show how a Layer 3 packet is forwarded when it arrives at a particular interface.
Syntax Parameters
show ip flow interface interface {source-ip address destination-ip address} {protocol number [tcp | udp]} {src-port number destination-port number}
interface interface
Enter the keyword interface then one of the following interface keywords.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
source-ip address
destination-ip address
protocol number [tcp | udp]
src-port number
Enter the keywords source-ip then the IP source address in IP address format.
Enter the keywords destination-ip then the IP destination address in IP address format. Enter the keyword protocol then one of the protocol type keywords: tcp, udp, or protocol number The protocol number range is from 0 to 255. . Enter the keywords src-port then the source port number.
748 IPv4 Routing
destination-port Enter the keywords destination-port then the destination port number. number
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.10.0 8.5.1.0 8.1.1.0 7.9.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for 4-port 40G line cards on ExaScale. Introduced on the E-Series ExaScale. Introduced VRF on the E-Series. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Example
This command provides egress port information for a given IP flow. This information is useful in identifying which interface the packet follows in the case of Port-channel and Equal Cost Multi Paths. Use this command for routed packed only. For switched packets, use the show port-channel-flow command.
The show ip flow command does not compute the egress port information when load-balance mac hashing is also configured due to insufficient information (the egress MAC is not available).
S-Series produces the following error message: %Error: Unable to read IP route table.
Dell#show ip flow interface te 2/42 20.1.1.1 100.1.1.2 protocol tcp Flow: 20.1.1.1 100.1.1.2 6 Ingress interface: Te 2/42 Egress Interface: Te 2/43 Dell#
show ip interface
View IP-related information on all interfaces.
Syntax Parameters
show ip interface [interface | brief] [configured]
interface
(OPTIONAL) Enter the following keywords and slot/port[/subport] or number information:
IPv4 Routing 749
brief configured
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For the Management interface on the stack-unit, enter the keyword ManagementEthernet then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number.
For a Null interface, enter the keyword null then the Null interface number. For a VLAN interface, enter the keyword vlan then a number from 1 to 4094. For a stack-unit interface, enter the keyword stack-unit then the stack unit
number. For a tunnel interface, enter the keyword tunnel then the tunnel interface
number. The range is from 1 to 16383.
(OPTIONAL) Enter the keyword brief to view a brief summary of the interfaces and whether an IP address is assigned.
(OPTIONAL) Enter the keyword configured to display the physical interfaces with non-default configurations only.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.5.1.0 8.3.7.0 8.1.1.2 8.1.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Supported on the E-Series ExaScale E600i. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
The following describes the show ip interface command shown in the following example.
Lines
Description
TenGigabitEther Displays the interface's type, slot/port[/subport], and physical and line protocol
net 1/1...
status.
750 IPv4 Routing
Example
Lines
Description
Internet address...
States whether an IP address is assigned to the interface. If an IP address is assigned, that address is displayed.
IP MTU is...
Displays IP MTU value.
Inbound access... Displays the name of the configured incoming access list. If none is configured, the phrase "not set" is displayed.
Proxy ARP...
States whether proxy ARP is enabled on the interface.
Split horizon... States whether split horizon for RIP is enabled on the interface.
Poison Reverse... States whether poison for RIP is enabled on the interface.
ICMP redirects... States if ICMP redirects are sent.
ICMP unreachables...
States if ICMP unreachable messages are sent.
Dell#show ip int te 1/1 TenGigabitEthernet 1/1 is down, line protocol is down Internet address is not set IP MTU is 1500 bytes Inbound access list is not set Proxy ARP is enabled Split Horizon is enabled Poison Reverse is disabled ICMP redirects are not sent ICMP unreachables are not sent Dell#
Usage Information
The following describes the show ip interface brief command shown in the following example.
Fields
Description
Interface IP-Address
Displays type of interface and the associated slot and port number. Displays the IP address for the interface, if configured.
Ok?
Indicates if the hardware is functioning properly.
Method Status
Displays "Manual" if the configuration is read from the saved configuration. States whether the interface is enabled (up) or disabled (administratively down).
Protocol
States whether IP is enabled (up) or disabled (down) on the interface.
Example (Brief)
Dell#show ip interface brief
Interface
IP-Address
Protocol
TenGigabitEthernet 1/1 unassigned
down
TenGigabitEthernet 1/2 unassigned
down
TenGigabitEthernet 1/3 unassigned
TenGigabitEthernet 1/4 unassigned
TenGigabitEthernet 1/5 unassigned
TenGigabitEthernet 1/6 10.10.10.1
TenGigabitEthernet 1/7 unassigned
down
OK? Method NO Manual NO Manual YES Manual YES Manual YES Manual YES Manual NO Manual
Status
administratively down
administratively down
up
up
up
up
up
up
up
up
administratively down
IPv4 Routing 751
show ip management-route
View the IP addresses assigned to the Management interface.
Syntax Parameters
show ip management-route [all | connected | summary | static]
all connected summary static
(OPTIONAL) Enter the keyword all to view all IP addresses assigned to all Management interfaces on the switch.
(OPTIONAL) Enter the keyword connected to view only routes directly connected to the Management interface.
(OPTIONAL) Enter the keyword summary to view a table listing the number of active and non-active routes and their sources.
(OPTIONAL) Enter the keyword static to view non-active routes also.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the C-Series. Introduced on the E-Series.
Example
Dell#show ip management-route
Destination ----------10.1.2.0/24 172.16.1.0/24 Dell#
Gateway ------ManagementEthernet 1/1 10.1.2.4
State ----Connected Active
show ipv6 management-route
Display the IPv6 static routes configured for the management interface.
Syntax
show ipv6 management-route [all | connected | summary | static]
752 IPv4 Routing
Parameters
all connected summary static
(OPTIONAL) Enter the keyword all to view all IP addresses assigned to all Management interfaces on the switch.
(OPTIONAL) Enter the keyword connected to view only routes directly connected to the Management interface.
(OPTIONAL) Enter the keyword summary to view a table listing the number of active and non-active routes and their sources.
(OPTIONAL) Enter the keyword static to view non-active routes also.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.4.1.0 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the C- and E-Series. Introduced on the S4810.
Example
Dell#show ipv6 management-route
IPv6 Destination Gateway
----------------
-------
2001:34::0/64
ManagementEthernet 1/1
2001:68::0/64
2001:34::16
Dell#
State ----Connected Active
show ip protocols
View information on all routing protocols enabled and active on the switch.
Syntax
show ip protocols
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON.
IPv4 Routing 753
Example
Version
9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Description
Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Regular evaluation optimization enabled/disabled added to display output. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Dell#show ip protocols Routing Protocol is "bgp 1"
Cluster Id is set to 20.20.20.3 Router Id is set to 20.20.20.3 Fast-external-fallover enabled Regular expression evaluation optimization enabled Capable of ROUTE_REFRESH For Address Family IPv4 Unicast
BGP table version is 0, main routing table version 0 Distance: external 20 internal 200 local 200 Neighbor(s):
Address : 20.20.20.2 Filter-list in : foo Route-map in : foo Weight : 0 Address : 5::6 Weight : 0 Dell#
show ip route
View information, including how they were learned, about the IP routes on the switch.
Syntax Parameters
show ip route [vrf vrf-name] hostname | ip-address [mask] [longer-prefixes] | list prefix-list | protocol [process-id | routing-tag] | all | connected | static | summary]
vrf vrf-name ip-address mask longer-prefixes list prefix-list protocol
(OPTIONAL) Enter the keyword vrf and then the VRF name to list the routes in the route table of a specific VRF.
(OPTIONAL) Specify a name of a device or the IP address of the device to view more detailed information about the route.
(OPTIONAL) Specify the network mask of the route. Use this parameter with the IP address parameter.
(OPTIONAL) Enter the keywords longer-prefixes to view all routes with a common prefix.
(OPTIONAL) Enter the keyword list and the name of a configured prefix list. For more information, refer to the show ip route list command.
(OPTIONAL) Enter the name of a routing protocol (bgp, isis, ospf, rip) or the keywords connected or static.
754 IPv4 Routing
NOTE: bgp, isis, ospf, and rip.
process-id routing-tag connected all static summary
If you enter bgp, you can include the BGP as-number . If you enter isis, you can include the ISIS routing-tag. If you enter ospf, you can include the OSPF process-id.
(OPTIONAL) Specify that only OSPF routes with a certain process ID must be displayed.
(OPTIONAL) Specify that only ISIS routes with a certain routing tag must be displayed.
(OPTIONAL) Enter the keyword connected to view only the directly connected routes.
(OPTIONAL) Enter the keyword all to view both active and non-active routes.
(OPTIONAL) Enter the keyword static to view only routes the ip route command configures.
(OPTIONAL) Enter the keyword summary. For more information, refer to the show ip route summary command.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.9.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced VRF on the E-Series. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
The following describes the show ip route all command in the following example.
Field
Description
(undefined)
Identifies the type of route:
C = connected S = static R = RIP B = BGP IN = internal BGP
IPv4 Routing 755
Example
Example (Summary)
Field
Destination Gateway Dist/Metric Last Change
Description
EX = external BGP LO = Locally Originated O = OSPF IA = OSPF inter area N1 = OSPF NSSA external type 1 N2 = OSPF NSSA external type 2 E1 = OSPF external type 1 E2 = OSPF external type 2 i = IS-IS L1 = IS-IS level-1 L2 = IS-IS level-2 IA = IS-IS inter-area * = candidate default > = non-active route + = summary routes
The weight for weighted ECMP route calculations is displayed for each path in the route in show ip route command. The ECMP weight is displayed only if weighted ECMP is enabled using the ip ecmp weighted command is enabled.
If weighted ECMP is disabled, the show ip route command does not show the weighted ECMP route information.
Identifies the route's destination IP address
Identifies whether the route is directly connected and on which interface the route is configured.
Identifies if the route has a specified distance or metric.
Identifies when the route was last changed or configured.
Dell#show ip route all
Codes:C- connected, S - static, R - RIP B- BGP, IN - internal BGP, EX - external BGP, LO - Locally
Originated O- OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1 N2- OSPF NSSA external type 2, E1 - OSPF external type 1 E2- OSPF external type 2, i - IS-IS, L1 - IS-IS level-1 L2- IS-IS level-2, IA - IS-IS inter area, * - candidate default >- non-active route + - summary route
Gateway of last resort is not set
Destination
Gateway
Dist/Metric Last Change
----------- ------ ----------- -----------
R 3.0.0.0/8
via 100.10.10.10, Te 2/8 120/1 00:07:12
via 101.10.10.10, Te 2/9
100.10.10.0/24 Direct, Te 2/8
0/0 00:08:54
> R 100.10.10.0/24 Direct, Te 2/8
120/0 00:08:54
C 101.10.10.0/24 Direct, Te 2/9
0/0 00:09:15
> R 101.10.10.0/24 Direct, Te 2/9
120/0 00:09:15
Dell#
Dell#show ip route summary
Route Source Active Routes Non-active Routes
connected
2
0
static
1
0
Total
3
0
Total 3 active route(s) using 612 bytes
R1_E600i>show ip route static ?
756 IPv4 Routing
Example (With Weighted ECMP Enabled)
|
Pipe through a command
<cr>
R1_E600i>show ip route static
Destination Gateway
Dist/Metric Last Change
----------- ------- ----------- -----------
*S 0.0.0.0/0 via 10.10.91.9, Te 1/2 1/0 3d2h
Dell>
Dell(conf)#ip route 1.1.1.0/24 6.6.6.2 weight 100
Dell(conf)#ip route 1.1.1.0/24 6.6.6.2 weight 200
Dell(conf)#do show ip route
Codes: C - connected, S - static, R - RIP,
B - BGP, IN - internal BGP, EX - external BGP,LO - Locally
Originated,
O - OSPF, IA - OSPF inter area, N1 - OSPF NSSA external type 1,
N2 - OSPF NSSA external type 2, E1 - OSPF external type 1,
E2 - OSPF external type 2, i - IS-IS, L1 - IS-IS level-1,
L2 - IS-IS level-2, IA - IS-IS inter area, * - candidate default,
> - non-active route, + - summary route
Gateway of last resort is not set
Destination Gateway
Dist/Metric Last Change
----------- -------
----------- -----------
S 1.1.1.0/24 4.4.4.2, via Te 1/4 , weight 100 1/0 00:00:01
6.6.6.2, via Te 1/16, weight 200
C 4.4.4.0/24
Direct, Te 1/4
0/0 00:01:32
C 6.6.6.0/24
Direct, Te 1/16
0/0 00:01:25
Example (With Weighted ECMP Disabled)
Dell# show ip route 1.1.1.0/24 Routing entry for 1.1.1.0/24
Known via "static", distance 1, metric 0 Last update 00:05:01 ago Routing Descriptor Blocks: * 4.4.4.2, via TenGigabitEthernet 1/4 weight 100 * 6.6.6.2, via TenGigabitEthernet 1/16 weight 200 Dell(conf)#
Dell(conf)#ip route 1.1.1.0/24 6.6.6.2 weight 100
Dell(conf)#ip route 1.1.1.0/24 6.6.6.2 weight 200
Dell(conf)#do show ip route
Codes: C - connected, S - static, R - RIP,
B - BGP, IN - internal BGP, EX - external BGP,LO - Locally
Originated,
O - OSPF, IA - OSPF inter area, N1 - OSPF NSSA external type 1,
N2 - OSPF NSSA external type 2, E1 - OSPF external type 1,
E2 - OSPF external type 2, i - IS-IS, L1 - IS-IS level-1,
L2 - IS-IS level-2, IA - IS-IS inter area, * - candidate default,
> - non-active route, + - summary route
Gateway of last resort is not set
Destination Gateway
Dist/Metric Last Change
-----------
------------------ -----------
S 1.1.1.0/24 4.4.4.2, via Te 1/4
1/0 00:00:01
6.6.6.2, via Te 1/16
C 4.4.4.0/24
Direct, Te 1/4
0/0 00:01:32
C 6.6.6.0/24
Direct, Te 1/16 0/0 00:01:25
Dell(conf)#do show ip route 1.1.1.0/24 Routing entry for 1.1.1.0/24
Known via "static", distance 1, metric 0 Last update 00:05:01 ago Routing Descriptor Blocks: * 4.4.4.2, via TenGigabitEthernet 1/4 * 6.6.6.2, via TenGigabitEthernet 1/16 Dell(conf)#
IPv4 Routing 757
show ip route list
Display IP routes in an IP prefix list.
Syntax Parameters
show ip route vrf vrf-name list prefix-list
prefix-list vrf vrf-name
Enter the name of a configured prefix list.
Enter the keyword vrf followed by the name of the VRF to display IP routes in an IP prefix list corresponding to that VRF.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Example
Dell#show ip route list test
Codes:C- connected, S - static, R - RIP, B- BGP, IN - internal BGP, EX - external BGP,LO - Locally
Originated, O- OSPF, IA - OSPF inter area, N1 - OSPF NSSA external type 1, N2- OSPF NSSA external type 2, E1 - OSPF external type 1, E2- OSPF external type 2, i - IS-IS, L1 - IS-IS level-1, L2- IS-IS level-2, IA - IS-IS inter area, * - candidate default, >- non-active route, + - summary route
Gateway of last resort is not set
Destination Gateway
Dist/Metric Last Change
----------- -------
----------- -----------
R 2.1.0.0/24 via 2.1.4.1, Te 4/43 120/2
3d0h
R 2.1.1.0/24 via 2.1.4.1, Te 4/43 120/2
3d1h
R 2.1.2.0/24 via 2.1.4.1, Te 4/43 120/1
3d0h
R 2.1.3.0/24 via 2.1.4.1, Te 4/43 120/1
3d1h
C 2.1.4.0/24 Direct, Te 4/43
0/0
3d1h
Related Commands
ip prefix-list -- enters CONFIGURATION-IP PREFIX-LIST mode and configures a prefix list.
758 IPv4 Routing
show ip prefix-list summary -- displays a summary of the configured prefix lists.
show ip route summary
View a table summarizing the IP routes in the switch.
Syntax Parameters
show ip route vrf vrf-name summary
vrf vrf-name
Enter the keyword vrf followed by the name of the VRF to view information on the IP routes corresponding to that VRF.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
The following describes the show ip route summary shown in the following example.
Column Heading
Description
Route Source
Identifies how the route is configured in Dell Networking OS.
Active Routes
Non-active Routes
Identifies the best route if a route is learned from two protocol sources.
Identifies the back-up routes when a route is learned by two different protocols. If the best route or active route goes down, the non-active route becomes the best route.
ospf 100
If routing protocols (OSPF, RIP) are configured and routes are advertised, then information on those routes is displayed.
Total 1388 active...
Displays the number of active and non-active routes and the memory usage of those routes. If there are no routes configured in the Dell Networking OS, this line does not appear.
IPv4 Routing 759
Example
Related Commands
Dell>show ip route summary
Route Source Active Routes Non-active Routes
connected
17
0
static
3
0
ospf 100
1368
2
Intra-area: 762 Inter-area: 1 External-1: 600 External-2: 5
Total
1388
2
Total 1388 active route(s) using 222440 bytes
Total 2 non-active route(s) using 128 bytes
Dell>
show ip route -- displays information about the routes found in the switch.
show ip traffic
View IP, ICMP, UDP, TCP and ARP traffic statistics.
Syntax
show ip traffic [all | cp | rp1 | rp2] NOTE: These options are supported only on the E-Series.
Parameters
all
cp
rp1
rp2
(OPTIONAL) Enter the keyword all to view statistics from all processors. If you do not enter a keyword, you also view all statistics from all processors.
(OPTIONAL) Enter the keyword cp to view only statistics from the Control Processor.
(OPTIONAL) Enter the keyword rp1 to view only the statistics from Route Processor 1.
(OPTIONAL) Enter the keyword rp2 to view only the statistics from Route Processor 2.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.6.1.0 7.5.1.0 6.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. F10 Monitoring MIB available for the ip traffic statistics command.
760 IPv4 Routing
Usage Information
Example
Version
pre-6.1.1.0
Description
Introduced on the E-Series.
The following describes the show ip traffic summary shown in the following example.
Keyword
Definition
unknown protocol...
not a gateway...
security failures...
No receiver for these packets. Counts packets whose protocol type field is not recognized by Dell Networking OS.
Packets can not be routed; the host/network is unreachable.
Counts the number of received unicast/multicast packets that could not be forwarded due to:
route not found for unicast/multicast; ingress interfaces do not belong to the destination multicast group
destination IP address belongs to reserved prefixes; the host/network is unreachable
bad options... Frags: ... reassembled ... timeouts ... too big ... couldn't fragment ...encapsulation failed
Rcvd: ...short packets ...bad length ...no port broadcasts ...socket full
Unrecognized IP option on a received packet. IP fragments received. Number of IP fragments that were reassembled. Number of times a timer expired on a reassembled queue. Number of invalid IP fragments received. Number of packets that could not be fragmented and forwarded.
Counts packets which could not be forwarded due to ARP resolution failure. Dell Networking OS sends an arp request prior to forwarding an IP packet. If a reply is not received, Dell Networking OS repeats the request three times. These packets are counted in encapsulation failed.
The number of bytes in the packet are too small. The length of the packet was not correct. The incoming broadcast/multicast packet did not have any listener.
The applications buffer is full and the incoming packet are dropped.
The Dell Monitoring MIB provides access to the following statistics.
IP Statistics: Bcast: Received: Object = f10BcastPktRecv, OIDs = 1.3.6.1.4.1.6027.3.3.5.1.1 IP Statistics: Bcast: Sent: Object = f10BcastPktSent, OIDs = 1.3.6.1.4.1.6027.3.3.5.1.2 IP Statistics: Mcast: Received: Object = f10McastPktRecv, OIDs = 1.3.6.1.4.1.6027.3.3.5.1.3 IP Statistics: Mcast: Sent: Object = f10McastPktSent, OIDs = 1.3.6.1.4.1.6027.3.3.5.1.4 ARP Statistics: Rcvd: Request: Object = f10ArpReqRecv, OIDs = 1.3.6.1.4.1.6027.3.3.5.2.1 ARP Statistics: Rcvd: Replies: Object = f10ArpReplyRecv, OIDs = 1.3.6.1.4.1.6027.3.3.5.2.3 ARP Statistics: Sent: Request: Object = f10ArpReqSent, OIDs = 1.3.6.1.4.1.6027.3.3.5.2.2 ARP Statistics: Sent: Replies: Object = f10ArpReplySent, OIDs = 1.3.6.1.4.1.6027.3.3.5.2.4 ARP Statistics: Sent: Proxy: Object = f10ArpProxySent, OIDs = 1.3.6.1.4.1.6027.3.3.5.2.5
Dell#show ip traffic Control Processor IP Traffic: IP statistics:
Rcvd: 23857 total, 23829 local destination 0 format errors, 0 checksum errors, 0 bad hop count 0 unknown protocol, 0 not a gateway 0 security failures, 0 bad options
IPv4 Routing 761
Frags: 0 reassembled, 0 timeouts, 0 too big 0 fragmented, 0 couldn't fragment
Bcast: 28 received, 0 sent; Mcast: 0 received, 0 sent Sent: 16048 generated, 0 forwarded
21 encapsulation failed, 0 no route ICMP statistics:
Rcvd: 0 format errors, 0 checksum errors, 0 redirects, 0 unreachable 0 echo, 0 echo reply, 0 mask requests, 0 mask replies, 0 quench 0 parameter, 0 timestamp, 0 info request, 0 other
Sent: 0 redirects, 0 unreachable, 0 echo, 0 echo reply 0 mask requests, 0 mask replies, 0 quench, 0 timestamp 0 info reply, 0 time exceeded, 0 parameter problem
UDP statistics: Rcvd: 0 total, 0 checksum errors, 0 no port 0 short packets, 0 bad length, 0 no port broadcasts, 0 socket full Sent: 0 total, 0 forwarded broadcasts
TCP statistics: Rcvd: 23829 total, 0 checksum errors, 0 no port Sent: 16048 total
ARP statistics: Rcvd: 156 requests, 11 replies Sent: 21 requests, 10 replies (0 proxy)
Routing Processor1 IP Traffic:
show tcp statistics
View information on TCP traffic through the switch.
Syntax Parameters
show tcp statistics {all | cp}
all
Enter the keyword all to view all TCP information.
cp
Enter the keyword cp to view only TCP information from the Control Processor.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 6.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced
Usage Information
The following describes the show tcp statistics cp command shown in the following example.
Field
Description
Rcvd:
Displays the number and types of TCP packets received by the switch.
762 IPv4 Routing
Example
Field
Description
Total = total packets received no port = number of packets received with no designated port
0 checksum error...
Displays the number of packets received with the following:
checksum errors bad offset to data too short
329 packets... 17 dup... 0 partially... 7 out-of-order... 0 packets with data after window 0 packets after close 0 window probe packets... 41 dup ack...
10184 ack... Sent:
25 control packets... 11603 data packets... 24 data packets retransmitted 355 ack..
0 window probe... 7 Connections initiated... 14 Connections closed... 20 Total rxmt...
0 Keepalive....
Displays the number of packets and bytes received in sequence. Displays the number of duplicate packets and bytes received. Displays the number of partially duplicated packets and bytes received. Displays the number of packets and bytes received out of order. Displays the number of packets and bytes received that exceed the switch's window size.
Displays the number of packet received after the TCP connection was closed.
Displays the number of window probe and update packets received.
Displays the number of duplicate acknowledgement packets and acknowledgement packets with data received. Displays the number of acknowledgement packets and bytes received. Displays the total number of TCP packets sent and the number of urgent packets sent. Displays the number of control packets sent and the number retransmitted.
Displays the number of data packets sent.
Displays the number of data packets resent.
Displays the number of acknowledgement packets sent and the number of packet delayed. Displays the number of window probe and update packets sent.
Displays the number of TCP connections initiated, accepted, and established.
Displays the number of TCP connections closed, dropped.
Displays the number of times the switch tried to re-send data and the number of connections dropped during the TCP retransmit timeout period. Lists the number of keepalive packets in timeout, the number keepalive probes and the number of TCP connections dropped during keepalive.
Dell#show tcp stat cp Control Processor TCP: Rcvd: 10585 Total, 0 no port
0 checksum error, 0 bad offset, 0 too short 329 packets (1263 bytes) in sequence 17 dup packets (6 bytes) 0 partially dup packets (0 bytes)
IPv4 Routing 763
7 out-of-order packets (0 bytes) 0 packets ( 0 bytes) with data after window 0 packets after close 0 window probe packets, 41 window update packets 41 dup ack packets, 0 ack packets with unsend data 10184 ack packets (12439508 bytes) Sent: 12007 Total, 0 urgent packets 25 control packets (including 24 retransmitted) 11603 data packets (12439677 bytes) 24 data packets (7638 bytes) retransmitted 355 ack only packets (41 delayed) 0 window probe packets, 0 window update packets 7 Connections initiated, 8 connections accepted, 15 connections established 14 Connections closed (including 0 dropped, 0 embryonic dropped) 20 Total rxmt timeout, 0 connections dropped in rxmt timeout 0 Keepalive timeout, 0 keepalive probe, 0 Connections dropped in keepalive Dell# 764 IPv4 Routing
27
IPv6 Access Control Lists (IPv6 ACLs)
IPv6 ACLs and IPv6 Route Map commands are supported on Dell Networking OS.
NOTE: For IPv4 ACL commands, refer to the Access Control Lists (ACL) chapter.
Important Points to Remember
Certain platforms require manual CAM usage space allotment. For more information, refer to the cam-acl command. Egress IPv6 ACL and IPv6 ACL on the Loopback interface is not supported. Reference to an empty ACL permits any traffic. ACLs are not applied to self-originated traffic (for example, Control Protocol traffic not affected by IPv6 ACL because the
routed bit is not set for Control Protocol traffic and for egress ACLs the routed bit must be set). You can use the same access list name for both IPv4 and IPv6 ACLs. You can apply both IPv4 and IPv6 ACLs on an interface at the same time. You can apply IPv6 ACLs on physical interfaces and a logical interfaces (Port-channel/VLAN). Non-contiguous masks are not supported in source or destination addresses in IPv6 ACL entries. Because the prefix mask is specified in /x format in IPv6 ACLs, inverse mask is not supported.
Topics:
� show cam-acl-egress � show cam-acl � permit icmp � permit � ipv6 control-plane egress-filter � ipv6 access-list � cam-acl-egress � cam-acl
show cam-acl-egress
Show information on FP groups allocated for egress ACLs.
Syntax
show cam-acl-egress
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000.
IPv6 Access Control Lists (IPv6 ACLs) 765
Example
Related Commands
Version
8.3.19.0 8.3.7.0 8.4.2.1 8.4.2.0 7.8.1.0
Description
Introduced on the S4820T. Introduced on the S4810. Introduced on the S-Series. Introduced on the E-Series TeraScale. Introduced on the C-Series.
Dell#show cam-acl-egress
-- Chassis Egress Cam ACL --
Current Settings(in block sizes)
L2Acl :
1
Ipv4Acl :
1
Ipv6Acl :
2
-- Stack unit 1 --
Current Settings(in block sizes)
L2Acl :
1
Ipv4Acl :
1
Ipv6Acl :
2
Dell#show cam-acl
cam-acl -- configures CAM profiles to support IPv6 ACLs.
show cam-acl
Show space allocated for IPv6 ACLs.
Syntax
show cam-acl
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.7.0 8.4.2.1 8.4.2.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the S-Series. Introduced on the E-Series TeraScale. Introduced on the C-Series.
766 IPv6 Access Control Lists (IPv6 ACLs)
Example
show cam-acl (non default) Dell(conf)#cam-acl l2acl 2 ipv4acl 4 ipv6acl 4 ipv4qos 2 l2qos 1 l2pt 0 ipmacacl 0 vman-qos 0 ecfmacl 0 Dell#show cam-acl
-- Chassis Cam ACL --
Current Settings(in block sizes)
1 block = 128 entries
L2Acl
:
2
Ipv4Acl
:
4
Ipv6Acl
:
4
Ipv4Qos
:
2
L2Qos
:
1
L2PT
:
0
IpMacAcl
:
0
VmanQos
:
0
VmanDualQos :
0
EcfmAcl
:
0
FcoeAcl
:
0
iscsiOptAcl :
0
ipv4pbr
:
0
vrfv4Acl
:
0
Openflow
:
0
fedgovacl
:
F3940
-- stack-unit 1 --
Current Settings(in block sizes)
1 block = 128 entries
L2Acl
:
2
Ipv4Acl
:
4
Ipv6Acl
:
4
Ipv4Qos
:
2
L2Qos
:
1
L2PT
:
0+F394
IpMacAcl
:
0
VmanQos
:
0
VmanDualQos :
0
EcfmAcl
:
0
FcoeAcl
:
0
iscsiOptAcl :
0
ipv4pbr
:
0
vrfv4Acl
:
0
Openflow
:
0
fedgovacl
:
0
Dell#
Example (Manual Profiles)
Dell#show cam-acl
-- Chassis Cam ACL --
Current Settings(in block sizes)
L2Acl :
2
Ipv4Acl :
2
Ipv6Acl :
4
Ipv4Qos :
2
L2Qos :
3
-- Line card 4 --
Current Settings(in block sizes)
L2Acl :
2
Ipv4Acl :
2
Ipv6Acl :
4
Ipv4Qos :
2
L2Qos :
3
Dell#show cam-acl
Related Commands
cam-acl -- configures CAM profiles to support IPv6 ACLs.
IPv6 Access Control Lists (IPv6 ACLs) 767
permit icmp
To allow all or specific internet control message protocol (ICMP) messages, configure a filter.
Syntax
permit icmp {source address mask | any | host ipv6-address} {destination address | any | host ipv6-address} [message-type] [count [byte]] | [log] [monitor]
To remove this filter, you have two choices:
Use the no seq sequence-number command if you know the filter's sequence number. Use the no permit icmp {source address mask | any | host ipv6-address}
{destination address | any | host ipv6-address} command.
Parameters
Defaults
Not configured.
Command Modes ACCESS-LIST
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.7.0 8.4.2.1 8.2.1.0 7.8.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the S-Series. Introduced on the E-Series ExaScale. Introduced on the C-Series. Introduced on the E-Series TeraScale. Added the monitor option.
permit
To configure a filter that matches the filter criteria, select an IPv6 protocol number, ICMP, IPv6, TCP, or UDP.
Syntax
permit {ipv6-protocol-number | icmp | ipv6 | tcp | udp}
To remove this filter, you have two choices:
Use the no seq sequence-number command syntax if you know the filter's sequence number Use the no permit {ipv6-protocol-number | icmp | ipv6 | tcp | udp} command
Parameters
ip-protocolnumber icmp
ipv6
tcp
Enter an IPv6 protocol number. The range is from 0 to 255.
Enter the keyword icmp to filter internet Control Message Protocol version 6. Enter the keyword ipv6 to filter any internet Protocol version 6. Enter the keyword tcp to filter the Transmission Control protocol.
768 IPv6 Access Control Lists (IPv6 ACLs)
udp
Enter the keyword udp to filter the User Datagram Protocol.
Defaults
Not configured.
Command Modes ACCESS-LIST
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810.
ipv6 control-plane egress-filter
Enable egress Layer 3 ACL lookup for IPv6 CPU traffic.
Syntax
ipv6 control-plane egress-filter
Defaults
Not enabled.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.10.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810.
ipv6 access-list
Configure an access list based on IPv6 addresses or protocols.
Syntax
ipv6 access-list access-list-name cpu-qos
IPv6 Access Control Lists (IPv6 ACLs) 769
Parameters
To delete an access list, use the no ipv6 access-list access-list-name command.
access-list-name Enter the access list name as a string, up to 140 characters.
cpu-qos
Enter the keyword cpu-qos to assign this ACL to control plane traffic only (CoPP).
permit
Enter the keyword permit to configure a filter to forward packets meeting this condition.
deny
Enter the keyword deny to configure a filter to drop packets meeting this condition.
ospfv3
Specify that this ACL is for OSPFv3 control plane traffic
Defaults
All access lists contain an implicit "deny any"; that is, if no match occurs, the packet is dropped.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4(0.0)
9.2(1.0) 9.0.2.0 8.3.11.1 8.3.19.0 8.3.7.0 8.4.2.1 8.2.1.0 7.8.1.0
7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Added support for CoPP for OSPFv3 on the S4810, S4820T, S6000, and Z9000 platforms. Introduced on the Z9500. Introduced on the S6000 Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the S-Series. Introduced on the E-Series ExaScale. Introduced on the C-Series. Increased the name string to accept up to 140 characters. Prior to version 7.8.1.0, names are up to 16 characters long. Introduced on the E-Series TeraScale.
Usage Information
The number of entries allowed per ACL is hardware-dependent. For detailed specification on entries allowed per ACL, refer to your line card documentation. You can create an IPv6 ACL for control-plane traffic policing for OSPFv3, in addition to the CoPP support for VRRP, BGP, and ICMP.
cam-acl-egress
Allocate space for IPv6 egress ACLs.
Syntax Parameters
cam-acl-egress {default | l2acl 1-4 ipv4acl 1-4 ipv6acl 0-4}
default
Use the default CAM profile settings, and set the CAM as follows: L2 ACL(l2acl): 1
770 IPv6 Access Control Lists (IPv6 ACLs)
l2acl 1-4 ipv4acl 1- 4 ipv6acl 0-4
L3 ACL (ipv4acl: 1 IPv6 L3 ACL (ipv6acl): 2
Allocate space to support IPv6 ACLs. Enter all of the profiles and a range. Enter the CAM profile name then the amount to be allotted. The total space allocated must equal 4. The ipv6acl range must be a factor of 2.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.4.2.0 8.2.1.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series TeraScale. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
Example
For the new settings to take effect, save the new CAM settings to the startup-config (write-mem or copy run start), then reload the system.
The total amount of space allowed is 4 FP Blocks.
Dell#
Dell#configure
Dell(conf)#cam-acl-egress ?
default
Reset Egress CAM ACL entries to default setting
l2acl
Set L2-ACL entries
Dell(conf)#cam-acl-egress l2acl ?
<1-4>
Number of FP blocks for l2acl
Dell(conf)#cam-acl-egress l2acl 1 ?
ipv4acl
Set IPV4-ACL entries
Dell(conf)#cam-acl-egress l2acl 1 ipv4acl 1 ?
ipv6acl
Set IPV6-ACL entries
Dell(conf)#cam-acl-egress l2acl 1 ipv4acl 1 ipv6acl ?
<0-4>
Number of FP blocks for IPV6 (multiples of 2)
Dell(conf)#cam-acl-egress l2acl 1 ipv4acl 1 ipv6acl 2
cam-acl
Allocate space for IPv6 ACLs.
Syntax
cam-acl {default | l2acl 1-10 ipv4acl 1-10 ipv6acl 0-10 ipv4qos 1-10 l2qos 1-10}
IPv6 Access Control Lists (IPv6 ACLs) 771
Parameters
default
Use the default CAM profile settings, and set the CAM as follows:
L3 ACL (ipv4acl): 6 L2 ACL(l2acl): 5 IPv6 L3 ACL (ipv6acl): 0 L3 QoS (ipv4qos): 1 L2 QoS (l2qos): 1
l2acl 1-10 ipv4acl 1-10 ipv6acl 0-10 ipv4qos 1-10 l2qos 1-10
Allocate space to support IPv6 ACLs. Enter all of the profiles and a range. Enter the CAM profile name then the amount to be allotted. The total space allocated must equal 13. The ipv6acl range must be a factor of 2.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.4.2.0 8.2.1.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series TeraScale. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
For the new settings to take effect, save the new CAM settings to the startup-config (write-mem or copy run start), then reload the system.
The total amount of space allowed is 16 FP blocks. System flow requires three blocks and these blocks cannot be reallocated.
When configuring space for IPv6 ACLs, the total number of Blocks must equal 13.
Ranges for the CAM profiles are from 1 to 10, except for the ipv6acl profile which is from 0 to 10. The ipv6acl allocation must be a factor of 2 (2, 4, 6, 8, 10).
772 IPv6 Access Control Lists (IPv6 ACLs)
28
IPv6 Basics
IPv6 basic commands are supported on the Dell Networking OS.
NOTE: For information about the Dell Networking operating software version and platform that supports IPv6 in each software feature, refer to the IPv6 Addressing chapter of the Dell Networking OS Configuration Guide.
Topics:
� clear ipv6 fib � clear ipv6 route � clear ipv6 mld_host � maximum dynamic-routes-ipv6 � ipv6 address autoconfig � ipv6 address � ipv6 address eui64 � ipv6 control-plane icmp error-rate-limit � ipv6 flowlabel-zero � ipv6 host � ipv6 name-server � ipv6 nd dad attempts � ipv6 nd dns-server � ipv6 nd prefix � ipv6 route � ipv6 unicast-routing � show ipv6 cam stack-unit � show ipv6 control-plane icmp � show ipv6 fib stack-unit � show ipv6 flowlabel-zero � show ipv6 interface � show ipv6 mld_host � show ipv6 route � trust ipv6-diffserv
clear ipv6 fib
Clear (refresh) all forwarding information base (FIB) entries on a linecard or stack unit.
Syntax Parameters
clear ipv6 fib [vrf vrf-name] linecard slot | stack-unit unit-number
vrf vrf�name
(Optional) Enter the keyword vrf followed by the name of the VRF to clear the neighbor corresponding to that VRF.
NOTE: If you do not specify this option, neighbors corresponding to the
default VRF are cleared.
slot unit-number
Enter the slot number to clear the FIB for a linecard. Enter the stack member number. The range is from 1to 6
Command Modes EXEC Privilege
IPv6 Basics 773
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.0.0.0 8.3.19.0 8.3.7.0 8.2.1.0 7.8.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the C-Series and S-Series. Introduced on the E-Series TeraScale.
clear ipv6 route
Clear (refresh) all or a specific route from the IPv6 routing table.
Syntax Parameters
clear ipv6 route [vrf vrf-name] {* | ipv6-address prefix-length}
vrf vrf-name
* ipv6-address prefix-length
(Optional) Enter the keyword vrf followed by the name of the VRF to clear the IPv6 routes corresponding to that VRF.
Enter the * to clear (refresh) all routes from the IPv6 routing table.
Enter the IPv6 address in the x:x:x:x::x format then the prefix length in the /x format. The range is from /0 to /128.
NOTE: The :: notation specifies successive hexadecimal fields of zeros.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.0.0.0 8.3.19.0 8.3.7.0 8.2.1.0 7.8.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the C-Series and S-Series. Introduced on the E-Series TeraScale.
774 IPv6 Basics
clear ipv6 mld_host
Clear the IPv6 MLD host counters and reset the elapsed time.
Syntax
clear ipv6 mld_host
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 8.3.19.0 8.3.12.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000.
maximum dynamic-routes-ipv6
Specify the maximum number of dynamic (protocol) IPv6 routes a VRF can have.
Syntax Parameters
maximum dynamic-routes--ipv6 limit {warn-threshold threshold-value | warningonly}
To remove the limit on the maximum number of IPv6 routes used, use the no maximum dynamicroutes-ipv6 command.
limit warningthreshold
warning-only
Maximum number of IPv6 routes allowed in a VRF. Valid range is from 1 to 8000 (or maximum allowable for that platform if smaller value).
Warning threshold value is expressed as a percentage of the limit value. When the number of IPv6 routes reaches the specified percentage of the limit, a warning message is generated. Valid range is 1 to 100. When warn-threshold is used, once the limit is reached, additional routes will not be allowed into the RTM ( route table manager ) itself.
When the warning-only option is used, a syslog message will be thrown when maximum number of dynamic IPv6 routes reaches the limit. Additional dynamic IPv6 routes will still be allowed.
Defaults
No limit is set on the maximum number of dynamic IPv6 routes for a VRF.
Command Modes CONFIGURATION-VRF
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OSCommand Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
IPv6 Basics 775
Usage Information
Version
9.8(0.0P2) 9.7(0.0)
Description
Introduced on the S3048-ON. Introduced on the S4810, S4820T, S5000, S6000, S6000-ON, and Z9500.
If the maximum IPv6 route limit is not specified for a VRF (valid range is from 1 to 8000), then it has unlimited space that extends to the maximum number of entries allowed for the system. This command is not applicable to the default and management VRFs.
ipv6 address autoconfig
Configure IPv6 address auto-configuration for the management interface.
Syntax
ipv6 address autoconfig
To disable the address autoconfig operation on the management interface, use the no ipv6 address autoconfig command.
Default
Disabled
Command Modes INTERFACE (management interface only)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.1.(0.0) 8.3.19.0 8.3.12.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Updated Usage Information section. Introduced on the S4820T. Introduced on the S4810.
Usage Infomation
SAA can configure up to two addresses. If any preferred prefix or valid timers time out, the corresponding address are deprecated or removed. If an address is removed due to a time-out, an address from the current unused prefix is used to create a new address. If there are no remaining prefixes, the software waits to receive a new prefix from the RA.
If auto-configuration is enabled, all IPv6 addresses on that management interface are auto-configured. Manual and auto-configurations are not supported on a single management interface.
Removing auto-configuration removes all auto-configured IPv6 addresses and the link-local IPv6 address from that management interface.
IPv6 addresses on a single management interface cannot be members of the same subnet.
IPv6 secondary addresses on management interfaces across a platform must be members of the same subnet.
IPv6 secondary addresses on management interfaces should not match the virtual IP address and should not be in the same subnet as the virtual IP.
776 IPv6 Basics
ipv6 address
Configure an IPv6 address to an interface.
Syntax Parameters
ipv6 address {ipv6-address prefix-length}
To remove the IPv6 address, use the no ipv6 address {ipv6-address prefix-length} command.
ipv6-address prefix-length
Enter the IPv6 address in the x:x:x:x::x format then the prefix length in the /x format. The range is from /0 to /128.
NOTE: The :: notation specifies successive hexadecimal fields of zeros.
Defaults
none
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.1(0.0) 9.0.0.0 8.3.19.0 8.3.7.0 8.4.1.0 8.2.1.0 7.8.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Updated Usage Information. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Added support on the management Ethernet port. Introduced on the E-Series ExaScale. Introduced on the C-Series and S-Series. Introduced on the E-Series TeraScale.
Usage Information
If two addresses are configured, delete an existing address before configuring a new address.
If the last manually-configured global IPv6 address is removed using the "no" form of the command, the link-local IPv6 address is removed automatically.
IPv6 addresses on a single management interface cannot be members of the same subnet.
IPv6 secondary addresses on management interfaces across platform must be members of the same subnet.
IPv6 secondary addresses on management interfaces should not match the virtual IP address and should not be in the same subnet as the virtual IP.
Example
Dell(conf)#interface tengigabitethernet 1/2 Dell(conf-if-te-1/2)#ipv6 address ? X:X:X:X::X IPv6 address Dell(conf-if-te-1/2)#ipv6 address 2002:1:2::3 ? <0-128> Prefix length in bits Dell(conf-if-te-1/2)#ipv6 address 2002:1:2::3 /96 ? <cr> Dell(conf-if-te-1/2)#ipv6 address 2002:1:2::3 /96
IPv6 Basics 777
Dell(conf-if-te-1/2)#show config ! interface TenGigabitEthernet 1/2
no ip address ipv6 address 2002:1:2::3 /96 no shutdown
ipv6 address eui64
Configure IPv6 EUI64 address configuration on the interface.
Syntax Parameters
ipv6 address {ipv6-address prefix-length} eui64
To disable IPv6 EUI64 address autoconfiguration, use the no ipv6 address {ipv6-address prefix-length} eui64 command.
ipv6-address prefix-length
Enter the IPv6 prefix in the x:x:x:x::x format then the prefix length in the /x format. The range is from /0 to /128.
NOTE: The :: notation specifies successive hexadecimal fields of zeros.
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.2(0.2)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced.
Usage Information
Example
This command allows you to create an EUI64 address based on the specified prefix and MAC address only. Prefixes may be configured on the interface using the ipv6 nd prefix command without creating an EUI64 address.
Dell(conf)#int ten 1/4 Dell(conf-if-te-1/4)#ipv6 address 200:1::/64 eui64 Dell(conf)#int ten 1/6 Dell(conf-if-te-1/6)#ipv6 address 801:10::/64 eui64
ipv6 control-plane icmp error-rate-limit
Configure the maximum number of ICMP error packets per second that can be sent per second.
Syntax
ipv6 control-plane icmp error-rate-limit {1-200}
To restore the default value, use the no ipv6 control-plane icmp error-rate-limit command.
778 IPv6 Basics
Parameters
pps
Enter the maximum number of error packets generated per second. The range is from 1 to 200, where 0 disables the rate-limiting.
Default
100 pps
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
ipv6 flowlabel-zero
Configure system to set the flow label field in the packets to zero.
Syntax
ipv6 flowlabel-zero
To disable the 0 from being set in the field and allow the protocol operations to fill the field, use the no ipv6 flowlabel-zero command.
Default
Disabled
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Usage Information
If the flowlabel value is already set for BGP or SSH, the system defaults to the already configured value. All packets on the same connection are considered part of the same flow by the system. For new connections, set the new flowlabel to zero.
IPv6 Basics 779
ipv6 host
Assign a name and IPv6 address the host-to-IPv6 address mapping table uses.
Syntax Parameters
ipv6 host name ipv6-address To remove an IP host, use the no ipv6 host name {ipv6�address}.
name ipv6-address
Enter a text string to associate with one IP address. Enter the IPv6 address (X:X:X:X::X) to be mapped to the name.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.0.0.0 8.3.19.0 8.3.7.0 8.4.2.1 8.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the C-Series and S-Series. Introduced on the E-Series TeraScale.
ipv6 name-server
Enter up to six IPv6 addresses of name servers. The order you enter the addresses determines the order of their use.
Syntax Parameters
ipv6 name-server ipv6-address [ipv6-address2... ipv6-address6] To remove a name server, use the no ipv6 name--server ipv6�address command.
ipv6-address
ipv6-address2... ipv6-address6
Enter the IPv6 address (X:X:X:X::X) of the name server to be used. Note: The :: notation specifics successive hexadecimal fields of zeros.
(OPTIONAL) Enter up to five more IPv6 addresses, in the x:x:x:x::x format, of name servers to be used. Separate the IPv6 addresses with a space.
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
780 IPv6 Basics
Usage Information
Version
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.0.0.0 8.3.19.0 8.3.7.0 8.4.2.1 8.4.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the C-Series and S-Series. Introduced on the E-Series TeraScale.
You can separately configure both IPv4 and IPv6 domain name servers.
ipv6 nd dad attempts
To perform duplicate address detection (DAD) on an interface, configure the number of neighbor solicitation messages that are sent.
Syntax Parameters
ipv6 nd dad attempts {number of attempts} To restore the default value, use the no ipv6 nd dad attempts command.
number of attempts
Enter the number of attempts to be made to detect a duplicate address. The range is from 0 to 15. Setting the value to 0 disables DAD on the interface.
Default
3 attempts
Command Modes INTERFACE (management interface only)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
ipv6 nd dns-server
Configures Recursive DNS Server (RDNSS) addresses to be distributed via IPv6 router advertisements to an IPv6 device.
Syntax
ipv6 nd dns-server {ipv6-RDNSS-address} {lifetime | infinite}
To remove the IPv6 RDSS configuration, use no ipv6 nd dns-server {ipv6-RDNSS-address} {lifetime | infinite}
IPv6 Basics 781
Parameters
ipv6-RDNSSaddress lifetime
infinite
Enter the IPv6 Recursive DNS Server's (RDNSS) address. You can specify up to 4 IPv6 RDNSS server addresses.
Enter the lifetime in seconds. The amount of time the IPv6 host can use the IPv6 RDNSS address for name resolution. The range is 0 to 4294967295 seconds. When you specify the maximum lifetime value of 4294967295 or infinite, the lifetime does not expire. A value of 0 indicates to the host that the RDNSS address should not be used. You must specify a lifetime using the lifetime or infinite parameter.
Enter the keyword infinite to specify that the RDNSS lifetime does not expire.
Defaults
Not Configured
Command Modes INTERFACE CONFIG
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000�ON.
9.5(0.0)
Introduced on the Z9000, S6000, S4810, S4820T, and MXL..
Usage Information
Example
Use this command to add, edit, or delete an IPv6 RDNSS address and lifetime value. You can configure up to four IPv6 RDNSS addresses. You must specify a lifetime using the lifetime or infinite parameter.
Dell(conf-if-te-1/1)#ipv6 nd dns-server 1000::1 1
ipv6 nd prefix
Specify which IPv6 prefixes are included in Neighbor Advertisements.
Syntax Parameters
ipv6 nd prefix {ipv6-prefix | prefix-length | default} [no-advertise] | [no-autoconfig] [no-rtr-address] [off-link] [lifetime {valid | infinite} {preferred | infinite}]
ipv6-prefix
Enter an IPv6 prefix.
prefix-length
Enter the prefix then the prefix length. The length range is from 0 to 128.
default
Enter the keyword default to set default parameters for all prefixes.
no-advertise
Enter the keyword no-advertise to prevent the specified prefix from being advertised.
no-autoconfig
Enter the keywords no-autoconfig to disable Stateless Address Autoconfiguration.
no-rtr-address
Enter the keyword no-rtr-address to exclude the full router address from router advertisements (the R bit is not set).
off-link
Enter the keywords off-link to advertise the prefix without stating to recipients that the prefix is either on-link or off-link.
valid-lifetime | infinite
Enter the amount of time that the prefix is advertised, or enter infinite for an unlimited amount of time. The range is from 0 to 4294967295. The default is 2592000. The maximum value means that the preferred lifetime does not expire for the valid-life time parameter.
preferred-
Enter the amount of time that the prefix is preferred, or enter infinite for an
lifetime | infinite unlimited amount of time. The range is from 0 to 4294967295. The default is
782 IPv6 Basics
604800. The maximum value means that the preferred lifetime and does not expire.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.7.0 8.3.2.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series TeraScale, C-Series, and S-Series.
Usage Information
By default, all prefixes configured as addresses on the interface are advertised. This command allows control over the individual parameters per prefix; you can use the default keyword to use the default parameters for all prefixes. If a prefix has been configured with lifetime parameter values, the default values cannot be applied using the ipv6 nd prefix default no-autoconfig command.
ipv6 route
Establish a static IPv6 route.
Syntax Parameters
ipv6 route [vrf vrf-name] ipv6-address prefix-length {ipv6-address | interface | interface ipv6-address} [distance] [tag value] [permanent] [weight weight-value]
To remove the IPv6 route, use the no ipv6 route [vrf vrf-name]ipv6-address prefixlength {ipv6-address | interface | interface ipv6-address} [distance] [tag value] [permanent] [weight] command.
vrf vrf-name
ipv6-address prefix-length
(Optional) Enter the keyword vrf followed by the name of the VRF to install IPv6 routes in that VRF.
Enter the IPv6 address in the x:x:x:x::x format then the prefix length in the /x format. The range is from /0 to /128.
NOTE: The :: notation specifies successive hexadecimal fields of zeros.
interface
(OPTIONAL) Enter the following keywords and slot/port or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For a port channel interface, enter the keywords port-channel then a number.
For a Null interface, enter the keyword null then the Null interface number.
IPv6 Basics 783
ipv6-address distance tag value permanent
weight weightvalue
For a tunnel interface, enter the keyword tunnel then the tunnel interface number. The range is from 1 to 16383.
For a VLAN interface, enter the keyword VLAN then the vlan number. The range is from 1 to 4094.
If you configure a static IPv6 route using an egress interface and enter the ping command to reach the destination IPv6 address, the ping operation may not work. Configure the IPv6 route using a next-hop IPv6 address in order for the ping command to detect the destination address.
(OPTIONAL) Enter the forwarding router IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros.
(OPTIONAL) Enter a number as the metric distance assigned to the route. The range is from 1 to 255.
(OPTIONAL) Enter the keyword tag then a tag value number. The range is from 1 to 4294967295.
(OPTIONAL) Enter the keyword permanent to specify that the route is not to be removed, even if the interface assigned to that route goes down.
NOTE: If you disable the interface with an IPv6 address associated with the keyword permanent, the route disappears from the routing table.
Enter the keyword weight followed by a weight value. The range is from 0 to 255. NOTE: Weight for a static route can be added only for the destination address and not for the route pointing to destination a interface.
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.0.0.0 8.3.19.0 8.3.7.0 8.5.1.0 8.2.1.0 7.8.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Added support for 4-port 40G line cards on ExaScale. Introduced on the E-Series ExaScale. Introduced on the C-Series and S-Series. Introduced on the E-Series TeraScale.
Usage Information
When the interface goes down, Dell Networking OS withdraws the route. The route is re-installed, by Dell Networking OS, when the interface comes back up. When a recursive resolution is "broken," Dell Networking OS withdraws the route. The route is re-installed, by Dell Networking OS, when the recursive resolution is satisfied.
After an IPv6 static route interface is created, if an IP address is not assigned to a peer interface, the peer must be manually pinged to resolve the neighbor information.
You can specify a weight for an IPv4 or IPv6 static route. If the weight value of a path is 0, then that path is not used for forwarding when weighted ECMP is in effect. Also, if a path corresponding to a static
784 IPv6 Basics
Example
Related Commands
route (destination) has a non-zero weight assigned to it and other paths do not have any weight configured, then regular ECMP is used for forwarding. You can specify the weight value only to destination address and not on the egress port. A route is considered for weighted ECMP calculations only if each paths corresponding to that route is configured with a weight.
Dell(conf)#ipv6 route 44::/64 33::1 weight 100 Dell(conf)#ipv6 route 44::/64 33::2 weight 200 Dell(conf)#do show running-config | grep ipv6 route Dell(conf)#ipv6 route vrf vrf_test 44::/64 33::1 weight 100 Dell(conf)#ipv6 route vrf vrf_test 44::/64 33::2 weight 200 Dell(conf)#do show running-config | grep ipv6 route vrf
show ipv6 route -- views the IPv6 configured routes.
ipv6 unicast-routing
Enable IPv6 unicast routing on the device.
Syntax
ipv6 unicast-routing To disable unicast routing, use the no ipv6 unicast-routing command.
Defaults
Enabled
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 9.0.0.0 8.3.19.0 8.3.7.0 8.4.2.1 8.2.1.0 7.8.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the S-Series. Introduced on the E-Series ExaScale. Introduced on the C-Series. Introduced on the E-Series TeraScale.
Usage Information
Because this command is enabled by default, it does not appear in the running configuration. When you disable unicast routing, the no ipv6 unicast-routing command is included in the running configuration. Whenever unicast routing is disabled or re-enabled, Dell Networking OS generates a syslog message indicating the action.
Disabling unicast routing on an E-Series chassis causes the following behavior:
static and protocol learned routes are removed from RTM and from the CAM; packet forwarding to these routes is terminated
IPv6 Basics 785
connected routes and resolved neighbors remain in the CAM and new IPv6 neighbors are still discoverable
additional protocol adjacencies (OSPFv3 and BGP4) are brought down and no new adjacencies are formed
the IPv6 address family configuration (under router bgp) is deleted IPv6 Multicast traffic continues to flow unhindered
show ipv6 cam stack-unit
Displays the IPv6 CAM entries for the specified stack-unit.
Syntax Parameters
show ipv6 cam [vrf vrf-name] stack-unit unit-number port-set {0-1} [summary | index | ipv6 address]
vrf vrf-name
(Optional) Enter the keyword vrf followed by the name of the VRF to display IPv6 CAM entries corresponding to that VRF.
NOTE: If you do not specify this option, IPv6 CAM entries corresponding to
the default VRF are displayed.
unit-number port-set summary
index ipv6-address
Enter the stack unit's ID number.
Enter the keyword Port Set.
(OPTIONAL) Enter the keyword summary to display a table listing network prefixes and the total number prefixes which can be entered into the IPv6 CAM.
(OPTIONAL) Enter the index in the IPv6 CAM.
Enter the IPv6 address in the x:x:x:x::x/n format to display networks that have more specific prefixes. The range is from /0 to /128.
NOTE: The :: notation specifies successive hexadecimal fields of zeros.
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.0.0 8.3.19.0 8.3.7.1 8.4.2.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Added support for VRF. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the S-Series.
Usage Information
NOTE: If a route has a mask greater than 64, no output is displayed and no output is displayed for show ipv6 cam stack-unit unit-number port-set {0-1} ipv6-address, but an equivalent /64 entry would be listed in the show ipv6 cam stack-unit unit-number port-set {0-1} output. Similarly, if there is more than one ECMP object with a destination route
786 IPv6 Basics
that has a mask greater than 64, if the first 64 bits in the destination routes of the ECMP objects are the same, only one route is installed in CAM even though multiple ECMP path entries exist. NOTE: The self address is displayed in the neighbor portion for the show ipv6 cam stack-unit unit-number port-set command.
show ipv6 control-plane icmp
Displays the status of the icmp control-plane setting for the error eate limit setting.
Syntax
show ipv6 control-plane icmp
Default
100
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Related Commands
ipv6 flowlabel-zero -- Configure IPv6 address auto-configuration for the management interface.
show ipv6 fib stack-unit
View all FIB entries.
Syntax Parameters
show ipv6 fib [vrf vrf-name] stack-unit unit-number [summary | ipv6address]
vrf vrf-name slot-number summary
ipv6-address
(Optional) Enter the keyword vrf followed by the name of the VRF to display neighbors corresponding to that VRF.
Enter the number of the stack unit.
(OPTIONAL) Enter the keyword summary to view a summary of entries in IPv6 cam.
Enter the IPv6 address in the x:x:x:x::x/n format to display networks that have more specific prefixes. The range is from /0 to /128.
NOTE: The :: notation specifies successive hexadecimal fields of zeros.
Command Modes EXEC EXEC Privilege
IPv6 Basics 787
Command History
Usage Information
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.0.0 8.3.19.0 8.3.7.0 8.4.2.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Added support for VRF. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the S-Series.
Host tables are not stored in CAM tables on S-Series platforms. Entries for camIndex displays as zero (0) on the show ipv6 fib stack-unit output for neighbor entries, such as address resolution protocol (ARP) entries.
show ipv6 flowlabel-zero
Display the flow label zero setting.
Syntax
show ipv6 flowlabel-zero
Default
Disabled
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Related Commands
ipv6 nd dad attempts -- Configure system to set the flow label field in the packets to zero.
show ipv6 interface
Display the status of interfaces configured for IPv6.
Syntax
show ipv6 interface interface {slot | slot/port[/subport]} [brief] [configured] [stack-unit id]
788 IPv6 Basics
Parameters
interface
(OPTIONAL) Enter the following keywords and slot/port or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For a port channel interface, enter the keywords port-channel then a number.
For a Null interface, enter the keyword null then the Null interface number. For a VLAN interface, enter the keyword vlan then a number from 1 to 4094. For stacking, enter the keywords stack-unit then the stack-unit ID. For a tunnel interface, enter the keyword tunnel then the tunnel ID.
brief
(OPTIONAL) View a summary of IPv6 interfaces.
configured
(OPTIONAL) View information on all IPv6 configured interfaces.
managementethe (OPTIONAL) View information on an IPv6 Management port. Enter the slot number rnet slot/ port (0-1) and port number zero (0).
loopback
(OPTIONAL) View information for IPv6 Loopback interfaces.
port-channel
(OPTIONAL) View information for IPv6 port channels.
tengigabitethern (OPTIONAL) View information for an IPv6 tengigabitethernet interface. et
fortyGigE
(OPTIONAL) View information for an IPv6 fortygigabitethernet interface.
stack-unit id
(OPTIONAL) View information for stacking.
tunnel tunnel-id (OPTIONAL) View information for a tunnel interface.
vlan
(OPTIONAL) View information for IPv6 VLANs.
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1)
Introduced on the S4048-ON. Introduced on the S3048-ON. Added support for IPv6 recursive DNS addresses on the Z9500.
9.2(1.0) 9.2.(0.0) 9.0.0.0 8.3.19.0 8.3.7.0 8.5.1.0 8.4.2.1 8.2.1.0
Introduced on the Z9500. Added support for tunnel interface. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Added support for 4-port 40G line cards on ExaScale. Introduced on the S-Series. Introduced on the E-Series ExaScale. Added support for the managementethernet slot/port parameter.
IPv6 Basics 789
Usage Information
Example
Version
7.8.1.0 7.4.1.0
Description
Introduced on the C-Series. Introduced on the E-Series TeraScale.
The Management port is enabled by default (no shutdown). If necessary, use the ipv6 address command to assign an IPv6 address to the Management port.
Dell#show ipv6 interface tengigabit 1/12 TenGigabitEthernet 1/12 is up, line protocol is up
IPV6 is enabled Link Local address: fe80::201:e8ff:fea7:497e Global Unicast address(es):
100::2, subnet is 100::/64 (MANUAL) Remaining lifetime: infinite
Global Anycast address(es): Joined Group address(es):
ff02::1 ff02::2 ff02::1:ff00:2 ff02::1:ffa7:497e ND MTU is 0 ICMP redirects are not sent DAD is enabled, number of DAD attempts: 3 ND reachable time is 39610 milliseconds ND base reachable time is 30000 milliseconds ND advertised reachable time is 0 milliseconds ND advertised retransmit interval is 0 milliseconds ND router advertisements are sent every 198 to 600 seconds ND router advertisements live for 1800 seconds ND advertised hop limit is 64 IPv6 hop limit for originated packets is 64 Dell#
Example (Managementeth ernet)
Dell#show ipv6 interface management 1/1 ManagementEthernet 1/1 is up, line protocol is up
IPV6 is enabled Link Local address: fe80::201:e8ff:fea7:497e Global Unicast address(es):
Actual address is 300::1, subnet is 300::/64 (MANUAL) Remaining lifetime: infinite
Virtual-IP IPv6 address is not set Global Anycast address(es): Joined Group address(es):
ff02::1 ff02::1:ff00:1 ff02::1:ffa7:497e ND MTU is 0 ICMP redirects are not sent DAD is enabled, number of DAD attempts: 3 ND reachable time is 20410 milliseconds ND base reachable time is 30000 milliseconds ND retransmit interval is 1000 milliseconds ND hop limit is 64 Dell#
Example (Brief)
Dell#show ipv6 interface brief TenGigabitEthernet 1/2
fe80::201:e8ff:fea7:497e 2002:1:2::3/96 TenGigabitEthernet 1/12 fe80::201:e8ff:fea7:497e 100::2/64 ManagementEthernet 1/1 fe80::201:e8ff:fea7:497e
[administratively down/down] [up/up] [up/up]
790 IPv6 Basics
300::1/64 Dell#
Example (tunnel)
Dell#show ipv6 interface tunnel 1 Tunnel 1 is up, line protocol is up
IPV6 is enabled Link Local address: fe80::201:e8ff:fea7:497e Global Unicast address(es):
400::1, subnet is 400::/64 (MANUAL) Remaining lifetime: infinite
Global Anycast address(es): Joined Group address(es):
ff02::1 ff02::2 ff02::1:ff00:1 ff02::1:ffa7:497e ND MTU is 0 ICMP redirects are not sent DAD is enabled, number of DAD attempts: 3 ND reachable time is 20410 milliseconds ND base reachable time is 30000 milliseconds ND advertised reachable time is 0 milliseconds ND advertised retransmit interval is 0 milliseconds ND router advertisements are sent every 198 to 600 seconds ND router advertisements live for 1800 seconds ND advertised hop limit is 64 IPv6 hop limit for originated packets is 64
show ipv6 mld_host
Display the IPv6 MLD host counters.
Syntax
show ipv6 mld_host
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Usage Information
The following describes the show ipv6 mld-host command shown in the following example.
Field
Description
Valid MLD Packets
The total number of packets received and sent from the last time the elapsed time was cleared.
Reports
The total number of reports (queries and unsolicited reports generated from joins or leaves) that have been received or sent.
IPv6 Basics 791
Example
Field
Leaves MLDv1 queries MLDv2 queries Malformed Packets
Description
The number of Multicast leaves that have been sent. The number of MLDv1 queries that have been received. The number of MLDv2 queries that have been received. The number of MLDv1 and MLDv2 packets that do not match the requirement for a valid MLD packet.
MLD Host Traffic Counters
Elapsed time since counters cleared: 0028:33:52
Received Sent
Valid MLD Packets 97962
18036
Reports
79962
18034
Leaves
----
0
MLDv2 Queries
18000
----
MLDv1 Queries
0
----
Errors:
Malformed Packets: 4510
show ipv6 route
Displays the IPv6 routes.
Syntax Parameters
show ipv6 route [ipv6-address prefix-length] [vrf vrf-name] [hostname] [all] [bgp as number] [connected] [isis tag] [list prefix-list name] [ospf process-id] [rip] [static] [summary]
ipv6-address prefix-length
(OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format then the prefix length in the /x format. The range is from /0 to /128.
NOTE: The :: notation specifies successive hexadecimal fields of zeros.
vrf vrf-name
(Optional) Enter the keyword vrf followed by the name of the VRF to display IPv6 routes corresponding to that VRF.
NOTE: If you do not specify this option, routes corresponding to the default
VRF are displayed.
hostname all bgp connected isis list ospf rip static summary
(OPTIONAL) View information for this IPv6 routes with Host Name. (OPTIONAL) View information for all IPv6 routes. (OPTIONAL) View information for all IPv6 BGP routes. (OPTIONAL) View only the directly connected IPv6 routes. (OPTIONAL) View information for all IPv6 IS-IS routes. (OPTIONAL) View the IPv6 prefix list. (OPTIONAL) View information for all IPv6 OSPF routes. (OPTIONAL for E-Series only) View information for all IPv6 RIP routes. (OPTIONAL) View only routes configured by the ipv6 route command. (OPTIONAL) View a brief list of the configured IPv6 routes.
Defaults
none
Command Modes EXEC EXEC Privilege
792 IPv6 Basics
Command History
Usage Information
Example (SSeries)
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.0.0.0 8.3.19.0 8.3.7.0 8.2.1.0 7.8.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the C-Series and S-Series. Introduced on the E-Series TeraScale.
The following describes the show ipv6 route command shown in the following examples.
Field
Description
(undefined)
Identifies the type of route:
L = Local C = connected S = static R = RIP B = BGP IN = internal BGP EX = external BGP LO = Locally Originated O = OSPF IA = OSPF inter-area N1 = OSPF NSSA external type 1 N2 = OSPF NSSA external type 2 E1 = OSPF external type 1 E2 = OSPF external type 2 i = IS-IS L1 = IS-IS level-1 L2 = IS-IS level-2 IA = IS-IS inter-area * = candidate default > = non-active route + = summary routes
Destination Gateway
Dist/Metric Last Change
Identifies the route's destination IPv6 address.
Identifies whether the route is directly connected and on which interface the route is configured.
Identifies if the route has a specified distance or metric.
Identifies when the route was last changed or configured.
Dell#show ipv6 route Codes: C - connected, L - local, S - static, R - RIP,
B - BGP, IN - internal BGP, EX - external BGP,LO - Locally Originated,
IPv6 Basics 793
Example (Summary)
O - OSPF, IA - OSPF inter area, N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2, E1 - OSPF external type 1, E2 - OSPF external type 2, i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, IA - IS-IS inter area, * - candidate default, Gateway of last resort is not set
C C S L Dell#
Destination Dist/Metric,
Gateway, Last Change
-----------------------------------------------------
100::/64 [0/0]
Direct, Te 1/12/1, 20:00:18
400::/64 [0/0]
Direct, Tu 1, 00:09:02
800::/64 [1/0]
via 100::1, Te 1/12/1, 00:00:50
fe80::/10 [0/0]
Direct, Nu 0, 20:00:18
show ipv6 route summary: ====================================== Dell#show ipv6 route summary
Route Source
Active Routes
connected
3
static
1
Total
4
Total 4 active route(s) using 928 bytes
Dell#
Non-active Routes 0 0 0
trust ipv6-diffserv
Allows the dynamic classification of IPv6 DSCP.
Syntax
trust ipv6-diffserv To remove the definition, use the no trust ipv6-diffserv command.
Defaults
none
Command Modes CONFIGURATION-POLICY-MAP-IN
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.3.7.0 8.4.2.1 8.2.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the S4810. Introduced on the C-Series and S-Series. Introduced on the E-Series ExaScale. Introduced on the E-Series TeraScale.
Usage Information
When you configure trust IPv6 diffserv, matched bytes/packets counters are not incremented in the show qos statistics command.
794 IPv6 Basics
Trust diffserv (IPv4) can co-exist with trust ipv6-diffserv in an Input Policy Map. Dynamic classification happens based on the mapping as shown:
IPv6 Service Queue ID Class Field
111XXXXX
7
110XXXXX
6
101XXXXX
5
100XXXXX
4
011XXXXX
3
010XXXXX
2
001XXXXX
1
000XXXXX
0
IPv6 Basics 795
29
iSCSI Optimization
Internet small computer system interface (iSCSI) optimization enables quality-of-service (QoS) treatment for iSCSI storage traffic on an S4048�ON system. To configure and verify the iSCSI optimization feature, use the following Dell Networking OS commands.
Topics:
� advertise dcbx-app-tlv � iscsi aging time � iscsi cos � iscsi enable � iscsi priority-bits � iscsi profile-compellant � iscsi target port � show iscsi � show iscsi session � show iscsi session detailed � show run iscsi
advertise dcbx-app-tlv
Configure DCBX to send iSCSI TLV advertisements.
Syntax
advertise dcbx-app-tlv iscsi
To disable DCBX iSCSI TLV advertisements, use the no advertise dcbx-app-tlv iscsi command.
Defaults
Disabled.
Command Modes PROTOCOL LLDP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 8.3.19.0 8.3.12.0 8.3.16.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S4820T. Introduced on the S4810. Introduced on MXL 10/40GbE Switch IO Module.
Usage Information
You can configure iSCSI TLVs to send either globally or on a specified interface. The interface configuration takes priority over global configuration.
796 iSCSI Optimization
iscsi aging time
Set the aging time for iSCSI sessions.
Syntax Parameters
iscsi aging time time To remove the iSCSI session aging time, use the no iscsi aging time command.
time
Enter the aging time for the iSCSI session. The range is from 5 to 43,200 minutes.
Defaults
10 minutes
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 8.3.19.0 8.3.12.0 8.3.16.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S4820T. Introduced on the S4810. Introduced on MXL 10/40GbE Switch IO Module.
iscsi cos
Set the QoS policy that is applied to the iSCSI flows.
Syntax Parameters
iscsi cos {enable | disable | dot1p vlan-priority-value [remark] | dscp dscp-value [remark]}
To disable the QoS policy, use the no iscsi cos command.
enable
disable dot1p vlanpriority-value dscp dscp-value remark
Enter the keyword enable to allow the application of preferential QoS treatment to iSCSI traffic so that the iSCSI packets are scheduled in the switch with a dot1p priority 4 regardless of the VLAN priority tag in the packet. The default is: the iSCSI packets are handled with dotp1 priority 4 without remark.
Enter the keyword disable to disable the application of preferential QoS treatment to iSCSI frames.
Enter the dot1p value of the VLAN priority tag assigned to the incoming packets in an iSCSI session. The range is from 0 to 7. The default is the dot1p value in ingress iSCSI frames is not changed and is the same priority is used in iSCSI TLV advertisements if you did not enter the iscsi priority-bits command.
Enter the DSCP value assigned to the incoming packets in an iSCSI session. The valid range is from 0 to 63. The default is: the DSCP value in ingress packets is not changed.
Marks the incoming iSCSI packets with the configured dot1p or DSCP value when they egress to the switch. The default is: the dot1and DSCP values in egress packets are not changed.
Defaults
Disabled.
Command Modes CONFIGURATION
iSCSI Optimization 797
Command History
Usage Information
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 8.3.19.0 8.3.12.0 8.3.16.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S4820T. Introduced on the S4810. Introduced on MXL 10/40GbE Switch IO Module.
By default, iSCSI flows are assigned to dot1p priority 4.
iscsi enable
Globally enable iSCSI optimization.
Syntax Parameters
iscsi enable To disable iSCSI optimization, use the no iscsi enable command.
enable
Enter the keyword enable to enable the iSCSI optimization feature.
Defaults
Disabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 8.3.19.0 8.3.12.0 8.3.16.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S4820T. Introduced on the S4810. Introduced on MXL 10/40GbE Switch IO Module.
iscsi priority-bits
Configure the priority bitmap that advertises in the iSCSI application TLVs.
Syntax
iscsi priority-bits To remove the configured priority bitmap, use the no iscsi priority-bits command.
Defaults
4 (0x10 in the bitmap)
Command Modes PROTOCOL LLDP (only on the global, not on the interface)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
798 iSCSI Optimization
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 8.3.19.0 8.3.12.0 8.3.16.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S4820T. Introduced on the S4810. Introduced on MXL 10/40GbE Switch IO Module.
iscsi profile-compellant
Configure the auto-detection of Dell Compellent arrays on a port.
Syntax
iscsi profile-compellent
Defaults
Dell Compellent disk arrays are not detected.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 8.3.19.0 8.3.12.0 8.3.16.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S4820T. Introduced on the S4810. Introduced on MXL 10/40GbE Switch IO Module.
iscsi target port
Configure the iSCSI target ports and optionally, the IP addresses on which iSCSI communication is monitored.
Syntax Parameters
iscsi target port [tcp-port-2...tcp-port-16]ip-address [ip-address]
To remove the configured iSCSI target ports or IP addresses, use the no iscsi target port command.
tcp-
Enter the tcp-port number of the iSCSI target ports. The tcp-port-n is the TCP
port-2...tcpport- port number or a list of TCP port numbers on which the iSCSI target listens to
16
requests. Separate port numbers with a comma. The default is 860, 3260.
ip-address (Optional)
Enter the ip-address that the iSCSI monitors. The ip-address specifies the IP address of the iSCSI target.
Defaults
860, 3260
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
iSCSI Optimization 799
Usage Information
Version
9.8(0.0) 8.3.19.0 8.3.12.0 8.3.16.0
Description
Introduced on the S3048-ON and S4048-ON. Introduced on the S4820T. Introduced on the S4810. Introduced on MXL 10/40GbE Switch IO Module.
You can configure up to 16 target TCP ports on the switch in one command or multiple commands.
When you use the no iscsi target port command and the TCP port you wish to delete is one bound to a specific IP address, the IP address value must be included in the command.
show iscsi
Display the currently configured iSCSI settings.
Syntax
show iscsi
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 8.3.19.0 8.3.12.0 8.3.16.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S4820T. Introduced on the S4810. Introduced on MXL 10/40GbE Switch IO Module.
Example
Dell#show iscsi iSCSI is enabled iSCSI session monitoring is disabled iSCSI COS : dot1p is 4 no-remark Session aging time: 10 Maximum number of connections is 256 -----------------------------------------------iSCSI Targets and TCP Ports: -----------------------------------------------TCP Port Target IP Address 3260 860
Related Commands
show iscsi session -- displays information about active iSCSI sessions on the switch. show iscsi session detailed -- displays detailed information about active iSCSI sessions on the switch. show run iscsi -- shows run iscsi.
show iscsi session
Display information about active iSCSI sessions on the switch.
Syntax
show iscsi session
Command Modes EXEC
800 iSCSI Optimization
Command History
Example
Usage Information Related Commands
EXEC Privilege
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 8.3.19.0 8.3.12.0 8.3.16.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S4820T. Introduced on the S4810. Introduced on MXL 10/40GbE Switch IO Module.
Dell# show isci session Session 0: -----------------------------------------------------Target: iqn.2001-05.com.equallogic:0-8a0906-0e70c2002-10a0018426a48c94iom010 Initiator: iqn.1991-05.com.microsoft:win-x9l8v27yajg ISID: 400001370000
Session 1: --------------------------------------------------------Target: iqn.2001-05.com.equallogic:0-8a0906-0f60c2002-0360018428d48c94iom011 Initiator: iqn.1991-05.com.microsoft:win-x9l8v27yajg ISID: 400001370000.
Only sessions the switch observes are learned; sessions flowing through an adjacent switch are not learned. After the switch is reloaded, any information exchanged during the initial handshake is not available. If the switch picks up the communication after reloading, it would detect a session was in progress but could not obtain complete information for it. Any incomplete information of this type would not be available in the show commands.
show iscsi -- displays the currently configured iSCSI settings. show iscsi session detailed -- displays detailed information about active iSCSI sessions on the switch. show run iscsi -- shows run iscsi.
show iscsi session detailed
Display detailed information on active iSCSI sessions on the switch.
Syntax Parameters
show iscsi session detailed [session isid]
isid
Enter the session's iSCSi ID to display detailed information about the specified
iSCSi session.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0)
Introduced on the S3048-ON and S4048-ON.
iSCSI Optimization 801
Example
Related Commands
Version
8.3.19.0 8.3.12.0
Description
Introduced on the S4820T. Introduced on the S4810.
Dell# show isci session detailed
Session 0 :
---------------------------------------------------
Target:iqn.2010-11.com.ixia:ixload:iscsi-TG1
Initiator:iqn.2010-11.com.ixia.ixload:initiator-iscsi-2c
Up Time:00:00:01:28(DD:HH:MM:SS)
Time for aging out:00:00:09:34(DD:HH:MM:SS)
ISID:806978696102
Initiator Initiator Target
Target Connection
IP Address TCP Port IP Address TCPPort ID
10.10.0.44 33345
10.10.0.101 3260
0
Session 1 :
----------------------------------------------------
Target:iqn.2010-11.com.ixia:ixload:iscsi-TG1
Initiator:iqn.2010-11.com.ixia.ixload:initiator-iscsi-35
Up Time:00:00:01:22(DD:HH:MM:SS)
Time for aging out:00:00:09:31(DD:HH:MM:SS)
ISID:806978696102
Initiator Initiator Target
Target Connection
IP Address TCP Port IP Address TCPPort ID
10.10.0.53 33432
10.10.0.101 3260 0
show iscsi -- displays the currently configured iSCSI settings. show iscsi session -- displays information about active iSCSI sessions on the switch. show run iscsi -- shows run iscsi.
show run iscsi
Display all globally configured non-default iSCSI settings in the current Dell Networking OS session.
Syntax
show run iscsi
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 8.3.19.0 8.3.12.0 8.3.16.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S4820T. Introduced on the S4810. Introduced on MXL 10/40GbE Switch IO Module.
Related Commands
show iscsi -- displays the currently configured iSCSI settings. show iscsi session -- displays detailed information about active iSCSI sessions on the switch. show iscsi session detailed -- displays detailed information on active iSCSI sessions on the switch.
802 iSCSI Optimization
30
Intermediate System to Intermediate System (IS-IS)
IS-IS is an interior gateway protocol that uses shortest-path-first algorithm. IS-IS facilitates the communication between open systems, supporting routers passing through both IP and OSI traffic.
A router is considered as an intermediate system. Networks are partitioned into manageable routing domains called areas. Intermediate systems send, receive, and forward packets to other routers within their area (Level 1 and Level 1-2 devices). Only Level 1-2 and Level 2 devices communicate with other areas.
IS-IS protocol standards are listed in the Standard Compliance chapter in the Dell Networking OS Configuration Guide.
NOTE: The fundamental mechanisms of IS-IS are the same for IPv4 and IPv6. However some command modes might vary when applied to IPV4 and IPV6. These variations have been explicitly explained for such commands. If the variation is not mentioned, then the information applies to both the protocol versions.
Topics:
� adjacency-check � advertise � area-password � clear config � clear isis � clns host � debug isis � debug isis adj-packets � debug isis local-updates � debug isis snp-packets � debug isis spf-triggers � debug isis update-packets � default-information originate � description � distance � distribute-list in � distribute-list out � distribute-list redistributed-override � domain-password � graceful-restart ietf � graceful-restart interval � graceful-restart restart-wait � graceful-restart t1 � graceful-restart t2 � graceful-restart t3 � hello padding � hostname dynamic � ignore-lsp-errors � ip router isis � ipv6 router isis � isis circuit-type � isis csnp-interval � isis hello-interval � isis hello-multiplier � isis hello padding
Intermediate System to Intermediate System (IS-IS) 803
� isis ipv6 metric � isis metric � isis network point-to-point � isis password � isis priority � is-type � log-adjacency-changes � lsp-gen-interval � lsp-mtu � lsp-refresh-interval � max-area-addresses � max-lsp-lifetime � maximum-paths � metric-style � multi-topology � net � passive-interface � redistribute � redistribute bgp � redistribute ospf � router isis � set-overload-bit � show config � show isis database � show isis graceful-restart detail � show isis hostname � show isis interface � show isis neighbors � show isis protocol � show isis traffic � spf-interval
adjacency-check
Verify that the "protocols supported" field of the IS-IS neighbor contains matching values to this router.
Syntax
adjacency-check To disable adjacency check, use the no adjacency-check command.
Defaults
Enabled.
Command Modes ROUTER ISIS (for IPv4) CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000.
804 Intermediate System to Intermediate System (IS-IS)
Usage Information
Version
8.3.19.0 8.3.12.0 8.3.11.1 7.5.1.0
Description
Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series.
To perform protocol-support consistency checks on hello packets, use this command. The adjacencycheck is enabled by default.
If a BFD session goes down indicating that IPv4 or IPv6 connectivity to its neighbor is lost, it does not imply that the adjacency is lost altogether. The hello adjacency runs over Layer 2, and does not require IP connectivity. However, if IPv4 connectivity is lost to a neighbor, then when the next SPF calculation is performed, the system ensures that it does not calculate any IPv4 or IPv6 routes through that neighbor.
advertise
Leak routes between levels (distribute IP prefixes between Level 1 and Level 2 and vice versa).
Syntax
advertise {level1-into-level2 | level2-into-level1} prefix-list-name
To return to the default, use the no advertise {level1-into-level2 | level2-intolevel1}[prefix-list-name] command.
Parameters
level1-into-level2 Enter the keywords level1-into-level2 to advertise Level 1 routes into Level 2 LSPs. This setting is the default.
level2-into-level1 Enter the keywords level2-into-level1 to advertise Level 2 inter-area routes into Level 1 LSPs. This behavior is described in RFC 2966.
prefix-list-name Enter the name of a configured IP prefix list. Routes meeting the criteria of the IP Prefix list are leaked.
Defaults
level1-into-level2 (Level 1 to Level 2 leaking is enabled.) level2�into-level1 (Level 2 to Level 1) leaking is disabled.
Command Modes ROUTER ISIS (for IPv4) CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 7.5.1.0 6.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Added IPv6 ISIS support. Version 6.3.1.0 Introduced
Intermediate System to Intermediate System (IS-IS) 805
Usage Information
You cannot disable leaking from Level 1 to Level 2. Also, you cannot enable leaking from Level 2 to Level 1. However, you can regulate the rate flow from one level to another using an IP Prefix list. If you do not configure the IP Prefix list, all Level 1 routes are leaked.
You can find more information in IETF RFC 2966, Domain-wide Prefix Distribution with Two-Level IS-IS.
area-password
Configure a hash message authentication code (HMAC) password for an area.
Syntax
area-password [hmac-md5 | encryption-type] password To delete a password, use the no area-password command.
Parameters
hmac-md5 encryption-type password
(OPTIONAL) Enter the keywords hmac-md5 to encrypt the password.
(OPTIONAL) Enter 7 to encrypt the password using DES.
Enter a 1 to 16-character length alphanumeric string to prevent unauthorized access or incorrect routing information corrupting the link state database. The password is processed as plain text, which only provides limited security.
Defaults
Not configured.
Command Modes ROUTER ISIS
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000.
Usage Information
Related Commands
To prevent the link state database from receiving incorrect routing information from unauthorized routers, use the area-password command on routers within an area. The configured password injects into Level 1 LSPs, CSNPs, and PSNPs.
domain-password -- allows you to set the authentication password for a routing domain. isis password -- allows you to configure an authentication password for an interface.
clear config
Clear IS-IS configurations that display under the router isis heading of the show running-config command output.
Syntax
clear config
Command Modes ROUTER ISIS
806 Intermediate System to Intermediate System (IS-IS)
Command History
Usage Information
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
CAUTION: Use caution when you enter this command. Back up your configuration prior to using this command or your IS-IS configuration will be erased.
clear isis
Restart the IS-IS process. All IS-IS data is cleared.
Syntax Parameters
clear isis [vrf vrf-name] [tag] {* | database | traffic}
vrf vrf-name tag *
database traffic
(Optional) Enter the keyword vrf followed by the name of the VRF to restart the IS-IS process corresponding to that VRF.
(Optional) Enter an alphanumeric string to specify the IS-IS routing tag area.
Enter the keyword * to clear all IS-IS information and restart the IS-IS process. This command removes IS-IS neighbor information and IS-IS LSP database information and the full SPF calculation is done.
Clears IS-IS LSP database information.
Clears IS-IS counters.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1
Introduced on the S3048-ON and S4048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000.
Intermediate System to Intermediate System (IS-IS) 807
clns host
Define a name-to-network service mapping point (NSAP) that you use with commands that require NSAPs and system IDs.
Syntax Parameters
clns host name nsap
name nsap
Enter an alphanumeric string to identify the name-to-NSAP mapping. Enter a specific NSAP address that is associated with the name parameter.
Defaults
Not configured.
Command Modes ROUTER ISIS
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000.
Usage Information
Related Commands
To configure a shortcut name that you can use instead of entering a long string of numbers associated with an NSAP address, use this command.
hostname dynamic -- enables dynamic learning of host names from routers in the domain and allows the routers to advertise the host names in LSPs.
debug isis
Enable debugging for all IS-IS operations.
Syntax
debug isis To disable debugging of IS-IS, use the no debug isis command.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T.
808 Intermediate System to Intermediate System (IS-IS)
Usage Information
Version
8.3.12.0 8.3.11.1
Description
Introduced on the S4810. Introduced on the Z9000.
Entering debug isis enables all debugging parameters.
To display all debugging information in one output, use this command. To turn off debugging, you normally enter separate no forms of each command. To disable all debug messages for IS-IS at once, enter the no debug isis command.
debug isis adj-packets
Enable debugging on adjacency-related activity such as hello packets that are sent and received on IS-IS adjacencies.
Syntax Parameters
debug isis [vrf vrf-name] adj-packets [interface]
To turn off debugging, use the no debug isis [vrf vrf-name]adj-packets [interface] command.
vrf vrf-name interface
(Optional) Enter the keyword vrf followed by the name of the VRF to enable the debug information on IS-IS for an adjacency tied to that VRF. This command displays the IIH related debug details.
(OPTIONAL) Identifies the interface type slot/port[/subport] as one of the following:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 9.2(0.2) 9.0.2.0 8.3.19.0 8.3.12.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the Z9000. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810.
Intermediate System to Intermediate System (IS-IS) 809
debug isis local-updates
To debug IS-IS local update packets, enable debugging on a specific interface and provides diagnostic information.
Syntax Parameters
debug isis [vrf vrf-name] local-updates [interface]
To turn off debugging, use the no debug isis [vrf vrf--name] updates [interface] command.
vrf vrf-name interface
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to enable the debugging information on IS-IS corresponding to that VRF. This information contains local updates tied to the VRF that you specify. This command displays the local LSP debugging details of the current unit.
(OPTIONAL) Identifies the interface type slot/port[/subport] as one of the following:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 9.2(0.2) 9.0.2.0 8.3.19.0 8.3.12.0 6.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the Z9000. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced.
debug isis snp-packets
To debug IS-IS complete sequence number PDU (CSNP) and partial sequence number PDU (PSNP) packets, enable debugging on a specific interface and provides diagnostic information.
Syntax
debug isis [vrf vrf-name] snp-packets [interface]
To turn off debugging, use the no debug isis [vrf vrf-name] snp-packets [interface] command.
810 Intermediate System to Intermediate System (IS-IS)
Parameters
vrf vrf-name interface
(Optional) Enter the keyword vrf followed by the name of the VRF to enable debugging information on ISIS for CSNP/PSNP packets tied to that VRF. The command displays the SNP (CSNP/PSNP) related debugging information.
(OPTIONAL) Identifies the interface type slot/port[/subport] as one of the following:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 9.2(0.2) 9.0.2.0 8.3.19.0 8.3.12.0 6.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the Z9000. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced.
debug isis spf-triggers
Enable debugging on the events that triggered IS-IS shortest path first (SPF) events for debugging purposes.
Syntax Parameters
debug isis [vrf vrf-name] spf-triggers To turn off debugging, use the no debug isis [vrf vrf-name] spf-triggers command.
vrf vrf-name
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to enable debugging information on IS-IS corresponding to that VRF. This information contains SPF trigger detail tied to the VRF that you specify. When SPF is triggered, this debugging information is displayed.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms,refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2)
Introduced on the S4048-ON. Introduced on the S3048-ON.
Intermediate System to Intermediate System (IS-IS) 811
Version
9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 6.3.1.0
Description
Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced.
debug isis update-packets
Enable debugging on link state PDUs (LSPs) that a router detects.
Syntax Parameters
debug isis [vrf vrf-name] update-packets [interface] To turn off debugging, use the no debug isis update-packets [interface] command.
vrf vrf-name interface
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to enable the debugging information on IS-IS. This information contains updates from neighbors tied to the VRF that you specify. This command displays the debugging details of the received LSPs from the neighbors.
(OPTIONAL) Identifies the interface type slot/port[/subport] as one of the following:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 9.2(0.2) 9.0.2.0 8.3.19.0 8.3.12.0 6.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the Z9000. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced.
812 Intermediate System to Intermediate System (IS-IS)
default-information originate
Generates a default route into an IS-IS routing domain and controls the distribution of default information.
Syntax
default-information originate [always] [metric metric] [route-map map-name]
To disable the generation of a default route into the specified IS-IS routing domain, use the no default-information originate [always] [metric metric] [route-map map-name] command.
Parameters
always
metric metric
route-map mapname
(OPTIONAL) Enter the keyword always to have the default route always advertised.
(OPTIONAL) Enter the keyword metric then a number to assign to the route. The range is from 0 to 16777215.
(OPTIONAL) A default route the routing process generates if the route map is satisfied.
Defaults
Not configured.
Command Modes ROUTER ISIS (for IPv4) CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 7.5.1.0 6.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Added IPv6 ISIS support. Introduced.
Usage Information
Related Commands
When you use this command to redistribute routes into a routing domain, the router becomes an autonomous system (AS) boundary router. An AS boundary router does not always generate a default route into a routing domain. The router still requires its own default route before it can generate one.
How a metric value assigned to a default route advertises depends on the metric-style command configuration. If the metric-style command is set for Narrow mode and the metric value in the default-information originate command is set to a number higher than 63, the metric value advertised in the LSPs is 63. If the metric-style command is set for Wide mode, the metric value in the default-information originate command is advertised.
redistribute -- redistributes routes from one routing domain to another routing domain.
Intermediate System to Intermediate System (IS-IS) 813
description
Enter a description of the IS-IS routing protocol.
Syntax
description {description} To remove the description, use the no description {description} command.
Parameters
description
Enter a description to identify the IS-IS protocol (80 characters maximum).
Defaults
none
Command Modes ROUTER ISIS
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
9.5(0.1)
9.0.2.0
8.3.19.0
8.3.12.0
8.3.11.1
pre-7.7.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced.
Related Commands
router isis -- Enter ROUTER mode on the switch.
distance
Define the administrative distance for learned routes.
Syntax
distance weight [ip-address mask [prefix-list]] To return to the default values, use the no distance weight command.
Parameters
weight ip-address mask prefix-list
The administrative distance value indicates the reliability of a routing information source. The range is from 1 to 255. (A higher relative value indicates lower reliability. Routes with smaller values are given preference.) The default is 115.
(OPTIONAL) Enter the next-hop address in dotted decimal format and enter a mask in either dotted decimal or /prefix format.
(OPTIONAL) Enter the name of a prefix list name.
Defaults
weight = 115
Command Modes ROUTER ISIS (for IPv4) CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
814 Intermediate System to Intermediate System (IS-IS)
Usage Information
Version
9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 6.3.1.0
Description
Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced.
The administrative distance indicates the trust value of incoming packets. A low administrative distance indicates a high trust rate. A high value indicates a lower trust rate. For example, a weight of 255 is interpreted that the routing information source is not trustworthy and should be ignored.
distribute-list in
Filter network prefixes received in updates.
Syntax Parameters
distribute-list prefix-list-name in [interface]
To return to the default values, use the no distribute-list prefix-list-name in [interface] command.
prefix-list-name interface
Specify the prefix list to filter prefixes in routing updates.
(OPTIONAL) Identifies the interface type slot/port[/subport] as one of the following:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Defaults
Not configured.
Command Modes ROUTER ISIS (for IPv4) CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000.
Intermediate System to Intermediate System (IS-IS) 815
Related Commands
Version
8.3.19.0 8.3.12.0 7.5.1.0 6.3.1.0
Description
Introduced on the S4820T. Introduced on the S4810. Added IPv6 ISIS support. Introduced.
distribute-list out -- suppresses networks from being advertised in updates. redistribute -- redistributes routes from one routing domain to another routing domain.
distribute-list out
Suppress network prefixes from being advertised in outbound updates.
Syntax
distribute-list prefix-list-name out [connected | bgp as number | ospf process-id | rip | static]
To return to the default values, use the no distribute-list prefix-list-name out [bgp as number connected | ospf process-id | rip | static] command.
Parameters
prefix-list-name connected
ospf process-id
bgp as number rip static
Specify the prefix list to filter prefixes in routing updates.
(OPTIONAL) Enter the keyword connected for directly connected routing process.
(OPTIONAL) Enter the keyword ospf then the OSPF process-ID number. The range is from 1 to 65535.
(OPTIONAL) Enter the BGP then the AS Number. The range is from 1 to 65535.
(OPTIONAL) Enter the keyword rip for RIP routes.
(OPTIONAL) Enter the keyword static for user-configured routing process.
Defaults
Not configured.
Command Modes ROUTER ISIS (for IPv4) CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 7.5.1.0 6.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Added IPv6 ISIS support. Introduced.
Usage Information
You can assign a name to a routing process so a prefix list IS applied to only the routes derived from the specified routing process.
816 Intermediate System to Intermediate System (IS-IS)
Related Commands
distribute-list in -- filters the networks received in updates. redistribute -- redistributes routes from one routing domain to another routing domain.
distribute-list redistributed-override
Suppress flapping of routes when the same route is redistributed into IS-IS from multiple routers in the network.
Syntax
distribute-list redistributed-override in To return to the default, use the no distribute-list redistributed-override in command.
Defaults
none
Command Modes ROUTER ISIS (for IPv4) CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 7.8.1.0 6.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Added IPv6 ISIS support. Introduced.
Usage Information
When you execute this command, IS-IS does not download the route to the routing table if the same route was redistributed into IS-IS routing protocol on the same router.
domain-password
Set the authentication password for a routing domain.
Syntax
domain-password [hmac-md5 | encryption-type] password To disable the password, use the no domain-password command.
Parameters
hmac-md5 encryption-type password
(OPTIONAL) Enter the keywords hmac-md5 to encrypt the password using MD5.
(OPTIONAL) Enter 7 to encrypt the password using DES.
Enter an alphanumeric string up to 16 characters long. If you do not specify an encryption type or hmac-md5 keywords, the password is processed as plain text which provides limited security.
Defaults
No default password.
Command Modes ROUTER ISIS
Intermediate System to Intermediate System (IS-IS) 817
Command History
Usage Information Related Commands
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 6.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced.
The domain password is inserted in Level 2 link state PDUs (LSPs), complete sequence number PDUs (CSNPs), and partial sequence number PDUs (PSNPs).
area-password -- configures an IS-IS area authentication password. isis priority -- configures the authentication password for an interface.
graceful-restart ietf
Enable graceful restart on an IS-IS router.
Syntax
graceful-restart ietf To return to the default, use the no graceful-restart ietf command.
Parameters
ietf
Enter ietf to enable graceful restart on the IS-IS router.
Defaults
Graceful restart disabled.
Command Modes ROUTER ISIS
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 6.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series.
818 Intermediate System to Intermediate System (IS-IS)
Usage Information
Every graceful restart enabled router's HELLO PDUs includes a restart TLV. This restart enables (re)starting as well as the existing ISIS peers to detect the GR capability of the routers on the connected network. A flag in the Restart TLV contains restart request (RR), restart acknowledge (RA) and suppress adjacency advertisement (SA) bit flags.
The ISIS graceful restart-enabled router can co-exist in mixed topologies where some routers are graceful restart-enabled and others are not. For neighbors that are not graceful restart-enabled, the restarting router brings up the adjacency per the usual methods.
graceful-restart interval
Set the graceful restart grace period, the time during that all graceful restart attempts are prevented.
Syntax
graceful-restart interval minutes To return to the default, use the no graceful-restart interval command.
Parameters
minutes
Enter the graceful-restart interval minutes. The range is from 1 to 20 minutes. The default is 5 minutes.
Defaults
5 minutes
Command Modes ROUTER ISIS
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series.
graceful-restart restart-wait
Enable the graceful restart maximum wait time before a restarting peer comes up.
Syntax
NOTE: Set the t3 timer to adjacency on the restarting router when implementing this command.
Parameters
graceful-restart restart-wait seconds To return to the default, use the no graceful-restart restart-wait command.
seconds
Enter the graceful restart time in seconds. The range is from 5 to 300 seconds. The default is 30 seconds.
Defaults
30 seconds
Command Modes ROUTER ISIS
Intermediate System to Intermediate System (IS-IS) 819
Command History
Related Commands
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series.
graceful-restart t3 -- configures the overall wait time before graceful restart completes.
graceful-restart t1
Set the graceful restart wait time before unacknowledged restart requests are generated. This wait time is the interval before the system sends a restart request (an IIH with RR bit set in Restart TLV) until the CSNP is received from the helping router.
Syntax
graceful-restart t1 {interval seconds | retry-times value} To return to the default, use the no graceful-restart t1 command.
Parameters
interval retry-times
Enter the keyword interval to set the wait time. The range is from 5 to 120 seconds. The default is 5 seconds.
Enter the keywords retry-times to set the number of times the request interval is extended until a CSNP is received from the helping router. The range is from 1 to 10 attempts. The default is 1.
Defaults
Refer to Parameters.
Command Modes ROUTER ISIS
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series.
820 Intermediate System to Intermediate System (IS-IS)
graceful-restart t2
Configure the wait time for the graceful restart timer T2 that a restarting router uses as the wait time for each database to synchronize.
Syntax
graceful-restart t2 {level-1 | level-2} seconds To return to the default, use the no graceful-restart t2 command.
Parameters
level-1, level-2 seconds
Enter the keywords level-1 or level-2 to identify the database instance type to which the wait interval applies.
Enter the gracefule-restart t2 time in seconds. The range is from 5 to 120 seconds. The default is 30 seconds.
Defaults
30 seconds
Command Modes ROUTER ISIS
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series.
graceful-restart t3
Configure the overall wait time before graceful restart completes.
Syntax
graceful-restart t3 {adjacency | manual} seconds To return to the default, use the no graceful-restart t3 command.
Parameters
adjacency manual
Enter the keyword adjacency so that the restarting router receives the remaining time value from its peer and adjusts its T3 value so if you have configured this option.
Enter the keyword manual to specify a time value that the restarting router uses. The range is from 50 to 120 seconds. The default is 30 seconds.
Defaults
manual, 30 seconds
Command Modes ROUTER ISIS
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Intermediate System to Intermediate System (IS-IS) 821
Usage Information
Related Commands
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 8.3.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series.
The running router sets the remaining time value to the current adjacency hold time. You can override this setting by implementing this command.
Override the default restart-wait time by entering the no graceful-restart restart-wait command. When you disable restart-wait, the current adjacency hold time is used.
Set the t3 timer to adjacency on the restarting router when implementing this command. The restarting router gets the remaining time value from its peer and adjusts its T3 value so only when you have configured graceful-restart t3 adjacency.
graceful-restart restart-wait -- enables the graceful restart maximum wait time before a restarting peer comes up.
hello padding
Use to turn ON or OFF padding for LAN and point-to-point hello PDUs or to selectively turn padding ON or OFF for LAN or point-to-point hello PDUs.
Syntax
hello padding [multi-point | point-to-point]
To return to the default, use the no hello padding [multi-point | point-to-point] command.
Parameters
multi-point point-to-point
(OPTIONAL) Enter the keywords multi-point to pad only LAN hello PDUs.
(OPTIONAL) Enter the keywords point-to-point to pad only point-to-point PDUs.
Defaults
Both LAN and point-to-point hello PDUs are padded.
Command Modes ROUTER ISIS
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T.
822 Intermediate System to Intermediate System (IS-IS)
Usage Information
Related Commands
Version
8.3.12.0 8.3.11.1
Description
Introduced on the S4810. Introduced on the Z9000.
IS-IS hellos are padded to the full maximum transmission unit (MTU) size. Padding IS-IS Hellos (IIHS) to the full MTU provides early error detection of large frame transmission problems or mismatched MTUs on adjacent interfaces.
isis hello padding -- turns ON or OFF hello padding on an interface basis.
hostname dynamic
Enables dynamic learning of hostnames from routers in the domain and allows the routers to advertise the hostname in LSPs.
Syntax
hostname dynamic To disable this command, use the no hostname dynamic command.
Defaults
Enabled.
Command Modes ROUTER ISIS
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000.
Usage Information
Related Commands
To build name-to-systemID mapping tables through the protocol, use this command. All show commands that display systems also display the hostname.
clns host -- defines a name-to-NSAP mapping.
ignore-lsp-errors
Ignore LSPs with bad checksums instead of purging those LSPs.
Syntax
ignore-lsp-errors To return to the default values, use the no ignore-lsp-errors command.
Defaults
In IS-IS, the default deletes LSPs with internal checksum errors (no ignore-lsp-errors).
Command Modes ROUTER ISIS
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Intermediate System to Intermediate System (IS-IS) 823
Usage Information
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000.
IS-IS normally purges LSPs with an incorrect data link checksum causing the LSP source to regenerate the message. A cycle of purging and regenerating LSPs can occur when a network link continues to deliver accurate LSPs even though there is a link causing data corruption. This process could cause disruption to your system operation.
ip router isis
Configure IS-IS routing processes on an interface and attach an area tag name to the routing process.
Syntax
ip router isis [tag] To disable IS-IS on an interface, use the no ip router isis [tag] command.
Parameters
tag
(OPTIONAL) The tag you specify identifies a specific area routing process. If you do not specify a tag, a null tag is assigned.
Defaults
No processes are configured.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced.
Usage Information
To assign a network entity title to enable IS-IS, use the net command.
This command accepts even if an IP address is not configured. This command is cached in the L3 Manager till the IP address is configured. When the IP address configuration reaches the L3Manager, the circuit add message is sent to IS-IS.
824 Intermediate System to Intermediate System (IS-IS)
Related Commands
NOTE: IP address is not mandatory for forming IS-IS adjacency.
net -- configures an IS-IS network entity title (NET) for the routing process. router isis -- enables the IS-IS routing protocol.
ipv6 router isis
Enable the IPv6 IS-IS routing protocol and specify an IPv6 IS-IS process.
Syntax
ipv6 router isis [tag] To disable IS-IS routing, use the no router isis [tag] command.
Parameters
tag
(OPTIONAL) This parameter is a unique name for a routing process. A null tag is assumed if the tag option is not specified. The tag name must be unique for all IP router processes for a given router.
Defaults
Not configured.
Command Modes ROUTER ISIS
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series.
Usage Information
Related Commands
Configure a network entity title (the net command) to specify the area address and the router system ID.
To establish adjacencies and establish dynamic routing, enable routing on one or more interfaces.
You can configure only one IS-IS routing process to perform Level 2 routing. A level-1-2 designation performs Level 1 and Level 2 routing at the same time.
net -- configures an IS-IS network entity title (NET) for the routing process. is-type -- assigns a type for a given area.
isis circuit-type
Configure the adjacency type on interfaces.
Syntax
isis circuit-type {level-1 | level-1-2 | level-2-only} To return to the default values, use the no isis circuit-type command.
Intermediate System to Intermediate System (IS-IS) 825
Parameters
level-1 level-1-2 level-2-only
You can form a Level 1 adjacency if there is at least one common area address between this system and neighbors. You cannot form Level 2 adjacencies on this interface.
You can form a Level 1 and Level 2 adjacencies when the neighbor is also configured as Level-1-2 and there is at least one common area, if not, a Level 2 adjacency is established. This setting is the default.
You can form a Level 2 adjacencies when other Level 2 or Level 1-2 routers and their interfaces are configured for Level 1-2 or Level 2. Level 1 adjacencies cannot be established on this interface.
Defaults
level-1-2
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000.
Usage Information
Because the default establishes Level 1 and Level 2 adjacencies, you do not need to configure this command. Routers in an IS-IS system must be configured as a Level 1-only, Level 1-2, or Level 2-only system.
Only configure interfaces as Level 1 or Level 2 on routers that are between areas (for example, a Level 1-2 router) to prevent the software from sending unused hello packets and wasting bandwidth.
isis csnp-interval
Configure the IS-IS complete sequence number PDU (CSNP) interval on an interface.
Syntax
isis csnp-interval seconds [level-1 | level-2]
To return to the default values, use the no isis csnp-interval [seconds] [level-1 | level-2] command.
Parameters
seconds level-1 level-2
Interval of transmission time between CSNPs on multi-access networks for the designated intermediate system. The range is from 0 to 65535. The default is 10.
(OPTIONAL) Independently configures the interval of time between transmission of CSNPs for Level 1.
(OPTIONAL) Independently configures the interval of time between transmission of CSNPs for Level 2.
Defaults
seconds = 10; level-1 (if not otherwise specified)
Command Modes INTERFACE
826 Intermediate System to Intermediate System (IS-IS)
Command History
Usage Information
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000.
The default values of this command are typically satisfactory transmission times for a specific interface on a designated intermediate system. To maintain database synchronization, the designated routers send CSNPs.
You can configure Level 1 and Level 2 CSNP intervals independently.
isis hello-interval
Specify the length of time between hello packets sent.
Syntax
isis hello-interval seconds [level-1 | level-2]
To return to the default values, use the no isis hello-interval [seconds] [level-1 | level-2] command.
Parameters
seconds level-1 level-2
Allows you to set the length of time between hello packet transmissions. The range is from 1 to 65535. The default is 10.
(OPTIONAL) Select this value to configure the hello interval for Level 1. This value is the default.
(OPTIONAL) Select this value to configure the hello interval for Level 2.
Defaults
seconds = 10; level-1 (if not otherwise specified)
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810.
Intermediate System to Intermediate System (IS-IS) 827
Usage Information
Related Commands
Version
8.3.11.1
Description
Introduced on the Z9000.
Hello packets are held for a length of three times the value of the hello interval. To conserve bandwidth and CPU usage, use a high hello interval seconds. Use a low hello interval seconds for faster convergence (but uses more bandwidth and CPU resources).
isis hello-multiplier -- specifies the number of IS-IS hello packets a neighbor must miss before the router declares the adjacency as down.
isis hello-multiplier
Specify the number of IS-IS hello packets a neighbor must miss before the router declares the adjacency down.
Syntax
isis hello-multiplier multiplier [level-1 | level-2]
To return to the default values, use the no isis hello-multiplier [multiplier] [level-1 | level-2] command.
Parameters
multiplier level-1 level-2
Specifies an integer that sets the multiplier for the hello holding time. Never configure a hello-multiplier lower than the default (3). The range is from 3 to 1000. The default is 3.
(OPTIONAL) Select this value to configure the hello multiplier independently for Level 1 adjacencies. This value is the default.
(OPTONAL) Select this value to configure the hello multiplier independently for Level 2 adjacencies.
Defaults
multiplier = 3; level-1 (if not otherwise specified)
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000.
Usage Information
Related Commands
The holdtime (the product of the hello-multiplier multiplied by the hello-interval) determines how long a neighbor waits for a hello packet before declaring the neighbor is down so routes can be recalculated.
isis hello-interval -- specifies the length of time between hello packets.
828 Intermediate System to Intermediate System (IS-IS)
isis hello padding
Turn ON or OFF padding of hello PDUs from INTERFACE mode.
Syntax
isis hello padding To return to the default, use the no isis hello padding command.
Defaults
Padding of hello PDUs is enabled (ON).
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000.
Usage Information
Related Commands
Hello PDUs are "padded" only when both the global and interface padding options are ON. Turning either one OFF disables padding for the corresponding interface.
hello padding -- turns ON or OFF padding for LAN and point-to-point hello PDUs.
isis ipv6 metric
Assign metric to an interface for use with IPv6 information.
Syntax
isis ipv6 metric default-metric [level-1 | level-2]
To return to the default values, use the no ipv6 isis metric [default-metric] [level-1 | level-2] command.
Parameters
default-metric level-1 level-2
Metric assigned to the link and used to calculate the cost from each other router via the links in the network to other destinations. You can configure this metric for Level 1 or Level 2 routing. The range is from 0 to 16777215. The default is 10.
(OPTIONAL) Enter the keywords level-1 to configure the shortest path first (SPF) calculation for Level 1 (intra-area) routing. This value is the default.
(OPTIONAL) Enter the keywords level-2 to configure the SPF calculation for Level 2 (inter-area) routing.
Defaults
default-metric = 10; level-1 (if not otherwise specified)
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Intermediate System to Intermediate System (IS-IS) 829
Usage Information
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 7.5.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series.
Dell Networking recommends configuring metrics on all interfaces. Without configuring this command, the IS-IS metrics are similar to hop-count metrics.
isis metric
Assign a metric to an interface.
Syntax
isis metric default-metric [level-1 | level-2]
To return to the default values, use the no isis metric [default-metric] [level-1 | level-2] command.
Parameters
default-metric
Metric assigned to the link and used to calculate the cost from each other router via the links in the network to other destinations. You can configure this metric for Level 1 or Level 2 routing. The range is from 0 to 16777215 irrespective of the metric style. The default is 10.
If metric value is configured to more than 63, system throughs the following warning:Warning: for metrics greater than 63, 'metric-style wide' should be configured on level-1-2, or it will be capped at 63.
If the metric style is WIDE, the metric values that are greater than 63 are only effective.
level-1 level-2
(OPTIONAL) Enter the keywords level-1 to configure the shortest path first (SPF) calculation for Level 1 (intra-area) routing. This setting is the default.
(OPTIONAL) Enter the keywords level-2 to configure the SPF calculation for Level 2 (inter-area) routing.
Defaults
default-metric = 10; level-1 (if not otherwise specified)
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500.
830 Intermediate System to Intermediate System (IS-IS)
Usage Information
Version
9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1
Description
Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000.
Dell Networking recommends configuring metrics on all interfaces. Without configuring this command, the IS-IS metrics are similar to hop-count metrics.
isis network point-to-point
Enable the software to treat a broadcast interface as a point-to-point interface.
Syntax
isis network point-to-point To disable the feature, use the no isis network point-to-point command.
Defaults
Not enabled.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000.
isis password
Configure an authentication password for an interface.
Syntax
isis password [hmac-md5] password [level-1 | level-2]
To delete a password, use the no isis password [password] [level-1 | level-2] command.
Parameters
encryption-type hmac-md5 password level-1
(OPTIONAL) Enter 7 to encrypt the password using DES.
(OPTIONAL) Enter the keywords hmac-md5 to encrypt the password using MD5.
Assign the interface authentication password.
(OPTIONAL) Independently configures the authentication password for Level 1. The router acts as a station router for Level 1 routing. This setting is the default.
Intermediate System to Intermediate System (IS-IS) 831
level-2
(OPTIONAL) Independently configures the authentication password for Level 2. The router acts as an area router for Level 2 routing.
Defaults
No default password. level-1 (if not otherwise specified).
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000.
Usage Information
To protect your network from unauthorized access, use this command to prevent unauthorized routers from forming adjacencies.
You can assign different passwords for different routing levels by using the keywords level-1 and level-2.
The no form of this command disables the password for Level 1 or Level 2 routing, using the respective keywords level-1 or level-2.
This password provides limited security as it is processed as plain text.
isis priority
Set the priority of the designated router you select.
Syntax
isis priority value [level-1 | level-2]
To return to the default values, use the no isis priority [value] [level-1 | level-2] command.
Parameters
value
level-1 level-2
This value sets the router priority. The higher the value, the higher the priority. The range is from 0 to 127. The default is 64.
(OPTIONAL) Specify the priority for Level 1. This setting is the default.
(OPTIONAL) Specify the priority for Level 2.
Defaults
value = 64; level-1 (if not otherwise specified).
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OSCommand Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
832 Intermediate System to Intermediate System (IS-IS)
Usage Information
Version
9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1
Description
Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000.
You can configure priorities independently for Level 1 and Level 2. Priorities determine which router on a LAN is the designated router. Priorities are advertised within hellos. The router with the highest priority becomes the designated intermediate system (DIS).
NOTE: Routers with a priority of 0 cannot be a designated router.
Setting the priority to 0 lowers the chance of this system becoming the DIS, but does not prevent it. If all the routers have priority 0, one with highest MAC address becomes DIS even though its priority is 0.
is-type
Configure IS-IS operating level for a router.
Syntax
is-type {level-1 | level-1-2 | level-2-only} To return to the default values, use the no is-type command.
Parameters
level-1 level-1-2
level-2-only
Allows a router to act as a Level 1 router.
Allows a router to act as both a Level 1 and Level 2 router. This setting is the default.
Allows a router to act as a Level 2 router.
Defaults
level-1-2
Command Modes ROUTER ISIS
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000.
Usage Information
The IS-IS protocol automatically determines area boundaries and are able to keep Level 1 and Level 2 routing separate. Poorly planned use of this feature may cause configuration errors, such as accidental area partitioning.
Intermediate System to Intermediate System (IS-IS) 833
If you are configuring only one area in your network, you do not need to run both Level 1 and Level 2 routing algorithms. You can configure the IS type as Level 1.
log-adjacency-changes
Generate a log messages for adjacency state changes.
Syntax
log-adjacency-changes To disable this function, use the no log-adjacency-changes command.
Defaults
Adjacency changes are not logged.
Command Modes ROUTER ISIS
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000.
Usage Information
This command allows you to monitor adjacency state changes, which are useful when you monitor large networks. Messages are logged in the system's error message facility.
lsp-gen-interval
Set the minimum interval between successive generations of link-state packets (LSPs).
Syntax
lsp-gen-interval [level-l | level-2] interval seconds [initial_wait_interval seconds [second_wait_interval seconds]]
To restore default values, use the no lsp-gen-interval [level-l | level-2] interval seconds [initial_wait_interval seconds [second_wait_interval seconds]] command.
Parameters
level-l
(OPTIONAL) Enter the keywords level-1 to apply the configuration to generation of Level-1 LSPs.
level-2
(OPTIONAL) Enter the keywords level-2 to apply the configuration to generation of Level-2 LSPs.
interval seconds Enter the maximum number of seconds between LSP generations. The range is from 0 to 120 seconds. The default is 5 seconds.
initial_wait_inter (OPTIONAL) Enter the initial wait time, in seconds, before running the first LSP
val seconds
generation. The range is from 0 to 120 seconds. The default is 1 second.
second_wait_inte (OPTIONAL) Enter the wait interval, in seconds, between the first and second LSP
rval seconds
generation. The range is from 0 to 120 seconds. The default is 5 seconds.
834 Intermediate System to Intermediate System (IS-IS)
Defaults
Refer to Parameters.
Command Modes ROUTER ISIS
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Added support for LSP Throttling Enhancement.
Usage Information
LSP throttling slows down the frequency at which LSPs are generated during network instability. Even though throttling LSP generations slows down network convergence, no throttling can result in a network not functioning as expected. If network topology is unstable, throttling slows down the scheduling of LSP generations until the topology regains its stability.
The first generation is controlled by the initial wait interval and the second generation is controlled by the second wait interval. Each subsequent wait interval is twice as long as the previous one until the wait interval reaches the maximum wait time specified (interval seconds). After the network calms down and there are no triggers for two times the maximum interval, fast behavior is restored (the initial wait time).
lsp-mtu
Set the maximum transmission unit (MTU) of IS-IS link-state packets (LSPs). This command only limits the size of LSPs this router generates.
Syntax
lsp-mtu size To return to the default values, use the no lsp-mtu command.
Parameters
size
The maximum LSP size, in bytes. The range is from 512 to 16000 for Non-Jumbo mode and from 128 to 9195 for Jumbo mode. The default is 1497.
NOTE: The appropriate interface circuit is brought down and removed.
Defaults
1497 bytes.
Command Modes ROUTER ISIS
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON.
Intermediate System to Intermediate System (IS-IS) 835
Usage Information
Version
9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 7.5.1.0
Description
Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Added support for LSP Throttling Enhancement.
The link MTU and the LSP MTU size must be the same.
Because each device can generate a maximum of 255 LSPs, consider carefully whether you use the lspmtu command.
lsp-refresh-interval
Set the link state PDU (LSP) refresh interval. LSPs must be refreshed before they expire. When the LSPs are not refreshed after a refresh interval, they are kept in a database until their max-lsp-lifetime reaches zero and then LSPs is purged.
Syntax
lsp-refresh-interval seconds To restore the default refresh interval, use the no lsp-refresh-interval command.
Parameters
seconds
The LSP refresh interval, in seconds. This value must be 300 seconds less than the value specified in the max-lsp-lifetime command. The range is from 1 to 65535 seconds. The default is 900.
Defaults
900 seconds
Command Modes ROUTER ISIS
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Added support for LSP Throttling Enhancement.
Usage Information
The refresh interval determines the rate at which route topology information is transmitted preventing the information from becoming obsolete.
The refresh interval must be less than the LSP lifetime specified with the max-lsp-lifetime command. A low value reduces the amount of time that undetected link state database corruption can persist at the cost of increased link utilization. A higher value reduces the link utilization the flooding of refreshed packets causes.
836 Intermediate System to Intermediate System (IS-IS)
Related Commands
max-lsp-lifetime -- sets the maximum interval that LSPs persist without being refreshed.
max-area-addresses
Configure manual area addresses.
Syntax
max-area-addresses number To return to the default values, use the no max-area-addresses command.
Parameters
number
Set the maximum number of manual area addresses. The range is from 3 to 6. The default is 3.
Defaults
3 addresses
Command Modes ROUTER ISIS
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Added support for LSP Throttling Enhancement.
Usage Information
To configure the number of area addresses on router, use this command. This value must be consistent with routers in the same area, otherwise the router forms only Level 2 adjacencies. The value must be same among all the routers to form Level 1 adjacencies.
max-lsp-lifetime
Set the maximum time that link-state packets (LSPs) exist without being refreshed.
Syntax
max-lsp-lifetime seconds To restore the default time, use the no max-lsp-lifetime command.
Parameters
seconds
The maximum lifetime of LSP in seconds. This value must be greater than the lsprefresh-interval command. The higher the value the longer the LSPs are kept. The range is from 1 to 65535. The default is 1200.
Defaults
1200 seconds
Command Modes ROUTER ISIS
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Intermediate System to Intermediate System (IS-IS) 837
Usage Information
Related Commands
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000.
Change the maximum LSP lifetime with this command. The maximum LSP lifetime must always be greater than the LSP refresh interval.
The seconds parameter enables the router to keep LSPs for the specified length of time. If the value is higher, the overhead is reduced on slower-speed links.
lsp-refresh-interval -- sets the link-state packet (LSP) refresh interval.
maximum-paths
Allows you to configure the maximum number of equal cost paths allowed in a routing table. NOTE: Enables you to configure a single system wide value that is common for both IPv4 and IPv6 addresses.
Syntax Parameters
maximum-paths number To return to the default values, use the no maximum-paths command.
number
Enter a number as the maximum number of parallel paths an IP routing installs in a routing table. The range is from 1 to 64. The default is 4.
Defaults
4
Command Modes ROUTER ISIS (for IPv4) CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Added support for multi-topology ISIS.
838 Intermediate System to Intermediate System (IS-IS)
Version
6.3.1.0
Description
Introduced.
metric-style
To generate and accept old-style, new-style, or both styles of type, length, and values (TLV), configure a router.
Syntax
metric-style {narrow [transition] | transition | wide [transition]} [level-1 | level-2]
To return to the default values, use the no metric-style {narrow [transition] | transition | wide [transition]} [level-1 | level-2] command.
Parameters
narrow transition wide level-1 level-2
Allows you to generate and accept old-style TLVs. The metric range is from 0 to 63.
Allows you to generate both old-style and new-style TLVs. The metric range is from 0 to 63.
Allows you to generate and accept only new-style TLVs. The metric range is from 0 to 16777215.
Enables the metric style on Level 1.
Enables the metric style on Level 2.
Defaults
narrow; if no Level is specified, Level-1 and Level-2 are configured.
Command Modes ROUTER ISIS
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.12.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Usage Information
Related Commands
If you enter the metric-style wide command, the Dell Networking OS generates and accepts only new-style TLVs. The router uses less memory and other resources rather than generating both old-style and new-style TLVs.
The new-style TLVs have wider metric fields than old-style TLVs.
When wide transition is configured, narrow metric is sent for the narrow metric TLV and the actual wide metric is sent in wide metric TLV. The receiver can choose to use the metric that is requires.
isis metric -- configures a metric for an interface.
Intermediate System to Intermediate System (IS-IS) 839
multi-topology
Enables multi-topology IS-IS. It also allows enabling/disabling of old and new style TLVs for IP prefix information in the LSPs.
Syntax
multi-topology [transition] To return to a single topology configuration, use the no multi-topology [transition] command.
Parameters
transition
Defaults
Disabled
Command Modes CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.12.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced.
net
To configure an IS-IS network entity title (NET) for a routing process, use this mandatory command. If you did not configure a NET, the IS-IS process does not start.
Syntax
net network-entity-title To remove a net, use the no net network-entity-title command.
Parameters
network-entitytitle
Specify the area address and system ID for an IS-IS routing process. The first 1 to 13 bytes identify the area address. The next 6 bytes identify the system ID. The last 1 byte is the selector byte, always identified as zero zero (00). This argument can be applied to an address or a name.
Defaults
Not configured.
Command Modes ROUTER ISIS
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON.
840 Intermediate System to Intermediate System (IS-IS)
Version
9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1
Description
Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000.
passive-interface
Suppress routing updates on an interface. This command stops the router from sending updates on that interface.
Syntax
passive-interface interface To delete a passive interface configuration, use the no passive-interface interface command.
Parameters
interface
Enter the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For a port channel interface, enter the keywords port-channel then a number.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Defaults
Not configured.
Command Modes ROUTER ISIS
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000.
Usage Information
Although the passive interface does not send nor receive routing updates, the network on that interface is still included in the IS-IS updates sent using other interfaces.
Intermediate System to Intermediate System (IS-IS) 841
redistribute
Redistribute routes from one routing domain to another routing domain.
Syntax
redistribute {static | connected | rip} [level-1 | level-1-2 | level-2] [metric metric-value] [metric-type {external | internal}] [route-map mapname]
To end redistribution or disable any of the specified keywords, use the no redistribute {static | connected | rip} [metric metric-value] [metric-type {external | internal}] [level-1 | level-1-2 | level-2] [route-map map-name] command.
Parameters
connected
rip
static metric metricvalue
metric-type {external | internal}
Enter the keyword connected to redistribute active routes into IS-IS.
Enter the keyword rip to redistribute RIP routes into IS-IS.
Enter the keyword static to redistribute user-configured routes into IS-IS.
(OPTIONAL) Assign a value to the redistributed route. The range is from 0 to 16777215. The default is 0. Use a value that is consistent with the destination protocol.
(OPTIONAL) The external link type associated with the default route advertised into a routing domain. Specify one of the following:
external internal
level-1 level-1-2 level-2
route-map mapname
(OPTIONAL) Routes are independently redistributed into IS-IS as Level 1 routes.
(OPTIONAL) Routes are independently redistributed into IS-IS as Level-1-2 routes.
(OPTIONAL) Routes are independently redistributed into IS-IS as Level 2 routes. This setting is the default.
(OPTIONAL) If you do not enter the route-map argument, all routes are redistributed. If a map-name value is not specified, no routes are imported.
Defaults
metric metric-value = 0 metric-type= internal; level-2
Command Modes ROUTER ISIS (for IPv4) CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.12.0 7.5.1.0 6.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for IPv6 ISIS. Introduced.
842 Intermediate System to Intermediate System (IS-IS)
Usage Information
Related Commands
To redistribute a default route (0.0.0.0/0), configure the default-information originate command.
Changing or disabling a keyword in this command does not affect the state of the other command keywords.
When an LSP with an internal metric is received, the Dell Networking OS considers the route cost while considering the advertised cost to reach the destination.
Redistributed routing information is filtered with the distribute-list out command to ensure that the routes are properly passed to the receiving routing protocol.
How a metric value assigned to a redistributed route is advertised depends on how on the configuration of the metric-style command. If the metric-style command is set for Narrow or Transition mode and the metric value in the redistribute command is set to a number higher than 63, the metric value advertised in LSPs is 63. If the metric-style command is set for Wide mode, the metric value in the redistribute command is advertised.
default-information originate -- generates a default route for the IS-IS domain. distribute-list out -- suppresses networks from being advertised in updates. This command filters
redistributed routing information.
redistribute bgp
Redistribute routing information from a BGP process.
Syntax
redistribute bgp AS number [level-1| level-1-2 | level-2] [metric metricvalue] [metric-type {external| internal}] [route-map map-name]
To return to the default values, use the no redistribute bgp command with the appropriate parameters.
Parameters
AS number
level-1 level-1-2
level-2
metric metricvalue
metric-type {external| internal}
Enter a number that corresponds to the autonomous system number. The range is from 1 to 65355.
(OPTIONAL) Routes are independently redistributed into IS-IS Level 1 routes only.
(OPTIONAL) Routes are independently redistributed into IS-IS Level 1 and Level 2 routes.
(OPTIONAL) Routes are independently redistributed into IS-IS as Level 2 routes only. This setting is the default.
(OPTIONAL) The value used for the redistributed route. Use a metric value that is consistent with the destination protocol. The range is from 0 to 16777215. The default is 0.
(OPTIONAL) The external link type associated with the default route advertised into a routing domain. The two options are:
external internal
route-map mapname
map-name is an identifier for a configured route map. The route map filters imported routes from the source routing protocol to the current routing protocol.
If you do not specify a map-name, all routes are redistributed. If you specify a keyword, but fail to list route map tags, no routes are imported.
Defaults
IS-IS Level 2 routes only
Command Modes ROUTER ISIS (for IPv4) CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Intermediate System to Intermediate System (IS-IS) 843
Usage Information
Example
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.12.0 7.5.1.0 6.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for IPv6 ISIS. Introduced.
BGP to IS-IS redistribution supports "match" options using route maps. You can set the metric value, level, and metric-type of redistributed routes by the redistribution command. You can "set" more advanced options using route maps.
FTOS(conf)#router is FTOS(conf-router_isis)#redistribute bgp 1 level-1 metric 32 metric-type external route-map rmap-isis-to-bgp FTOS(conf-router_bgp)#show running-config isis ! router isis redistribute bgp 1 level-1 metric 32 metric-type external route-map rmap-isis-to-bgp
redistribute ospf
Redistribute routing information from an OSPF process.
Syntax
redistribute ospf process-id [level-1| level-1-2 | level-2] [match {internal | external}] [metric metric-value] [metric-type {external | internal}] [route-map map-name]
To return to the default values, use the no redistribute ospf process-id [level-1| level-1-2 | level-2] [match {internal | external}] [metric metric-value] [metric-type {external | internal}] [route-map map-name] command.
Parameters
process-id
metric metricvalue
metric-type {external | internal}
Enter a number that corresponds to the OSPF process ID to be redistributed. The range is from 1 to 65355.
(OPTIONAL) The value used for the redistributed route. Use a metric value that is consistent with the destination protocol. The range is from 0 to 16777215. The default is 0.
(OPTIONAL) The external link type associated with the default route advertised into a routing domain. The two options are:
external internal
level-1 level-1-2 level-2
(OPTIONAL) Routes are independently redistributed into IS-IS as Level 1 routes.
(OPTIONAL) Routes are independently redistributed into IS-IS as Level-1-2 routes.
(OPTIONAL) Routes are independently redistributed into IS-IS as Level 2 routes. This setting is the default.
844 Intermediate System to Intermediate System (IS-IS)
match {external | (OPTIONAL) The command used for OSPF to route and redistribute into other
internal}
routing domains. The values are
internal external
route-map mapname
map-name is an identifier for a configured route map. The route map should filter imported routes from the source routing protocol to the current routing protocol.
If you do not specify a map-name, all routes are redistributed. If you specify a keyword, but fail to list route map tags, no routes are imported.
Defaults
Refer to Parameters.
Command Modes ROUTER ISIS (for IPv4) CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.12.0 7.5.1.0 6.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for IPv6 ISIS. Introduced.
Usage Information
How a metric value assigned to a redistributed route is advertised depends on how on the configuration of the metric-style command. If the metric-style command is set for Narrow mode and the metric value in the redistribute ospf command is set to a number higher than 63, the metric value advertised in LSPs is 63. If the metric-style command is set for wide mode, the metric value in the redistribute ospf command is advertised.
router isis
Allows you to enable the IS-IS routing protocol and to specify an IP IS-IS process.
Syntax Parameters
Defaults
router isis [vrf vrf-name] [tag] To disable IS-IS routing, use the no router isis [tag] command.
vrf vrf-name tag
Enter the keyword vrf followed by the name of the VRF to enable the IS-IS routing protocol and to specify an IP IS-IS process on that VRF.
(OPTIONAL) This is a unique name for a routing process. A null tag is assumed if the tag option is not specified. The tag name must be unique for all IP router processes for a given router.
Not configured.
Intermediate System to Intermediate System (IS-IS) 845
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000.
Usage Information
Related Commands
Configure a network entity title (the net command) to specify the area address and the router system ID.
Enable routing on one or more interfaces to establish adjacencies and establish dynamic routing.
You can configure only one IS-IS routing process to perform Level 2 routing. A level-1-2 designation performs Level 1 and Level 2 routing at the same time.
ip router isis -- configures IS-IS routing processes for IP on interfaces and attaches an area designator to the routing process.
net -- configures an IS-IS network entity title (NET) for a routing process. is-type -- assigns a type for a given area.
set-overload-bit
To set the overload bit in zeroth fragment of non-pseudonode LSPs on the router, configure the router. This setting prevents other routers from using it as an intermediate hop in their shortest path first (SPF) calculations.
Syntax
set-overload-bit To return to the default values, use the no set-overload-bit command.
Defaults
Not set.
Command Modes ROUTER ISIS (for IPv4) CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000.
846 Intermediate System to Intermediate System (IS-IS)
Usage Information
Version
7.8.1.0 6.3.1.0
Description
Added support for multi-topology ISIS. Introduced.
Set the overload bit when a router experiences problems, such as a memory shortage due to an incomplete link state database which can result in an incomplete or inaccurate routing table. If you set the overload bit in its LSPs, other routers ignore the unreliable router in their SPF calculations until the router has recovered.
NOTE: Enables you to configure a single system wide value that is common for both IPv4 and IPv6
address.
show config
Display the changes you made to the IS-IS configuration. Default values are not shown.
Syntax
show config
Command Modes ROUTER ISIS (for IPv4) CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Example (Router- The bold section identifies that Multi-Topology IS-IS is enabled in Transition mode. Isis)
Dell(conf-router_isis)#show config ! router isis clns host ISIS 49.0000.0001.F100.E120.0013.00 log-adjacency-changes net 49.0000.0001.F100.E120.0013.00 ! address-family ipv6 unicast maximum-paths 16 multi-topology transition set-overload-bit spf-interval level-1 100 15 20 spf-interval level-2 120 20 25 exit-address-family
Example (AddressFamily_IPv6)
The bold section identifies that Multi-Topology IS-IS is enabled in Transition mode. Dell(conf-router_isis-af_ipv6)#show conf !
Intermediate System to Intermediate System (IS-IS) 847
address-family ipv6 unicast maximum-paths 16 multi-topology transition set-overload-bit spf-interval level-1 100 15 20 spf-interval level-2 120 20 25 exit-address-family
show isis database
Display the IS-IS link state database.
Syntax Parameters
show isis [vrf vrf-name] database [level-1 | level-2] [local] [detail | summary] [system-id] [lspid]
vrf vrf-name
(Optional) Enter the keyword vrf followed by the name of the VRF to display IS-IS link state database corresponding to that VRF.
NOTE: If you do not specify this option, the IS-IS link state database
corresponding to the default VRF are displayed.
level-1 level-2 local detail
summary
lspid system-id
(OPTIONAL) Displays the Level 1 IS-IS link-state database.
(OPTIONAL) Displays the Level 2 IS-IS link-state database.
(OPTIONAL) Displays local link-state database information.
(OPTIONAL) Displays the detailed link-state database information of each LSP when specified. If not specified, a summary displays.
(OPTIONAL) Displays the summary of link-state database information when specified.
(OPTIONAL) Display only the specified LSP.
(OPTIONAL) Displays the link-state database for system-id.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 9.2(0.2) 9.0.2.0 8.3.19.0 8.3.7.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the Z9000. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810.
Usage Information
The following describes the show isis database command shown in the following example.
848 Intermediate System to Intermediate System (IS-IS)
Example
Field
IS-IS Level-1/ Level-2 Link State Database LSPID
LSP Seq Num LSP Checksum LSP Holdtime
ATT
P OL
Description
Displays the IS-IS link state database for Level 1 or Level 2.
Displays the LSP identifier.
The first six octets are the System ID of the originating router.
The first six octets are the System ID of the originating router. The next octet is the pseudonode ID. If this byte is not zero, the LSP describes system links. If this byte is zero (0), the LSP describes the state of the originating router.
The designated router for a LAN creates and floods a pseudonode LSP and describes the attached systems.
The last octet is the LSP number. An LSP is divided into multiple LSP fragments if there is more data than cannot fit in a single LSP. Each fragment has a unique LSP number.
An * after the LSPID indicates that the system originates an LSP where this command was issued.
This value is the sequence number for the LSP that allows other systems to determine if they have received the latest information from the source.
This is the checksum of the entire LSP packet.
This value is the amount of time, in seconds, that the LSP remains valid. A zero holdtime indicates that this is a purged LSP and is being removed from the link state database. A value between brackets indicates the duration that the purged LSP stays in the database before being removed.
This value represents the Attach bit. This value indicates that the router is a Level 1-2 router and can reach other areas. Level 1-only routers and Level 1-2 routers that have lost connection to other Level 1-2 routers use the Attach bit to find the closest Level 1-2 router. They install a default route to the closest Level 1-2 router.
This value represents the P bit. This bit is always set to zero as Dell Networking does not support area partition repair.
This value represents the overload bit, determining congestion. If the overload bit is set, other routers do not use this system as a transit router when calculating routes.
The bold sections identify that MultiTopology IS-IS is enabled.
Dell#show isis database
IS-IS Level-1 Link State Database
LSPID
LSP Seq Num LSP Checksum LSP Holdtime ATT/P/OL
ISIS.00-00 * 0x00000006 0xCF43
580
0/0/0
IS-IS Level-2 Link State Database
LSPID
LSP Seq Num LSP Checksum LSP Holdtime ATT/P/OL
ISIS.00-00 * 0x00000006 0xCF43
580
0/0/0
!
Dell#show isis database detail ISIS.00-00
IS-IS Level-1 Link State Database
LSPID
LSP Seq Num LSP Checksum LSP Holdtime ATT/P/OL
ISIS.00-00 * 0x0000002B 0x853B
1075
0/0/0
Area Address: 49.0000.0001
NLPID: 0xCC 0x8E
IP Address: 10.1.1.1
IPv6 Address: 1011::1
Topology: IPv4 (0x00) IPv6 (0x8002)
Metric: 10 IS OSPF.00
Metric: 10 IS (MT-IPv6) OSPF.00
Metric: 10 IP 15.1.1.0 255.255.255.0
Intermediate System to Intermediate System (IS-IS) 849
Metric: 10 IPv6 (MT-IPv6) 1511::/64 Metric: 10 IPv6 (MT-IPv6) 2511::/64 Metric: 10 IPv6 (MT-IPv6) 1011::/64
Metric: 10 IPv6 1511::/64 Metric: 10 IP 10.1.1.0 255.255.255.0
Hostname: ISIS
IS-IS Level-2 Link State Database
LSPID
LSP Seq Num LSP Checksum LSP Holdtime ATT/P/OL
ISIS.00-00 * 0x0000002D 0xB2CD
1075
0/0/0
Area Address: 49.0000.0001
NLPID: 0xCC 0x8E
IP Address: 10.1.1.1
IPv6 Address: 1011::1
Topology: IPv4 (0x00) IPv6 (0x8002)
Metric: 10 IS OSPF.00
Metric: 10 IS (MT-IPv6) OSPF.00
Metric: 10 IP 10.1.1.0 255.255.255.0
Metric: 10 IP 15.1.1.0 255.255.255.0
Metric: 20 IP 10.3.3.0 255.255.255.0
Metric: 10 IPv6 (MT-IPv6) 1011::/64
Metric: 10 IPv6 (MT-IPv6) 1511::/64
Metric: 10 IPv6 (MT-IPv6) 2511::/64
Metric: 20 IPv6 (MT-IPv6) 1033::/64
Metric: 10 IPv6 2511::/64
Metric: 20 IPv6 1033::/64
Hostname: ISIS
Dell#show isis database detail
IS-IS Level-1 Link State Database
LSPID
LSP Seq Num
ATT/P/OL
FTOS.00-00
* 0x00000009
NLPID:
0xCC
Area Address: 49.0000.0001
LSP Checksum 0x79D8
LSP Holdtime 941
show isis graceful-restart detail
Display detailed IS-IS graceful restart related settings.
1/0/0
Syntax
show isis [vrf vrf-name] graceful-restart detail
Command Modes EXEC EXEC Privilege
Parameters
vrf vrf-name
(Optional) Enter the keyword vrf followed by the name if the VRf to display IS-IS graceful restart details corresponding to that VRF.
NOTE: If you do not specify this option, the IS-IS graceful restart details
corresponding to the default VRF are displayed.
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 9.0.2.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000.
850 Intermediate System to Intermediate System (IS-IS)
Example
Version
8.3.19.0 8.3.12.0 8.3.11.1 8.3.1.0
Description
Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series.
Dell#show isis graceful-restart detail
Configured Timer Value
======================
Graceful Restart
: Enabled
T3 Timer
: Manual
T3 Timeout Value
: 30
T2 Timeout Value
: 30 (level-1), 30 (level-2)
T1 Timeout Value
: 5, retry count: 1
Adjacency wait time : 30
Operational Timer Value
======================
Current Mode/State
: Normal/RUNNING
T3 Time left
: 0
T2 Time left
: 0 (level-1), 0 (level-2)
Restart ACK rcv count : 0 (level-1), 0 (level-2)
Restart Req rcv count : 0 (level-1), 0 (level-2)
Suppress Adj rcv count : 0 (level-1), 0 (level-2)
Restart CSNP rcv count : 0 (level-1), 0 (level-2)
Database Sync count
: 0 (level-1), 0 (level-2)
show isis hostname
Display IS-IS host names configured or learned on the switch.
Syntax Parameters
show isis [vrf vrf-name] hostname
vrf vrf-name
Enter the keyword vrf followed by the name of the VRF to display IS-IS host names corresponding to that VRF.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Added support for VRF. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000.
Intermediate System to Intermediate System (IS-IS) 851
Example
Dell#show isis hostname
System Id
Dynamic Name Static Name
*F100.E120.0013 Force10
ISIS
Dell#
show isis interface
Display detailed IS-IS interface status and configuration information.
Syntax Parameters
show isis [vrf vrf-name] interface [interface]
vrf vrf-name interface
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to display ISIS interface status information corresponding to that VRF.
(OPTIONAL) Enter the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For a port channel interface, enter the keywords port-channel then a number.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 9.2(0.2) 9.0.2.0 8.3.19.0 8.3.12.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the Z9000. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810.
Example
Dell>show isis int TenGigabitEthernet 1/7 is up, line protocol is up
MTU 1497, Encapsulation SAP Routing Protocol: IS-IS
Circuit Type: Level-1-2 Interface Index 37847070, Local circuit ID 1 Level-1 Metric: 10, Priority: 64, Circuit ID: systest-3.01
Hello Interval: 10, Hello Multiplier: 3, CSNP Interval: 10 Number of active level-1 adjacencies: 1 Level-2 Metric: 10, Priority: 64, Circuit ID: systest-3.01
Hello Interval: 10, Hello Multiplier: 3, CSNP Interval: 10
852 Intermediate System to Intermediate System (IS-IS)
Number of active level-2 adjacencies: 1 Next IS-IS LAN Level-1 Hello in 2 seconds Next IS-IS LAN Level-2 Hello in 1 seconds LSP Interval: 33 TenGigabitEthernet 1/8 is up, line protocol is up MTU 1497, Encapsulation SAP Routing Protocol: IS-IS Circuit Type: Level-1-2 Interface Index 38371358, Local circuit ID 2 Level-1 Metric: 10, Priority: 64, Circuit ID: systest-3.02
Hello Interval: 10, Hello Multiplier: 3, CSNP Interval: 10 Number of active level-1 adjacencies: 1 Level-2 Metric: 10, Priority: 64, Circuit ID: systest-3.02
Hello Interval: 10, Hello Multiplier: 3, CSNP Interval: 10 --More--
show isis neighbors
Display information about neighboring (adjacent) routers.
Syntax Parameters
show isis [vrf vrf-name] neighbors [level-1 | level-2] [detail] [interface]
vrf vrf-name
level-1 level-2 detail interface
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to display adjacent router information corresponding to that VRF.
(OPTIONAL) Displays information about Level 1 IS-IS neighbors.
(OPTIONAL) Displays information about Level 2 IS-IS neighbors.
(OPTIONAL) Displays detailed information about neighbors.
(OPTIONAL) Enter the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000.
Intermediate System to Intermediate System (IS-IS) 853
Usage Information
Example
Use this command to confirm that the neighbor adjacencies are operating correctly. If you suspect that they are not, you can verify the specified area addresses of the routers by using the show isis neighbors command.
The following describes the show isis neighbors command shown in the following example.
Field
Description
System Id
The value that identifies a system in an area.
Interface
The interface, slot, and port in which the router was discovered.
State Type
The value providing status about the adjacency state. The range is Up and Init. This value displays the adjacency type (Layer 2, Layer 2 or both).
Priority
IS-IS priority the neighbor advertises. The neighbor with highest priority becomes the designated router for the interface.
Uptime Circuit Id
Displays the interfaces uptime. The neighbor's interpretation of the designated router for the interface.
The bold sections below identify that Multi-Topology IS-IS is enabled. This command displays only one IP address per line.
Dell#show isis neighbors System Id Interface State Type Priority Uptime Circuit Id TEST Te 7/1 Up L1L2(M) 127 09:28:01 TEST.02 ! Dell#show isis neighbors detail System Id Interface State Type Priority Uptime Circuit Id TEST Te 7/1 Up L1L2(M) 127 09:28:04 TEST.02 Area Address(es): 49.0000.0001
IP Address(es): 25.1.1.3* MAC Address: 0000.0000.0000 Hold Time: 28 Link Local Address: fe80::201:e8ff:fe00:492c Topology: IPv4 IPv6 , Common (IPv4 IPv6 ) Adjacency being used for MTs: IPv4 IPv6 Dell#
show isis protocol
Display IS-IS routing information.
Syntax Parameters
show isis [vrf vrf-name] protocol
vrf vrf-name
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to display ISIS routing information corresponding to that VRF.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2)
Introduced on the S4048-ON. Introduced on the S3048-ON.
854 Intermediate System to Intermediate System (IS-IS)
Example
Version
9.5(0.1) 9.2(0.2) 9.0.2.0 8.3.19.0 8.3.12.0
Description
Introduced on the Z9500. Introduced on the Z9000. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810.
The bold section identifies that Multi-Topology IS-IS is enabled.
Dell#show isis protocol
IS-IS Router: <Null Tag>
System Id: F100.E120.0013 IS-Type: level-1-2
Manual area address(es):
49.0000.0001
Routing for area address(es):
49.0000.0001
Interfaces supported by IS-IS:
TenGigabitEthernet 1/1 - IP - IPv6
TenGigabitEthernet 1/2 - IP - IPv6
TenGigabitEthernet 1/10 - IP - IPv6
Loopback 0 - IP - IPv6
Redistributing:
Distance: 115
Generate narrow metrics: level-1-2
Accept narrow metrics: level-1-2
Generate wide metrics: none
Accept wide metrics:
none
Multi Topology Routing is enabled in transition mode.
Dell#
show isis traffic
This command allows you to display IS-IS traffic interface information.
Syntax Parameters
show isis [vrf vrf-name] traffic [interface]
vrf vrf-name interface
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to display ISIS traffic interface information corresponding to that VRF.
(OPTIONAL) Identifies the interface type slot/port[/subport] as one of the following:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Intermediate System to Intermediate System (IS-IS) 855
Usage Information
Example
Version
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 9.2(0.2) 9.0.2.0 8.3.19.0 8.3.12.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the Z9000. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810.
The following describes the show isis traffic command shown in the following example.
Item
Description
Level-1/Level-2 Hellos (sent/ rcvd)
Displays the number of Hello packets sent and received.
PTP Hellos (sent/rcvd)
Level-1/Level-2 LSPs sourced (new/refresh)
Displays the number of point-to-point Hellos sent and received. Displays the number of new and refreshed LSPs.
Level-1/Level-2 LSPs flooded (sent/rcvd)
Displays the number of flooded LSPs sent and received.
Level-1/Level-2 LSPs CSNPs (sent/ rcvd)
Level-1/Level-2 LSPs PSNPs (sent/ rcvd)
Displays the number of CSNP LSPs sent and received. Displays the number of PSNP LPSs sent and received.
Level-1/Level-2 Displays the number of times designated router elections ran. DR Elections
Level-1/Level-2 Displays the number of shortest path first calculations. SPF Calculations
LSP checksum errors received
Displays the number of checksum errors LSPs received.
LSP authentication failures
Displays the number of LSP authentication failures.
Dell#show is traffic IS-IS: Level-1 Hellos (sent/rcvd) : 0/721 IS-IS: Level-2 Hellos (sent/rcvd) : 900/943 IS-IS: PTP Hellos (sent/rcvd) : 0/0 IS-IS: Level-1 LSPs sourced (new/refresh) : 0/0 IS-IS: Level-2 LSPs sourced (new/refresh) : 1/3 IS-IS: Level-1 LSPs flooded (sent/rcvd) : 0/0 IS-IS: Level-2 LSPs flooded (sent/rcvd) : 5934/5217 IS-IS: Level-1 LSPs CSNPs (sent/rcvd) : 0/0 IS-IS: Level-2 LSPs CSNPs (sent/rcvd) : 472/238 IS-IS: Level-1 LSPs PSNPs (sent/rcvd) : 0/0 IS-IS: Level-2 LSPs PSNPs (sent/rcvd) : 10/337 IS-IS: Level-1 DR Elections : 4 IS-IS: Level-2 DR Elections : 4 IS-IS: Level-1 SPF Calculations : 0
856 Intermediate System to Intermediate System (IS-IS)
IS-IS: Level-2 SPF Calculations : 389 IS-IS: LSP checksum errors received : 0 IS-IS: LSP authentication failures : 0 Dell#
spf-interval
Specify the minimum interval between shortest path first (SPF) calculations.
Syntax
spf-interval [level-l | level-2] interval seconds [initial_wait_interval seconds [second_wait_interval seconds]]
To restore default values, use the no spf-interval [level-l | level-2] interval seconds [initial_wait_interval seconds [second_wait_interval seconds]] command.
Parameters
level-l
(OPTIONAL) Enter the keyword level-1 to apply the configuration to Level-1 SPF calculations.
level-2
(OPTIONAL) Enter the keyword level-2 to apply the configuration to Level-2 SPF calculations.
interval seconds Enter the maximum number of seconds between SPF calculations. The range is from 0 to 120 seconds. The default is 10 seconds.
initial_wait_inter (OPTIONAL) Enter the initial wait time, in seconds, before running the first SPF
val seconds
calculations. The range is from 0 to 120 seconds. The default is 5 seconds.
second_wait_inte (OPTIONAL) Enter the wait interval, in seconds, between the first and second SPF
rval seconds
calculations. The range is from 0 to 120 seconds. The default is 5 seconds.
Defaults
Refer to Parameters.
Command Modes ROUTER ISIS (for IPv4) CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.12.0 7.8.1.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for multi-topology ISIS. Added support for SPF Throttling Enhancement.
Usage Information
This command spf-interval in CONFIG-ROUTER-ISIS-AF-IPV6 mode is used for IPv6 Multi-Topology route computation only. If using Single Topology mode, use the spf-interval command in CONFIGROUTER-ISIS mode for both IPv4 and IPv6 route computations.
Intermediate System to Intermediate System (IS-IS) 857
SPF throttling slows down the frequency at which route calculations are performed during network instability. Even though throttling route calculations slows down network convergence, not throttling can result in a network not functioning as expected. If network topology is unstable, throttling slows down the scheduling of route calculations until the topology regains its stability. The first route calculation is controlled by the initial wait interval and the second calculation is controlled by the second wait interval. Each subsequent wait interval is twice as long as the previous one until the wait interval reaches the maximum wait time specified (interval seconds). After the network calms down and there are no triggers for two times the maximum interval, fast behavior is restored (the initial wait time).
858 Intermediate System to Intermediate System (IS-IS)
31
Link Aggregation Control Protocol (LACP)
This chapter contains commands for Dell Networks's implementation of the link aggregation control protocol (LACP) for creating dynamic link aggregation groups (LAGs) -- known as "port-channels" in the Dell Networking operating software.
NOTE: For static LAG commands, refer to Port Channel Commands in the Interfaces chapter), based on the standards specified in the IEEE 802.3 Carrier sense multiple access with collision detection (CSMA/CD) access method and physical layer specifications.
Topics:
� clear lacp counters � debug lacp � lacp long-timeout � lacp port-priority � lacp system-priority � port-channel-protocol lacp � show lacp
clear lacp counters
Clear port channel counters.
Syntax Parameters
clear lacp port-channel-number counters
port-channelnumber
Enter a port-channel number. The range is from 1 to 128.
Defaults
Without a Port Channel specified, the command clears all Port Channel counters.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series.
Link Aggregation Control Protocol (LACP) 859
Related Commands
Version
7.5.1.0 6.2.1.1
Description
Introduced on the C-Series. Introduced on the E-Series.
show lacp -- displays the LACP configuration.
debug lacp
Debug LACP (configuration, events, and so on).
Syntax Parameters
debug lacp [config | events | pdu [interface-type [in | out]]]
To disable LACP debugging, use the no [config | events | pdu [interface-type [in | out]]] command.
config
(OPTIONAL) Enter the keyword config to debug the LACP configuration.
events
(OPTIONAL) Enter the keyword events to debug the LACP event information.
pdu
(OPTIONAL) Enter the keyword pdu to debug the LACP Protocol Data Unit
information.
interface-type in (OPTIONAL) Enter the following keywords and slot/port[/subport] or number
| out
information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
Optionally, enter an in or out parameter:
Receive enter in Transmit enter out
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale.
860 Link Aggregation Control Protocol (LACP)
Version
8.3.7.0 7.6.1.0 7.5.1.0 6.2.1.1
Description
Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
lacp long-timeout
Configure a long timeout period (30 seconds) for an LACP session.
Syntax
lacp long-timeout To reset the timeout period to a short timeout (1 second), use the no lacp long-timeout command.
Defaults
1 second
Command Modes INTERFACE (conf-if-po-number)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
This command applies to dynamic port-channel interfaces only. When applied on a static port-channel, this command has no effect.
show lacp -- displays the LACP configuration.
lacp port-priority
To influence which ports will be put in Standby mode when there is a hardware limitation that prevents all compatible ports from aggregating, configure the port priority.
Syntax
lacp port-priority priority-value To return to the default setting, use the no lacp port-priority priority-value command.
Link Aggregation Control Protocol (LACP) 861
Parameters
priority-value
Enter the port-priority value. The higher the value number, the lower the priority. The range is from 1 to 65535. The default is 32768.
Defaults
32768
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
lacp system-priority
Configure the LACP system priority.
Syntax Parameters
lacp system-priority priority-value
priority-value
Enter the port-priority value. The higher the value number, the lower the priority. The range is from 1 to 65535. The default is 32768.
Defaults
32768
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000.
862 Link Aggregation Control Protocol (LACP)
Version
8.3.7.0 7.6.1.0 7.5.1.0 6.2.1.1
Description
Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
port-channel-protocol lacp
Enable LACP on any LAN port.
Syntax
port-channel-protocol lacp To disable LACP on a LAN port, use the no port-channel-protocol lacp command.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series.
Related Commands
show lacp -- displays the LACP information. show interfaces port-channel -- displays information on configured Port Channel groups.
show lacp
Display the LACP matrix.
Syntax Parameters
Defaults
show lacp port-channel-number [sys-id | counters]
port-channelnumber
sys-id
counters
Enter a port-channel number. The range is from 1 to 128.
(OPTIONAL) Enter the keywords sys-id and the value that identifies a system. (OPTIONAL) Enter the keyword counters to display the LACP counters.
Without a Port Channel specified, the command clears all Port Channel counters.
Link Aggregation Control Protocol (LACP) 863
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Example (PortChannelNumber)
Dell#show lacp 1 Port-channel 1 admin up, oper up, mode lacp Actor System ID:Priority 32768, Address 0001.e800.a12b Partner System ID:Priority 32768, Address 0001.e801.45a5
Actor Admin Key 1, Oper Key 1, Partner Oper Key 1 LACP LAG 1 is an aggregatable link
A-Active LACP, B-Passive LACP, C-Short Timeout, D-Long Timeout E-Aggregatable Link, F-Individual Link, G-IN_SYNC, H-OUT_OF_SYNC I-Collection enabled, J-Collection disabled, K-Distribution enabled LDistribution disabled, M-Partner Defaulted, N-Partner Non-defaulted, O-Receiver is in expired state, P-Receiver is not in expired state
Port Te 1/6 is enabled, LACP is enabled and mode is lacp
Actor Admin: State ACEHJLMP Key 1
Priority 128
Oper: State ACEGIKNP Key 1
Priority 128
Partner Admin: State BDFHJLMP Key 0
Priority 0
Oper: State BCEGIKNP Key 1
Priority 128
Dell#
Example (Sys-id)
Dell#show lacp 1 sys-id
Actor
System ID: Priority 32768, Address 0001.e800.a12b
Partner System ID: Priority 32768, Address 0001.e801.45a5
Dell#
Example (Counter)
Dell#show lacp 1 counters
----------------------------------------------------
LACP PDU
Marker PDU Unknown Illegal
Port
Xmit Recv Xmit Recv
Pkts Rx Pkts Rx
-----------------------------------------------------
Te 1/6 200 200
0
0
0
0
Dell#
Related Commands
clear lacp counters -- clears the LACP counters.
864 Link Aggregation Control Protocol (LACP)
show interfaces port-channel -- displays information on configured Port Channel groups. Link Aggregation Control Protocol (LACP) 865
This chapter describes commands to configure Layer 2 features.
Topics:
� MAC Addressing Commands � Virtual LAN (VLAN) Commands � Far-End Failure Detection (FEFD)
MAC Addressing Commands
The following commands are related to configuring, managing, and viewing MAC addresses.
clear mac-address-table
Clear the MAC address table of all MAC address learned dynamically.
32
Layer 2
Syntax Parameters
clear mac-address-table {dynamic | sticky }{address mac-address | all | interface interface | vlan vlan-id}
dynamic sticky address macaddress all interface interface
vlan vlan-id
Enter the keyword dynamic to specify dynamically-learned MAC addresses. Enter the keyword sticky to specify sticky MAC addresses. Enter the keyword address then a MAC address in nn:nn:nn:nn:nn:nn format.
Enter the keyword all to delete all MAC address entries in the MAC address table. Enter the following keywords and slot/port or number information: For a Port Channel interface, enter the keywords port-channel then a
number. For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet then the slot/port[/subport] information. For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the
slot/port information.
Enter the keyword vlan then a VLAN ID number from 1 to 4094.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.0.2.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000.
866 Layer 2
Version
8.3.19.0 8.3.12.0 8.3.11.1 8.5.1.0 8.3.7.0 7.6.1.0 7.5.1.0 6.1.1.1
Description
Introduced on the S4820T. Added support for sticky MAC addresses. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
mac-address-table aging-time
Specify an aging time for MAC addresses to remove from the MAC address table.
Syntax Parameters
mac-address-table aging-time seconds
seconds
Enter either zero (0) or a number as the number of seconds before MAC addresses are relearned. To disable aging of the MAC address table, enter 0. The range is from 10 to 1000000. The default is 1800 seconds.
Defaults
1800 seconds
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0
7.6.1.0 7.5.1.0 pre-6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. On the E-Series, available in INTERFACE VLAN context, reduced the minimum aging time in the INTERFACE VLAN context from 10 seconds to 1 second. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Related Commands
mac learning-limit -- sets the MAC address learning limits for a selected interface. show mac-address-table aging-time -- displays the MAC aging time.
Layer 2 867
mac-address-table static
Associate specific MAC or hardware addresses to an interface and VLANs.
Syntax Parameters
mac-address-table static mac-address {multicast vlan vlan-id output--range interface}{output interface vlan vlan-id}
To remove a MAC address, use the no mac-address-table static mac-address output interface vlan vlan-id command.
mac-address multicast
Enter the 48-bit hexadecimal address in nn:nn:nn:nn:nn:nn format.
Enter a vlan port to where L2 multicast MAC traffic is forwarded. NOTE: Use this option if you want multicast functionality in an L2 VLAN without IGMP protocols.
output interface For a unicast MAC address, enter the keyword output then one of the following interfaces for which traffic is forwarded:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
output-range interface
For a multicast MAC address, enter the keyword output-range then one of the following interfaces to indicate a range of ports for which traffic is forwarded:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number.
vlan vlan-id
Enter the keyword vlan then a VLAN ID number from 1 to 4094.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.1(0.0) 8.3.19.0 8.3.11.1 8.5.1.0 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Added support for output range parameter for S4810 and Z9000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810.
868 Layer 2
Example (Unicast)
Example (Multicast)
Related Commands
Version
7.6.1.0 7.5.1.0 pre-6.2.1.1
Description
Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
mac-address-table static 00:01:00:00:00:01 {output Te 1/2 vlan 2}
mac-address-table static 01:00:5E:01:00:01 {multicast vlan 2 output--range Te 1/2,Te 1/3}
show mac-address-table -- displays the MAC address table.
mac-address-table station-move threshold
Change the frequency with which the MAC address station-move trap is sent after a MAC address changes in a VLAN. A trap is sent if a station move is detected above a threshold number of times in a given interval.
Syntax Parameters
[no] mac-address-table station-move threshold number interval count
threshold number Enter the keyword threshold then the number of times MAC addresses in VLANs can change before an SNMP trap is sent. The range is from 1 to 10.
interval seconds Enter the keyword interval then the number of seconds. The range is from 5 to 60.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 8.3.19.0 8.3.7.0 7.5.1.0 pre-6.2.1.1
Introduced on the S3048-ON and S4048-ON. Introduced on the S4820T. Introduced on the S4810. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
For information about the specific trap sent and the corresponding Syslog, refer to the SNMP Traps chapter.
mac-address-table station-move refresh-arp
Ensure that address resolution protocol (ARP) refreshes the egress interface when a station move occurs due to a topology change.
Syntax
mac-address-table station-move refresh-arp
To disable the ARP refresh feature, use the no mac-address-table station-move refresharp command.
Defaults
Enabled
Layer 2 869
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.9(0.0) 9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.6.1.0 7.4.1.0
Modified the default option from none to Enabled. Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
For details about using this command, refer to the "NIC Teaming" section of the Layer 2 chapter in the Dell Networking OS Configuration Guide.
mac learning-limit
Limit the maximum number of MAC addresses (static + dynamic) learned on a selected interface.
Syntax Parameters
mac learning-limit address_limit [vlan vlan-id] [station-move-violation [dynamic]] [dynamic [no-station-move| station-move]]
address_limit
vlan vlan-id dynamic
station-moveviolation
Enter the maximum number of MAC addresses that can be learned on the interface. The range is from 1 to 1000000.
Enter the keyword then the VLAN ID. The range is from 1 to 4094.
(OPTIONAL) Enter the keyword dynamic to allow aging of MACs even though a learning limit is configured.
(OPTIONAL) Enter the keywords station-move to allow a station move on learned MAC addresses.
Defaults
On S-Series, the default behavior is dynamic. NOTE: "Static" means manually entered addresses, which do not age.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
870 Layer 2
Usage Information
Related Commands
Version
9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.12.0
8.3.7.0 8.3.1.0 8.2.1.0 7.7.1.0 6.5.1.0
Description
Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Deprecated the no-station-move command (replaced by the mac-learninglimit mac-address-sticky command). Introduced on the S4810. Added the vlan option on the E-Series. Introduced on the S-Series. Introduced on the C-Series. Added the station-move option. Added support for MAC Learning-Limit on the LAG.
This command and its options are supported on physical interfaces, static LAGs, LACP LAGs, and VLANs.
If you do not specify the vlan option, the MAC address counters are not VLAN-based. That is, the sum of the addresses learned on all VLANs (not having any learning limit configuration) is counted against the MAC learning limit.
MAC Learning Limit violation logs and actions are not available on a per-VLAN basis.
With the keyword no-station-move option, MAC addresses learned through this feature on the selected interface persist on a per-VLAN basis, even if received on another interface. Enabling or disabling this option has no effect on already learned MAC addresses.
After the MAC address learning limit is reached, the MAC addresses do not age out unless you add the dynamic option. To clear statistics on MAC address learning, use the clear counters command with the learning-limit parameter.
NOTE: If you configure this command on an interface in a routed VLAN, and after the MAC addresses learned reaches the limit set in the mac learning-limit command, IP protocols are affected. For example, VRRP sets multiple VRRP Masters and OSPF may not come up.
When a channel member is added to a port-channel and there is not enough ACL CAM space, the MAC limit functionality on that port-channel is undefined. When this occurs, un-configure the existing configuration first and then reapply the limit with a lower value.
mac learning-limit mac-address-sticky -- Replaces deprecated no-station-move parameter.
show mac learning-limit -- displays MAC learning-limit configuration.
mac learning-limit learn-limit-violation
Configure an action for a MAC address learning-limit violation.
Syntax Parameters
mac learning-limit learn-limit-violation {log | shutdown}
To return to the default, use the no mac learning-limit learn-limit-violation {log | shutdown} command.
log shutdown
Enter the keyword log to generate a syslog message on a learning-limit violation. Enter the keyword shutdown to shut down the port on a learning-limit violation.
Layer 2 871
Defaults
none
Command Modes INTERFACE (conf-if-interface-slot/port)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 7.8.1.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
This command is supported on physical interfaces, static LAGs, and LACP LAGs. show mac learning-limit -- displays details of the mac learning-limit.
mac learning-limit mac-address-sticky
Maintain the dynamically learned mac addresses as sticky MAC addresses on the selected port.
Syntax Parameters
mac learning-limit mac-address-sticky
To convert the sticky MAC addresses to dynamic MAC addresses, use the no mac learning-limit command.
mac-addresssticky
Configures the dynamic MAC addresses as sticky on an interface.
Defaults
none
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500.
872 Layer 2
Usage Information
Related Commands
Version
9.0.2.0 8.3.19.0 8.3.11.1 8.3.12.0
Description
Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
If you configure mac-learn-limit and the sticky MAC feature is enabled, dynamically learned MAC addresses are converted to sticky for that port. Any new MAC address that is learned also becomes sticky for that port.
show mac learning-limit -- displays the details of the mac learning-limit.
mac learning-limit station-move-violation
Specify the actions for a station move violation.
Syntax Parameters
mac learning-limit station-move-violation {log | shutdown-both | shutdownoffending | shutdown-original}
To disable a configuration, use the no mac learning-limit station-move-violation command, then the configured keyword.
log shutdown-both
shutdownoffending shutdownoriginal
Enter the keyword log to generate a syslog message on a station move violation.
Enter the keyword shutdown to shut down both the original and offending interface and generate a syslog message.
Enter the keywords shutdown-offending to shut down the offending interface and generate a syslog message.
Enter the keywords shutdown-original to shut down the original interface and generate a syslog message.
Defaults
none
Command Modes INTERFACE (conf-if-interface-slot/port)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Layer 2 873
Usage Information
Related Commands
Version
7.5.1.0
Description
Introduced on the E-Series.
This command is supported on physical interfaces, static LAGs, and LACP LAGs.
show mac learning-limit -- displays details of the mac learning-limit.
mac learning-limit reset
Reset the MAC address learning-limit error-disabled state.
Syntax
mac learning-limit reset
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 7.7.1.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
show cam mac linecard (count)
Display the content addressable memory (CAM) size and the portions allocated for MAC addresses and for MAC ACLs.
Syntax Parameters
show cam mac linecard slot port-set port-pipe count [vlan vlan-id] [interface interface]
linecard slot
port-set portpipe
(REQUIRED) Enter the keyword linecard then a slot number to select the linecard for which to gather information.
(REQUIRED) Enter the keywords port-set then a Port-Pipe number to select the Port-Pipe for which to gather information.
874 Layer 2
count interface interface
vlan vlan-id
(REQUIRED) Enter the keyword count to display CAM usage by interface type.
(OPTIONAL) Enter the keyword interface then the interface type, slot and port information:
For a port channel interface, enter the keywords port-channel then a number.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
(OPTIONAL) Enter the keyword vlan then the VLAN ID to display the MAC address assigned to the VLAN. The range is from 1 to 4094.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.5.1.0 8.3.7.0 pre-6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Introduced on the E-Series.
show cam mac linecard (dynamic or static)
Display the CAM size and the portions allocated for MAC addresses and for MAC ACLs.
Syntax Parameters
show cam mac linecard slot port-set port-pipe [address mac_addr | dynamic | interface interface | static | vlan vlan-id]
linecard slot
port-set portpipe address macaddr dynamic
interface interface
(REQUIRED) Enter the keyword linecard then a slot number to select the linecard for which to gather information.
(REQUIRED) Enter the keywords port-set then a Port-Pipe number to select the Port-Pipe for which to gather information. The range is from 0 or 1.
(OPTIONAL) Enter the keyword address then a MAC address in the nn:nn:nn:nn:nn:nn format to display information on that MAC address.
(OPTIONAL) Enter the keyword dynamic to display only those MAC addresses the switch dynamically learns.
(OPTIONAL) Enter the keyword interface then the interface type, slot and port information:
For a port channel interface, enter the keywords port-channel then a number.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
Layer 2 875
static vlan vlan-id
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
(OPTIONAL) Enter the keyword static to display only those MAC addresses specifically configured on the switch.
(OPTIONAL) Enter the keyword vlan then the VLAN ID to display the MAC address assigned to the VLAN. The range is 1 to 4094.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 8.3.19.0 8.5.1.0 8.3.7.0 7.5.1.0 pre-6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Introduced on the C-Series. Introduced on the E-Series.
Example
Dell#show cam mac linecard 1 port-set 0
Port - (TableID) assignments:
00(01) 01(01) 02(01) 03(01) 04(01) 05(01) 06(01) 07(01) 08(01) 09(01)
10(01) 11(01)
12(01) 13(01) 14(01) 15(01) 16(01) 17(01) 18(01) 19(01) 20(01) 21(01)
22(01) 23(01)
Index Table ID VlanId Mac Address
Region
Interface
0
1
0
00:01:e8:0d:b7:3b LOCAL_DA
1e000
1
1
0
00:01:e8:0d:b7:3a LOCAL_DA
1e000
101
0
0
00:01:e8:00:04:00 SYSTEM_STATIC 01c05
102
0
0
01:80:00:00:00:00 SYSTEM_STATIC 01c05
103
0
0
01:00:0c:cc:cc:cc SYSTEM_STATIC 01c01
104
0
0
01:80:c2:00:00:02 SYSTEM_STATIC 01c02
105
0
0
01:80:c2:00:00:0e SYSTEM_STATIC 01c01
106
0
0
00:01:e8:0d:b7:68 SYSTEM_STATIC DROP
107
0
0
00:01:e8:0d:b7:67 SYSTEM_STATIC DROP
108
0
0
00:01:e8:0d:b7:66 SYSTEM_STATIC DROP
109
0
0
00:01:e8:0d:b7:65 SYSTEM_STATIC DROP
110
0
0
00:01:e8:0d:b7:64 SYSTEM_STATIC DROP
111
0
0
00:01:e8:0d:b7:63 SYSTEM_STATIC DROP
112
0
0
00:01:e8:0d:b7:62 SYSTEM_STATIC DROP
113
0
0
00:01:e8:0d:b7:61 SYSTEM_STATIC DROP
114
0
0
00:01:e8:0d:b7:60 SYSTEM_STATIC DROP
115
0
0
00:01:e8:0d:b7:5f SYSTEM_STATIC DROP
116
0
0
00:01:e8:0d:b7:5e SYSTEM_STATIC DROP
117
0
0
00:01:e8:0d:b7:5d SYSTEM_STATIC DROP
Dell#
876 Layer 2
show mac-address-table
Display the MAC address table.
Syntax Parameters
show mac-address-table [address mac-address | interface interface | vlan vlan-id] [aging-time] [dynamic | static] [count [vlan vlan-id] [interface interface-type [slot [/port[/subport]]]]]
address macaddress dynamic
static
aging-time interface interface
interface interface-type vlan vlan-id count
(OPTIONAL) Enter the keyword address then a MAC address in the nn:nn:nn:nn:nn:nn format to display information on that MAC address.
(OPTIONAL) Enter the keyword dynamic to display only those MAC addresses the switch dynamically learns. Optionally, you can also add one of these combinations: address/mac-address, interface/interface, or vlan vlan-id.
(OPTIONAL) Enter the keyword static to display only those MAC addresses specifically configured on the switch. Optionally, you can also add one of these combinations: address/mac-address, interface/interface, or vlan vlan-id.
Enter the keyword aging-time to display only aging-time information.
(OPTIONAL) Enter the keyword interface then the interface type, slot/port[/ subport] information:
For a port channel interface, enter the keywords port-channel then a number.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
(OPTIONAL) Instead of entering the keyword interface then the interface type, slot/port[/subport] information, as above, you can enter the interface type, then just a slot number.
(OPTIONAL) Enter the keyword vlan then the VLAN ID to display the MAC address assigned to the VLAN. The range is 1 to 4094.
(OPTIONAL) Enter the keyword count, then optionally, by an interface or VLAN ID, to display total or interface-specific static addresses, dynamic addresses, and MAC addresses in use.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000.
Layer 2 877
Usage Information
Example Usage Information
Version
8.3.12.0 8.5.1.0 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.2.1.1
Description
Updated the output. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
The following describes the show mac-address-table command shown in the following example.
Column Heading
Description
VlanId Mac Address Type
Interface
Displays the VLAN ID number.
Displays the MAC address in nn:nn:nn:nn:nn:nn format.
Lists whether the MAC address was manually configured (Static), learned dynamically (Dynamic), or associated with a specific port (Sticky).
Displays the interface type and slot/port information. The following abbreviations describe the interface types:
gi -- Gigabit Ethernet then a slot/port. po -- Port Channel then a number. The range is from 1 to 255 for TeraScale. te -- 10 Gigabit Ethernet then a slot/port.
State
Lists if the MAC address is in use (Active) or not in use (Inactive).
Dell(conf)#do show mac-address-table
Codes: *N - VLT Peer Synced MAC
VlanId
Mac Address
Type
2
00:00:00:00:00:01
Dynamic (N)
2
00:00:00:00:00:02
Dynamic (N)
2
00:00:00:00:00:03
Dynamic
2
00:00:00:00:00:04
Dynamic
Interface Po 128 Po 10
Po 100 Po 10
State Active
Active Active Active
The following describes the show mac-address-table command shown in the following example.
Column Heading
Description
VlanId Mac Address Type
Interface
Displays the VLAN ID number.
Displays the MAC address in nn:nn:nn:nn:nn:nn format.
Lists whether the MAC address was manually configured (Static), learned (Dynamic), or associated with a specific port (Sticky). An (N) indicates that the specified MAC address has been learnt by a neighbor and is synced to the node.
Displays the interface type and slot/port information. The following abbreviations describe the interface types:
gi -- Gigabit Ethernet followed by a slot/port po -- Port Channel followed by a number. Range for Terascale is from 1 to 255.
\ te -- 10�Gigabit Ethernet followed by a slot/port[/subport].
State
Lists if the MAC address is in use (Active) or not in use (Inactive).
The following describes the show mac-address-table count command shown in the following example.
878 Layer 2
Line Beginning With
Description
MAC Entries... Displays the number of MAC entries learned per VLAN.
Dynamic Address...
Lists the number of dynamically learned MAC addresses.
Static Address... Lists the number of user-defined MAC addresses.
Total MAC...
Lists the total number of MAC addresses the switch uses.
Example (Count)
Dell# show mac-address-table count
MAC Entries for all vlans :
Dynamic Address Count :
110
Static Address (User-defined) Count : 0
Sticky Address Count :
0
Total Synced Mac from Peer(N):
100
Total MAC Addresses in Use:
110
Dell#
Related Commands
show mac-address-table aging-time -- displays MAC aging time.
show mac-address-table aging-time
Display the aging times assigned to the MAC addresses on the switch.
Syntax Parameters
show mac-address-table aging-time [vlan vlan-id]
vlan vlan-id
(OPTIONAL) Enter the keyword vlan then the VLAN ID to display the MAC address assigned to the VLAN. The range is from 1 to 4094.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0 7.7.1.0 pre-6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added the vlan option on the E-Series. Introduced on the C-Series and S-Series. Introduced on the E-Series.
Layer 2 879
Example
Related Commands
Dell#show mac-address-table aging-time Mac-address-table aging time : 1800
Dell# show mac-address-table -- displays the current MAC address configuration.
show mac accounting destination
Display destination counters for Layer 2 traffic (available on physical interfaces only).
Syntax Parameters
show mac accounting destination [mac-address vlan vlan-id] [interface interface [mac-address vlan vlan-id] [vlan vlan-id]] [vlan vlan-id]
mac-address interface interface
vlan vlan-id
(OPTIONAL) Enter the MAC address in the nn:nn:nn:nn:nn:nn format to display information on that MAC address.
(OPTIONAL) Enter the keyword interface then the interface type, slot and port information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
(OPTIONAL) Enter the keyword vlan then the VLAN ID to display the MAC address assigned to the VLAN. The range is from 1 to 4094.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.5.1.0 8.3.7.0 pre-6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Introduced on the E-Series.
Usage Information
MAC Accounting information can be accessed using SNMP via the Force10 Monitor MIB. For more information about enabling SNMP, refer to the Dell Networking OS Configuration Guide.
NOTE: Currently, the Force10 MONITOR MIB does not return the MAC addresses in an increasing
order using SNMP. As a workaround, you can use the -C c option in snmpwalk or snmpbulkwalk
to access the Force10 MONITOR MIB. For example: % snmpwalk -C c -v 2c -c public 133.33.33.131
enterprise.6027.3.3.3
Example
Dell-1#show mac accounting destination interface tengigabitethernet 2/1
Destination
Out Port VLAN Packets Bytes
880 Layer 2
Related Commands
00:44:00:00:00:02 00:44:00:00:00:01 00:22:00:00:00:00 00:44:00:00:00:02 00:44:00:00:00:01 Dell-1#
Te 11/1 1000 10000 Te 11/1 1000 10000 Te 11/1 1000 10000 Te 11/1 2000 10000 Te 11/1 2000 10000
5120000 5120000 5120000 5120000 5120000
show mac accounting access-list -- displays the MAC access list configurations and counters (if configured).
show mac learning-limit
Display MAC address learning limits set for various interfaces.
Syntax Parameters
show mac learning-limit [violate-action] [detail] [interface interface]
violate-action
detail interface interface
(OPTIONAL) Enter the keywords violate-action to display the MAC learning limit violation status.
(OPTIONAL) Enter the keyword detail to display the MAC learning limit in detail.
(OPTIONAL) Enter the keyword interface with the following keywords and slot/port[/subport] or number information:
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.5.1.0 8.3.7.0 8.3.1.0 7.7.1.0 7.5.1.0 6.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Added the vlan option on the E-Series. Introduced on the C-Series. Added support for the violate-action and detail options. Added support for Port Channel.
Layer 2 881
Example
Dell#show mac learning-limit
Interface Learning Dynamic
Static
Unknown SA
Slot/port Limit
MAC count MAC count Drops
Te 1/1
10
0
0
0
Te 1/2
5
0
0
0
Dell#show mac learning-limit interface tengigabithethernet 1/1
Interface Learning Dynamic
Static
Unknown SA
Slot/port Limit
MAC count MAC count Drops
Te 1/1
10
0
0
0
Virtual LAN (VLAN) Commands
The following commands configure and monitor virtual LANs (VLANs). VLANs are a virtual interface and use many of the same commands as physical interfaces. You can configure an IP address and Layer 3 protocols on a VLAN called Inter-VLAN routing. FTP, TFTP, ACLs and SNMP are not supported on a VLAN. Occasionally, while sending broadcast traffic over multiple Layer 3 VLANs, the VRRP state of a VLAN interface may continually switch between Master and Backup.
NOTE: For more information, refer to VLAN Stacking and VLAN-related commands, such as portmode hybrid in the Interfaces chapter.
default vlan-id
Specify a VLAN as the Default VLAN.
Syntax Parameters
default vlan-id vlan-id
To remove the default VLAN status from a VLAN and VLAN 1 does not exist, use the no default vlan-id vlan-id syntax.
vlan-id
Enter the VLAN ID number of the VLAN to become the new Default VLAN. The range is from 1 to 4094. The default is 1.
Defaults
The Default VLAN is VLAN 1.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series.
882 Layer 2
Usage Information
Related Commands
Version
7.5.1.0 pre-6.2.1.1
Description
Introduced on the C-Series. Introduced on the E-Series.
To return VLAN 1 as the Default VLAN, use this command syntax (default-vlan-id 1). The Default VLAN contains only untagged interfaces. interface vlan -- configures a VLAN.
default-vlan disable
Disable the default VLAN so that all switchports are placed in the Null VLAN until they are explicitly configured as a member of another VLAN.
Defaults
Enabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced
Usage Information
The no default vlan disable command is not listed in the running-configuration, but when the default VLAN is disabled, default-vlan disable is listed in the running-configuration.
name
Assign a name to the VLAN.
Syntax Parameters
name vlan-name To remove the name from the VLAN, use the no name command.
vlan-name
Enter up to 32 characters as the name of the VLAN.
Defaults
Not configured.
Command Modes INTERFACE VLAN
Layer 2 883
Command History
Usage Information Related Commands
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
To display information about a named VLAN, enter the show vlan command with the name parameter or the show interfaces description command.
interface vlan -- configures a VLAN. show vlan -- displays the current VLAN configurations on the switch.
show config
Display the current configuration of the selected VLAN.
Syntax
show config
Command Modes INTERFACE VLAN
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
884 Layer 2
Example
Dell(conf-if-vl-100)#show config ! interface Vlan 100
no ip address no shutdown Dell(conf-if-vl-100)#
show vlan
Display the current VLAN configurations on the switch.
Syntax Parameters
show vlan [brief | id vlan-id | name vlan-name]
brief
id vlan-id name vlan-name
(OPTIONAL) Enter the keyword brief to display the following information:
VLAN ID VLAN name (left blank if none is configured) Spanning Tree Group ID MAC address aging time IP address
(OPTIONAL) Enter the keyword id then a number from 1 to 4094. Only information on the VLAN specified is displayed.
(OPTIONAL) Enter the keyword name then the name configured for the VLAN. Only information on the VLAN named is displayed.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.1.(0.0) 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0
7.6.1.0 7.5.1.0 pre-6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Updated to support OpenFlow. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Augmented to display PVLAN data for the C-Series and S-Series and revised the output to include the Description field to display a user-entered VLAN description. Introduced on the S-Series and revised the output to display Native VLAN. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
The following describes the show vlan command shown in the following example.
Layer 2 885
Example
Column Heading
(Column 1 -- no heading)
NUM Status Q
Ports
Description
asterisk symbol (*) = Default VLAN G = GVRP VLAN P = primary VLAN C = community VLAN I = isolated VLAN O = OpenFlow
Displays existing VLAN IDs.
Displays the word Inactive for inactive VLANs and the word Active for active VLANs.
Displays G for GVRP tagged M for member of a VLAN-Stack VLAN T for tagged interface U for untagged interface x (not capitalized x) for Dot1x untagged X (capitalized X) for Dot1x tagged o (not capitalized o) for OpenFlow untagged O (capitalized O) for OpenFlow tagged H for VSN tagged i (not capitalized i) for Internal untagged I (capitalized I) for Internal tagged v (not capitalized v) for VLT untagged V (capitalized V) for VLT tagged
Displays the type, slot, and port information.
Po = port channel Gi = gigabit Ethernet Te = ten-gigabit Ethernet
Dell#show vlan
Codes: * - Default VLAN, G - GVRP VLANs, P - Primary, C - Community, I -
Isolated
Q: U - Untagged, T - Tagged, O - Openflow
x - Dot1x untagged, X - Dot1x tagged
o - OpenFlow untagged, O - OpenFlow tagged
G - GVRP tagged, M - Vlan-stack
i - Internal untagged, I - Internal tagged, v - VLT untagged, V - VLT
tagged
NUM Status
Description Q Ports
* 1
Inactive
2
Active
U Po1(Te 13/1)
T Po20(Te 13/6), Te 13/25
T Te 13/7
3
Active T Po20(Te 13/6)
T Te 13/7
U Te 13/1
4
Active U Po2(Te 13/2)
T Po20(Te 13/6)
T Te 13/7
5
Active T Po20(Te 13/6)
T Te 13/7
U Te 13/3
6
Active U Po3(Te 13/4)
T Po20(Te 13/6)
T Te 13/7
7
Active T Po20(Te 13/6)
T Te 13/7
886 Layer 2
P 100 C 101 I 102 Dell#
Active T Po1(Te 1/1) Inactive T Te 1/3 Inactive T Te 1/4
U Te 13/5 T Te 1/2
Example (VLAN ID)
Dell# show vlan id 40
Codes: * - Default VLAN, G - GVRP VLANs Q: U - Untagged, T - Tagged
x - Dot1x untagged, X - Dot1x tagged G - GVRP tagged, M - Vlan-stack
NUM Status Description Q Ports
40 Active
M Te 13/47
Dell#show vlan id 41
Codes: * - Default VLAN, G - GVRP VLANs Q: U - Untagged, T - Tagged
x - Dot1x untagged, X - Dot1x tagged G - GVRP tagged, M - Vlan-stack
NUM Status Description Q Ports
41 Active
T Te 13/47
Dell#show vlan id 42
Codes: * - Default VLAN, G - GVRP VLANs Q: U - Untagged, T - Tagged
x - Dot1x untagged, X - Dot1x tagged G - GVRP tagged, M - Vlan-stack
NUM Status Description Q Ports
42 Active
U Te 13/47
Dell#
Example (Brief)
Dell#show vlan br
VLAN Name STG MAC Aging IP Address
---- ------------------------------------
1
0
1800
unassigned
2
0
1800
2.2.2.2/24
3
0
1800
3.3.3.2/24
Dell#
Example (Name)
Dellconf)#interface vlan 222 Dell(conf-if-vl-222)#name test Dell(conf-if-vl-222)#do show vlan name test
Codes: * - Default VLAN, G - GVRP VLANs Q: U - Untagged, T - Tagged
x - Dot1x untagged, X - Dot1x tagged G - GVRP tagged, M - Vlan-stack
NUM Status Description Q Ports
222 Inactive
U Te 1/22
Dell(conf-if-vl-222)#
Example (OpenFlow instance)
NUM * 1
3 O 6 O 8 O 12
Status Inactive Inactive Inactive Inactive Inactive
Description
Q Ports O Te 1/10
Layer 2 887
Related Commands
vlan-stack compatible -- enables the Stackable VLAN feature on the selected VLAN. interface vlan -- configures a VLAN.
tagged
Add a Layer 2 interface to a VLAN as a tagged interface.
Syntax Parameters
tagged interface To remove a tagged interface from a VLAN, use the no tagged interface command.
interface
Enter the following keywords and slot/port[/subport] or number information:
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
Defaults
All interfaces in Layer 2 mode are untagged.
Command Modes INTERFACE VLAN
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.5.1.0 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
When you use the no tagged command, the interface is automatically placed in the Default VLAN as an untagged interface unless the interface is a member of another VLAN. If the interface belongs to several VLANs, remove it from all VLANs to change it to an untagged interface.
Tagged interfaces can belong to multiple VLANs, while untagged interfaces can only belong to one VLAN at a time.
interface vlan -- configures a VLAN.
untagged -- specifies which interfaces in a VLAN are untagged.
888 Layer 2
track ip
Track the Layer 3 operational state of a Layer 3 VLAN, using a subset of the VLAN member interfaces.
Syntax Parameters
track ip interface To remove the tracking feature from the VLAN, use the no track ip interface command.
interface
Enter the following keywords and slot/port[/subport] or number information:
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
Defaults
Not configured.
Command Modes INTERFACE VLAN
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.5.1.0 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
When this command is configured, the VLAN is operationally UP if any of the interfaces specified in the track ip command are operationally UP, and the VLAN is operationally DOWN if none of the tracking interfaces are operationally UP.
If the track ip command is not configured, the VLAN's Layer 3 operational state depends on all the members of the VLAN.
The Layer 2 state of the VLAN, and hence the Layer 2 traffic, is not affected by the track ip command configuration.
interface vlan -- configures a VLAN.
tagged -- specifies which interfaces in a VLAN are tagged.
Layer 2 889
untagged
Add a Layer 2 interface to a VLAN as an untagged interface.
Syntax Parameters
untagged interface To remove an untagged interface from a VLAN, use the no untagged interface command.
interface
Enter the following keywords and slot/port[/subport] or number information:
For a port channel interface, enter the keywords port-channel then a number.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
Defaults
All interfaces in Layer 2 mode are untagged.
Command Modes INTERFACE VLAN
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.5.1.0 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
Untagged interfaces can only belong to one VLAN. In the Default VLAN, you cannot use the no untagged interface command. To remove an untagged interface from all VLANs, including the Default VLAN, enter INTERFACE mode and use the no switchport command.
interface vlan -- configures a VLAN. tagged -- specifies which interfaces in a VLAN are tagged.
890 Layer 2
Far-End Failure Detection (FEFD)
The Dell Networking operating software supports far-end failure detection (FEFD) on the Ethernet interfaces of the S4048�ON platform.
The FEFD feature detects and reports far-end link failures.
FEFD is not supported on the Management interface. During an RPM failover, FEFD is operationally disabled for approximately 8 to 10 seconds. By default, FEFD is disabled.
debug fefd
Enable debugging of FEFD.
Syntax
debug fefd {events | packets} [interface]
To disable debugging of FEFD, use the no debug fefd {events | packets} [interface] command.
Parameters
events packets
interface
Enter the keyword events to enable debugging of FEFD state changes.
Enter the keyword packets to enable debugging of FEFD to view information on packets sent and received.
(OPTIONAL) Enter the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.12.0 Legacy E-Series command.
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Related Commands
fefd -- enables far-end failure detection on an interface. fefd reset -- enables FEFD globally on the system.
Layer 2 891
fefd
Enable Far-End Failure Detection on an interface, set the FEFD interval, or select the FEFD mode.
Syntax Parameters
fefd {disable|interval|mode {aggressive|normal}
disable interval
mode
Enter the keyword disable to disable FEFD for the specified interface.
Enter the keyword interval, followed by a value to specify the FEFD interval in seconds. Range is from 3 to 300. Default is 15.
Enter the keyword mode followed by the mode type to specify the FEFD mode.
normal: Change the link state to "unknown" when a far-end failure is detected by the software on that interface. When the interface is placed in an "unknown" state, the software brings down the line protocol.
aggressive: Change the link state to "error-disabled" when a far-end failure is detected by the software on that interface. When an interface is placed in an "error-disabled" state, you must enter the fefd reset command to reset the interface state. Range is normal or aggressive. Default is normal.
Defaults
Disabled.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.12.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Usage Information
Related Commands
When you enter no fefd for an interface and fefd-global, FEFD is enabled on the interface because the no fefd command is not retained in the configuration file. To keep the interface FEFD disabled when the global configuration changes, use the fefd reset command.
fefd disable -- disables far-end failure detection on an interface. fefd reset -- enables FEFD globally on the system. fefd mode -- changes FEFD mode on an interface.
fefd disable
Disable FEFD on an interface only. This command overrides the fefd reset command for the interface.
Syntax
fefd disable To re-enable FEFD on an interface, use the no fefd disable command.
Defaults
Not configured.
Command Modes INTERFACE
892 Layer 2
Command History
Usage Information Related Commands
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.7.0 Legacy E-Series command.
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
FEFD disable command on the interface prevents the interface from running FEFD when FEFD is enabled globally.
fefd reset -- clears an interface in Err-disabled state. It doesn't work until the interface is in errdisabled state.
fefd mode -- changes FEFD mode on an interface.
fefd interval
Set an interval between control packets.
Syntax
fefd interval seconds To return to the default value, use the no fefd interval command.
Parameters
seconds
Enter a number as the time between FEFD control packets. The range is from 3 to 255 seconds. The default is 15 seconds.
Defaults
15 seconds
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.7.0 Legacy E-Series command.
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Layer 2 893
Related Commands
fefd -- enables far-end failure detection.
fefd mode
Change the FEFD mode on an interface.
Syntax
fefd mode {normal | aggressive}] To return the FEFD mode to the default of normal, use the no fefd mode command.
Parameters
normal aggressive
(OPTIONAL) Enter the keyword normal to change the link state to "unknown" when a far-end failure the software detects on that interface. When the interface is placed in "unknown" state, the software brings down the line protocol.
(OPTIONAL) Enter the keyword aggressive to change the link state to "errordisabled" when a far-end failure the software detects on that interface. When an interface is placed in "error-disabled" state, enter the fefd reset command to reset the interface state.
Defaults
normal
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.7.0 Legacy E-Series command.
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Related Commands
fefd -- enables far-end failure detection.
fefd reset
Reset all interfaces or a single interface that was in "error-disabled" mode.
Syntax Parameters
fefd reset [interface]
interface
(OPTIONAL) Enter the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
Defaults
Not configured.
894 Layer 2
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.12.0 Legacy E-Series command.
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Related Commands
fefd -- enables far-end failure detection.
fefd-global interval
Configure an interval between FEFD control packets.
Syntax
fefd-global interval seconds To return to the default value, use the no fefd-global interval command.
Parameters
seconds
Enter a number as the time between FEFD control packets. The range is from 3 to 300 seconds. The default is 15 seconds.
Defaults
15 seconds
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.7.0 Legacy E-Series command.
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Related Commands
fefd -- enables far-end failure detection. fefd-global -- enables FEFD globally on the system.
Layer 2 895
fefd-global
Enable FEFD globally on the system.
Syntax
fefd-global [interval seconds][mode {normal | aggressive}] To disable FEFD globally, use the no fefd-global [mode {normal | aggressive}] command.
Parameters
interval seconds normal
aggressive
Enter the keyword interval followed by the number of seconds to wait between FEFD control packets. Range is from 3 to 300 seconds. Default is 15 seconds.
(OPTIONAL) Enter the keywords mode normal to change the link state to "unknown" when a far-end failure the software detects on that interface. When the interface is placed in "unknown" state, the software brings down the line protocol. The default is Normal mode.
(OPTIONAL) Enter the keywords mode aggressive to change the link state to "error-disabled" when a far-end failure the software detects on that interface. When an interface is placed in "error-disabled" state, t enter the fefd reset command to reset the interface state.
Defaults
Disabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.12.0 Legacy E-Series command.
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Usage Information
Related Commands
If you enter only the fefd-global syntax, the mode is normal and the default interval is 15 seconds.
If you disable FEFD globally (no fefd-global), the system does not remove the FEFD interface configuration.
fefd -- enables far-end failure detection. fefd-global interval -- configures an interval between FEFD control packets. show fefd -- shows the FEFD command output.
show fefd
View FEFD status globally or on a specific interface.
Syntax Parameters
show fefd [interface]
interface
(OPTIONAL) Enter the following keywords and slot/port[/subport] or number information:
896 Layer 2
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.12.0 Legacy E-Series command.
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Usage Information
The following describes the show fefd command shown in the following example.
Field
Description
Interface
Displays the interfaces type and number.
Mode
Displays the mode (aggressive or normal) or NA if the interface contains fefd reset in its configuration.
Interval
Displays the interval between FEFD packets.
State
Displays the state of the interface and can be one of the following:
bi-directional (interface is up, connected and hearing neighbor's echoes). err-disabled (only found when FEFD mode is aggressive and when the interface
has not hearing its neighbor's echoes for three times the message interval. To reset an interface in this state, use the fefd reset command.) unknown (only found when FEFD mode is normal. locally disabled (interface contains the fefd reset command in its configuration). Admin Shutdown (interface is disabled with the shutdown command).
Example
Dell#show fefd FEFD is globally 'ON', interval is 10 seconds, mode is 'Aggressive'.
INTERFACE MODE
Te 5/1 Te 5/2 Te 5/3 Te 5/4 Te 5/5 Te 5/6 Te 5/7
Aggressive Aggressive Aggressive Aggressive Aggressive Aggressive Aggressive
INTERVAL (second) 10 10 10 10 10 10 10
STATE Admin Shutdown Admin Shutdown Admin Shutdown Admin Shutdown Admin Shutdown Admin Shutdown Admin Shutdown
Layer 2 897
Related Commands
Te 5/8 Aggressive 10
Te 5/9 Aggressive 10
Te 5/10 NA
NA
Te 5/11 Aggressive 10
Dell#
Admin Shutdown Admin Shutdown Locally disabled Err-disabled
fefd -- enables far-end failure detection. fefd disable -- disables FEFD on an interface only. fefd-global -- enables FEFD globally on the system. fefd reset -- resets all interfaces or a single interface that was in "error-disabled" mode.
898 Layer 2
33
Link Layer Discovery Protocol (LLDP)
The link layer discovery protocol (LLDP) advertises connectivity and management from the local station to the adjacent stations on an IEEE 802 LAN. LLDP facilitates multi-vendor interoperability by using standard management tools to discover and make available a physical topology for network management. The Dell Networking operating software implementation of LLDP is based on IEEE standard 801.1ab. The Dell Networking OS supports the basic LLDP commands on S4048�ON platform. The starting point for using LLDP is invoking LLDP with the protocol lldp command in either CONFIGURATION or INTERFACE mode. The information LLDP distributes is stored by its recipients in a standard management information base (MIB). You can access the information by a network management system through a management protocol such as simple network management protocol (SNMP).
Topics:
� LLPD Commands � LLDP-MED Commands
LLPD Commands
The following are LLDP commands.
advertise dot1-tlv
Advertise dot1 TLVs (Type, Length, Value).
Syntax Parameters
advertise dot1-tlv {port-protocol-vlan-id | port-vlan-id | vlan-name}
To remove advertised dot1-tlv, use the no advertise dot1-tlv {port-protocol-vlan-id | port-vlan-id | vlan-name} command.
port-protocolvlan-id port-vlan-id
vlan-name
Enter the keywords port-protocol-vlan-id to advertise the port protocol VLAN identification TLV.
Enter the keywords port-vlan-id to advertise the port VLAN identification TLV.
Enter the keywords vlan-name to advertise the vlan-name TLV. This keyword is only supported on the C-Series and S-Series.
Defaults
Disabled.
Command Modes CONFIGURATION (conf-lldp) and INTERFACE (conf-if-interface-lldp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
Link Layer Discovery Protocol (LLDP) 899
Related Commands
Version
9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.6.1.0 7.4.1.0
Description
Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Added the vlan-name option. Introduced on the C-Series. Introduced on the E-Series.
protocol lldp (Configuration) -- enables LLDP globally. debug lldp interface -- debugs LLDP. show lldp neighbors -- displays the LLDP neighbors.
advertise dot3-tlv
Advertise dot3 TLVs (Type, Length, Value).
Syntax Parameters
advertise dot3-tlv {max-frame-size} To remove advertised dot3-tlv, use the no advertise dot3-tlv {max-frame-size} command.
max-frame-size Enter the keywords max-frame-size to advertise the dot3 maximum frame size.
Defaults
none
Command Modes CONFIGURATION (conf-lldp) and INTERFACE (conf-if-interface-lldp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.6.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
900 Link Layer Discovery Protocol (LLDP)
advertise management-tlv
Advertise management TLVs (Type, Length, Value).
Syntax Parameters
advertise management-tlv {management-address | system-capabilities | system-description | system-name}
To remove advertised management TLVs, use the no advertise management-tlv {management-address | system-capabilities | system-description | systemname} command.
managementaddress
systemcapabilities
systemdescription
system-name
Enter the keyword management-address to advertise the management IP address TLVs to the LLDP peer.
Enter the keywords system-capabilities to advertise the system capabilities TLVs to the LLDP peer.
Enter the keywords system-description to advertise the system description TLVs to the LLDP peer.
Enter the keywords system-name to advertise the system name TLVs to the LLDP peer.
Defaults
none
Command Modes CONFIGURATION (conf-lldp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.1.(0.0) 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.6.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Modified to support management-address parameter. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
The command options management-address,system-capabilities, system-description, and system-name can be invoked individually or together, in any sequence.
advertise management-tlv (Interface)
Advertise management type, length, values (TLVs) to the specified interface.
Syntax
advertise management-tlv {management-address | system-capabilities | system-description | system-name}
Link Layer Discovery Protocol (LLDP) 901
Parameters
To remove advertised management TLVs, use the no advertise management-tlv {management-address | system-capabilities | system-description | systemname} command.
managementaddress
systemcapabilities
systemdescription
system-name
Enter the keywords management-address to advertise the management IP address TLVs to the specified interface.
Enter the keywords system-capabilities to advertise the system capabilities TLVs to the specified interface.
Enter the keywords system-description to advertise the system description TLVs to the specified interface.
Enter the keywords system-name to advertise the system name TLVs to the specified interface.
Defaults
none
Command Modes INTERFACE (conf-interface-lldp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.1.(0.0) 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the Z9000 and S4810. Introduced on the S4820T.
clear lldp counters
Clear LLDP transmitting and receiving counters for all physical interfaces or a specific physical interface.
Syntax Parameters
clear lldp counters interface
interface
Enter the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON.
902 Link Layer Discovery Protocol (LLDP)
Version
9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.5.1.0 8.3.7.0 7.7.1.0 7.6.1.0 7.4.1.0
Description
Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
clear lldp neighbors
Clear LLDP neighbor information for all interfaces or a specific interface.
Syntax Parameters
clear lldp neighbors {interface}
interface
Enter the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
Defaults
none
Command Modes EXEC Privilege
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
9.2(1.0)
9.0.2.0
8.3.19.0
8.3.11.1
8.5.1.0
8.3.7.0
7.7.1.0
7.6.1.0
7.4.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Link Layer Discovery Protocol (LLDP) 903
debug lldp interface
To display timer events, neighbor additions or deletions, and other information about incoming and outgoing packets, enable LLDP debugging.
Syntax Parameters
debug lldp interface {interface | all}{events | packet {brief | detail} {tx | rx | both}}
To disable debugging, use the no debug lldp interface {interface | all}{events} {packet {brief | detail} {tx | rx | both}} command.
interface
all events packet brief detail tx rx both
Enter the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
(OPTIONAL) Enter the keyword all to display information on all interfaces.
(OPTIONAL) Enter the keyword events to display major events such as timer events.
(OPTIONAL) Enter the keyword packet to display information regarding packets coming in or going out.
(OPTIONAL) Enter the keyword brief to display brief packet information.
(OPTIONAL) Enter the keyword detail to display detailed packet information.
(OPTIONAL) Enter the keyword tx to display transmit-only packet information.
(OPTIONAL) Enter the keyword rx to display receive-only packet information.
(OPTIONAL) Enter the keyword both to display both receive and transmit packet information.
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.5.1.0 8.3.7.0 7.7.1.0 7.6.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
904 Link Layer Discovery Protocol (LLDP)
disable
Enable or disable LLDP.
Syntax
disable To enable LLDP, use the no disable command.
Defaults
Enabled, that is no disable.
Command Modes CONFIGURATION (conf-lldp) and INTERFACE (conf-if-interface-lldp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.6.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Related Commands
protocol lldp (Configuration) -- enables LLDP globally. debug lldp interface -- debugs LLDP. show lldp neighbors -- displays the LLDP neighbors.
hello
Configure the rate at which the LLDP control packets are sent to its peer.
Syntax Parameters
hello seconds To revert to the default, use the no hello seconds command.
seconds
Enter the rate, in seconds, at which the control packets are sent to its peer. The rate is from 5 to 180 seconds. The default is 30 seconds.
Defaults
30 seconds
Command Modes CONFIGURATION (conf-lldp) and INTERFACE (conf-if-interface-lldp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Link Layer Discovery Protocol (LLDP) 905
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.6.1.0 7.4.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
management-interface
Enable and configure LLDP protocol parameters on the management interface.
Syntax
management-interface
To remove LLDP configuration on a management interface, use the no management-interface command.
Command Modes LLDP (conf-lldp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.2(0.2)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the Z9000 and S4810.
Usage Information
To enable LLDP on the management interface, use the no disable command in LLDP-MANAGEMENTINTERFACE mode (conf-lldp-mgmtIf).
mode
To receive or transmit, set LLDP.
Syntax Parameters
mode {tx | rx} To return to the default, use the no mode {tx | rx} command.
tx
Enter the keyword tx to set the mode to transmit.
906 Link Layer Discovery Protocol (LLDP)
rx
Enter the keyword rx to set the mode to receive.
Defaults
Both transmit and receive.
Command Modes CONFIGURATION (conf-lldp) and INTERFACE (conf-if-interface-lldp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.6.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Related Commands
protocol lldp (Configuration) -- enables LLDP globally. show lldp neighbors -- displays the LLDP neighbors.
multiplier
Set the number of consecutive misses before LLDP declares the interface dead.
Syntax Parameters
multiplier integer To return to the default, use the no multiplier integer command.
integer
Enter the number of consecutive misses before the LLDP declares the interface dead. The range is from 2 to 10.
Defaults
4 x hello
Command Modes CONFIGURATION (conf-lldp) and INTERFACE (conf-if-interface-lldp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500.
Link Layer Discovery Protocol (LLDP) 907
Version
9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.6.1.0 7.4.1.0
Description
Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
protocol lldp (Configuration)
Enable the LLDP globally on the switch.
Syntax
protocol lldp To disable LLDP globally on the chassis, use the no protocol lldp command.
Defaults
Enabled.
Command Modes CONFIGURATION (conf-lldp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.6.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
protocol lldp (Interface)
Enter the LLDP protocol in INTERFACE mode.
Syntax
[no] protocol lldp
To return to the global LLDP configuration mode, use the no protocol lldp command from Interface mode.
908 Link Layer Discovery Protocol (LLDP)
Defaults
LLDP is not enabled on the interface.
Command Modes INTERFACE (conf-if-interface-lldp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.6.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Before LLDP can be configured on an interface, it must be enabled globally from CONFIGURATION mode. This command places you in LLDP mode on the interface; it does not enable the protocol.
When you enter the LLDP protocol in the Interface context, it overrides global configurations. When you execute the no protocol lldp from INTERFACE mode, interfaces begin to inherit the configuration from global LLDP CONFIGURATION mode.
show lldp neighbors
Display LLDP neighbor information for all interfaces or a specified interface.
Syntax Parameters
show lldp neighbors [interface] [detail]
interface
(OPTIONAL) Enter the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
detail
(OPTIONAL) Enter the keyword detail to display all the TLV information, remote management IP addresses, timers, and LLDP tx and rx counters.
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Link Layer Discovery Protocol (LLDP) 909
Usage Information
Example
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.1.(0.0) 8.3.19.0 8.3.11.1 8.5.1.0 8.3.7.0 7.7.1.0 7.6.1.0 7.4.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Modified output of detail parameter to display remote management IP addresses. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Omitting the keyword detail displays only the remote chassis ID, Port ID, and Dead Interval.
R1(conf-if-te-1/31)#do show lldp neighbors
Loc PortID Rem Host Name
Rem
Port Id Rem Chassis Id
--------------------------------------------------------------
Te 1/21
R2 TenGigabitEthernet 2/11 00:01:e8:06:95:3e
Te 1/31
R3 TenGigabitEthernet 3/11 00:01:e8:09:c2:4a
show lldp statistics
Display the LLDP statistical information.
Syntax
show lldp statistics
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.11.1 8.3.7.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series.
910 Link Layer Discovery Protocol (LLDP)
Example
Version
7.6.1.0 7.4.1.0
Description
Introduced on the C-Series. Introduced on the E-Series.
Dell#show lldp statistics
Total number of neighbors: 300
Last table change time : Mon Oct 02 16:00:52 2006
Number of Table Inserts : 1621
Number of Table Deletes : 200
Number of Table Drops
: 0
Number of Table Age Outs : 400
Dell#
show management-interface
Display LLDP management interface configuration information.
Syntax
show management-interface
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.2.(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the Z9000 and S4810.
show running-config lldp
Display the current global LLDP configuration.
Syntax
show running-config lldp
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500.
Link Layer Discovery Protocol (LLDP) 911
Example
Version
9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.6.1.0 7.4.1.0
Description
Introduced on the S6000. Introduced on the S8420T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Dell#show running-config lldp ! protocol lldp
advertise dot1-tlv port-protocol-vlan-id port-vlan-id advertise dot3-tlv max-frame-size advertise management-tlv system-capabilities system-description hello 15 multiplier 3 no disable Dell#
LLDP-MED Commands
The following are the LLDP-MED (Media Endpoint Discovery) commands.
Dell Networking OS LLDP-MED commands are an extension of the set of LLDP TLV advertisement commands. The C-Series and S-Series support all commands.
The E-Series generally supports the commands. However, LLDP-MED commands are more useful on the C-Series and the S50V model of the S-Series, because they support Power over Ethernet (PoE) devices.
As defined by ANSI/TIA-1057, LLDP-MED provides organizationally specific TLVs (Type Length Value), so that endpoint devices and network connectivity devices can advertise their characteristics and configuration information. The Organizational Unique Identifier (OUI) for the Telecommunications Industry Association (TIA) is 00-12-BB.
LLDP-MED Endpoint Device -- any device that is on an IEEE 802 LAN network edge, can communicate using IP, and uses the LLDP-MED framework.
LLDP-MED Network Connectivity Device -- any device that provides access to an IEEE 802 LAN to an LLDP-MED endpoint device, and supports IEEE 802.1AB (LLDP) and TIA-1057 (LLDP-MED). The Dell Networking system is an LLDP-MED network connectivity device.
Regarding connected endpoint devices, LLDP-MED provides network connectivity devices with the ability to:
manage inventory manage Power over Ethernet (POE) identify physical location identify network policy
advertise med guest-voice
To advertise a separate limited voice service for a guest user with their own IP telephony handset or other appliances that support interactive voice services, configure the system.
Syntax
advertise med guest-voice {vlan-id layer2_priority DSCP_value} | {prioritytagged number}
912 Link Layer Discovery Protocol (LLDP)
Parameters
To return to the default, use the no advertise med guest-voice {vlan-id layer2_priority DSCP_value} | {priority-tagged number} command.
vlan-id
layer2_priority
DSCP_value
priority-tagged number
Enter the VLAN ID. The range is from 1 to 4094.
Enter the Layer 2 priority. The range is from 0 to 7.
Enter the DSCP value. The range is from 0 to 63.
Enter the keywords priority-tagged followed the Layer 2 priority. The range is from 0 to 7.
Defaults
Unconfigured.
Command Modes CONFIGURATION (conf-lldp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series and E-Series.
Related Commands
protocol lldp (Configuration) -- enables LLDP globally. debug lldp interface -- debugs LLDP. show lldp neighbors -- displays the LLDP neighbors.
advertise med guest-voice-signaling
To advertise a separate limited voice service for a guest user when the guest voice control packets use a separate network policy than the voice data, configure the system.
Syntax Parameters
advertise med guest-voice-signaling {vlan-id layer2_priority DSCP_value} | {priority-tagged number}
To return to the default, use the no advertise med guest-voice-signaling {vlan-id layer2_priority DSCP_value} | {priority-tagged number} command.
vlan-id
layer2_priority
DSCP_value
priority-tagged number
Enter the VLAN ID. The range is from 1 to 4094.
Enter the Layer 2 priority. The range is from 0 to 7.
Enter the DSCP value. The range is from 0 to 63.
Enter the keywords priority-tagged then the Layer 2 priority. The range is from 0 to 7.
Link Layer Discovery Protocol (LLDP) 913
Defaults
unconfigured.
Command Modes CONFIGURATION (conf-lldp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series and E-Series.
Related Commands
debug lldp interface -- debugs LLDP. show lldp neighbors -- displays the LLDP neighbors.
advertise med location-identification
To advertise a location identifier, configure the system.
Syntax Parameters
advertise med location-identification {coordinate-based value | civic-based value | ecs-elin value}
To return to the default, use the no advertise med location-identification {coordinate-based value | civic-based value | ecs-elin value} command.
coordinate-based Enter the keywords coordinate-based then the coordinated based location in
value
hexadecimal value of 16 bytes.
civic-based value Enter the keywords civic-based then the civic based location in hexadecimal format. The range is from 6 to 255 bytes.
ecs-elin value
Enter the keywords ecs-elin then the Emergency Call Service (ecs) Emergency Location Identification Number (elin) numeric location string. The range is from 10 to 25 characters.
Defaults
unconfigured.
Command Modes CONFIGURATION (conf-lldp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2)
Introduced on the S4048-ON. Introduced on the S3048-ON.
914 Link Layer Discovery Protocol (LLDP)
Usage Information
Related Commands
Version
9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.6.1.0
Description
Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series and E-Series.
ECS -- Emergency call service such as defined by TIA or the national emergency numbering association (NENA)
ELIN -- Emergency location identification number, a valid North America Numbering Plan format telephone number supplied for ECS purposes.
debug lldp interface -- debugs LLDP.
show lldp neighbors -- displays the LLDP neighbors.
advertise med power-via-mdi
To advertise the Extended Power via MDI TLV, configure the system.
Syntax
advertise med power-via-mdi To return to the default, use the no advertise med power-via-mdi command.
Defaults
unconfigured.
Command Modes CONFIGURATION (conf-lldp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.6.1.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
Related Commands
Advertise the Extended Power via MDI on all ports that are connected to an 802.3af powered, LLDPMED endpoint device.
debug lldp interface -- debugs LLDP. show lldp neighbors -- displays the LLDP neighbors.
Link Layer Discovery Protocol (LLDP) 915
advertise med softphone-voice
To advertise softphone to enable IP telephony on a computer so that the computer can be used as a phone, configure the system.
Syntax Parameters
advertise med softphone-voice {vlan-id layer2_priority DSCP_value} | {priority-tagged number}
To return to the default, use the no advertise med softphone-voice {vlan-id layer2_priority DSCP_value} | {priority-tagged number} command.
vlan-id
layer2_priority
DSCP_value
priority-tagged number
Enter the VLAN ID. The range is from 1 to 4094.
Enter the Layer 2 priority (C-Series and E-Series only). The range is from 0 to 7.
Enter the DSCP value (C-Series and E-Series only). The range is from 0 to 63.
Enter the keywords priority-tagged then the Layer 2 priority. The range is from 0 to 7.
Defaults
unconfigured.
Command Modes CONFIGURATION (conf-lldp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series and E-Series.
Related Commands
debug lldp interface -- debugs LLDP. show lldp neighbors -- displays the LLDP neighbors.
advertise med streaming-video
To advertise streaming video services for broadcast or multicast-based video, configure the system. This command does not include video applications that rely on TCP buffering.
Syntax
advertise med streaming-video {vlan-id layer2_priority DSCP_value} | {priority-tagged number}
To return to the default, use the no advertise med streaming-video {vlan-id layer2_priority DSCP_value} | {priority-tagged number} command.
916 Link Layer Discovery Protocol (LLDP)
Parameters
vlan-id
layer2_priority
DSCP_value
priority-tagged number
Enter the VLAN ID. The range is from 1 to 4094.
Enter the Layer 2 priority (C-Series and E-Series only). The range is from 0 to 7.
Enter the DSCP value (C-Series and E-Series only). The range is from 0 to 63.
Enter the keywords priority-tagged then the Layer 2 priority. The range is from 0 to 7.
Defaults
unconfigured.
Command Modes CONFIGURATION (conf-lldp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series and E-Series.
Related Commands
debug lldp interface -- debugs LLDP. show lldp neighbors -- displays the LLDP neighbors.
advertise med video-conferencing
To advertise dedicated video conferencing and other similar appliances that support real-time interactive video, configure the system.
Syntax Parameters
advertise med video-conferencing {vlan-id layer2_priority DSCP_value} | {priority-tagged number}
To return to the default, use the no advertise med video-conferencing {vlan-id layer2_priority DSCP_value} | {priority-tagged number} command.
vlan-id
layer2_priority
DSCP_value
priority-tagged number
Enter the VLAN ID. The range is from 1 to 4094.
Enter the Layer 2 priority (C-Series and E-Series only). The range is from 0 to 7.
Enter the DSCP value (C-Series and E-Series only). The range is from 0 to 63.
Enter the keywords priority-tagged then the Layer 2 priority. The range is from 0 to 7.
Defaults
unconfigured.
Command Modes CONFIGURATION (conf-lldp)
Link Layer Discovery Protocol (LLDP) 917
Command History
Related Commands
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series and E-Series.
debug lldp interface -- debugs LLDP. show lldp neighbors -- displays the LLDP neighbors.
advertise med video-signaling
To advertise video control packets that use a separate network policy than video data, configure the system.
Syntax Parameters
advertise med video-signaling {vlan-id layer2_priority DSCP_value} | {priority-tagged number}
To return to the default, use the no advertise med video-signaling {vlan-id layer2_priority DSCP_value} | {priority-tagged number} command.
vlan-id
layer2_priority
DSCP_value
priority-tagged number
Enter the VLAN ID. The range is from 1 to 4094.
Enter the Layer 2 priority (C-Series and E-Series only). The range is from 0 to 7.
Enter the DSCP value (C-Series and E-Series only). The range is from 0 to 63.
Enter the keywords priority-tagged then the Layer 2 priority. The range is from 0 to 7.
Defaults
unconfigured.
Command Modes CONFIGURATION (conf-lldp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000.
918 Link Layer Discovery Protocol (LLDP)
Related Commands
Version
8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.6.1.0
Description
Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series and E-Series.
debug lldp interface -- debugs LLDP. show lldp neighbors -- displays the LLDP neighbors.
advertise med voice
To advertise a dedicated IP telephony handset or other appliances supporting interactive voice services, configure the system.
Syntax Parameters
advertise med voice {vlan-id layer2_priority DSCP_value} | {priority-tagged number}
To return to the default, use the no advertise med voice {vlan-id layer2_priority DSCP_value} | {priority-tagged number} command.
vlan-id
layer2_priority
DSCP_value
priority-tagged number
Enter the VLAN ID. The range is from 1 to 4094.
Enter the Layer 2 priority (C-Series and E-Series only). The range is from 0 to 7.
Enter the DSCP value (C-Series and E-Series only). The range is from 0 to 63.
Enter the keywords priority-tagged then the Layer 2 priority. The range is from 0 to 7.
Defaults
unconfigured.
Command Modes CONFIGURATION (conf-lldp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series and E-Series.
Related Commands
debug lldp interface -- debugs LLDP. show lldp neighbors -- displays the LLDP neighbors.
Link Layer Discovery Protocol (LLDP) 919
advertise med voice-signaling
To advertise when voice control packets use a separate network policy than voice data, configure the system.
Syntax Parameters
advertise med voice-signaling {vlan-id layer2_priority DSCP_value} | {priority-tagged number}
To return to the default, use the no advertise med voice-signaling {vlan-id layer2_priority DSCP_value} | {priority-tagged number} command.
vlan-id
layer2_priority
DSCP_value
priority-tagged number
Enter the VLAN ID. The range is from 1 to 4094.
Enter the Layer 2 priority (C-Series and E-Series only). The range is from 0 to 7.
Enter the DSCP value (C-Series and E-Series only). The range is from 0 to 63.
Enter the keywords priority-tagged then the Layer 2 priority. The range is from 0 to 7.
Defaults
unconfigured.
Command Modes CONFIGURATION (conf-lldp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series and E-Series.
Related Commands
debug lldp interface -- debugs LLDP. show lldp neighbors -- displays the LLDP neighbors.
920 Link Layer Discovery Protocol (LLDP)
34
Microsoft Network Load Balancing
Network Load Balancing (NLB) is a clustering functionality that is implemented by Microsoft on Windows 2000 Server and Windows Server 2003 operating systems. Microsoft NLB clustering allows multiple servers running Microsoft Windows to be represented by one MAC and one IP address to provide transparent failover and load-balancing. The Dell Networking OS does not recognize server clusters by default; you must configure NLB functionality on a switch to support server clusters. The maximum NLB entry limit from 8 to 11 is increased and support for more CAM-ACL to increase.
Topics:
� arp (for Multicast MAC Address) � mac-address-table static (for Multicast MAC Address) � ip vlan-flooding
arp (for Multicast MAC Address)
To associate an IP address with a multicast MAC address in the switch when you configure multicast mode of network load balancing (NLB), use address resolution protocol (ARP).
Syntax
arp ip-address multicast-mac-address interface To remove an ARP address, use the no arp ip-address command.
Parameters
ip-address
multicast-macaddress
Enter an IP address in dotted decimal format.
Enter a 48-bit hexadecimal address in nn:nn:nn:nn:nn:nn format for the static MAC address to be used to switch multicast traffic.
interface
Enter any of the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number.
The interface specified here must be one of the interfaces configured using the {output-range | output} interface option with the mac-addresstable static command.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
Version 9.3(0.0)
Added support for association of an IP address with multicast MAC address on the S4810, S4820T, S6000, and Z9000 platforms.
Usage Information
Related Commands
For multicast mode of NLB, to associate an IP address with a multicast MAC address in the switch, use address resolution protocol (ARP) by entering the arp ip-address multicast-mac-address command in Global configuration mode. This setting causes the multicast MAC address to be mapped to the cluster IP address for NLB mode of operation of the switch.
clear arp-cache -- clears dynamic ARP entries from the ARP table.
show arp -- displays the ARP table.
Microsoft Network Load Balancing 921
mac-address-table static (for Multicast MAC Address)
For multicast mode of network load balancing (NLB), configure a static multicast MAC address, associate the multicast MAC address with the VLAN used to switch Layer 2 multicast traffic, and add output ports that will receive multicast streams on the VLAN. To delete a configured static multicast MAC address from the MAC address table on the router, enter the no macaddress-table static multicast-mac-address command.
Syntax
mac-address-table static multicast-mac-address multicast vlan vlan-id range-output {single-interface | interface-list | interface-range}
To remove a MAC address, use the no mac-address-table static multicast-mac-address output interface vlan vlan-id command.
Parameters
multicast-macaddress
multicast
Enter the 48-bit hexadecimal address in nn:nn:nn:nn:nn:nn format.
Enter a vlan port to where L2 multicast MAC traffic is forwarded. NOTE: Use this option if you want multicast functionality in an L2 VLAN without IGMP protocols.
output interface For a multicast MAC address, enter the keyword output then one of the following interfaces for which traffic is forwarded:
For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
output-range interface
For a multicast MAC address, enter the keyword output-range then one of the following interfaces to indicate a range of ports for which traffic is forwarded:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number.
vlan vlan-id
Enter the keyword vlan then a VLAN ID number from 1 to 4094.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.3(0.0)
Added support for multicast MAC address on the MXL platform.
Example (Multicast)
mac-address-table static 01:00:5E:01:00:01 {multicast vlan 2 output--range Te 1/2,Te 1/3}
922 Microsoft Network Load Balancing
ip vlan-flooding
Enable unicast data traffic flooding on VLAN member ports.
Syntax
ip vlan-flooding To disable, use the no ip vlan-flooding command.
Command Modes CONFIGURATION
Command History
Version 9.3(0.0)
Version
Introduced on the S4810, S4820T, S6000, Z9000, and MXL platforms
Description
9.8(0.0P5) 9.8(0.0P2) 9.3(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4810, S4820T, S6000, Z9000, and MXL platforms.
Default
Usage Information
Disabled
By default this command is disabled. There might be some ARP table entries which are resolved through ARP packets which had Ethernet MAC SA different from MAC information inside the ARP packet. This unicast data traffic flooding occurs only for those packets which use these ARP entries.
Microsoft Network Load Balancing 923
35
Multicast Source Discovery Protocol (MSDP)
Multicast source discovery protocol (MSDP) connects multiple PIM Sparse-Mode (PIM-SM) domains together. MSDP peers connect using TCP port 639. Peers send keepalives every 60 seconds. A peer connection is reset after 75 seconds if no MSDP packets are received. MSDP connections are parallel with MBGP connections. The Dell Networking operating system supports MSDP commands on the S4048�ON platform.
Topics:
� clear ip msdp peer � clear ip msdp sa-cache � clear ip msdp statistic � debug ip msdp � ip msdp cache-rejected-sa � ip msdp default-peer � ip msdp log-adjacency-changes � ip msdp mesh-group � ip msdp originator-id � ip msdp peer � ip msdp redistribute � ip msdp sa-filter � ip msdp sa-limit � ip msdp shutdown � ip multicast-msdp � show ip msdp � show ip msdp sa-cache rejected-sa
clear ip msdp peer
Reset the TCP connection to the peer and clear all the peer statistics.
Syntax Parameters
clear ip msdp peer {peer address}
peer address
Enter the peer address in a dotted decimal format (A.B.C.D.)
Defaults
Not configured.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500.
924 Multicast Source Discovery Protocol (MSDP)
Version
9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.1 6.2.1.1
Description
Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced
clear ip msdp sa-cache
Clears the entire source-active cache, the source-active entries of a particular multicast group, rejected, or local source-active entries.
Syntax Parameters
clear ip msdp sa-cache [group-address | rejected-sa | local]
group-address rejected-sa
local
Enter the group IP address in dotted decimal format (A.B.C.D.).
Enter the keywords rejected-sa to clear the cache source-active entries that are rejected because the RPF check failed, an SA filter or limit is configured, the RP or MSDP peer is unreachable, or because of a format error.
Enter the keyword local to clear out local PIM advertised entries. It applies the redistribute filter (if present) while adding the local PIM SA entries to the SA cache.
Defaults
Without any options, this command clears the entire source-active cache.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.1 7.8.1.0 7.7.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added the local option. Added the rejected-sa option. Introduced
Multicast Source Discovery Protocol (MSDP) 925
clear ip msdp statistic
Clears the entire source-active cache, the source-active entries of a particular multicast group, rejected, or local source-active entries.
Syntax Parameters
clear ip msdp statistic peer peer-address
peer peer-address
Enter the keyword peer to clear the MSDP peer entries. Enter the IP address of the MSDP peer.
Defaults
Without any options, this command clears the entire source-active cache.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.1 7.8.1.0 7.7.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added the local option. Added the rejected-sa option. Introduced
debug ip msdp
Turn on MSDP debugging.
Syntax Parameters
debug ip msdp {event peer address | packet peer address | pim}
To turn debugging off, use the no debug ip msdp {event peer address | packet peer address | pim} command.
event peer address
packet peer address
pim
Enter the keyword event then the peer address in a dotted decimal format (A.B.C.D.).
Enter the keyword packet then the peer address in a dotted decimal format (A.B.C.D.).
Enter the keyword pim to debug advertisement from PIM.
Defaults
Not configured.
Command Modes EXEC Privilege
926 Multicast Source Discovery Protocol (MSDP)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced
ip msdp cache-rejected-sa
Enable an MSDP cache for the rejected source-active entries.
Syntax Parameters
ip msdp cache-rejected-sa {number}
To clear the MSDP rejected source-active entries, use the no ip msdp cache-rejected-sa {number} command then the ip msdp cache-rejected-sa {number} command.
number
Enter the number of rejected SA entries to cache. The range is from 0 to 32766.
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced
Related Commands
show ip msdp sa-cache rejected-sa -- displays the rejected SAs in the SA cache.
Multicast Source Discovery Protocol (MSDP) 927
ip msdp default-peer
Define a default peer from which to accept all source-active (SA) messages.
Syntax Parameters
ip msdp default-peer peer address [list name]
To remove the default peer, use the no ip msdp default-peer {peer address} list name command.
peer address list name
Enter the peer address in a dotted decimal format (A.B.C.D.)
Enter the keywords list name and specify a standard access list that contains the RP address that should be treated as the default peer. If no access list is specified, then all SAs from the peer are accepted.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added the list option and removed the prefix-list option. Introduced
Usage Information
If a list is not specified, all SA messages received from the default peer are accepted. You can enter multiple default peer commands.
ip msdp log-adjacency-changes
Enable logging of MSDP adjacency changes.
Syntax
ip msdp log-adjacency-changes To disable logging, use the no ip msdp log-adjacency-changes command.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
928 Multicast Source Discovery Protocol (MSDP)
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 6.2.1.1
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced
ip msdp mesh-group
To be a member of a mesh group, configure a peer.
Syntax Parameters
ip msdp mesh-group {name} {peer address}
To remove the peer from a mesh group, use the no ip msdp mesh-group {name} {peer address} command.
name peer address
Enter a string of up to 16 characters long for as the mesh group name. Enter the peer address in a dotted decimal format (A.B.C.D.).
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced
Usage Information
An MSDP mesh group is a mechanism for reducing SA flooding, typically in an intra-domain setting. When some subset of a domain's MSDP speakers are fully meshed, they can be configured into a mesh-group. If member X of a mesh-group receives a SA message from an MSDP peer that is also a member of the mesh-group, member X accepts the SA message and forwards it to all of its peers that are not part of the mesh-group. However, member X cannot forward the SA message to other members of the mesh-group.
Multicast Source Discovery Protocol (MSDP) 929
ip msdp originator-id
Configure the MSDP Originator ID.
Syntax Parameters
ip msdp originator-id {interface} To remove the originator-id, use the no ip msdp originator-id {interface} command.
interface
Enter the following keywords and slot/port or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.5.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for 4-port 40G line cards on ExaScale. Introduced
ip msdp peer
Configure an MSDP peer.
Syntax Parameters
ip msdp peer peer address [connect-source] [description] [sa-limit number]
To remove the MSDP peer, use the no ip msdp peer peer address [connect-source interface] [description name] [sa-limit number] command.
peer address
Enter the peer address in a dotted decimal format (A.B.C.D.).
930 Multicast Source Discovery Protocol (MSDP)
connect-source interface
Enter the keywords connect-source then one of the interfaces and slot/port or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
description name (OPTIONAL) Enter the keyword description then a description name (maximum 80 characters) to designate a description for the MSDP peer.
sa-limit number (OPTIONAL) Enter the maximum number of SA entries in SA-cache. The range is from 1 to 100000. .
Defaults
As described in the Parameters section.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.5.1.0 7.5.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for 4-port 40G line cards on ExaScale. Added option for SA upper limit and the description option. Introduced
Usage Information
Related Commands
The connect-source option is used to supply a source IP address for the TCP connection. When an interface is specified using the connect-source option, the primary configured address on the interface is used.
If the total number of SA messages received from the peer is already larger than the limit when this command is applied, those SA messages continue to be accepted. To enforce the limit in such situation, use the clear ip msdp peer command to reset the peer.
ip msdp sa-limit -- configures the MSDP SA Limit.
clear ip msdp peer -- clears the MSDP peer.
show ip msdp -- displays the MSDP information.
Multicast Source Discovery Protocol (MSDP) 931
ip msdp redistribute
Filter local PIM SA entries in the SA cache. SAs which the ACL denies time out and are not refreshed. Until they time out, they continue to reside in the MSDP SA cache.
Syntax Parameters
ip msdp redistribute [list acl-name]
list acl-name
Enter the name of an extended ACL that contains permitted SAs. If you do not use this option, all local entries are blocked.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced
Usage Information
Modifications to the ACL do not have an immediate effect on the sa-cache.
To apply the redistribute filter to entries already present in the SA cache, use the clear ip msdp sacache local command.
ip msdp sa-filter
Permit or deny MSDP source active (SA) messages based on multicast source and/or group from the specified peer.
Syntax Parameters
Defaults
ip msdp sa-filter {in | out} peer-address list [access-list name]
Remove this configuration using the no ip msdp sa-filter {in | out} peer address list [access-list name] command.
in out peer-address access-list name
Enter the keyword in to enable incoming SA filtering.
Enter the keyword out to enable outgoing SA filtering.
Enter the peer address of the MSDP peer in a dotted decimal format (A.B.C.D.).
Enter the name of an extended ACL that contains permitted SAs. If you do not use this option, all local entries are blocked.
Not configured.
932 Multicast Source Discovery Protocol (MSDP)
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series.
ip msdp sa-limit
Configure the upper limit of source-active (SA) entries in SA-cache.
Syntax Parameters
ip msdp sa-limit number To return to the default, use the no ip msdp sa-limit number command.
number
Enter the maximum number of SA entries in SA-cache. The range is from 1 to 500000.
Defaults
50000
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series.
Usage Information
Dell Networking OS counts the SA messages originated by itself and those messages received from the MSDP peers. When the total SA messages reach this limit, the subsequent SA messages are dropped (even if they pass RPF checking and policy checking).
Multicast Source Discovery Protocol (MSDP) 933
Related Commands
If the total number of SA messages is already larger than the limit when this command is applied, those SA messages that are already in Dell Networking OS continue to be accepted. To enforce the limit in such situation, use the clear ip msdp sa-cache command.
ip msdp peer -- configures the MSDP peer. clear ip msdp peer -- clears the MSDP peer. show ip msdp -- displays the MSDP information.
ip msdp shutdown
Administratively shut down a configured MSDP peer.
Syntax Parameters
ip msdp shutdown {peer address}
peer address
Enter the peer address in a dotted decimal format (A.B.C.D.).
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced
ip multicast-msdp
Enable MSDP.
Syntax
ip multicast-msdp To exit MSDP, use the no ip multicast-msdp command.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
934 Multicast Source Discovery Protocol (MSDP)
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 6.2.1.1
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced
show ip msdp
Display the MSDP peer status, SA cache, or peer summary.
Syntax Parameters
show ip msdp {peer peer address | sa-cache | summary}
peer peer address
sa-cache
summary
Enter the keyword peer then the peer address in a dotted decimal format (A.B.C.D.).
Enter the keywords sa-cache to display the Source-Active cache.
Enter the keyword summary to display an MSDP peer summary.
Defaults
Not configured.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced
Example
Dell#show ip msdp peer 100.1.1.1 Peer Addr: 100.1.1.1
Local Addr: 100.1.1.2(639) Connect Source: none
Multicast Source Discovery Protocol (MSDP) 935
Example (Sacache)
Example (Summary)
State: Established Up/Down Time: 00:00:08 Timers: KeepAlive 60 sec, Hold time 75 sec SourceActive packet count (in/out): 0/0 SAs learned from this peer: 0 SA Filtering: Input (S,G) filter: none Output (S,G) filter: none Dell#
Dell#show ip msdp sa-cache
MSDP Source-Active Cache - 1 entries
GroupAddr SourceAddr
RPAddr
224.1.1.1 172.21.220.10 172.21.3.254
Dell#
LearnedFrom Expire UpTime 172.21.3.254 102 00:02:52
Dell#show ip msdp summary
Peer Addr
Local Addr
State
Source
SA
Up/
Down
Description
5.5.5.32
6.6.6.32
Established Lo 32
20
00:07:17
Peer1
Dell#
show ip msdp sa-cache rejected-sa
Display the rejected SAs in the SA cache.
Syntax
show ip msdp sa-cache rejected-sa
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.1 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced.
Example
Dell#show ip msdp sa-cache rejected-sa
MSDP Rejected SA Cache 200 rejected SAs received, cache-size 1000
UpTime GroupAddr SourceAddr RPAddr
LearnedFrom Reason
00:00:13 225.1.2.1 10.1.1.3 110.1.1.1 13.1.1.2 Rpf-Fail
00:00:13 225.1.2.2 10.1.1.4 110.1.1.1 13.1.1.2 Rpf-Fail
936 Multicast Source Discovery Protocol (MSDP)
00:00:13 225.1.2.3 10.1.1.3 00:00:13 225.1.2.4 10.1.1.4 00:00:13 225.1.2.5 10.1.1.3 00:00:13 225.1.2.6 10.1.1.4 00:00:13 225.1.2.7 10.1.1.3 00:00:13 225.1.2.8 10.1.1.4 00:00:13 225.1.2.9 10.1.1.3 00:00:13 225.1.2.10 10.1.1.4 00:00:13 225.1.2.11 10.1.1.3 00:00:13 225.1.2.11 10.1.1.3 00:00:13 225.1.2.12 10.1.1.4 00:00:13 225.1.2.13 10.1.1.3 00:00:13 225.1.2.14 10.1.1.4 00:00:13 225.1.2.15 10.1.1.3 00:00:13 225.1.2.16 10.1.1.4 00:00:13 225.1.2.17 10.1.1.3 00:00:13 225.1.2.18 10.1.1.4 00:00:13 225.1.2.19 10.1.1.3
110.1.1.1 13.1.1.2 Rpf-Fail 110.1.1.1 13.1.1.2 Rpf-Fail 110.1.1.1 13.1.1.2 Rpf-Fail 110.1.1.1 13.1.1.2 Rpf-Fail 110.1.1.1 13.1.1.2 Rpf-Fail 110.1.1.1 13.1.1.2 Rpf-Fail 110.1.1.1 13.1.1.2 Rpf-Fail 110.1.1.1 13.1.1.2 Rpf-Fail 110.1.1.1 13.1.1.2 Rpf-Fail 110.1.1.1 13.1.1.2 Rpf-Fail 110.1.1.1 13.1.1.2 Rpf-Fail 110.1.1.1 13.1.1.2 Rpf-Fail 110.1.1.1 13.1.1.2 Rpf-Fail 110.1.1.1 13.1.1.2 Rpf-Fail 110.1.1.1 13.1.1.2 Rpf-Fail 110.1.1.1 13.1.1.2 Rpf-Fail 110.1.1.1 13.1.1.2 Rpf-Fail 110.1.1.1 13.1.1.2 Rpf-Fail
Multicast Source Discovery Protocol (MSDP) 937
36
Multiple Spanning Tree Protocol (MSTP)
Multiple spanning tree protocol (MSTP), as implemented by the Dell Networking operating system, conforms to IEEE 802.1s. This command supports the Dell Networking S4048�ON platform.
Topics:
� debug spanning-tree mstp � disable � forward-delay � hello-time � max-age � msti � name � protocol spanning-tree mstp � revision � show config � show spanning-tree mst configuration � show spanning-tree msti � spanning-tree � spanning-tree msti � tc-flush-standard
debug spanning-tree mstp
Enable debugging of the multiple spanning tree protocol and view information on the protocol.
Syntax Parameters
debug spanning-tree mstp [all | bpdu interface {in | out} | events] To disable debugging, enter no debug spanning-tree mstp
all
(OPTIONAL) Enter the keyword all to debug all spanning tree operations.
bpdu interface {in | out}
(OPTIONAL) Enter the keyword bpdu to debug bridge protocol data units (BPDU).
(OPTIONAL) Enter the interface keyword along with the type slot/port of the interface you want displayed. Type slot/port options are the following:
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
Optionally, enter an in or out parameter with the optional interface:
For Receive, enter the keyword in. For Transmit, enter the keyword out.
events
(OPTIONAL) Enter the keyword events to debug MSTP events.
Command Modes EXEC Privilege
938 Multiple Spanning Tree Protocol (MSTP)
Command History
Example
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.5.1.0 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Dell#debug spanning-tree mstp bpdu tengigabitethernet 2/1 ? in Receive (in) out Transmit (out)
disable
Globally disable the multiple spanning tree protocol on the switch.
Syntax
disable To enable MSTP, enter the no disable command.
Defaults
disabled.
Command Modes MULTIPLE SPANNING TREE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Multiple Spanning Tree Protocol (MSTP) 939
Related Commands
Version
7.6.1.0 7.5.1.0 6.5.1.0
Description
Introduced on the S-Series. Introduced on the C-Series. Introduced.
protocol spanning-tree mstp -- enters MULTIPLE SPANNING TREE mode.
forward-delay
The amount of time the interface waits in the Blocking State and the Learning State before transitioning to the Forwarding State.
Syntax Parameters
forward-delay seconds To return to the default setting, use the no forward-delay command.
seconds
Enter the number of seconds the interface waits in the Blocking State and the Learning State before transiting to the Forwarding State. The range is from 4 to 30. The default is 15 seconds.
Defaults
15 seconds
Command Modes MULTIPLE SPANNING TREE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced.
Related Commands
max-age -- changes the wait time before MSTP refreshes protocol configuration information. hello-time -- changes the time interval between bridge protocol data units (BPDUs).
940 Multiple Spanning Tree Protocol (MSTP)
hello-time
Set the time interval between generation of MSTB bridge protocol data units (BPDUs).
Syntax Parameters
hello-time seconds To return to the default value, use the no hello-time command.
seconds
Enter a number as the time interval between transmission of BPDUs. The range is from 1 to 10. The default is 2 seconds.
Defaults
2 seconds
Command Modes MULTIPLE SPANNING TREE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced.
Related Commands
forward-delay -- the amount of time the interface waits in the Blocking State and the Learning State before transitioning to the Forwarding State.
max-age -- changes the wait time before MSTP refreshes protocol configuration information.
max-age
To maintain configuration information before refreshing that information, set the time interval for the MSTB.
Syntax Parameters
max-age seconds To return to the default values, use the no max-age command.
max-age
Enter a number of seconds the Dell Networking OS waits before refreshing configuration information. The range is from 6 to 40. The default is 20 seconds.
Defaults
20 seconds
Command Modes MULTIPLE SPANNING TREE
Multiple Spanning Tree Protocol (MSTP) 941
Command History
Related Commands
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced.
forward-delay -- the amount of time the interface waits in the Blocking State and the Learning State before transitioning to the Forwarding State.
hello-time -- changes the time interval between BPDUs.
msti
Configure multiple spanning tree instance, bridge priority, and one or multiple VLANs mapped to the MST instance.
Syntax Parameters
msti instance {vlan range | bridge-priority priority}
To disable mapping or bridge priority, use the no msti instance {vlan range | bridgepriority priority} command.
msti instance vlan range
bridge-priority priority
Enter the MSTP instance. The range is from zero (0) to 63.
Enter the keyword vlan then the identifier range value. The range is from 1 to 4094.
Enter the keywords bridge-priority then a value in increments of 4096 as the bridge priority. The range is from zero (0) to 61440.
Valid priority values are: 0, 4096, 8192, 12288, 16384, 20480, 24576, 28672, 32768, 36864, 40960, 45056, 49152, 53248, 57344, and 61440. All other values are rejected.
Defaults
default bridge-priority is 32768.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
942 Multiple Spanning Tree Protocol (MSTP)
Usage Information
Version
9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.5.1.0
Description
Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced.
By default, all VLANs are mapped to MST instance zero (0) unless you use the vlan range command to map it to a non-zero instance.
name
The name you assign to the multiple spanning tree region.
Syntax Parameters
name region-name To remove the region name, use the no name command.
region-name
Enter the MST region name. The range is 32 character limit.
Defaults
no default name.
Command Modes MULTIPLE SPANNING TREE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced.
Usage Information
For two MSTP switches to be within the same MSTP region, the switches must share the same region name (including matching case).
Multiple Spanning Tree Protocol (MSTP) 943
Related Commands
msti -- maps the VLAN(s) to an MST instance. revision -- assigns the revision number to the MST configuration.
protocol spanning-tree mstp
To enable and configure the multiple spanning tree group, enter MULTIPLE SPANNING TREE mode.
Syntax
protocol spanning-tree mstp To disable the multiple spanning tree group, use the no protocol spanning-tree mstp command.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Example
MSTP is not enabled when you enter MULTIPLE SPANNING TREE mode. To enable MSTP globally on the switch, enter the no disable command while in MULTIPLE SPANNING TREE mode. For more information about the multiple spanning tree protocol, refer to the Dell Networking OS Configuration Guide.
Dell(conf)#protocol spanning-tree mstp Dell(config-mstp)#no disable
Related Commands
disable -- disables multiple spanning tree.
revision
The revision number for the multiple spanning tree configuration.
Syntax
revision range
944 Multiple Spanning Tree Protocol (MSTP)
Parameters
To return to the default values, use the no revision command.
range
Enter the revision number for the MST configuration. The range is from 0 to 65535. The default is 0.
Defaults
0
Command Modes MULTIPLE SPANNING TREE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
For two MSTP switches to be within the same MST region, the switches must share the same revision number.
msti -- maps the VLAN(s) to an MST instance. name -- assigns the region name to the MST region.
show config
View the current configuration for the mode. Only non-default values are shown.
Syntax
show config
Command Modes MULTIPLE SPANNING TREE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000.
Multiple Spanning Tree Protocol (MSTP) 945
Example
Version
8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.5.1.0
Description
Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Dell(conf-mstp)#show config ! protocol spanning-tree mstp
no disable name CustomerSvc revision 2 MSTI 10 VLAN 101-105 max-hops 5 Dell(conf-mstp)#
show spanning-tree mst configuration
View the multiple spanning tree configuration.
Syntax
show spanning-tree mst configuration
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Enable the multiple spanning tree protocol prior to using this command.
946 Multiple Spanning Tree Protocol (MSTP)
Example
Dell#show spanning-tree mst configuration MST region name: CustomerSvc Revision: 2 MSTI VID
10 101-105 Dell#
show spanning-tree msti
View the multiple spanning tree instance.
Syntax Parameters
show spanning-tree msti [instance-number [brief]] [guard]
instance-number (Optional) Enter the multiple spanning tree instance number. The range is from 0 to 63.
brief
(Optional) Enter the keyword brief to view a synopsis of the MST instance.
guard
(Optional) Enter the keyword guard to display the type of guard enabled on an MSTP interface and the current port state.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.4.2.1
8.3.7.0 7.6.1.0 7.5.1.0 6.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Support for the optional keyword guard was added on the C-Series, S-Series, and E-Series TeraScale. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Expanded to display the port error disable state (EDS) loopback BPDU inconsistency causes.
Usage Information
Example
Enable the multiple spanning tree protocol prior to using this command.
Dell#show spanning-tree msti 10 MSTI 10 VLANs mapped 101-105 Bridge Identifier has priority 32768, Address 0001.e802.3506 Configured hello time 2, max age 20, forward delay 15, max hops 5
Multiple Spanning Tree Protocol (MSTP) 947
Example (EDS and LBK)
Current root has priority 16384, Address 0001.e800.0a5c Number of topology changes 0, last change occurred 3058087 Port 82 (TenGigabitEthernet 2/1) is designated Forwarding Port path cost 0, Port priority 128, Port Identifier 128.82 Designated root has priority 16384, address 0001.e800.0a:5c Designated bridge has priority 32768, address 0001.e802.35:06 Designated port id is 128.82, designated path cost Number of transitions to forwarding state 1 BPDU (Mrecords): sent 1109, received 0 The port is not in the portfast mode Port 88 (TenGigabitEthernet 2/6) is root Forwarding Port path cost 0, Port priority 128, Port Identifier 128.88 Designated root has priority 16384, address 0001.e800.0a:5c Designated bridge has priority 16384, address 0001.e800.0a:5c Designated port id is 128.88, designated path cost Number of transitions to forwarding state 4 BPDU (Mrecords): sent 19, received 1103 The port is not in the portfast mode Port 89 (TenGigabitEthernet 2/7) is alternate Discarding Port path cost 0, Port priority 128, Port Identifier 128.89 Designated root has priority 16384, address 0001.e800.0a:5c Designated bridge has priority 16384, address 0001.e800.0a:5c Designated port id is 128.89, designated path cost Number of transitions to forwarding state 3 BPDU (Mrecords): sent 7, received 1103 The port is not in the portfast mode
The bold line shows the loopback BPDU inconsistency (LBK_INC).
Dell#show spanning-tree msti 0 brief MSTI 0 VLANs mapped 1-4094
Executing IEEE compatible Spanning Tree Protocol Root ID Priority 32768, Address 0001.e801.6aa8 Root Bridge hello time 2, max age 20, forward delay 15, max hops 20 Bridge ID Priority 32768, Address 0001.e801.6aa8 We are the root of MSTI 0 (CIST) Configured hello time 2, max age 20, forward delay 15, max hops 20 CIST regional root ID Priority 32768, Address 0001.e801.6aa8 CIST external path cost 0
Interface
Designated
Name
PortID Prio Cost Sts Cost Bridge ID
PortID
----------------------------------------------------------
Te 1/1 128.257 128 20000 EDS 0 32768 0001.e801.6aa8 128.257
Interface
Name Role PortID Prio Cost Sts Cost Link-type Edge Boundary
----------------------------------------------------------
Te 1/1 ErrDis 128.257 128 20000 EDS 0 P2P
No No
Dell#show spanning-tree msti 0 MSTI 0 VLANs mapped 1-4094
Root Identifier has priority 32768, Address 0001.e801.6aa8 Root Bridge hello time 2, max age 20, forward delay 15, max hops 20 Bridge Identifier has priority 32768, Address 0001.e801.6aa8 Configured hello time 2, max age 20, forward delay 15, max hops 20 We are the root of MSTI 0 (CIST) Current root has priority 32768, Address 0001.e801.6aa8 CIST regional root ID Priority 32768, Address 0001.e801.6aa8 CIST external path cost 0 Number of topology changes 1, last change occured 00:00:15 ago on Te 1/1
Port 257 (TenGigabitEthernet 1/1) is LBK_INC Discarding Port path cost 20000, Port priority 128, Port Identifier 128.257 Designated root has priority 32768, address 0001.e801.6aa8 Designated bridge has priority 32768, address 0001.e801.6aa8
948 Multiple Spanning Tree Protocol (MSTP)
Designated port id is 128.257, designated path cost 0 Number of transitions to forwarding state 1 BPDU (MRecords): sent 21, received 9 The port is not in the Edge port mode
Usage Information
The following describes the show spanning-tree msti 5 guard command shown in the following example.
Field
Description
Interface Name MSTP interface.
Instance
MSTP instance.
Sts
Port state: root-inconsistent (INCON Root), forwarding (FWD), listening (LIS),
blocking (BLK), or shut down (EDS Shut).
Guard Type
Type of STP guard configured (Root, Loop, or BPDU guard).
Example (Guard)
Dell#show spanning-tree msti 5 guard
Interface
Name
Instance Sts Guard
type
------------------------------------
Te 1/1 5
INCON(Root) Rootguard
Te 1/2 5
FWD
Loopguard
Te 1/3 5
EDS(Shut)
Bpduguard
spanning-tree
Enable the multiple spanning tree protocol on the interface.
Syntax Parameters
spanning-tree To disable the multiple spanning tree protocol on the interface, use the no spanning-tree command.
spanning-tree
Enter the keywords spanning-tree to enable the MSTP on the interface.
Defaults
Enable.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series.
Multiple Spanning Tree Protocol (MSTP) 949
Version
7.5.1.0 pre-6.2.1.0
Description
Introduced on the C-Series. Introduced on the E-Series.
spanning-tree msti
Configure multiple spanning tree instance cost and priority for an interface.
Syntax Parameters
spanning-tree msti instance {cost cost | priority priority}
msti instance cost cost
priority priority
Enter the keyword msti and the MST instance number. The range is from zero (0) to 63.
(OPTIONAL) Enter the keyword cost then the port cost value. The range is from 1 to 200000. The defaults are:
100 Mb/s Ethernet interface = 200000 1-Gigabit Ethernet interface = 20000 10-Gigabit Ethernet interface = 2000 Port Channel interface with one 100 Mb/s Ethernet = 200000 Port Channel interface with one 1 Gigabit Ethernet = 20000 Port Channel interface with one 10 Gigabit Ethernet = 2000 Port Channel with two 1 Gigabit Ethernet = 18000 Port Channel with two 10 Gigabit Ethernet = 1800 Port Channel with two 100 Mbps Ethernet = 180000
Enter keyword priority then a value in increments of 16 as the priority. The range is from 0 to 240. The default is 128.
Defaults
cost = depends on the interface type priority = 128
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
950 Multiple Spanning Tree Protocol (MSTP)
tc-flush-standard
Enable the MAC address flushing after receiving every topology change notification.
Syntax
tc-flush-standard To disable, use the no tc-flush-standard command.
Defaults
Disabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced
Usage Information
By default, Dell Networking OS implements an optimized flush mechanism for MSTP. This mechanism helps in flushing the MAC addresses only when necessary (and less often) allowing for faster convergence during topology changes. However, if a standards-based flush mechanism is needed, this knob command can be turned on to enable flushing MAC addresses after receiving every topology change notification.
Multiple Spanning Tree Protocol (MSTP) 951
37
Multicast
The multicast commands are supported by Dell Networking operating system (OS) on all S4048�ON platform.
Topics:
� IPv4 Multicast Commands
IPv4 Multicast Commands
The following section contains the IPv4 multicast commands.
clear ip mroute
Clear learned multicast routes on the multicast forwarding table. To clear the protocol-independent multicast (PIM) tree information base, use the clear ip pim tib command.
Syntax Parameters
clear ip mroute [vrf vrf-name] {group-address [source-address] | * | snooping}
vrf vrf-name
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to configure this setting on that VRF.
NOTE: Applies to specific VRF if input is provided, else applies to Default VRF.
group-address Enter the multicast group address and source address (if desired), in dotted [source-address] decimal format, to clear information on a specific group.
*
Enter * to clear all multicast routes.
snooping
Enter the keyword snooping to delete multicast snooping route table entries.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.2.(0.0) 9.0.2.0 8.3.19.0 8.3.7.0 7.8.1.0 E-Series legacy command
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Added support for keyword snooping on the Z9000, S4810, and S4820T. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the C-Series.
952 Multicast
Related Commands
show ip pim tib -- shows the PIM tree information base.
ip mroute
Assign a static mroute.
Syntax Parameters
ip mroute [vrf vrf-name] destination mask {ip-address | null 0| {{bgp| ospf} process-id | isis | rip | static} {ip-address | tag | null 0}} [distance]
To delete a specific static mroute, use the no ip mroute destination mask {ip-address | null 0| {{bgp| ospf} process-id | isis | rip | static} {ip-address | tag | null 0}} [distance] command.
To delete all mroutes matching a certain mroute, use the no ip mroute destination mask command.
vrf vrf-name
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to assign a static mroute to that VRF.
NOTE: Applies to specific VRF if input is provided, else applies to Default VRF.
destination
Enter the IP address in dotted decimal format of the destination device.
mask
Enter the mask in slash prefix formation ( /x ) or in dotted decimal format.
null 0
(OPTIONAL) Enter the keyword null then zero (0).
[protocol
(OPTIONAL) Enter one of the routing protocols:
[process-id | tag] ip-address]
Enter the BGP as-number then the IP address in dotted decimal format of the reverse path forwarding (RPF) neighbor. The range is from 1 to 65535.
Enter the OSPF process identification number then the IP address in dotted
decimal format of the RPF neighbor. the range is from 1 to 65535.
Enter the IS-IS alphanumeric tag string then the IP address in dotted decimal
format of the RPF neighbor.
Enter the RIP IP address in dotted decimal format of the RPF neighbor.
static ip-address (OPTIONAL) Enter the Static IP address in dotted decimal format of the RPF neighbor.
ip-address
(OPTIONAL) Enter the IP address in dotted decimal format of the RPF neighbor.
distance
(OPTIONAL) Enter a number as the distance metric assigned to the mroute. The range is from 0 to 255.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.0.2.0 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T.
Multicast 953
Related Commands
Version
8.3.7.0
E-Series legacy command
Description
Introduced on the S4810.
show ip mroute -- displays the routing table.
ip multicast-limit
To limit the number of multicast entries on the system, use this feature.
Syntax Parameters
ip multicast-limit [vrf vrf-name] limit
vrf vrf-name limit
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to limit the number of multicast on the VRF.
Enter the desired maximum number of multicast entries on the system. The SSeries range is from 1 to 16000.
Defaults
The S-Series default is 4000.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.7.0 7.8.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
This feature allows you to limit the number of multicast entries on the system. This number is the total of all the multicast entries on all line cards in the system. On each line card, the multicast module only installs the maximum number of entries, depending on the configured CAM profile.
To store multicast routes, use the IN-L3-McastFib CAM partition. It is a separate hardware limit that exists per port-pipe. This hardware space limitation can supersede any software-configured limit. The opposite is also true, the CAM partition might not be exhausted at the time the system-wide route limit set by the ip multicast-limit command is reached.
show ip igmp groups -- shows the IGMP groups.
954 Multicast
ip multicast-routing
Enable IP multicast forwarding.
Syntax
ip multicast-routing [vrf vrf-name] To disable multicast forwarding, use the no ip multicast-routing [vrf vrf-name] command.
Defaults
Disabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.1 E-Series legacy command
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Usage Information
Related Commands
After you enable multicast, you can enable IGMP and PIM on an interface. In INTERFACE mode, enter the ip pim sparse-mode command to enable IGMP and PIM on the interface.
ip pim sparse-mode -- enables IGMP and PIM on an interface.
show ip mroute
View the multicast routing table.
Syntax Parameters
show ip mroute [vrf vrf-name] [static | group-address [source-address] | count | snooping [vlan vlan-idIntroduced on the S6000-ON.] [group-address [source-address]] | summary | vlt [group-address [source-address] | count]
vrf vrf-name
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to configure this setting on that VRF.
NOTE: Applies to specific VRF if input is provided, else applies to Default VRF.
static
(OPTIONAL) Enter the keyword static to view static multicast routes.
group-address (OPTIONAL) Enter the multicast group-address to view only routes associated with [source-address] that group. Enter the source-address to view routes with that group-address and
source-address.
count
(OPTIONAL) Enter the keyword count to view the number of multicast routes and packets.
snooping [vlan Enter the keyword snooping to display information on the multicast routes PIMvlan-id] [group- SM snooping discovers.
Multicast 955
address [sourceaddress]]
Enter a VLAN ID to limit the information displayed to the multicast routes PIM-SM snooping discovers on a specified VLAN. The VLAN ID range is from 1 to 4094.
Enter a multicast group address and, optionally, a source multicast address in dotted decimal format (A.B.C.D) to limit the information displayed to the multicast routes PIM-SM snooping discovers for a specified multicast group and source.
summary vlt
(OPTIONAL) Enter the keyword summary to view a summary of all routes.
(OPTIONAL) Enter the keyword vlt to view multicast routes with a spanned incoming interface. Enter a multicast group address in dotted decimal format (A.B.C.D) to limit the information displayed to the multicast routes for a specified multicast group and optionally a source multicast address in dotted decimal format (A.B.C.D) to limit the information displayed for a specified multicast source. Enter the keyword count to display the total number of multicast routes with the spanned IIF.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.0.2.0 9.2.(0.0) 8.4.1.1
8.3.19.0 8.3.7.0 7.6.1.0 7.5.1.0 E-Series legacy command
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Added support for keyword vlt to the Z9000, S4810, and S4820T. Support for the keyword snooping and the optional vlan vlan-id, groupaddress, and source-address parameters were added on E-Series ExaScale. Introduced on the S4820T. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Example (Static)
Dell#show ip mroute static Mroute: 23.23.23.0/24, interface: Lo 2 Protocol: static, distance: 0, route-map: none, last change: 00:00:23
Example (Snooping)
Dell#show ip mroute snooping IPv4 Multicast Snooping Table (*, 224.0.0.0), uptime 17:46:23
Incoming vlan: Vlan 2 Outgoing interface list:
TenGigabitEthernet 4/13 (*, 225.1.2.1), uptime 00:04:16
Incoming vlan: Vlan 2 Outgoing interface list:
TenGigabitEthernet 4/11
956 Multicast
Example (VLT)
Usage Information
Example
TenGigabitEthernet 4/13 (165.87.1.7, 225.1.2.1), uptime 00:03:17
Incoming vlan: Vlan 2 Outgoing interface list:
TenGigabitEthernet 4/11 TenGigabitEthernet 4/13 TenGigabitEthernet 4/20
Dell#show ip mroute vlt IP Multicast Routing Table Flags: S � Synced (*, 225.1.1.1), uptime 00:39:33 flags: S Incoming interface: Vlan 10 Spanned outgoing interface list:
Vlan 20 (S) Vlan 30 (50.1.1.2, 225.1.1.1), uptime 00:39:33 flags: S Incoming interface: Vlan 10 Spanned outgoing interface list: Vlan 20 (S)
The following describes the show ip mroute command shown in the following example.
Field
Description
(S, G)
Displays the forwarding entry in the multicast route table.
uptime
Incoming interface
Displays the amount of time the entry has been in the multicast forwarding table.
Displays the reverse path forwarding (RPF) information towards the source for (S,G) entries and the RP for (*,G) entries.
Outgoing interface list:
Lists the interfaces that meet one of the following:
a directly connected member of the Group statically configured member of the Group received a (*,G) or (S,G) Join message
Dell#show ip mroute IP Multicast Routing Table (*, 224.10.10.1), uptime 00:05:12
Incoming interface: TenGigabitEthernet 3/12 Outgoing interface list:
TenGigabitEthernet 3/13 (1.13.1.100, 224.10.10.1), uptime 00:04:03
Incoming interface: TenGigabitEthernet 3/4 Outgoing interface list:
TenGigabitEthernet 3/12 TenGigabitEthernet 3/13 (*, 224.20.20.1), uptime 00:05:12 Incoming interface: TenGigabitEthernet 3/12 Outgoing interface list: TenGigabitEthernet 3/4
Multicast 957
show ip rpf
View reverse path forwarding.
Syntax
show ip rpf
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.1 E-Series legacy command
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Usage Information
Network administrators use static mroutes to control the reach-ability of the multicast sources. If a PIMregistered multicast source is reachable using static mroute as well as unicast route, the distance of each route is examined and the route with shorter distance is the one the PIM selects for reach-ability.
NOTE: The default distance of mroutes is zero (0) and is CLI configurable on a per route basis.
Example
Dell#show ip rpf RPF information for 10.10.10.9
RPF interface: Te 3/4 RPF neighbor: 165.87.31.4 RPF route/mask: 10.10.10.9/255.255.255.255 RPF type: unicast
958 Multicast
38
Neighbor Discovery Protocol (NDP)
The neighbor discovery protocol for IPv6 is defined in RFC 2461 as part of the Stateless Address Autoconfiguration protocol. It replaces the Address Resolution Protocol used with IPv4. NDP defines mechanisms for solving the following problems: Router discovery: Hosts can locate routers residing on a link Prefix discovery: Hosts can discover address prefixes for the link Parameter discovery Address autoconfiguration -- configuration of addresses for an interface Address resolution -- mapping from IP address to link-layer address Next-hop determination Neighbor unreachability detection (NUD): Determine that a neighbor is no longer reachable on the link. Duplicate address detection (DAD): Allow a node to check whether a proposed address is already in use. Redirect: The router can inform a node about a better first-hop. NDP uses the following five ICMPv6 packet types in its implementation: Router Solicitation Router Advertisement Neighbor Solicitation Neighbor Advertisement Redirect
Topics:
� clear ipv6 neighbors � ipv6 neighbor � show ipv6 neighbors � IPv6 Router Advertisement (RA) Guard
clear ipv6 neighbors
Delete all entries in the IPv6 neighbor discovery cache or neighbors of a specific interface. Static entries are not removed using this command.
Syntax Parameters
clear ipv6 neighbors [ipv6-address | interface]
ipv6-address
Enter the IPv6 address of the neighbor in the x:x:x:x::x format to remove a specific IPv6 neighbor.
NOTE: The :: notation specifies successive hexadecimal fields of zero.
interface interface
To remove all neighbor entries learned on a specific interface, enter the keyword interface then the interface type and slot/port or number information of the interface:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Neighbor Discovery Protocol (NDP) 959
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 8.3.19.0 8.3.11.1 8.3.7.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
ipv6 neighbor
Configure a static entry in the IPv6 neighbor discovery.
Syntax Parameters
ipv6 neighbor [vrf vrf-name] {ipv6-address} {interface interface} {hardware_address}
To remove a static IPv6 entry from the IPv6 neighbor discovery, use the no ipv6 neighbor [vrf vrf-name] {ipv6-address} {interface interface} command.
vrf vrf-name ipv6-address
(Optional) Enter the keyword vrf followed by the name of the VRF to install IPv6 routes in that VRF.
Enter the IPv6 address of the neighbor in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zero.
interface interface
Enter the keyword interface then the interface type and slot/port or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For a port channel interface, enter the keywords port-channel then a number.
For a Null interface, enter the keyword null then the Null interface number.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094. For a tunnel interface, enter the keyword tunnel then the tunnel interface
number. The range is from 1 to 16383.
hardware_addres Enter a 48-bit hardware MAC address in nn:nn:nn:nn:nn:nn format. s
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
960 Neighbor Discovery Protocol (NDP)
Usage Information
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.7.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Neighbor Discovery Protocol for IPv6 is defined in RFC 2461 as part of the Stateless Address Autoconfiguration protocol. It replaces the Address Resolution Protocol used with IPv4. It defines mechanisms for solving problems, such as:
Router discovery: Hosts can locate routers residing on a link. Prefix discovery: Hosts can discover address prefixes for the link. Parameter discovery . Address autoconfiguration -- configuration of addresses for an interface . Address resolution -- mapping from IP address to link-layer address. Next-hop determination. Neighbor Unreachability Detection (NUD): Determine that a neighbor is no longer reachable on the
link. Duplicate Address Detection (DAD): Allow a node to check whether a proposed address is already in
use. Redirect: The router can inform a node about a better first-hop.
Use the ipv6 neighbor command to manually configure the IPv6 address of a neighbor to be discovered by the switch.
show ipv6 neighbors
Display IPv6 discovery information. Entering the command without options shows all IPv6 neighbor addresses stored on the control processor (CP).
Syntax Parameters
show ipv6 neighbors [vrf vrf-name] [ipv6-address| interface interface]
vrf vrf-name
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to display the neighbors corresponding to that VRF.
NOTE: If you do not specify this option, neighbors corresponding to the
default VRF are displayed.
ipv6-address
Enter the IPv6 address of the neighbor in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zero.
interface interface
Enter the keyword interface then the interface type and slot/port or number information:
For a port channel interface, enter the keywords port-channel then a number.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Neighbor Discovery Protocol (NDP) 961
For a Management interface, enter the keyword managementethernet followed by slot/port numbers. The port is 0.
For a Port Channel interface, enter the keywords port-channel followed by a number from 1 to 128.
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.0.0.0 8.3.19.0 8.3.11.1 8.3.7.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the Z9000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Example
Dell# show ipv6 neighbors
IPv6 Address
Expires(min) Hardware Address State Interface VLAN CPU
----------------------------------------------------------------------
100::1
0.03 00:00:00:00:00:22 DELAY Te 1/12 - CP
fe80::200:ff:fe00:22
232 00:00:00:00:00:22 STALE Te 1/12 - CP
500::1
0.60 00:01:e8:17:5c:af REACH Te 1/13 - CP
fe80::200:ff:fe00:17
232 00:00:00:00:00:29 REACH Te 1/14 - CP
900::1
0.60 00:01:e8:17:5c:b1 STALE Po 23 - CP
400::1
0.60 00:01:e8:17:5c:ae REACH Te 1/2 Vl 100 CP
Dell#
IPv6 Router Advertisement (RA) Guard
The IPv6 RA guard provides support to perform conditional forwarding or blocking of the router advertisement messages that are received at the network device platform. This functionality analyzes and filters the RAs sent by the devices and compares the configuration information on the layer 2 device with the RA frame. Once the layer 2 device validates the content of the RA frame against the configuration, it forwards the RA to its unicast or multicast destination. On failure to validate the RA frame content, the RA frame is dropped.
The IPv6 RA guard supports two different modes:
Host mode -- When a policy with device role as host is applied on an interface, all the RA packets are dropped without validation. You can also configure the host mode policy with VLAN option to drop the RA packets on that specific VLAN and port.
Router mode -- When a policy with device role as router is applied on an interface, all the RA packets are validated based on the configuration information in the policy. Similarly, you can also apply this mode over any specific VLAN and the validation is performed only for that particular VLAN RA packets.
To configure the IPv6 RA guard, use the following Dell Networking OS commands.
962 Neighbor Discovery Protocol (NDP)
debug ipv6 nd ra-guard
Enable debugging for IPv6 RA guard snooping information.
Syntax Parameters
debug ipv6 nd ra-guard [interface_type slot/port | count value]
interface_type slot/port
Enter the one of the following interfaces and slot/port information:
For a port channel interface, enter the keywords port-channel then a number.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
count value
Enter the keyword count then the number of debug outputs. The range is from 1 to 65534. The default is infinity.
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.9(0.0) 9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the Z9500.
Introduced on the S4048-ON.
Introduced on the S3048-ON.
Introduced on the S4810, S4820T, S5000, S6000, S6000�ON, and Z9000 switches.
device-role
Specify the role of the device attached to the port.
Syntax
device-role {host | router} To reset the device role, use the no device-role {host | router} command.
Parameters
host router
Enter the keyword host to set the device-role as host. Enter the keyword router to set the device-role as router.
Defaults
none
Command Modes POLICY LIST CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.9(0.0) 9.8(0.0P5) 9.8(0.0P2)
Introduced on the Z9500. Introduced on the S4048-ON. Introduced on the S3048-ON.
Neighbor Discovery Protocol (NDP) 963
Related Commands
Version
9.7(0.0)
Description
Introduced on the S4810, S4820T, S5000, S6000, S6000�ON, and Z9000 switches.
ipv6 nd raguard policy policy-name -- Defines the RA guard policy name and enter the RA guard policy configuration mode.
ipv6 nd ra-guard enable -- Allows you to configure the RA guard related commands.
hop-limit
Enable the verification of the advertised hop count limit. If this command is not configured, the verification process is bypassed.
Syntax
hop-limit {maximum | minimum limit} To reset the hop count limit, use the no hop-limit {maximum | minimum limit} command.
Parameters
maximum limit minimum limit
Enter the keyword maximum then the hop limit value. The range is from 0 to 254. Enter the keyword minimum then the hop limit value. The range is from 0 to 254.
Defaults
none
Command Modes POLICY LIST CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.9(0.0) 9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the Z9500.
Introduced on the S4048-ON.
Introduced on the S3048-ON.
Introduced on the S4810, S4820T, S5000, S6000, S6000�ON, and Z9000 switches.
Related Commands
ipv6 nd ra-guard enable--Allows you to configure the RA guard related commands.
ipv6 nd raguard policy policy-name -- Defines the RA guard policy name and enter the RA guard policy configuration mode.
ipv6 nd ra-guard attach-policy
Apply the IPv6 RA guard to a specific interface.
Syntax Parameters
ipv6 nd ra-guard attach--policy policy-name [vlan [vlan 1, vlan 2, vlan 3.....]]
policy policyname
vlan [vlan 1, vlan 2, vlan 3........]
Enter the keyword policy then the policy name. The policy-name allows a maximum of 140 characters.
Enter the keyword vlan then the VLAN range. The VLAN range is from 1 to 4094.
Defaults
none
Command Modes INTERFACE
964 Neighbor Discovery Protocol (NDP)
Command History
Related Commands
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.9(0.0) 9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the Z9500.
Introduced on the S4048-ON.
Introduced on the S3048-ON.
Introduced on the S4810, S4820T, S5000, S6000, S6000�ON, and Z9000 switches.
show ipv6 nd ra-guard policy -- Displays the configuration applied on all the RA guard policies or a specific RA guard policy.
ipv6 nd ra-guard enable
Allow you to configure the RA guard related commands.
Syntax
ipv6 nd ra-guard enable To disable the RA guard, use the no ipv6 nd ra-guard enable command.
Defaults
Disabled
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.9(0.0) 9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the Z9500.
Introduced on the S4048-ON.
Introduced on the S3048-ON.
Introduced on the S4810, S4820T, S5000, S6000, S6000�ON, and Z9000 switches.
ipv6 nd ra-guard policy
Define the RA guard policy name and enter the RA guard policy list configuration mode.
Syntax
ipv6 nd ra-guard policy policy-name
Parameters
policy policyname
Enter the keyword policy then the policy-name. The policy name allows a maximum of 140 characters.
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.9(0.0)
Introduced on the Z9500.
Neighbor Discovery Protocol (NDP) 965
Related Commands
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Description
Introduced on the S4048-ON.
Introduced on the S3048-ON.
Introduced on the S4810, S4820T, S5000, S6000, S6000�ON, and Z9000 switches.
ipv6 nd ra-guard enable -- Allows you to configure the RA guard related commands.
managed-config-flag
Set the managed address configuration flag.
Syntax
managed-config-flag {on | off} To clear the flag, use the no managed-config-flag {on | off} command.
Parameters
on
off
Enter the keyword on to set the managed-config-flag value as ON. Enter the keyword off to set the managed-config flag value as OFF.
Defaults
none
Command Modes POLICY LIST CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S4810, S4820T, S5000, S6000, and Z9000 switches.
Related Commands
ipv6 nd ra-guard enable -- Allows you to configure the RA guard related commands.
ipv6 nd raguard policy policy-name -- Defines the router advertisement (RA) guard policy name and enter the RA guard policy configuration mode.
match ra
Enable verifying either of the configured source IPv6 address or prefix address or the source MAC address in the inspected messages. If this command is not configured, the verification process is bypassed.
Syntax
match ra {ipv6-access-list name | ipv6-prefix-list name | mac-access-list name}
To reset the access list, use the no match ra{ipv6-access-list | ipv6-prefix-list | mac-access-list}command.
Parameters
ipv6�access-list name
ipv6�prefix-list name
Enter the keywords ipv6�access-list then the access-list name. The accesslist name allows a maximum of 140 characters.
Enter the keywords ipv6�prefix-list then the prefix-list name. The prefix-list name allows a maximum of 140 characters.
966 Neighbor Discovery Protocol (NDP)
ipv6�mac-
Enter the keywords ipv6�mac-access-list then the mac-access-list name.
access-list name The mac-access-list name allows a maximum of 140 characters.
Defaults
none
Command Modes POLICY LIST CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.9(0.0) 9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.7(0.0)
Introduced on the Z9500. Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the S4810, S4820T, S5000, S6000, and Z9000 switches.
Related Commands
ipv6 nd ra-guard enable -- Allows you to configure the RA guard related commands.
ipv6 nd raguard policy policy-name -- Defines the RA guard policy name and enter the RA guard policy configuration mode.
mtu
Enable the verification of the configured maximum transmission unit (MTU) value in the received RA packets.
Syntax
mtu value To reset the MTU value, use the no mtu value command.
Parameters
value
Enter the maximum transmission unit value in bytes. The range is from 1,280 to 11,982 bytes.
Defaults
0
Command Modes POLICY LIST CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.9(0.0) 9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.7(0.0)
Introduced on the Z9500. Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the S4810, S4820T, S5000, S6000, and Z9000 switches.
Related Commands
ipv6 nd ra-guard enable -- Allows you to configure the RA guard related commands.
ipv6 nd raguard policy policy-name -- Defines the RA guard policy name and enter the RA guard policy configuration mode.
Neighbor Discovery Protocol (NDP) 967
other-config-flag
Enable the verification of the advertised other configuration parameter. If this command is not configured, the verification process is bypassed.
Syntax
other-config-flag {on | off}
To reset the other configuration parameter, use the no other-config-flag {on | off} command.
Parameters
on
off
Enter the keyword on to set the other-config-flag value as ON. Enter the keyword off to set the other-config flag value as OFF.
Defaults
none
Command Modes POLICY LIST CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.9(0.0) 9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.7(0.0)
Introduced on the Z9500. Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the S4810, S4820T, S5000, S6000, and Z9000 switches.
Related Commands
ipv6 nd ra-guard enable -- Allows you to configure the RA guard related commands.
ipv6 nd raguard policy policy-name -- Defines the router advertisement (RA) guard policy name and enter the RA guard policy configuration mode.
reachable-time
Enable the verification of the configured reachability time in the received RA packets.
Syntax
reachable--time value To reset the advertised reachability time, use the no reachable-timevalue command.
Parameters
value
Enter the advertised reachability time in milliseconds. The range is from 0 to 3,600,000 milliseconds.
Defaults
none
Command Modes POLICY LIST CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.9(0.0) 9.8(0.0P5) 9.8(0.0P2)
Introduced on the Z9500. Introduced on the S4048-ON. Introduced on the S3048-ON.
968 Neighbor Discovery Protocol (NDP)
Related Commands
Version
9.7(0.0)
Description
Introduced on the S4810, S4820T, S5000, S6000, S6000�ON, and Z9000 switches.
ipv6 nd ra-guard enable -- Allows you to configure the RA guard related commands.
ipv6 nd raguard policy policy-name -- Defines the RA guard policy name and enter the RA guard policy configuration mode.
retrans-time
Enable the verification of the configured retransmission timer value in the received RA packets.
Syntax
retrans--timer value To reset the advertised retransmission interval, use the no retrans-timervalue command.
Parameters
value
Enter the advertised retransmission time interval in milliseconds. The range is from 100 to 4,294,967,295 milliseconds.
Defaults
none
Command Modes POLICY LIST CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.9(0.0) 9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the Z9500.
Introduced on the S4048-ON.
Introduced on the S3048-ON.
Introduced on the S4810, S4820T, S5000, S6000, S6000�ON, and Z9000 switches.
Related Commands
ipv6 nd raguard policy policy-name -- Defines the router advertisement (RA) guard policy name and enter the RA guard policy configuration mode.
ipv6 nd ra-guard enable -- Allows you to configure the RA guard related commands.
router-lifetime
Set the router lifetime.
Syntax Parameters
router--lifetime value
value
Enter the router lifetime in seconds. The range is from 0 to 9,000 seconds.
Defaults
none
Command Modes POLICY LIST CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.9(0.0)
Introduced on the Z9500.
Neighbor Discovery Protocol (NDP) 969
Related Commands
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Description
Introduced on the S4048-ON.
Introduced on the S3048-ON.
Introduced on the S4810, S4820T, S5000, S6000, S6000�ON, and Z9000 switches.
ipv6 nd ra-guard enable -- Allows you to configure the RA guard related commands.
ipv6 nd raguard policy policy-name -- Defines the router advertisement (RA) guard policy name and enter the RA guard policy configuration mode.
router-preference maximum
Enable the verification of the advertised default router preference (DRP) value. The preference value is lower than or equal to the specified limit. If this command is not configured, the verification process is bypassed.
Syntax
router-preference maximum {high | low | medium}
To reset the default router preference value, use the no router-preference maximum {high | low | medium} command.
Parameters
high low medium
Enter the keyword high to set the DRP value as high. Enter the keyword low to set the DRP value as low. Enter the keyword medium to set the DRP value as medium.
Defaults
none
Command Modes POLICY LIST CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.9(0.0) 9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the Z9500.
Introduced on the S4048-ON.
Introduced on the S3048-ON.
Introduced on the S4810, S4820T, S5000, S6000, S6000-ON, and Z9000 switches.
Related Commands
ipv6 nd ra-guard enable -- Allow you to configure the RA guard related commands.
ipv6 nd raguard policy policy-name -- Defines the router advertisement (RA) guard policy name and enter the RA guard policy configuration mode.
show config
Display the RA guard policy mode configurations.
Syntax
show config
Command Modes POLICY LIST CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
970 Neighbor Discovery Protocol (NDP)
Example
Related Commands
Version
9.9(0.0) 9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Description
Introduced on the Z9500. Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4810, S4820T, S5000, S6000, S6000�ON, and Z9000 switches.
Dell(conf)#ipv6 nd ra-guard policy test Dell(conf-ra_guard_policy_list)#show config ! ipv6 nd ra-guard policy test
device-role router hop-limit maximum 251 mtu 1350 other-config-flag on reachable-time 540 retrans-timer 101 router-preference maximum medium trusted-port Dell(conf-ra_guard_policy_list)#
ipv6 nd ra-guard enable -- Allows you to configure the RA guard related commands. ipv6 nd ra-guard policy -- Defines the RA guard policy name and enter the RA guard policy list
configuration mode. device-role -- Specifies the role of the device attached to the port. hop-limit -- Enables the verification of the advertised hop count limit. mtu -- Sets the maximum transmission unit (MTU) value. other-config-flag -- Enables the verification of the advertised other configuration parameter. reachable-time -- Sets the advertised reachability time. retrans-timer -- Sets the advertised retransmission time. router-preference maximum -- Enables the verification of the advertised default router preference
(DRP) value. trusted-port -- Applies the policy to trusted ports.
show ipv6 nd ra-guard policy
Display the configurations applied on all the RA guard policies or a specific RA guard policy.
Syntax Parameter
show ipv6 nd ra-guard policy policy-name
policy policyname
Enter the keyword policy then the policy name. The policy name allows a maximum of 140 characters.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.9(0.0) 9.8(0.0P5)
Introduced on the Z9500. Introduced on the S4048-ON.
Neighbor Discovery Protocol (NDP) 971
Example
Related Commands
Version
9.8(0.0P2) 9.7(0.0)
Description
Introduced on the S3048-ON.
Introduced on the S4810, S4820T, S5000, S6000, Introduced on the S6000�ON, and Z9000 switches.
Dell#show ipv6 nd ra-guard policy test
ipv6 nd ra-guard policy test
device-role router
hop-limit maximum
1
match ra ipv6-access-list access
other-config-flag on
router-preference maximum medium
trusted-port
Interfaces :
Te 1/1
Dell#
ipv6 nd ra-guard enable -- Allows you to configure the RA guard related commands. ipv6 nd ra-guard policy -- Defines the RA guard policy name and enter the RA guard policy list
configuration mode.
device-role -- Specifies the role of the device attached to the port.
hop-limit -- Enables the verification of the advertised hop count limit.
mtu -- Sets the maximum transmission unit (MTU) value.
other-config-flag -- Enables the verification of the advertised other configuration parameter.
reachable-time -- Sets the advertised reachability time.
retrans-timer -- Sets the advertised retransmission time.
router-preference maximum -- Enables the verification of the advertised default router preference (DRP) value.
trusted-port -- Applies the policy to trusted ports.
ipv6 nd raguard attach-policy -- Applies the IPv6 RA guard to a specific interface.
trusted-port
Allow bypassing the configured RA guard validation and forwards the RA packets received on the interface, which has the trusted port policy attached.
Syntax
trusted-port To reset the policy applied to the trusted port, use the no trusted-port command.
Defaults
none
Command Modes POLICY LIST CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.9(0.0) 9.8(0.0P5) 9.8(0.0P2)
Introduced on the Z9500. Introduced on the S4048-ON. Introduced on the S3048-ON.
972 Neighbor Discovery Protocol (NDP)
Usage Information
Related Commands
Version
9.7(0.0)
Description
Introduced on the S4810, S4820T, S5000, S6000, S6000�ON, and Z9000 switches.
Use this command to disable all the RA guard policies.
ipv6 nd ra-guard enable -- Allows you to configure the RA guard related commands.
ipv6 nd raguard policy policy-name -- Defines the router advertisement (RA) guard policy name and enter the RA guard policy configuration mode.
Neighbor Discovery Protocol (NDP) 973
39
Object Tracking
Object Tracking supports IPv4 and IPv6, and is available on the Dell Networking platforms.
Object tracking allows you to define objects of interest, monitor their state, and report to a client when a change in an object's state occurs. The following tracked objects are supported:
Link status of Layer 2 interfaces Routing status of Layer 3 interfaces (IPv4 and IPv6) Reachability of IPv4 and IPv6 routes Metric thresholds of IPv4 and IPv6 routes
You can configure client applications, such virtual router redundancy protocol (VRRP), to receive a notification when the state of a tracked object changes.
Topics:
� IPv4 Object Tracking Commands � IPv6 Object Tracking Commands
IPv4 Object Tracking Commands
The following section describes the IPv4 VRRP commands.
debug track
Enables debugging for tracked objects.
Syntax Parameters
debug track [all | notifications | object-id]
all notifications object-id
Enables debugging on the state and notifications of all tracked objects.
Enables debugging on the notifications of all tracked objects.
Enables debugging on the state and notifications of the specified tracked object. The range is 1 to 500.
Defaults
Enable debugging on the state and notifications of all tracked objects (debug track all).
Command Modes EXEC EXEC Privilege
Command History
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 8.3.12.0 8.4.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S4810. Introduced.
Example
Dell#debug track all
974 Object Tracking
04:35:04: %RPM0-P:RP2 %OTM-5-STATE: track 6 - Interface TenGigabitEthernet 1/2 line-protocol DOWN 04:35:04: %RPM0-P:RP2 %OTM-5-NOTIF: VRRP notification: resource ID 6 DOWN
delay
Configure the time delay used before communicating a change in the status of a tracked object to clients.
Syntax
delay {[up seconds] [down seconds]} To return to the default setting, use the no delay command.
Parameters
seconds
Enter the number of seconds the object tracker waits before sending a notification about the change in the UP and/or DOWN state of a tracked object to clients. The range is 0 to 180. The default is 0 seconds.
Defaults
0 seconds
Command Modes OBJECT TRACKING (conf_track_object-id)
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000-ON.
8.3.12.0
Introduced on the S4810.
8.4.1.0
Introduced.
Usage Information
Related Commands
You can configure an UP and/or DOWN timer for each tracked object to set the time delay before a change in the state of a tracked object is communicated to clients. The configured time delay starts when the state changes from UP to DOWN or vice-versa.
If the state of an object changes back to its former UP/DOWN state before the timer expires, the timer is cancelled and the client is not notified. For example, if the DOWN timer is running when an interface goes down and comes back up, the DOWN timer is cancelled and the client is not notified of the event.
If the timer expires and an object's state has changed, a notification is sent to the client. If no delay is configured, a notification is sent immediately after a change in the state of a tracked object is detected. The time delay in communicating a state change is specified in seconds.
track interface ip routing � configures object tracking on the routing status of an IPv4 Layer 3 interface.
track interface line-protocol � configures object tracking on the line-protocol state of a Layer 2 interface.
track ip route metric threshold � configures object tracking on the threshold of an IPv4 route metric. track ip route reachability � configures object tracking on the reachability of an IPv4 route.
description
Enter a description of a tracked object.
Syntax
description {text} To remove the description, use the no description {text} command.
Parameters
text
Enter a description to identify a tracked object (80 characters maximum).
Defaults
none
Object Tracking 975
Command Modes OBJECT TRACKING (conf_track_object-id)
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000-ON.
8.3.12.0
Introduced on the S4810.
8.4.1.0
Introduced.
Related Commands
track interface ip routing � configures object tracking on the routing status of an IPv4 Layer 3 interface.
track interface line-protocol � configures object tracking on the line-protocol state of a Layer 2 interface.
track ip route metric threshold � configures object tracking on the threshold of an IPv4 route metric.
track ip route reachability � configures object tracking on the reachability of an IPv4 route.
show running-config track
Display the current configuration of tracked objects.
Syntax Parameters
show running-config track [object-id]
object-id
(OPTIONAL) Display information on the specified tracked object. The range is 1 to 500.
Command Modes EXEC Privilege
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
8.3.12.0
8.4.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S4810. Introduced.
Example
Dell#show running-config track track 1 ip route 23.0.0.0/8 reachability track 2 ipv6 route 2040::/64 metric threshold delay down 3 delay up 5 threshold metric up 200 track 3 ipv6 route 2050::/64 reachability track 4 interface TenGigabitEthernet 1/2 ip routing track 5 ip route 192.168.0.0/24 reachability vrf red track resolution ip route isis 20 track resolution ip route ospf 10
Example (Objectid)
Dell#show running-config track 300 track 300 ip route 10.0.0.0/8 metric threshold
delay down 3
976 Object Tracking
Related Commands
delay up 5 threshold metric up 100
show track � displays information about tracked objects, including configuration, current state, and clients which track the object.
track interface ip routing � configures object tracking on the routing status of an IPv4 Layer 3 interface.
track interface line-protocol � configures object tracking on the line-protocol state of a Layer 2 interface.
track ip route metric threshold � configures object tracking on the threshold of an IPv4 route metric. track ip route reachability � configures object tracking on the reachability of an IPv4 route.
show track
Display information about tracked objects, including configuration, current tracked state (UP or DOWN), and the clients which are tracking an object.
Syntax Parameters
show track [object-id [brief] | interface [brief] [vrf vrf-name] | ip route [brief] [vrf vrf-name] | resolution | vrf vrf-name [brief] | brief]
object-id interface ip route resolution brief vrf vrf-name
(OPTIONAL) Display information on the specified tracked object. The range is 1 to 500.
(OPTIONAL) Display information on all tracked interfaces (Layer 2 and IPv4 Layer 3).
(OPTIONAL) Display information on all tracked IPv4 routes.
(OPTIONAL) Display information on the configured resolution values used to scale protocol-specific route metrics. The range is 0 to 255.
(OPTIONAL) Display a single line summary of the tracking information for a specified object, object type, or all tracked objects.
(OPTIONAL) E-Series only: Display information on only the tracked objects that are members of the specified VRF instance. The maximum is 32 characters. If you do not enter a VRF name, information on the tracked objects from all VRFs displays.
Command Modes EXEC Privilege
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
8.3.12.0
8.4.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S4810. Introduced.
Usage Information
The following describes the show track command shown in the Example below.
Output
Description
Track object-id Displays the number of the tracked object.
Interface type slot/port, IP route ip-address, IPv6 route ipv6address
Displays the interface type and slot/port number or address of the IPv4/IPv6 route that is being tracked.
object is Up/ Down
Up/Down state of tracked object; for example, IPv4 interface, reachability or metric threshold of an IP route.
Object Tracking 977
Example
Output
Description
number changes, Number of times that the state of the tracked object has changed and the time last change time since the last change in hours:minutes:seconds.
First hop interface
Displays the type and slot/port number of the first-hop interface of the tracked route.
Tracked by
Client that is tracking an object's state; for example, VRRP.
Dell#show track Track 1
IP route 23.0.0.0/8 reachability Reachability is Down (route not in route table)
2 changes, last change 00:16:08 Tracked by: Track 2 IPv6 route 2040::/64 metric threshold Metric threshold is Up (STATIC/0/0)
5 changes, last change 00:02:16 Metric threshold down 255 up 254 First-hop interface is TenGigabitEthernet 1/2 Tracked by:
VRRP TenGigabitEthernet 2/3 IPv6 VRID 1 Track 3
IPv6 route 2050::/64 reachability Reachability is Up (STATIC)
5 changes, last change 00:02:16 First-hop interface is TenGigabitEthernet 1/2 Tracked by:
VRRP TenGigabitEthernet 2/3 IPv6 VRID 1
Usage Information
The following describes the show track brief command shown in the Example below.
Output
Description
ResID
Number of the tracked object.
Resource Parameter
Type of tracked object. Detailed description of the tracked object.
State
Up or Down state of the tracked object.
Last Change
Time since the last change in the state of the tracked object.
Example (Brief)
Dell>show track brief
ResId Resource
Parameter State LastChange
1
IP route reachability 10.16.0.0/16 Up 00:01:08
2
Interface line-protocol Ethernet0/2 Down 00:05:00
3
Interface ip routing
VLAN100
Up 01:10:05
Related Commands
show running-config track � displays configuration information about tracked objects. track interface ip routing � configures object tracking on the routing status of an IPv4 Layer 3
interface. track interface line-protocol � configures object tracking on the line-protocol state of a Layer 2
interface. track ip route metric threshold � configures object tracking on the threshold of an IPv4 route metric. track ip route reachability � configures object tracking on the reachability of an IPv4 route.
978 Object Tracking
threshold metric
Configure the metric threshold used to determine the UP and/or DOWN state of a tracked IPv4 or IPv6 route.
Syntax
threshold metric {up number | down number}
To return to the default setting, use the no threshold metric {up number | down number} command.
Parameters
up number down number
Enter a number for the UP threshold to be applied to the scaled metric of an IPv4 or IPv6 route. The default UP threshold is 254. The routing state is UP if the scaled route metric is less than or equal to the UP threshold.
Enter a number for the DOWN threshold to be applied to the scaled metric of an IPv4 or IPv6 route. The default DOWN threshold is255. The routing state is DOWN if the scaled route metric is greater than or equal to the DOWN threshold.
Defaults
none
Command Modes OBJECT TRACKING (conf_track_object-id)
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000-ON.
8.3.12.0
Introduced on the S4810.
8.4.1.0
Introduced.
Usage Information
Related Commands
Use this command to configure the UP and/or DOWN threshold for the scaled metric of a tracked IPv4 or IPv6 route.
Determine the UP/DOWN state of a tracked route by the threshold for the current value of the route metric in the routing table. To provide a common tracking interface for different clients, route metrics are scaled in the range 0 to 255, where 0 is connected and 255 is inaccessible. The scaled metric value communicated to a client always considers a lower value to have priority over a higher value.
The resulting scaled value is compared against the configured threshold values to determine the state of a tracked route as follows:
If the scaled metric for a route entry is less than or equal to the UP threshold, the state of a route is UP.
If the scaled metric for a route is greater than or equal to the DOWN threshold or the route is not entered in the routing table, the state of a route is DOWN.
Configure the UP and DOWN thresholds for each tracked route with the threshold metric command. The default UP threshold is 254; the default DOWN threshold is 255. The notification of a change in the state of a tracked object is sent when a metric value crosses a configured threshold.
The tracking process uses a protocol-specific resolution value to convert the actual metric in the routing table to a scaled metric in the range 0 to 255. You can configure the resolution value used to scale route metrics for supported protocols with the track resolution ip route and track resolution ipv6 route commands.
track ip route metric threshold � configures object tracking on the threshold of an IPv4 route metric. track resolution ip route � configures the protocol-specific resolution value used to scale an IPv4
route metric.
track interface ip routing
Configure object tracking on the routing status of an IPv4 Layer 3 interface.
Syntax
track object-id interface interface ip routing
Object Tracking 979
Parameters
To return to the default setting, use the no track object-id command.
object-id interface
Enter the ID number of the tracked object. The range is 1 to 500.
Enter one of the following values:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For a port channel interface, enter the keywords port-channel then a number.
For a tunnel interface, enter the keyword tunnel. For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Defaults
none
Command Modes CONFIGURATION
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
8.3.12.0
8.4.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Added support for tunnel interface. Introduced on the S4810. Introduced.
Usage Information
Related Commands
Use this command to create an object that tracks the routing state of an IPv4 Layer 2 interface:
The status of the IPv4 interface is UP only if the Layer 2 status of the interface is UP and the interface has a valid IP address.
The Layer 3 status of an IPv4 interface goes DOWN when its Layer 2 status goes down (for a Layer 3 VLAN, all VLAN ports must be down) or the IP address is removed from the routing table.
show track � displays information about tracked objects, including configuration, current state, and clients which track the object.
track interface line-protocol � configures object tracking on the line-protocol state of a Layer 2 interface.
track interface line-protocol
Configure object tracking on the line-protocol state of a Layer 2 interface.
Syntax
track object-id interface interface line-protocol To return to the default setting, use the no track object-id command.
Parameters
object-id interface
Enter the ID number of the tracked object. The range is 1 to 500.
Enter one of the following values:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
980 Object Tracking
For a port channel interface, enter the keywords port-channel then a number.
For a tunnel interface, enter the keyword tunnel.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Defaults
none
Command Modes CONFIGURATION
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
8.3.12.0
8.4.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S4810. Introduced.
Usage Information
Related Commands
Use this command to create an object that tracks the line-protocol state of a Layer 2 interface by monitoring its operational status (UP or DOWN).
When the link-level status goes down, the tracked object status is considered to be DOWN; if the linklevel status is up, the tracked object status is considered to be UP.
show track � displays information about tracked objects, including configuration, current state, and clients which track the object.
track interface ip routing � configures object tracking on the routing status of an IPv4 Layer 3 interface.
track ip host reachability
Configure object tracking on the reachability of an IPv4 host.
Syntax
track object-id ip host host-ip-address/prefix-len reachability [vrf vrfname]
To return to the default setting, use the no track object-id command.
Parameters
object-id
ip-address/ prefix-len
vrf vrf-name
Enter the ID number of the tracked object. The range is 1 to 500.
Enter an IPv4 address in dotted decimal format. The valid IPv4 prefix lengths are from /0 to /32.
(Optional) You can configure a VPN routing and forwarding (VRF) instance to specify the virtual routing table to which the tracked route belongs.
Defaults
none
Command Modes CONFIGURATION
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T, S4810, S6000, S5000, Z9000, Z9500, IOA, and MXL.
Object Tracking 981
track ip route metric threshold
Configure object tracking on the threshold of an IPv4 route metric.
Syntax
track object-id ip route ip-address/prefix-len metric threshold [vrf vrfname]
To return to the default setting, use the no track object-id command.
Parameters
object-id
ip-address/ prefix-len
vrf vrf-name
Enter the ID number of the tracked object. The range is 1 to 500.
Enter an IPv4 address in dotted decimal format. The valid IPv4 prefix lengths are from /0 to /32.
(Optional) E-Series only: You can configure a VPN routing and forwarding (VRF) instance to specify the virtual routing table to which the tracked route belongs.
Defaults
none
Command Modes CONFIGURATION
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
8.3.12.0
8.4.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S4810. Introduced.
Usage Information
Related Commands
Use this command to create an object that tracks the UP and/or DOWN threshold of an IPv4 route metric. In order for a route's metric to be tracked, the route must appear as an entry in the routing table.
A tracked IPv4 route is considered to match an entry in the routing table only if the exact IPv4 address and prefix length match a table entry. For example, when configured as a tracked route, 10.0.0.0/24 does not match the routing table entry 10.0.0.0/8. If no route-table entry has the exact IPv4 address and prefix length, the status of the tracked route is considered to be DOWN.
When you configure the threshold of an IPv4 route metric as a tracked object, the UP/DOWN state of the tracked route is also determined by the current metric for the route in the routing table.
To provide a common tracking interface for different clients, route metrics are scaled in the range 0 to 255, where 0 is connected and 255 is inaccessible. The scaled metric value communicated to a client always considers a lower value to have priority over a higher value. The resulting scaled value is compared against the configured threshold values to determine the state of a tracked route as follows:
If the scaled metric for a route entry is less than or equal to the UP threshold, the state of a route is UP.
If the scaled metric for a route is greater than or equal to the DOWN threshold or the route is not entered in the routing table, the state of a route is DOWN.
You configure the UP and DOWN thresholds for each tracked route by using the threshold metric command. The default UP threshold is 254; the default DOWN threshold is 255. The notification of a change in the state of a tracked object is sent when a metric value crosses a configured threshold.
show track � displays information about tracked objects, including configuration, current state, and clients which track the object.
threshold metric � configures the metric threshold used to determine the UP and/or DOWN state of a tracked route.
track resolution ip route � configures the protocol-specific resolution value used to scale an IPv4 route metric.
982 Object Tracking
track ip route reachability
Configure object tracking on the reachability of an IPv4 route.
Syntax
track object-id ip route ip-address/prefix-len reachability [vrf vrf-name] To return to the default setting, use the no track object-id command.
Parameters
object-id
ip-address/ prefix-len
vrf vrf-name
Enter the ID number of the tracked object. The range is 1 to 500.
Enter an IPv4 address in dotted decimal format. The valid IPv4 prefix lengths are from /0 to /32.
(Optional) E-Series only: You can configure a VPN routing and forwarding (VRF) instance to specify the virtual routing table to which the tracked route belongs.
Defaults
none
Command Modes CONFIGURATION
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
8.3.12.0
8.4.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S4810. Introduced.
Usage Information
Related Commands
Use this command to create an object that tracks the reachability of an IPv4 route. In order for a route's reachability to be tracked, the route must appear as an entry in the routing table.
A tracked IPv4 route is considered to match an entry in the routing table only if the exact IPv4 address and prefix length match a table entry. For example, when configured as a tracked route, 10.0.0.0/24 does not match the routing table entry 10.0.0.0/8. If no route-table entry has the exact IPv4 address and prefix length, the status of the tracked route is considered to be DOWN.
When you configure IPv4 route reachability as a tracked object, the UP/DOWN state of the tracked route is also determined by the entry of the next-hop address in the ARP cache. A tracked route is considered to be reachable if there is an ARP cache entry for the route's next-hop address.
If the next-hop address in the ARP cache ages out for a route tracked for its reachability, an attempt is made to regenerate the ARP cache entry to if the next-hop address appears before considering the route DOWN.
show track � displays information about tracked objects, including configuration, current state, and clients which track the object.
track ip route metric threshold � configures object tracking on the threshold of an IPv4 route metric.
track resolution ip route
Configure the protocol-specific resolution value used to scale an IPv4 route metric.
Syntax
track resolution ip route {isis resolution-value | ospf resolution-value} To return to the default setting, use the no track object-id command.
Parameters
object-id
isis resolutionvalue
ospf resolutionvalue
Enter the ID number of the tracked object. The range is 1 to 500.
Enter the resolution used to convert the metric in the routing table for ISIS routes to a scaled metric.
Enter the resolution used to convert the metric in the routing table for OSPF routes to a scaled metric.
Object Tracking 983
Defaults
none
Command Modes CONFIGURATION
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
8.3.12.0
8.4.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S4810. Introduced.
Usage Information
Related Commands
Use this command to configure the protocol-specific resolution value that converts the actual metric of an IPv4 route in the routing table to a scaled metric in the range 0 to 255.
The UP/DOWN state of a tracked IPv4 route is determined by a user-configurable threshold (the threshold metric command) for the route's metric in the routing table. To provide a common tracking interface for different clients, route metrics are scaled in the range 0 to 255, where 0 is connected and 255 is inaccessible.
The protocol-specific resolution value calculates the scaled metric by dividing a route's cost by the resolution value set for the route protocol:
For ISIS, you can set the resolution in the range 1 to 1000, where the default is 10. For OSPF, you can set the resolution in the range 1 to 1592, where the default is 1. The resolution value used to map static routes is not configurable. By default, Dell Networking OS
assigns a metric of 0 to static routes. The resolution value used to map RIP routes is not configurable. The RIP hop-count is automatically
multiplied by 16 to scale it. For example, a RIP metric of 16 (unreachable) scales to 256, which considers the route to be DOWN.
threshold metric � configures the metric threshold used to determine the UP and/or DOWN state of a tracked route.
track ip route metric threshold � configures object tracking on the threshold of an IPv4 route metric.
IPv6 Object Tracking Commands
The following section describes the IPv6 object tracking commands.
The following object tracking commands apply to IPv4 and IPv6:
debug track delay description show running-config track threshold metric track interface line-protocol
show track ipv6 route
Display information about all tracked IPv6 routes, including configuration, current tracked state (UP or DOWN), and the clients which are tracking an object.
Syntax Parameters
show track ipv6 route [brief]
brief
(OPTIONAL) Display a single line summary of information for tracked IPv6 routes.
Command Modes EXEC EXEC Privilege
984 Object Tracking
Command History
Usage Information
Example
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 8.3.12.0 8.4.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S4810. Introduced.
The following describes the show track ipv6 route command shown in the Example below.
Output
Description
Track object-id Displays the number of the tracked object.
Interface type slot/port, IP route ip-address, IPv6 route ipv6address
Displays the interface type and slot/port number or address of the IPv4/IPv6 route that is being tracked.
object is Up/ Down
Up/Down state of tracked object; for example, IPv4 interface, reachability or metric threshold of an IP route.
number changes, Number of times that the state of the tracked object has changed and the time last change time since the last change in hours:minutes:seconds.
First hop interface
Displays the type and slot/port number of the first-hop interface of the tracked route.
Tracked by
Client that is tracking an object's state; for example, VRRP.
Dell#show track ipv6 route Track 2
IPv6 route 2040::/64 metric threshold Metric threshold is Up (STATIC/0/0)
5 changes, last change 00:02:30 Metric threshold down 255 up 254 First-hop interface is TenGigabitEthernet 1/2 Tracked by:
VRRP TenGigabitEthernet 2/4 IPv6 VRID 1 Track 3
IPv6 route 2050::/64 reachability Reachability is Up (STATIC)
5 changes, last change 00:02:30 First-hop interface is TenGigabitEthernet 1/2 Tracked by:
VRRP TenGigabitEthernet 2/4 IPv6 VRID 1
Usage Command The following describes the show track ipv6 route brief command shown in the Example below.
Ouput
Description
ResID
Number of the tracked object.
Resource Parameter
Type of tracked object. Detailed description of the tracked object.
State
Up or Down state of the tracked object.
Last Change
Time since the last change in the state of the tracked object.
Example (Brief)
Dell#show track ipv6 route brief
Object Tracking 985
Related Commands
ResId Resource
Parameter State LastChange
2
IPv6 route metric threshold 2040::/64 Up 00:02:36
3
IPv6 route reachability
2050::/64 Up 00:02:36
show running-config track � displays configuration information about tracked objects.
show track � displays information about tracked objects, including configuration, current state, and clients which track the object.
track interface ipv6 routing � configures object tracking on the routing status of an IPv6 Layer 3 interface.
track ipv6 route metric threshold � configures object tracking on the threshold of an IPv6 route metric.
track ipv6 route reachability � configures object tracking on the reachability of an IPv6 route.
track interface ipv6 routing
Configure object tracking on the routing status of an IPv6 Layer 3 interface.
Syntax
track object-id interface interface ipv6 routing To return to the default setting, use the no track object-id command.
Parameters
object-id interface
Enter the ID number of the tracked object. The range is 1 to 500.
Enter one of the following values:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For a port channel interface, enter the keywords port-channel then a number.
For a tunnel interface, enter the keyword tunnel. For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Defaults
none
Command Modes CONFIGURATION
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
8.3.12.0
8.4.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S4810. Introduced.
Usage Information
Related Commands
Use this command to create an object that tracks the routing state of an IPv6 Layer 3 interface:
The status of the IPv6 interface is UP only if the Layer 2 status of the interface is UP and the interface has a valid IP address.
The Layer 3 status of an IPv6 interface goes DOWN when its Layer 2 status goes down (for a Layer 3 VLAN, all VLAN ports must be down) or the IP address is removed from the routing table.
show track ipv6 route � displays information about tracked IPv6 routes, including configuration, current state, and clients which track the route.
track interface ip routing � configures object tracking on the routing status of an IPv4 Layer 3 interface.
986 Object Tracking
track ipv6 route metric threshold
Configure object tracking on the threshold of an IPv4 route metric.
Syntax
track object-id ipv6 route ipv6-address/prefix-len metric threshold To return to the default setting, use the no track object-id command.
Parameters
object-id
ipv6-address/ prefix-len
Enter the ID number of the tracked object. The range is 1 to 500.
Enter an IPv6 address in X:X:X:X::X format. The valid IPv6 prefix lengths are from /0 to / 128.
Defaults
none
Command Modes CONFIGURATION
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
8.3.12.0
8.4.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S4810. Introduced.
Usage Information
Related Commands
Use this command to create an object that tracks the UP and/or DOWN threshold of an IPv6 route metric. In order for a route's metric to be tracked, the route must appear as an entry in the routing table.
A tracked IPv6 route is considered to match an entry in the routing table only if the exact IPv6 address and prefix length match a table entry. For example, when configured as a tracked route, 3333:100:200:300:400::/80 does not match routing table entry 3333:100:200:300::/64. If no route-table entry has the exact IPv6 address and prefix length, the status of the tracked route is considered to be DOWN.
When you configure the threshold of an IPv6 route metric as a tracked object, the UP/DOWN state of the tracked route is also determined by the current metric for the route in the routing table.
To provide a common tracking interface for different clients, route metrics are scaled in the range 0 to 255, where 0 is connected and 255 is inaccessible. The scaled metric value communicated to a client always considers a lower value to have priority over a higher value. The resulting scaled value is compared against the configured threshold values to determine the state of a tracked route as follows:
If the scaled metric for a route entry is less than or equal to the UP threshold, the state of a route is UP.
If the scaled metric for a route is greater than or equal to the DOWN threshold or the route is not entered in the routing table, the state of a route is DOWN.
You configure the UP and DOWN thresholds for each tracked IPv6 route by using the threshold metric command. The default UP threshold is 254; the default DOWN threshold is 255. The notification of a change in the state of a tracked object is sent when a metric value crosses a configured threshold.
show track ipv6 route � displays information about tracked IPv6 routes, including configuration, current state, and clients which track the route.
threshold metric � configures the metric threshold used to determine the UP and/or DOWN state of a tracked route.
track resolution ipv6 route � configures the protocol-specific resolution value used to scale an IPv6 route metric.
track ipv6 route reachability
Configure object tracking on the reachability of an IPv6 route.
Syntax
track object-id ipv6 route ip-address/prefix-len reachability
Object Tracking 987
Parameters
To return to the default setting, use the no track object-id command.
object-id
ipv6-address/ prefix-len
Enter the ID number of the tracked object. The range is 1 to 500.
Enter an IPv6 address in X:X:X:X::X format. The valid IPv6 prefix lengths are from /0 to / 128.
Defaults
none
Command Modes CONFIGURATION
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
8.3.12.0
8.4.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S4810. Introduced.
Usage Information
Related Commands
Use this command to create an object that tracks the reachability of an IPv6 route. In order for a route's reachability to be tracked, the route must appear as an entry in the routing table.
A tracked route is considered to match an entry in the routing table only if the exact IPv6 address and prefix length match a table entry. For example, when configured as a tracked route, 3333:100:200:300:400::/80 does not match routing table entry 3333:100:200:300::/64. If no route-table entry has the exact IPv6 address and prefix length, the tracked route is considered to be DOWN.
When you configure IPv6 route reachability as a tracked object, the UP/DOWN state of the tracked route is also determined by the entry of the next-hop address in the ARP cache. A tracked route is considered to be reachable if there is an ARP cache entry for the route's next-hop address.
If the next-hop address in the ARP cache ages out for a route tracked for its reachability, an attempt is made to regenerate the ARP cache entry to if the next-hop address appears before considering the route DOWN.
show track ipv6 route � displays information about tracked IPv6 routes, including configuration, current state, and clients which track the route.
track ipv6 route reachability � configures object tracking on the reachability of an IPv4 route.
track resolution ipv6 route
Configure the protocol-specific resolution value used to scale an IPv6 route metric.
Syntax
track resolution ipv6 route {isis resolution-value | ospf resolution-value} To return to the default setting, use the no track object-id command.
Parameters
object-id
isis resolutionvalue
ospf resolutionvalue
Enter the ID number of the tracked object. Use the range to 1 to 500.
Enter the resolution used to convert the metric in the routing table for ISIS routes to a scaled metric.
Enter the resolution used to convert the metric in the routing table for OSPF routes to a scaled metric.
Defaults
none
Command Modes CONFIGURATION
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON.
988 Object Tracking
Usage Information
Related Commands
Version
9.7(0.0) 8.3.12.0 8.4.1.0
Description
Introduced on the S6000-ON. Introduced on the S4810. Introduced.
Use this command to configure the protocol-specific resolution value that converts the actual metric of an IPv6 route in the routing table to a scaled metric in the range 0 to 255.
The UP/DOWN state of a tracked IPv6 route is determined by the user-configurable threshold (the threshold metric command) for a route's metric in the routing table. To provide a common tracking interface for different clients, route metrics are scaled in the range 0 to 255, where 0 is connected and 255 is inaccessible.
The protocol-specific resolution value calculates the scaled metric by dividing a route's cost by the resolution value set for the route protocol:
For ISIS, you can set the resolution in the range 1 to 1000, where the default is 10. For OSPF, you can set the resolution in the range 1 to 1592, where the default is 1. The resolution value used to map static routes is not configurable. By default, Dell Networking OS
assigns a metric of 0 to static routes. The resolution value used to map RIP routes is not configurable. The RIP hop-count is automatically
multiplied by 16 to scale it. For example, a RIP metric of 16 (unreachable) scales to 256, which considers the route to be DOWN.
threshold metric � configures the metric threshold used to determine the UP and/or DOWN state of a tracked route.
track ipv6 route metric threshold � configures object tracking on the threshold of an IPv6 route metric.
Object Tracking 989
40
Open Shortest Path First (OSPFv2 and OSPFv3)
Open Shortest Path First version 2 for IPv4 is supported on platform.
OSPF is an Interior Gateway Protocol (IGP), which means that it distributes routing information between routers in a single Autonomous System (AS). OSPF is also a link-state protocol in which all routers contain forwarding tables derived from information about their links to their neighbors.
The fundamental mechanisms of OSPF (flooding, DR election, area support, SPF calculations, and so on) are the same for OSPFv2 and OSPFv3. OSPFv3 runs on a per-link basis instead of on a per-IP-subnet basis.
This chapter is divided into two sections. There is no overlap between the two sets of commands. You cannot use an OSPFv2 command in the IPv6 OSPFv3 mode.
NOTE: Dell Networking Operating System (OS) version 7.8.1.0 introduces Multi-Process OSPF on IPv4 (OSPFv2) only. It is not supported on OSPFv3 (IPv6).
The CLI requires that you include the Process ID when entering ROUTER-OSPF mode. Each command entered applies to the specified OSPFv2 process only.
Topics:
� OSPFv2 Commands � OSPFv3 Commands
OSPFv2 Commands
The Dell Networking implementation of OSPFv2 is based on IETF RFC 2328. .
area default-cost
Set the metric for the summary default route the area border router (ABR) generates into the stub area. Use this command on the border routers at the edge of a stub area.
S4048�ON
Syntax Parameters
area area-id default-cost cost To return default values, use the no area area-id default-cost command.
area-id cost
Specify the OSPF area in dotted decimal format (A.B.C.D.) or enter a number from zero (0) to 65535.
Specifies the stub area's advertised external route metric. The range is from zero (0) to 65535.
Defaults
cost = 1; no areas are configured.
Command Modes ROUTER OSPF
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
990 Open Shortest Path First (OSPFv2 and OSPFv3)
Usage Information
Related Commands
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0 pre- 6.1.1.1
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for the Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
In the Dell Networking operating software (OS), cost is defined as reference bandwidth/bandwidth.
area stub -- creates a stub area.
area nssa
Specify an area as a not so stubby area (NSSA).
S4048�ON
Syntax Parameters
area area-id nssa [default-information-originate] [no-redistribution] [nosummary]
To delete an NSSA, use the no area area-id nssa command.
area-id
Specify the OSPF area in dotted decimal format (A.B.C.D.) or enter a number from zero (0) to 65535.
no-redistribution (OPTIONAL) Specify that the redistribute command does not distribute routes into the NSSA. Only use this command in an NSSA area border router (ABR).
defaultinformationoriginate
(OPTIONAL) Allows external routing information to be imported into the NSSA by using Type 7 default.
no-summary
(OPTIONAL) Specify that no summary LSAs should be sent into the NSSA.
Defaults
Not configured.
Command Modes ROUTER OSPF
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
Open Shortest Path First (OSPFv2 and OSPFv3) 991
Version
9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0 pre- 6.1.1.1
Description
Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for the Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
area range
Summarize routes matching an address/mask at an area border router (ABR).
S4048�ON
Syntax Parameters
area area-id range ip-address mask [not-advertise] To disable route summarization, use the no area area-id range ip-address mask command.
area-id
ip-address mask
not-advertise
Specify the OSPF area in dotted decimal format (A.B.C.D.) or enter a number from zero (0) to 65535.
Specify an IP address in dotted decimal format.
Specify a mask for the destination prefix. Enter the full mask (for example, 255.255.255.0).
(OPTIONAL) Enter the keywords not-advertise to set the status to DoNotAdvertise (that is, the Type 3 summary-LSA is suppressed and the component networks remain hidden from other areas.)
Defaults
Not configured.
Command Modes ROUTER OSPF
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000.
992 Open Shortest Path First (OSPFv2 and OSPFv3)
Usage Information
Related Commands
Version
8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0 pre- 6.1.1.1
Description
Introduced on the S4810. Added support for the Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Only the routes within an area are summarized, and that summary is advertised to other areas by the ABR. External routes are not summarized.
area stub -- creates a stub area. router ospf -- enters ROUTER OSPF mode to configure an OSPF instance.
area stub
Configure a stub area, which is an area not connected to other areas.
S4048�ON
Syntax Parameters
area area-id stub [no-summary] To delete a stub area, use the no area area-id stub command.
area-id no-summary
Specify the OSPF area in dotted decimal format (A.B.C.D.) or enter a number from zero (0) to 65535.
(OPTIONAL) Enter the keywords no-summary to prevent the ABR from sending summary Link State Advertisements (LSAs) into the stub area.
Defaults
Disabled.
Command Modes ROUTER OSPF
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0 pre- 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for the Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Open Shortest Path First (OSPFv2 and OSPFv3) 993
Usage Information
Related Commands
To configure all routers and access servers within a stub, use this command. router ospf -- enters ROUTER OSPF mode to configure an OSPF instance.
auto-cost
Specify how the OSPF interface cost is calculated based on the reference bandwidth method.
S4048�ON
Syntax Parameters
auto-cost [reference-bandwidth ref-bw]
To return to the default bandwidth or to assign cost based on the interface type, use the no autocost [reference-bandwidth] command.
ref-bw
(OPTIONAL) Specify a reference bandwidth in megabits per second. The range is from 1 to 4294967. The default is 100 megabits per second.
Defaults
100 megabits per second.
Command Modes ROUTER OSPF
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0 pre- 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for the Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
clear ip ospf
Clear all OSPF routing tables.
S4048�ON
Syntax
clear ip ospf process-id [process]
994 Open Shortest Path First (OSPFv2 and OSPFv3)
Parameters
process-id process
Enter the OSPF Process ID to clear a specific process. If no Process ID is entered, all OSPF processes are cleared.
(OPTIONAL) Enter the keyword process to reset the OSPF process.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0 pre- 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for the Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
clear ip ospf statistics
Clear the packet statistics in interfaces and neighbors.
S4048�ON
Syntax Parameters
clear ip ospf [process-id] [vrf vrf-name] statistics [interface name {neighbor router-id}]
process-id vrf vrf-name statistics interface name
Enter the OSPF Process ID to clear a specific process. If no Process ID is entered, all OSPF processes are cleared.
Enter the keyword vrf followed by the name of the VRF to clear all OSPF routing tables corresponding to that VRF.
Enter the keyword statistics to clear the packet statistics in interfaces and neighbors.
(OPTIONAL) Enter the keyword interface then one of the following interface keywords and slot/port or number information:
For Port Channel groups, enter the keywords port-channel then a number. For the C-Series and S-Series, the range is from 1 to 128.
For a SONET interface, enter the keyword sonet then the slot/ port information.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
Open Shortest Path First (OSPFv2 and OSPFv3) 995
For a VLAN, enter the keyword vlan then a number from 1 to 4094.
neighbor router- (OPTIONAL) Enter the keyword neighbor then the neighbor's router-id in dotted
id
decimal format (A.B.C.D.).
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0 pre- 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for the Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Related Commands
show ip ospf statistics -- displays the OSPF statistics.
debug ip ospf
Display debug information on OSPF. Entering the debug ip ospf commands enables OSPF debugging for the first OSPF process.
S4048�ON
Syntax Parameters
debug ip ospf [process-id] [vrf vrf-name] [bfd |event | packet | spf | database-timer rate-limit]
To cancel the debug command, use the no debug ip ospf command.
process-id
bfd event packet spf database-timer rate-limit
Enter the OSPF Process ID to clear a specific process. If no Process ID is entered, all OSPF processes are cleared.
(OPTIONAL) Enter the keyword bfd to debug only OSPF BFD information.
(OPTIONAL) Enter the keyword event to debug only OSPF event information.
(OPTIONAL) Enter the keyword packet to debug only OSPF packet information.
(OPTIONAL) Enter the keyword spf to display the Shortest Path First information.
(OPTIONAL) Enter the keywords database-timer rate-limit to display the LSA throttling timer information. This applies to the S4810 platform only.
996 Open Shortest Path First (OSPFv2 and OSPFv3)
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.8.0 8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0 pre- 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added the database-timer rate-limit option for the S4810. Introduced on the S4810. Added support for the Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
The following describes the debug ip ospf command shown in the Example below.
Field
Description
8:14 OSPF v: t:
Displays the time stamp.
Displays the OSPF process ID: instance ID.
Displays the OSPF version. Dell Networking OS supports version 2 only.
Displays the type of packet sent:
1 - Hello packet 2 - database description 3 - link state request 4 - link state update 5 - link state acknowledgement
l: rid: aid: chk: aut:
Displays the packet length.
Displays the OSPF router ID.
Displays the Autonomous System ID.
Displays the OSPF checksum.
States if OSPF authentication is configured. One of the following is listed:
0 - no authentication configured 1 - simple authentication configured using the ip ospf authentication-
key command 2 - MD5 authentication configured using the ip ospf message-digest-
key command
auk: keyid: to:
If the ip ospf authentication-key command is configured, this field displays the key used.
If the ip ospf message-digest-key command is configured, this field displays the MD5 key
Displays the interface to which the packet is intended.
Open Shortest Path First (OSPFv2 and OSPFv3) 997
Example
Field
dst: netmask: pri: N, MC, E, T
hi: di: dr: bdr:
Description
Displays the destination IP address.
Displays the destination IP address mask.
Displays the OSPF priority
Displays information available in the Options field of the HELLO packet:
N + (N-bit is set) N - (N-bit is not set) MC+ (bit used by MOSPF is set and router is able to forward IP multicast
packets) MC- (bit used by MOSPF is not set and router cannot forward IP multicast
packets) E + (router is able to accept AS External LSAs) E - (router cannot accept AS External LSAs) T + (router can support TOS) T - (router cannot support TOS)
Displays the amount of time configured for the HELLO interval.
Displays the amount of time configured for the DEAD interval.
Displays the IP address of the designated router.
Displays the IP address of the Border Area Router.
Dell#debug ip ospf 1 packet OSPF process 90, packet debugging is on Dell# 08:14:24 : OSPF(100:00): Xmt. v:2 t:1(HELLO) l:44 rid:192.1.1.1
aid:0.0.0.1 chk:0xa098 aut:0 auk: keyid:0 to:Te 4/3 dst:224.0.0.5 netmask:255.255.255.0 pri:1 N-, MC-, E+, T-, hi:10 di:40 dr:90.1.1.1 bdr:0.0.0.0
default-information originate
To generate a default external route into an OSPF routing domain, configure Dell Networking Operating System (OS).
Syntax
default-information originate [always] [metric metric-value] [metric-type type-value] [route-map map-name]
To return to the default values, use the no default-information originate command.
Parameters
always
metric metricvalue metric-type type-value
(OPTIONAL) Enter the keyword always to specify that default route information must always be advertised.
(OPTIONAL) Enter the keyword metric then a number to configure a metric value for the route. The range is from 1 to 16777214.
(OPTIONAL) Enter the keywords metric-type then an OSPF link state type of 1 or 2 for default routes. The values are:
1 = Type 1 external route 2 = Type 2 external route
route-map map- (OPTIONAL) Enter the keywords route-map then the name of an established
name
route map.
Defaults
Disabled.
Command Modes ROUTER OSPF
998 Open Shortest Path First (OSPFv2 and OSPFv3)
Command History
Related Commands
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0 pre- 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for the Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
redistribute -- redistributes routes from other routing protocols into OSPF.
default-metric
Change the metrics of redistributed routes to a value useful to OSPF. Use this command with the redistribute command.
S4048�ON
Syntax Parameters
default-metric number To return to the default values, use the no default-metric [number] command.
number
Enter a number as the metric. The range is from 1 to 16777214.
Defaults
Disabled.
Command Modes ROUTER OSPF
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000.
Open Shortest Path First (OSPFv2 and OSPFv3) 999
Version
8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0 pre- 6.1.1.1
Description
Introduced on the S4810. Added support for the Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
description
Add a description about the selected OSPF configuration.
S4048�ON
Syntax Parameters
description description To remove the OSPF description, use the no description command.
description
Enter a text string description to identify the OSPF configuration (80 characters maximum).
Defaults
none
Command Modes ROUTER OSPF
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0 pre- 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for the Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Related Commands
show ip ospf asbr -- displays the VLAN configuration.
1000 Open Shortest Path First (OSPFv2 and OSPFv3)
distance
Define an administrative distance for particular routes to a specific IP address.
S4048�ON
Syntax Parameters
distance weight [ip-address mask access-list-name]
To delete the settings, use the no distance weight [ip-address mask access-list-name] command.
weight
Specify an administrative distance. The range is from 1 to 255. The default is 110.
ip-address
(OPTIONAL) Enter a router ID in the dotted decimal format. If you enter a router ID, include the mask for that router address.
mask
(OPTIONAL) Enter a mask in dotted decimal format or /n format.
access-list-name (OPTIONAL) Enter the name of an IP standard access list, up to 140 characters.
Defaults
110
Command Modes ROUTER OSPF
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0 pre- 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for the Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
distance ospf
Configure an OSPF distance metric for different types of routes.
S4048�ON
Syntax
distance ospf [external dist3] [inter-area dist2] [intra-area dist1] To delete these settings, use the no distance ospf command.
Open Shortest Path First (OSPFv2 and OSPFv3) 1001
Parameters
external dist3 inter-area dist2 intra-area dist1
(OPTIONAL) Enter the keyword external then a number to specify a distance for external type 5 and 7 routes. The range is from 1 to 255. The default is 110.
(OPTIONAL) Enter the keywords inter-area then a number to specify a distance metric for routes between areas. The range is from 1 to 255. The default is 110.
(OPTIONAL) Enter the keywords intra-area then a number to specify a distance metric for all routes within an area. The range is from 1 to 255. The default is 110.
Defaults
external dist3 = 110 inter-area dist2 = 110 intra-area dist1 = 110
Command Modes ROUTER OSPF
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for the Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
To specify a distance for routes learned from other routing domains, use the redistribute command.
distribute-list in
Apply a filter to incoming routing updates from OSPF to the routing table.
S4048�ON
Syntax Parameters
distribute-list prefix-list-name in [interface]
To delete a filter, use the no distribute-list prefix-list-name in [interface] command.
prefix-list-name interface
Enter the name of a configured prefix list.
(OPTIONAL) Enter one of the following keywords and slot/port or number information:
1002 Open Shortest Path First (OSPFv2 and OSPFv3)
For Port Channel groups, enter the keywords port-channel then a number. For the C-Series, S-Series, and Z9000, the range is from 1 to 128.For Z9500, the range is from 1 to 512.
For a SONET interface, enter the keyword sonet then the slot/port information.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a VLAN, enter the keyword vlan then a number from 1 to 4094.
Defaults
Not configured.
Command Modes ROUTER OSPF
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0 pre- 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for the Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
distribute-list out
To restrict certain routes destined for the local routing table after the SPF calculation, apply a filter.
S4048�ON
Syntax Parameters
distribute-list prefix-list-name out [bgp | connected | isis | rip | static]
To remove a filter, use the no distribute-list prefix-list-name out [bgp | connected | isis | rip | static] command.
prefix-list-name bgp
Enter the name of a configured prefix list.
(OPTIONAL) Enter the keyword bgp to specify that BGP routes are distributed. NOTE: BGP and ISIS routes are not available on the C-Series. BGP, ISIS, and RIP routes are not available on the S-Series.
Open Shortest Path First (OSPFv2 and OSPFv3) 1003
connected isis
(OPTIONAL) Enter the keyword connected to specify that connected routes are distributed.
(OPTIONAL) Enter the keyword isis to specify that IS-IS routes are distributed. NOTE: BGP and ISIS routes are not available on the C-Series. BGP, ISIS, and RIP routes are not available on the S-Series.
rip
(OPTIONAL) Enter the keyword rip to specify that RIP routes are distributed.
NOTE: BGP and ISIS routes are not available on the C-Series. BGP, ISIS, and
RIP routes are not available on the S-Series.
static
(OPTIONAL) Enter the keyword static to specify that only manually configured routes are distributed.
Defaults
Not configured.
Command Modes ROUTER OSPF
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0 pre- 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for the Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
The distribute-list out command applies to routes autonomous system boundary routers (ASBRs) redistributes into OSPF. It can be applied to external type 2 and external type 1 routes, but not to intra-area and inter-area routes.
fast-convergence
This command sets the minimum LSA origination and arrival times to zero (0), allowing more rapid route computation so that convergence takes less time.
S4048�ON
Syntax Parameters
fast-convergence {number} To cancel fast-convergence, use the no fast convergence command.
number
Enter the convergence level desired. The higher this parameter is set, the faster OSPF converge takes place. The range is from 1 to 4.
1004 Open Shortest Path First (OSPFv2 and OSPFv3)
Defaults
none.
Command Modes ROUTER OSPF
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on all platforms.
Usage Information
The higher this parameter is set, the faster OSPF converge takes place.
NOTE: The faster the convergence, the more frequent the route calculations and updates. This behavior impacts CPU utilization and may impact adjacency stability in larger topologies.
Generally, convergence level 1 meets most convergence requirements. Higher convergence levels should only be selected following consultation with Dell Networking technical support.
graceful-restart grace-period
Specifies the time duration, in seconds, that the router's neighbors continue to advertise the router as fully adjacent regardless of the synchronization state during a graceful restart.
NOTE: This command enables OSPFv2 graceful restart globally by setting the grace period (in seconds) that an OSPFv2 router's neighbors continues to advertise the router as adjacent during a graceful restart.
S4048�ON
Syntax Parameters
graceful-restart grace-period seconds To disable the grace period, use the no graceful-restart grace-period command.
seconds
Time duration, in seconds, that specifies the duration of the restart process before OSPF terminates the process. The range is from 40 to 1800 seconds.
Defaults
Not Configured
Command Modes ROUTER OSPF
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2)
Introduced on the S4048-ON. Introduced on the S3048-ON.
Open Shortest Path First (OSPFv2 and OSPFv3) 1005
Usage Information
Version
9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.5.1.0 pre- 6.1.1.1
Description
Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Added support for Multi-Process OSPF. Introduced on the C-Series. Introduced on the E-Series.
The Helper mode is enabled by default on the device. To enable the restart mode also on the device, you must configure the grace period using this command. After you enable restart mode the router advertises the neighbor as fully adjacent during a restart.
graceful-restart helper-reject
Specify the OSPF router to not act as a helper during graceful restart.
S4048�ON
Syntax Parameters
graceful-restart helper-reject ip-address To return to default value, use the no graceful-restart helper-reject command.
ip-address
Enter the OSPF router-id, in IP address format, of the restart router that will not act as a helper during graceful restart.
Defaults
Not configured.
Command Modes ROUTER OSPF
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.12.0 7.8.1.0
7.7.1.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Restart role enabled on the S-Series (Both Helper and Restart roles now supported on S-Series). Added support for Multi-Process OSPF. Added Helper-Role support on the S-Series. Introduced on the C-Series.
1006 Open Shortest Path First (OSPFv2 and OSPFv3)
Version
pre- 6.1.1.1
Description
Introduced on the E-Series.
graceful-restart mode
Enable the graceful restart mode.
S4048�ON
Syntax Parameters
graceful-restart mode [planned-only | unplanned-only] To disable graceful restart mode, use the no graceful-restart mode command.
planned-only unplanned-only
(OPTIONAL) Enter the keywords planned-only to indicate graceful restart is supported in a planned restart condition only.
(OPTIONAL) Enter the keywords unplanned-only to indicate graceful restart is supported in an unplanned restart condition only.
Defaults
Support for both planned and unplanned failures.
Command Modes ROUTER OSPF
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.12.0 7.8.1.0 7.5.1.0 pre- 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
graceful-restart role
Specify the role for your OSPF router during graceful restart.
S4048�ON
Syntax
graceful-restart role [helper-only | restart-only] To disable graceful restart role, use the no graceful-restart role command.
Open Shortest Path First (OSPFv2 and OSPFv3) 1007
Parameters
role helper-only role restart-only
(OPTIONAL) Enter the keywords helper-only to specify the OSPF router is a helper only during graceful restart.
(OPTIONAL) Enter the keywords restart-only to specify the OSPF router is a restart only during graceful-restart.
Defaults
By default, OSPF routers are both helper and restart routers during a graceful restart.
Command Modes ROUTER OSPF
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.12.0 7.8.1.0
7.7.1.0 7.5.1.0 pre- 6.1.1.1
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for Multi-Process OSPF. Added Restart and Helper roles support on the S-Series. Added Helper-Role support on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
ip ospf auth-change-wait-time
OSPF provides a grace period while OSPF changes its interface authentication type. During the grace period, OSPF sends out packets with new and old authentication scheme until the grace period expires.
S4048�ON
Syntax Parameters
ip ospf auth-change-wait-time seconds To return to the default, use the no ip ospf auth-change-wait-time command.
seconds
Enter the seconds. The range is from 0 to 300.
Defaults
zero (0) seconds.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON.
1008 Open Shortest Path First (OSPFv2 and OSPFv3)
Version
9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre- 6.1.1.1
Description
Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
ip ospf authentication-key
Enable authentication and set an authentication key on OSPF traffic on an interface.
S4048�ON
Syntax Parameters
ip ospf authentication-key [encryption-type] key To delete an authentication key, use the no ip ospf authentication-key command.
encryption-type (OPTIONAL) Enter 7 to encrypt the key.
key
Enter an eight-character string. Strings longer than eight characters are truncated.
Defaults
Not configured.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre- 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
All neighboring routers in the same network must use the same password to exchange OSPF information.
Open Shortest Path First (OSPFv2 and OSPFv3) 1009
ip ospf cost
Change the cost associated with the OSPF traffic on an interface.
S4048�ON
Syntax Parameters
ip ospf cost cost To return to default value, use the no ip ospf cost command.
cost
Enter a number as the cost. The range is from 1 to 65535.
Defaults
The default cost is based on the reference bandwidth.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre- 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
If this command is not configured, cost is based on the auto-cost command. When you configure OSPF over multiple vendors, to ensure that all routers use the same cost, use the ip ospf cost command. Otherwise, OSPF routes improperly.
auto-cost -- controls how the OSPF interface cost is calculated.
ip ospf dead-interval
Set the time interval since the last hello-packet was received from a router. After the interval elapses, the neighboring routers declare the router dead.
S4048�ON
Syntax
ip ospf dead-interval seconds To return to the default values, use the no ip ospf dead-interval command.
1010 Open Shortest Path First (OSPFv2 and OSPFv3)
Parameters
seconds
Enter the number of seconds for the interval. The range is from 1 to 65535. The default is 40 seconds.
Defaults
40 seconds
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre- 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
By default, the dead interval is four times the default hello-interval. ip ospf hello-interval -- sets the time interval between the hello packets.
ip ospf hello-interval
Specify the time interval between the hello packets sent on the interface.
S4048�ON
Syntax Parameters
ip ospf hello-interval seconds To return to the default value, use the no ip ospf hello-interval command.
seconds
Enter the number of seconds for the interval. The range is from 1 to 65535. The default is 10 seconds.
Defaults
10 seconds
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2)
Introduced on the S4048-ON. Introduced on the S3048-ON.
Open Shortest Path First (OSPFv2 and OSPFv3) 1011
Usage Information
Related Commands
Version
9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre- 6.1.1.1
Description
Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
The time interval between the hello packets must be the same for routers in a network.
ip ospf dead-interval -- sets the time interval before a router is declared dead.
ip ospf message-digest-key
Enable OSPF MD5 authentication and send an OSPF message digest key on the interface.
S4048�ON
Syntax Parameters
ip ospf message-digest-key keyid md5 key To delete a key, use the no ip ospf message-digest-key keyid command.
keyid key
Enter a number as the key ID. The range is from 1 to 255. Enter a continuous character string as the password.
Defaults
No MD5 authentication is configured.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 9.1(0.0) 8.3.11.1 8.3.7.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Included usage information on maximum number of digest keys per interface. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series.
1012 Open Shortest Path First (OSPFv2 and OSPFv3)
Usage Information
Version
7.5.1.0 pre- 6.1.1.1
Description
Introduced on the C-Series. Introduced on the E-Series.
You can configure a maximum of six digest keys on an interface. Of the available six digest keys, the switches select the MD5 key that is common. The remaining MD5 keys are unused.
To change to a different key on the interface, enable the new key while the old key is still enabled. Dell Networking OS sends two packets: the first packet authenticated with the old key and the second packet authenticated with the new key. This process ensures that the neighbors learn the new key and communication is not disrupted by keeping the old key enabled.
After the reply is received and the new key is authenticated, delete the old key. Dell recommends keeping only one key per interface.
NOTE: The MD5 secret is stored as plain text in the configuration file with service password encryption. Write down or otherwise record the key. You cannot learn the key once it is configured. Use caution when changing the key.
ip ospf mtu-ignore
Disable OSPF MTU mismatch detection upon receipt of database description (DBD) packets.
S4048�ON
Syntax
ip ospf mtu-ignore To return to the default, use the no ip ospf mtu-ignore command.
Defaults
Enabled.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre- 6.1.1.1
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Open Shortest Path First (OSPFv2 and OSPFv3) 1013
ip ospf network
Set the network type for the interface.
S4048�ON
Syntax Parameters
ip ospf network {broadcast | point-to-point} To return to the default, use the no ip ospf network command.
broadcast point-to-point
Enter the keyword broadcast to designate the interface as part of a broadcast network.
Enter the keywords point-to-point to designate the interface as part of a point-to-point network.
Defaults
Broadcast.
Command Modes ROUTER OSPF
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0 pre- 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
ip ospf priority
To determine the designated router for the OSPF network, set the priority of the interface.
S4048�ON
Syntax Parameters
ip ospf priority number To return to the default setting, use the no ip ospf priority command.
number
Enter a number as the priority. The range is from 0 to 255. The default is 1.
Defaults
1
Command Modes INTERFACE
1014 Open Shortest Path First (OSPFv2 and OSPFv3)
Command History
Usage Information
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre- 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Setting a priority of 0 makes the router ineligible for election as a designated router or backup designated router.
Use this command for interfaces connected to multi-access networks, not point-to-point networks.
ip ospf retransmit-interval
Set the retransmission time between lost link state advertisements (LSAs) for adjacencies belonging to the interface.
S4048�ON
Syntax Parameters
ip ospf retransmit-interval seconds To return to the default values, use the no ip ospf retransmit-interval command.
seconds
Enter the number of seconds as the interval between retransmission. The range is from 1 to 3600. The default is 5 seconds.
This interval must be greater than the expected round-trip time for a packet to travel between two routers.
Defaults
5 seconds
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000.
Open Shortest Path First (OSPFv2 and OSPFv3) 1015
Usage Information
Version
8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre- 6.1.1.1
Description
Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Set the time interval to a number large enough to prevent unnecessary retransmissions.
ip ospf transmit-delay
To send a link state update packet on the interface, set the estimated time elapsed.
S4048�ON
Syntax Parameters
ip ospf transmit-delay seconds To return to the default value, use the no ip ospf transmit-delay command.
seconds
Enter the number of seconds as the interval between retransmission. The range is from 1 to 3600. The default is 1 second.
This value must be greater than the transmission and propagation delays for the interface.
Defaults
1 second
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre- 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
1016 Open Shortest Path First (OSPFv2 and OSPFv3)
log-adjacency-changes
To send a Syslog message about changes in the OSPF adjacency state, set Dell Networking OS.
S4048�ON
Syntax
log-adjacency-changes To disable the Syslog messages, use the no log-adjacency-changes command.
Defaults
Disabled.
Command Modes ROUTER OSPF
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0 pre- 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
maximum-paths
Enable the software to forward packets over multiple paths.
S4048�ON
Syntax Parameters
maximum-paths number To disable packet forwarding over multiple paths, use the no maximum-paths command.
number
Specify the number of paths. The range for OSPFv2 is from 1 to 64. The default for OSPFv2 is 4 paths. The range for OSPFv3 is from 1 to 64. The default for OSPFv3 is 8 paths.
Defaults
4
Command Modes ROUTER OSPF for OSPFv2
ROUTER OSPFv3 for OSPFv3
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Open Shortest Path First (OSPFv2 and OSPFv3) 1017
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.1(0.0) 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0 pre- 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced support for OSPFv3 on the S4810 and Z9000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
network area
Define which interfaces run OSPF and the OSPF area for those interfaces.
S4048�ON
Syntax Parameters
network ip-address mask area area-id To disable an OSPF area, use the no network ip-address mask area area-id command.
ip-address
mask area-id
Specify a primary or secondary address in dotted decimal format. The primary address is required before adding the secondary address.
Enter a network mask in /prefix format. (/x)
Enter the OSPF area ID as either a decimal value or in a valid IP address. Decimal value range is from 0 to 65535. IP address format is dotted decimal format A.B.C.D.
NOTE: If the area ID is smaller than 65535, it is converted to a decimal value. For example, if you use an area ID of 0.0.0.1, it is converted to 1.
Command Modes ROUTER OSPF
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000.
1018 Open Shortest Path First (OSPFv2 and OSPFv3)
Usage Information
Version
8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0 pre- 6.1.1.1
Description
Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced to all platforms. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
To enable OSPF on an interface, the network area command must include, in its range of addresses, the primary IP address of an interface.
NOTE: An interface can be attached only to a single OSPF area.
If you delete all the network area commands for Area 0, the show ip ospf command output does not list Area 0.
passive-interface
Suppress both receiving and sending routing updates on an interface.
S4048�ON
Syntax Parameters
passive-interface {default | interface}
To enable both the receiving and sending routing, use the no passive-interface interface command.
To return all OSPF interfaces (current and future) to active, use the no passive-interface default command.
default interface
Enter the keyword default to make all OSPF interfaces (current and future) passive.
Enter the following keywords and slot/port or number information:
For a Gigabit Ethernet interface, enter the keyword GigabitEthernet then the slot/port information.
For Port Channel groups, enter the keywords port-channel then a number. For the C-Series, S-Series, and Z9000, the range is from 1 to 128.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a VLAN, enter the keyword vlan then a number from 1 to 4094.
Command Modes ROUTER OSPF
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2)
Introduced on the S4048-ON. Introduced on the S3048-ON.
Open Shortest Path First (OSPFv2 and OSPFv3) 1019
Usage Information
Version
9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0 7.4.1.0 pre- 6.1.1.1
Description
Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Modified to include the keyword default. Introduced on the E-Series.
Although the passive interface does not send or receive routing updates, the network on that interface is still included in OSPF updates sent using other interfaces.
The default keyword sets all interfaces as passive. You can then configure individual interfaces, where adjacencies are desired, using the no passive-interface interface command. The no form of this command is inserted into the configuration for individual interfaces when the no passiveinterface interface command is issued while passive-interface default is configured.
This command behavior has changed as follows:
passive-interface interface
The previous no passive-interface interface is removed from the running configuration. The ABR status for the router is updated. Save passive-interface interface into the running configuration.
passive-interface default
All present and future OSPF interfaces are marked as passive. Any adjacency is explicitly terminated from all OSPF interfaces. All previous passive-interface interface commands are removed from the running
configuration. All previous no passive-interface interface commands are removed from the running
configuration.
no passive-interface interface
Remove the interface from the passive list. The ABR status for the router is updated. If passive-interface default is specified, then save no passive-interface
interface into the running configuration.
No passive-interface default
Clear everything and revert to the default behavior. All previously marked passive interfaces are removed. May update ABR status.
On configuring suppression using the passive-interface command, the state of the OSPF neighbor does not change to INIT; instead, the state of the OSPF neighbor changes to DOWN after the dead-timer expires.
1020 Open Shortest Path First (OSPFv2 and OSPFv3)
redistribute
Redistribute information from another routing protocol throughout the OSPF process.
S4048�ON
Syntax Parameters
redistribute {connected | isis | ospf | rip | static} [metric metric-value | metric-type type-value] [route-map map-name] [tag tag-value]
To disable redistribution, use the no redistribute {connected | isis | rip | static} command.
connected
isis ospf
rip static
metric metricvalue metric-type type-value
route-map mapname tag tag-value
Enter the keyword connected to specify that information from active routes on interfaces is redistributed.
Enter the keyword isis to specify that ISO IS-IS information is redistributed.
Enter the keyword ospf to specify that information corresponding to OSPF is redistributes.
Enter the keyword rip to specify that RIP routing information is redistributed.
Enter the keyword static to specify that information from static routes is redistributed.
(OPTIONAL) Enter the keyword metric then a number. The range is from 0 (zero) to 16777214.
(OPTIONAL) Enter the keywords metric-type then one of the following: 1 = OSPF External type 1 2 = OSPF External type 2
(OPTIONAL) Enter the keywords route-map then the name of the route map.
(OPTIONAL) Enter the keyword tag then a number. The range is from 0 to 4294967295.
Defaults
Not configured.
Command Modes ROUTER OSPF
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series.
Open Shortest Path First (OSPFv2 and OSPFv3) 1021
Usage Information
Related Commands
Version
pre- 6.1.1.1
Description
Introduced on the E-Series.
To redistribute the default route (0.0.0.0/0), configure the default-information originate command.
Despite removing an OSPF process globally, the OSPF process is not completely removed from the BGP configuration.
default-information originate -- generates a default route into the OSPF routing domain.
redistribute bgp
Redistribute BGP routing information throughout the OSPF instance.
S4048�ON
Syntax Parameters
redistribute bgp as number [metric metric-value] | [metric-type type-value] | [tag tag-value]
To disable redistribution, use the no redistribute bgp as number [metric metric-value] | [metric-type type-value] [route-map map-name] [tag tag-value] command.
as number metric metricvalue metric-type type-value
route-map mapname tag tag-value
Enter the autonomous system number. The range is from 1 to 65535. (OPTIONAL) Enter the keyword metric then the metric-value number. The range is from 0 to16777214. (OPTIONAL) Enter the keywords metric-type then one of the following: 1 = for OSPF External type 1 2 = for OSPF External type 2
(OPTIONAL) Enter the keywords route-map then the name of the route map.
(OPTIONAL) Enter the keyword tag to set the tag for routes redistributed into OSPF. The range is from 0 to 4294967295.
Defaults
none
Command Modes ROUTER OSPF
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
1022 Open Shortest Path First (OSPFv2 and OSPFv3)
Version
7.8.1.3 7.8.1.0 7.6.1.0 7.5.1.0 7.4.1.0 pre- 6.1.1.1
Description
Added Route Map for BGP Redistribution to OSPF. Added support for Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Added the keyword default. Introduced on the E-Series.
redistribute isis
Redistribute IS-IS routing information throughout the OSPF instance.
S4048�ON
Syntax Parameters
redistribute isis [tag] [level-1 | level-1-2 | level-2] [metric metricvalue | metric-type type-value] [route-map map-name] [tag tag-value]
To disable redistribution, use the no redistribute isis [tag] [level-1 | level-1-2 | level-2] [metric metric-value | metric-type type-value] [route-map mapname] [tag tag-value] command.
tag level-1
level-1-2
level-2
metric metricvalue metric-type type-value
route-map mapname tag tag-value
(OPTIONAL) Enter the name of the IS-IS routing process.
(OPTIONAL) Enter the keywords level-1 to redistribute only IS-IS Level-1 routes.
(OPTIONAL) Enter the keywords level-1-2 to redistribute both IS-IS Level-1 and Level-2 routes.
(OPTIONAL) Enter the keywords level-2 to redistribute only IS-IS Level-2 routes.
(OPTIONAL) Enter the keyword metric then a number. The range is from 0 (zero) to 4294967295.
(OPTIONAL) Enter the keywords metric-type then one of the following: 1 = for OSPF External type 1 2 = for OSPF External type 2
(OPTIONAL) Enter the keywords route-map then the name of the route map.
(OPTIONAL) Enter the keyword tag to set the tag for routes redistributed into OSPF. The range is from 0 to 4294967295.
Defaults
Not configured.
Command Modes ROUTER OSPF
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON.
Open Shortest Path First (OSPFv2 and OSPFv3) 1023
Version
9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.5.1.0 pre- 6.1.1.1
Description
Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for Multi-Process OSPF. Introduced on the C-Series. Introduced on the E-Series.
router-id
To configure a fixed router ID, use this command.
S4048�ON
Syntax Parameters
router-id ip-address To remove the fixed router ID, use the no router-id ip-address command.
ip-address
Enter the router ID in the IP address format.
Defaults
none.
Command Modes ROUTER OSPF
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0 pre- 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
You can configure an arbitrary value in the IP address format for each router. However, each router ID must be unique. If you use this command on an OSPF router process, which is already active (that is, has neighbors), a prompt reminding you that changing the router-id brings down the existing OSPF adjacency. The new router ID is effective at the next reload.
1024 Open Shortest Path First (OSPFv2 and OSPFv3)
Example
Dell(conf)#router ospf 100 Dell(conf-router_ospf)#router-id 1.1.1.1 Changing router-id will bring down existing OSPF adjacency [y/n]: Dell(conf-router_ospf)#show config ! router ospf 100 router-id 1.1.1.1 Dell(conf-router_ospf)#no router-id Changing router-id will bring down existing OSPF adjacency [y/n]: Dell#
router ospf
To configure an OSPF instance, enter ROUTER OSPF mode.
S4048�ON
Syntax Parameters
router ospf process-id To clear an OSPF instance, use the no router ospf process-id command.
process-id
Enter a number for the OSPF instance. The range is from 1 to 65535.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.1(0.0) 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0 pre- 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Added support for OSPFv3 on the S4810 and Z9000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Example
You must have an IP address assigned to an interface to enter ROUTER OSPF mode and configure OSPF. Dell(conf)#router ospf 2 Dell(conf-router_ospf)#
Open Shortest Path First (OSPFv2 and OSPFv3) 1025
show config
Display the non-default values in the current OSPF configuration.
S4048�ON
Syntax
show config
Command Modes ROUTER OSPF
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre- 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Example
Dell(conf-router_ospf)#show config ! router ospf 3 passive-interface 0 TenGigabitEthernet 1/1 Dell(conf-router_ospf)#
show ip ospf
Display information on the OSPF process configured on the switch.
S4048�ON
Syntax Parameters
show ip ospf [process-id]
process-id
Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
1026 Open Shortest Path First (OSPFv2 and OSPFv3)
Usage Information
Example
Related Commands
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.8.0 8.3.7.0 7.9.1.0 7.8.1.0 7.8.1.0 7.6.1.0 7.5.1.0 pre- 6.1.1.1
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added output for LSA throttling timers. Introduced on the S4810. Added support for VRF. Added support of Multi-Process OSPF. Added the process-id option, in support of Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
If you delete all the network area commands for Area 0, the show ip ospf command output does not list Area 0.
The following describes the show ip ospf command shown in the following example.
Line Beginning with
Description
"Routing Process..."
"Supports only..."
"SPF schedule..."
"Convergence Level"
"Min LSA...."
"Number of..."
Displays the OSPF process ID and the IP address associated with the process ID. Displays the number of Type of Service (TOS) rouse supported. Displays the delay and hold time configured for this process ID.
Displays the intervals set for LSA transmission and acceptance. Displays the number and type of areas configured for this process ID.
Dell#show ip ospf 10 Routing Process ospf 10 with ID 1.1.1.1 Virtual router default-vrf Supports only single TOS (TOS0) routes SPF schedule delay 5 secs, Hold time between two SPFs 10 secs Convergence Level 0 Min LSA origination 0 msec, Min LSA arrival 1000 msec Min LSA hold time 5000 msec, Max LSA wait time 5000 msec Number of area in this router is 1, normal 1 stub 0 nssa 0
Area BACKBONE (0) Number of interface in this area is 1 SPF algorithm executed 205 times Area ranges are
Dell# show ip ospf database -- displays information about the OSPF routes configured.
Open Shortest Path First (OSPFv2 and OSPFv3) 1027
show ip ospf interface -- displays the OSPF interfaces configured. show ip ospf neighbor -- displays the OSPF neighbors configured.
show ip ospf asbr
Display all autonomous system boundary router (ASBR) routers visible to OSPF.
S4048�ON
Syntax Parameters
show ip ospf [process-id | vrf vrf-name] asbr
process-id
Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process.
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.8.1.0 7.6.1.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support of Multi-Process OSPF. Added the process-id option, in support of Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series and E-Series.
Usage Information
To isolate problems with external routes, use this command. In OSPF, external routes are calculated by adding the LSA cost to the cost of reaching the ASBR router. If an external route does not have the correct cost, use this command to determine if the path to the originating router is correct. The display output is not sorted in any order.
NOTE: ASBRs that are not in directly connected areas are also displayed.
Example
You can determine if an ASBR is in a directly connected area (or not) by the flags. For ASBRs in a directly connected area, E flags are set. In the following example, router 1.1.1.1 is in a directly connected area since the Flag is E/-/-/. For remote ASBRs, the E flag is clear (-/-/-/).
Dell#show ip ospf 1asbr RouterID Flags Cost Nexthop 3.3.3.3 -/-/-/ 2 10.0.0.2
Interface Area
Te 1/1
1
1028 Open Shortest Path First (OSPFv2 and OSPFv3)
1.1.1.1 E/-/-/ 0 0.0.0.0
-
0
Dell#
show ip ospf database
Display all LSA information. If you do not enable OSPF on the switch, no output is generated.
S4048�ON
Syntax Parameters
show ip ospf process-id [vrf vrf-name] database [database-summary]
process-id
databasesummary
Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process.
(OPTIONAL) Enter the keywords database-summary to the display the number of LSA types in each area and the total number of LSAs.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0 pre- 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support of Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
The following describes the show ip ospf process-id database command shown in the following example.
Field
Description
Link ID
Identifies the router ID.
ADV Router
Identifies the advertising router's ID.
Age
Displays the link state age.
Seq#
Identifies the link state sequence number. This number allows you to identify old or duplicate link state advertisements.
Checksum
Displays the Fletcher checksum of an LSA's complete contents.
Link count
Displays the number of interfaces for that router.
Open Shortest Path First (OSPFv2 and OSPFv3) 1029
Example
Related Commands
Dell>show ip ospf 1 database
OSPF Router with ID (11.1.2.1) (Process ID 1)
Router (Area 0.0.0.0)
Link ID
ADV Router Age Seq#
Checksum Link count
11.1.2.1
11.1.2.1
673 0x80000005 0x707e 2
13.1.1.1
13.1.1.1
676 0x80000097 0x1035 2
192.68.135.2 192.68.135.2 1419 0x80000294 0x9cbd 1
Link ID 10.2.3.2 10.2.4.2
Network (Area 0.0.0.0)
ADV Router Age Seq#
Checksum
13.1.1.1
676 0x80000003 0x6592
192.68.135.2 908 0x80000055 0x683e
Link ID 0.0.0.0 1.1.1.1 10.1.1.0 10.1.2.0 10.2.2.0 10.2.3.0 10.2.4.0 11.1.1.0 11.1.2.0 12.1.2.0 13.1.1.0 13.1.2.0 172.16.1.0 Dell>
Type-5 AS External
ADV Router Age Seq#
Checksum Tag
192.68.135.2 908 0x80000052 0xeb83 100
192.68.135.2 908 0x8000002a 0xbd27 0
11.1.2.1
718 0x80000002 0x9012 0
11.1.2.1
718 0x80000002 0x851c 0
11.1.2.1
718 0x80000002 0x7927 0
11.1.2.1
718 0x80000002 0x6e31 0
13.1.1.1
1184 0x80000068 0x45db 0
11.1.2.1
718 0x80000002 0x831e 0
11.1.2.1
718 0x80000002 0x7828 0
192.68.135.2 1663 0x80000054 0xd8d6 0
13.1.1.1
1192 0x8000006b 0x2718 0
13.1.1.1
1184 0x8000006b 0x1c22 0
13.1.1.1
148 0x8000006d 0x533b 0
show ip ospf database asbr-summary -- displays only ASBR summary LSA information.
show ip ospf database asbr-summary
Display information about autonomous system (AS) boundary LSAs.
S4048�ON
Syntax Parameters
show ip ospf [process-id | vrf vrf-name] database asbr-summary [link-stateid] [adv-router ip-address]
process-id link-state-id
adv-router ipaddress
Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process.
(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value depends on the LSA type, and it can be one of the following:
the network's IP address for Type 3 LSAs or Type 5 LSAs the router's OSPF router ID for Type 1 LSAs or Type 4 LSAs the default destination (0.0.0.0) for Type 5 LSAs
(OPTIONAL) Enter the keywords adv-router and the ip-address to display only the LSA information about that router.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
1030 Open Shortest Path First (OSPFv2 and OSPFv3)
Usage Information
Example
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0 pre- 6.1.1.1
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
The following describes the show ip ospf database asbr-summary command shown in the following example.
Field
Description
LS Age Options
Displays the LSA's age.
Displays the optional capabilities available on router. The following options can be found in this item:
TOS-capability or No TOS-capability is displayed depending on whether the router can support Type of Service.
DC or No DC is displayed depending on whether the originating router can support OSPF over demand circuits.
E or No E is displayed on whether the originating router can accept AS External LSAs.
LS Type Link State ID Advertising Router Checksum Length Network Mask TOS Metric
Displays the LSA's type. Displays the Link State ID. Identifies the advertising router's ID.
Displays the Fletcher checksum of the LSA's complete contents. Displays the length in bytes of the LSA. Displays the network mask implemented on the area. Displays the Type of Service (TOS) options. Option 0 is the only option. Displays the LSA metric.
Dell#show ip ospf 100 database asbr-summary OSPF Router with ID (1.1.1.10) (Process ID 100) Summary Asbr (Area 0.0.0.0)
LS age: 1437 Options: (No TOS-capability, No DC, E) LS type: Summary Asbr Link State ID: 103.1.50.1 Advertising Router: 1.1.1.10 LS Seq Number: 0x8000000f Checksum: 0x8221
Open Shortest Path First (OSPFv2 and OSPFv3) 1031
Related Commands
Length: 28 Network Mask: /0
TOS: 0 Metric: 2 LS age: 473 Options: (No TOS-capability, No DC, E) LS type: Summary Asbr Link State ID: 104.1.50.1 Advertising Router: 1.1.1.10 LS Seq Number: 0x80000010 Checksum: 0x4198 Length: 28 --More-show ip ospf database -- displays OSPF database information.
show ip ospf database external
Display information on the AS external (type 5) LSAs.
Syntax Parameters
show ip ospf [process-id] database external [link-state-id] [adv-router ipaddress]
process-id link-state-id
adv-router ipaddress
Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process.
(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value depends on the LSA type, and it can be one of the following:
the network's IP address for Type 3 LSAs or Type 5 LSAs the router's OSPF router ID for Type 1 LSAs or Type 4 LSAs the default destination (0.0.0.0) for Type 5 LSAs
(OPTIONAL) Enter the keywords adv-router and the ip-address to display only the LSA information about that router.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for Multi-Process OSPF. Introduced on the S-Series.
1032 Open Shortest Path First (OSPFv2 and OSPFv3)
Usage Information
Example
Version
7.5.1.0 pre-6.1.1.1
Description
Introduced on the C-Series. Introduced on the E-Series.
The following describes the show ip ospf process-id database external command shown in the following example.
Field
Description
LS Age Options
Displays the LSA's age.
Displays the optional capabilities available on router. The following options can be found in this item:
TOS-capability or No TOS-capability is displayed depending on whether the router can support Type of Service.
DC or No DC is displayed depending on whether the originating router can support OSPF over demand circuits.
E or No E is displayed on whether the originating router can accept AS External LSAs.
LS Type
Displays the LSA's type.
Link State ID
Displays the Link State ID.
Advertising Router
Identifies the router ID of the LSA's originating router.
LS Seq Number Identifies the link state sequence number. This number enables you to identify old or duplicate LSAs.
Checksum
Displays the Fletcher checksum of the LSA's complete contents.
Length
Displays the length in bytes of the LSA.
Network Mask Displays the network mask implemented on the area.
Metrics Type
Displays the external type.
TOS
Displays the Type of Service (TOS) options. Option 0 is the only option.
Metric
Displays the LSA metric.
Forward Address Identifies the address of the forwarding router. Data traffic is forwarded to this router. If the forwarding address is 0.0.0.0, data traffic is forwarded to the originating router.
External Route Tag
Displays the 32-bit field attached to each external route. The OSPF protocol does not use this field, but you can use the field for external route management.
Dell#show ip ospf 1 database external OSPF Router with ID (20.20.20.5) (Process ID 1) Type-5 AS External
LS age: 612 Options: (No TOS-capability, No DC, E) LS type: Type-5 AS External Link State ID: 12.12.12.2 Advertising Router: 20.31.3.1 LS Seq Number: 0x80000007 Checksum: 0x4cde Length: 36 Network Mask: /32
Metrics Type: 2 TOS: 0 Metrics: 25 Forward Address: 0.0.0.0
Open Shortest Path First (OSPFv2 and OSPFv3) 1033
Related Commands
External Route Tag: 43 LS age: 1868 Options: (No TOS-capability, DC) LS type: Type-5 AS External Link State ID: 24.216.12.0 Advertising Router: 20.20.20.8 LS Seq Number: 0x80000005 Checksum: 0xa00e Length: 36 Network Mask: /24
Metrics Type: 2 TOS: 0 Metrics: 1 Forward Address: 0.0.0.0 External Route Tag: 701 Dell# show ip ospf database -- displays OSPF database information.
show ip ospf database network
Display the network (type 2) LSA information.
Syntax Parameters
show ip ospf [process-id] database network [link-state-id] [adv-router ipaddress]
process-id link-state-id
adv-router ipaddress
Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process.
(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value depends on the LSA type, and it can be one of the following:
the network's IP address for Type 3 LSAs or Type 5 LSAs the router's OSPF router ID for Type 1 LSAs or Type 4 LSAs the default destination (0.0.0.0) for Type 5 LSAs
(OPTIONAL) Enter the keywords adv-router and the ip-address to display only the LSA information about that router.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
1034 Open Shortest Path First (OSPFv2 and OSPFv3)
Usage Information
Example
Version
7.8.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.1
Description
Added support for Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
The following describes the show ip ospf process-id database network command shown in the following example.
Field
Description
LS Age Options
Displays the LSA's age.
Displays the optional capabilities available on router. The following options can be found in this item:
TOS-capability or No TOS-capability is displayed depending on whether the router can support Type of Service.
DC or No DC is displayed depending on whether the originating router can support OSPF over demand circuits.
E or No E is displayed on whether the originating router can accept AS External LSAs.
LS Type Link State ID Advertising Router Checksum
Length Network Mask Attached Router
Displays the LSA's type. Displays the Link State ID. Identifies the router ID of the LSA's originating router.
Identifies the link state sequence number. This number enables you to identify old or duplicate LSAs. Displays the Fletcher checksum of an LSA's complete contents. Displays the length in bytes of the LSA. Identifies the IP address of routers attached to the network.
Dell#show ip ospf 1 data network OSPF Router with ID (20.20.20.5) (Process ID 1) Network (Area 0.0.0.0)
LS age: 1372 Options: (No TOS-capability, DC, E) LS type: Network Link State ID: 202.10.10.2 Advertising Router: 20.20.20.8 LS Seq Number: 0x80000006 Checksum: 0xa35 Length: 36 Network Mask: /24
Attached Router: 20.20.20.8 Attached Router: 20.20.20.9 Attached Router: 20.20.20.7
Network (Area 0.0.0.1) LS age: 252 Options: (TOS-capability, No DC, E) LS type: Network Link State ID: 192.10.10.2 Advertising Router: 192.10.10.2 LS Seq Number: 0x80000007 Checksum: 0x4309 Length: 36
Open Shortest Path First (OSPFv2 and OSPFv3) 1035
Related Commands
Network Mask: /24 Attached Router: 192.10.10.2 Attached Router: 20.20.20.1 Attached Router: 20.20.20.5
Dell# show ip ospf database -- displays OSPF database information.
show ip ospf database nssa-external
Display NSSA-External (type 7) LSA information.
Syntax Parameters
show ip ospf [process-id] database nssa-external [link-state-id] [advrouter ip-address]
process-id link-state-id
Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process.
(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value depends on the LSA type, and it can be one of the following:
the network's IP address for Type 3 LSAs or Type 5 LSAs the router's OSPF router ID for Type 1 LSAs or Type 4 LSAs the default destination (0.0.0.0) for Type 5 LSAs
adv-router ipaddress
(OPTIONAL) Enter the keywords adv-router and the ip-address to display only the LSA information about that router.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Related Commands
show ip ospf database -- displays OSPF database information.
1036 Open Shortest Path First (OSPFv2 and OSPFv3)
show ip ospf database opaque-area
Display the opaque-area (type 10) LSA information.
Syntax Parameters
show ip ospf [process-id] database opaque-area [link-state-id] [adv-router ip-address]
process-id link-state-id
adv-router ipaddress
Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process.
(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value depends on the LSA type, and it can be one of the following:
the network's IP address for Type 3 LSAs or Type 5 LSAs the router's OSPF router ID for Type 1 LSAs or Type 4 LSAs the default destination (0.0.0.0) for Type 5 LSAs
(OPTIONAL) Enter the keywords adv-router and the ip-address to display only the LSA information about that router.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
The following describes the show ip ospf process-id database opaque-area command shown in the following example.
Item
Description
LS Age Options
Displays the LSA's age.
Displays the optional capabilities available on router. The following options can be found in this item:
TOS-capability or No TOS-capability is displayed depending on whether the router can support Type of Service.
DC or No DC is displayed depending on whether the originating router can support OSPF over demand circuits.
Open Shortest Path First (OSPFv2 and OSPFv3) 1037
Example
Related Commands
Item
LS Type Link State ID Advertising Router Checksum Length Opaque Type Opaque ID
Description
E or No E is displayed on whether the originating router can accept AS External LSAs.
Displays the LSA's type. Displays the Link State ID. Identifies the advertising router's ID.
Displays the Fletcher checksum of the LSA's complete contents. Displays the length in bytes of the LSA. Displays the Opaque type field (the first 8 bits of the Link State ID). Displays the Opaque type-specific ID (the remaining 24 bits of the Link State ID).
Dell>show ip ospf 1 database opaque-area OSPF Router with ID (3.3.3.3) (Process ID 1) Type-10 Opaque Link Area (Area 0)
LS age: 1133 Options: (No TOS-capability, No DC, E) LS type: Type-10 Opaque Link Area Link State ID: 1.0.0.1 Advertising Router: 10.16.1.160 LS Seq Number: 0x80000416 Checksum: 0x376 Length: 28 Opaque Type: 1 Opaque ID: 1 Unable to display opaque data LS age: 833 Options: (No TOS-capability, No DC, E) LS type: Type-10 Opaque Link Area Link State ID: 1.0.0.2 Advertising Router: 10.16.1.160 LS Seq Number: 0x80000002 Checksum: 0x19c2 --More--
show ip ospf database -- displays OSPF database information.
show ip ospf database opaque-as
Display the opaque-as (type 11) LSA information.
Syntax Parameters
show ip ospf process-id database opaque-as [link-state-id] [adv-router ipaddress]
process-id link-state-id
Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process.
(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value depends on the LSA type, and it can be one of the following:
the network's IP address for Type 3 LSAs or Type 5 LSAs the router's OSPF router ID for Type 1 LSAs or Type 4 LSAs the default destination (0.0.0.0) for Type 5 LSAs
1038 Open Shortest Path First (OSPFv2 and OSPFv3)
adv-router ipaddress
(OPTIONAL) Enter the keywords adv-router and the ip-address to display only the LSA information about that router.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Related Commands
show ip ospf database -- displays OSPF database information.
show ip ospf database opaque-link
Display the opaque-link (type 9) LSA information.
Syntax Parameters
show ip ospf [process-id] database opaque-link [link-state-id] [adv-router ip-address]
process-id link-state-id
Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process.
(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value depends on the LSA type, and it can be one of the following:
the network's IP address for Type 3 LSAs or Type 5 LSAs the router's OSPF router ID for Type 1 LSAs or Type 4 LSAs the default destination (0.0.0.0) for Type 5 LSAs
adv-router ipaddress
(OPTIONAL) Enter the keywords adv-router then the IP address of an Advertising Router to display only the LSA information about that router.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Open Shortest Path First (OSPFv2 and OSPFv3) 1039
Related Commands
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
show ip ospf database -- displays OSPF database information.
show ip ospf database router
Display the router (type 1) LSA information.
Syntax Parameters
show ip ospf [process-id] database router [link-state-id] [adv-router ipaddress]
process-id link-state-id
adv-router ipaddress
Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process.
(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value depends on the LSA type, and it can be one of the following:
the network's IP address for Type 3 LSAs or Type 5 LSAs the router's OSPF router ID for Type 1 LSAs or Type 4 LSAs the default destination (0.0.0.0) for Type 5 LSAs
(OPTIONAL) Enter the keywords adv-router followed by the IP address of an Advertising Router to display only the LSA information about that router.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500.
1040 Open Shortest Path First (OSPFv2 and OSPFv3)
Usage Information
Example
Version
9.0.20 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.1
Description
Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
The following describes the show ip ospf process-id database router command shown in the following example.
Item
Description
LS Age Options
Displays the LSA age.
Displays the optional capabilities available on router. The following options can be found in this item:
TOS-capability or No TOS-capability is displayed depending on whether the router can support Type of Service.
DC or No DC is displayed depending on whether the originating router can support OSPF over demand circuits.
E or No E is displayed on whether the originating router can accept AS External LSAs.
LS Type Link State ID Advertising Router LS Seq Number
Checksum Length Number of Links
Link connected to: (Link ID) (Link Data) Number of TOS Metric TOS 0 Metric
Displays the LSA type. Displays the Link State ID. Identifies the router ID of the LSA's originating router.
Displays the link state sequence number. This number detects duplicate or old LSAs. Displays the Fletcher checksum of an LSA's complete contents. Displays the length in bytes of the LSA. Displays the number of active links to the type of router (Area Border Router or AS Boundary Router) listed in the previous line. Identifies the type of network to which the router is connected.
Identifies the link type and address. Identifies the router interface address. Lists the number of TOS metrics.
Lists the number of TOS 0 metrics.
Dell#show ip ospf 100 database router OSPF Router with ID (1.1.1.10) (Process ID 100) Router (Area 0)
LS age: 967 Options: (No TOS-capability, No DC, E) LS type: Router
Open Shortest Path First (OSPFv2 and OSPFv3) 1041
Related Commands
Link State ID: 1.1.1.10 Advertising Router: 1.1.1.10 LS Seq Number: 0x8000012f Checksum: 0x3357 Length: 144 AS Boundary Router Area Border Router
Number of Links: 10 Link connected to: a Transit Network
(Link ID) Designated Router address: 192.68.129.1 (Link Data) Router Interface address: 192.68.129.1 Number of TOS metric: 0
TOS 0 Metric: 1 Link connected to: a Transit Network
(Link ID) Designated Router address: 192.68.130.1 (Link Data) Router Interface address: 192.68.130.1 Number of TOS metric: 0
TOS 0 Metric: 1 Link connected to: a Transit Network
(Link ID) Designated Router address: 192.68.142.2 (Link Data) Router Interface address: 192.68.142.2 Number of TOS metric: 0
TOS 0 Metric: 1 Link connected to: a Transit Network
(Link ID) Designated Router address: 192.68.141.2 (Link Data) Router Interface address: 192.68.141.2 Number of TOS metric: 0
TOS 0 Metric: 1 Link connected to: a Transit Network
(Link ID) Designated Router address: 192.68.140.2 (Link Data) Router Interface address: 192.68.140.2 Number of TOS metric: 0
TOS 0 Metric: 1 Link connected to: a Stub Network
(Link ID) Network/subnet number: 11.1.5.0 --More--
show ip ospf database -- displays OSPF database information.
show ip ospf database summary
Display the network summary (type 3) LSA routing information.
Syntax Parameters
show ip ospf [process-id] database summary [link-state-id] [adv-router ipaddress]
process-id link-state-id
adv-router ipaddress
Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process.
(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value depends on the LSA type, and it can be one of the following:
the network's IP address for Type 3 LSAs or Type 5 LSAs the router's OSPF router ID for Type 1 LSAs or Type 4 LSAs the default destination (0.0.0.0) for Type 5 LSAs
(OPTIONAL) Enter the keywords adv-router then the IP address of an Advertising Router to display only the LSA information about that router.
1042 Open Shortest Path First (OSPFv2 and OSPFv3)
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
The following describes the show ip ospf process-id database summary command shown in the following example.
Item
Description
LS Age Options
Displays the LSA age.
Displays the optional capabilities available on router. The following options can be found in this item:
TOS-capability or No TOS-capability is displayed depending on whether the router can support Type of Service.
DC or No DC is displayed depending on whether the originating router can support OSPF over demand circuits.
E or No E is displayed on whether the originating router can accept AS External LSAs.
LS Type Link State ID Advertising Router LS Seq Number
Checksum Length Network Mask TOS Metric
Displays the LSA type. Displays the Link State ID. Identifies the router ID of the LSA's originating router.
Displays the link state sequence number. This number allows you to identify old or duplicate LSAs. Displays the Fletcher checksum of an LSA's complete contents. Displays the length in bytes of the LSA. Displays the network mask implemented on the area. Displays the TOS options. Option 0 is the only option. Displays the LSA metrics.
Example
Dell#show ip ospf 100 database summary
Open Shortest Path First (OSPFv2 and OSPFv3) 1043
Related Commands
OSPF Router with ID (1.1.1.10) (Process ID 100) Summary Network (Area 0.0.0.0)
LS age: 1551 Options: (No TOS-capability, DC, E) LS type: Summary Network Link State ID: 192.68.16.0 Advertising Router: 192.168.17.1 LS Seq Number: 0x80000054 Checksum: 0xb5a2 Length: 28 Network Mask: /24
TOS: 0 Metric: 1 LS age: 9 Options: (No TOS-capability, No DC, E) LS type: Summary Network Link State ID: 192.68.32.0 Advertising Router: 1.1.1.10 LS Seq Number: 0x80000016 Checksum: 0x987c Length: 28 Network Mask: /24
TOS: 0 Metric: 1 LS age: 7 Options: (No TOS-capability, No DC, E) LS type: Summary Network Link State ID: 192.68.33.0 Advertising Router: 1.1.1.10 LS Seq Number: 0x80000016 Checksum: 0x1241 Length: 28 Network Mask: /26
TOS: 0 Metric: 1 Dell#
show ip ospf database -- displays OSPF database information.
show ip ospf interface
Display the OSPF interfaces configured. If OSPF is not enabled on the switch, no output is generated.
Syntax Parameters
show ip ospf [process-id | vrf vrf-name] interface [interface]
process-id vrf vrf-name interface
Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process.
Enter the keyword vrf followed by the name of the VRF to show the OSPF processes that are tied to a specific VRF.
(OPTIONAL) Enter the following keywords and slot/port or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
1044 Open Shortest Path First (OSPFv2 and OSPFv3)
For a Null interface, enter the keyword null then the Null interface number. For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4.(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Added support for VRF. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
The following describes the show ip ospf process-id interface command shown in the following example.
Item
Description
GigabitEthernet.. This line identifies the interface type slot/port and the status of the OSPF protocol
.
on that interface.
Internet Address...
This line displays the IP address, network mask and area assigned to this interface.
Process ID...
This line displays the OSPF Process ID, Router ID, Network type and cost metric for this interface.
Transmit Delay... This line displays the interface's settings for Transmit Delay, State, and Priority. In the State setting, BDR is Backup Designated Router.
Designated Router...
This line displays the ID of the Designated Router and its interface address.
Backup Designated...
This line displays the ID of the Backup Designated Router and its interface address.
Timer intervals... This line displays the interface's timer settings for Hello interval, Dead interval, Transmit Delay (Wait), and Retransmit Interval.
Hello due...
This line displays the amount time until the next Hello packet is sent out this interface.
Neighbor Count...
This line displays the number of neighbors and adjacent neighbors. Listed below this line are the details about each adjacent neighbor.
Open Shortest Path First (OSPFv2 and OSPFv3) 1045
Example
Dell>show ip ospf int TenGigabitEthernet 1/7 is up, line protocol is up
Internet Address 192.168.1.2/30, Area 0.0.0.1 Process ID 1, Router ID 192.168.253.2, Network Type BROADCAST, Cost: 1 Transmit Delay is 1 sec, State DR, Priority 1 Designated Router (ID) 192.168.253.2, Interface address 192.168.1.2 Backup Designated Router (ID) 192.168.253.1, Interface address 192.168.1.1 Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
Hello due in 00:00:02 Neighbor Count is 1, Adjacent neighbor count is 1
Adjacent with neighbor 192.168.253.1 (Backup Designated Router) TenGigabitEthernet 1/8 is up, line protocol is up
Internet Address 192.168.0.1/24, Area 0.0.0.1 Process ID 1, Router ID 192.168.253.2, Network Type BROADCAST, Cost: 1 Transmit Delay is 1 sec, State DROTHER, Priority 1 Designated Router (ID) 192.168.253.5, Interface address 192.168.0.4 Backup Designated Router (ID) 192.168.253.3, Interface address 192.168.0.2 Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
Hello due in 00:00:08 Neighbor Count is 3, Adjacent neighbor count is 2
Adjacent with neighbor 192.168.253.5 (Designated Router) Adjacent with neighbor 192.168.253.3 (Backup Designated Router) Loopback 0 is up, line protocol is up Internet Address 192.168.253.2/32, Area 0.0.0.1 Process ID 1, Router ID 192.168.253.2, Network Type LOOPBACK, Cost: 1 Loopback interface is treated as a stub Host. Dell>
show ip ospf neighbor
Display the OSPF neighbors connected to the local router.
Syntax Parameters
show ip ospf [process-id] neighbor
process-id
Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000.. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
1046 Open Shortest Path First (OSPFv2 and OSPFv3)
Usage Information
Example
Version
7.8.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.1
Description
Added support for Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
The following describes the show ip ospf process-id neighbor command shown in the following example.
Item
Description
Neighbor ID
Displays the neighbor router ID.
Pri State
Displays the priority assigned neighbor. Displays the OSPF state of the neighbor.
Dead Time
Displays the expected time until FTOS declares the neighbor dead.
Address Interface
Displays the IP address of the neighbor. Displays the interface type slot/port information.
Area
Displays the neighbor's area (process ID).
Dell#show ip ospf 34 neighbor
Neighbor ID Pri State
Dead Time Address Interface Area
20.20.20.7 1 FULL/DR
00:00:32 182.10.10.3 Te 1/1 0.0.0.2
192.10.10.2 1 FULL/DR
00:00:37 192.10.10.2 Te 1/2 0.0.0.1
20.20.20.1 1 FULL/DROTHER00:00:36 192.10.10.4 Te 1/3 0.0.0.1
Dell#
show ip ospf routes
Display routes OSPF calculates and stores in OSPF RIB.
Syntax Parameters
show ip ospf [process-id] routes
process-id
Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process.
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500.
Open Shortest Path First (OSPFv2 and OSPFv3) 1047
Usage Information
Example
Version
9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0
Description
Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series and E-Series.
This command is useful in isolating routing problems between the OSPF and the RTM. For example, if a route is missing from the RTM/FIB but is visible from the display output of this command, the problem is with downloading the route to the RTM.
This command has the following limitations:
The display output is sorted by prefixes; intra-area ECMP routes are not displayed together. For Type 2 external routes, Type 1 cost is not displayed.
NOTE: Starting with Version 9.4(0.0), the loopback IP address advertised to the neighbor is not displayed in the output because they are not accounted as inactive OSPF routes, whereas the loopback IP address is displayed until Dell Networking OS Version 9.3(0.0). Starting with Version 9.4(0.0), the show ip ospf routes command displays the interface and area ID information of connected networks in addition to the other settings, whereas these details are not displayed until Dell Networking OS Version 9.3(0.0). Starting with Version 9.4(0.0), the metric of E2 routes in the output is displayed as an external metric, whereas until Dell Networking OS Version 9.3(0.0), the number of hops to the ASBR for E2 routes are displayed in the output.
Dell#show ip ospf 100 route
Prefix
Cost Nexthop
1.1.1.1
1 0.0.0.0
3.3.3.3
2 13.0.0.3
13.0.0.0
1 0.0.0.0
150.150.150.0 2 13.0.0.3
172.30.1.0
2 13.0.0.3
Dell#
Interface Area
Lo 0
0
Te 1/47 1
Te 1/47 0
Te 1/47 -
Te 1/47 1
Type Intra-Area Intra-Area Intra-Area External Intra-Area
show ip ospf statistics
Display OSPF statistics.
Syntax Parameters
show ip ospf [process-id | vrf vrf-name] statistics global | [interface name {neighbor router-id}]
process-id vrf vrf-name global interface name
Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process.
Enter the keyword vrf followed by the name of the VRF to display statistics corresponding to the OSPF process that is tied to a specific VRF.
Enter the keyword global to display the packet counts received on all running OSPF interfaces and packet counts OSPF neighbors receive and transmit.
(OPTIONAL) Enter the keyword interface then one of the following interface keywords and slot/port or number information:
1048 Open Shortest Path First (OSPFv2 and OSPFv3)
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
neighbor router- (OPTIONAL) Enter the keyword neighbor then the neighbor's router-id in dotted
id
decimal format (A.B.C.D.).
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4.(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Added support for VRF. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
The following describes the show ip ospf statistics process-id global command shown in the following example.
Row Heading Description
Total
Displays the total number of packets the OSPF process receives/transmits.
Error
Displays the error count while receiving and transmitting packets by the OSPF process.
Hello
Number of OSPF Hello packets.
DDiscr
Number of database description packets.
LSReq
Number of link state request packets.
LSUpd
Number of link state update packets.
LSAck
Number of link state acknowledgement packets.
TxQ-Len
The transmission queue length.
RxQ-Len
The reception queue length.
Open Shortest Path First (OSPFv2 and OSPFv3) 1049
Example
Row Heading Description
Tx-Mark Rx-Mark Hello-Q LSR-Q Other-Q
The highest number mark in the transmission queue. The highest number mark in the reception queue. The queue, for transmission or reception, for the hello packets. The queue, for transmission or reception, for the link state request packets. The queue, for transmission or reception, for the link state acknowledgement, database description, and update packets.
The following describes the error definitions for the show ip ospf statistics process-id global command.
Error Type
Description
Intf_Down Non-Dr
Self-Org Wrong_Len Invld-Nbr Nbr-State
Auth-Error MD5-Error Cksum-Err Version AreaMismatch Conf-Issue
No-Buffer Seq-no Socket Q-overflow Unknown-Pkt
Received packets on an interface that is either down or OSPF is not enabled. Received packets with a destination address of ALL_DRS even though SELF is not a designated router. Receive the self originated packet. The received packet length is different to what was indicated in the OSPF header. LSA, LSR, LSU, and DDB are received from a peer which is not a neighbor peer. LSA, LSR, and LSU are received from a neighbor with stats less than the loading state. Simple authentication error. MD5 error Checksum Error Version mismatch Area mismatch The received hello packet has a different hello or dead interval than the configuration. Buffer allocation failure. A sequence no errors occurred during the database exchange process. Socket Read/Write operation error. Packets dropped due to queue overflow. Received packet is not an OSPF packet.
Dell#show ip ospf 1 statistics global
OSPF Packet Count
Total Error Hello DDiscr LSReq LSUpd LSAck
RX 10
0
8
2
0
0
0
TX 10
0
10
0
0
0
0
OSPF Global Queue Length
TxQ-Len RxQ-Len Tx-Mark Rx-Mark
Hello-Q 0
0
0
2
LSR-Q
0
0
0
0
Other-Q 0
0
0
0
Error packets (Only for RX)
Intf-Down 0
Wrong-Len 0
Auth-Err 0
Version
0
Non-Dr
0
Invld-Nbr 0
MD5-Err
0
AreaMis
0
Self-Org 0 Nbr-State 0 Chksum 0 Conf-Issues 0
1050 Open Shortest Path First (OSPFv2 and OSPFv3)
Usage Information
Example (Statistics)
Related Commands
No-Buffer 0 Seq-No
0
Q-OverFlow 0 Unkown-Pkt 0
Error packets (Only for TX)
Socket Errors
0
Dell#
Socket 0
The show ip ospf process-id statistics command displays the error packet count received on each interface as:
The hello-timer remaining value for each interface The wait-timer remaining value for each interface The grace-timer remaining value for each interface The packet count received and transmitted for each neighbor Dead timer remaining value for each neighbor Transmit timer remaining value for each neighbor The LSU Q length and its highest mark for each neighbor The LSR Q length and its highest mark for each neighbor
Dell(conf-if-te-1/6)#do show ip ospf statistics Interface TenGigabitEthernet 1/6
Error packets (Receive statistics) Intf-Down 0 Non-Dr 0 Self-Org 0 Wrong-Len 0 Invld-Nbr 0 Nbr-State 0 Auth-Error 0 MD5-Error 0 Cksum-Err 0 Version 0 AreaMisMatch 0 Conf-Issue 0 SeqNo-Err 0 Unknown-Pkt 0 Bad-LsReq 0 RtidZero 0
Neighbor ID 4.4.4.4 Packet Statistics Hello DDiscr LSReq LSUpd LSAck RX 5 2 1 3 2 TX 6 5 1 3 3 Timers Hello 0 Wait 0 Grace 0 Dead 39 Transmit 4 Queue Statistics LSU-Q-Len 0 LSU-Q-Wmark 1 LSR-Q-Len 0 LSR-Q-Wmark 1
Dell(conf-if-te-1/6)# clear ip ospf statistics -- clears the packet statistics in all interfaces and neighbors.
show ip ospf timers rate-limit
Show the LSA currently in the queue waiting for timers to expire.
Syntax Parameters
show ip ospf [process-id] timers rate-limit
process-id
Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process.
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Open Shortest Path First (OSPFv2 and OSPFv3) 1051
Example
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.8.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Dell#show ip ospf 10 timers rate-limit List of LSAs in rate limit Queue LSA id: 1.1.1.0 Type: 3 Adv Rtid: 3.3.3.3 Expiry time: 00:00:09.111 LSA id: 3.3.3.3 Type: 1 Adv Rtid: 3.3.3.3 Expiry time: 00:00:23.96 Dell#
show ip ospf topology
Display routers in directly connected areas.
Syntax Parameters
show ip ospf [process-id] topology
process-id
Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process.
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for Multi-Process OSPF. Introduced on the S-Series.
1052 Open Shortest Path First (OSPFv2 and OSPFv3)
Usage Information
Example
Version
7.5.1.0
Description
Introduced on the C-Series and E-Series.
To isolate problems with inter-area and external routes, use this command. In OSPF inter-area and external routes are calculated by adding LSA cost to the cost of reaching the router. If an inter-area or external route is not of correct cost, the display can determine if the path to the originating router is correct or not.
Dell#show ip ospf 1 topology
Router ID 3.3.3.3 1.1.1.1 Dell#
Flags Cost E/B/-/ 1 E/-/-/ 1
Nexthop 20.0.0.3 10.0.0.1
Interface Area
Gi 13/1 0
Gi 7/1
1
summary-address
To advertise one external route, set the OSPF ASBR.
Syntax Parameters
summary-address ip-address mask [not-advertise] [tag tag-value] To disable summary address, use the no summary-address ip-address mask command.
ip-address mask not-advertise
tag tag-value
Specify the IP address in dotted decimal format of the address to summarize.
Specify the mask in dotted decimal format of the address to summarize.
(OPTIONAL) Enter the keywords not-advertise to suppress that match the network prefix/mask pair.
(OPTIONAL) Enter the keyword tag then a value to match on routes redistributed through a route map. The range is from 0 to 4294967295.
Defaults
Not configured.
Command Modes ROUTER OSPF
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series.
Open Shortest Path First (OSPFv2 and OSPFv3) 1053
Usage Information
Related Commands
Version
pre-6.1.1.1
Description
Introduced on the E-Series.
The area range command summarizes routes for the different areas.
With the not-advertise parameter configured, you can use this command to filter out some external routes. For example, if you want to redistribute static routes to OSPF, but you don't want OSPF to advertise routes with prefix 1.1.0.0, you can configure the summary-address 1.1.0.0 255.255.0.0 notadvertise to filter out all the routes fall in range 1.1.0.0/16.
area range -- summarizes routes within an area.
timers spf
Set the time interval between when the switch receives a topology change and starts a shortest path first (SPF) calculation.
S4048�ON
Syntax Parameters
timers spf delay holdtime To return to the default, use the no timers spf command.
delay holdtime
Enter a number as the delay. The range is from 0 to 4294967295. The default is 5 seconds.
Enter a number as the hold time. The range is from 0 to 4294967295. The default is 10 seconds.
Defaults
delay = 5 seconds holdtime = 10 seconds
Command Modes ROUTER OSPF
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 7.5.1.0 pre-6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Setting the delay and holdtime parameters to a low number enables the switch to an alternate path quickly but requires more CPU usage.
1054 Open Shortest Path First (OSPFv2 and OSPFv3)
Example
Dell# Dell#conf Dell(conf)#router ospf 1 Dell(conf-router_ospf-1)#timer spf 2 5 Dell(conf-router_ospf-1)# Dell(conf-router_ospf-1)#show config ! router ospf 1 timers spf 2 5 Dell(conf-router_ospf-1)# Dell(conf-router_ospf-1)#end Dell# Dell#
timers throttle lsa all
Configure LSA transmit intervals.
Syntax Parameters
timers throttle lsa all {start-interval | hold-interval | max-interval} To return to the default, use the no timers throttle lsa command.
start-interval hold-interval max-interval
Set the minimum interval between initial sending and resending the same LSA. The range is from 0 to 600,000 milliseconds.
Set the next interval to send the same LSA. This interval is the time between sending the same LSA after the start-interval has been attempted. The range is from 1 to 600,000 milliseconds.
Set the maximum amount of time the system waits before sending the LSA. The range is from 1 to 600,000 milliseconds.
Defaults
start-interval: 0 msec hold-interval: 5000 msec max-interval: 5000 msec
Command Modes ROUTER OSPF
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 9.0.2.0 8.3.11.1 8.3.8.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S6000.. Introduced on the Z9000. Introduced on the S4810.
Usage Information
LSAs are sent after the start-interval and then after hold-interval until the maximum interval is reached. In throttling, exponential backoff is used when sending same LSA, so that the interval is multiplied until the maximum time is reached. For example, if the start-interval 5000 and hold-interval 1000 and max-interval
Open Shortest Path First (OSPFv2 and OSPFv3) 1055
100,000, the LSA is sent at 5000 msec, then 1000 msec, then 2000 msec, them 4000 until 100,000 msec is reached.
timers throttle lsa arrival
Configure the LSA acceptance intervals.
Syntax Parameters
timers throttle lsa arrival arrival-time To return to the default, use the no timers throttle lsa command.
arrival-time
Set the interval between receiving the same LSA repeatedly, to allow sufficient time for the system to accept the LSA. The range is from 0 to 600,000 milliseconds.
Defaults
1000 msec
Command Modes ROUTER OSPF
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.8.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
OSPFv3 Commands
Open shortest path first version 3 (OSPFv3) for IPv6 is supported on the S4048�ON platform. The fundamental mechanisms of OSPF (flooding, DR election, area support, SPF calculations, and so on) remain unchanged. However, OSPFv3 runs on a per-link basis instead of on a per-IP-subnet basis. Most changes were necessary to handle the increased address size of IPv6. The Dell Networking implementation of OSPFv3 is based on IETF RFC 2740.
area authentication
Configure an IPsec authentication policy for OSPFv3 packets in an OFSPFv3 area.
Syntax
area area-id authentication ipsec spi number {MD5 | SHA1} [key-encryptiontype] key
1056 Open Shortest Path First (OSPFv2 and OSPFv3)
Parameters
area area-id
Area for which OSPFv3 traffic is to be authenticated. For area-id, you can enter a number.
The range is from 0 to 4294967295.
ipsec spi number Security Policy index (SPI) value that identifies an IPsec security policy. The range is from 256 to 4294967295.
MD5 | SHA1
Authentication type: Message Digest 5 (MD5) or Secure Hash Algorithm 1 (SHA-1).
key-encryptiontype
(OPTIONAL) Specifies if the key is encrypted. The values are 0 (key is not encrypted) or 7 (key is encrypted).
key
Text string used in authentication.
For MD5 authentication, the key must be 32 hex digits (non-encrypted) or 64 hex digits (encrypted).
For SHA-1 authentication, the key must be 40 hex digits (non-encrypted) or 80 hex digits (encrypted).
Defaults
Not configured.
Command Modes ROUTER OSPFv3
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.1.(0.0) 8.3.19.0 8.4.2.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4810 and Z9000. Introduced on the S4820T. Introduced on the E-Series TeraScale.
Usage Information
Related Commands
Before you enable IPsec authentication on an OSPFv3 area, you must first enable OSPFv3 globally on the router. Configure the same authentication policy (same SPI and key) on each interface in an OSPFv3 link.
An SPI number must be unique to one IPsec security policy (authentication or encryption) on the router.
If you have enabled IPsec encryption in an OSPFv3 area with the area encryption command, you cannot use the area authentication command in the area at the same time.
The configuration of IPsec authentication on an interface-level takes precedence over an area-level configuration. If you remove an interface configuration, an area authentication policy that has been configured is applied to the interface.
To remove an IPsec authentication policy from an OSPFv3 area, enter the no area area-id authentication spi number command.
ipv6 ospf authentication � configures an IPsec authentication policy on an OSPFv3 interface.
show crypto ipsec policy � displays the configuration of IPsec authentication policies.
Open Shortest Path First (OSPFv2 and OSPFv3) 1057
area encryption
Configure an IPsec encryption policy for OSPFv3 packets in an OSPFv3 area.
Syntax Parameters
area area-id encryption ipsec spi number esp encryption-algorithm [keyencryption-type] key authentication-algorithm [key-encryption-type] key
area area-id
Area for which OSPFv3 traffic is to be encrypted. For area-id, enter a number. The range is from 0 to 4294967295.
ipsec spi number Security Policy index (SPI) value that identifies an IPsec security policy. The range is from 256 to 4294967295.
esp encryptionalgorithm
Encryption algorithm used with ESP. Valid values are: 3DES, DES, AES-CBC, and NULL. For AES-CBC, only the AES-128 and AES-192 ciphers are supported.
key-encryptionalgorithm
(OPTIONAL) Specifies if the key is encrypted. Valid values: 0 (key is not encrypted) or 7 (key is encrypted).
key
Text string used in encryption.
The required lengths of a non-encrypted or encrypted key are:
3DES - 48 or 96 hex digits; DES - 16 or 32 hex digits; AES-CBC -32 or 64 hex digits for AES-128 and 48 or 96 hex digits for AES-192.
authenticationalgorithm
Specifies the authentication algorithm to use for encryption. Valid values are MD5 or SHA1.
key-encryptiontype
(OPTIONAL) Specifies if the authentication key is encrypted. Valid values: 0 (key is not encrypted) or 7 (key is encrypted).
key
Text string used in authentication.
For MD5 authentication, the key must be 32 hex digits (non-encrypted) or 64 hex digits (encrypted).
For SHA-1 authentication, the key must be 40 hex digits (non-encrypted) or 80 hex digits (encrypted).
null
Causes an encryption policy configured for the area to not be inherited on the
interface.
Defaults
Not configured.
Command Modes ROUTER OSPFv3
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.1.(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4810 and Z9000.
1058 Open Shortest Path First (OSPFv2 and OSPFv3)
Usage Information
Related Commands
Version
8.4.2.0 8.3.19.0
Description
Introduced on the E-Series TeraScale. Introduced on the S4820T.
Before you enable IPsec encryption on an OSPFv3 interface, first enable OSPFv3 globally on the router. Configure the same encryption policy (same SPI and keys) on each interface in an OSPFv3 link.
An SPI value must be unique to one IPsec security policy (authentication or encryption) on the router.
When you configure encryption for an OSPFv3 area with the area encryption command, you enable both IPsec encryption and authentication. However, when you enable authentication on an area with the area authentication command, you do not enable encryption at the same time.
If you have enabled IPsec authentication in an OSPFv3 area with the area authentication command, you cannot use the area encryption command in the area at the same time.
The configuration of IPsec encryption on an interface-level takes precedence over an area-level configuration. If you remove an interface configuration, an area encryption policy that has been configured is applied to the interface.
To remove an IPsec encryption policy from an interface, enter the no area area-id encryption spi number command.
ipv6 ospf encryption � configures an IPsec encryption policy on an OSPFv3 interface.
show crypto ipsec policy � display the configuration of IPsec encryption policies.
auto-cost
Specify how the OSPF interface cost is calculated based on the reference bandwidth method.
S4048�ON
Syntax Parameters
auto-cost [reference-bandwidth ref-bw]
To return to the default bandwidth or to assign cost based on the interface type, use the no autocost [reference-bandwidth ref-bw] command.
ref-bw
(OPTIONAL) Specify a reference bandwidth in megabits per second. The range is from 1 to 4294967. The default is 100 megabits per second.
Defaults
100 megabits per second.
Command Modes ROUTER OSPFv3
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.9(0.0)
Introduced on the S6000-ON, S6000, S4820T, S4810, S5000, Z9500, S3048-ON, and S4048-ON
Usage Information
Example
Dell#show running-config ospf ! ipv6 router ospf 10
log-adjacency-changes
Open Shortest Path First (OSPFv2 and OSPFv3) 1059
auto-cost reference-bandwidth 2000
Dell#
Dell#
Dell#
Dell(conf-ipv6-router_ospf)#auto-cost reference-bandwidth ?
<1-4294967>
Reference bandwidth in Mbits/second (default =
100)
Dell(conf-ipv6-router_ospf)#no auto-cost ?
reference-bandwidth
Use reference bandwidth method to assign OSPF
cost
<cr>
Dell(conf-ipv6-router_ospf)#
clear ipv6 ospf process
Reset an OSPFv3 router process without removing or re-configuring the process.
Syntax Parameters
clear ipv6 ospf [vrf vrf-name] process
vrf vrf-name
(Optional) Enter the keyword vrf followed by the name of the VRF to clear IPv6 routes corresponding to that VRF.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.1.(0.0) 8.3.19.0 7.8.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4810 and Z9000. Introduced on the S4820T. Added support for C-Series. Introduced on the E-Series.
debug ipv6 ospf bfd
Display debug information and interface types for bidirectional forwarding detection (BFD) on OSPF IPv6 packets.
Syntax Parameters
[no] debug ipv6 ospf bfd [interface]
interface
(OPTIONAL) Enter one of the following keywords and slot/port or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
1060 Open Shortest Path First (OSPFv2 and OSPFv3)
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.2.(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T, S4810, and Z9000.
Usage Information
The following section describes the command fields.
Lines Beginning With or Including
Description
OSPFv3... 05:21:01
Debugging is on for all OSPFv3 packets and all interfaces. Displays the time stamp.
Sending Ver:3
Sending OSPF3 version..
Example
Dell(conf-if-te-1/2)#do debug ipv6 ospf bfd te 1/2 OSPFv3 bfd related debugging is on for TenGigabitEthernet 1/2 00:59:26 : OSPFv3INFO: Received Interface mode bfd config command on interface Te 1/2 Enable 1, interval 0, min_rx 0, Multiplier 0, role 0, Disable 0 00:59:26 : OSPFv3INFO: Enabling BFD on interface Te 1/2 Cmd Add Session 00:59:27 : OSPFv3INFO: Enabling BFD for NBRIP fe80:0000:0000:0000:0201:e8ff:fe8b:7720 00:59:27 : OSPFv3INFO: Completed Enabling BFD on interface Te 1/2 00:59:27 : OSPFv3INFO: Completed Interface mode BFD configuration on Te 1/2!! 00:59:27 : OSPFv3INFO: Enabling BFD for NBRIP fe80:0000:0000:0000:0201:e8ff:fe8b:7720 00:59:27 : OSPFv3INFO: Ospf3_register_bfd ospf key 27648 00:59:27 : OSPFv3INFO: OSPFV3 Enabling BFD for NBRIP fe80:0000:0000:0000:0201:e8ff:fe8b:7720 Interface Te 1/2 IfIndex 34145282 00:59:27 : OSPFv3INFO: BFD parameters interval 100 min_rx 100 mult 3 role active 00:59:27 : OSPFv3INFO: BFD parameters interval 100 min_rx 100 mult 3 role active 00:59:27 : OSPFv3INFO: Completed Enabling BFD for NBRIP fe80:0000:0000:0000:0201:e8ff:fe8b:7720 Aug 25 11:19:59: %STKUNIT0-M:CP %BFDMGR-1-BFD_STATE_CHANGE: Changed session state to Init for neighbor fe80::201:e8ff:fe8b:7720 on interface Te 1/2 (diag: NBR_DN) Aug 25 11:20:00: %STKUNIT0-M:CP %BFDMGR-1-BFD_STATE_CHANGE: Changed session state to Up for neighbor fe80::201:e8ff:fe8b:7720 on interface Te 1/2 (diag: NO_DIAG) 00:59:45 : OSPFv3INFO: OSPFV3 got BFD msg 00:59:45 : OSPFv3INFO: Bfd Msg Type Up for interface Te 1/2 00:59:45 : OSPFv3INFO: OSPFV3 updating NBR state
Open Shortest Path First (OSPFv2 and OSPFv3) 1061
debug ipv6 ospf packet
Display debug information and interface types on OSPF IPv6 packets.
Syntax Parameters
debug ipv6 ospf {packet | events} [interface]
interface
(OPTIONAL) Enter one of the following keywords and slot/port or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.1.(0.0) 8.3.19.0 7.8.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4810 and Z9000. Introduced on the S4820T. Added support for C-Series. Introduced on E-Series.
Example
Dell#debug ipv6 ospf packet OSPFv3 packet related debugging is on for all interfaces 05:21:01 : OSPFv3: Sending, Ver:3, Type:1(Hello), Len:40, Router ID:223.255.255.254, Area ID:0, Inst:0, on Po 255 05:21:03 : OSPFv3: Received, Ver:3, Type:1(Hello), Len:40, Router ID:223.255.255.255, Area ID:0, Chksum:a177, Inst:0, from Vl 100 05:20:25 : OSPFv3: Sending, Ver:3, Type:4(LS Update), Len:580, Router ID:223.255.255.254, Area ID:0, Inst:0, on Vl 1000 07:21:40 : OSPFv3: Received, Ver:3, Type:1(Hello), Len:40, Router ID:223.255.255.254, Area ID:0, Chksum:af8f, Inst:0, from Te 1/6 Dell#
Command Fields
Lines Beginning With or Including
OSPFv3...
05:21:01
Sending Ver:3
type:
Description
Debugging is on for all OSPFv3 packets and all interfaces. Displays the time stamp. Sending OSPF3 version.. Displays the type of packet sent:
1062 Open Shortest Path First (OSPFv2 and OSPFv3)
Lines Beginning With or Including
Length: Router ID: Area ID: Chksum:
Description
1 - Hello packet 2 - database description 3 - link state request 4 - link state update 5 - link state acknowledgement 7 - external LSA 8 - link-state advertisement (OSPFv3) 9 - link local LSA (OSPFv2), Intra-Area-Prefix LSA (OSPFv3) 11 - grace LSA (OSPFv3) Displays the packet length. Displays the OSPF3 router ID. Displays the Area ID. Displays the OSPF3 checksum.
default-information originate
Configure the Dell Networking OS to generate a default external route into an OSPFv3 routing domain.
Syntax
default-information originate [always] [metric metric-value] [metric-type type-value] [route-map map-name]
To return to the default values, use the no default-information originate command.
Parameters
always
metric metricvalue metric-type type-value
(OPTIONAL) Enter the keyword always to specify that default route information must always be advertised.
(OPTIONAL) Enter the keyword metric then a number to configure a metric value for the route. The range is from 1 to 16777214.
(OPTIONAL) Enter the keywords metric-type then an OSPFv3 link state type of 1 or 2 for default routes. The values are:
1 = Type 1 external route 2 = Type 2 external route
route-map map- (OPTIONAL) Enter the keywords route-map then the name of an established
name
route map.
Defaults
Disabled.
Command Modes ROUTER OSPFv3
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.1.(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4810 and Z9000.
Open Shortest Path First (OSPFv2 and OSPFv3) 1063
Related Commands
Version
8.3.19.0 7.8.1.0 7.4.1.0
Description
Introduced on the S4820T. Added support for C-Series. Introduced on the E-Series.
redistribute -- redistributes routes from other routing protocols into OSPFv3.
graceful-restart grace-period
Enable OSPFv3 graceful restart globally by setting the grace period (in seconds) that an OSPFv3 router's neighbors continues to advertise the router as adjacent during a graceful restart.
Syntax Parameters
graceful-restart grace-period seconds To disable OSPFv3 graceful restart, enter no graceful-restart grace-period.
seconds
Time duration, in seconds, that specifies the duration of the restart process before OSPFv3 terminates the process. The range is from 40 to 1800 seconds.
Defaults
OSPFv3 graceful restart is disabled and functions in a helper-only role.
Command Modes ROUTER OSPFv3
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.1.(0.0) 8.4.2.2 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4810 and Z9000. Introduced on the E-Series TeraScale. Introduced on the S4820T.
Usage Information
By default, OSPFv3 graceful restart is disabled and functions only in a helper role to help restarting neighbor routers in their graceful restarts when it receives a Grace LSA.
To enable OSPFv3 graceful restart, enter the ipv6 router ospf command to enter OSPFv3 configuration mode and then configure a grace period using the graceful-restart grace-period command. The grace period is the length of time that OSPFv3 neighbors continue to advertise the restarting router as though it is fully adjacent. When graceful restart is enabled (restarting role), an OSPFv3 restarting expects its OSPFv3 neighbors to help when it restarts by not advertising the broken link.
When you enable the helper-reject role on an interface with the ipv6 ospf graceful-restart helper-reject command, you reconfigure OSPFv3 graceful restart to function in a "restarting-only" role. In a "restarting-only" role, OSPFv3 does not participate in the graceful restart of a neighbor.
1064 Open Shortest Path First (OSPFv2 and OSPFv3)
graceful-restart mode
Specify the type of events that trigger an OSPFv3 graceful restart.
Syntax Parameters
graceful-restart mode {planned-only | unplanned-only} To disable graceful restart mode, enter no graceful-restart mode.
planned-only unplanned-only
(OPTIONAL) Enter the keywords planned-only to indicate graceful restart is supported in a planned restart condition only.
(OPTIONAL) Enter the keywords unplanned-only to indicate graceful restart is supported in an unplanned restart condition only.
Defaults
OSPFv3 graceful restart supports both planned and unplanned failures.
Command Modes ROUTER OSPFv3
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.1.(0.0) 8.4.2.2 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4810 and Z9000. Introduced on the E-Series TeraScale. Introduced on the S4820T.
Usage Information
OSPFv3 graceful restart supports planned-only and/or unplanned-only restarts. The default is support for both planned and unplanned restarts.
A planned restart occurs when you enter the redundancy force-failover rpm command to force the primary RPM to switch to the backup RPM. During a planned restart, OSPF sends out a Type-11 Grace LSA before the system switches over to the backup RPM.
An unplanned restart occurs when an unplanned event causes the active RPM to switch to the backup RPM, such as when an active process crashes, the active RPM is removed, or a power failure happens. During an unplanned restart, OSPF sends out a Grace LSA when the backup RPM comes online.
By default, both planned and unplanned restarts trigger an OSPFv3 graceful restart. Selecting one or the other mode restricts OSPFv3 to the single selected mode.
ipv6 ospf area
Enable IPv6 OSPF on an interface.
Syntax Parameters
ipv6 ospf process id areaarea id
To disable OSPFv6 routing for an interface, use the no ipv6 ospf process-id area area-id command.
process-id area area-id
Enter the process identification number. Specify the OSPF area. The range is from 0 to 65535.
Open Shortest Path First (OSPFv2 and OSPFv3) 1065
Defaults
none
Command Modes INTERFACE
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.2(1.0)
9.1.(0.0)
8.3.19.0
7.4.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4810 and Z9000. Introduced on the S4820T. Introduced on the E-Series and C-Series.
ipv6 ospf authentication
Configure an IPsec authentication policy for OSPFv3 packets on an IPv6 interface.
Syntax Parameters
ipv6 ospf authentication {null | ipsec spi number {MD5 | SHA1} [keyencryption-type] key}}
null
Causes an authentication policy configured for the area to not be inherited on the
interface.
ipsec spi number Security Policy index (SPI) value that identifies an IPsec security policy. The range is from 256 to 4294967295.
MD5 | SHA1
Authentication type: Message Digest 5 (MD5) or Secure Hash Algorithm 1 (SHA-1).
key-encryptiontype
(OPTIONAL) Specifies if the key is encrypted. Valid values: 0 (key is not encrypted) or 7 (key is encrypted).
key
Text string used in authentication.
For MD5 authentication, the key must be 32 hex digits (non-encrypted) or 64 hex digits (encrypted).
For SHA-1 authentication, the key must be 40 hex digits (non-encrypted) or 80 hex digits (encrypted).
Defaults
Not configured.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.1.(0.0) 8.4.2.0 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on S4810 and Z9000. Introduced on the E-Series. Introduced on the S4820T.
1066 Open Shortest Path First (OSPFv2 and OSPFv3)
Usage Information
Related Commands
Before you enable IPsec authentication on an OSPFv3 interface, first enable IPv6 unicast routing globally, configure an IPv6 address and enable OSPFv3 on the interface, and assign the interface to an area.
An SPI value must be unique to one IPsec security policy (authentication or encryption) on the router. Configure the same authentication policy (same SPI and key) on each OSPFv3 interface in a link.
To remove an IPsec authentication policy from an interface, enter the no ipv6 ospf authentication spi number command. To remove null authentication on an interface to allow the interface to inherit the authentication policy configured for the OSPFv3 area, enter the no ipv6 ospf authentication null command.
area authentication � configures an IPsec authentication policy for an OSPFv3 area.
show crypto ipsec policy � displays the configuration of IPsec authentication policies.
show crypto ipsec sa ipv6 � displays the security associations set up for OSPFv3 interfaces in authentication policies.
ipv6 ospf bfd all-neighbors
Establish BFD sessions with all OSPFv3 neighbors on a single interface or use non-default BFD session parameters.
Syntax
ipv6 ospf bfd all-neighbors [disable | [interval interval min_rx min_rx multiplier value role {active | passive}]]
To disable all BFD sessions on an OSPFv3 interface implicitly, use the no ipv6 ospf bfd allneighbors disable command in interface mode..
Parameters
disable interval milliseconds
min_rx milliseconds
multiplier value
role [active | passive]
(OPTIONAL) Enter the keyword disable to disable BFD on this interface.
(OPTIONAL) Enter the keyword interval to specify non-default BFD session parameters beginning with the transmission interval. The range is from 50 to 1000. The default is 200.
Enter the keywords min_rx to specify the minimum rate at which the local system receives control packets from the remote system. The range is from 50 to 1000. The default is 200.
Enter the keyword multiplier to specify the number of packets that must be missed in order to declare a session down. The range is from 3 to 50. The default is 3.
Enter the role that the local system assumes:
Active -- The active system initiates the BFD session. Both systems can be active for the same session.
Passive -- The passive system does not initiate a session. It only responds to a request for session initialization from the active system.
The default is Active.
Defaults
See Parameters
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2.0.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9000, S4820T, and S4810.
Open Shortest Path First (OSPFv2 and OSPFv3) 1067
Usage Information
This command provides the flexibility to fine-tune the timer values based on individual interface needs when you configure ipv6 ospf BFD in CONFIGURATION mode. Any timer values specified with this command overrides timers set using the bfd all-neighbors command. Using the no form of this command does not disable BFD if you configure BFD in CONFIGURATION mode.
To disable BFD on a specific interface while you configure BFD in CONFIGURATION mode, use the keyword disable.
ipv6 ospf cost
Explicitly specify the cost of sending a packet on an interface.
Syntax Parameters
ipv6 ospf interface-cost
interface-cost
Enter a unsigned integer value expressed as the link-state metric. The range is from 1 to 65535.
Defaults
Default cost based on the bandwidth.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.1.(0.0) 7.8.1.0 7.4.1.0 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4810 and Z9000. Added support for C-Series. Introduced on the E-Series. Introduced on the S4820T.
Usage Information
In general, the path cost is calculated as:
10^8 / bandwidth
Using this formula, the default path cost is calculated as:
GigabitEthernet--Default cost is 1 TenGigabitEthernet--Default cost is 1 FortygigEthernet -- Default cost is 1 Ethernet--Default cost is 10
ipv6 ospf dead-interval
Set the time interval since the last hello-packet was received from a router. After the time interval elapses, the neighboring routers declare the router down.
Syntax
ipv6 ospf dead-interval seconds To return to the default time interval, use the no ipv6 ospf dead-interval command.
1068 Open Shortest Path First (OSPFv2 and OSPFv3)
Parameters
seconds
Enter the time interval in seconds. The range is from 1 to 65535 seconds.
Defaults
40 seconds (Ethernet).
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.1.(0.0) 7.8.1.0 7.4.1.0 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4810 and Z9000. Added support for C-Series. Introduced on the E-Series. Introduced on the S4820T.
Usage Information
Related Commands
By default, the dead interval is four times longer than the default hello-interval. ipv6 ospf hello-interval � specifies the time interval between hello packets.
ipv6 ospf encryption
Configure an IPsec encryption policy for OSPFv3 packets on an IPv6 interface.
Syntax Parameters
ipv6 ospf encryption {null | ipsec spi number esp encryption-algorithm [key-encryption-type] key athentication-algorithm [key-encryption-type] key}}
null
Causes an encryption policy configured for the area to not be inherited on the
interface.
ipsec spi number Security Policy index (SPI) value that identifies an IPsec security policy. The range is from 256 to 4294967295.
esp encryptionalgorithm
Encryption algorithm used with ESP. Valid values are: 3DES, DES, AES-CBC, and NULL.
For AES-CBC, only the AES-128 and AES-192 ciphers are supported.
key-encryptiontype
(OPTIONAL) Specifies if the key is encrypted. Valid values: 0 (key is not encrypted) or 7 (key is encrypted).
key
Text string used in authentication.
The required lengths of a non-encrypted or encrypted key are:
3DES - 48 or 96 hex digits; DES - 16 or 32 hex digits; AES-CBC -32 or 64 hex digits for AES-128 and 48 or 96 hex digits for AES-192.
authentication- Specifies the authentication algorithm to use for encryption. Valid values are MD5
algorithm
or SHA1.
Open Shortest Path First (OSPFv2 and OSPFv3) 1069
key-encryptiontype
key
(OPTIONAL) Specifies if the authentication key is encrypted. Valid values: 0 (key is not encrypted) or 7 (key is encrypted).
Text string used in authentication. For MD5 authentication, the key must be 32 hex digits (non-encrypted) or 64 hex digits (encrypted). For SHA-1 authentication, the key must be 40 hex digits (non-encrypted) or 80 hex digits (encrypted).
Defaults
Not configured.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.1.(0.0) 8.4.2.0 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4810 and Z9000. Introduced on the E-Series TeraScale. Introduced on the S4820T.
Usage Information
Related Commands
Before you enable IPsec encryption on an OSPFv3 interface, first enable IPv6 unicast routing globally, configure an IPv6 address and enable OSPFv3 on the interface, and assign the interface to an area.
An SPI value must be unique to one IPsec security policy (authentication or encryption) on the router. Configure the same encryption policy (same SPI and key) on each OSPFv3 interface in a link.
To remove an IPsec encryption policy from an interface, enter the no ipv6 ospf encryption spi number command. To remove null authentication on an interface to allow the interface to inherit the authentication policy configured for the OSPFv3 area, enter the no ipv6 ospf no ipv6 ospf encryption null command.
area encryption � configures an IPsec encryption policy for an OSPFv3 area.
show crypto ipsec policy � displays the configuration of IPsec encryption policies.
show crypto ipsec sa ipv6 � displays the security associations set up for OSPFv3 interfaces in encryption policies.
ipv6 ospf graceful-restart helper-reject
Configure an OSPFv3 interface to not act upon the Grace LSAs that it receives from a restarting OSPFv3 neighbor.
Syntax
ipv6 ospf graceful-restart helper-reject To disable the helper-reject role, enter no ipv6 ospf graceful-restart helper-reject.
Defaults
The helper-reject role is not configured.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
1070 Open Shortest Path First (OSPFv2 and OSPFv3)
Usage Information
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.1.(0.0) 8.4.2.2 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4810 and Z9000. Introduced on E-Series TeraScale. Introduced on the S4820T.
By default, OSPFv3 graceful restart is disabled and functions only in a helper role to help restarting neighbor routers in their graceful restarts when it receives a Grace LSA.
When configured in a helper-reject role, an OSPFv3 router ignores the Grace LSAs that it receives from a restarting OSPFv3 neighbor.
The graceful-restart role command is not supported in OSPFv3. When you enable the helper-reject role on an interface, you reconfigure an OSPFv3 router to function in a "restarting-only" role.
ipv6 ospf hello-interval
Specify the time interval between the hello packets sent on the interface.
Syntax Parameters
ipv6 ospf hello--interval seconds To return to the default time interval, enter no ipv6 ospf hello--interval.
seconds
Enter the time interval in seconds as the time between hello packets. The range is from 1 to 65525 seconds.
Defaults
10 seconds (Ethernet).
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.1.(0.0) 7.8.1.0 7.4.1.0 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4810 and Z9000. Added support for the C-Series. Introduced on the E-Series. Introduced on the S4820T.
Usage Information
Related Commands
The time interval between hello packets must be the same for routers in a network. ipv6 ospf dead-interval � specifies the time interval between hello packets was received from a router.
Open Shortest Path First (OSPFv2 and OSPFv3) 1071
ipv6 ospf priority
To determine the Designated Router for the OSPFv3 network, set the priority of the interface.
Syntax Parameters
ipv6 ospf priority number To return to the default time interval, use the no ipv6 ospf priority command.
number
Enter the number as the priority. The range is from 1 to 255.
Defaults
1
Command Modes INTERFACE
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.2(1.0)
9.1.(0.0)
8.3.19.0
7.8.1.0
7.4.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4810 and Z9000. Introduced on the S4820T. Added support for the C-Series. Introduced on the E-Series.
Usage Information
Setting a priority of 0 makes the router ineligible for election as a Designated Router or Backup Designated Router.
Use this command for interfaces connected to multi-access networks, not point-to-point networks.
ipv6 router ospf
Enable OSPF for IPv6 router configuration.
Syntax Parameters
ipv6 router ospf process-id [vrf vrf-name] To exit OSPF for IPv6, use the no ipv6 router ospf process-id command.
process-id vrf vrf-name
Enter the process identification number. The range is from 1 to 65535.
(Optional) Enter the keyword vrf followed by the name of the VRF to install IPv6 routes in that VRF.
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2)
Introduced on the S4048-ON. Introduced on the S3048-ON.
1072 Open Shortest Path First (OSPFv2 and OSPFv3)
Version
9.2(1.0) 9.1.(0.0) 8.3.19.0 7.8.1.0 7.4.1.0
Description
Introduced on the Z9500. Introduced on the S4810 and Z9000. Introduced on the S4820T. Added support for the C-Series. Introduced on the E-Series.
maximum-paths
Enable the software to forward packets over multiple paths.
Syntax Parameters
maximum-paths number To disable packet forwarding over multiple paths, use the no maximum-paths command.
number
Specify the number of paths. The range is from 1 to 64. The default is 8 paths.
Defaults
8
Command Modes ROUTER OSPF
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.2(1.0)
8.3.19.0
8.3.11.1
8.3.7.0
7.8.1.0
7.6.1.0
7.5.1.0
pre-6.1.1.1
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for Multi-Process OSPF. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
passive-interface
Disable (suppress) sending routing updates on an interface.
Syntax Parameters
passive--interface interface
To enable sending routing updates on an interface, use the no passive-interface interface command.
interface
Enter the following keywords and slot/port or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
Open Shortest Path First (OSPFv2 and OSPFv3) 1073
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Defaults
Enabled, that is sending of routing updates are enabled by default.
Command Modes ROUTER OSPF for OSPFv2
ROUTER OSPFv3 for OSPFv3
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.2(1.0)
Introduced on the Z9500.
9.1.(0.0)
Introduced support for OSPFv3 on the S4810 and Z9000.
8.3.19.0
Introduced on the S4820T.
7.8.1.0
Added support for the C-Series.
7.4.1.0
Introduced on the E-Series.
Usage Information
By default, no interfaces are passive. Routing updates are sent to all interfaces on which the routing protocol is enabled.
If you disable the sending of routing updates on an interface, the particular address prefix continues to be advertised to other interfaces, and updates from other routers on that interface continue to be received and processed.
OSPFv3 for IPv6 routing information is not sent or received through the specified router interface. The specified interface address appears as a stub network in the OSPFv3 for IPv6 domain.
On configuring suppression using the passive-interface command, the state of the OSPF neighbor does not change to INIT; instead, the state of the OSPF neighbor changes to DOWN after the dead-timer expires.
redistribute
Redistribute into OSPFv3.
Syntax Parameters
redistribute {bgp as number}{connected | static}[metric metric-value | metric-type type-value] [route-map map-name] [tag tag-value]
To disable redistribution, use the no redistribute {connected | static} command.
bgp as number
connected
static metric metricvalue
Enter the keyword bgp then the autonomous system number. The range is from 1 to 65535.
Enter the keyword connected to redistribute routes from physically connected interfaces.
Enter the keyword static to redistribute manually configured routes.
Enter the keyword metric then the metric value. The range is from 0 to 16777214.
1074 Open Shortest Path First (OSPFv2 and OSPFv3)
metric-type type-value
route-map mapname tag tag-value
The default is 20.
(OPTIONAL) Enter the keywords metric-type then the OSPFv3 link state type of 1 or 2 for default routes. The values are: 1 for a type 1 external route 2 for a type 2 external route The default is 2.
(OPTIONAL) Enter the keywords route-map then the name of an established route map. If the route map is not configured, the default is deny (to drop all routes).
(OPTIONAL) Enter the keyword tag to set the tag for routes redistributed into OSPFv3. The range is from 0 to 4294967295 The default is 0.
Defaults
Not configured.
Command Modes ROUTER OSPF for OSPFv2
ROUTER OSPFv3 for OSPFv3
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.1.(0.0) 8.3.19.0 7.8.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced support for OSPFv3 on the S4810 and Z9000. Introduced on the S4820T. Added support for the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
To redistribute the default route (x:x:x:x::x), use the default-information originate command. default-information originate � configures default external route into OSPFv3.
router-id
Designate a fixed router ID.
Syntax Parameters Defaults
router-id ip-address To return to the previous router ID, use the no router-id ip-address command.
ip-address
Enter the router ID in the dotted decimal format.
The router ID is selected automatically from the set of IPv4 addresses configured on a router.
Open Shortest Path First (OSPFv2 and OSPFv3) 1075
Command Modes ROUTER OSPF for OSPFv2
ROUTER OSPFv3 for OSPFv3
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.1.(0.0) 8.3.19.0 7.8.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced support for OSPFv3 on the S4810 and Z9000. Introduced on the S4820T. Added support for the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
You can configure an arbitrary value in the IP address for each router. However, each router ID must be unique.
If this command is used on an OSPFv3 process that is already active (has neighbors), all the neighbor adjacencies are brought down immediately and new sessions are initiated with the new router ID.
clear ipv6 ospf process � resets an OSPFv3 router process.
show crypto ipsec policy
Display the configuration of IPsec authentication and encryption policies.
Syntax Parameters
show crypto ipsec policy [name name]
name name
(OPTIONAL) Displays configuration details about a specified policy.
Defaults
No default behavior or values.
Command Modes EXEC
EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.1.(0.0) 8.4.2.0 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4810 and Z9000. Introduced on the E-Series TeraScale. Introduced on the S4820T.
Usage Information
The show crypto ipsec policy command output displays the AH and ESP parameters configured in IPsec security policies, including the SPI number, keys, and algorithms used.
1076 Open Shortest Path First (OSPFv2 and OSPFv3)
Related Commands
Example
When configured in a helper-reject role, an OSPFv3 router ignores the Grace LSAs that it receives from a restarting OSPFv3 neighbor. show crypto ipsec sa ipv6� displays the IPsec security associations used on OSPFv3 interfaces.
Dell#show crypto ipsec policy Crypto IPSec client security policy data Policy name : OSPFv3-1-502 Policy refcount : 1 Inbound ESP SPI : 502 (0x1F6) Outbound ESP SPI : 502 (0x1F6) Inbound ESP Auth Key : 123456789a123456789b123456789c12 Outbound ESP Auth Key : 123456789a123456789b123456789c12 Inbound ESP Cipher Key : 123456789a123456789b123456789c123456789d12345678 Outbound ESP Cipher Key : 123456789a123456789b123456789c123456789d12345678 Transform set : esp-3des esp-md5-hmac Crypto IPSec client security policy data Policy name : OSPFv3-0-501 Policy refcount : 1 Inbound ESP SPI : 501 (0x1F5) Outbound ESP SPI : 501 (0x1F5) Inbound ESP Auth Key : bbdd96e6eb4828e2e27bc3f9ff541e43faa759c9ef5706ba8ed8bb5efe91e97eb7c0 c30808825fb5 Outbound ESP Auth Key : bbdd96e6eb4828e2e27bc3f9ff541e43faa759c9ef5706ba8ed8bb5efe91e97eb7c0 c30808825fb5 Inbound ESP Cipher Key : bbdd96e6eb4828e2e27bc3f9ff541e43faa759c9ef5706ba10345a1039ba8f8a Outbound ESP Cipher Key : bbdd96e6eb4828e2e27bc3f9ff541e43faa759c9ef5706ba10345a1039ba8f8a Transform set : esp-128-aes esp-sha1-hmac
show crypto ipsec policy Command Fields
Field
Description
Policy name
Displays the name of an IPsec policy.
Policy refcount Number of interfaces on the router that use the policy.
Inbound ESP SPI The encapsulating security payload (ESP) security policy index (SPI) for inbound and outbound links. and Outbound ESP SPI
Inbound ESP Auth Key and Outbound Auth Key
The ESP authentication key for inbound and outbound links.
Inbound ESP Cipher Key and Outbound ESP Cipher Key
The ESP encryption key for inbound and outbound links.
Transform set The set of security protocols and algorithms used in the policy.
Inbound AH SPI The authentication header (AH) security policy index (SPI) for inbound and outbound links. and Outbound AH SPI
Open Shortest Path First (OSPFv2 and OSPFv3) 1077
Field
Description
Inbound AH Key The AH key for inbound and outbound links. and Outbound AH Key
show crypto ipsec sa ipv6
Display the IPsec security associations (SAs) used on OSPFv3 interfaces.
Syntax Parameters
show crypto ipsec sa ipv6 [interface interface]
interface interface
(OPTIONAL) Displays information about the SAs used on a specified OSPFv3 interface, where interface is one of the following values:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Defaults
No default behavior or values.
Command Modes EXEC
EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.1.(0.0) 8.4.2.0 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4810 and Z9000. Introduced on the E-Series TeraScale. Introduced on the S4820T.
Usage Information
Related Commands
Example
The show crypto ipsec sa ipv6 command output displays security associations set up for OSPFv3 links in IPsec authentication and encryption policies on the router. show crypto ipsec policy � displays the configuration of IPsec authentication and encryption policies.
Dell#show crypto ipsec policy Dell#show crypto ipsec sa ipv6 Interface: TenGigabitEthernet 1/1
Link Local address: fe80::201:e8ff:fe40:4d10 IPSecv6 policy name: OSPFv3-1-500 inbound ah sas
spi : 500 (0x1f4)
1078 Open Shortest Path First (OSPFv2 and OSPFv3)
transform : ah-md5-hmac in use settings : {Transport, } replay detection support : N STATUS : ACTIVE outbound ah sas spi : 500 (0x1f4) transform : ah-md5-hmac in use settings : {Transport, } replay detection support : N STATUS : ACTIVE inbound esp sas outbound esp sas
Interface: TenGigabitEthernet 1/2 Link Local address: fe80::201:e8ff:fe40:4d11 IPSecv6 policy name: OSPFv3-1-600 inbound ah sas outbound ah sas inbound esp sas spi : 600 (0x258) transform : esp-des esp-sha1-hmac in use settings : {Transport, } replay detection support : N STATUS : ACTIVE outbound esp sas spi : 600 (0x258) transform : esp-des esp-sha1-hmac in use settings : {Transport, } replay detection support : N STATUS : ACTIVE
show crypto ipsec sa ipv6 Command Fields
Field
Description
Interface
Link local address
IPSecv6 policy name
inbound/ outbound ah
inbound/ outbound esp
spi
transform
in use settings
replay detection support
IPv6 interface IPv6 address of interface
Name of the IPsec security policy applied to the interface.
Authentication policy applied to inbound or outbound traffic.
Encryption policy applied to inbound or outbound traffic.
Security policy index number used to identify the policy. Security algorithm that is used to provide authentication, integrity, and confidentiality. Transform that the SA uses (only transport mode is supported). Y: An SA has enabled the replay detection feature. N: The replay detection feature is not enabled.
STATUS
ACTIVE: The authentication or encryption policy is enabled on the interface.
Open Shortest Path First (OSPFv2 and OSPFv3) 1079
show ipv6 ospf database
Display information in the OSPFv3 database, including link-state advertisements (LSAs).
Syntax Parameters
show ipv6 ospf [process-number] [vrf vrf-name] database [database-summary | grace-lsa]
process-number vrf vrf-name
Enter the OSPF process number.
(Optional) Enter the keyword vrf followed by the name of the VRF to display neighbors corresponding to that VRF.
NOTE: If you do not specify this option, neighbors corresponding to the default VRF are displayed.
databasesummary
grace-lsa
(OPTIONAL) Enter the keywords database-summary to view a summary of database LSA information.
(OPTIONAL): Enter the keywords grace-lsa to display the Type-11 Grace LSAs sent and received on an OSPFv3 router.
Defaults
none
Command Modes EXEC
EXEC Privilege
Command History
Version
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.1.(0.0) 8.4.2.2
8.3.19.0 7.8.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Added support for OSPFv3 on the S4810 and Z9000. Added support for the display of graceful restart parameters and Type-11 Grace LSAs on E-Series TeraScale routers. Introduced on the S4820T. Added support for C-Series.
Usage Information
The show crypto ipsec sa ipv6 command output displays security associations set up for OSPFv3 links in IPsec authentication and encryption policies on the router.
Related Commands
Example (gracelsa)
show crypto ipsec policy � displays the configuration of IPsec authentication and encryption policies. Dell#show ipv6 ospf 3 database grace-lsa ! Type-11 Grace LSA (Area 0)
LS Age : 10 Link State ID : 6.16.192.66 Advertising Router : 100.1.1.1 LS Seq Number : 0x80000001 Checksum : 0x1DF1 Length : 36 Associated Interface : Te 1/3 Restart Interval : 180 Restart Reason : Switch to Redundant Processor
1080 Open Shortest Path First (OSPFv2 and OSPFv3)
Example (databasesummary)
Dell#show ipv6 ospf 3 database database-summary
OSPFv3 Router with ID (1.1.1.1) (Process ID 1)
Process 1 database summary
Type
Count/Status
Oper Status
1
Admin Status
1
Area Bdr Rtr Status
1
AS Bdr Rtr Status
1
AS Scope LSA Count
0
AS Scope LSA Cksum sum
0
Originate New LSAS
50
Rx New LSAS
22
Ext LSA Count
0
Rte Max Eq Cost Paths
10
GR grace-period
180
GR mode
planned and unplanned
Area 0 database summary
Type
Count/Status
Brd Rtr Count
1
AS Bdr Rtr Count
1
LSA count
6
Rtr LSA Count
2
Net LSA Count
1
Inter Area Pfx LSA Count 1
Inter Area Rtr LSA Count
0
Group Mem LSA Count
0
Type-7 LSA count
0
Intra Area Pfx LSA Count
2
Intra Area TE LSA Count
2
Area 1 database summary
Type
Count/Status
Brd Rtr Count
1
AS Bdr Rtr Count
1
LSA count
8
Rtr LSA Count
1
Net LSA Count
0
Inter Area Pfx LSA Count
5
Inter Area Rtr LSA Count
0
Group Mem LSA Count
0
Type-7 LSA count
0
Intra Area Pfx LSA Count
2
Intra Area TE LSA Count
2
E1200-T2C2#sh ipv6 ospf neighbor
Neighbor ID Interface 63.114.8.36
Pri
State
1
FULL/DR
Dead Time 00:00:37
Interface ID 4 Te 1/4
show ipv6 ospf interface
View OSPFv3 interface information.
Syntax Parameters
show ipv6 ospf [process-number] [vrf vrf-name] [interface]
process-number interface
Enter the OSPF process number.
(OPTIONAL) Enter one of the following keywords and slot/port or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
Open Shortest Path First (OSPFv2 and OSPFv3) 1081
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Defaults
none
Command Modes EXEC
Command History
Version
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.2.(0.0) 9.1.(0.0) 8.3.19.0 7.8.1.0 7.4.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Added support for showing BFD status on the S4820T, S4810, and Z9000. Added support for OSPFv3 on the S4810 and Z9000. Introduced on the S4820T. Added support for the C-Series. Introduced on the E-Series.
Usage Information
Example
If you enable BFD at the global level, show ipv6 ospf interface shows the BFD provisioning. If you enable BFD at the interface level, show ipv6 ospf interface shows the BFD interval timers.
Dell#show ipv6 ospf 3 interface tengigabitethernet 1/2 TenGigabitEthernet 1/2 is up, line protocol is up
Link Local Address fe80::201:e8ff:fe17:5bbd, Interface ID 67420217 Area 0, Process ID 1, Instance ID 0, Router ID 11.1.1.1 NetworkType BROADCAST, Cost: 1, Passive: No Transmit Delay is 100 sec, State DR, Priority 1 Interface is using OSPF global mode BFD configuration. Designated router on this network is 11.1.1.1 (local) No backup designated router on this network Timer intervals configured, Hello 10, Dead 40, Wait 1, Retransmit 5 Dell#
show ipv6 ospf neighbor
Display the OSPF neighbor information on a per-interface basis.
Syntax Parameters
show ipv6 ospf [process-number] [vrf vrf-name] neighbor [interface]
process-number vrf vrf-name
Enter the OSPF process number.
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to display OSPF neighbors corresponding to that VRF.
NOTE: If you do not specify this option, neighbors corresponding to the default VRF are displayed.
interface
(OPTIONAL) Enter the following keywords and slot/port or number information:
1082 Open Shortest Path First (OSPFv2 and OSPFv3)
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Defaults
none
Command Modes EXEC
EXEC Privilege
Command History
Version
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.1.(0.0) 8.3.19.0 7.8.1.0 7.4.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced support for OSPFv3 on the S4810 and Z9000. Introduced on the S4820T. Added support for the C-Series. Introduced on the E-Series.
Example
Dell#show ipv6 ospf 3 neighbor gi 1/2
Neighbor ID Pri State
Dead Time Interface
63.114.8.36 1 FULL/DR 00:00:38
4
Dell#
ID Interface Te 1/2
timers spf
Set the time interval between when the switch receives a topology change and starts a shortest path first (SPF) calculation.
S4048�ON
Syntax Parameters
timers spf delay holdtime To return to the default, use the no timers spf command.
delay holdtime
Enter a number as the delay. The range is from 0 to 4294967295. The default is 5 seconds.
Enter a number as the hold time. The range is from 0 to 4294967295. The default is 10 seconds.
Defaults
delay = 5 seconds holdtime = 10 seconds
Command Modes ROUTER OSPFv3 for OSPFv3
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Open Shortest Path First (OSPFv2 and OSPFv3) 1083
Usage Information
Example
Version
9.8(0.0P5) 9.8(0.0P2) 9.8(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON, S6000, S4820T, S4810, S5000.
Setting the delay and holdtime parameters to a low number enables the switch to an alternate path quickly but requires more CPU usage.
Dell#conf Dell(conf)#ipv6 router ospf 1 Dell(conf-ipv6-router_ospf)#timer spf 2 5 Dell(conf-ipv6-router_ospf)# Dell(conf-ipv6-router_ospf)#show config ! ipv6 router ospf 1 timers spf 2 5 Dell(conf-ipv6-router_ospf)# Dell(conf-ipv6-router_ospf)#end Dell#
1084 Open Shortest Path First (OSPFv2 and OSPFv3)
41
Policy-based Routing (PBR)
Policy-based routing (PBR) allows you to apply routing policies to specific interfaces. To enable PBR, create a redirect list and apply it to the interface. After the redirect list is applied to the interface, all traffic passing through the interface is subject to the rules defined in the redirect list. PBR is supported by the Dell Networking Operating System (OS). You can apply PBR to physical interfaces and logical interfaces (such as a link aggregation group [LAG] or virtual local area network [VLAN]). Trace lists and redirect lists do not function correctly when you configure both in the same configuration.
NOTE: Apply PBR to Layer 3 interfaces only.
NOTE: For more information , refer to Content Addressable Memory (CAM) chapter.
Topics:
� description � ip redirect-group � ip redirect-list � permit � redirect � seq � show cam pbr � show ip redirect-list
description
Add a description to this redirect list.
Syntax Parameters
description {description} To remove the description, use the no description {description} command.
description
Enter a description to identify the IP redirect list (16 characters maximum).
Defaults
none
Command Modes REDIRECT-LIST
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
9.5(0.1)
9.4(0.0)
8.4.2.1
8.4.2.0
7.7.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S4810, S4820T, S6000, and Z9000. Introduced on the C-Series and S-Series. Introduced on the E-Series Tera Scale. Introduced on the E-Series ExaScale.
Related Commands
ip redirect-list � enables an IP Redirect List.
Policy-based Routing (PBR) 1085
ip redirect-group
Apply a redirect list (policy-based routing) on an interface. You can apply multiple redirect lists to an interface by entering this command multiple times.
Syntax Parameters
ip redirect-group redirect-list-name To remove a redirect list from an interface, use the no ip redirect-group name command.
redirect-listname
Enter the name of a configured redirect list.
Defaults
none
Command Modes INTERFACE (conf-if-vl-)
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000-ON.
9.4(0.0)
Introduced on the S4810, S4820T, S6000, and Z9000.
8.4.2.1
Introduced on the C-Series and S-Series.
8.4.2.0
Introduced on the E-Series Tera Scale.
7.7.1.0
Introduced on the E-Series ExaScale.
Usage Information
You can apply any number of redirect-groups to an interface. A redirect list can contain any number of configured rules. These rules includes the next-hop IP address where the incoming traffic is to be redirected.
If the next hop address is reachable, traffic is forwarded to the specified next hop. Otherwise, the normal routing table is used to forward traffic. When a redirect-group is applied to an interface and the next-hop is reachable, the rules are added into the PBR CAM region. When incoming traffic hits an entry in the CAM, the traffic is redirected to the corresponding next-hop IP address specified in the rule.
NOTE: Apply the redirect list to physical, VLAN, or LAG interfaces only.
Related Commands
show cam pbr � displays the content of the PBR CAM. show ip redirect-list � displays the redirect-list configuration.
ip redirect-list
Configure a redirect list and enter REDIRECT-LIST mode.
Syntax Parameters
ip redirect-list redirect-list-name To remove a redirect list, use the no ip redirect-list command.
redirect-listname
Enter the name of a redirect list.
Defaults
None
Command Modes CONFIGURATION
1086 Policy-based Routing (PBR)
Command History
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.4(0.0) 8.4.2.1 8.4.2.0 6.5.3.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S4810, S4820T, S6000, and Z9000. Introduced on the C-Series and S-Series. Introduced on the E-Series Tera Scale. Introduced on the E-Series ExaScale.
permit
Configure a permit rule. A permit rule excludes the matching packets from PBR classification and routes them using conventional routing.
Syntax Parameters
permit {ip-protocol-number | protocol-type} {source mask | any | host ipaddress} {destination mask | any | host ip-address} [bit] [operators]
To remove the rule, use one of the following:
If you know the filter sequence number, use the no seq sequence-number syntax command. You can also use the no permit {ip-protocol-number | protocol-type} {source
mask | any | host ip-address} {destination mask | any | host ip-address} [bit] [operators] command.
ip-protocolnumber protocol-type
source mask any host ip-address destination bit
operator
Enter a number from 0 to 255 for the protocol identified in the IP protocol header.
Enter one of the following keywords as the protocol type: icmp for internet control message protocol ip for any internet protocol tcp for transmission control protocol udp for user datagram protocol
Enter the IP address of the network or host from which the packets were sent.
Enter a network mask in /prefix format (/x).
Enter the keyword any to specify that all traffic is subject to the filter.
Enter the keyword host then he IP address to specify a host IP address.
Enter the IP address of the network or host to which the packets are sent.
(OPTIONAL) For the TCP protocol type only, enter one or a combination of the following TCP flags: ack = acknowledgement fin = finish (no more data from the user) psh = push function rst = reset the connection syn = synchronize sequence number urg = urgent field
(OPTIONAL) For TCP and UDP parameters only. Enter one of the following logical operand:
Policy-based Routing (PBR) 1087
Defaults
none
Command Modes REDIRECT-LIST
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
9.5(0.1)
9.4(0.0)
8.4.2.1
8.4.2.0
7.5.1.0
eq = equal to neq = not equal to gt = greater than lt= less than range = inclusive range of ports (you must specify two ports for the
portcommand parameter.)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S4810, S4820T, S6000, and Z9000. Introduced on the C-Series and S-Series. Introduced on the E-Series Tera Scale. Introduced on the E-Series ExaScale.
redirect
Configure a rule for the redirect list.
Syntax Parameters
redirect {ip-address | slot/port} | tunnel tunnel-id}[track <obj-id>] {ipprotocol-number | protocol-type [bit]} {source mask | any | host ipaddress} {destination mask | any | host ip-address} [operator]
To remove this filter, use one of the following:
Use the no seq sequence-number command if you know the filter's sequence number. You can also use the no redirect {ip-address | slot/port}| tunnel tunnel-id}
[track <obj-id>] {ip-protocol-number [bit] | protocol-type} {source mask | any | host ip-address} {destination mask | any | host ip-address} [operator] command.
redirect ip-address slot/port tunnel tunnel-id track track <obj-id> ip-protocolnumber protocol-type
Enter the keyword redirect to assign the sequence to the redirect list. Enter the IP address of the forwarding router. Enter the keyword slot / port followed by the slot/port information. Enter the keyword tunnel to configure the tunnel setting. Enter the keyword tunnel-id to redirect the traffic. Enter the keyword track to enable the tracking. Enter the keyword track <obj-id> to track object-id. Enter a number from 0 to 255 for the protocol identified in the IP protocol header.
Enter one of the following keywords as the protocol type: icmp for internet control message protocol
1088 Policy-based Routing (PBR)
bit
source mask any host ip-address destination operator
ip for any internet protocol tcp for transmission control protocol udp for user datagram protocol
(OPTIONAL) For the TCP protocol type only, enter one or a combination of the following TCP flags:
ack = acknowledgement fin = finish (no more data from the user) psh = push function rst = reset the connection syn = synchronize sequence number urg = urgent field
Enter the IP address of the network or host from which the packets were sent.
Enter a network mask in /prefix format (/x).
Enter the keyword any to specify that all traffic is subject to the filter.
Enter the keyword host then the IP address to specify a host IP address.
Enter the IP address of the network or host to which the packets are sent.
(OPTIONAL) For TCP and UDP parameters only. Enter one of the following logical operand:
eq = equal to neq = not equal to gt = greater than lt = less than range = inclusive range of ports (you must specify two ports for theport
command parameter.)
Defaults
none
Command Modes REDIRECT-LIST
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
9.7(0.0)
9.5(0.1)
9.4(0.0)
8.4.2.1
8.4.2.0
7.7.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Added support for the track-id on the S4810, S4820T, S6000, and Z9000. Introduced on the Z9500. Introduced on the S4810, S4820T, S6000, and Z9000. Introduced on the C-Series and S-Series. Introduced on the E-Series Tera Scale. Introduced on the E-Series ExaScale.
seq
Configure a filter with an assigned sequence number for the redirect list.
Syntax
seq sequence-number {permit | redirect {ip-address | tunnel tunnel-id} [track <obj-id>] }} {ip-protocol-number | protocol-type} {source mask | any
Policy-based Routing (PBR) 1089
Parameters
| host ip-address} {destination mask | any | host ip-address} [bit] [operator]{source-port source-port| source-port-range start-port - endport} {destination-port destination-port| destination-port-range start-port - end-port}
To delete a filter, use the no seq sequence-number command.
sequencenumber
Enter a number from 1 to 65535.
permit
Enter the keyword permit assign the sequence to the permit list.
redirect ip-address tunnel tunnel-id track track <obj-id> ip-protocolnumber protocol-type
Enter the keyword redirect to assign the sequence to the redirect list.
Enter the keyword IP address of the forwarding router.
Enter the keyword tunnel to configure the tunnel setting.
Enter the keyword tunnel-id to redirect the traffic.
Enter the keyword track to enable the tracking.
Enter the keyword track <obj-id> to track object-id.
Enter the keyword ip-protocol-number then the number from 0 to 255 for the protocol identified in the IP protocol header.
Enter one of the following keywords as the protocol type: icmp for internet control message protocol ip for any internet protocol tcp for transmission control protocol udp for user datagram protocol
source mask
Enter the IP address of the network or host from which the packets were sent. Enter a network mask in /prefix format (/x).
any host ip-address destination bit
Enter the keyword any to specify that all traffic is subject to the filter.
Enter the keyword host then the IP address to specify a host IP address.
Enter the IP address of the network or host to which the packets are sent.
(OPTIONAL) For the TCP protocol type only, enter one or a combination of the following TCP flags:
ack = acknowledgement fin = finish (no more data from the user) psh = push function rst = reset the connection syn = synchronize sequence number urg = urgent field
operator
(OPTIONAL) For the TCP and UDP parameters only. Enter one of the following logical operand:
eq = equal to neq = not equal to gt = greater than lt= less than range = inclusive range of ports (you must specify two ports for the port
command parameter.)
source port destination-port
Enter the keywords source-port then the port number to be matched in the ACL rule in the ICAP rule
Enter the keywords destination-port then the port number to be matched in the ACL rule in the ICAP rule.
1090 Policy-based Routing (PBR)
source-portrange
Enter the keywords Source-port-range then the range of the start port to end port to be matched in the ACL rule in the ICAP rule.
destination-port- Enter the keywords destination-port-range then the range of the start port
range
to end port to be matched in the ACL rule in the ICAP rule.
Defaults
none
Command Modes REDIRECT-LIST
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
9.5(0.1) 9.4(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Added support for the track-id on the S4810, S4820T, S6000, S6000-ON, and Z9000. Introduced on the Z9500. Introduced on the S4810, S4820T, S6000, and Z9000.
show cam pbr
Display the PBR CAM content.
Syntax Parameters
show cam pbr {[interface interface] | stack--unit slot-number port-set number]} [summary]
interface interface
stack�unit number
port-set number
summary
Enter the keyword interface then the name of the interface.
Enter the keyword stack-unit then the slot number.
Enter the keywords port-set then the port-pipe number. Enter the keyword summary to view only the total number of CAM entries.
Defaults
none
Command Modes EXEC
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
9.4(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S4810, S4820T, S6000, and Z9000.
Usage Information
Example
The show cam pbr command displays the PBR CAM content.
Dell#show cam pbr stack-unit 1 port-set 0
TCP Flag:Bit 5 - URG, Bit 4 - ACK, Bit 3 - PSH, Bit 2 - RST, Bit 1 SYN, Bit 0 - FIN
Cam Port VlanID Proto Tcp Src Dst SrcIp DstIp Next-hop Egress
Index
Flag Port Port
MAC
Port
--------------------------------------------------------------
Policy-based Routing (PBR) 1091
Related Commands
00000 5 N/A
IP
0x0 0 0
22.22.2.22/32
00:01:e8:8a:fd:76 0/0
00001 5 N/A
145 0x0 0 0
0.0.0.0/0
00:01:e8:8a:fd:76 Vl 100(0/1)
00002 5 N/A
TCP 0x0 0 0
55.1.3.0/24
00:01:e8:8a:fd:76 Po 128
00003 5 N/A
UDP 0x0 0 0
55.1.3.0/24
00:01:e8:8a:fd:76 Po 128
00004 5 N/A
IP
0x0 0 0
0.0.0.0/0
00:01:e8:8a:fd:76 Vl 1020(Po 100)
Dell#
33.33.3.0/24 44.4.4.4/32 66.6.6.6/32 66.6.6.6/32 0.0.0.0/0
ip redirect-group � applies a redirect group to an interface. show ip redirect-list � displays the redirect-list configuration.
show ip redirect-list
View the redirect list configuration and the interfaces it is applied to.
Syntax Parameters
show ip redirect-list redirect-list-name
redirect-listname
Enter the name of a configured Redirect list.
Command Modes EXEC EXEC Privilege
Command History
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S4810, S4820T, S6000, and Z9000.
Example
Dell#show ip redirect-list explicit_tunnel IP redirect-list explicit_tunnel: Defined as: seq 5 redirect tunnel 1 track 1 tcp 155.55.2.0/24 222.22.2.0/24,
Track 1 [up], Next-hop reachable (via Te 1/32) seq 10 redirect tunnel 1 track 1 tcp any any,
Track 1 [up], Next-hop reachable (via Te 1/32) seq 15 redirect tunnel 2 udp 155.55.0.0/16 host 144.144.144.144,
Track 1 [up], Next-hop reachable (via Te 1/32) seq 35 redirect 155.1.1.2 track 5 ip 7.7.7.0/24 8.8.8.0/24,
Track 5 [up], Next-hop reachable (via Po 5) seq 30 redirect 155.1.1.2 track 6 icmp host 8.8.8.8 any,
Track 5 [up], Next-hop reachable (via Po 5) seq 35 redirect 42.1.1.2 icmp host 8.8.8.8 any,
Next-hop reachable (via Vl 20) seq 40 redirect 43.1.1.2 tcp 155.55.2.0/24 222.22.2.0/24,
Next-hop reachable (via Vl 30) seq 45 redirect 31.1.1.2 track 200 ip 12.0.0.0 255.0.0.197 13.0.0.0 255.0.0.197 , Track 200 [up], Next-hop reachable (via Te 1/32) , Track 200 [up], Next-hop reachable (via Vl 20) , Track 200 [up], Next-hop reachable (via Po 5) , Track 200 [up], Next-hop reachable (via Po 7)
1092 Policy-based Routing (PBR)
, Track 200 [up], Next-hop reachable (via Te 2/18) , Track 200 [up], Next-hop reachable (via Te 2/19)
Policy-based Routing (PBR) 1093
42
PIM-Sparse Mode (PIM-SM)
The protocol-independent multicast (PIM) commands are supported by the Dell Networking operating software on the platform. The following describes the IPv4 PIM-SIM commands.
Topics:
� IPv4 PIM-Sparse Mode Commands
IPv4 PIM-Sparse Mode Commands
The following describes the IPv4 PIM-sparse mode (PIM-SM) commands.
clear ip pim rp-mapping
The bootstrap router (BSR) feature uses this command to remove all or particular rendezvous point (RP) advertisement.
Syntax Parameters
clear ip pim [vrf vrf-name] rp-mapping [rp-address]
vrf vrf-name
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to configure this setting on that VRF.
NOTE: Applies to specific VRF if input is provided, else applies to Default VRF.
rp-address
(OPTIONAL) Enter the RP address in dotted decimal format (A.B.C.D).
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series.
Usage Information
This command re-applies the RP mapping logic for all the groups learnt by the node. Any stale information corresponding to the existing mapping configuration is updated. As a result, the existing BSR cache and the *,G's are deleted only if these entries are stale.
1094 PIM-Sparse Mode (PIM-SM)
clear ip pim tib
Clear PIM tree information from the PIM database.
Syntax Parameters
clear ip pim [vrf vrf-name] tib [group]
vrf vrf-name
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to configure this setting on that VRF.
NOTE: Applies to specific VRF if input is provided, else applies to Default VRF.
group
(OPTIONAL) Enter the multicast group address in dotted decimal format (A.B.C.D).
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series.
Usage Information
If you use this command on a local VLT node, all multicast routes from the local PIM TIB, the entire multicast route table, and all the entries in the data plane are deleted. The local VLT node sends a request to the peer VLT node to download multicast routes learned by the peer. Both local and synced routes are removed from the local VLT node multicast route table. The peer VLT node clears synced routes from the node.
If you use this command on a peer VLT node, only the synced routes are deleted from the multicast route table.
debug ip pim
View IP PIM debugging messages.
Syntax Parameters
debug ip pim [vrf vrf-name] [bsr | events | group | packet [in | out] | register | state | timer [assert | hello | joinprune | register]]
To disable PIM debugging, use the no debug ip pim [vrf vrf-name] command or use the undebug allto disable all debugging command.
vrf vrf-name
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to view IP PIM debugging messages corresponding to that VRF.
NOTE: Applies to specific VRF if input is provided, else applies to Default VRF.
PIM-Sparse Mode (PIM-SM) 1095
bsr events group packet [in | out]
(OPTIONAL) Enter the keyword bsr to view PIM Candidate RP/BSR activities.
(OPTIONAL) Enter the keyword group to view PIM messages for a specific group.
(OPTIONAL) Enter the keyword group to view PIM messages for a specific group.
(OPTIONAL) Enter the keyword packet to view PIM packets. Enter one of the optional parameters:
in: to view incoming packets out: to view outgoing packets
register
(OPTIONAL) Enter the keyword register to view PIM register address in dotted decimal format (A.B.C.D).
state
(OPTIONAL) Enter the keyword state to view PIM state changes.
timer [assert | (OPTIONAL) Enter the keyword timer to view PIM timers. Enter one of the
hello | joinprune | optional parameters:
register]
assert: to view the assertion timer
hello: to view the PIM neighbor keepalive timer
joinprune: to view the expiry timer (join/prune timer)
register: to view the register suppression timer
Defaults
Disabled.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.12.0 8.1.1.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series.
ip pim bsr-border
Define the border of PIM domain by filtering inbound and outbound PIM-BSR messages per interface.
Syntax
ip pim bsr-border To return to the default value, use the no ip pim bsr-border command.
Defaults
Disabled.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
1096 PIM-Sparse Mode (PIM-SM)
Usage Information
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.8.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series.
This command is applied to the subsequent PIM-BSR. Existing BSR advertisements are cleaned up by time-out. To clean the candidate RP advertisements, use the clear ip pim rp-mapping command.
ip pim bsr-candidate
To join the Bootstrap election process, configure the PIM router.
Syntax Parameters
ip pim [vrf vrf-name] bsr-candidate interface [hash-mask-length] [priority] To return to the default value, use the no ip pim bsr-candidate [vrf vrf-name] command.
vrf vrf-name interface
hash-masklength priority
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to configure the PIM router on a VRF.
Enter the following keywords and slot/port or number information:
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a VLAN, enter the keyword vlan then a number from 1 to 4094.
(OPTIONAL) Enter the hash mask length. The range is from zero (0) to 32. The default is 30.
(OPTIONAL) Enter the priority used in Bootstrap election process. The range is from zero (0) to 255. The default is zero (0).
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
PIM-Sparse Mode (PIM-SM) 1097
Version
9.8(0.0P2) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 6.1.1.0
Description
Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Added support for the VLAN interface.
ip pim dr-priority
Change the designated router (DR) priority for the interface.
Syntax
ip pim dr-priority priority-value To remove the DR priority value assigned, use the no ip pim dr-priority command.
Parameters
priority-value
Enter a number. Preference is given to larger/higher number. The range is from 0 to 4294967294. The default is 1.
Defaults
1
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the C-Series on port-channels and the S-Series.
Usage Information
The router with the largest value assigned to an interface becomes the designated router. If two interfaces contain the same designated router priority value, the interface with the largest interface IP address becomes the designated router.
1098 PIM-Sparse Mode (PIM-SM)
ip pim join-filter
Permit or deny PIM Join/Prune messages on an interface using an extended IP access list. This command prevents the PIM-SM router from creating state based on multicast source and/or group.
Syntax Parameters
ip pim [vrf vrf-name] join-filter ext-access-list [in | out]
To remove the access list, use the no ip pim [vrf vrf-name] join-filter ext-accesslist command.
vrf vrf-name
ext-access-list in out
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to permit or deny PIM join or prune messages on an interface associated with that VRF.
Enter the name of an extended access list.
Enter the keyword in to apply the ACL filter to in-bound traffic.
Enterthe keyword out to apply the ACL filter to out-bound traffic.
Defaults
none
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.8.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Removed the in and out parameters. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the C-Series for the port-channels and the S-Series. Introduced on the E-Series.
Example
Dell(conf)# ip access-list extended iptv-channels Dell(config-ext-nacl)# permit ip 10.1.2.3/24 225.1.1.0/24 Dell(config-ext-nacl)# permit ip any 232.1.1.0/24 Dell(config-ext-nacl)# permit ip 100.1.1.0/16 any
Related Commands
ip access-list extended -- configure an access list based on IP addresses or protocols.
ip pim ingress-interface-map
When the Dell Networking system is the RP, statically map potential incoming interfaces to (*,G) entries to create a lossless multicast forwarding environment.
Syntax
ip pim ingress-interface-map std-access-list
PIM-Sparse Mode (PIM-SM) 1099
Parameters
std-access-list Enter the name of a standard access list.
Defaults
none
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 8.3.19.0 8.3.12.0 8.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the S4810. Introduced
Example
Dell(conf)# ip access-list standard map1 Dell(config-std-nacl)# permit 224.0.0.1/24 Dell(config-std-nacl)#exit Dell(conf)#int tengig 1/1 Dell(config-if-te-1/1)# ip pim ingress-interface-map map1
ip pim neighbor-filter
To prevent a router from participating in protocol independent multicast (PIM), configure this feature.
Syntax Parameters
ip pim [vrf vrf-name] neighbor-filter {access-list}
To remove the restriction, use the no ip pim [vrf vrf-name] neighbor-filter {accesslist} command.
vrf vrf-name
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to prevent that VRF from participating in PIM.
NOTE: Applies to specific VRF if input is provided, else applies to default VRF.
access-list
Enter the name of a standard access list. Maximum 16 characters.
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500.
1100 PIM-Sparse Mode (PIM-SM)
Usage Information
Version
9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.8.1.0 7.6.1.0
Description
Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the C-Series and S-Series. Introduced on the E-Series.
Do not enter this command before creating the access-list.
ip pim query-interval
Change the frequency of PIM Router-Query messages.
Syntax
ip pim query-interval seconds To return to the default value, use the no ip pim query-interval seconds command.
Parameters
seconds
Enter a number as the number of seconds between router query messages. The range is from 0 to 65535. The default is 30 seconds.
Defaults
30 seconds
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the C-Series for the port-channels and the S-Series.
ip pim register-filter
To prevent a PIM source DR from sending register packets to an RP for the specified multicast source and group, use this feature.
Syntax
ip pim [vrf vrf-name] register-filter access-list
PIM-Sparse Mode (PIM-SM) 1101
Parameters
To return to the default, use the no ip pim [vrf vrf-name] register-filter access-list command.
vrf vrf-name
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF. NOTE: Applies to specific VRF if input is provided, else applies to Default VRF.
access-list
Enter the name of an extended access list. Maximum 16 characters.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series. Introduced
Usage Information
The access name is an extended IP access list that denies PIM register packets to RP at the source DR based on the multicast and group addresses. Do not enter this command before creating the access-list.
ip pim rp-address
Configure a static PIM rendezvous point (RP) address for a group or access-list.
Syntax Parameters
Defaults
ip pim [vrf vrf-name] rp-address address {group-address group-address mask} [override]
To remove an RP address, use the no ip pim [vrf vrf-name] rp-address address {group-address group-address mask} [override] command.
vrf vrf-name
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF. NOTE: Applies to specific VRF if input is provided, else applies to Default VRF.
address
group-address group-address mask
override
Enter the RP address in dotted decimal format (A.B.C.D). Enter the keywords group-address then a group-address mask, in dotted decimal format (/xx), to assign that group address to the RP.
Enter the keyword override to override the BSR updates with static RP. The override takes effect immediately during enable/disable.
NOTE: This option is applicable to multicast group range.
Not configured.
1102 PIM-Sparse Mode (PIM-SM)
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.8.1.0 pre- 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the E-Series.
Usage Information
First-hop routers use this address by to send register packets on behalf of source multicast hosts. The RP addresses are stored in the order in which they are entered. The RP is chosen based on a longer prefix match for a group. The RP selection does not depend on dynamic or static RP assignments.
ip pim rp-candidate
To send out a Candidate-RP-Advertisement message to the bootstrap (BS) router or define group prefixes that are defined with the RP address to PIM BSR, configure a PIM router.
Syntax
ip pim [vrf vrf-name] rp-candidate {interface [priority]}
To return to the default value, use the no ip pim [vrf vrf-name] rp-candidate {interface [priority]} command.
Parameters
vrf vrf-name
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF. NOTE: Applies to specific VRF if input is provided, else applies to Default VRF.
interface priority
Enter the following keywords and slot/port or number information:
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a VLAN, enter the keyword vlan then a number from 1 to 4094.
(OPTIONAL) Enter the priority used in Bootstrap election process. The range is zero (0) to 255. The default is 192.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PIM-Sparse Mode (PIM-SM) 1103
Usage Information
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.8.1.0 pre- 6.1.1.1
Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the E-Series.
Priority is stored at BSR router when receiving a Candidate-RP-Advertisement.
ip pim sparse-mode
Enable PIM sparse mode and IGMP on the interface.
Syntax
ip pim sparse-mode To disable PIM sparse mode and IGMP, use the no ip pim sparse-mode command.
Defaults
Disabled.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the C-Series for the port-channels and the S-Series.
Usage Information
The interface must be enabled (the no shutdown command) and not have the switchport command configured. Multicast must also be enabled globally (using the ip multicast-lag-hashing command). PIM is supported on the port-channel interface.
1104 PIM-Sparse Mode (PIM-SM)
ip pim sparse-mode sg-expiry-timer
Enable expiry timers globally for all sources.
Syntax Parameters
ip pim [vrf vrf-name] sparse-mode sg-expiry-timer seconds [access-listname]
To disable configured timers and return to default mode, use the no ip pim [vrf vrf-name] sparse-mode sg-expiry-timer command.
vrf vrf-name
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to enable expiry timer for all sources on that VRF.
NOTE: Applies to specific VRF if input is provided, else applies to Default VRF.
seconds
Enter the number of seconds the S, G entries are retained. The range is from 211 to 65535.
access-list-name (OPTIONAL) Enter the name of a previously configured Extended ACL to enable the expiry time to specified S,G entries.
Defaults
Disabled. The default expiry timer (with no times configured) is 210 sec.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.8.1.0 7.7.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the C-Series for the port-channels and the S-Series. Introduced
Usage Information
This command configures an expiration timer for all S.G entries, unless they are assigned to an Extended ACL.
Even though the FHR nodes act as RPs, these nodes still send Register encap messages to themselves and expect to receive a Register stop message (for Anycast RP support). As a result, if the DLT timer expires, SG is not deleted until the register state is deleted in the node. This register state expires 210 seconds after the last Null register is received.
ip pim ssm-range
Specify the SSM group range using an access list.
Syntax
ip pim [vrf vrf-name] ssm-range {access_list_name}
PIM-Sparse Mode (PIM-SM) 1105
Parameters
vrf vrf-name
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to specify the SSM group range for that VRF.
NOTE: Applies to specific VRF if input is provided, else applies to Default VRF.
access_list_name Enter the name of the access list.
Defaults
Default SSM range is 232/8 and ff3x/32
Command Modes CONFIGURATION
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000-ON. Added support for VRF on S6000, S4810, S4820T, Z9000, Z9500, and S6000�ON.
9.5(0.1)
Introduced on the Z9500.
9.0.2.0
Introduced on the S6000.
8.3.19.0
Introduced on the S4820T.
8.3.11.1
Introduced on the Z9000.
8.3.7.1
Introduced on the S4810.
8.1.1.0
Introduced on the E-Series ExaScale.
7.8.1.0
Introduced on the S-Series.
7.7.1.0
Introduced on the C-Series.
7.5.1.0
Introduced on the E-Series.
Usage Information
Dell Networking OS supports standard access lists for the SSM range. You cannot use extended ACLs for configuring the SSM range. If you configure an extended ACL and then used in the ip pim ssm-range {access list name} configuration, an error is reported.
However, if you configure ip pim ssm-range {access list name} first and then you configure the ACL as an Extended ACL, an error is not reported and the ACL is not applied to the SSM range.
Dell Networking OS-recommended best-practices are to configure the standard ACL, and then apply the ACL to the SSM range. After the SSM range is applied, the changes are applied internally without requiring clearing of the tree information base (TIB).
When the ACL rules change, the ACL and protocol-independent multicast (PIM) modules apply the new rules automatically.
When you configure the SSM range, Dell Networking OS supports SSM for configured group range as well as the default SSM range.
When you remove the SSM ACL, PIM SSM is supported for the default SSM range only.
ip pim spt-threshold
To switch to the shortest path tree when the traffic reaches the specified threshold value, configure the PIM router.
Syntax Parameters
ip pim [vrf vrf-name] spt-threshold [value | infinity]
To return to the default value, use the no ip pim [vrf vrf-name] spt-threshold [infinity] command.
value
(OPTIONAL) Enter the traffic value in kilobits per second. The default is 10 packets per second . A value of zero (0) causes a switchover on the first packet.
1106 PIM-Sparse Mode (PIM-SM)
vrf vrf-name
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to configure the PIM router on that VRF.
NOTE: Applies to specific VRF if input is provided, else applies to Default VRF.
infinity
(OPTIONAL) Enter the keyword infinity to never switch to the source-tree.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 8.3.19.0 8.3.12.0 8.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the S4810. Introduced on the E-Series ExaScale.
Usage Information
This command is applicable to last hop routers on the shared tree towards the rendezvous point (RP).
no ip pim snooping dr-flood
Disable the flooding of multicast packets to the PIM designated router.
Syntax
no ip pim snooping dr-flood
To re-enable the flooding of multicast packets to the PIM designated router, use the ip pim snooping dr-flood command.
Defaults
Enabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 8.3.19.0 8.3.12.0 8.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the S4810. Introduced on the E-Series ExaScale.
Usage Information
By default, when you enable PIM-SM snooping, a switch floods all multicast traffic to the PIM designated router (DR), including unnecessary multicast packets. To minimize the traffic sent over the network to the designated router, you can disable designated-router flooding.
PIM-Sparse Mode (PIM-SM) 1107
When designated-router flooding is disabled, PIM-SM snooping only forwards the multicast traffic, which belongs to a multicast group for which the switch receives a join request, on the port connected towards the designated router.
If the PIM DR flood is not disabled (default setting):
Multicast traffic is transmitted on the egress port towards the PIM DR if the port is not the incoming interface.
Multicast traffic for an unknown group is sent on the port towards the PIM DR. When DR flooding is disabled, multicast traffic for an unknown group is dropped.
show ip pim bsr-router
View information on the Bootstrap router.
S4048�ON
Syntax
show ip pim [vrf vrf-name] bsr-router
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series.
Example
Dell#show ip pim bsr-router PIMv2 Bootstrap information This system is the Bootstrap Router (v2)
BSR address: 7.7.7.7 (?) BSR Priority: 0, Hash mask length: 30 Next bootstrap message in 00:00:08 This system is a candidate BSR Candidate BSR address: 7.7.7.7, priority: 0, hash mask length: 30
1108 PIM-Sparse Mode (PIM-SM)
show ip pim interface
View information on the interfaces with IP PIM enabled.
S4048�ON
Syntax
show ip pim [vrf vrf-name] interface
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 8.1.1.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series ExaScale. Introduced on the S-Series.
Usage Information
Example
The following describes the show ip pim interface command shown in the following example.
Field
Description
Address Interface
Ver/Mode
Lists the IP addresses of the interfaces participating in PIM.
List the interface type, with either slot/port information or ID (VLAN or Port Channel), of the interfaces participating in PIM.
Displays the PIM version number and mode for each interface participating in PIM:
v2 = PIM version 2 S = PIM Sparse mode
Nbr Count Query Intvl
DR Prio
DR
Displays the number of PIM neighbors discovered over this interface.
Displays the query interval for Router Query messages on that interface (configured with ip pim query-interval command).
Displays the Designated Router priority value configured on the interface (use the ip pim dr-priority command).
Displays the IP address of the Designated Router for that interface.
The show ip pim interface command does not display information corresponding to the loop-back interfaces.
Dell#show ip pim interface
Address
Interface Ver/
Mode
165.87.34.5
Te 1/10 v2/S
10.1.1.2
Vl 10
v2/S
Nbr Count 0 1
Query Intvl 30 30
DR Prio 1 1
DR 165.87.34.5 10.1.1.2
PIM-Sparse Mode (PIM-SM) 1109
20.1.1.5 165.87.31.200
Vl 20 Vl 30
v2/S 1 v2/S 1
30
1
30
1
20.1.1.5 165.87.31.201
show ip pim neighbor
View PIM neighbors.
S4048�ON
Syntax
show ip pim [vrf vrf-name] neighbor
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 8.1.1.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series ExaScale. Introduced on the S-Series.
Usage Information
The following describes the show ip pim neighbor command shown in the following example.
Field
Description
Neighbor address Displays the IP address of the PIM neighbor.
Interface
List the interface type, with either slot/port information or ID (VLAN or Port Channel), on which the PIM neighbor was found.
Uptime/expires
Displays the amount of time the neighbor has been up then the amount of time until the neighbor is removed from the multicast routing table (that is, until the neighbor hold time expires).
Ver
Displays the PIM version number.
v2 = PIM version 2
DR prio/Mode
Displays the Designated Router priority and the mode.
1 = default Designated Router priority (use the ip pim dr-priority command)
DR = Designated Router S = Sparse mode
Example
Dell#show ip pim neighbor Neighbor Interface Uptime/Expires Address
Ver DR Prio/Mode
1110 PIM-Sparse Mode (PIM-SM)
127.87.3.4 Te 1/16 Dell#
09:44:58/00:01:24 v2 1 / S
show ip pim rp
View all multicast groups-to-RP mappings.
S4048�ON
Syntax Parameters
show ip pim [vrf vrf-name] rp [mapping | group-address]
vrf vrf-name mapping group-address
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to configure this setting on that VRF.
(OPTIONAL) Enter the keyword mapping to display the multicast groups-to-RP mapping and information on how RP is learnt.
(OPTIONAL) Enter the multicast group address mask in dotted decimal format to view RP for a specific group.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 8.1.1.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series ExaScale. Introduced on the S-Series.
Example
Dell#show ip pim rp
Group
RP
224.2.197.115 165.87.20.4
224.2.217.146 165.87.20.4
224.3.3.3
165.87.20.4
225.1.2.1
165.87.20.4
225.1.2.2
165.87.20.4
229.1.2.1
165.87.20.4
229.1.2.2
165.87.20.4
Dell#
Example (Mapping)
Dell#show ip pim rp mapping PIM Group-to-RP Mappings Group(s): 224.0.0.0/4, Static
RP: 50.40.4.4, v2 Dell#
PIM-Sparse Mode (PIM-SM) 1111
Example (Address)
Dell#show ip pim rp 229.1.2.1
Group
RP
229.1.2.1
165.87.20.4
show ip pim snooping interface
Display information on VLAN interfaces with PIM-SM snooping enabled.
Syntax Parameters
show ip pim snooping interface [vlan vlan-id]
vlan vlan-id
(OPTIONAL) Enter a VLAN ID to display information about a specified VLAN configured for PIM-SM snooping. The valid VLAN IDs range is from 1 to 4094.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 8.3.19.0 8.3.12.0 8.4.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the S4810. Introduced on the E-Series ExaScale.
Usage Information
The following describes the show ip pim snooping interface commands shown in the following example.
Field
Description
Interface Ver/Mode
Displays the VLAN interfaces with PIM-SM snooping enabled.
Displays the PIM version number for each VLAN interface with PIM-SM snooping enabled:
v2 = PIM version 2 S = PIM Sparse mode
Nbr Count DR Prio DR
Displays the number of neighbors learned through PIM-SM snooping on the interface.
Displays the Designated Router priority value configured on the interface (ip pim dr-priority command).
Displays the IP address of the Designated Router for that interface.
Example (#2)
Dell#show ip pim snooping interface
Interface Ver Nbr
DR
DR
Count Prio
Vlan 2
v2 3
1
165.87.32.2
1112 PIM-Sparse Mode (PIM-SM)
show ip pim snooping neighbor
Display information on PIM neighbors learned through PIM-SM snooping.
Syntax Parameters
show ip pim snooping neighbor [vlan vlan-id]
vlan vlan-id
(OPTIONAL) Enter a VLAN ID to display information about PIM neighbors that PIM-SM snooping discovered on a specified VLAN. The valid VLAN IDs range is from 1 to 4094.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 8.3.19.0 8.3.12.0 8.4.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the S4810. Introduced on the E-Series ExaScale.
Usage Information
The following describes the show ip pim snooping neighbor commands shown in the following example.
Field
Description
Neighbor address Displays the IP address of the neighbor learned through PIM-SM snooping.
Interface
Displays the VLAN ID number and slot/port on which the PIM-SM-enabled neighbor was discovered.
Uptime/expires
Displays the amount of time the neighbor has been up then the amount of time until the neighbor is removed from the multicast routing table (that is, until the neighbor hold time expires).
Ver
Displays the PIM version number:
v2 = PIM version 2
DR prio/Mode
Displays the Designated Router priority and the mode:
1 = default Designated Router priority (use the ip pim dr-priority command)
DR = Designated Router S = Sparse mode
Example
Dell#show ip pim snooping neighbor
Neighbor
Interface
Uptime/Expires
Ver
Address
165.87.32.2 Vl 2 [Te 1/13 ] 00:04:03/00:01:42 v2
165.87.32.10 Vl 2 [Te 1/11 ] 00:00:46/00:01:29 v2
165.87.32.12 Vl 2 [Te 2/20 ] 00:00:51/00:01:24 v2
DR Prio 1 0 0
PIM-Sparse Mode (PIM-SM) 1113
show ip pim snooping tib
Display information from the tree information base (TIB) PIM-SM snooping discovered about multicast group members and states.
Syntax Parameters
show ip pim snooping tib [vlan vlan-id] [group-address [source-address]]
vlan vlan-id group-address source-address
(OPTIONAL) Enter a VLAN ID to display TIB information PIM-SM snooping discovered on a specified VLAN. The valid VLAN IDs range is from 1 to 4094.
(OPTIONAL) Enter the group address in dotted decimal format (A.B.C.D) to display TIB information PIM-SM snooping discovered for a specified multicast group.
(OPTIONAL) Enter the source address in dotted decimal format (A.B.C.D) to display TIB information PIM-SM snooping discovered for a specified multicast source.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 8.3.19.0 8.3.12.0 8.4.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the S4810. Introduced on the E-Series ExaScale.
Usage Information
The following describes the show ip pim snooping tib commands shown in the following example.
Field
Description
(S, G) uptime expires
RP flags
Displays the entry in the PIM multicast snooping database.
Displays the amount of time the entry has been in the PIM multicast route table.
Displays the amount of time until the entry expires and is removed from the database.
Displays the IP address of the RP/source for this entry.
List the flags to define the entries:
S = PIM Sparse Mode C = directly connected L = local to the multicast group P = route was pruned R = the forwarding entry is pointing toward the RP F = Dell Networking OS is registering this entry for a multicast source T = packets were received via Shortest Tree Path J = first packet from the last hop router is received and the entry is ready to
switch to SPT K=acknowledge pending state
Incoming interface
RPF neighbor
Displays the reverse path forwarding (RPF) interface towards the RP/ source. Displays the next hop from this interface towards the RP/source.
1114 PIM-Sparse Mode (PIM-SM)
Example
Field
Outgoing interface list:
Description
Lists the interfaces that meet one of the following criteria:
a directly connect member of the Group statically configured member of the Group received a (*,G) Join message
Dell#show ip pim snooping tib
PIM Multicast Snooping Table Flags: J/P - (*,G) Join/Prune, j/p - (S,G) Join/Prune
SGR-P - (S,G,R) Prune Timers: Uptime/Expires * : Inherited port
(*, 225.1.2.1), uptime 00:00:01, expires 00:02:59, RP 165.87.70.1, flags: J
Incoming interface: Vlan 2, RPF neighbor 0.0.0.0 Outgoing interface list:
TenGigabitEthernet 2/11 RPF 165.87.32.2 00:00:01/00:02:59 TenGigabitEthernet 2/13 Upstream Port -/-
Dell#show ip pim snooping tib vlan 2 225.1.2.1 165.87.1.7
PIM Multicast Snooping Table Flags: J/P - (*,G) Join/Prune, j/p - (S,G) Join/Prune
SGR-P - (S,G,R) Prune Timers: Uptime/Expires * : Inherited port
(165.87.1.7, 225.1.2.1), uptime 00:00:08, expires 00:02:52, flags: j
Incoming interface: Vlan 2, RPF neighbor 0.0.0.0
Outgoing interface list:
TenGigabitEthernet 2/11 Upstream Port
-/-
TenGigabitEthernet 2/13 DR Port
-/-
TenGigabitEthernet 2/20 RPF 165.87.32.10 00:00:08/00:02:52
show ip pim ssm-range
Display the non-default groups added using the SSM range feature.
4048�ON
Syntax
show ip pim [vrf vrf-name] ssm-range
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
9.5(0.1) 9.0.2.0 8.3.19.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Added support for VRF on S6000, S4810, S4820T, Z9000, Z9500, and S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T.
PIM-Sparse Mode (PIM-SM) 1115
Exmaple
Version
8.3.11.1 8.3.7.1 8.1.1.0 7.8.1.0 7.7.1.0 7.5.1.0
Description
Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Group Address / MaskLen
show ip pim summary
View information about PIM-SM operation.
S4048�ON
Syntax
show ip pim [vrf vrf-name] summary
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 8.3.19.0 8.3.12.0 8.3.11.1 8.4.1.1
8.1.1.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Support for the display of PIM-SM snooping status was added on E-Series ExaScale. Introduced on the E-Series ExaScale. Introduced on the S-Series.
Example
Dell# show ip pim summary PIM TIB version 495 Uptime 22:44:52 Entries in PIM-TIB/MFC : 2/2 Active Modes :
PIM-SNOOPING Interface summary:
1 active PIM interface 0 passive PIM interfaces 3 active PIM neighbors
1116 PIM-Sparse Mode (PIM-SM)
TIB summary: 1/1 (*,G) entries in PIM-TIB/MFC 1/1 (S,G) entries in PIM-TIB/MFC 0/0 (S,G,Rpt) entries in PIM-TIB/MFC 0 PIM nexthops 0 RPs 0 sources 0 Register states
Message summary: 2582/2583 Joins sent/received 5/0 Prunes sent/received 0/0 Candidate-RP advertisements sent/received 0/0 BSR messages sent/received 0/0 State-Refresh messages sent/received 0/0 MSDP updates sent/received 0/0 Null Register messages sent/received 0/0 Register-stop messages sent/received
Data path event summary: 0 no-cache messages received 0 last-hop switchover messages received 0/0 pim-assert messages sent/received 0/0 register messages sent/received
show ip pim tib
View the PIM tree information base (TIB).
S4048�ON
Syntax Parameters
show ip pim [vrf vrf-name] tib [group-address [source-address]]
vrf vrf-name
(OPTIONAL) Enter the keyword vrf followed by the name of the VRF to configure this setting on that VRF.
NOTE: Applies to specific VRF if input is provided, else applies to Default VRF.
group-address source-address
(OPTIONAL) Enter the group address in dotted decimal format (A.B.C.D). (OPTIONAL) Enter the source address in dotted decimal format (A.B.C.D).
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000.
PIM-Sparse Mode (PIM-SM) 1117
Usage Information
Example
Version
8.1.1.0 7.8.1.0
Description
Introduced on the E-Series ExaScale. Introduced on the S-Series.
The following describes the show ip pim tib command shown in the following example.
Field
Description
(S, G) uptime expires
RP flags
Displays the entry in the multicast PIM database.
Displays the amount of time the entry has been in the PIM route table.
Displays the amount of time until the entry expires and is removed from the database.
Displays the IP address of the RP/source for this entry.
List the flags to define the entries:
D = PIM Dense Mode S = PIM Sparse Mode C = directly connected L = local to the multicast group P = route was pruned R = the forwarding entry is pointing toward the RP F = Dell Networking OS is registering this entry for a multicast source T = packets were received via Shortest Tree Path J = first packet from the last hop router is received and the entry is ready to
switch to SPT K = acknowledge pending state
Incoming interface
RPF neighbor
Outgoing interface list:
Displays the reverse path forwarding (RPF) interface towards the RP/ source.
Displays the next hop from this interface towards the RP/source. Lists the interfaces that meet one of the following criteria: a directly connect member of the Group statically configured member of the Group received a (*,G) Join message
Dell#do show ip pim tib PIM Multicast Routing Table Flags: D - Dense, S - Sparse, C - Connected, L - Local, P - Pruned,
R - RP-bit set, F - Register flag, T - SPT-bit set, J - Join SPT, M - MSDP created entry, A - Candidate for MSDP Advertisement K - Ack-Pending State Timers: Uptime/Expires Interface state: Interface, next-Hop, State/Mode (*, 225.1.1.1), uptime 00:40:16, expires 00:00:00, RP 20.40.4.4, flags: SCJ Incoming interface: Vlan 2007, RPF neighbor 20.30.124.4 Outgoing interface list: Vlan 2006 Forward/Sparse 00:06:21/Never (20.10.4.9, 225.1.1.1), uptime 00:06:21, expires 00:02:06, flags: CT Incoming interface: Vlan 2007, RPF neighbor 20.30.124.4 Outgoing interface list: Vlan 2006 Forward/Sparse 00:06:21/Never (*, 225.1.1.2), uptime 00:40:15, expires 00:00:00, RP 20.40.4.4, flags: SCJ Incoming interface: Vlan 2007, RPF neighbor 20.30.124.4
1118 PIM-Sparse Mode (PIM-SM)
Outgoing interface list: Vlan 2006 Forward/Sparse 00:06:21/Never
(20.10.4.9, 225.1.1.2), uptime 00:06:21, expires 00:02:06, flags: CT Incoming interface: Vlan 2007, RPF neighbor 20.30.124.4 Outgoing interface list: Vlan 2006 Forward/Sparse 00:06:21/Never
show running-config pim
Display the current configuration of PIM-SM snooping.
Syntax
show running-config pim
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 8.3.19.0 8.3.12.0 8.3.11.1 8.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series ExaScale.
Example
Dell#show running-config pim ! ip pim snooping enable
PIM-Sparse Mode (PIM-SM) 1119
43
Port Monitoring
The port monitoring feature allows you to monitor network traffic by forwarding a copy of each incoming or outgoing packet from one port to another port.
Important Points to Remember
Port monitoring is supported on physical ports and logical interfaces, such as port channels and virtual local area networks (VLANs).
The monitoring (destination, "MG") and monitored (source, "MD") ports must be on the same switch. In general, a monitoring port should have no ip address and no shutdown as the only configuration; Dell Networking
OS permits a limited set of commands for monitoring ports; display them using the ? command. A monitoring port also may not be a member of a VLAN. A total of 4 MG may be configured in a single port-pipe. MG and MD ports can be reside anywhere across a port-pipe. The Dell Networking OS supports multiple source ports to be monitored by a single destination port in one monitor session. One monitor session can have only one MG port. PE Gigabit Ethernet (peGigE) ports can be added as source ports only. You cannot add peGigE ports as destination ports.
NOTE: The monitoring port should not be a part of any other configuration.
Topics:
� description � monitor multicast-queue � monitor session � rate-limit � show config � show monitor session � show running-config monitor session � source (port monitoring)
description
Enter a description of this monitoring session.
Syntax
description {description} To remove the description, use the no description {description} command.
Parameters
description
Enter a description regarding this session (80 characters maximum).
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
1120 Port Monitoring
Related Commands
Version
9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.5(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.1.1.0 7.7.1.0 7.5.1.0 pre-7.7.1.0
Description
Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
monitor session -- enables a monitoring session.
monitor multicast-queue
Configure monitor QoS multicast queue ID.
Syntax
monitor multicast-queue queue-id To remove the configuration, use the no monitor multicast-queue command.
Parameters
queue-id
Enter the QoS multicast queue ID. The range is from 0 to 9.
Defaults
queue-id: 0 Enable status: Disabled
Command Modes CONFIGURATION
Example
Dell(conf)#monitor multicast-queue 7
Command History
Related Commands
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.8(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000, Z9500, S6000-ON.
show running-config monitor session -- displays information about monitor configurations.
Port Monitoring 1121
monitor session
Create a session for monitoring traffic with port monitoring.
Syntax
monitor session session-ID [type { rpm | erpm [set ip dscp dscp_value | set ip ttl ttl_value]}] [drop]
To delete a session, use the no monitor session session-ID command.
To delete all monitor sessions, use the no monitor session all command.
Parameters
session-ID type
Enter a session identification number. The range is from 0 to 65535.
Specifies one of the following type: rpm erpm
rpm erpm set ip dscp
dscp_value set ip ttl
ttl_value drop
Creates a remote port monitoring (rpm) session.
Creates an encapsulated remote port monitoring (erpm) session.
Configures the Differentiated Services Code Point (DSCP) value of the packets in the Encapsulated Remote Switched Port Analyzer (ERSPAN) traffic. To revert to the default value, use the no form of this command.
DSCP value of the packets in the ERSPAN traffic. The range is from 0 to 63. The default value is 0.
Configures the IP time-to-live (TTL) value of the Encapsulated Remote Switched Port Analyzer (ERSPAN) traffic. To revert to the default configuration, use the no form of this command.
IP TTL value of the ERSPAN traffic. The range is from 1 to 255. The default value is 255.
Monitors only the dropped packets in the Ingress.
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.8(0.0) 9.7(0.0)
9.5(0.1) 9.4(0.0) 9.0.2.0 9.0.2.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Added the drop parameter. Introduced on the S6000-ON. Introduced the set ip dscp and set ip ttl parameters. Introduced on the Z9500. Introduced on the S4810, S4820T, S6000, and Z9000. Introduced on the S6000. Introduced on the MXL. Introduced on the Z9000. Introduced on the S4810.
Usage Information
The monitor command is saved in the running configuration at Monitor Session mode level and can be restored after a chassis reload.
1122 Port Monitoring
Example
Related Command
Dell#show monitor session
SessID Source Destination Dir Mode Source IP Dest IP DSCP TTL
------ ------ ----------- --- ---- --------- ---------------
0 Te 1/12 remote-ip rx Flow 1.1.1.1
7.1.1.2 0 255
0 Po 1
remote-ip tx Flow 1.1.1.1
7.1.1.2 0 255
1 Vl 11
remote-ip rx Flow 5.1.1.1
3.1.1.2 0 255
show monitor session -- displays the monitor session. show running-config monitor session -- displays the running configuration of a monitor session.
rate-limit
Configure the rate-limit to limit the mirrored packets.
Syntax
rate-limit limit To remove the limit, use the no rate-limit limit command.
Parameters
limit
Enter the rate-limit value. The range is from 0 to 40000 Megabits per second.
Defaults
60
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.8(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4810, S4820T, S5000, S6000, S6000-ON, Z9500.
Related Commands
monitor session -- enables a monitoring session. show monitor session on page 1124 -- displays the monitor session.
show config
Display the current monitor session configuration.
Syntax
show config
Defaults
none
Command Modes MONITOR SESSION (conf-mon-sess-session-ID)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500.
Port Monitoring 1123
Example
Version
9.0.2.0 8.3.19.0 8.3.7.0 8.3.11.1 8.1.1.0 7.7.1.0 7.5.1.0 7.4.1.0
Description
Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Dell(conf-mon-sess-1)#show config ! monitor session 1
source TenGigabitEthernet 1/1 destination Port-channel 1 direction rx
show monitor session
Display information about monitoring sessions.
Syntax
show monitor session {session-ID} To display monitoring information for all sessions, use the show monitor session command.
Parameters
session-ID
(OPTIONAL) Enter a session identification number. The range is from 0 to 65535.
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.4.0.0 9.0.2.0 8.3.19.0 8.3.7.0 8.3.11.1 8.1.1.0 7.7.1.0 7.5.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Added support for the RPM / ERPM. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
1124 Port Monitoring
Example
Related Commands
Dell#show monitor session 1 SessID Source Destination Dir Mode Source IP Dest IP DSCP TTL ------ ------ ----------- --- --------- -------- ------ ----1 Te 1/2 remote-ip rx Port 0.0.0.0 0.0.0.0 0 0 Dell#show monitor session SessID Source Destination Dir Mode Source IP Dest IP DSCP TTL ------ ------ ----------- --- ---- ---- -------- ------ ---1 Te 1/2 remote-ip rx Port 0.0.0.0 0.0.0.0 0 255 99 NONE NONE N/A N/A N/A N/A N/A N/A
monitor session -- creates a monitoring session. rate-limit on page 1123 -- configures the rate-limit.
show running-config monitor session
Display the running configuration of all monitor sessions or a specific session.
Syntax
show running-config monitor session {session-ID}
To display the running configuration for all monitor sessions, use the show running-config monitor session command.
Parameters
session-ID
(OPTIONAL) Enter a session identification number. The range from 0 to 65535.
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.11.1 8.1.1.0 7.7.1.0 7.5.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Example
The monitoring command is saved in the running configuration at the Monitor Session mode level and can be restored after a chassis reload.
Dell# show running-config monitor session ! monitor session 1 source TenGigabitEthernet 1/1 destination TenGigabitEthernet 1/2
Port Monitoring 1125
Related Commands
direction rx ! monitor multicast-queue 7
monitor session -- creates a monitoring session. show monitor session -- displays a monitoring session.
source (port monitoring)
Configure a port monitor source.
Syntax
source {interface | range | any} destination interface direction {rx | tx | both}
To disable a monitor source, use the no source interface destination interface direction {rx | tx | both} command.
Parameters
source interface
Enter one of the following keywords and slot/port information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a VLAN interface enter the keyword VLAN followed by a number from 1 to 4094.
For a port channel interface, enter the keywords port-channel then a number.
range any
Enter the keyword range to specify the list of interfaces. Enter the keyword any to specify all interfaces.
NOTE: This option is applicable only with drop monitor session.
destination
Enter the keyword destination to specify the destination interface.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number.
interface
Enter one of the following keywords and slot/port information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094. For a port channel interface, enter the keywords port-channel then a
number.
direction {rx | tx | both}
Enter the keyword direction then one of the packet directional indicators.
rx: to monitor receiving packets only. tx: to monitor transmitting packets only. both: to monitor both transmitting and receiving packets.
Defaults
none
Command Modes MONITOR SESSION (conf-mon- sess-session-ID)
1126 Port Monitoring
Command History
Example
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.8(0.0) 9.7(0.0) 9.5(0.1) 9.4.0.0 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.5.1.0 8.1.1.0 7.7.1.0 7.5.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Added the any parameter. Introduced on the S6000-ON. Introduced on the Z9500. Added support for Source and destination. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for 4-port 40G line cards on ExaScale. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Dell# monitor session 0 source Port-channel 10 destination TenGigabitEthernet 1/33 direction tx
Port Monitoring 1127
44
Private VLAN (PVLAN)
The private VLAN (PVLAN) feature of the Dell Networking operating software is supported on the platforms. Private VLANs extend the Dell Networking OS security suite by providing Layer 2 isolation between ports within the same private VLAN. A private VLAN partitions a traditional VLAN into subdomains identified by a primary and secondary VLAN pair. The Dell Networking OS private VLAN implementation is based on RFC 3069. For more information, refer to the following commands. The command output is augmented in Dell Networking OS version 7.8.1.0 at later to provide PVLAN data: show arp show vlan
Private VLAN Concepts
Primary VLAN: The primary VLAN is the base VLAN and can have multiple secondary VLANs. There are two types of secondary VLAN -- community VLAN and isolated VLAN: A primary VLAN can have any number of community VLANs and isolated VLANs. Private VLANs block all traffic to isolated ports except traffic from promiscuous ports. Traffic received from an isolated port
is forwarded only to promiscuous ports or trunk ports. Community VLAN: A community VLAN is a secondary VLAN of the primary VLAN: Ports in a community VLAN can talk to each other. Also, all ports in a community VLAN can talk to all promiscuous ports in
the primary VLAN and vice versa. Devices on a community VLAN can communicate with each other using member ports, while devices in an isolated VLAN
cannot. Isolated VLAN: An isolated VLAN is a secondary VLAN of the primary VLAN: Ports in an isolated VLAN cannot talk to each other. Servers would be mostly connected to isolated VLAN ports. Isolated ports can talk to promiscuous ports in the primary VLAN, and vice versa. Port Types: Community port: A community port is a port that belongs to a community VLAN and is allowed to communicate with other
ports in the same community VLAN and with promiscuous ports. Isolated port: An isolated port is a port that, in Layer 2, can only communicate with promiscuous ports that are in the same
PVLAN. Promiscuous port: A promiscuous port is a port that is allowed to communicate with any other port type. Trunk port: A trunk port carries VLAN traffic across switches:
A trunk port in a PVLAN is always tagged. A trunk port in Tagged mode carries primary or secondary VLAN traffic. The tag on the packet helps identify the VLAN to
which the packet belongs. A trunk port can also belong to a regular VLAN (non-private VLAN).
Topics:
� ip local-proxy-arp � private-vlan mode � private-vlan mapping secondary-vlan � switchport mode private-vlan
1128 Private VLAN (PVLAN)
ip local-proxy-arp
Enable/disable Layer 3 communication between secondary VLANs in a private VLAN.
S4048
Syntax
[no] ip local-proxy-arp
To disable Layer 3 communication between secondary VLANs in a private VLAN, use the no ip localproxy-arp command in INTERFACE VLAN mode for the primary VLAN.
To disable Layer 3 communication in a particular secondary VLAN, use the no ip local-proxy-arp command in INTERFACE VLAN mode for the selected secondary VLAN.
NOTE: Even after you disable ip-local-proxy-arp (use no ip-local-proxy-arp) in a secondary VLAN, Layer 3 communication may happen between some secondary VLAN hosts, until the address resolution protocol (ARP) timeout happens on those secondary VLAN hosts.
Defaults
Layer 3 communication is disabled between secondary VLANs in a private VLAN.
Command Modes INTERFACE VLAN
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series.
Related Commands
private-vlan mode -- sets the mode of the selected VLAN to community, isolated, or primary. private-vlan mapping secondary-vlan -- maps secondary VLANs to the selected primary VLAN. show arp -- displays the ARP table. switchport mode private-vlan -- sets PVLAN mode of the selected port.
private-vlan mode
Set PVLAN mode of the selected VLAN to community, isolated, or primary.
S4048
Syntax
[no] private-vlan mode {community | isolated | primary}
To remove the PVLAN configuration, use the no private-vlan mode {community | isolated | primary} command syntax.
Private VLAN (PVLAN) 1129
Parameters
community isolated primary
Enter the keyword community to set the VLAN as a community VLAN. Enter the keyword isolated to configure the VLAN as an isolated VLAN. Enter the keyword primary to configure the VLAN as a primary VLAN.
Defaults
none
Command Modes INTERFACE VLAN
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series.
Usage Information
Related Commands
The VLAN:
can be in only one mode, either community, isolated, or primary. mode ode to community or isolated even before associating it to a primary VLAN. This secondary
VLAN continues to work normally as a normal VLAN even though it is not associated to a primary VLAN. (A syslog message indicates this.) must not have a port in it when VLAN mode is being set.
Only ports (and port channels) configured as promiscuous, host, or PVLAN trunk ports (as previously described) can be added to the PVLAN. No other regular ports can be added to the PVLAN.
After using this command to configure a VLAN as a primary VLAN, use the private-vlan mapping secondary-vlan command to map secondary VLANs to this VLAN.
private-vlan mapping secondary-vlan -- maps secondary VLANs to the selected primary VLAN.
switchport mode private-vlan -- sets PVLAN mode of the selected port.
private-vlan mapping secondary-vlan
Map secondary VLANs to the selected primary VLAN.
S4048
Syntax Parameters
[no] private-vlan mapping secondary-vlan vlan-list
To remove specific secondary VLANs from the configuration, use the no private-vlan mapping secondary-vlan vlan-list command syntax.
vlan-list
Enter the list of secondary VLANs to associate with the selected primary VLAN. The list can be in comma-delimited or hyphenated-range format, following the convention for the range input.
1130 Private VLAN (PVLAN)
Defaults
none
Command Modes INTERFACE VLAN
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series.
Usage Information
Related Commands
The list of secondary VLANs can be: Specified in comma-delimited or hyphenated-range format. Specified with this command even before they have been created. Amended by specifying the new secondary VLAN to be added to the list.
private-vlan mode -- sets the mode of the selected VLAN to community, isolated, or primary. switchport mode private-vlan -- sets PVLAN mode of the selected port.
switchport mode private-vlan
Set PVLAN mode of the selected port.
S4048
Syntax Parameters
[no] switchport mode private-vlan {host | promiscuous | trunk}
To remove PVLAN mode from the selected port, use the no switchport mode private-vlan command.
host promiscuous trunk
Enter the keyword host to configure the selected port or port channel as an isolated interface in a PVLAN.
Enter the keyword promiscuous to configure the selected port or port channel as an promiscuous interface.
Enter the keyword trunk to configure the selected port or port channel as a trunk port in a PVLAN.
Defaults
Disabled.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Private VLAN (PVLAN) 1131
Usage Information Example
Related Commands
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series.
The assignment of the various PVLAN port types to port and port channel (LAG) interfaces is shown in the following example.
Dell#conf Dell(conf)#interface TenGigabitEthernet 2/1 Dell(conf-if-te-2/1)#switchport mode private-vlan promiscuous Dell(conf)#interface TenGigabitEthernet 2/2 Dell(conf-if-te-2/2)#switchport mode private-vlan host Dell(conf)#interface TenGigabitEthernet 2/3 Dell(conf-if-te-2/3)#switchport mode private-vlan trunk Dell(conf)#interface port-channel 10 Dell(conf-if-te-2/3)#switchport mode private-vlan promiscuous
private-vlan mode -- sets the mode of the selected VLAN to community, isolated, or primary.
private-vlan mapping secondary-vlan -- sets the mode of the selected VLAN to primary and then associates the secondary VLANs to it.
1132 Private VLAN (PVLAN)
45
Per-VLAN Spanning Tree Plus (PVST+)
The Dell Networking operating software implementation of per-VLAN spanning tree plus (PVST+) is based on the IEEE 802.1w standard spanning tree protocol.
Dell Networking OS supports PVST+ on the S4048 platform.
NOTE: For easier command line entry, the plus (+) sign is not used at the command line.
Topics:
� description � disable � extend system-id � protocol spanning-tree pvst � show spanning-tree pvst � spanning-tree pvst � spanning-tree pvst err-disable � tc-flush-standard � vlan bridge-priority � vlan forward-delay � vlan hello-time � vlan max-age
description
Enter a description of the PVST+.
S4048
Syntax Parameters
description {description} To remove the description, use the no description {description} command.
description
Enter a description to identify the spanning tree (80 characters maximum).
Defaults
none
Command Modes SPANNING TREE PVST+ (The prompt is "config-pvst".)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000.
Per-VLAN Spanning Tree Plus (PVST+) 1133
Related Commands
Version
8.3.19.0 8.3.11.1 8.3.7.0 pre- 7.7.1.1
Description
Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced.
protocol spanning-tree pvst -- enter SPANNING TREE mode on the switch.
disable
Disable PVST+ globally.
S4048
Syntax
disable To enable PVST+, use the no disable command.
Defaults
Disabled.
Command Modes CONFIGURATION (conf-pvst)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre- 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Related Commands
protocol spanning-tree pvst -- enter PVST+ mode.
1134 Per-VLAN Spanning Tree Plus (PVST+)
extend system-id
To augment the Bridge ID with a VLAN ID so that PVST+ differentiate between BPDUs for each VLAN, use extend system ID. If the VLAN receives a BPDU meant for another VLAN, PVST+ does not detect a loop, and both ports can remain in Forwarding state.
S4048
Syntax
extend system-id
Defaults
Disabled
Command Modes PROTOCOL PVST
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced.
Example
Dell(conf-pvst)#do show spanning-tree pvst vlan 5 brief VLAN 5 Executing IEEE compatible Spanning Tree Protocol Root ID Priority 32773, Address 0001.e832.73f7 Root Bridge hello time 2, max age 20, forward delay 15 Bridge ID Priority 32773 (priority 32768 sys-id-ext 5), Address 0001.e832.73f7 We are the root of Vlan 5 Configured hello time 2, max age 20, forward delay 15
Interface Designated
Name
PortID Prio Cost Sts Cost Bridge ID
PortID
-------------------------------------------------------------
Te 0/10 128.140 128 200000 FWD 0 32773 0001.e832.73f7 128.140
Te 0/12 128.142 128 200000 DIS 0 32773 0001.e832.73f7 128.142
Interface
Name
Role PortID Prio Cost Sts Cost Link-type Edge
--------------------------------------------------------
Te 1/10 Desg 128.140 128 200000 FWD 0
P2P
No
Te 1/12 Dis 128.142 128 200000 DIS 0
P2P
No
Related Commands
protocol spanning-tree pvst � enter SPANNING TREE mode on the switch.
Per-VLAN Spanning Tree Plus (PVST+) 1135
protocol spanning-tree pvst
To enable PVST+ on a device, enter the PVST+ mode.
S4048
Syntax
protocol spanning-tree pvst To disable PVST+, use the disable command.
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced.
Example
Dell#conf Dell(conf)#protocol spanning-tree pvst Dell(conf-pvst)#no disable Dell(conf-pvst)#vlan 2 bridge-priority 4096 Dell(conf-pvst)#vlan 3 bridge-priority 16384 Dell(conf-pvst)# Dell(conf-pvst)#show config ! protocol spanning-tree pvst
no disable vlan 2 bridge-priority 4096 vlan 3 bridge-priority 16384 Dell#
Usage Information
Related Commands
After you enable PVST+, the device runs an STP instance for each VLAN it supports.
disable -- disables PVST+. show spanning-tree pvst -- displays the PVST+ configuration.
1136 Per-VLAN Spanning Tree Plus (PVST+)
show spanning-tree pvst
View the Per-VLAN spanning tree configuration.
S4048
Syntax Parameters
show spanning-tree pvst [vlan vlan-id] [brief] [guard]
vlan vlan-id brief
interface
(OPTIONAL) Enter the keyword vlan then the VLAN ID. The range is 1 to 4094.
(OPTIONAL) Enter the keyword brief to view a synopsis of the PVST+ configuration information.
(OPTIONAL) Enter one of the interface keywords along with the slot/port information:
For a Port Channel interface, enter the keyword port-channel then a number: The range is 1 to 128.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
guard
(OPTIONAL) Enter the keyword guard to display the type of guard enabled on a PVST interface and the current port state.
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.5.1.0 8.4.2.1
7.6.1.0 7.5.1.0 6.4.1.0
6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for 4-port 40G line cards on ExaScale. Support for the optional guard keyword was added on the C-Series, S-Series, and E-Series TeraScale. Introduced on the S-Series. Introduced on the C-Series. Expanded to display port error disable state (EDS) caused by loopback BPDU inconsistency and Port VLAN ID inconsistency. Introduced.
Per-VLAN Spanning Tree Plus (PVST+) 1137
Usage Information
The following describes the show spanning-tree pvst command shown in the following examples.
Field
Description
Interface Name PVST interface.
Instance
PVST instance.
Sts Guard Type
Port state: root-inconsistent (INCON Root), forwarding (FWD), listening (LIS), blocking (BLK), or shut down (EDS Shut).
Type of STP guard configured (Root, Loop, or BPDU guard).
Example (Brief)
Dell#show spanning-tree pvst vlan 3 brief VLAN 3 Executing IEEE compatible Spanning Tree Protocol Root ID Priority 4096, Address 0001.e801.6aa8 Root Bridge hello time 2, max age 20, forward delay 15 Bridge ID Priority 16384, Address 0001.e805.e306 Configured hello time 2, max age 20, forward delay 15
Interface
Designated
Name
PortID Prio Cost Sts Cost Bridge ID
PortID
----------------------------------------------------------
Te 1/0 128.130 128 20000 FWD 20000 4096 0001.e801.6aa8 128.426
Te 1/1 128.131 128 20000 BLK 20000 4096 0001.e801.6aa8 128.427
Te 1/16 128.146 128 20000 FWD 20000 16384 0001.e805.e306 128.146
Te 1/17 128.147 128 20000 FWD 20000 16384 0001.e805.e306 128.147
Interface
Name
Role PortID Prio Cost Sts Cost Link-type Edge
-----------------------------------------------------
Te 1/0 Root 128.130 128 20000 FWD 20000 P2P
No
Te 1/1 Altr 128.131 128 20000 BLK 20000 P2P
No
Te 1/16 Desg 128.146 128 20000 FWD 20000 P2P
Yes
Te 1/17 Desg 128.147 128 20000 FWD 20000 P2P
Yes
Example
Dell#show spanning-tree pvst vlan 2 VLAN 2 Root Identifier has priority 4096, Address 0001.e805.e306 Root Bridge hello time 2, max age 20, forward delay 15 Bridge Identifier has priority 4096, Address 0001.e805.e306 Configured hello time 2, max age 20, forward delay 15 We are the root of VLAN 2 Current root has priority 4096, Address 0001.e805.e306 Number of topology changes 3, last change occured 00:57:00 Port 130 (TenGigabitEthernet 1/4) is designated Forwarding Port path cost 20000, Port priority 128, Port Identifier 128.130 Designated root has priority 4096, address 0001.e805.e3:06 Designated bridge has priority 4096, address 0001.e805.e3:06 Designated port id is 128.130, designated path cost 0 Number of transitions to forwarding state 1 BPDU sent 1567, received 3 The port is not in the Edge port mode Port 131 (TenGigabitEthernet 1/1) is designated Forwarding Port path cost 20000, Port priority 128, Port Identifier 128.131 Designated root has priority 4096, address 0001.e805.e3:06 Designated bridge has priority 4096, address 0001.e805.e3:06 Designated port id is 128.131, designated path cost 0 Number of transitions to forwarding state 1 BPDU sent 1567, received 0 The port is not in the Edge port mode Port 146 (TenGigabitEthernet 1/16) is designated Forwarding Port path cost 20000, Port priority 128, Port Identifier 128.146 Designated root has priority 4096, address 0001.e805.e3:06 Designated bridge has priority 4096, address 0001.e805.e3:06 Designated port id is 128.146, designated path cost 0
1138 Per-VLAN Spanning Tree Plus (PVST+)
Number of transitions to forwarding state 1 BPDU sent 1578, received 0 The port is in the Edge port mode Port 147 (TenGigabitEthernet 1/17) is designated Forwarding Port path cost 20000, Port priority 128, Port Identifier 128.147 Designated root has priority 4096, address 0001.e805.e3:06 Designated bridge has priority 4096, address 0001.e805.e3:06 Designated port id is 128.147, designated path cost 0 Number of transitions to forwarding state 1 BPDU sent 1579, received 0 The port is in the Edge port mode
Example (EDS/LBK)
Dell#show spanning-tree pvst vlan 2 interface tengigabitethernet 1/1
TenGigabitEthernet 1/1 of VLAN 2 is LBK_INC discarding
Edge port:no (default) port guard :none (default) Link type: point-to-point (auto) bpdu filter:disable (default) Bpdu guard :disable (default) Bpdus sent 152, received 27562
Interface Designated
Name
PortID Prio Cost Sts Cost Bridge ID
PortID
-----------------------------------------------------------
Te 1/1 128.1223 128 20000 EDS 0 32768 0001.e800.a12b 128.1223
Example (EDS/ PVID)
Dell#show spanning-tree pvst vlan 2 interface tengigabitethernet 1/1
TenGigabitEthernet 1/1 of VLAN 2 is PVID_INC discarding
Edge port:no (default) port guard :none (default) Link type: point-to-point (auto) bpdu filter:disable (default) Bpdu guard :disable (default) Bpdus sent 1, received 0
Interface Designated
Name PortID Prio Cost Sts Cost Bridge ID
PortID
---------------------------------------------------------
Te 1/1 128.1223 128 20000 EDS 0 32768 0001.e800.a12b 128.1223
Example (Guard)
Dell#show spanning-tree pvst vlan 5 guard
Interface
Name Instance Sts
Guard type
-----------------------------------
Te 1/1 5
INCON(Root) Rootguard
Te 1/2 5
FWD
Loopguard
Te 1/3 5
EDS(Shut) Bpduguard
Related Commands
Dell#show spanning-tree pvst vlan 5 guard
Interface
Name Instance Sts
Guard type
-----------------------------------
Te 1/1/1 5
INCON(Root) Rootguard
Te 1/2/1 5
FWD
Loopguard
Te 1/3/1 5
EDS(Shut) Bpduguard
spanning-tree pvst -- configure PVST+ on an interface.
Per-VLAN Spanning Tree Plus (PVST+) 1139
spanning-tree pvst
Configure a PVST+ interface with one of these settings: edge port with optional bridge port data unit (BPDU) guard, port disablement if an error condition occurs, port priority or cost for a VLAN range, loop guard, or root guard.
S4048
Syntax Parameters
spanning-tree pvst {edge-port [bpduguard [shutdown-on-violation]] | errdisable | vlan vlan-range {cost number | priority value} | loopguard | rootguard}
edge-port bpduguard
shutdown-onviolation err-disable vlan vlan-range cost number
priority value loopguard rootguard
Enter the keywords edge-port to configure the interface as a PVST+ edge port.
Enter the keyword portfast to enable Portfast to move the interface into Forwarding mode immediately after the root fails.
Enter the keyword bpduguard to disable the port when it receives a BPDU.
(OPTIONAL) Enter the keywords shutdown-on-violation to hardware disable an interface when a BPDU is received and the port is disabled.
Enter the keywords err-disable to enable the port to be put into the errordisable state (EDS) if an error condition occurs.
Enter the keyword vlan then the VLAN numbers. The range is from 1 to 4094.
Enter the keyword cost then the port cost value. The range is from 1 to 200000.
Defaults:
100 Mb/s Ethernet interface = 200000. 1-Gigabit Ethernet interface = 20000. 10-Gigabit Ethernet interface = 2000. Port Channel interface with one 100 Mb/s Ethernet = 200000. Port Channel interface with one 1 Gigabit Ethernet = 20000. Port Channel interface with one 10 Gigabit Ethernet = 2000. Port Channel with two 1 Gigabit Ethernet = 18000. Port Channel with two 10 Gigabit Ethernet = 1800. Port Channel with two 100 Mbps Ethernet = 180000.
Enter the keyword priority then the Port priority value in increments of 16. The range is from 0 to 240. The default is 128.
(C-, S-, and E-Series TeraScale only) Enter the keyword loopguard to enable loop guard on a PVST+ port or port-channel interface.
(C-, S-, and E-Series TeraScale only) Enter the keyword rootguard to enable root guard on a PVST+ port or port-channel interface.
Defaults
Not configured.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500.
1140 Per-VLAN Spanning Tree Plus (PVST+)
Usage Information
Example Related Commands
Version
9.0.2.0 8.3.19.0 8.3.11.1 8.4.2.1
8.3.7.0 8.2.1.0 7.6.1.0 7.5.1.0 7.4.1.0 6.2.1.1
Description
Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced the loopguard and rootguard options on the E-Series TeraScale, C-Series, and S-Series. Introduced on the S4810. Introduced the hardware shutdown-on-violation option. Introduced on the S-Series. Introduced on the C-Series. Added the optional Bridge Port Data Unit (BPDU) guard. Introduced.
The BPDU guard option prevents the port from participating in an active STP topology in case a BPDU appears on a port unintentionally, or is misconfigured, or is subject to a DOS attack. This option places the port into the Error Disable state if a BPDU appears, and a message is logged so that the administrator can take corrective action.
NOTE: A port configured as an edge port, on a PVST switch, immediately transitions to the forwarding state. Only ports connected to end-hosts should be configured as an edge port. Consider an edge port similar to a port with a spanning-tree portfast enabled.
If you do not enable shutdown-on-violation, BPDUs are still sent to the route process module (RPM) CPU.
You cannot enable root guard and loop guard at the same time on a port. For example, if you configure loop guard on a port on which root guard is already configured, the following error message is displayed: % Error: RootGuard is configured. Cannot configure LoopGuard.
When used in a PVST+ network, loop guard is performed per-port or per-port channel at a VLAN level. If no BPDUs are received on a VLAN interface, the port or port-channel transitions to a Loop-Inconsistent (blocking) state only for this VLAN.
Enabling Portfast BPDU guard and loop guard at the same time on a port results in a port that remains in a Blocking state and prevents traffic from flowing through it. For example, when Portfast BPDU guard and loop guard are both configured:
If a BPDU is received from a remote device, BPDU guard places the port in an Err-Disabled Blocking state and no traffic is forwarded on the port.
If no BPDU is received from a remote device, loop guard places the port in a Loop-Inconsistent Blocking state and no traffic is forwarded on the port.
Dell(conf-if-te-1/1)#spanning-tree pvst vlan 3 cost 1800 Dell(conf-if-te-1/1)#end Dell(conf-if-te-1/1)#show config ! interface TenGigabitEthernet 1/1
no ip address switchport spanning-tree pvst vlan 3 cost 1800 no shutdown Dell(conf-if-te-1/1)#end Dell#
show spanning-tree pvst -- views the PVST+ configuration.
Per-VLAN Spanning Tree Plus (PVST+) 1141
spanning-tree pvst err-disable
Place ports in an Err-Disabled state if they receive a PVST+ BPDU when they are members an untagged VLAN.
S4048
Syntax
spanning-tree pvst err-disable cause invalid-pvst-bpdu
Defaults
Enabled; ports are placed in the Err-Disabled state if they receive a PVST+ BPDU when they are members of an untagged VLAN.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced.
Usage Information
Related Commands
Some non-Dell Networking systems which have hybrid ports participating in PVST+ transmit two kinds of BPDUs: an 802.1D BPDU and an untagged PVST+ BPDU.
Dell Networking systems do not expect PVST+ BPDU on an untagged port. If this happens, Dell Networking OS places the port in the Error-Disable state. This behavior might result in the network not converging. To prevent Dell Networking OS from executing this action, use the no spanning-tree pvst err-disable command cause invalid-pvst-bpdu.
show spanning-tree pvst -- views the PVST+ configuration.
tc-flush-standard
Enable the MAC address flushing after receiving every topology change notification.
S4048
Syntax
tc-flush-standard To disable, use the no tc-flush-standard command.
Defaults
Disabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
1142 Per-VLAN Spanning Tree Plus (PVST+)
Usage Information
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.5.1.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced.
By default, Dell Networking OS implements an optimized flush mechanism for PVST+. This implementation helps in flushing the MAC addresses only when necessary (and less often) allowing for faster convergence during topology changes. However, if a standards-based flush mechanism is needed, you can turn this knob command on to enable flushing MAC addresses after receiving every topology change notification.
vlan bridge-priority
Set the PVST+ bridge-priority for a VLAN or a set of VLANs.
S4048
Syntax Parameters
vlan vlan-range bridge-priority value To return to the default value, use the no vlan bridge-priority command.
vlan vlan-range
bridge-priority value
Enter the keyword vlan then the VLAN numbers. The range is from 1 to 4094.
Enter the keywords bridge-priority then the bridge priority value in increments of 4096. The range is from 0 to 61440. The default is 32768.
Defaults
32768
Command Modes CONFIGURATION (conf-pvst)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000.
Per-VLAN Spanning Tree Plus (PVST+) 1143
Related Commands
Version
8.3.7.0 7.6.1.0 7.5.1.0 6.2.1.1
Description
Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced.
vlan forward-delay -- changes the time interval before Dell Networking OS transitions to the Forwarding state.
vlan hello-time -- change the time interval between BPDUs.
vlan max-age -- changes the time interval before PVST+ refreshes.
show spanning-tree pvst -- displays the PVST+ configuration.
vlan forward-delay
Set the amount of time the interface waits in the Listening state and the Learning state before transitioning to the Forwarding state.
S4048
Syntax Parameters
vlan vlan-range forward-delay seconds To return to the default setting, use the no vlan forward-delay command.
vlan vlan-range
forward-delay seconds
Enter the keyword vlan then the VLAN numbers. The range is from 1 to 4094.
Enter the keywords forward-delay then the time interval, in seconds, that Dell Networking OS waits before transitioning PVST+ to the forwarding state. The range is from 4 to 30 seconds. The default is 15 seconds.
Defaults
15 seconds
Command Modes CONFIGURATION (conf-pvst)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced.
1144 Per-VLAN Spanning Tree Plus (PVST+)
Related Commands
vlan bridge-priority -- sets the bridge-priority value. vlan hello-time -- changes the time interval between BPDUs. vlan max-age -- changes the time interval before PVST+ refreshes. show spanning-tree pvst -- displays the PVST+ configuration.
vlan hello-time
Set the time interval between generation of PVST+ 7 BPDUs.
S4048
Syntax Parameters
vlan vlan-range hello-time seconds To return to the default value, use the no vlan hello-time command.
vlan vlan-range
hello-time seconds
Enter the keyword vlan then the VLAN numbers. The range is from 1 to 4094.
Enter the keywords hello-time then the time interval, in seconds, between transmission of BPDUs. The range is from 1 to 10 seconds. The default is 2 seconds.
Defaults
2 seconds
Command Modes CONFIGURATION (conf-pvst)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced.
Related Commands
vlan bridge-priority -- sets the bridge-priority value.
vlan forward-delay -- changes the time interval before Dell Networking OS transitions to the forwarding state.
vlan max-age -- changes the time interval before PVST+ refreshes.
show spanning-tree pvst -- displays the PVST+ configuration.
Per-VLAN Spanning Tree Plus (PVST+) 1145
vlan max-age
To maintain configuration information before refreshing that information, set the time interval for the PVST+ bridge.
S4048
Syntax Parameters
vlan vlan-range max-age seconds To return to the default, use the no vlan max-age command.
vlan vlan-range Enter the keyword vlan then the VLAN numbers. The range is from 1 to 4094. max-age seconds Enter the keywords max-age then the time interval, in seconds, that Dell
Networking OS waits before refreshing configuration information. The range is from 6 to 40 seconds. The default is 20 seconds.
Defaults
20 seconds
Command Modes CONFIGURATION (conf-pvst)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced.
Related Commands
vlan bridge-priority -- sets the bridge-priority value.
vlan forward-delay -- changes the time interval before Dell Networking OS transitions to the forwarding state.
vlan hello-time -- changes the time interval between BPDUs.
show spanning-tree pvst -- displays the PVST+ configuration.
1146 Per-VLAN Spanning Tree Plus (PVST+)
46
Quality of Service (QoS)
The Dell Networking operating software commands for quality of service (QoS) include traffic conditioning and congestion control. QoS commands are not universally supported on all Dell Networking Products. platform.
Topics:
� Global Configuration Commands � Per-Port QoS Commands � Policy-Based QoS Commands � DSCP Color Map Commands
Global Configuration Commands
There is only one global configuration QoS command.
qos-rate-adjust
By default, while rate limiting, policing, and shaping, Dell Networking OS does not include the Preamble, SFD, or the IFG fields. These fields are overhead; only the fields from MAC destination address to the CRC are used for forwarding and are included in these rate metering calculations. You can optionally include overhead fields in rate metering calculations by enabling QoS Rate Adjustment.
S4048�ON
Syntax Parameters
qos-rate-adjustment overhead-bytes
overhead-bytes Include a specified number of bytes of packet overhead to include in rate limiting, policing, and shaping calculations. The range is from 1 to 31.
Defaults
QoS rate adjustment is disabled by default.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced.
Quality of Service (QoS) 1147
Usage Information
By default, when rate policing and shaping, the system does not include the Preamble, SFD, or the IFG fields. These fields are overhead; only the fields from MAC destination address to the CRC are used for forwarding and are included in these rate metering calculations.
Per-Port QoS Commands
Per-port QoS (port-based QoS) allows you to define the QoS configuration on a per-physical-port basis.
dot1p-priority
Assign a value to the IEEE 802.1p bits on the traffic this interface receives.
Syntax
dot1p-priority priority-value To delete the IEEE 802.1p configuration on the interface, use the no dot1p-priority command.
Defaults
none
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Version
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.5.1.0 pre- 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
The dot1p-priority command changes the priority of incoming traffic on the interface. The system places traffic marked with a priority in the correct queue and processes that traffic according to its queue.
When you set the priority for a port channel, the physical interfaces assigned to the port channel are configured with the same value. You cannot assign the dot1p-priority command to individual interfaces in a port channel.
1148 Quality of Service (QoS)
rate police
Police the incoming traffic rate on the selected interface.
S4048�ON
Syntax Parameters
rate police [kbps] committed-rate [burst-KB] [peak [kbps] peak-rate [burstKB]] [vlan vlan-id]
kbps
committed-rate burst-KB peak peak-rate vlan vlan-id
Enter the keyword kbps to specify the rate limit in Kilobits per second (Kbps). The range is from 0 to 40000000. The default granularity is Megabits per second (Mbps).
Enter the bandwidth in Mbps. The range is from 0 to 40000.
(OPTIONAL) Enter the burst size in KB. The range is from 16 to 200000. The default is 50.
(OPTIONAL) Enter the keyword peak then a number to specify the peak rate in Mbps. The range is from 0 to 40000.
(OPTIONAL) Enter the keyword vlan then a VLAN ID to police traffic to those specific VLANs. The range is from 1 to 4094.
Defaults
Granularity for commited-rate and peak-rate is Mbps unless you use the kbps option.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 7.6.1.0 7.5.1.0 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added the kbps option on the C-Series, E-Series, and S-Series. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
NOTE: Per Port rate police is supported for Layer 2 tagged and untagged switched traffic and for Layer 3 traffic. Per VLAN rate police is supported on only tagged ports with Layer 2 switched traffic.
S-Series
On one interface, you can configure the rate police command for a VLAN or you can configure the rate police command for an interface.
Quality of Service (QoS) 1149
rate shape
Shape the traffic output on the selected interface.
S4048�ON
Syntax Parameters
rate shape [kbps] rate [burst-KB]
kbps
rate burst-KB
Enter the keyword kbps to specify the rate limit in Kilobits per second (Kbps). On S-Series, make the value a multiple of 64. The range is from 0 to 40000000. The default granularity is Megabits per second (Mbps).
The range is from 10 to 40000.
(OPTIONAL) Enter the burst size in KB. The range is from 0 to 10000. The default is 50.
Defaults
Granularity for rate is Mbps unless you use the kbps option.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 7.6.1.0 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added the kbps option on the C-Series, E-Series, and S-Series. Introduced on the S-Series and C-Series. Introduced on the E-Series.
Usage Information
If traffic is shaped between 64 and 1000 Kbs, for some values, the shaped rate is much less than the value configured.
On 40-port 10G stack-unit if the traffic is shaped between 64 and 1000 Kbs, for some values, the shaped rate is much less than the value configured.
NOTE: When packets of size greater than 7000 bytes are expected to be received from the network, Dell Networking recommends that you configure the burst value to be more than 175 KB if you configured the rate shape. Such a setting ensures proper bandwidth sharing across queues.
Related Commands
rate-shape -- shapes traffic output as part of the designated policy.
1150 Quality of Service (QoS)
service-class dot1p-mapping
Configure a service-class criterion based on a dot1p value.
S4048�ON
Syntax Parameters Defaults
service-class dot1p-mapping {dot1p0 queue | dot1p1 queue | dot1p2 queue | dot1p3 queue | dot1p4 queue| dot1p5 queue | dot1p6 queue | dot1p7 queue}
queue
Enter a value from 0 to 7.
For each dot1p Priority, the default CoS queue value is: Dot1p Priority : 0 1 2 3 4 5 6 7 Queue : 2 0 1 3 4 5 6 7
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Usage Information
Related Commands
To apply dot1p-queue-mapping, use the service-class dynamic dot1p command. show qos dot1p-queue-mapping -- displays the dot1p priority to queue mapping on the switch.
service-class dynamic dot1p
Honor all 802.1p markings on incoming switched traffic on an interface (from INTERFACE mode) or on all interfaces (from CONFIGURATION mode). A CONFIGURATION mode entry supersedes an INTERFACE mode entry.
S4048�ON
Syntax Defaults
service-class dynamic dot1p To return to the default setting, use the no service-class dynamic dot1p command.
All dot1p traffic is mapped to Queue 0 unless you enable the service-class dynamic dot1p command. The default mapping is as follows:
dot1p
Queue ID
0
0
Quality of Service (QoS) 1151
dot1p
1 2 3 4 5 6 7
Queue ID
0 0 1 2 3 3 3
Command Modes INTERFACE CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 7.6.1.0 7.5.1.0 6.5.1.0 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added the kbps option on the C-Series, E-Series, and S-Series. Introduced on the S-Series. Introduced on the C-Series. Expanded the command to permit configuration on port channels. Introduced on the E-Series.
Usage Information
To honor all incoming 802.1p markings on incoming switched traffic on the interface, enter this command. By default, this facility is not enabled (that is, the 802.1p markings on incoming traffic are not honored).
You can apply this command on both physical interfaces and port channels. When you set the serviceclass dynamic for a port channel, the physical interfaces assigned to the port channel are automatically configured; you cannot assign the service-class dynamic command to individual interfaces in a port channel.
All dot1p traffic is mapped to Queue 0 unless you enable the service-class dynamic dot1p command on an interface or globally.
Layer 2 or Layer 3 service policies supersede dot1p service classes.
1152 Quality of Service (QoS)
strict-priority queue
Configure a unicast queue as a strict-priority (SP) queue.
S4048�ON
Syntax Parameters
strict-priority queue unicast number unicast number Enter the keyword unicast then the queue number. The range is from 1 to 3.
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
After you configure a unicast queue as strict-priority, that particular queue, on the entire chassis, is treated as a strict-priority queue. Traffic for a strict priority is scheduled before any other queues are serviced. For example, if you send 100% line rate traffic over the SP queue, it starves all other queues on the ports on which this traffic is flowing.
Policy-Based QoS Commands
Policy-based traffic classification is handled with class maps. These maps classify unicast traffic into one of eight classes in SSeries or eight classes in case of S6000. Dell Networking OS enables you to match multiple class maps and specify multiple match criteria. Policy-based QoS is not supported on logical interfaces, such as port-channels, VLANS, or loopbacks.
bandwidth-percentage
Assign a percentage of weight to the class/queue.
S4048�ON
Syntax
bandwidth-percentage percentage To remove the bandwidth percentage, use the no bandwidth-percentage command.
Quality of Service (QoS) 1153
Parameters
percentage
Enter the percentage assignment of bandwidth to the class/queue. The range is from 1 to 100% (granularity 1%).
Defaults
none
Command Modes CONFIGURATION (conf-qos-policy-out)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.1.9.0 8.3.11.1 8.3.7.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series.
Usage Information
Related Commands
The unit of bandwidth percentage is 1%. If the sum of the bandwidth percentages given to all eight classes exceeds 100%, the bandwidth percentage automatically scales down to 100%.
qos-policy-output -- creates a QoS output policy.
class-map
Create/access a class map. Class maps differentiate traffic so that you can apply separate quality-of-service policies to each class.
S4048�ON
Syntax Parameters
class-map {match-all | match-any} class-map-name [cpu-qos] [layer2]
match-all match-any class-map-name cpu-qos layer2
Determines how packets are evaluated when multiple match criteria exist. Enter the keywords match-all to determine that the packets must meet all the match criteria in order to be a member of the class.
Determines how packets are evaluated when multiple match criteria exist. Enter the keywords match-any to determine that the packets must meet at least one of the match criteria in order to be a member of the class.
Enter a name of the class for the class map in a character format (32 character maximum).
Enter the keyword cpu-qos to assign this Class Map to control plane traffic only (CoPP).
Enter the keyword layer2 to specify a Layer 2 Class Map. The default is Layer 3.
Defaults
Layer 3
Command Modes CONFIGURATION
1154 Quality of Service (QoS)
Command History
Usage Information Related Commands
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0
7.6.1.0 7.5.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Class-map names can be 32 characters. Layer2 available on the C-Series and SSeries. Introduced on the S-Series. Introduced on the C-Series. E-Series Only: Expanded to add support for Layer 2.
Packets arriving at the input interface are checked against the match criteria and configured using this command to determine if the packet belongs to that class. This command accesses CLASS-MAP mode, where the configuration commands include thematch ip and match mac options. When you create a class map to filter protocol traffic for CoPP, you must enter the keyword cpu-qos .
ip access-list extended -- configures an extended IP ACL. ip access-list standard -- configures a standard IP ACL. match ip access-group -- configures the match criteria based on the access control list (ACL). match ip precedence -- identifies the IP precedence values as match criteria. match ip dscp -- configures the match criteria based on the DSCP value. match mac access-group -- configures a match criterion for a class map based on the contents of the designated MAC ACL. match mac dot1p -- configures a match criterion for a class map based on a dot1p value. match mac vlan -- configures a match criterion for a class map based on VLAN ID. service-queue -- assigns a class map and QoS policy to different queues. show qos class-map -- views the current class map information.
clear qos statistics
Clear qos statistics clears statistics from show qos statistics.
S4048�ON
Syntax Parameters
clear qos statistics interface-name
interface-name
Enter one of the following keywords:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
Quality of Service (QoS) 1155
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.18.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Related Commands
show qos statistics -- displays the QoS statistics.
description
Add a description to the selected policy map or QoS policy.
S4048�ON
Syntax Parameters
description {description} To remove the description, use the no description {description} command.
description
Enter a description to identify the policies (80 characters maximum).
Defaults
none
Command Modes CONFIGURATION (policy-map-input and policy-map-output; conf-qos-policy-in and conf-qos-policy-out; wred)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2)
Introduced on the S4048-ON. Introduced on the S3048-ON.
1156 Quality of Service (QoS)
Related Commands
Version
9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 pre- 7.7.1.0
Description
Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced.
policy-map-input -- creates an input policy map. policy-map-output -- creates an output policy map. qos-policy-input -- creates an input QoS-policy on the router. qos-policy-output -- creates an output QoS-policy on the router. wred-profile -- creates a WRED profile.
match ip access-group
Configure match criteria for a class map, based on the access control list (ACL). NOTE: IPv6 class-maps and IP-any class-maps do not match. This condition is true for IPv6 and IP-any class-maps on both ACLs as well as VLANs.
S4048�ON
Syntax Parameters
match ip access-group access-group-name [set-ip-dscp value | set-color value]
To remove ACL match criteria from a class map, use the no match ip access-group accessgroup-name [set-ip-dscp value | set-color value] command.
access-groupname
Enter the ACL name whose contents are used as the match criteria in determining if packets belong to the class the class-map specifies.
set-ip-dscp value (OPTIONAL) Enter the keywords set-ip-dscp then the IP DSCP value. The matched traffic is marked with the DSCP value. The range is from 0 to 63.
set-color value
(Optional) Enter the keyword set-color followed by a color value. Traffic that fulfills the match criteria is marked with the color value that you specify. The default value is Yellow.
Defaults
none
Command Modes CLASS-MAP CONFIGURATION (config-class-map)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500.
Quality of Service (QoS) 1157
Usage Information
Related Commands
Version
9.0.2.0 8.3.19.0 8.3.11.1 8.3.11.1 8.3.7.0 7.7.1.0 7.6.1.0 7.5.1.0 6.1.1.1
Description
Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the Z9000. Introduced on the S4810. Added the DSCP Marking option support on the S-Series. Introduced on the S-Series. Introduced on the C-Series. Added support for the DSCP Marking option. Introduced on the E-Series.
To access this command, enter the class-map command. After the class map is identified, you can configure the match criteria. For class-map match-any, a maximum of five ACL match criteria are allowed. For class-map match-all, only one ACL match criteria is allowed.
class-map -- identifies the class map.
match ip dscp
Use a differentiated services code point (DSCP) value as a match criteria.
S4048�ON
Syntax Parameters
match {ip | ipv6 | ip-any} dscp dscp-list [set-ip-dscp value]
To remove a DSCP value as a match criteria, use the no match {ip | ipv6 | ip-any} dscp dscp-list [[multicast] set-ip-dscp value] command.
ip
Enter the keyword ip to support IPv4 traffic.
ipv6
Enter the keyword ipv6 to support IPv6 traffic.
ip-any
Enter the keyword ip-any to support IPv4 and IPv6 traffic.
dscp-list
Enter the IP DSCP values that is to be the match criteria. Separate values by commas -- no spaces ( 1,2,3 ) or indicate a list of values separated by a hyphen (1-3). The range is from 0 to 63.
set-ip-dscp value (OPTIONAL) Enter the keywords set-ip-dscp then the IP DSCP value. The matched traffic is marked with the DSCP value. The range is from 0 to 63.
Defaults
none
Command Modes CLASS-MAP CONFIGURATION (config-class-map)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Added the ipv6 and ip-any options on the Z9000, S6000, S4820T, S4810, MXL.
1158 Quality of Service (QoS)
Usage Information
Related Commands
Version
9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0
7.6.1.0 7.5.1.0 6.2.1.1
Description
Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added the keyword multicast . Added the DSCP Marking option support on the S-Series. Introduced on the S-Series. Introduced on the C-Series. Added support for the DSCP Marking option. Introduced on the E-Series.
To access this command, enter the class-map command. After the class map is identified, you can configure the match criteria.
The match ip dscp and match ip precedence commands are mutually exclusive.
Up to 64 IP DSCP values can be matched in one match statement. For example, to indicate IP DCSP values 0 1 2 3 4 5 6 7, enter either the match ip dscp 0,1,2,3,4,5,6,7 or match ip dscp 0-7 command.
NOTE: Only one of the IP DSCP values must be a successful match criterion, not all of the specified IP DSCP values must match.
class-map -- identifies the class map.
match ip precedence
Use IP precedence values as a match criteria.
S4048�ON
Syntax Parameters
match {ip | ipv6 | ip-any} precedence ip-precedence-list [set-ip-dscp value]
To remove IP precedence as a match criteria, use the no match {ip | ipv6 | ip-any} precedence ip-precedence-list [[multicast] set-ip-dscp value] command.
ip
Enter the keyword ip to support IPv4 traffic.
ipv6
Enter the keyword ipv6 to support IPv6 traffic.
ip-any
Enter the keyword ip-any to support IPv4 and IPv6 traffic.
ip-precedencelist
Enter the IP precedence value(s) as the match criteria. Separate values by commas -- no spaces ( 1,2,3 ) or indicate a list of values separated by a hyphen (1-3). The range is from 0 to 7.
set-ip-dscp value (OPTIONAL) Enter the keywords set-ip-dscp then the IP DSCP value. The matched traffic is marked with the DSCP value. The range is from 0 to 63.
Defaults
none
Command Modes CLASS-MAP CONFIGURATION (config-class-map)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Quality of Service (QoS) 1159
Usage Information
Related Commands
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.5(0.0)
9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0
7.6.1.0 7.5.1.0 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Added support for the ipv6 and ip-any options on the Z9000, S6000, S4820T, S4810, MXL. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added the keyword multicast . Added support for the DSCP marking option for the S-Series. Introduced on the S-Series. Introduced on the C-Series. Added support for the DSCP Marking option. Introduced on the E-Series.
To access this command, enter the class-map command. After the class map is identified, you can configure the match criteria.
The match ip precedence command and the match ip dscp command are mutually exclusive.
Up to eight precedence values can be matched in one match statement. For example, to indicate the IP precedence values 0 1 2 3, enter either the match ip precedence 0-3 or match ip precedence 0,1,2,3 command.
NOTE: Only one of the IP precedence values must be a successful match criterion, not all of the specified IP precedence values must match.
class-map -- identifies the class map.
match ip vlan
Uses a VLAN as the match criterion for an L3 class map.
S4048�ONS4048�ON
Syntax Parameters
match ip vlan vlan-idTo remove VLAN as the match criterion, use the no match ip vlan vlan-id command.
vlan vlan-id
Enter the keyword vlan and then the ID of the VLAN. The range is from 1 to 4094.
Defaults
None.
Command Modes CONF-CLASS-MAP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
1160 Quality of Service (QoS)
Usage Information
Related Commands
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.4.(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S-Series and Z-Series.
To access this command, enter the class-map command. After the class map is identified, you can configure the match criteria. Use this command to match an IP class-map against a single VLAN ID .
class-map -- identifies the class map.
match ip vrf
Uses a VRF as the match criterion for an L3 class map.
S4048�ON
Syntax Parameters
match ip vrf vrf-id To remove VRF as the match criterion, use the no match ip vrf vrf-id command.
vlan vlan-id
Enter the keyword vrf and then the ID of the VRF. The range is from 1 to 63.
Defaults
none
Command Modes CONF-CLASS-MAP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5.(0.1) 9.4.(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S-Series and Z-Series.
Usage Information
Related Commands
To access this command, enter the class-map command. After the class map is identified, you can configure the match criteria. Use this command to match an IP class-map against a single VRF ID .
class-map -- identifies the class map.
Quality of Service (QoS) 1161
match mac access-group
Configure a match criterion for a class map, based on the contents of the designated MAC ACL.
S4048�ON
Syntax Parameters
match mac access-group {mac-acl-name}
mac-acl-name
Enter a MAC ACL name. Its contents is used as the match criteria in the class map.
Defaults
none
Command Modes CLASS-MAP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 7.5.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Available on the C-Series and S-Series. Added support for the DSCP Marking option. Introduced on the E-Series.
Usage Information
Related Commands
To access this command, enter the class-map command. After the class map is identified, you can configure the match criteria.
class-map -- identifies the class map.
match mac dot1p
Configure a match criterion for a class map based on a dot1p value.
S4048�ON
Syntax Parameters
match mac dot1p {dot1p-list}
dot1p-list
Enter a dot1p value. The range is from 0 to 7.
Defaults
none
Command Modes CLASS-MAP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
1162 Quality of Service (QoS)
Usage Information
Related Commands
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 7.5.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Available on the C-Series and S-Series. Added support for the DSCP Marking option. Introduced on the E-Series.
To access this command, enter the class-map command. After the class map is identified, you can configure the match criteria.
class-map -- identifies the class map.
match mac vlan
Configure a match criterion for a class map based on VLAN ID.
S4048�ON
Syntax Parameters
match mac vlan number
number
Enter the VLAN ID. The range is from 1 to 4094.
Defaults
none
Command Modes CLASS-MAP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced.
Quality of Service (QoS) 1163
Usage Information
Related Commands
To access this command, enter the class-map command. You can match against only one VLAN ID. class-map -- identifies the class map.
policy-aggregate
Allow an aggregate method of configuring per-port QoS via policy maps. An aggregate QoS policy is part of the policy map (output) applied on an interface.
S4048�ON
Syntax Parameters
policy-aggregate qos-policy-name To remove a policy aggregate configuration, use the no policy-aggregate qos-policy-name command.
qos-policy-name Enter the name of the policy map in character format (32 characters maximum).
Defaults
none
Command Modes CONFIGURATION (policy-map-input and policy-map-output)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 7.6.1.0 7.5.1.0 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Policy name character limit increased from 16 to 32. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
An aggregate output QoS policy applies to all outbound port traffic. An aggregate output QoS policy can coexist with per-queue output QoS policies. If the rate shape exists in both aggregate and per-queue qospolicy, minimum of 2 take effect. Some of all Queue-rate will not exceed aggregate.
policy-map-input -- creates an input policy map.
policy-map-output -- creates an output policy map.
1164 Quality of Service (QoS)
policy-map-input
Create an input policy map.
S4048�ON
Syntax Parameters
policy-map-input policy-map-name cpu-qos | [layer2] [cpu-qos]
To remove an input policy map, use the no policy-map-input policy-map-name cpu-qos | [layer2] [cpu-qos] command.
policy-map-name Enter the name of the policy map in character format (32 characters maximum).
cpu-qos
Enter the cpu-qos keyword to assign this ACL to control plane traffic only.
layer2
(OPTIONAL) Enter the keyword layer2 to specify a Layer 2 Class Map. The default is Layer 3.
cpu-qos
(OPTIONAL) Enter the keyword cpu-qos to create an input policy to be used to rate-limit control-plane traffic (CoPP).
Defaults
Layer 3
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 7.6.1.0 7.5.1.0 7.4.1.0 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Policy name character limit increased from 16 to 32. Introduced on the S-Series. Introduced on the C-Series. Expanded to add support for Layer 2. Introduced on the E-Series.
Usage Information
Related Commands
The input policy map is used to classify incoming traffic to different flows using class-map, QoS policy, or incoming packets DSCP. This command enables Policy-Map-Input Configuration mode (conf-policy-mapin). When you configure an input policy map for CoPP, you must enter the keyword cpu-qos .
service-queue -- assigns a class map and QoS policy to different queues.
service-policy input -- applies an input policy map to the selected interface.
Quality of Service (QoS) 1165
policy-map-output
Create an output policy map.
S4048�ON
Syntax Parameters
policy-map-output policy-map-name To remove a policy map, use the no policy-map-output policy-map-name command.
policy-map-name Enter the name for the policy map in character format (32 characters maximum).
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 7.6.1.0 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Policy name character limit increased from 16 to 32. Introduced on the C-Series and S-Series. Introduced on the E-Series.
Usage Information
Related Commands
To assign traffic to different flows using QoS policy, use the Output Policy map. This command enables Policy-Map-Output Configuration mode (conf-policy-map-out).
service-queue -- assigns a class map and QoS policy to different queues. policy-aggregate -- allows an aggregate method of configuring per-port QoS using policy maps. service-policy output -- applies an output policy map to the selected interface.
qos-policy-input
Create a QoS input policy on the router.
S4048�ON
Syntax Parameters
qos-policy-input qos-policy-name cpu-qos | layer2 To remove an existing input QoS policy from the router, use the no qos-policy-input qospolicy-name cpu-qos | layer2 command.
qos-policy-name Enter the name for the policy map in character format (32 characters maximum).
1166 Quality of Service (QoS)
cpu-qos layer2
(OPTIONAL) Enter the keyword cpu-qos keyword to assign this ACL to control plane traffic only.
(OPTIONAL) Enter the keyword layer2 to specify a Layer 2 Class Map. The default is Layer 3.
Defaults
Layer 3
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 7.6.1.0 7.5.1.0 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Policy name character limit increased from 16 to 32. Introduced on the C-Series and S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
Use this command to specify the name of the input QoS policy. Once input policy is specified, rate-police can be defined. This command enables the qos-policy-input configuration mode-- (conf-qos-policy-in).
When changing a Service-Queue configuration in a QoS policy map, all QoS rules are deleted and readded automatically to ensure that the order of the rules is maintained. As a result, the Matched Packets value shown in the show qos statistics command is reset.
If you create create a QoS input policy to be used for CoPP, you must enter the keyword cpu-qos .
rate police -- incoming traffic policing function.
qos-policy-output
Create a QoS output policy.
S4048�ON
Syntax Parameters
qos-policy-output qos-policy-name To remove an existing output QoS policy, use the no qos-policy-output qos-policy-name command.
qos-policy-name Enter your output QoS policy name in character format (32 characters maximum).
Defaults
none
Command Modes CONFIGURATION
Quality of Service (QoS) 1167
Command History
Usage Information Related Commands
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 7.6.1.0 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Policy name character limit increased from 16 to 32. Introduced on the C-Series and S-Series. Introduced on the E-Series.
Use this command to specify the name of the output QoS policy. Once output policy is specified, rateshape, scheduler strict, bandwidth-percentage, and WRED can be defined. This command enables the qos-policy-output configuration mode--(conf-qos-policy-out).
bandwidth-percentage -- assigns percentage of bandwidth to the class/queue.
wred -- assigns yellow or green drop precedence.
queue egress
Assign a WRED Curve to all eight egress Multicast queues or designate the percentage for the Multicast bandwidth queue.
Syntax
queue egress multicast linecard {slot number port-set number | all} [wredprofile name | multicast-bandwidth percentage]
To return to the default, use the no queue egress multicast linecard {slot number port-set number | all} [wred-profile name | multicast-bandwidth percentage] command.
Parameters
linecard number port-set number
all wred-profile name
Enter the keyword linecard then the line card slot number.
Enter the keywords port-set then the line card's port pipe. The range is from 0 or 1.
Enter the keyword all to apply to all line cards.
(OPTIONAL) Enter the keywords wred-profile then your WRED profile name in character format (16 character maximum). Or use one of the pre-defined WRED profile names.
Pre-defined Profiles: wred_drop, wred-ge_y, wred_ge_g, wred_teng_y, wred_teng_g.
multicast-
bandwidth percentage
(OPTIONAL) Enter the keywords multicast-bandwidth then the bandwidth percentage. The range is from 0 to 100%.
Defaults
none
Command Modes CONFIGURATION
1168 Quality of Service (QoS)
Command History
Usage Information
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.3.8.10 7.5.1.0 7.4.1.0 and 6.5.3.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the S4810. Added support for multicast-bandwidth. Introduced on the E-Series.
This command does not uniquely identify a queue, but rather identifies only a set of queues. The WRED curve is applied to all eight egress Multicast queues.
Important Points to Remember -- Multicast-Bandwidth Option
A unique multicast weighted fair queuing (WFQ) setting can be applied only on a per port-pipe basis. The minimum percentage of the multicast bandwidth assigned to any of the ports in the port-pipe takes effect for the entire port-pipe.
If the percentage of multicast bandwidth is 0, control traffic going through multicast queues are dropped.
The no form of the command without multicast-bandwidth and wred-profile, removes both the wred-profile and multicast-bandwidth configuration.
On 10-Gigabit ports only, the multicast bandwidth option works only if the total unicast bandwidth is more than the multicast bandwidth.
If strict priority is applied along with multicast-bandwidth, the effect of strict priority is on all ports where unicast and multicast bandwidth are applied.
When multicast bandwidth is assigned along with unicast bandwidth, first multicast bandwidth is reserved for that port, then the remaining unicast bandwidth configured is adjusted according to the bandwidth available after reserving for multicast bandwidth.
queue ingress
Assign a WRED Curve to all eight ingress Multicast queues or designate the percentage for the Multicast bandwidth queue.
Syntax
queue ingress multicast {linecard slot number port-set number | all} [wredprofile name]
To return to the default, use the no queue ingress multicast {linecard slot number port-set number | all} [wred-profile name] command.
Parameters
linecard number port-set number
all wred-profile name
Enter the keyword linecard then the line card slot number.
Enter the keywords port-set then the line card's port pipe. The range is from 0 or 1.
Enter the keyword all to apply to all line cards.
(OPTIONAL) Enter the keywords wred-profile then your WRED profile name in character format (16 character maximum). Or use one of the pre-defined WRED profile names.
Pre-defined Profiles: wred_drop, wred-ge_y, wred_ge_g, wred_teng_y, wred_teng_g.
Defaults
none
Command Modes CONFIGURATION
Quality of Service (QoS) 1169
Command History
Usage Information
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 8.3.19.0 8.3.8.0 7.4.1.0 and 6.5.3.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T. Introduced on the S4810. Introduced on the E-Series.
This command does not uniquely identify a queue, but rather identifies only a set of queues. The WRED Curve is applied to all eight ingress Multicast queues.
NOTE: The multicast-bandwidth option is not supported on queue ingress. If you attempt to use the multicast-bandwidth option, the following reject error message is generated: % Error:Bandwidth-percent is not allowed for ingress multicast.
rate-police
Specify the policing functionality on incoming traffic.
S4048�ON
Syntax Parameters
rate-police [kbps] committed-rate [burst-KB] [peak [kbps] peak-rate [burstKB]]
kbps
committed-rate burst-KB peak peak-rate
Enter the keyword kbps to specify the rate limit in Kilobits per second (Kbps). Make the following value a multiple of 64. The range is from 0 to 40000000. The default granularity is Megabits per second (Mbps).
Enter the bandwidth in Mbps. The range is from 0 to 40000.
(OPTIONAL) Enter the burst size in KB. The range is from 16 to 200000. The default is 100.
(OPTIONAL) Enter the keyword peak then a number to specify the peak rate in Mbps. The range is from 0 to 40000. The default is the same as designated for committed-rate.
Defaults
Burst size is 100KB. peak-rate is by default the same as committed-rate. Granularity for committed-rate and peak-rate is Mbps unless you use the kbps option.
Command Modes QOS-POLICY-IN
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500.
1170 Quality of Service (QoS)
Usage Information
Related Commands
Version
9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 7.6.1.0 7.5.1.0 6.1.1.1
Description
Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added the kbps option on the C-Series, E-Series, and S-Series. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
The default burst size is 100Kb. If a different value is required, you must configure the burst size to the required value.
rate police -- specifies traffic policing on the selected interface. qos-policy-input -- creates a QoS output policy.
rate-shape
Shape traffic output as part of the designated policy.
S4048�ON
Syntax Parameters
rate-shape [kbps | pps] peak-rate [burst-kbps | burst-packets] commited [kbps | pps] commited-rate [burst-kbps | burst-packets]
pps kbps
burst-kbps burst-packets
Enter the keyword pps to specify the rate limit in packets per second (pps).
Enter the keyword kbps to specify the rate limit in Kilobits per second (Kbps). Make the following value a multiple of 64. The range is from 0 to 40000000. The default granularity is Megabits per second (Mbps).
(OPTIONAL) Enter the burst size in KB. The range is from 0 to 40000. The default is 100.
Enter the peak rate or committed rate burst size in packets per seconds.
Defaults
Burst size is 10KB. Granularity for rate is Mbps unless you use the kbps option.
Command Modes QOS-POLICY-OUT
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000.
Quality of Service (QoS) 1171
Usage Information
Related Commands
Version
8.3.7.0 8.2.1.0 7.6.1.0 7.5.1.0 6.1.1.1
Description
Introduced on the S4810. Added the kbps option on the C-Series, E-Series, and S-Series. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
On 40-port 10G stack-unit if the traffic is shaped between 64 and 1000 Kbs, for some values, the shaped rate is much less than the value configured.You must configure the peak rate and peak burst size using the same value: kilobits or packets per second. Similarly, you must configure the committed rate and committed burst size with the same measurement. Peak rate refers to the maximum rate for traffic arriving or exiting an interface under normal traffic conditions. Peak burst size indicates the maximum size of unused peak bandwidth that is aggregated. This aggregated bandwidth enables brief durations of burst traffic that exceeds the peak rate and committed burst. Committed rate refers to the guaranteed bandwidth for traffic entering or leaving the interface under normal network conditions. When traffic propagates at an average rate that is less than or equal to the committed rate, it is considered to be green-colored or coded. When the transmitted traffic falls below the committed rate, the bandwidth, which is not used by any traffic that is traversing the network, is aggregated to form the committed burst size. Traffic is considered to be green-colored up to the point at which the unused bandwidth does not exceed the committed burst size.
rate shape -- shapes traffic output as part of the designated policy.
qos-policy-output -- creates a QoS output policy.
service-policy input
Apply an input policy map to the selected interface.
S4048�ON
Syntax Parameters
service-policy input policy-map-name [layer2]
To remove the input policy map from the interface, use the no service-policy input policymap-name [layer2] command.
policy-map-name Enter the name for the policy map in character format (32 characters maximum). You can identify an existing policy map or name one that does not yet exist.
layer2
(OPTIONAL) Enter the keyword layer2 to specify a Layer 2 Class Map. The default is Layer 3.
Defaults
Layer 3
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000.
1172 Quality of Service (QoS)
Usage Information
Related Commands
Version
8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 7.4.1.0 6.1.1.1
Description
Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. E-Series Only: Expanded to add support for Layer 2. Introduced on the E-Series.
You can attach a single policy-map to one or more interfaces to specify the service-policy for those interfaces. A policy map attached to an interface can be modified.
NOTE: The service-policy commands are not allowed on a port channel. The servicepolicy input policy-map-name command and the service-class dynamic dot1p command are not allowed simultaneously on an interface. However, the service-policy input command
(without the policy-map-name option) and the service-class dynamic dot1p command are allowed on
an interface.
policy-map-input -- creates an input policy map.
service-policy output
Apply an output policy map to the selected interface.
S4048�ON
Syntax Parameters
service-policy output policy-map-name To remove the output policy map from the interface, use the no service-policy output policy-map-name command.
policy-map-name Enter the name for the policy map in character format (32 characters maximum). You can identify an existing policy map or name one that does not yet exist.
Defaults
none
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Quality of Service (QoS) 1173
Usage Information
Related Commands
Version
7.6.1.0 6.1.1.1
Description
Introduced on the C-Series and S-Series. Introduced on the E-Series.
A single policy-map can be attached to one or more interfaces to specify the service-policy for those interfaces. A policy map attached to an interface can be modified.
policy-map-output -- creates an output policy map.
service-queue
Assign a class map and QoS policy to different queues.
S4048�ON
Syntax Parameters
service-queue queue-id [class-map class-map-name] [qos-policy qos-policyname]
To remove the queue assignment, use the no service-queue queue-id [class-map classmap-name] [qos-policy qos-policy-name] command.
queue-id
class-map classmap-name
Enter the value used to identify a queue. The range is from 0 to 7.
(OPTIONAL) Enter the keyword class-map then the class map name assigned to the queue in character format (32 character maximum).
NOTE: This option is available under policy-map-input only.
qos-policy qospolicy-name
(OPTIONAL) Enter the keywords qos-policy then the QoS policy name assigned to the queue in text format (32 characters maximum). This specifies the input QoS policy assigned to the queue under policy-map-input and output QoS policy under policy-map-output context.
Defaults
none
Command Modes CONFIGURATION (conf-policy-map-in and conf-policy-map-out)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
1174 Quality of Service (QoS)
Usage Information
Related Commands
There are eight queues per interface on the S6000 and four queues on the S-Series. This command assigns a class map or QoS policy to different queues.
class-map -- identifies the class map. service-policy input -- applies an input policy map to the selected interface. service-policy output -- applies an output policy map to the selected interface.
set
Mark outgoing traffic with a differentiated service code point (DSCP) or dot1p value.
S4048�ON
Syntax Parameters
set {ip-dscp value | mac-dot1p value}
ip-dscp value mac-dot1p value
(OPTIONAL) Enter the keywords ip-dscp then the IP DSCP value. The range is from 0 to 63.
Enter the keywords mac-dot1p then the dot1p value. The range is from 0 to 7.
Defaults
none
Command Modes CONFIGURATION (conf-qos-policy-in)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 7.6.1.0 7.5.1.0 7.4.1.0 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added mac-dot1p on the C-Series and S-Series. Introduced on the S-Series. Introduced on the C-Series. E-Series Only: Added support for mac-dot1p. Introduced on the E-Series.
Usage Information
After the IP DSCP bit is set, other QoS services can then operate on the bit settings.
Quality of Service (QoS) 1175
show qos class-map
View the current class map information.
S4048�ON
Syntax Parameters
show qos class-map [class-name]
class-name
(Optional) Enter the name of a configured class map.
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Example
Dell#show qos class-map Class-map match-any CM
Match ip access-group ACL
Related Commands
class-map -- identifies the class map.
show qos dot1p-queue-mapping
Displays the dot1p priority to queue mapping on the switch.
Syntax Defaults
show qos dot1p-queue-mapping
Dot1p Priority : 0 1 2 3 4 5 6 7 Queue : 0 0 0 1 2 3 3 3
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
1176 Quality of Service (QoS)
Usage Information
Related Commands
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.12.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810.
trust dot1p, do1p-priority, service-class dynamic dot1; all these features work over the mapping in this command output.
service-class dot1p-mapping -- Identifies the class map.
show qos policy-map
View the QoS policy map information.
S4048�ON
Syntax Parameters
show qos policy-map {summary [interface] | detail}
summary interface
detail
To view a policy map interface summary, enter the keyword summary and optionally one of the following keywords and slot/port or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
To view a policy map interface in detail, enter the keyword detail and optionally one of the following keywords and slot/port or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500.
Quality of Service (QoS) 1177
Example (IPv4)
Version
9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 7.4.1.0 6.2.1.1
Description
Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. E-Series only: Added trust IPv6 diffserv . Introduced on the E-Series.
Dell#show qos policy-map detail tengigabitethernet 1/1
Interface TeGigabitEthernet 4/1
Policy-map-input policy
Trust dffserv
Queue# Class-map-name Qos-policy-name
0 -
q0
1
CM1
q1
2
CM2
q2
3
CM3
q3
Dell#
Example (IPv6)
Dell# show qos policy-map detail Tegigabitethernet 1/1
Interface TeGigabitEthernet 4/1
Policy-map-input pmap1
Queue# Class-map-name Qos-policy-name
0
c0
q0
1
c1
q1
2
c2
q2
3
c3
q3
Dell#
Example (Summary IPv4)
Dell#sho qos policy-map summary
Interface policy-map-input policy-map-output
Te 4/1
PM1
-
Te 4/2
PM2
PMOut
Dell#
show qos policy-map-input
View the input QoS policy map details.
S4048�ON
Syntax Parameters
show qos policy-map-input [policy-map-name] [class class-map-name] [qospolicy-input qos-policy-name]
policy-map-name Enter the policy map name. class class-map- Enter the keyword class then the class map name. name
1178 Quality of Service (QoS)
qos-policy-input Enter the keyword qos-policy-input then the QoS policy name. qos-policy-name
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 7.4.1.0 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. E-Series Only: Added Trust IPv6 diffserv. Introduced on the E-Series.
Example
Dell#show qos policy-map-input
Policy-map-input PolicyMapInput
Aggregate Qos-policy-name AggPolicyIn
Queue# Class-map-name Qos-policy-name
0
ClassMap1
qosPolicyInput
Dell#
Example
Dell# show qos policy-map-input
Policy-map-input pmap1
Trust ipv6-diffserv
Queue# Class-map-name
0
c0
1
c1
2
c2
3
c3
4
c4
5
c5
6
c6
7
c7
Dell#
Qos-policy-name q0 q1 q2 q3 q4 q6 q7
Quality of Service (QoS) 1179
show qos policy-map-output
View the output QoS policy map details.
S4048�ON
Syntax Parameters
show qos policy-map-output [policy-map-name] [qos-policy-output qos-policyname]
policy-map-name Enter the policy map name.
qos-policyoutput qospolicy-name
Enter the keyword qos-policy-output then the QoS policy name.
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series. Introduced on the E-Series.
Example
Dell#show qos policy-map-output
Policy-map-output PolicyMapOutput
Aggregate Qos-policy-name AggPolicyOut
Queue# Qos-policy-name
0
qosPolicyOutput
Dell#
show qos qos-policy-input
View the input QoS policy details.
S4048�ON
Syntax
show qos qos-policy-input [qos-policy-name]
1180 Quality of Service (QoS)
Parameters
qos-policy-name Enter the QoS policy name.
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Example
Dell#show qos qos-policy-input Qos-policy-input QosInput
Rate-police 100 50 peak 100 50 Dscp 32 Dell#
show qos qos-policy-output
View the output QoS policy details.
S4048�ON
Syntax Parameters
show qos qos-policy-output [qos-policy-name] qos-policy-name Enter the QoS policy name.
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
Quality of Service (QoS) 1181
Example
Version
9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 6.1.1.1
Description
Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series. Introduced on the E-Series.
Dell#show qos qos-policy-output Qos-policy-output qosOut
Rate-limit 50 50 peak 50 50 Wred yellow 1 Wred green 1
show qos statistics
View QoS statistics.
S4048�ON
Syntax Parameters
show qos statistics {egress--queue [interface]} | {wred-profile [interface]} | [interface]
egress-queue interface
wred-profile interface
interface
Enter the keyword egress-queue to display the egress-queue statistics and optionally one of the following keywords and slot/port or number information.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
Enter the keywords wred-profile and optionally one of the following keywords and slot/port or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
Enter one of the following keywords and slot/port or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
Defaults
none
Command Modes EXEC EXEC Privilege
1182 Quality of Service (QoS)
Command History
Example
Usage Information
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.8(0.0) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.1 7.5.1.0 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Added the egress-queue keyword. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Dell#show qos statistics te 1/1
Queue# Queued
Queued Matched Matched
Dropped
Bytes
Pkts Pkts
Bytes
Pkts
(Cumulative) (Cumulative)
0
0
0
1883725 1883725000 0
1
0
0
1883725 1883725000 0
2
0
0
1883725 1883725000 0
3
0
0
1883725 1883725000 0
4
0
0
1883725 1883725000 0
5
0
0
1883724 1883724000 0
6
0
0
1883720 1883720000 0
7
0
0
1883720 1883720000 0
Dell#
The following list describes output of the show qos statistics command in the example:
Queue # -- Queue Number. Queued Bytes -- Snapshot of the byte count in that queue. Queued Pkts -- Cumulative packet count in that queue. Matched Pkts -- The number of packets that matched the class-map criteria.
NOTE: When you configure trust , matched packet counters are not incremented in this field.
Matched Bytes -- The number of bytes that matched the class-map criteria. NOTE: When you configure trust , matched byte counters are not incremented in this field.
Dropped Pkts -- The total of the number of packets dropped for green, yellow and out-of-profile.
show qos wred-profile
View the WRED profile details.
S4048�ON
Syntax
show qos wred-profile wred-profile-name
Quality of Service (QoS) 1183
Parameters
wred-profilename
Enter the WRED profile name to view the profile details.
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series.
Example
Dell#show qos wred-profile
Wred-profile-name min-threshold max-threshold max-drop-rate
wred_drop
0
0
100
wred_teng_y
467
4671
100
wred_teng_g
467
4671
50
wred_fortyg_y
467
4671
50
wred_fortyg_g
467
4671
25
test cam-usage
Check the Input Policy Map configuration for the CAM usage.
S4048�ON
Syntax Parameters
test cam-usage service-policy input policy-map stack-unit {[number port-set portpipe number] | [all]}
policy-map
Enter the policy map name.
stackunitnumber
(OPTIONAL) Enter the keyword stack-unit then the stack-unit slot number.
port-set portpipe Enter the keywords port-set then the stack-unit port pipe number. The range is
number
from 0 or 1.
stack-unit all
(OPTIONAL) Enter the keywords stack-unit all to indicate all stack-unit.
Defaults
none
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
1184 Quality of Service (QoS)
Usage Information
Example
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
This feature allows you to determine if the CAM has enough space available before applying the configuration on an interface.
An input policy map with both Trust and Class-map configuration, the Class-map rules are ignored and only the Trust rule is programmed in the CAM. In such an instance, the Estimated CAM output column contains the size of the CAM space required for the Trust rule and not the Class-map rule.
The following describes the test cam-usage service-policy input policy-map stackunit command shown in the following example.
Field
Description
stack-unit
Indicates the stack-unit slot number.
Portpipe
Indicates the portpipe number.
CAM Partition The CAM space where the rules are added.
Available CAM
Indicates the free CAM space, in the partition, for the classification rules. NOTE: The CAM entries reserved for the default rules are not included in the Available CAM column; free entries, from the default rules space, cannot be used as a policy map for the classification rules.
Estimated CAM per Port
Indicates the number of free CAM entries required (for the classification rules) to apply the input policy map on a single interface.
NOTE: The CAM entries for the default rule are not included in this column; a
CAM entry for the default rule is always dedicated to a port and is always
available for that interface.
Status (Allowed ports)
Indicates if the input policy map configuration on an interface belonging to a stackunit/port-pipe is successful -- Allowed (n) -- or not successful -- Exception. The allowed number (n) indicates the number of ports in that port-pipe on which the Policy Map can be applied successfully.
NOTE: In a Layer 2 Policy Map, IPv4/IPv6 rules are not allowed; therefore, the output contains only L2ACL CAM partition entries.
Dell# test cam-usage service-policy input pmap_l2 stack-unit all
For a L2 Input Policy Map pmap_l2, the output must be as follows,
stack-unit|Portpipe|CAM Partition|Available CAM|Estimated CAM|Status
|
|
|
|per Port
|(Allowed
ports)
0
0
L2ACL
500
200
Allowed
(2)
0
1
L2ACL
100
200
Exception
1
0
L2ACL
1000
200
Allowed
(5)
1
1
L2ACL
0
200
Exception
...
Quality of Service (QoS) 1185
13
1
(2)
Dell#
...
...
L2ACL
400
200
Allowed
threshold
Specify the minimum and maximum threshold values for the configured WRED profiles.
S4048�ON
Syntax Parameters
threshold min number max number max-drop-probability To remove the threshold values, use the no threshold min number max number command.
min number
max number
max-dropprobability number
Enter the keyword min then the minimum threshold number for the WRED profile. The range is from 1 to 9360.
Enter the keyword max then the maximum threshold number for the WRED profile. The range is from 1 to 9360 KB.
Enter the keyword max-drop-probability followed by the maximum number of packets for the WRED profile. The range is from 0 to 100 KB
Defaults
none
Command Modes CONFIGURATION (config-wred)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.8.0 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series.
Usage Information
To configure the minimum and maximum threshold values for user-defined profiles, use this command. Additionally, to modify the minimum and maximum threshold values for the pre-defined WRED profiles, use this command. If you delete the threshold values of the pre-defined WRED profiles, the profiles revert to their original default values.
Table 2. Threshold Values for the Pre-defined WRED Profiles
Pre-Defined WRED Profile Minimum
Name
Threshold
Maximum Threshold
wred_drop
0
0
100
wred_ten_y
467
4671
100
1186 Quality of Service (QoS)
Related Commands
Table 2. Threshold Values for the Pre-defined WRED Profiles (continued)
Pre-Defined WRED Profile Minimum
Name
Threshold
Maximum Threshold
wred_ten_g
467
4671
50
wred_fortyg_y
467
4671
50
wred_fortyg_g
467
4671
25
wred-profile -- creates a WRED profile.
trust
Specify dynamic classification (DSCP) or dot1p to trust.
S4048�ON
Syntax Parameters
trust {diffserv [fallback]| dot1p [fallback]}
diffserv dot1p fallback
Enter the keyword diffserv to specify trust of DSCP markings.
Enter the keyword dot1p to specify trust dot1p configuration.
Enter the keyword fallback to classify packets according to their DSCP or dot1p value as a secondary option in case no match occurs against the configured class maps.
Defaults
none
Command Modes CONFIGURATION (conf-policy-map-in)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0 8.2.1.0 7.6.1.0 7.5.1.0 7.4.1.0 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added fallback to the E-Series. Added dot1p to the C-Series and S-Series. Introduced on the S-Series. Introduced on the C-Series. Added dot1p and IPv6 DSCP . Introduced on the E-Series.
Quality of Service (QoS) 1187
Usage Information
When you configure trust, matched bytes/packets counters are not incremented in the show qos statistics command.
Dynamic mapping honors packets marked according to the standard definitions of DSCP. The following lists the default mapping.
Table 3. Default Mapping DSCP/CP hex DSCP Range (XXX) Definition
111XXX
110XXX
101XXX
100XXX
011XXX 010XXX 001XXX 000XXX
EF (Expedited Forwarding)
AF4 (Assured Forwarding)
AF3
AF2
AF1
BE (Best Effort)
Traditional IP S6000 Precedence Internal
Queue ID
Network
7
Control
Internetwork 6 Control
CRITIC/ECP 5
Flash Override 4
Flash
3
Immediate
2
Priority
1
Best Effort
0
S-Series Internal Queue ID 3
3
2
2
1 1 0 0
DSCP/CP Decimal 48�63
48�63
32�47
32�47
16�31 16�31 0�15 0�15
wred
Designate the WRED profile to yellow or green traffic.
S4048�ON
Syntax Parameters
wred {yellow | green} profile-name To remove the WRED drop precedence, use the no wred {yellow | green} [profile-name] command.
yellow | green profile-name
Enter the keyword yellow for yellow traffic. A DSCP value of xxx110 and xxx100, xxx101 maps to yellow.
Enter the keyword green for green traffic. A DSCP value of xxx0xx are green and DSCP 111111 are red packets.
Enter your WRED profile name in character format (32 character maximum). Or use one of the five pre-defined WRED profile names.
Pre-defined Profiles: wred_drop, wred-ge_y, wred_ge_g, wred_teng_y, wred_teng_.
Defaults
When WRED green is applied, default WRED yellow profiles take effect and vice-versa.
Command Modes CONFIGURATION (conf-qos-policy-out)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
1188 Quality of Service (QoS)
Usage Information
Related Commands
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
To assign drop precedence to green or yellow traffic, use this command. If there is no honoring enabled on the input, all the traffic defaults to green drop precedence.
wred-profile -- creates a WRED profile and name that profile. trust -- defines the dynamic classification to trust DSCP.
wred ecn
To indicate network congestion, rather than dropping packets, use explicit congestion notification (ECN).
S4048�ON
Syntax
wred ecn To stop marking packets, use the no wred ecn command.
Defaults
none
Command Modes CONFIGURATION (conf-qos-policy-out)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820t. Introduced on the Z9000. Introduced on the S4810.
Usage Information
When you enable wred ecn, and the number of packets in the queue is below the minimum threshold, packets are transmitted per the usual WRED treatment.
When you enable wred ecn, and the number of packets in the queue is between the minimum threshold and the maximum threshold, one of the following two scenarios can occur:
Quality of Service (QoS) 1189
Related Commands
If the transmission endpoints are ECN-capable and traffic is congested, and the WRED algorithm determines that the packet should have been dropped based on the drop probability, the packet is transmitted and marked so the routers know the system is congested and can slow transmission rates.
If neither endpoint is ECN-capable, the packet may be dropped based on the WRED drop probability. This behavior is the identical treatment that a packet receives when WRED is enabled without ECN configured on the router.
When you enable wred ecn, and the number of packets in the queue is above the maximum threshold, packets are dropped based on the drop probability. This behavior is the identical treatment a packet receives when WRED is enabled without ECN configured on the router.
wred-profile -- creates a WRED profile and name that profile.
wred-profile
Create a WRED profile and name the profile.
S4048�ON
Syntax Parameters
wred-profile wred-profile-name To remove an existing WRED profile, use the no wred-profile command.
wred-profilename
Enter your WRED profile name in character format (32 character maximum). Or use one of the pre-defined WRED profile names. You can configure up to 26 WRED profiles plus the five pre-defined profiles, for a total of 31 WRED profiles.
Pre-defined Profiles: wred_drop, wred-ge_y, wred_ge_g, wred_teng_y, wred_teng_g.
Defaults
The five pre-defined WRED profiles. When you configure a new profile, the minimum and maximum threshold defaults to predefined wred_ge_g values.
If green profile is applied, default yellow also take effect and vice-versa.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 6.1.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series.
Usage Information
Use the default pre-defined profiles or configure your own profile. You cannot delete the pre-defined profiles or their default values. This command enables WRED configuration mode --(conf-wred).
1190 Quality of Service (QoS)
Related Commands
threshold -- specifies the minimum and maximum threshold values of the WRED profile.
DSCP Color Map Commands
The DSCP color map allows you to set the number of specific DSCP values to yellow or red. Traffic marked as yellow delivers traffic to the egress queue which will either transmit the packet if it has available bandwidth or drop the packet due to no ability to send. Traffic marked as red (high drop precedence) is dropped.
dscp
Sets the number of specific DSCP values for a color map profile to yellow or red.
Syntax
dscp {yellow | red} [list-dscp-values] To remove a color policy map profile, use the no dscp {yellow | red} [dscp-list] command.
Parameters
Yellow
Red dscp-list
Enter the yellow keyword. Traffic marked as yellow delivers traffic to the egress queue which either transmits the packet if it has available bandwidth or drops the packet due to no ability to send.
Enter the red keyword. Traffic marked as red is dropped.
Enter a list of IP DSCP values. The dscp-list parameter specifies the full list of IP DSCP value(s) for the specified color. Each DSCP value in a list is separate values by commas � no spaces (1,2,3) or indicates a list of values separated by a hyphen (1-3). Range is 0 to 63.
Defaults
None
Command Modes CONFIG-COLOR-MAP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.5.0.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the Z9000, S6000, S4820T, S4810, and MXL.
Usage Information
If the specified color-map does not exist, the Diffserv Manager (DSM) creates a color map and sets all the DSCP values to green (low drop precedence).
The default setting for each DSCP value (0-63) is green (low drop precedence). This command allows setting the number of specific DSCP values to yellow or red.
Important Points to Remember
All DSCP values that are not specified as yellow or red are colored green. A DSCP value cannot be in both the yellow and red lists. Setting the red or yellow list with any DSCP
value that is already in the other list results in an error and no update to that list is made.
Each color map can only have one list of DSCP values for each color; any DSCP values previously listed for that color that are not in the new DSCP list are colored green.
Example
Dell(conf-dscp-color-map)# dscp yellow 9,10,11,13,15,16
Quality of Service (QoS) 1191
Related Commands
qos dscp-color-map -- configures the DSCP color map qos dscp-color-policy-- configures a DSCP color policy
qos dscp-color-map
Configure the DSCP color map.
Syntax
qos dscp-color-map map-name To remove a color map, use the no qos dscp-color-map map-name command.
Parameters
map-name
Enter the name of the DSCP color map. The map name can have a maximum of 32 characters.
Defaults
None
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 9.7(0.0) 9.5.0.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000-ON. Introduced on the Z9000, S6000, S4820T, S4810, and MXL.
Usage Information
Example Related Commands
A color map outlines the codepoint mappings to the appropriate color mapping (green, yellow, red) for the traffic. The system uses this information use to handle the traffic on the interface based on the traffic priority and places it into the appropriate shaping queue. You cannot delete a DSCP color map when it is configured on an interface. If you do, all the DSCP values are set to green (low drop precedence). To delete the DSCP color map that is being used by one or more interfaces, remove the DSCP map from each interface.
Dell(conf)#qos dscp-color-map mymap
qos dscp-color-map-- associates the DSCP color map profile with an interface so that all IP packets received on it is given a color based on that color map
dscp-- sets the number of specific DSCP values for color map profile to yellow or red.
qos dscp-color-policy
Associates the DSCP color map profile with an interface so that all IP packets received on it is given a color based on that color map.
Syntax
dscp-color-policy color-map-profile-name
To remove a color policy map profile, use the no dscp-color-policy color-map-profile-name command.
Parameters
color-mapprofile-name
Enter the color map profile name. The name can have a maximum of 32 characters.
Defaults
None
Command Modes CONFIG-INTERFACE
1192 Quality of Service (QoS)
Command History
Usage Information Example
Related Commands
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) Version 9.5.0.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the Z9000, S6000, S4820T, S4810, and MXL.
If the specified color-map does not exist, the Diffserv Manager (DSM) creates a color map and sets all the DSCP values to green (low drop precedence).
The following example assigns the color map, bat-enclave-map, to interface te 1/11.
Dell(conf)# int te 1/11 Dell(conf-if-te-1/11)# qos dscp-color-policy bat-enclave-map
dscp-- sets the number of specific DSCP values for color map profile to yellow or red. qos dscp-color-map-- configures the DSCP color map.
show qos dscp-color-policy
Display DSCP color policy configuration for one or all interfaces.
Syntax Parameters
show qos dscp-color-policy {summary [interface] | detail {interface}}
summary Detail interface
Enter the summary keyword to display summary information about a color policy on one or more interfaces.
Enter the detail keyword to display detailed information about a color policy on one or more interfaces.
Enter the name of the interface that has color policy configured.
Defaults
None
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5.0.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9000, S6000, S4820T, S4810, and MXL.
Example
Display summary information about a color policy on one or more interfaces.
Dell# show qos dscp-color-policy summary
Interface
dscp-color-map
Quality of Service (QoS) 1193
Related Commands
TE 1/10 TE 1/11
mapONE mapTWO
Display summary information about a color policy on a specific interface.
Dell# show qos dscp-color-policy summary te 1/10
Interface
dscp-color-map
TE 1/10
mapONE
Displayed detailed color policy information on an interface.
Dell# show qos dscp-color-policy detail te 1/10 Interface TenGigabitEthernet 1/10
Dscp-color-map mapONE yellow 4,7 red 20,30
-- Displays DSCP color maps show qos dscp-color-map
show qos dscp-color-map
Display the DSCP color map for one or all interfaces.
Syntax Parameters
show qos dscp-color-map map-name
map-name
Enter the name of the color map.
Defaults
None
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.5.0.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the Z9000, S6000, S4820T, S4810, and MXL.
Example
Display all DSCP color maps. Dell# show qos dscp-color-map Dscp-color-map mapONE
yellow 4,7 red 20,30 Dscp-color-map mapTWO yellow 16,55 Display a specific DSCP color map. Dell# show qos dscp-color-map mapTWO Dscp-color-map mapTWO yellow 16,55
1194 Quality of Service (QoS)
47
Routing Information Protocol (RIP)
Routing information protocol (RIP) is a distance vector routing protocol. The Dell Networking operating software supports both RIP version 1 (RIPv1) and RIP version 2 (RIPv2) on the platform.
The Dell Networking OS implementation of RIP is based on IETF RFCs 2453 and RFC 1058. For more information about configuring RIP, refer to the Dell Networking OS Configuration Guide.
Topics:
� auto-summary � clear ip rip � debug ip rip � default-information originate � default-metric � description � distance � distribute-list in � distribute-list out � ip poison-reverse � ip rip receive version � ip rip send version � ip split-horizon � maximum-paths � neighbor � network � offset-list � output-delay � passive-interface � redistribute � redistribute isis � redistribute ospf � router rip � show config � show ip rip database � show running-config rip � timers basic � version
auto-summary
Restore the default behavior of automatic summarization of subnet routes into network routes. This command applies only to RIP version 2.
Syntax
auto-summary To send sub-prefix routing information, use the no auto-summary command.
Defaults
Enabled.
Command Modes ROUTER RIP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Routing Information Protocol (RIP) 1195
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 pre- 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
clear ip rip
Update all the RIP routes in the Dell Networking OS routing table.
S4048�ON
Syntax
clear ip rip
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 pre- 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
This command triggers updates of the main RIP routing tables.
1196 Routing Information Protocol (RIP)
debug ip rip
Examine RIP routing information for troubleshooting.
S4048�ON
Syntax Parameters
debug ip rip [interface | database | events [interface] | trigger] To turn off debugging output, use the no debug ip rip command.
interface
database events trigger
(OPTIONAL) Enter the interface type and ID as one of the following:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a VLAN, enter the keyword vlan then a number from 1 to 4094.
(OPTIONAL) Enter the keyword database to display messages when there is a change to the RIP database.
(OPTIONAL) Enter the keyword events to debug only RIP protocol changes.
(OPTIONAL) Enter the keyword trigger to debug only RIP trigger extensions.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.5.1.0 8.3.7.0 7.8.1.0 7.6.1.0 pre- 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Routing Information Protocol (RIP) 1197
default-information originate
Generate a default route for the RIP traffic.
S4048�ON
Syntax Parameters
default-information originate [always] [metric metric-value] [route-map map-name]
To return to the default values, use the no default-information originate command.
always
metric metricvalue route-map mapname
(OPTIONAL) Enter the keyword always to enable the switch software to always advertise the default route.
(OPTIONAL) Enter the keyword metric then a number as the metric value. The range is from 1 to 16. The default is 1.
(OPTIONAL) Enter the keywords route-map then the name of a configured route-map.
Defaults
Disabled. Metric: 1.
Command Modes ROUTER RIP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 pre- 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
The default route must be present in the switch routing table for the default-information originate command to take effect.
default-metric
Change the default metric for routes. To ensure that all redistributed routes use the same metric value, use this command with the redistribute command.
S4048�ON
Syntax
default-metric number
1198 Routing Information Protocol (RIP)
Parameters
To return the default metric to the original values, use the no default-metric command.
number
Specify a number. The range is from 1 to 16. The default is 1.
Defaults
1
Command Modes ROUTER RIP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 pre- 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
This command ensures that route information being redistributed is converted to the same metric value. redistribute -- allows you to redistribute routes learned by other methods.
description
Enter a description of the RIP routing protocol.
S4048�ON
Syntax Parameters
description {description} To remove the description, use the no description {description} command.
description
Enter a description to identify the RIP protocol (80 characters maximum).
Defaults
none
Command Modes ROUTER RIP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0)
Introduced on the S3048-ON and S4048-ON.
Routing Information Protocol (RIP) 1199
Related Commands
Version
9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 pre- 7.7.1.0
Description
Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
router rip -- enters ROUTER mode on the switch.
distance
Assign a weight (for prioritization) to all routes in the RIP routing table or to a specific route. Lower weights ("administrative distance") are preferred.
S4048�ON
Syntax Parameters
distance weight [ip-address mask [prefix-name]] To return to the default values, use the no distance weight [ip-address mask] command.
weight ip-address
mask
prefix-name
Enter a number from 1 to 255 for the weight (for prioritization). The default is 120.
(OPTIONAL) Enter the IP address, in dotted decimal format (A.B.C.D), of the host or network to receive the new distance metric.
If you enter an IP address, also enter a mask for that IP address, in either dotted decimal format or /prefix format (/x).
(OPTIONAL) Enter a configured prefix list name.
Defaults
weight = 120
Command Modes ROUTER RIP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T Introduced on the Z9000.
1200 Routing Information Protocol (RIP)
Related Commands
Version
8.3.7.0 7.8.1.0 7.6.1.0 pre- 6.2.1.1
Description
Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
default-metric -- assigns one distance metric to all routes learned using the redistribute command.
distribute-list in
Configure a filter for incoming routing updates.
S4048�ON
Syntax Parameters
distribute-list prefix-list-name in [interface] To delete the filter, use the no distribute-list prefix-list-name in command.
prefix-list-name interface
Enter the name of a configured prefix list.
(OPTIONAL) Identifies the interface type slot/port as one of the following:
For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a VLAN, enter the keyword vlan then a number from 1 to 4094.
Defaults
Not configured.
Command Modes ROUTER RIP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.29.0 8.3.11.1 8.5.1.0 8.3.7.0 7.8.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Routing Information Protocol (RIP) 1201
Related Commands
Version
pre- 6.2.1.1
Description
Introduced on the E-Series.
ip prefix-list -- enters PREFIX-LIST mode and configures a prefix list.
distribute-list out
Configure a filter for outgoing routing updates.
S4048�ON
Syntax Parameters
distribute-list prefix-list-name out [interface | bgp | connected | isis | ospf | static]
To delete the filter, use the no distribute-list prefix-list-name out command.
prefix-list-name interface
connected isis ospf static
Enter the name of a configured prefix list.
(OPTIONAL) Identifies the interface type slot/port as one of the following:
For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a VLAN, enter the keyword vlan then a number from 1 to 4094.
(OPTIONAL) Enter the keyword connected to filter only directly connected routes.
(OPTIONAL) Enter the keyword isis to filter only IS-IS routes.
(OPTIONAL) Enter the keyword ospf to filter all OSPF routes.
(OPTIONAL) Enter the keyword static to filter manually configured routes.
Defaults
Not configured.
Command Modes ROUTER RIP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.5.1.0 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810.
1202 Routing Information Protocol (RIP)
Related Commands
Version
7.8.1.0 7.6.1.0 pre- 6.2.1.1
Description
Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
ip prefix-list -- enters PREFIX-LIST mode and configures a prefix list.
ip poison-reverse
Set the prefix of the RIP routing updates to the RIP infinity value.
S4048�ON
Syntax
ip poison-reverse To disable poison reverse, use the no ip poison-reverse command.
Defaults
Disabled.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 pre- 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Related Commands
ip split-horizon -- sets the RIP routing updates to exclude routing prefixes.
Routing Information Protocol (RIP) 1203
ip rip receive version
To receive specific versions of RIP, set the interface. The RIP version you set on the interface overrides the version command in ROUTER RIP mode.
S4048�ON
Syntax Parameters
ip rip receive version [1] [2] To return to the default, use the no ip rip receive version command.
1
(OPTIONAL) Enter the number 1 for RIP version 1.
2
(OPTIONAL) Enter the number 2 for RIP version 2.
Defaults
RIPv1 and RIPv2
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 pre- 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
If you want the interface to receive both versions of RIP, use the ip rip receive version 1 2 command.
ip rip send version -- sets the RIP version for sending RIP traffic on an interface. version -- sets the RIP version the switch software uses.
ip rip send version
To send a specific version of RIP, set the interface. The version you set on the interface overrides the version command in ROUTER RIP mode.
S4048�ON
Syntax
ip rip send version [1] [2] To return to the default value, use the no ip rip send version command.
1204 Routing Information Protocol (RIP)
Parameters
1
2
(OPTIONAL) Enter the number 1 for RIP version 1. The default is RIP version 1. (OPTIONAL) Enter the number 2 for RIP version 2.
Defaults
RIPv1
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 pre- 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
To enable the interface to send both version of RIP packets, use the ip rip send version 1 2 command.
ip rip receive version -- sets the RIP version for the interface to receive traffic. version -- sets the RIP version for the switch software.
ip split-horizon
Enable split-horizon for RIP data on the interface. As described in RFC 2453, the split-horizon scheme prevents any routes learned over a specific interface to be sent back out that interface.
S4048�ON
Syntax
ip split-horizon To disable split-horizon, use the no ip split-horizon command.
Defaults
Enabled
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2)
Introduced on the S4048-ON. Introduced on the S3048-ON.
Routing Information Protocol (RIP) 1205
Related Commands
Version
9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 pre- 6.2.1.1
Description
Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
ip poison-reverse -- sets the prefix for RIP routing updates.
maximum-paths
Set RIP to forward packets over multiple paths.
S4048�ON
Syntax Parameters
maximum-paths number To return to the default values, use the no maximum-paths commands.
number
Enter the number of paths. The range is from 1 to 16. The default is 4 paths.
Defaults
4
Command Modes ROUTER RIP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 pre- 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
RIP supports a maximum of 16 ECMP paths.
1206 Routing Information Protocol (RIP)
neighbor
Define a neighbor router with which to exchange RIP information.
S4048�ON
Syntax Parameters
neighbor ip-address To delete a neighbor setting, use the no neighbor ip-address command.
ip-address
Enter the IP address, in dotted decimal format, of a router with which to exchange information.
Defaults
Not configured.
Command Modes ROUTER RIP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 pre- 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
When a neighbor router is identified, unicast data exchanges occur. Multiple neighbor routers are possible. To ensure that only specific interfaces are receiving and sending data, use the passive-interface command with the neighbor command.
passive-interface -- sets the interface to only listen to RIP broadcasts.
network
Enable RIP for a specified network. To enable RIP on all networks connected to the switch, use this command.
S4048�ON
Syntax
network ip-address To disable RIP for a network, use the no network ip-address command.
Routing Information Protocol (RIP) 1207
Parameters
ip-address
Specify an IP network address in dotted decimal format. You cannot specify a subnet.
Defaults
No RIP network is configured.
Command Modes ROUTER RIP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 pre- 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
You can enable an unlimited number of RIP networks. RIP operates over interfaces configured with any address the network command specifies.
offset-list
Specify a number to add to the incoming or outgoing route metrics learned using RIP.
S4048�ON
Syntax Parameters
offset-list prefix-list-name {in | out} offset [interface]
To delete an offset list, use the no offset-list prefix-list-name {in | out} offset [interface] command.
prefix-list-name offset interface
Enter the name of an established Prefix list to determine which incoming routes are modified.
Enter a number from zero (0) to 16 to be applied to the incoming route metric matching the access list specified. If you set an offset value to zero (0), no action is taken.
(OPTIONAL) Enter the following keywords and slot/port or number information:
For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
1208 Routing Information Protocol (RIP)
For a VLAN, enter the keyword vlan then a number from 1 to 4094.
Defaults
Not configured.
Command Modes ROUTER RIP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.5.1.0 8.3.7.0 7.8.1.0 7.6.1.0 pre- 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
When the offset metric is applied to an interface, that value takes precedence over an offset value that is not extended to an interface.
ip prefix-list -- enters PREFIX-LIST mode and configure a prefix list.
output-delay
Set the interpacket delay of successive packets to the same neighbor.
S4048�ON
Syntax Parameters
output-delay delay To return to the switch software defaults for interpacket delay, use the no output-delay command.
delay
Specify a number of milliseconds as the delay interval. The range is from 8 to 50.
Defaults
Not configured.
Command Modes ROUTER RIP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
Routing Information Protocol (RIP) 1209
Usage Information
Version
9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 pre- 6.2.1.1
Description
Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
This command is intended for low-speed interfaces.
passive-interface
Suppress routing updates on a specified interface.
S4048�ON
Syntax Parameters
passive-interface interface To delete a passive interface, use the no passive-interface interface command.
interface
Enter the following information:
For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a VLAN, enter the keyword vlan then a number from 1 to 4094.
Defaults
Not configured.
Command Modes ROUTER RIP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T.
1210 Routing Information Protocol (RIP)
Usage Information
Related Commands
Version
8.3.11.1 8.5.1.0 8.3.7.0 7.8.1.0 7.6.1.0 pre- 6.2.1.1
Description
Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Although the passive interface does not send or receive routing updates, the network on that interface still includes in RIP updates sent using other interfaces.
neighbor -- enables RIP for a specified network. network -- defines a neighbor.
redistribute
Redistribute information from other routing instances.
S4048�ON
Syntax Parameters
redistribute {connected | static} To disable redistribution, use the no redistribute {connected | static} command.
connected static
Enter the keyword connected to specify that information from active routes on interfaces is redistributed.
Enter the keyword static to specify that information from static routes is redistributed.
Defaults
Not configured.
Command Modes ROUTER RIP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 pre- 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Routing Information Protocol (RIP) 1211
Usage Information
Related Commands
To redistribute the default route (0.0.0.0/0), configure the default-information originate command.
default-information originate -- generates a default route for RIP traffic.
redistribute isis
Redistribute routing information from an IS-IS instance.
S4048�ON
Syntax Parameters
redistribute isis [tag] [level-1 | level-1-2 | level-2] [metric metricvalue] [route-map map-name]
To disable redistribution, use the no redistribute isis [tag] [level-1 | level-1-2 | level-2] [metric metric-value] [route-map map-name] command.
tag level-1
level-1-2
level-2
metric metricvalue route-map mapname
(OPTIONAL) Enter the name of the IS-IS routing process.
(OPTIONAL) Enter the keywords level-1 to redistribute only IS-IS Level-1 routes.
(OPTIONAL) Enter the keywords level-1-2 to redistribute both IS-IS Level-1 and Level-2 routes.
(OPTIONAL) Enter the keywords level-2 to redistribute only IS-IS Level-2 routes.
(OPTIONAL) Enter the keyword metric then a number as the metric value. The range is from 0 to 16.
(OPTIONAL) Enter the keywords route-map then the name of a configured route map.
Defaults
Not configured.
Command Modes ROUTER RIP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant FTOS Command Line Reference Guide.
The following is a list of the FTOS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.7.0 pre- 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series.
1212 Routing Information Protocol (RIP)
redistribute ospf
Redistribute routing information from an OSPF process.
S4048�ON
Syntax Parameters
redistribute ospf process-id [match external {1 | 2} | match internal | metric metric-value] [route-map map-name]
To disable redistribution, use the no redistribute ospf process-id [match external {1 | 2} | match internal | metric metric-value] [route-map map-name] command.
process-id
Enter a number that corresponds to the OSPF process ID to redistribute. The range is from 1 to 65355.
match external {1 (OPTIONAL) Enter the keywords match external then the numbers 1 or 2 to
| 2}
indicated that external 1 routes or external 2 routes should be redistributed.
match internal
(OPTIONAL) Enter the keywords match internal to indicate that internal routes should be redistributed.
metric metricvalue
(OPTIONAL) Enter the keyword metric then a number as the metric value. The range is from 0 to 16.
route-map map- (OPTIONAL) Enter the keywords route-map then the name of a configured route
name
map.
Defaults
Not configured.
Command Modes ROUTER RIP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 pre- 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Routing Information Protocol (RIP) 1213
router rip
To configure and enable RIP, enter ROUTER RIP mode.
S4048�ON
Syntax
router rip To disable RIP, use the no router rip command.
Defaults
Disabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 pre- 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Example
To enable RIP, assign a network address using the network command. Dell(conf)#router rip Dell(conf-router_rip)#
Related Commands
network -- enables RIP. exit -- returns to CONFIGURATION mode.
show config
Display the changes you made to the RIP configuration. The default values are not shown.
S4048�ON
Syntax
show config
Command Modes ROUTER RIP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
1214 Routing Information Protocol (RIP)
Example
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 pre- 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Dell(conf-router_rip)#show config ! router rip
network 172.31.0.0 passive-interface TenGigabitEthernet 1/1 Dell(conf-router_rip)#
show ip rip database
Display the routes that RIP learns. If the switch learned no RIP routes, no output is generated.
S4048�ON
Syntax Parameters
show ip rip database [ip-address mask]
ip-address mask
(OPTIONAL) Specify an IP address in dotted decimal format to view RIP information on that network only. If you enter an IP address, also enter a mask for that IP address.
(OPTIONAL) Specify a mask, in /network format, for the IP address.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T.
Routing Information Protocol (RIP) 1215
Usage Information
Example
Version
8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 pre- 6.2.1.1
Description
Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
The following describes the show ip rip database command shown in the following example.
Field
Description
Total number of routes in RIP database
100.10.10.0/24 directly connected
Displays the number of RIP routes stored in the RIP database. Lists the routes directly connected.
150.100.0.0 redistributed
Lists the routes learned through redistribution.
209.9.16.0/24... Lists the routes and the sources advertising those routes.
Dell#show ip rip database
Total number of routes in RIP database: 1624
204.250.54.0/24
[50/1] via 192.14.1.3, 00:00:12, TenGigabitEthernet 1/15
204.250.54.0/24
auto-summary
203.250.49.0/24
[50/1] via 192.13.1.3, 00:00:12, TenGigabitEthernet 1/14
203.250.49.0/24
auto-summary
210.250.40.0/24
[50/2] via 1.1.18.2, 00:00:14, Vlan 18
[50/2] via 1.1.130.2, 00:00:12, Port-channel 30
210.250.40.0/24
auto-summary
207.250.53.0/24
[50/2] via 1.1.120.2, 00:00:55, Port-channel 20
[50/2] via 1.1.130.2, 00:00:12, Port-channel 30
[50/2] via 1.1.10.2, 00:00:18, Vlan 10
207.250.53.0/24
auto-summary
208.250.42.0/24
[50/2] via 1.1.120.2, 00:00:55, Port-channel 20
[50/2] via 1.1.130.2, 00:00:12, Port-channel 30
[50/2] via 1.1.10.2, 00:00:18, Vlan 10
208.250.42.0/24
auto-summary
show running-config rip
Display the current RIP configuration.
S4048�ON
Syntax
show running-config rip
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
1216 Routing Information Protocol (RIP)
Example
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.7.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
show running-config rip ! router rip
distribute-list Test1 in distribute-list Test21 out network 10.0.0.0 passive-interface GigabitEthernet 2/1 neighbor 20.20.20.20 redistribute ospf 999 version 2
timers basic
Manipulate the RIP timers for routing updates, invalid, holddown times, and flush time.
S4048�ON
Syntax Parameters
timers basic update invalid holddown flush To return to the default settings, use the no timers basic command.
update invalid holddown flush
Enter the number of seconds to specify the rate at which RIP routing updates are sent. The range is from zero (0) to 4294967295. The default is 30 seconds.
Enter the number of seconds to specify the time interval before routing updates are declared invalid or expired. The invalid value should be at least three times the update timer value. The range is from zero (0) to 4294967295. The default is 180 seconds.
Enter the number of seconds to specify a time interval during which the route is marked as unreachable but still sending RIP packets. The holddown value should be at least three times the update timer value. The range is from zero (0) to 4294967295. The default is 180 seconds.
Enter the number of seconds to specify the time interval during which the route is advertised as unreachable. When this interval expires, the route is flushed from the routing table. The flush value should be greater than the update value. The range is from zero (0) to 4294967295. The default is 240 seconds.
Routing Information Protocol (RIP) 1217
Defaults
update = 30 seconds invalid = 180 seconds holddown = 180 seconds flush = 240 seconds
Command Modes ROUTER RIP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 pre- 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
If you change the timers on one router, also synchronize the timers on all routers in the RIP domain.
version
Specify either RIP version 1 or RIP version 2.
S4048�ON
Syntax Parameters
version {1 | 2} To return to the default version setting, use the no version command.
1
Enter the keyword 1 to specify RIP version 1.
2
Enter the keyword 2 to specify RIP version 2.
Defaults
The Dell Networking OS sends RIPv1 and receives RIPv1 and RIPv2.
Command Modes ROUTER RIP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2)
Introduced on the S4048-ON. Introduced on the S3048-ON.
1218 Routing Information Protocol (RIP)
Related Commands
Version
9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0 7.6.1.0 pre- 6.2.1.1
Description
Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
ip rip receive version -- sets the RIP version the interface receives. ip rip send version -- sets the RIP version the interface sends.
Routing Information Protocol (RIP) 1219
48
Remote Monitoring (RMON)
The Dell Networking operating software remote monitoring (RMON) is implemented on the S4048�ON platform.
Dell Networking OS RMON is based on IEEE standards, providing both 32-bit and 64-bit monitoring and long-term statistics collection. Dell Networking OS RMON supports the following RMON groups, as defined in RFC-2819, RFC-3273, RFC-3434, and RFC-4502:
Ethernet Statistics Table; RFC-2819 Ethernet Statistics High-Capacity Table; RFC-3273, 64bits Ethernet History Control Table; RFC-2819 Ethernet History Table; RFC-2819 Ethernet History High-Capacity Table; RFC-3273, 64bits Alarm Table; RFC-2819 High-Capacity Alarm Table (64bits); RFC-3434, 64bits Event Table; RFC-2819 Log Table; RFC-2819 User History; RFC-4502 Probe Configuration (Capabilities, SoftwareRev, HardwareRev, DateTime and ResetControl); RFC-4502
Dell Networking OS RMON does not support the following statistics:
etherStatsCollisions etherHistoryCollisions etherHistoryUtilization
NOTE: Only SNMP GET/GETNEXT access is supported. Configure RMON using the RMON commands. Collected data is lost during a chassis reboot.
Topics:
� rmon alarm � rmon collection history � rmon collection statistics � rmon event � rmon hc-alarm � show rmon � show rmon alarms � show rmon events � show rmon hc-alarm � show rmon history � show rmon log � show rmon statistics
rmon alarm
Set an alarm on any MIB object.
S4048�ON
Syntax
rmon alarm number variable interval {delta | absolute} rising-threshold value event-number falling-threshold value event-number [owner string]
To disable the alarm, use the no rmon alarm number command.
1220 Remote Monitoring (RMON)
Parameters
number variable interval
Enter the alarm integer number from 1 to 65535. The value must be unique in the RMON alarm table.
Enter the MIB object to monitor. The variable must be in the SNMP OID format; for example, 1.3.6.1.2.1.1.3. The object type must be a 32-bit integer.
Time, in seconds, the alarm monitors the MIB variables; this is the alarmSampleType in the RMON alarm table. The range is from 5 to 3600 seconds.
delta absolute
Enter the keyword delta to test the change between MIB variables. This is the alarmSampleType in the RMON alarm table.
Enter the keyword absolute to test each MIB variable directly. This is the alarmSampleType in the RMON alarm table.
rising-threshold value eventnumber
Enter the keywords rising-threshold then the value (32 bit) the risingthreshold alarm is either triggered or reset. Then enter the event-number to trigger when the rising threshold exceeds its limit. This value is the same as the alarmRisingEventIndex or alarmTable of the RMON MIB. If there is no corresponding rising-threshold event, the value is zero.
falling-threshold value eventnumber
Enter the keywords falling-threshold then the value (32 bit) the fallingthreshold alarm is either triggered or reset. Then enter the event-number to trigger when the falling threshold exceeds its limit. This value is the same as the alarmFallingEventIndex or the alarmTable of the RMON MIB. If there is no corresponding falling-threshold event, the value is zero.
owner string
(OPTIONAL) Enter the keyword owner then the owner name to specify an owner for the alarm. This is the alarmOwner object in the alarmTable of the RMON MIB.
Defaults
owner
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Remote Monitoring (RMON) 1221
rmon collection history
Enable the RMON MIB history group of statistics collection on an interface.
S4048�ON
Syntax Parameters
rmon collection history {controlEntry integer} [owner name] [buckets number] [interval seconds]
To remove a specified RMON history group of statistics collection, use the no rmon collection history {controlEntry integer} command.
controlEntry integer
owner name buckets number
interval seconds
Enter the keyword controlEntry to specify the RMON group of statistics using a value. Then enter an integer value from 1 to 65535 that identifies the RMON group of statistics. The integer value must be a unique index in the RMON history table.
(OPTIONAL) Enter the keyword owner then the owner name to record the owner of the RMON group of statistics.
(OPTIONAL) Enter the keyword buckets then the number of buckets for the RMON collection history group of statistics. The bucket range is from 1 to 1000. The default is 50.
(OPTIONAL) Enter the keyword interval then the number of seconds in each polling cycle. The range is from 5 to 3600 seconds. The default is 1800 seconds.
Defaults
none
Command Modes CONFIGURATION INTERFACE (config-if)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
1222 Remote Monitoring (RMON)
rmon collection statistics
Enable RMON MIB statistics collection on an interface.
S4048�ON
Syntax Parameters
rmon collection statistics {controlEntry integer} [owner name]
To remove RMON MIB statistics collection on an interface, use the no rmon collection statistics {controlEntry integer} command.
controlEntry integer
owner name
Enter the keyword controlEntry to specify the RMON group of statistics using a value. Then enter an integer value from 1 to 65535 that identifies the RMON Statistic Table. The integer value must be a unique in the RMON statistic table.
(OPTIONAL) Enter the keyword owner then the owner name to record the owner of the RMON group of statistics.
Defaults
none
Command Modes CONFIGURATION INTERFACE (config-if)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
rmon event
Add an event in the RMON event table.
S4048�ON
Syntax Parameters
rmon event number [log] [trap community] [description string] To disable RMON on an interface, use the no rmon event number command.
number
Assign an event number in integer format. The range is from 1 to 65535. You must ensure that the value you enter is unique in the RMON event table.
Remote Monitoring (RMON) 1223
log
trap community
description string owner name
(OPTIONAL) Enter the keyword log to generate an RMON event log. This option sets the eventType to either log or log-and-snmptrap in the RMON event table. The default is None.
(OPTIONAL) Enter the keyword trap followed by the SNMP community string to generate SNMP traps for an RMON event entry. This option sets the eventType to either snmptrap or log-and-snmptrap in the RMON event table. In addition to the SNMP traps, this option also generates a syslog.
(OPTIONAL) Enter the keyword description then a string describing the event.
(OPTIONAL) Enter the keyword owner then the name of the owner of this event.
Defaults
As noted in the Parameters section.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
rmon hc-alarm
Set an alarm on any MIB object.
S4048�ON
Syntax Parameters
rmon hc-alarm number variable interval {delta | absolute} rising-threshold value event-number falling-threshold value event-number [owner string]
To disable the alarm, use the no rmon hc-alarm number command.
number variable interval
Enter the alarm integer number from 1 to 65535. The value must be unique in the RMON alarm table.
The MIB object to monitor. The variable must be in the SNMP OID format; for example, 1.3.6.1.2.1.1.3 The object type must be a 64-bit integer.
Time, in seconds, the alarm monitors the MIB variables; this is the alarmSampleType in the RMON alarm table. The range is from 5 to 3600 seconds.
1224 Remote Monitoring (RMON)
delta
Enter the keyword delta to test the change between MIB variables. This is the alarmSampleType in the RMON alarm table.
absolute
Enter the keyword absolute to test each MIB variable directly. This is the alarmSampleType in the RMON alarm table.
rising-threshold value eventnumber
Enter the keywords rising-threshold then the value (64 bit) the risingthreshold alarm is either triggered or reset. Then enter the event-number to trigger when the rising threshold exceeds its limit. This value is the same as the alarmRisingEventIndex or alarmTable of the RMON MIB. If there is no corresponding rising-threshold event, the value is zero.
falling-threshold value eventnumber
Enter the keywords falling-threshold then the value (64 bit) the fallingthreshold alarm is either triggered or reset. Then enter the event-number to trigger when the falling threshold exceeds its limit. This value is the same as the alarmFallingEventIndex or the alarmTable of the RMON MIB. If there is no corresponding falling-threshold event, the value is zero.
owner string
(OPTIONAL) Enter the keyword owner then the owner name to specify an owner for the alarm. This is the alarmOwner object in the alarmTable of the RMON MIB.
Defaults
owner
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
show rmon
Display the RMON running status including the memory usage.
S4048�ON
Syntax
show rmon
Defaults
none
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Remote Monitoring (RMON) 1225
Example
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Dell# show rmon RMON status
total memory used 218840 bytes. ether statistics table: 8 entries, 4608 bytes ether history table: 8 entries, 6000 bytes alarm table: 390 entries, 102960 bytes high-capacity alarm table: 5 entries, 1680 bytes event table: 500 entries, 206000 bytes log table: 2 entries, 552 bytes Dell#
show rmon alarms
Display the contents of the RMON alarm table.
S4048�ON
Syntax Parameters
show rmon alarms [index] [brief]
index brief
(OPTIONAL) Enter the table index number to display just that entry.
(OPTIONAL) Enter the keyword brief to display the RMON alarm table in an easy-to-read format.
Defaults
none
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500.
1226 Remote Monitoring (RMON)
Example (Index)
Version
9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.1.1.0
Description
Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Dell#show rmon alarm 1 RMON alarm entry 1
sample Interval: 5 object: 1.3.6.1.2.1.1.3 sample type: absolute value. value: 255161 alarm type: rising or falling alarm. rising threshold: 1, RMON event index: 1 falling threshold: 501, RMON event index: 501 alarm owner: 1 alarm status: OK Dell#
Example (Brief)
Dell#show rmon alarm br
index SNMP OID
--------------------------
1
1.3.6.1.2.1.1.3
2
1.3.6.1.2.1.1.3
3
1.3.6.1.2.1.1.3
4
1.3.6.1.2.1.1.3
5
1.3.6.1.2.1.1.3
6
1.3.6.1.2.1.1.3
7
1.3.6.1.2.1.1.3
8
1.3.6.1.2.1.1.3
9
1.3.6.1.2.1.1.3
10
1.3.6.1.2.1.1.3
11
1.3.6.1.2.1.1.3
12
1.3.6.1.2.1.1.3
13
1.3.6.1.2.1.1.3
14
1.3.6.1.2.1.1.3
15
1.3.6.1.2.1.1.3
16
1.3.6.1.2.1.1.3
17
1.3.6.1.2.1.1.3
18
1.3.6.1.2.1.1.3
19
1.3.6.1.2.1.1.3
20
1.3.6.1.2.1.1.3
21
1.3.6.1.2.1.1.3
22
1.3.6.1.2.1.1.3
Dell#
show rmon events
Display the contents of the RMON event table.
S4048�ON
Syntax
show rmon events [index] [brief]
Remote Monitoring (RMON) 1227
Parameters
index brief
(OPTIONAL) Enter the table index number to display just that entry.
(OPTIONAL) Enter the keyword brief to display the RMON event table in an easy-to-read format.
Defaults
none
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Example (Index)
Dell(conf)#rmon event 111
-> Default case
Dell(conf)#rmon event 112 log
-> Only "log" option
Dell(conf)#rmon event 113 trap private -> Only "trap" option
Dell(conf)#rmon event 114 log trap public-> Both "log" and "trap" options
Dell(conf)#do show rmon events
RMON event entry 111
description:
event type: none.
event community:
event last time sent: none
event owner:
event status: OK
RMON event entry 112
description:
event type: LOG.
event community:
event last time sent: none
event owner:
event status: OK
RMON event entry 113
description:
event type: SNMP TRAP.
event community: private
event last time sent: none
event owner:
event status: OK
RMON event entry 114
description:
event type: LOG and SNMP TRAP.
event community: public
event last time sent: none
event owner:
event status: OK
1228 Remote Monitoring (RMON)
Example (Brief)
Dell#show rmon event brief
index
description
------------------------------
1
1
2
2
3
3
4
4
5
5
6
6
7
7
8
8
9
9
10
10
11
11
12
12
13
13
14
14
15
15
16
16
17
17
18
18
19
19
20
20
21
21
22
22
Dell#
show rmon hc-alarm
Display the contents of RMON High-Capacity alarm table.
S4048�ON
Syntax Parameters
show rmon hc-alarm [index] [brief]
index brief
(OPTIONAL) Enter the table index number to display just that entry.
(OPTIONAL) Enter the keyword brief to display the RMON High-Capacity alarm table in an easy-to-read format.
Defaults
none
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Remote Monitoring (RMON) 1229
Example (Index)
Version
7.6.1.0 7.5.1.0 6.1.1.0
Description
Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Dell#show rmon hc-alarm 1 RMON high-capacity alarm entry 2
object: 1.3.6.1.2.1.2.2.1.4.2099844 sample interval: 10 sample type: delta value. value: 0, value status: positive alarm type: rising or falling alarm. alarm rising threshold value: positive. rising threshold: 500, RMON event index: 3 alarm falling threshold value: positive. falling threshold: 300, RMON event index: 4 alarm sampling failed 0 times. alarm owner: alarm storage type: non-volatile. alarm status: OK Dell#
Example (Brief)
Dell#show rmon hc-alarm brief
index
SNMP OID
----------------------------------
1
1.3.6.1.2.1.1.3
2
1.3.6.1.2.1.1.3
3
1.3.6.1.2.1.1.3
4
1.3.6.1.2.1.1.3
5
1.3.6.1.2.1.1.3
Dell#
show rmon history
Display the contents of the RMON Ethernet history table.
S4048�ON
Syntax Parameters
show rmon history [index] [brief]
index brief
(OPTIONAL) Enter the table index number to display just that entry.
(OPTIONAL) Enter the keyword brief to display the RMON Ethernet history table in an easy-to-read format
Defaults
none
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON.
1230 Remote Monitoring (RMON)
Example (Index)
Version
9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.1.1.0
Description
Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Dell#show rmon history 6001 RMON history control entry 6001 interface: ifIndex.100974631 TenGigabitEthernet 2/1 bucket requested: 1 bucket granted: 1 sampling interval: 5 sec owner: 1 status: OK Dell#
Example (Brief)
Dell#show rmon history brief index ifIndex interface --------------------------------------------------------------------6001 100974631 TenGigabitEthernet 2/2 6002 100974631 TenGigabitEthernet 2/2 6003 101236775 TenGigabitEthernet 2/1 6004 101236775 TenGigabitEthernet 2/1 9001 134529054 TenGigabitEthernet 3/2 9002 134529054 TenGigabitEthernet 3/2 9003 134791198 TenGigabitEthernet 3/1 9004 134791198 TenGigabitEthernet 3/1 Dell#
show rmon log
Display the contents of the RMON log table.
S4048�ON
Syntax Parameters
show rmon log [index] [brief]
index brief
(OPTIONAL) Enter the table index number to display just that entry.
(OPTIONAL) Enter the keyword brief to display the RMON log table in an easyto-read format.
Defaults
none
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Remote Monitoring (RMON) 1231
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.1.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Example (Index)
The log table has a maximum of 500 entries. If the log exceeds that maximum, the oldest log entry is purged to allow room for the new entry.
Dell#show rmon log 2 RMON log entry, alarm table index 2, log index 1
log time: 14638 (THU AUG 12 22:10:40 2004) description: 2 Dell#
Example (Brief)
Dell#show rmon log br
eventIndex
description
------------------------------
2
2
4
4
Dell#
show rmon statistics
Display the contents of RMON Ethernet statistics table.
S4048�ON
Syntax Parameters
show rmon statistics [index] [brief]
index brief
(OPTIONAL) Enter the table index number to display just that entry.
(OPTIONAL) Enter the keyword brief to display the RMON Ethernet statistics table in an easy-to-read format.
Defaults
none
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
1232 Remote Monitoring (RMON)
Example (Index)
Version
9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.1.1.0
Description
Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Dell#show rmon statistics 6001 RMON statistics entry 6001
interface: ifIndex.100974631 TenGigabitEthernet 2/1 packets dropped: 0 bytes received: 0 packets received: 0 broadcast packets: 0 multicast packets: 0 CRC error: 0 under-size packets: 0 over-size packets: 0 fragment errors: 0 jabber errors: 0 collision: 0 64bytes packets: 0 65-127 bytes packets: 0 128-255 bytes packets: 0 256-511 bytes packets: 0 512-1023 bytes packets: 0 1024-1518 bytes packets: 0 owner: 1 status: OK <high-capacity data> HC packets received overflow: 0 HC packets received: 0 HC bytes received overflow: 0 HC bytes received: 0 HC 64bytes packets overflow: 0 HC 64bytes packets: 0 HC 65-127 bytes packets overflow: 0 HC 65-127 bytes packets: 0 HC 128-255 bytes packets overflow: 0 HC 128-255 bytes packets: 0 HC 256-511 bytes packets overflow: 0 HC 256-511 bytes packets: 0 HC 512-1023 bytes packets overflow: 0 HC 512-1023 bytes packets: 0 HC 1024-1518 bytes packets overflow: 0 HC 1024-1518 bytes packets: 0 Dell#
Example (Brief)
Dell#show rmon statistics br
index
ifIndex
interface
----------------------------------------
6001
100974631
TenGigabitEthernet 2/2
6002
100974631
TenGigabitEthernet 2/2
6003
101236775
TenGigabitEthernet 2/1
6004
101236775
TenGigabitEthernet 2/1
9001
134529054
TenGigabitEthernet 3/2
Remote Monitoring (RMON) 1233
9002 9003 9004 Dell#
134529054 134791198 134791198
TenGigabitEthernet 3/2 TenGigabitEthernet 3/1 TenGigabitEthernet 3/1
1234 Remote Monitoring (RMON)
49
Rapid Spanning Tree Protocol (RSTP)
The Dell Networking operating software implementation of rapid spanning tree protocol (RSTP) is based on the IEEE 802.1w standard spanning-tree protocol. The RSTP algorithm configures connectivity throughout a bridged local area network (LAN) that is comprised of LANs interconnected by bridges.
Dell Networking OS supports RSTP.
Topics:
� bridge-priority � debug spanning-tree rstp � description � disable � forward-delay � hello-time � max-age � protocol spanning-tree rstp � show config � show spanning-tree rstp � spanning-tree rstp � tc-flush-standard
bridge-priority
Set the bridge priority for RSTP.
Syntax
bridge-priority priority-value To return to the default value, use the no bridge-priority command.
Parameters
priority-value
Enter a number as the bridge priority value in increments of 4096. The range is from 0 to 61440. The default is 32768.
Defaults
32768
Command Modes CONFIGURATION RSTP (conf-rstp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Rapid Spanning Tree Protocol (RSTP) 1235
Related Commands
Version
7.6.1.0 7.5.1.0 6.2.1.1
Description
Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
protocol spanning-tree rstp -- enters rapid spanning tree mode.
debug spanning-tree rstp
Enable debugging of RSTP and view information on the protocol.
Syntax
debug spanning-tree rstp [all | bpdu interface {in | out} | events] To disable debugging, use the no debug spanning-tree rstp command.
Parameters
all
bpdu interface {in | out}
(OPTIONAL) Enter the keyword all to debug all spanning tree operations.
(OPTIONAL) Enter the keyword bpdu to debug the bridge protocol data units.
(OPTIONAL) Enter the keyword interface along with the type slot/port of the interface you want displayed. Type slot/port[/subport] options are the following:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
Optionally, enter an in or out parameter with the optional interface:
For Receive, enter in. For Transmit, enter out.
events
(OPTIONAL) Enter the keyword events to debug RSTP events.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.5.1.0 8.3.7.0 7.6.1.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
1236 Rapid Spanning Tree Protocol (RSTP)
Example
Version
6.2.1.1
Description
Introduced on the E-Series.
Dell#debug spanning-tree rstp bpdu tengigabitethernet 2/1 ? in Receive (in) out Transmit (out)
description
Enter a description of the rapid spanning tree.
Syntax
description {description} To remove the description, use the no description {description} command.
Parameters
description
Enter a description to identify the rapid spanning tree (80 characters maximum).
Defaults
none
Command Modes SPANNING TREE (The prompt is "config-rstp".)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 pre-7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced.
Related Commands
protocol spanning-tree rstp -- enters SPANNING TREE mode on the switch.
disable
Disable RSTP globally on the system.
Syntax
disable To enable Rapid Spanning Tree Protocol, use the no disable command.
Defaults
RSTP is disabled.
Command Modes CONFIGURATION RSTP (conf-rstp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Rapid Spanning Tree Protocol (RSTP) 1237
Related Commands
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.2.1.1
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
protocol spanning-tree rstp -- enters SPANNING TREE mode on the switch.
forward-delay
Configure the amount of time the interface waits in the Listening State and the Learning State before transitioning to the Forwarding State.
Syntax
forward-delay seconds To return to the default setting, use the no forward-delay command.
Parameters
seconds
Enter the number of seconds that Dell Networking OS waits before transitioning RSTP to the forwarding state. The range is from 4 to 30. The default is 15 seconds.
Defaults
15 seconds
Command Modes CONFIGURATION RSTP (conf-rstp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
1238 Rapid Spanning Tree Protocol (RSTP)
Related Commands
hello-time -- changes the time interval between BPDUs. max-age -- changes the wait time before RSTP refreshes the protocol configuration information.
hello-time
Set the time interval between the generation of the RSTP bridge protocol data units (BPDUs).
Syntax
hello-time [milli-second] seconds To return to the default value, use the no hello-time command.
Parameters
seconds milli-second
Enter a number as the time interval between transmission of BPDUs. The range is from 1 to 10 seconds. The default is 2 seconds.
Enter the keywords milli-second to configure a hello time on the order of milliseconds. The range is from 50 to 950 milliseconds
Defaults
2 seconds
Command Modes CONFIGURATION RSTP (conf-rstp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0 7.6.1.0 7.5.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added the milli-second option to the S-Series. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
The hello time is encoded in BPDUs in increments of 1/256ths of a second. The standard minimum hello time in seconds is 1 second, which is encoded as 256. Millisecond hello times are encoded using values less than 256; the millisecond hello time equals (x/1000)*256.
When you configure millisecond hellos, the default hello interval of 2 seconds is still used for edge ports; the millisecond hello interval is not used.
forward-delay -- changes the wait time before RSTP transitions to the Forwarding state.
max-age -- changes the wait time before RSTP refreshes the protocol configuration information.
Rapid Spanning Tree Protocol (RSTP) 1239
max-age
To maintain configuration information before refreshing that information, set the time interval for the RSTP bridge.
Syntax
max-age seconds To return to the default values, use the no max-age command.
Parameters
max-age
Enter a number of seconds the Dell Networking OS waits before refreshing configuration information. The range is from 6 to 40 seconds. The default is 20 seconds.
Defaults
20 seconds
Command Modes CONFIGURATION RSTP (conf-rstp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Related Commands
forward-delay -- changes the wait time before RSTP transitions to the Forwarding state. hello-time -- changes the time interval between BPDUs.
protocol spanning-tree rstp
To configure RSTP, enter RSTP mode.
Syntax
protocol spanning-tree rstp To exit RSTP mode, use the exit command.
Defaults
Not configured
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
1240 Rapid Spanning Tree Protocol (RSTP)
Usage Information Example
Related Commands
Version
9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.2.1.1
Description
Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
RSTP is not enabled when you enter RSTP mode. To enable RSTP globally on the system, use the no disable command from RSTP mode.
Dell(conf)#protocol spanning-tree rstp Dell(config-rstp)##no disable
disable -- disables RSTP globally on the system.
show config
View the current configuration for the mode. Only non-default values are displayed.
Syntax
show config
Command Modes CONFIGURATION RSTP (conf-rstp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Example
Dell(conf-rstp)#show config !
Rapid Spanning Tree Protocol (RSTP) 1241
protocol spanning-tree rstp no disable bridge-priority 16384
show spanning-tree rstp
Display the RSTP configuration.
Syntax Parameters
show spanning-tree rstp [brief] [guard]
brief guard
(OPTIONAL) Enter the keyword brief to view a synopsis of the RSTP configuration information.
(OPTIONAL) Enter the keyword guard to display the type of guard enabled on an RSTP interface and the current port state.
Command Modes EXEC EXEC Privilege
Command History
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.4.2.1
8.3.7.0 7.6.1.0 7.5.1.0 6.4.1.0
6.2.1.1
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for the optional guard keyword on the C-Series, S-Series, and ESeries TeraScale. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Expanded to display the port error disable state (EDS) caused by loopback BPDU inconsistency. Introduced on the E-Series.
Usage Information
The following describes the show spanning-tree rstp guard command shown in the following example.
Field
Description
Interface Name RSTP interface.
Instance
RSTP instance.
Sts
Port state: root-inconsistent (INCON Root), forwarding (FWD), listening (LIS),
blocking (BLK), disabled (DIS), or shut down (EDS Shut).
Guard Type
Types of STP guard configured (Root, Loop, or BPDU guard)
Example (Brief)
Dell#show spanning-tree rstp brief Executing IEEE compatible Spanning Tree Protocol Root ID Priority 8192, Address 0001.e805.e306 Root Bridge hello time 4, max age 20, forward delay 15 Bridge ID Priority 16384, Address 0001.e801.6aa8
1242 Rapid Spanning Tree Protocol (RSTP)
Configured hello time 2, max age 20, forward delay 15
Interface
Designated
Name PortID Prio Cost Sts Cost
Bridge ID
PortID
---------- ------- --- ------- -------------------- --------
Te 4/2 128.418 128 20000 FWD 20000 16384 0001.e801.6aa8 128.418
Te 4/1 128.419 128 20000 FWD 20000 16384 0001.e801.6aa8 128.419
Te 4/8 128.426 128 20000 FWD 20000 8192 0001.e805.e306 128.130
Te 4/9 128.427 128 20000 BLK 20000 8192 0001.e805.e306 128.131
Interface
Name Role PortID Prio Cost Sts Cost Link-type Edge
----------- ---- ------- --- ------- --------- ----
Te 4/2 Desg 128.418 128 20000 FWD 20000 P2P
Yes
Te 4/1 Desg 128.419 128 20000 FWD 20000 P2P
Yes
Te 4/8 Root 128.426 128 20000 FWD 20000 P2P
No
Te 4/9 Altr 128.427 128 20000 BLK 20000 P2P
No
Dell#
Example (EDS, LBK)
NOTE: "LBK_INC" (bold) means Loopback BPDU Inconsistency.
Dell#show spanning-tree rstp br Executing IEEE compatible Spanning Tree Protocol Root ID Priority 32768, Address 0001.e801.6aa8 Root Bridge hello time 2, max age 20, forward delay 15 Bridge ID Priority 32768, Address 0001.e801.6aa8 We are the root Configured hello time 2, max age 20, forward delay 15
Interface
Designated
Name PortID Prio Cost Sts Cost
Bridge ID PortID
- ---- ------- --- ------- -------------------- --------
Te 1/1 128.257 128 20000 EDS 0 32768 0001.e801.6aa8 128.257
Interface
Name Role PortID
Prio Cost Sts Cost Link-type Edge
--- ------ -------- ---- ------- --- ------- --------- ----
Te 1/1 ErrDis 128.257 128 20000 EDS 0 P2P No
Dell#show spanning-tree rstp Root Identifier has priority 32768, Address 0001.e801.6aa8 Root Bridge hello time 2, max age 20, forward delay 15, max hops 0 Bridge Identifier has priority 32768, Address 0001.e801.6aa8 Configured hello time 2, max age 20, forward delay 15, max hops 0 We are the root Current root has priority 32768, Address 0001.e801.6aa8 Number of topology changes 1, last change occurred 00:00:31 ago on Te 1/1 Port 257 (TenGigabitEthernet 1/1) is LBK_INC Discarding Port path cost 20000, Port priority 128, Port Identifier 128.257 Designated root has priority 32768, address 0001.e801.6aa8 Designated bridge has priority 32768, address 0001.e801.6aa8 Designated port id is 128.257, designated path cost 0 Number of transitions to forwarding state 1 BPDU : sent 27, received 9 The port is not in the Edge port mode
Example (Guard)
Dell#show spanning-tree rstp guard
Interface
Name Instance Sts
Guard type
--------- -------- -------------------
Te 1/1 0
INCON(Root) Rootguard
Te 1/2 0
FWD
Loopguard
Te 1/3 0
BLK
Bpduguard
Rapid Spanning Tree Protocol (RSTP) 1243
spanning-tree rstp
Configure an RSTP interface with one of these settings: port cost, edge port with optional bridge port data unit (BPDU) guard, port priority, loop guard, or root guard.
Syntax Parameters
spanning-tree rstp {cost port-cost | edge-port [bpduguard [shutdown-onviolation]] | priority priority | {loopguard | rootguard}}
cost port-cost
Enter the keyword cost then the port cost value. The range is from 1 to 200000. The defaults are:
100 Mb/s Ethernet interface = 200000 1-Gigabit Ethernet interface = 20000 10-Gigabit Ethernet interface = 2000 Port Channel interface with one 100 Mb/s Ethernet = 200000 Port Channel interface with one 1 Gigabit Ethernet = 20000 Port Channel interface with one 10 Gigabit Ethernet = 2000 Port Channel with two 1 Gigabit Ethernet = 18000 Port Channel with two 10 Gigabit Ethernet = 1800 Port Channel with two 100 Mbps Ethernet = 180000
edge-port bpduguard
Enter the keywords edge-port to configure the interface as a rapid spanning tree edge port.
(OPTIONAL) Enter the keyword portfast to enable Portfast to move the interface into Forwarding mode immediately after the root fails.
Enter the keyword bpduguard to disable the port when it receives a BPDU.
shutdown-onviolation priority priority
loopguard
rootguard
(OPTIONAL) Enter the keywords shutdown-on-violation to hardware disable an interface when a BPDU is received and the port is disabled.
Enter keyword priority then a value in increments of 16 as the priority. The range is from 0 to 240. The default is 128.
Enter the keyword loopguard to enable loop guard on an RSTP port or portchannel interface.
Enter the keyword rootguard to enable root guard on an RSTP port or portchannel interface.
Defaults
Not configured.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.4.2.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for the optional guard keyword on the C-Series, S-Series, and ESeries TeraScale.
1244 Rapid Spanning Tree Protocol (RSTP)
Usage Information
Example
Version
8.3.7.0 8.2.1.0 7.6.1.0 7.5.1.0 7.4.1.0 6.2.1.1
Description
Introduced on the S4810. Introduced the hardware shutdown-on-violation options. Introduced on the S-Series. Introduced on the C-Series. Added the optional bridge port data unit (BPDU) guard. Introduced on the E-Series.
The BPDU guard option prevents the port from participating in an active STP topology in case a BPDU appears on a port unintentionally, or is misconfigured, or is subject to a DOS attack. This option places the port into an Error Disable state if a BPDU appears and a message is logged so that the administrator can take corrective action.
NOTE: A port configured as an edge port, on an RSTP switch, immediately transitions to the Forwarding state. Only configure ports connected to end-hosts as edge ports. Consider an edge port similar to a port with a spanning-tree portfast enabled.
If you do not enable shutdown-on-violation, BPDUs are still sent to the RPM CPU.
You cannot enable STP root guard and loop guard at the same time on a port. For example, if you configure loop guard on a port on which root guard is already configured, the following error message displays: % Error: RootGuard is configured. Cannot configure LoopGuard.
Enabling Portfast BPDU guard and loop guard at the same time on a port results in a port that remains in a Blocking state and prevents traffic from flowing through it. For example, when Portfast BPDU guard and loop guard are both configured:
If a BPDU is received from a remote device, BPDU guard places the port in an Err-Disabled Blocking state and no traffic is forwarded on the port.
If no BPDU is received from a remote device, loop guard places the port in a Loop-Inconsistent Blocking state and no traffic is forwarded on the port.
Dell(conf)#interface tengigabitethernet 4/1 Dell(conf-if-gi-4/0)#spanning-tree rstp edge-port Dell(conf-if-gi-4/0)#show config ! interface TenGigabitEthernet 4/1
no ip address switchport spanning-tree rstp edge-port no shutdown Dell#
tc-flush-standard
Enable the MAC address flushing after receiving every topology change notification.
Syntax
tc-flush-standard To disable, use the no tc-flush-standard command.
Defaults
Disabled
Command Modes CONFIGURATION (conf-rstp)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Rapid Spanning Tree Protocol (RSTP) 1245
Usage Information
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.5.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
By default, Dell Networking OS implements an optimized flush mechanism for RSTP. This implementation helps in flushing MAC addresses only when necessary (and less often), allowing for faster convergence during topology changes. However, if a standards-based flush mechanism is needed, you can turn on this knob command to enable flushing MAC addresses after receiving every topology change notification.
1246 Rapid Spanning Tree Protocol (RSTP)
50
Software-Defined Networking (SDN)
Dell Networking operating software supports Software-Defined Networking (SDN). For more information, refer to the SDN Deployment Guide.
Software-Defined Networking (SDN) 1247
51
Security
The commands in this chapter are available on Dell Networking OS. For configuration details, see the Security chapter in the Dell Networking OS Configuration Guide.
NOTE: Dell Networking OS implements LEAP with MSCHAP v2 supplicant.
Topics:
� AAA Accounting Commands � Authorization and Privilege Commands � Obscure Password Commands � Authentication and Password Commands � RADIUS Commands � TACACS+ Commands � Port Authentication (802.1X) Commands � SSH Server and SCP Commands � Secure DHCP Commands � Role-Based Access Control Commands
AAA Accounting Commands
AAA Accounting enables tracking of services that users are accessing and the amount of network resources being consumed by those services. When you enable AAA Accounting, the network server reports user activity to the TACACS+ security server in the form of accounting records. Each accounting record is comprised of accounting AV pairs and is stored on the access control server. As with authentication and authorization, you must configure AAA Accounting by defining a named list of accounting methods, and then applying that list to various interfaces.
aaa accounting
Enable AAA Accounting and create a record for monitoring the accounting function.
Syntax Parameters
aaa accounting {system | exec | commands level | role role-name} {name | default}{start-stop | wait-start | stop-only} {tacacs+}
To disable AAA Accounting, use the no aaa accounting {system | exec | command level} {name | default}{start-stop | wait-start | stop-only} {tacacs+} command.
system
Enter the keyword system to send accounting information of any other AAA configuration.
exec
Enter the keyword exec to send accounting information when a user has logged in to EXEC mode.
commands {level Enter the keyword command then a privilege level for accounting of commands | role role-name executed at that privilege level or enter the keyword role then the role name for
accounting of commands executed by a user with that user role.
name | default Enter one of the following:
For name, enter a user-defined name of a list of accounting methods.
1248 Security
start-stop
wait-start stop-only tacacs+
For default, the default accounting methods used.
Enter the keywords start-stop to send a "start accounting" notice at the beginning of the requested event and a "stop accounting" notice at the end of the event.
Enter the keywords wait-start to ensure that the TACACS+ security server acknowledges the start notice before granting the user's process request.
Enter the keywords stop-only to instruct the TACACS+ security server to send a "stop record accounting" notice at the end of the requested user process.
Enter the keyword tacacs+ to use TACACS+ data for accounting. The Dell Networking OS currently only supports TACACS+ accounting.
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Added support for roles on the Z9000, S6000, S4820T, S4810, and MXL Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Example
In the example above, TACACS+ accounting is used to track all usage of EXEC command and commands on privilege level 15. Privilege level 15 is the default. If you want to track usage at privilege level 1 for example, use the aaa accounting command 1 command.
Dell(conf)# aaa accounting exec default start-stop tacacs+ Dell(conf)# aaa accounting command 15 default start-stop tacacs+ Dell(conf)# aaa accounting command role secaadmin default start-stop tacacs+
Related Commands
enable password -- changes the password for the enable command. login authentication -- enables AAA login authentication on the terminal lines. password -- creates a password. tacacs-server host -- specifies a TACACS+ server host.
Security 1249
accounting
Apply an accounting method list to terminal lines.
Syntax Parameters
accounting {exec | commands {level | role role-name} method-list
exec
Enter the keyword exec to apply an EXEC level accounting method list.
commands {level Enter the keywords commands level to apply an EXEC and CONFIGURATION | role role-name} level accounting method list or enter the keyword role and then the role name for
accounting of commands executed by a user with that user role.
method-list
Enter a method list that you defined using the aaa accounting exec or aaa accounting commands.
Defaults
none
Command Modes LINE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Added support for roles on the Z9000, S6000, S4820T, S4810, MXL. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Related Commands
aaa accounting -- enables AAA Accounting and creates a record for monitoring the accounting function.
aaa accounting suppress
Prevent the generation of accounting records of users with the user name value of NULL.
Syntax
aaa accounting suppress null-username
To permit accounting records to users with user name value of NULL, use the no aaa accounting suppress null-username command.
Defaults
Accounting records are recorded for all users.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
1250 Security
Usage Information
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4280T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Dell Networking OS issues accounting records for all users on the system, including users whose username string, due to protocol translation, is NULL. For example, a user who comes on line with the aaa authentication login method-list none command is applied. To prevent the accounting records from being generated for sessions that do not have user names associated to them, use the aaa accounting suppress command.
aaa radius group
Configure the RADIUS server group that is used for Authentication, Authorization and Accounting.
Syntax
aaa radius group group-name To remove the RADIUS group configuration, use the no aaa radius group group-name command.
Parameters
group-name
Enter the name of the RADIUS server group.
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4.(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the S-Series and Z-Series.
Usage Information
You can use this command to configure the group of Radius servers used for Authentication, Authorization, and Accounting purposes.
If the RADIUS group is not configured for Authentication, Authorization, and Accounting, then globally configured Radius servers are used for the purposes.
When the RADIUS group is removed, the AAA configuration is also removed.
Security 1251
Example
Dell(conf)#radius-server group group1 Dell(conf-radius-group)#radius-server host 1.1.1.1 key secret Dell(conf-radius-group)#radius-server host 2.2.2.2 key secret Dell(conf-radius-group)#radius-server vrf vrf1 source-interface tengigabitethernet 1/42 Dell(conf)#exit Dell(conf)#aaa radius group group1
show accounting
Display the active accounting sessions for each online user.
Syntax
show accounting
Defaults
none
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.5(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Added support for roles on the Z9500. Added support for roles on the Z9000, S6000, S4820T, S4810, MXL. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Example
This command steps through all active sessions and then displays the accounting records for the active account functions.
Dell#show accounting Active accounted actions on tty2, User admin Priv 1 Role
Task ID 2, EXEC Accounting record, 00:02:03 Elapsed, service=shell Active accounted actions on tty3, User ad Priv 15 Role
Task ID 7, EXEC Accounting record, 00:01:22 Elapsed, service=shell Active accounted actions on tty4, User ad Priv 15 Role
Task ID 11, EXEC Accounting record, 00:00:35 Elapsed, service=shell Active accounted actions on tty5, User ad1 Priv 1 Role sysadmin
Task ID 16, EXEC Accounting record, 00:00:04 Elapsed, service=shell Dell#
Related Commands
aaa accounting -- enables AAA Accounting and creates a record for monitoring the accounting function.
1252 Security
Authorization and Privilege Commands
To set command line authorization and privilege levels, use the following commands.
authorization
Apply an authorization method list to terminal lines.
Syntax Parameters
authorization {exec | commands {level | role role-name}} method-list
exec
Enter the keyword exec to apply an EXEC level authorization method list.
commands {level Enter the keyword commands followed by either a privilege level for accounting of | role role-name} commands executed at that privilege level, or enter the keyword role then the
role name for authorization of commands executed by a user with that user role.
method-list
Enter a method list that you defined using the aaa accounting exec or aaa accounting commands.
Defaults
none
Command Modes LINE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Added support for roles on the Z9000, S6000, S4820T, S4810, and MXL. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Related Commands
aaa authorization commands -- sets the parameters that restrict (or permit) a user's access to EXEC and CONFIGURATION level commands
aaa authorization exec -- sets the parameters that restrict (or permit) a user's access to EXEC level commands.
Security 1253
aaa authorization commands
Set parameters that restrict (or permit) a user's access to EXEC and CONFIGURATION level commands.
Syntax
aaa authorization commands {level | role role-name}{name|default} {local | tacacs+| none}
Undo a configuration with the no aaa authorization commands {level | role rolename} {name|default} {local | tacacs+ | none} command.
Parameters
commands level
role role-name name default local tacacs+ none
Enter the keyword commands then the command privilege level for command level authorization. Enter the keyword role then the role name. Define a name for the list of authorization methods. Define the default list of authorization methods. Use the authorization parameters on the system to perform authorization. Use the TACACS+ protocol to perform authorization. Enter the keyword none to apply no authorization.
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Added support for roles on the Z9000, S6000, S4820T, S4810, MXL Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Added support for RADIUS.
aaa authorization config-commands
Set parameters that restrict (or permit) a user's access to EXEC level commands.
Syntax
aaa authorization config-commands
Disable authorization checking for CONFIGURATION level commands using the no aaa authorization config-commands command.
Defaults
Enabled when you configure aaa authorization commands command.
Command Modes CONFIGURATION
1254 Security
Command History
Usage Information
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the E-Series.
By default, the aaa authorization commands command configures the system to check both EXEC level and CONFIGURATION level commands. Use the command no aaa authorization configcommands to enable only EXEC-level command checking.
aaa authorization exec
Set parameters that restrict (or permit) a user's access to EXEC-level commands.
Syntax
aaa authorization exec {name | default} {local || tacacs+ || ifauthenticated || none}
To disable authorization checking for EXEC level commands, use the no aaa authorization exec command.
Parameters
name default local tacacs+ none
Define a name for the list of authorization methods. Define the default list of authorization methods. Use the authorization parameters on the system to perform authorization. Use the TACACS+ protocol to perform authorization. Enter the keyword none to apply no authorization.
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T.
Security 1255
Version
8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.1.1.0
Description
Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Added support for RADIUS.
privilege level (CONFIGURATION mode)
Change the access or privilege level of one or more commands.
Syntax
privilege mode {level level command | reset command}
To delete access to a level and command, use the no privilege mode level level command command.
Parameters
mode
Enter one of the following keywords as the mode for which you are controlling access:
configure for CONFIGURATION mode exec for EXEC mode interface for INTERFACE modes line for LINE mode route-map for ROUTE-MAP mode router for ROUTER OSPF, ROUTER RIP, ROUTER ISIS and ROUTER BGP
modes
level level
Enter the keyword level then a number for the access level. The range is from 0 to 15.
Level 1 is EXEC mode and Level 15 allows access to all CLI modes and commands.
reset command
Enter the keyword reset to return the security level to the default setting.
Enter the command's keywords to assign the command to a certain access level. You can enter one or all of the keywords.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
1256 Security
Usage Information
Version
7.6.1.0 7.5.1.0 pre-6.1.1.0
Description
Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
To define a password for the level to which you are assigning privilege or access, use the enable password command.
privilege level (LINE mode)
Change the access level for users on the terminal lines.
Syntax
privilege level level To delete access to a terminal line, use the no privilege level level command.
Parameters
level level
Enter the keyword level then a number for the access level. The range is from 0 to 15.
Level 1 is EXEC mode and Level 15 allows access to all CLI modes.
Defaults
level = 15
Command Modes LINE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Obscure Password Commands
To enable the obscure password, use the following commands.
service obscure-passwords
Enable the obscuring of passwords and keys.
Syntax
service obscure-passwords
Security 1257
Enable the obscuring of passwords and keys, including RADIUS, TACACS+ keys, router authentication strings, VRRP authentication, use the service obscure-passwords command.
Defaults
Disabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.6(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S4810, S4820T, S5000, S6000, Z9000, Z9500, MXL
Usage Information
Related Commands
By default, the service password-encryption command stores encrypted passwords. For greater security, you can also use the service obscure-passwords command to prevent a user from reading the passwords and keys, including RADIUS, TACACS+ keys, router authentication strings, VRRP authentication by obscuring this information. Passwords and keys are stored encrypted in the configuration file and by default are displayed in the encrypted form when the configuration is displayed. Enabling theservice obscure-passwords command displays asterisks instead of the encrypted passwords and keys. This command prevents a user from reading these passwords and keys by obscuring this information with asterisks.
Password obscuring masks the password and keys for display only but does not change the contents of the file. The string of asterisks is the same length as the encrypted string for that line of configuration. To verify that you have successfully obscured passwords and keys, use the show running-config command orshow startup-config command.
If you are using role-based access control (RBAC), only the system administrator and security administrator roles can enable the service obscure-password command.
show running-config-- Display the current configuration and display changes from the default values.
service password-encryption-- Encrypts all passwords configured in the system.
Authentication and Password Commands
To manage access to the system, use the following the commands.
aaa authentication enable
Configure AAA Authentication method lists for user access to EXEC privilege mode (the "Enable" access).
Syntax
aaa authentication enable {default | method-list-name} method [... method2]
To return to the default setting, use the no aaa authentication enable {default | method-list-name} method [... method2] command.
Parameters
default
method-listname method
Enter the keyword default then the authentication methods to use as the default sequence of methods for the Enable login. The default is default enable.
Enter a text string (up to 16 characters long) to name the list of enabled authentication methods activated at login.
Enter one of the following methods:
1258 Security
... method2
enable: use the password the enable password command defines in CONFIGURATION mode.
line: use the password the password command defines in LINE mode. none: no authentication. radius: use the RADIUS servers configured with the radius-server host
command. tacacs+: use the TACACS+ server(s) configured with the tacacs-server
host command.
(OPTIONAL) In the event of a "no response" from the first method, Dell Networking OS applies the next configured method.
Defaults
Use the enable password.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
By default, the Enable password is used. If you configure aaa authentication enable default, Dell Networking OS uses the methods defined for Enable access instead.
Methods configured with the aaa authentication enable command are evaluated in the order they are configured. If authentication fails using the primary method, Dell Networking OS employs the second method (or third method, if necessary) automatically. For example, if the TACACS+ server is reachable, but the server key is invalid, Dell Networking OS proceeds to the next authentication method. The TACACS+ is incorrect, but the user is still authenticated by the secondary method.
enable password -- changes the password for the enable command.
login authentication -- enables AAA login authentication on the terminal lines.
password -- creates a password.
radius-server host -- specifies a RADIUS server host.
tacacs-server host -- specifies a TACACS+ server host.
Security 1259
aaa authentication login
Configure AAA Authentication method lists for user access to EXEC mode (Enable log-in).
Syntax Parameters
aaa authentication login {method-list-name | default} method [... method4]
To return to the default setting, use the no aaa authentication login {method-list-name | default} command.
method-listname default method
... method4
Enter a text string (up to 16 characters long) as the name of a user-configured method list that can be applied to different lines.
Enter the keyword default to specify that the method list specified is the default method for all terminal lines.
Enter one of the following methods:
enable: use the password the enable password command defines in CONFIGURATION mode. Not available if role-only is in use.
line: use the password the password command defines in LINE mode. Not available if role-only is in use.
local: use the password for the userid contained in the local password database.
none: no authentication. Not available if role-only is in use. radius: use the RADIUS servers configured with the radius-server host
command. tacacs+: use the TACACS+ servers configured with the tacacs-server
host command.
(OPTIONAL) Enter up to four additional methods. In the event of a "no response" from the first method, the system applies the next configured method (up to four configured methods).
Defaults
Not configured (that is, no authentication is performed).
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.5(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Added support for roles Z9500. Added support for roles on the Z9000, S6000, S4820T, S4810, MXL Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
1260 Security
Usage Information
Related Commands
Version
pre-6.2.1.0
Description
Introduced on the E-Series.
By default, the locally configured username password is used. If you configure aaa authentication login default, Dell Networking OS uses the methods this command defines for login instead.
Methods configured with the aaa authentication login command are evaluated in the order they are configured. If users encounter an error with the first method listed, Dell Networking OS applies the next method configured. If users fail the first method listed, no other methods are applied. The only exception is the local method. If the user's name is not listed in the local database, the next method is applied. If the correct user name/password combination is not entered, the user is not allowed access to the switch.
NOTE: If authentication fails using the primary method, Dell Networking OS employs the second method (or third method, if necessary) automatically. For example, if the TACACS+ server is reachable, but the server key is invalid, Dell Networking OS proceeds to the next authentication method. The TACACS+ is incorrect, but the user is still authenticated by the secondary method.
After configuring the aaa authentication login command, configure the login authentication command to enable the authentication scheme on terminal lines.
Connections to the SSH server work with the following login mechanisms: local, radius, and tacacs.
login authentication -- enables AAA login authentication on the terminal lines.
password -- creates a password.
radius-server host -- specifies a RADIUS server host.
tacacs-server host -- specifies a TACACS+ server host.
access-class
Restrict incoming connections to a particular IP address in a defined IP access control list (ACL).
Syntax
access-class access-list-name To delete a setting, use the no access-class command.
Parameters
access-list-name Enter the name of an established IP Standard ACL.
Defaults
Not configured.
Command Modes LINE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Security 1261
Related Commands
Version
7.6.1.0 7.5.1.0 pre-6.2.1.1
Description
Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
line -- applies an authentication method list to the designated terminal lines.
ip access-list standard -- names (or selects) a standard access list to filter based on the IP address.
ip access-list extended -- names (or selects) an extended access list based on the IP addresses or protocols.
enable password
Change the password for the enable command.
Syntax
enable password [level level] [encryption-type] password
To delete a password, use the no enable password [encryption-type] password [level level] command.
Parameters
level level encryption-type
(OPTIONAL) Enter the keyword level then a number as the level of access. The range is from 1 to 15.
(OPTIONAL) Enter the number 7 or 0 as the encryption type.
Enter a 7 then a text string as the hidden password. The text string must be a password that was already encrypted by a Dell Networking router.
Use this parameter only with a password that you copied from the show running-config file of another Dell Networking router.
password
Enter a text string, up to 32 characters long, as the clear text password.
Defaults
No password is configured. level = 15.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
1262 Security
Usage Information
Related Commands
To control access to command modes, use this command to define a password for a level and use the privilege level (CONFIGURATION mode) command. Passwords must meet the following criteria:
Start with a letter, not a number. Passwords can have a regular expression as the password. To create a password with a regular
expression in it, use CNTL + v prior to entering regular expression. For example, to create the password abcd]e, you type "abcd CNTL v ]e". When the password is created, you do not use the CNTL + v key combination and enter "abcd]e".
NOTE: The question mark (?) and the tilde (~) are not supported characters.
show running-config -- views the current configuration.
privilege level (CONFIGURATION mode) -- controls access to the command modes within the switch.
enable restricted
Allows Dell Networking technical support to access restricted commands.
Syntax
enable restricted [encryption-type] password To disallow access to restricted commands, use the no enable restricted command.
Parameters
encryption-type
(OPTIONAL) Enter the number 7 as the encryption type.
Enter 7 followed a text string as the hidden password. The text string must be a password that was already encrypted by a Dell Networking router.
Use this parameter only with a password that you copied from the show running-config file of another Dell Networking router.
password
Enter a text string, up to 32 characters long, as the clear text password.
Defaults
Command History
Not configured.
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Only Dell Networking Technical Support staff use this command.
Security 1263
enable secret
Change the password for the enable command.
Syntax
enable secret [level level] [encryption-type] password
To delete a password, use the no enable secret [encryption-type] password [level level] command.
Parameters
level level encryption-type
(OPTIONAL) Enter the keyword level then a number as the level of access. The range is from 1 to 15.
(OPTIONAL) Enter the number 5 or 0 as the encryption type.
Enter a 5 then a text string as the hidden password. The text string must be a password that was already encrypted by a Dell Networking router.
Use this parameter only with a password that you copied from the show running-config file of another Dell Networking router.
password
Enter a text string, up to 32 characters long, as the clear text password.
Defaults
No password is configured. level = 15.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
To control access to command modes, use this command to define a password for a level and use the privilege level (CONFIGURATION mode) command.
Passwords must meet the following criteria:
Start with a letter, not a number. Passwords can have a regular expression as the password. To create a password with a regular
expression in it, use CNTL + v prior to entering regular expression. For example, to create the password abcd]e, you type "abcd CNTL v ]e". When the password is created, you do not use the CNTL + v key combination and enter "abcd]e".
NOTE: The question mark (?) and the tilde (~) are not supported characters.
Related Commands
show running-config -- views the current configuration. privilege level (CONFIGURATION mode) -- controls access to the command modes within the switch.
1264 Security
login authentication
To configure authentication for console or remote access, apply an authentication method list.
Syntax
login authentication {method-list-name | default}
To use the local user/password database for login authentication, use the no login authentication command.
Parameters
method-listname
default
Enter the keywords method-list-name to specify that method list, created in the aaa authentication login command, to be applied to the designated terminal line.
Enter the keyword default to specify that the default method list, created in the aaa authentication login command, is applied to the terminal line.
Defaults
No authentication is performed on the console lines. Local authentication is performed on the virtual terminal and auxiliary lines.
Command Modes LINE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.6.0.0 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Revised introductory and usage guidelines description. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
If you configure the aaa authentication login default command, the login authentication default command automatically is applied to all terminal lines.
When configuring authentication, consider the following:
If you configure the default authentication list using the default keyword, the list applies it to all the local and remote connections globally, unless you have specified some another authentication list for a specific connection.
If you configure an authentication lists other than default, you must apply those authentication lists to each connection.
If you configure the aaa authentication login default command, the login authentication default command automatically is applied to all terminal lines.
Related Commands
aaa authentication login -- selects the login authentication methods.
Security 1265
password
Specify a password for users on terminal lines.
Syntax
password [encryption-type] password To delete a password, use the no password password command.
Parameters
encryption-type
(OPTIONAL) Enter either zero (0) or 7 as the encryption type for the password entered. The options are
0 is the default and means the password is not encrypted and stored as clear text.
7 means that the password is encrypted and hidden.
password
Enter a text string up to 32 characters long. The first character of the password must be a letter. You cannot use spaces in the password.
Defaults
No password is configured.
Command Modes LINE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
Dell Networking OS prompts users for these passwords when the method for authentication or authorization used is "line".
enable password -- sets the password for the enable command. login authentication -- configures an authentication method to log in to the switch. service password-encryption -- encrypts all passwords configured in Dell Networking OS . radius-server key -- configures a key for all RADIUS communications between the switch and the RADIUS host server. tacacs-server key -- configures a key for communication between a TACACS+ server and client. username -- establishes an authentication system based on user names.
1266 Security
password-attributes
Configure the password attributes (strong password).
Syntax
password-attributes [min-length number] [max-retry number] [lockout-period minutes][character-restriction [upper number] [lower number] [numeric number] [special-char number]]
To return to the default, use the no password-attributes [min-length number] [maxretry number] [lockout-period minutes] [character-restriction [upper number] [lower number] [numeric number] [special-char number]] command.
Parameters
min-length number max-retry number lockout-period minutes
characterrestriction upper number
lower number
numeric number
special-char number
(OPTIONAL) Enter the keywords min-length then the number of characters. The range is from 0 to 32 characters.
(OPTIONAL) Enter the keywords max-retry then the number of maximum password retries. The range is from 0 to 16.
(OPTIONAL) Enter the keyword lockout-period then the number of minutes. The range is from 1 to 1440 minutes. The default is 0 minutes and the lockoutperiod is not enabled. This parameter enhances the security of the switch by locking out sessions on the Telnet or SSH sessions for which there has been a consecutive failed login attempts. The console is not locked out.
(OPTIONAL) Enter the keywords character-restriction to indicate a character restriction for the password.
(OPTIONAL) Enter the keyword upper then the upper number. The range is from 0 to 31.
(OPTIONAL) Enter the keyword lower then the lower number. The range is from 0 to 31.
(OPTIONAL) Enter the keyword numeric then the numeric number. The range is from 0 to 31.
(OPTIONAL) Enter the keywords special-char then the number of special characters permitted. The range is from 0 to 31.
The following special characters are supported:
! " # % & ' ( ) ; < = > ? [ \ ] * + , - . / : ^ _ { | } ~ @ $
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.5(0.0)
9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced lockout-period option on the Z9500. Introduced lockout-period option on the Z9000, S6000, S4820T, S4810, and MXL. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000.
Security 1267
Example
Related Commands
Version
8.3.7.0 7.6.1.0 7.5.1.0 6.3.1.0
Description
Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
In the following example, after 5 un-successful login attempts, the session (SSH/TELNET) goes into a locked state for 5 minutes. If all the 10 sessions are locked out with 5 un-successful attempts in each session, no users can login during the lockout-period.
Dell(conf)#password-attributes max-retry 5 lockout-period 5
password -- specifies a password for users on terminal lines.
service password-encryption
Encrypt all passwords configured in Dell Networking OS.
Syntax
service password-encryption To store new passwords as clear text, use the no service password-encryption command.
Defaults
Enabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
CAUTION: Encrypting passwords with this command does not provide a high level of security. When the passwords are encrypted, you cannot return them to plain text unless you re-configure them. To remove an encrypted password, use the no password password command.
To keep unauthorized people from viewing passwords in the switch configuration file, use the service password-encryption command. This command encrypts the clear-text passwords created for user name passwords, authentication key passwords, the privileged command password, and console and virtual terminal line access passwords.
1268 Security
To view passwords, use the show running-config command.
show privilege
View your access level.
Syntax
show privilege
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Example
Dell#show privilege Current privilege level is 15. Dell# Dell#show privilege Current privilege level is 14. Dell# Dell#show privilege Current privilege level is 10. Dell#
Related Commands
privilege level (CONFIGURATION mode) -- assigns access control to different command modes.
show users
Allows you to view information on all users logged in to the switch.
Syntax Parameters
show users [all]
all
(OPTIONAL) Enter the keyword all to view all terminal lines in the switch.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Security 1269
Usage Information
Example
Related Commands
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.5(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Added support for roles on the Z9500. Added support for roles on the Z9000, S6000, S4820T, S4810, MXL. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
The following describes the show user command shown in the following example.
Field
Description
(untitled)
Indicates with an asterisk (*) which terminal line you are using.
Line
Displays the terminal lines currently in use.
User
Displays the user name of all users logged in.
Host(s)
Displays the terminal line status.
Location
Displays the IP address of the user.
Dell# show users
Authorization Mode: role or privilege
Line
User
Host(s)
Location
* 0 console 0
idle
2 vty 0
admin
idle
10.16.127.35
3 vty 1
ad
idle
10.16.127.145
4 vty 2
ad1
1
idle
10.16.127.141
5 vty 3
ad1
1
idle
10.16.127.145
6 vty 4
admin
idle
10.16.127.141
7 vty 5
ad
idle
10.16.127.141
Dell#
username -- enables a user.
Role unassigned unassigned
unassigned sysadmin sysadmin unassigned
unassigned
Priv 1 1 15
1 15
1270 Security
timeout login response
Specify how long the software waits for the login input (for example, the user name and password) before timing out.
Syntax
timeout login response seconds To return to the default values, use the no timeout login response command.
Parameters
seconds
Enter a number of seconds the software waits before logging you out. The range is:
VTY: the range is from 1 to 30 seconds, the default is 30 seconds. Console: the range is from 1 to 300 seconds, the default is 0 seconds (no
timeout). AUX: the range is from 1 to 300 seconds, the default is 0 seconds (no
timeout).
Defaults
See the defaults settings shown in Parameters.
Command Modes LINE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
The software measures the period of inactivity defined in this command as the period between consecutive keystrokes. For example, if your password is "password" you can enter "p" and wait 29 seconds to enter the next letter.
username
Establish an authentication system based on user names.
Syntax
username name [access-class access-list-name] [nopassword | {password | secret} [encryption-type] password] [privilege level] [role role-name]
If you do not want a specific user to enter a password, use the nopassword option.
To delete authentication for a user, use the no username name command.
Parameters
name
Enter a text string for the name of the user up to 63 characters.
access-class
Enter the keywords access-class then the name of a configured access control
access-list-name list (either an IP access control list or MAC access control list).
Security 1271
nopassword password secret encryption-type
password privilege level role role-name secret
Enter the keyword nopassword to specify that the user should not enter a password.
Enter the keyword password then the encryption-type or the password.
Enter the keyword secret then the encryption-type or the password.
Enter an encryption type for the password that you enter.
0 directs the system to store the password as clear text. It is the default encryption type when using the password option.
7 to indicate that a password encrypted using a DES hashing algorithm follows. This encryption type is available with the password option only.
5 to indicate that a password encrypted using an MD5 hashing algorithm follows. This encryption type is available with the secret option only, and is the default encryption type for this option.
Enter a string up to 32 characters long.
Enter the keyword privilege then a number from zero (0) to 15.
Enter the keyword role followed by the role name to associate with that user ID.
Enter the keyword secret then the encryption type.
Defaults
The default encryption type for password option is 0. The default encryption type for secret option is 0. The default value of privilege level is 1.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0
7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Added support for roles on the Z9000, S6000, S4820T, S4810, MXL. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for the secret option and the MD5 password encryption. Extended the name from 25 to 63 characters. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
To view the defined user names, use the show running-config user command.
password -- specifies a password for users on terminal lines. show running-config -- views the current configuration.
1272 Security
RADIUS Commands
The following RADIUS commands are supported by Dell Networking OS.
debug radius
View RADIUS transactions to assist with troubleshooting.
Syntax
debug radius To disable debugging of RADIUS, use the no debug radius command.
Defaults
Disabled.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
ip radius source-interface
Specify an interface's IP address as the source IP address for RADIUS connections.
Syntax
ip radius source-interface interface To delete a source interface, use the no ip radius source-interface command.
Parameters
interface
Enter the following keywords and slot/port or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a Null interface, enter the keyword null then the Null interface number. For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Security 1273
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.5.1.0 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
radius-server deadtime
Configure a time interval during which non-responsive RADIUS servers to authentication requests are skipped.
Syntax
radius-server deadtime seconds
To disable this function or return to the default value, use the no radius-server deadtime command.
Parameters
seconds
Enter a number of seconds during which non-responsive RADIUS servers are skipped. The range is from 0 to 2147483647 seconds. The default is 0 seconds.
Defaults
0 seconds
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
1274 Security
Version
7.6.1.0 7.5.1.0 pre-6.1.1.0
Description
Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
radius-server group
Creates or deletes a group of radius servers.
Syntax Parameters
radius-server group group-name
group-name
Enter the group name that denotes the group of RADIUS servers.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4.(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the S-Series and Z-Series.
Example
Dell(conf)#radius-server group group1 Dell(conf-radius-group)#radius-server host 1.1.1.1 key secret Dell(conf-radius-group)#radius-server host 2.2.2.2 key secret Dell(conf-radius-group)#radius-server vrf vrf1 source-interface tengigabitethernet 1/36 Dell(conf-radius-group)#show config ! radius-server group group1 radius-server vrf vrf1 source-interface TenGigabitEthernet 1/36 radius-server host 1.1.1.1 key 7 9a2f3ec0c65c6f41 radius-server host 2.2.2.2 key 7 9a2f3ec0c65c6f41 Dell(conf-radius-group)#
Related Commands
login authentication -- sets the database to be checked when a user logs in. radius-server key -- sets an authentication key for RADIUS communications. radius-server retransmit -- sets the number of times the RADIUS server attempts to send information. radius-server timeout -- sets the time interval before the RADIUS server times out.
radius-server host
Configure a RADIUS server host.
Syntax Parameters
radius-server host {hostname | ipv4-address | ipv6-address} [auth-port port-number] [retransmit retries] [timeout seconds] [key [encryption-type] key]
hostname
Enter the name of the RADIUS server host.
Security 1275
ipv4-address | ipv6-address auth-port portnumber retransmit retries
timeout seconds
key [encryptiontype] key
Enter the IPv4 address (A.B.C.D) or IPv6 address (X:X:X:X::X) of the RADIUS server host.
(OPTIONAL) Enter the keywords auth-port then a number as the port number. The range is from zero (0) to 65535. The default port-number is 1812.
(OPTIONAL) Enter the keyword retransmit then a number as the number of attempts. This parameter overwrites the radius-server retransmit command. The range is from zero (0) to 100. The default is 3 attempts.
(OPTIONAL) Enter the keyword timeout then the seconds the time interval the switch waits for a reply from the RADIUS server. This parameter overwrites the radius-server timeout command. The range is from 0 to 1000. The default is 5 seconds.
(OPTIONAL) Enter the keyword key then an optional encryption-type and a string up to 42 characters long as the authentication key. The RADIUS host server uses this authentication key and the RADIUS daemon operating on this switch.
For the encryption-type, enter either zero (0) or 7 as the encryption type for the key entered. The options are:
0 is the default and means the password is not encrypted and stored as clear text.
7 means that the password is encrypted and hidden.
Configure this parameter last because leading spaces are ignored.
Defaults
Not configured.
Command Modes RADIUS SERVER GROUP CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.4.1.0 8.3.7.0 7.7.1.0 7.6.1.0 7.5.1.0 pre-6.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for IPv6. Introduced on the S4810. Authentication key length increased to 42 characters. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
To configure any number of RADIUS server hosts for each server host that is configured, use this command. Dell Networking OS searches for the RADIUS hosts in the order they are configured in the software.
The global default values for the timeout, retransmit, and key optional parameters are applied, unless those values are specified in the radius-server host or other commands. To return to the
1276 Security
Example
Related Commands
global default values, if you configure the timeout, retransmit, or key values, include those keywords when using the no radius-server host command syntax.
You can use duplicate host names or IP addresses among RADIUS groups. However, you cannot use duplicate host names or IP addresses within the same RADIUS group. If a VRF is not configured on the RADIUS group, then servers configured in the group are considered to be on the default VRF. RADIUS servers that are configured in the CONFIGURATION mode are also considered to be on the default VRF.
You must configure the RADIUS group explicitly with the aaa radius group command in order for the AAA servers to use the group of RADIUS servers. The 802.1x servers use the group of RADIUS servers based on the VRF where the 802.1x request is received. As a result, it is possible that both globally configured RADIUS servers as well as the group-configured RADIUS servers (without VRF or default VRF) are used for processing the 802.1x requests that are received at the default VRF. The order in which the RADIUS servers are tried depends on the order in which the RADIUS servers are configured.
Dell(conf)#radius-server group group1 Dell(conf-radius-group)#radius-server host 1.1.1.1 key secret Dell(conf-radius-group)#no radius-server host 1.1.1.1
login authentication -- sets the database to be checked when a user logs in.
radius-server key -- sets an authentication key for RADIUS communications.
radius-server retransmit -- sets the number of times the RADIUS server attempts to send information.
radius-server timeout -- sets the time interval before the RADIUS server times out.
radius-server vrf
Create an association between a RADIUS server group and a VRF and source interface. ud
Syntax
radius-server vrf vrf-name [source-interface interface]
To delete the association between a RADIUS server group and a VRF and source interface, use the no radius-server vrf vrf-name [source-interface interface] command.
Parameters
vrf vrf-name interface
Enter the keyword vrf and then the name of the VRF to associate a RADIUS server group with that VRF.
Enter the following keywords and slot/port or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For a port channel interface, enter the keywords port-channel then a number.
For a Null interface, enter the keyword null then the Null interface number. For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Defaults
Not configured.
Command Modes RADIUS SERVER GROUP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Security 1277
Usage Information
Example
Version
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.7(0.0) 9.5(0.0) 9.4(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S-Series and Z9000.
You can use this command to associate a group of RADIUS servers with a VRF and source interface. You can configure the source interface only with the VRF attribute and source interface is optional with the VRF attributes.
If VRF is not configured on the RADIUS group, then the group is considered to be on the default VRF. It is possible to use the default VRF name; however, you cannot configure the source interface with the default VRF as such a configuration results in conflicts between the source interfaces corresponding to the 802.1x supplicants on that default VRF.
RADIUS groups and VRFs have one-to-one mapping. If a VRF is configured with one RADIUS group, then you cannot use the same VRF with another RADIUS group. When the VRF is removed, then the corresponding RADIUS group is also removed automatically.
Dell(conf)#radius-server group group1 Dell(conf-radius-group)#radius-server vrf vrf1 source-interface tengigabitethernet 1/40 Dell(conf)#radius-server group group2 Dell(conf-radius-group)#radius-server vrf default
radius-server key
Configure a key for all RADIUS communications between the switch and the RADIUS host server.
Syntax
radius-server key [encryption-type] key To delete a password, use the no radius-server key command.
Parameters
encryption-type
(OPTIONAL) Enter either zero (0) or 7 as the encryption type for the key entered. The options are:
0 is the default and means the key is not encrypted and stored as clear text. 7 means that the key is encrypted and hidden.
key
Enter a string that is the key to be exchanged between the switch and RADIUS
servers. It can be up to 42 characters long.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON.
1278 Security
Usage Information
Related Commands
Version
9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.6.1.0 7.5.1.0 pre-6.2.1.0
Description
Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Authentication key length increased to 42 characters. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
The key configured on the switch must match the key configured on the RADIUS server daemon. If you configure the key parameter in the radius-server host command, the key configured with the radius-server key command is the default key for all RADIUS communications.
radius-server host -- configures a RADIUS host.
radius-server retransmit
Configure the number of times the switch attempts to connect with the configured RADIUS host server before declaring the RADIUS host server unreachable.
Syntax
radius-server retransmit retries To configure zero retransmit attempts, use the no radius-server retransmit command. To return to the default setting, use the radius-server retransmit 3 command.
Parameters
retries
Enter a number of attempts that FTOS tries to locate a RADIUS server. The range is from zero (0) to 100. The default is 3 retries.
Defaults
3 retries
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Security 1279
Related Commands
Version
pre-6.2.1.0
Description
Introduced on the E-Series.
radius-server host -- configures a RADIUS host.
radius-server timeout
To reply to a request, configure the amount of time the RADIUS client (the switch) waits for a RADIUS host server .
Syntax
radius-server timeout seconds To return to the default value, use the no radius-server timeout command.
Parameters
seconds
Enter the number of seconds between an unsuccessful attempt and the Dell Networking OS times out. The range is from zero (0) to 1000 seconds. The default is 5 seconds.
Defaults
5 seconds
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Related Commands
radius-server host -- configures a RADIUS host.
TACACS+ Commands
Dell Networking OS supports TACACS+ as an alternate method for login authentication.
tacacs-server group
Creates a group of TACACS servers to be used for Authentication, Authorization, and Accounting..
Syntax
aaa tacacsgroup group-name
1280 Security
Parameters
To delete a group of TACACS servers, use the no tacacs-server group group-name command .
group-name
Enter the name of the TACACS server group.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4.(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the S-Series and Z-Series.
Usage Information
Example
If the TACACS group is not configured for Authentication, Authorization, and Accounting, then globally configured TACACS servers are used for the purposes. When the TACACS group is removed, the AAA configuration is also removed.
Dell(conf)#tacacs-server group group1 Dell(conf-tacacs-group)#tacacs-server host 1.1.1.1 key secret Dell(conf-tacacs-group)#tacacs-server host 2.2.2.2 key secret Dell(conf-tacacs-group)#tacacs-server vrf vrf1 source-interface tengigabitethernet 1/47 Dell(conf)#exit Dell(conf)#aaa tacacsgroup group1
Related Commands
aaa authentication login -- specifies the login authentication method. tacacs-server key -- configures a TACACS+ key for the TACACS server.
debug tacacs+
To assist with troubleshooting, view TACACS+ transactions.
Syntax
debug tacacs+ To disable debugging of TACACS+, use the no debug tacacs+ command.
Defaults
Disabled.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000.
Security 1281
Version
8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.2.1.0
Description
Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
ip tacacs source-interface
Specify an interface's IP address as the source IP address for TACACS+ connections.
Syntax
ip tacacs source-interface interface To delete a source interface, use the no ip tacacs source-interface command.
Parameters
interface
Enter the following keywords and slot/port or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a Null interface, enter the keyword null then the Null interface number. For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.5.1.0 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
1282 Security
tacacs-server group
Creates a group of TACACS servers.
Syntax Parameters
tacacs-server group group-nameTo delete a group of TACACS servers, use the no tacacsserver group group-name command.
group-name
Enter the name of the TACACS server group.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.4.(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S-Series and Z-Series.
Usage Information
Example
You can associate a TACACS server group with a VRF. Dell(conf)#tacacs-server group group1 Dell(conf-tacacs-group)#tacacs-server host 1.1.1.1 key secret Dell(conf-tacacs-group)#tacacs-server host 2.2.2.2 key secret Dell(conf-tacacs-group)#tacacs-server vrf vrf1 source-interface tengigabitethernet 1/42 Dell(conf-tacacs-group)#show config ! tacacs-server group group1 tacacs-server vrf vrf1 source-interface TenGigabitEthernet 1/42 tacacs-server host 1.1.1.1 key 7 9a2f3ec0c65c6f41 tacacs-server host 2.2.2.2 key 7 9a2f3ec0c65c6f41 Dell(conf-tacacs-group)#
Related Commands
aaa authentication login -- specifies the login authentication method. tacacs-server key -- configures a TACACS+ key for the TACACS server.
tacacs-server host
Specify a TACACS+ host.
Syntax Parameters
tacacs-server host {hostname | ipv4-address | ipv6-address} [port number] [timeout seconds] [key key]
hostname
ipv4-address | ipv6-address
port number
Enter the name of the TACACS+ server host.
Enter the IPv4 address (A.B.C.D) or IPv6 address (X:X:X:X::X) of the TACACS+ server host.
(OPTIONAL) Enter the keyword port then a number as the port to be used by the TACACS+ server. The range is from zero (0) to 65535. The default is 49.
Security 1283
timeout seconds key key
(OPTIONAL) Enter the keyword timeout then the number of seconds the switch waits for a reply from the TACACS+ server. The range is from 0 to 1000. The default is 10 seconds.
(OPTIONAL) Enter the keyword key then a string up to 42 characters long as the authentication key. This authentication key must match the key specified in the tacacs-server key for the TACACS+ daemon.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.4.1.0 8.3.7.0 7.7.1.0 7.6.1.0 7.5.1.0 pre-6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for IPv6. Introduced on the S4810. Authentication key length increased to 42 characters. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Example
To list multiple TACACS+ servers to be used by the aaa authentication login command, configure this command multiple times.
If you are not configuring the switch as a TACACS+ server, you do not need to configure the port, timeout and key optional parameters. If you do not configure a key, the key assigned in the tacacsserver key command is used.
You can use duplicate host names or IP addresses among TACACS groups. However, you cannot use duplicate host names or IP addresses within the same TACACS group.
If a VRF is not configured on the TACACS group, then servers configured in the group are considered to be on the default VRF. TACACS servers that are configured in the CONFIGURATION mode are also considered to be on the default VRF.
For AAA servers to use a group of TACACS servers, you must explicitly configure the group using the aaa tacacs group group-name command. The order in which the TACACS servers are tried depends on the order in which they are configured.
Dell(conf)#tacacs-server group group1 Dell(conf-tacacs-group)#tacacs-server host 1.1.1.1 key secret Dell(conf-tacacs-group)#no tacacs-server host 1.1.1.1
Related Commands
aaa authentication login -- specifies the login authentication method. tacacs-server key -- configures a TACACS+ key for the TACACS server.
1284 Security
tacacs-server key
Configure a key for communication between a TACACS+ server and a client.
Syntax
tacacs-server key [encryption-type] key To delete a key, use the no tacacs-server key key command.
Parameters
encryption-type
(OPTIONAL) Enter either zero (0) or 7 as the encryption type for the key entered. The options are:
0 is the default and means the key is not encrypted and stored as clear text. 7 means that the key is encrypted and hidden.
key
Enter a text string, up to 42 characters long, as the clear text password. Leading
spaces are ignored.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.6.1.0 7.5.1.0 pre-6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Authentication key length increased to 42 characters. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
The key configured with this command must match the key configured on the TACACS+ daemon.
tacacs-server vrf
Create an association between a TACACS server group and a VRF and source interface.
Syntax
tacacs-server vrf vrf-name [source-interface interface]
To delete the association between a TACACS server group and a VRF and source interface, use the no tacacs-server vrf vrf-name [source-interface interface] command.
Parameters
vrf vrf-name interface
Enter the keyword vrf and then the name of the VRF to associate a TACACS server group with that VRF.
Enter the following keywords and slot/port or number information:
Security 1285
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For a port channel interface, enter the keywords port-channel then a number.
For a Null interface, enter the keyword null then the Null interface number.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Defaults
Not configured.
Command Modes TACACS SERVER GROUP
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4.(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the S-Series and Z-Series.
Usage Information
Example
You can use this command to associate a group of TACACS servers with a VRF and source interface. You can configure the source interface only with the VRF attribute and source interface is optional with the VRF attributes. If VRF is not configured on the TACACS group, then the group is considered to be on the default VRF. RADIUS groups and VRFs have one-to-one mapping. If a VRF is configured with one RADIUS group, then you cannot use the same VRF with another RADIUS group. When the VRF is removed, then the corresponding RADIUS group is also removed automatically.
Dell(conf)#tacacs-server group group1 Dell(conf-tacacs-group)#tacacs-server vrf vrf1 source-interface tengigabitethernet 1/36
Dell(conf)#tacacs-server group group2 Dell(conf-tacacs-group)#tacacs-server vrf default
Port Authentication (802.1X) Commands
An authentication server must authenticate a client connected to an 802.1X switch port. Until the authentication, only Extensible Authentication Protocol over LAN (EAPOL) traffic is allowed through the port to which a client is connected. After authentication is successful, normal traffic passes through the port. Dell Networking OS supports RADIUS and Active Directory environments using 802.1X Port Authentication.
Important Points to Remember
Dell Networking OS limits network access for certain users by using VLAN assignments. 802.1X with VLAN assignment has these characteristics when configured on the switch and the RADIUS server. 802.1X is supported on Dell Networking OS. 802.1X is not supported on the LAG or the channel members of a LAG.
1286 Security
If no VLAN is supplied by the RADIUS server or if 802.1X authorization is disabled, the port is configured in its access VLAN after successful authentication.
If 802.1X authorization is enabled but the VLAN information from the RADIUS server is not valid, the port returns to the Unauthorized state and remains in the configured access VLAN. This prevents ports from appearing unexpectedly in an inappropriate VLAN due to a configuration error. Configuration errors create an entry in Syslog.
If 802.1X authorization is enabled and all information from the RADIUS server is valid, the port is placed in the specified VLAN after authentication.
If port security is enabled on an 802.1X port with VLAN assignment, the port is placed in the RADIUS server assigned VLAN.
If 802.1X is disabled on the port, it is returned to the configured access VLAN.
When the port is in the Force Authorized, Force Unauthorized, or Shutdown state, it is placed in the configured access VLAN.
If an 802.1X port is authenticated and put in the RADIUS server assigned VLAN, any change to the port access VLAN configuration does not take effect.
The 802.1X with VLAN assignment feature is not supported on trunk ports, dynamic ports, or with dynamic-access port assignment through a VLAN membership.
dot1x authentication (Configuration)
Enable dot1x globally; dot1x must be enabled both globally and at the interface level.
Syntax
dot1x authentication To disable dot1x on globally, use the no dot1x authentication command.
Defaults
Disabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series. Introduced on the E-Series.
Related Commands
dot1x authentication (Interface) -- enables dot1x on an interface.
dot1x authentication (Interface)
Enable dot1x on an interface; dot1x must be enabled both globally and at the interface level.
Syntax
dot1x authentication To disable dot1x on an interface, use the no dot1x authentication command.
Defaults
Disabled.
Command Modes INTERFACE
Security 1287
Command History
Related Commands
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series. Introduced on the E-Series.
dot1x authentication (Configuration) -- enables dot1x globally.
dot1x auth-fail-vlan
Configure an authentication failure VLAN for users and devices that fail 802.1X authentication.
Syntax
dot1x auth-fail-vlan vlan-id [max-attempts number]
To delete the authentication failure VLAN, use the no dot1x auth-fail-vlan vlan-id [maxattempts number] command.
Parameters
vlan-id
max-attempts number
Enter the VLAN Identifier. The range is from 1 to 4094.
(OPTIONAL) Enter the keywords max-attempts then number of attempts desired before authentication fails. The range is from 1 to 5. The default is 3.
Defaults
3 attempts
Command Modes CONFIGURATION (conf-if-interface-slot/port[/subport])
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.7.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the C-Series, S-Series, and E-Series.
1288 Security
Usage Information
Related Commands
If the host responds to 802.1X with an incorrect login/password, the login fails. The switch attempts to authenticate again until the maximum attempts configured is reached. If the authentication fails after all allowed attempts, the interface is moved to the authentication failed VLAN.
After the authentication VLAN is assigned, the port-state must be toggled to restart authentication. Authentication occurs at the next re-authentication interval (dot1x reauthentication).
dot1x port-control -- enables port-control on an interface.
dot1x guest-vlan -- configures a guest VLAN for non-dot1x devices.
show dot1x interface -- displays the 802.1X information on an interface.
dot1x auth-server
Configure the authentication server to RADIUS.
Syntax
dot1x auth-server radius
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series. Introduced on the E-Series.
dot1x guest-vlan
Configure a guest VLAN for limited access users or for devices that are not 802.1X capable.
Syntax
dot1x guest-vlan vlan-id To disable the guest VLAN, use the no dot1x guest-vlan vlan-id command.
Parameters
vlan-id
Enter the VLAN Identifier. The range is from 1 to 4094.
Defaults
Not configured.
Command Modes CONFIGURATION (conf-if-interface-slot/port[/subport])
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Security 1289
Usage Information
Related Commands
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series, S-Series, and E-Series.
802.1X authentication is enabled when an interface is connected to the switch. If the host fails to respond within a designated amount of time, the authenticator places the port in the guest VLAN.
If a device does not respond within 30 seconds, it is assumed that the device is not 802.1X capable. Therefore, a guest VLAN is allocated to the interface and authentication for the device occurs at the next re-authentication interval (dot1x reauthentication).
If the host fails authentication for the designated number of times, the authenticator places the port in authentication failed VLAN (dot1x auth-fail-vlan).
NOTE: The layer 3 portion of guest VLAN and authentication fail VLANs can be created regardless if the VLAN is assigned to an interface or not. After an interface is assigned a guest VLAN (which has an IP address), routing through the guest VLAN is the same as any other traffic. However, the interface may join/leave a VLAN dynamically.
dot1x auth-fail-vlan -- configures a VLAN for authentication failures. dot1x reauthentication -- enables periodic re-authentication. show dot1x interface -- displays the 802.1X information on an interface.
dot1x mac-auth-bypass
Enable MAC authentication bypass. If 802.1X times out because the host did not respond to the Identity Request frame, Dell Networking OS attempts to authenticate the host based on its MAC address.
Syntax
[no] dot1x mac-auth-bypass
Defaults
Disabled
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T.
1290 Security
Usage Information
Version
8.3.11.4 8.3.7.0 8.4.1.0
Description
Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series.
To disable MAC authentication bypass on a port, enter the no dot1x mac-auth-bypass command.
dot1x max-eap-req
Configure the maximum number of times an extensive authentication protocol (EAP) request is transmitted before the session times out.
Syntax
dot1x max-eap-req number To return to the default, use the no dot1x max-eap-req command.
Parameters
number
Enter the number of times an EAP request is transmitted before a session time-out. The range is from 1 to 10. The default is 2.
Defaults
2
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series. Introduced on the E-Series.
Related Commands
interface range -- configures a range of interfaces.
dot1x port-control
Enable port control on an interface.
Syntax Parameters
dot1x port-control {force-authorized | auto | force-unauthorized}
force-authorized Enter the keywords force-authorized to forcibly authorize a port.
auto
Enter the keyword auto to authorize a port based on the 802.1X operation result.
Security 1291
forceunauthorized
Enter the keywords force-unauthorized to forcibly de-authorize a port.
Defaults
none
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series. Introduced on the E-Series.
Usage Information
The authenticator performs authentication only when port-control is set to auto.
dot1x quiet-period
Set the number of seconds that the authenticator remains quiet after a failed authentication with a client.
Syntax
dot1x quiet-period seconds To disable quiet time, use the no dot1x quiet-time command.
Parameters
seconds
Enter the number of seconds. The range is from 1 to 65535. The default is 30.
Defaults
30 seconds
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000.
1292 Security
Version
8.3.7.0 7.6.1.0 7.4.1.0
Description
Introduced on the S4810. Introduced on the C-Series and S-Series. Introduced on the E-Series.
dot1x reauthentication
Enable periodic re-authentication of the client.
Syntax
dot1x reauthentication [interval seconds] To disable periodic re-authentication, use the no dot1x reauthentication command.
Parameters
interval seconds
(Optional) Enter the keyword interval then the interval time, in seconds, after which re-authentication is initiated. The range is from 1 to 31536000 (1 year). The default is3600 (1 hour).
Defaults
3600 seconds (1 hour)
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series. Introduced on the E-Series.
Related Commands
interface range -- configures a range of interfaces.
dot1x reauth-max
Configure the maximum number of times a port can re-authenticate before the port becomes unauthorized.
Syntax
dot1x reauth-max number To return to the default, use the no dot1x reauth-max command.
Parameters
number
Enter the permitted number of re-authentications. The range is from 1 to 10. The default is 2.
Defaults
2
Command Modes INTERFACE
Security 1293
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series. Introduced on the E-Series.
dot1x server-timeout
Configure the amount of time after which exchanges with the server time-out.
Syntax
dot1x server-timeout seconds To return to the default, use the no dot1x server-timeout command.
Parameters
seconds
Enter a time-out value in seconds. The range is from 1 to 300, where 300 is implementation dependant. The default is 30.
Defaults
30 seconds
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series. Introduced on the E-Series.
1294 Security
dot1x supplicant-timeout
Configure the amount of time after which exchanges with the supplicant time-out.
Syntax
dot1x supplicant-timeout seconds To return to the default, use theno dot1x supplicant-timeout command.
Parameters
seconds
Enter a time-out value in seconds. The range is from 1 to 300, where 300 is implementation dependant. The default is 30.
Defaults
30 seconds
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series. Introduced on the E-Series.
dot1x tx-period
Configure the intervals at which EAPOL PDUs are transmitted by the Authenticator PAE.
Syntax
dot1x tx-period seconds To return to the default, use the no dot1x tx-period command.
Parameters
seconds
Enter the interval time, in seconds, that EAPOL PDUs are transmitted. The range is from 1 to 65535 (1 year). The default is 30.
Defaults
30 seconds
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON.
Security 1295
Version
9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.4.1.0
Description
Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series. Introduced on the E-Series.
show dot1x interface
Display the 802.1X information on an interface.
Syntax Parameters
show dot1x interface interface
interface
Enter one of the following keywords and slot/port or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
Defaults
none
Command Modes EXEC EXEC privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.5.1.0 8.3.7.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Introduced on the C-Series, S-Series, and E-Series.
Example
Dell#show dot1x interface fortyGigE 1/48
802.1x information on Fo 1/48:
-----------------------------
Dot1x Status:
Enable
Port Control:
AUTO
1296 Security
Port Auth Status: Re-Authentication: Untagged VLAN id: Guest VLAN: Guest VLAN id: Auth-Fail VLAN: Auth-Fail VLAN id: Auth-Fail Max-Attempts: Mac-Auth-Bypass: Mac-Auth-Bypass Only: Tx Period: Quiet Period: ReAuth Max: Supplicant Timeout: Server Timeout: Re-Auth Interval: Max-EAP-Req: Host Mode: Auth PAE State: Backend State: Dell#
UNAUTHORIZED Disable None Disable NONE Disable NONE NONE Disable Disable 30 seconds 60 seconds 2 30 seconds 30 seconds 3600 seconds 2 SINGLE_HOST Initialize Initialize
Dell# show dot1x interface fortyGigE 1/48
802.1x information on Fo 1/48:
-----------------------------
Dot1x Status:
Enable
Port Control:
FORCE_AUTHORIZED
Port Auth Status:
UNAUTHORIZED
Re-Authentication:
Disable
Untagged VLAN id:
None
Guest VLAN:
Disable
Guest VLAN id:
NONE
Auth-Fail VLAN:
Disable
Auth-Fail VLAN id:
NONE
Auth-Fail Max-Attempts: NONE
Mac-Auth-Bypass:
Disable
Mac-Auth-Bypass Only:
Disable
Tx Period:
30 seconds
Quiet Period:
60 seconds
ReAuth Max:
2
Supplicant Timeout:
30 seconds
Server Timeout:
30 seconds
Re-Auth Interval:
3600 seconds
Max-EAP-Req:
2
Host Mode:
SINGLE_HOST
Auth PAE State:
Initialize
Backend State:
Initialize
Dell#
SSH Server and SCP Commands
Dell Networking OS supports secure shell (SSH) protocol versions 1.5 and 2.0. SSH is a protocol for secure remote login over an insecure network. SSH sessions are encrypted and use authentication.
crypto key generate
Generate keys for the SSH server.
Syntax
NOTE: Some of the parameters in this command require licensing to access. For more information, contact your Dell Networking representative.
crypto key generate {rsa | rsa1}
Security 1297
Parameters
rsa
rsa1
Enter the keyword rsa then the key size to generate a SSHv2 RSA host keys. The range is from 1024 to 2048 if you did not enable FIPS mode; if you enabled FIPS mode, you can only generate a 2048-bit key. The default is 1024.
NOTE: You must have a license to access the FIPS mode. For more information, contact your Dell Networking representative.
Enter the keyword rsa1 then the key size to generate a SSHv1 RSA host keys. The range is from 1024 to 2048. The default is 1024.
NOTE: This option is not available in FIPS mode.
Defaults
Key size 1024; if you enable FIPS mode, the key size is 2048.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.12.0 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for FIPS mode on the S4810. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
The host keys are required for key-exchange by the SSH server. If the keys are not found when you enable the server (ip ssh server enable), the keys are automatically generated.
This command requires user interaction and generates a prompt prior to overwriting any existing host keys.
NOTE: Only a user with superuser permissions should generate host-keys.
Example
Dell(conf)#crypto key generate rsa Enter key size <1024-2048>. Default<1024> : Host key already exists. Overwrite (y/n)?y Generating 1024-bit SSHv2 RSA key. ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! Dell(conf)# Dell(conf)#crypto key generate rsa1 Enter key size <1024-2048>. Default<1024> : Host key already exists. Overwrite (y/n)?y Generating 1024-bit SSHv1 RSA key. ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! !! ! ! ! ! ! ! ! ! ! ! Dell(conf)#
Related Commands
ip ssh server -- enables the SSH server. show crypto -- displays the SSH host public keys.
1298 Security
crypto key zeroize rsa
Removes the generated RSA host keys and zeroize the key storage location.
Syntax
crypto key zeroize rsa
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.5(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the Z9000, S6000, S4820T, S4810, MXL
debug ip ssh
Enables collecting SSH debug information.
Syntax
debug ip ssh {client | server} To disable debugging, use the no debug ip ssh {client | server} command.
Parameters
client server
Enter the keyword client to enable collecting debug information on the client. Enter the keyword server to enable collecting debug information on the server.
Defaults
Disabled on both client and server.
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Security 1299
Usage Information
Debug information includes details for key-exchange, authentication, and established session for each connection.
ip scp topdir
Identify a location for files used in secure copy transfer.
Syntax
ip scp topdir directory To return to the default setting, use the no ip scp topdir command.
Parameters
directory
Enter a directory name.
Defaults
The internal flash (flash:) is the default directory.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
To configure the switch as an SCP server, use the ip ssh server command. ip ssh server -- enables the SSH and SCP server on the switch.
ip ssh authentication-retries
Configure the maximum number of attempts that should be used to authenticate a user.
Syntax Parameters
ip ssh authentication-retries 1-10
1-10
Enter the number of maximum retries to authenticate a user. The range is from 1 to
10. The default is 3.
Defaults
3
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
1300 Security
Usage Information
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
This command specifies the maximum number of attempts to authenticate a user on an SSH connection with the remote host for password authentication. SSH disconnects when the number of password failures exceeds authentication-retries.
ip ssh connection-rate-limit
Configure the maximum number of incoming SSH connections per minute.
Syntax Parameters
ip ssh connection-rate-limit 1-10
1-10
Enter the number of maximum numbers of incoming SSH connections allowed per
minute. The range is from 1 to 10 per minute. The default is 10 per minute.
Defaults
10 per minute
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Security 1301
ip ssh hostbased-authentication
Enable hostbased-authentication for the SSHv2 server.
Syntax
ip ssh hostbased-authentication enable
To disable hostbased-authentication for SSHv2 server, use the no ip ssh hostbasedauthentication enable command.
Parameters
enable
Enter the keyword enable to enable hostbased-authentication for SSHv2 server.
Defaults
Disabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
If you enable this command, clients can log in without a password prompt. This command provides two levels of authentication:
rhost-authentication is done with the file specified in the ip ssh rhostfile command. checking client host-keys is done with the file specified in the ip ssh pub-key-file command.
NOTE: Administrators must specify the two files (rhosts and pub-key-file) to configure hostbased authentication.
Related Commands
ip ssh pub-key-file -- public keys of trusted hosts from a file. ip ssh rhostsfile -- trusted hosts and users for rhost authentication.
ip ssh key-size
Configure the size of the server-generated RSA SSHv1 key.
Syntax Parameters
ip ssh key-size 512-869
512-869
Enter the key-size number for the server-generated RSA SSHv1 key. The range is from 512 to 869. The default is 768.
Defaults
Key size 768
Command Modes CONFIGURATION
1302 Security
Command History
Usage Information
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
The server-generated key is used for SSHv1 key-exchange.
ip ssh password-authentication
Enable password authentication for the SSH server.
Syntax
ip ssh password-authentication enable
To disable password-authentication, use the no ip ssh password-authentication enable command.
Parameters
enable
Enter the keyword enable to enable password-authentication for the SSH server.
Defaults
Enabled
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Security 1303
Usage Information
Version
pre-6.1.1.0
Description
Introduced on the E-Series.
With password authentication enabled, you can authenticate using the local, RADIUS, or TACACS+ password fallback order as configured.
ip ssh pub-key-file
Specify the file used for host-based authentication.
Syntax Parameters
ip ssh pub-key-file {WORD}
WORD
Enter the file name for the host-based authentication.
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
This command specifies the file used for the host-based authentication. The creates/ file overwrites the flash://ADMIN_DIR/ssh/knownhosts file and deletes the user-specified file. Even though this command is a global configuration command, it does not appear in the running configuration because you only need to run this command once.
The file contains the OpenSSH-compatible public keys of the host for which host-based authentication is allowed. An example known host file format:
poclab4,123.12.1.123 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAox/ QQp8xYhzOxn07yh4VGPAoUfgKoieTHO9G4sNV+ui +DWEc3cgYAcU5Lai1MU2ODrzhCwyDNp05tKBU3t ReG1o8AxLi6+S4hyEMqHzkzBFNVqHzpQc +Rs4p2urzV0F4pRKnaXdHf3Lk4D460HZRhhVrxqeNxPDpEn WIMPJi0ds= ashwani@poclab4
NOTE: For rhostfile and pub-key-file, the administrator must FTP the file to the chassis.
Example
Dell#conf Dell(conf)# ip ssh pub-key-file flash://knownhosts Dell(conf)#
1304 Security
Related Commands
show ip ssh client-pub-keys -- displays the client-public keys used for the host-based authentication.
ip ssh rekey
Configures the time rekey-interval or volume rekey-limit threshold at which to re-generate the SSH key during an SSH session.
Syntax
ip ssh rekey [time rekey-interval] [volume rekey-limit]
To reset to the default, use no ip ssh rekey [time rekey-interval] [volume rekeylimit] command.
Parameters
time minutes
volume rekeylimit
Enter the keywords time then the amount of time in minutes. The range is from 10 to 1440 minutes. The default is 60 minutes
Enter the keywords volume then the amount of volume in megabytes. The range is from 1 to 4096 to megabytes. The default is 1024 megabytes
Defaults
The default time is 60 minutes. The default volume is 1024 megabytes.
Command Modes CONFIGURATION mode
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.5(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the Z9000, S6000, S4820T, S4810, MXL
ip ssh rhostsfile
Specify the rhost file used for host-based authorization.
Syntax Parameters
ip ssh rhostsfile {WORD}
WORD
Enter the rhost file name for the host-based authentication.
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000.
Security 1305
Example
Usage Information
Version
8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Description
Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Dell#conf Dell(conf)# ip ssh rhostsfile flash://shosts Dell(conf)#
This command specifies the rhost file used for host-based authentication. This creates/ file overwrites the flash:/ADMIN_DIR/ssh/shosts file and deletes the user-specified file. Even though this command is a global configuration command, it does not appear in the running configuration because you only need to run this command once. This file contains hostnames and usernames, for which hosts and users, rhost-authentication can be allowed.
NOTE: For rhostfile and pub-key-file, the administrator must FTP the file to the switch.
ip ssh rsa-authentication (Config)
Enable RSA authentication for the SSHv2 server.
Syntax
ip ssh rsa-authentication enable To disable RSA authentication, use the no ip ssh rsa-authentication enable command.
Parameters
enable
Enter the keyword enable to enable RSA authentication for the SSHv2 server.
Defaults
Disabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
1306 Security
Usage Information
Version
pre-6.1.1.0
Description
Introduced on the E-Series.
Enabling RSA authentication allows the user to log in without being prompted for a password. In addition, the OpenSSH compatible SSHv2 RSA public key must be added to the list of authorized keys (ip ssh rsa-authentication my-authorized-keys device://filename command).
ip ssh server
Configure an SSH server. SSH server is enabled by default.
Syntax Parameters
NOTE: Some of the parameters in this command require licensing to access. For more information, contact your Dell Networking representative.
ip ssh server {ciphers cipher-list} {enable | port port-number} [kex keyexchange-algorithm] [mac hmac-algorithm] [version {1 | 2}]
To disable SSH server functions, use the no ip ssh server {ciphers cipher-list} {enable | port port-number} [kex key-exchange-algorithm] [mac hmac-algorithm] [version {1 | 2}] command.
enable
ciphers cipherlist
Enter the key word enable to start the SSH server. Enter the keyword ciphers and then a space-delimited list of ciphers that the SSH server supports. The following ciphers are available. 3des-cbc aes128-cbc aes192-cbc aes256-cbc aes128-ctr aes192-ctr aes256-ctr
The default cipher list is used. 3des-cbc aes128-cbc aes192-cbc aes256-cbc aes128-ctr aes192-ctr aes256-ctr
mac hmacalgorithm
Enter the keyword mac then a space-delimited list of hash message authentication code (HMAC) algorithms supported by the SSH server for keying hashing for the message authentication.
The following HMAC algorithms are available:
hmac-sha1
Security 1307
hmac-sha1-96 hmac-sha2-256 hmac-sha2-256-96
When FIPS is enabled, the default HMAC algorithm is hmac-sha1-96. When FIPS is not enabled, the default HMAC algorithms are the following: hmac-md5 hmac-md5-96 hmac-sha1 hmac-sha1-96 hmac-sha2-256 hmac-sha2-256-96
kex keyexchangealgorithm
Enter the keyword kex and then a space-delimited list of key exchange algorithms supported by the SSH server. The following key exchange algorithms are available: diffie-hellman-group-exchange-sha1 diffie-hellman-group1-sha1 diffie-hellman-group14-sha1
When FIPS is enabled, the default key-exchange-algorithm is diffie-hellmangroup14-sha1. When FIPS is not enabled, the default key-exchange-algorithms are the following: diffie-hellman-group-exchange-sha1 diffie-hellman-group1-sha1, diffie-hellman-group14-sha1
port port-number (OPTIONAL) Enter the keyword port then the port number of the listening port of the SSH server. The range is from 1 to 65535. The default is 22.
[version {1 | 2}] (OPTIONAL) Enter the keyword version then the SSH version 1 or 2 to specify only SSHv1 or SSHv2.
NOTE: If you enable FIPS mode, you can only select version 2.
Defaults
Default listening port is 22. Default cipher list is 3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr. When FIPS is enabled, the default is hmac-sha1-96.
When FIPS is not enabled, the default is hmac-md5,hmac-md5-96,hmac-sha1,hmac-sha1-96,hmacsha2-256,hmac-sha2-256-96.
When FIPS is enabled, the default is diffie-hellman-group14-sha1.
When FIPS is not enabled, the default is diffie-hellman-group-exchange-sha1,diffie-hellman-group1sha1,diffie-hellman-group14-sha1.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
1308 Security
Usage Information
Example
Related Commands
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.5(0.0)
9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced the cipher , kex and mac options on the Z9500. Introduced the cipher, kex and mac options on the Z9000, S6000, S4820T, S4810, and MXL. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
This command enables the SSH server and begins listening on a port. If a port is not specified, listening is on SSH default port 22.
NOTE: Starting with Dell Networking OS Release 9.2(0.0), SSH server is enabled by default.
Dell# conf Dell(conf)# ip ssh server port 45 Dell(conf)# ip ssh server enable Dell# show ip ssh -- displays the ssh information.
ip ssh server vrf
Configure an SSH server on either a specific VRF or a management VRF.
Syntax
NOTE: Some of the parameters in this command require licensing to access. For more information, contact your Dell Networking representative.
ip ssh server vrf {management | vrf-name}
To disable the SSH server configuration, use the no ip ssh server vrf {management | vrfname} command.
Parameters
vrf management vrf vrf-name
Enter the key word vrf followed by the keyword management to configure an SSH server on a management VRF.
Enter the key word vrf followed by the VRF name to configure an SSH server on that VRF.
Defaults
None
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Security 1309
Usage Information
Example
Related Commands
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.4(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S-Series and Z9000.
You can enable the SSH server on either a management VRF or a user defined VRF but not both. If no VRF is specified, then the SSH server is enabled on the default VRF.
If the SSH server is enabled on a VRF with name vrf1, then use the following command to restart the SSH server on a VRF with name vrf2: ip ssh server vrf vrf2. If the SSH server is enabled on a VRF with name vrf1, then use the following command to restart the SSH server on the default VRF: ip ssh server vrf.
�
Dell(conf)#ip ssh server vrf vrf1
�
Dell(conf)#no ip ssh server vrf
�
Dell(conf)#ip ssh server vrf management
�
Dell(conf)#no ip ssh server vrf
show ip ssh -- displays the ssh information.
ip ssh source-interface
Specifies an interface's IP address as the source IP address for an outgoing SSH connections.
Syntax
ip ssh source-interface interface To delete a source interface, use the no ip ssh source-interface command.
Parameters
interface
Enter the following keywords and slot/port or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a Null interface, enter the keyword null then the Null interface number. For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON.
1310 Security
Usage Information
Example
Version
9.5(0.1) 9.5(0.0) 9.4(0.0)
Description
Introduced on the Z9500. Introduced on the Z9500. Introduced on the S-Series and Z9000.
The source-interface interface attribute is applicable for both the SSH client as well as the COPY (SCP) commands. Using these attributes the client session tags an error to the user during run time, in case there is a mismatch between this command and the ip ssh vrf command.
Dell(conf)#ip ssh source-interface tengigabitethernet 1/42 Dell(conf)#do ssh 10.10.10.2 -l admin Dell(conf)#no ip ssh source-interface
ip ssh vrf
Specify a VRF for an outgoing SSH connections.
Syntax
ip ssh vrf vrf-name To delete a VRF for an outgoing SSH connection, use the no ip ssh vrf vrf-name command.
Parameters
vrf vrf-name
Enter the keyword vrf and then the name of the VRF to configure that VRF for an outgoing SSH session.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.4(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S-Series and Z9000.
Usage Information
Example
If you configure a VRF for an SSH session, then you need not explicitly mention the same VRF for the SSH client sessions intended for that VRF. The vrf attribute in the ip ssh vrf command is applicable for both the SSH client as well as the COPY (SCP) commands.
Dell(conf)#ip ssh vrf vrf1 Dell(conf)#do ssh 10.10.10.2 -l admin Dell(conf)#no ip ssh vrf vrf1
show crypto
Display the public part of the SSH host-keys.
Syntax
NOTE: Some of the parameters in this command require licensing to access. For more information, contact your Dell Networking representative.
Security 1311
Parameters
show crypto key mypubkey {rsa | rsa1}
Key mypubkey rsa rsa1
Enter the keyword key to display the host public key. Enter the keyword mypubkey to display the host public key. Enter the keyword rsa to display the host SSHv2 RSA public key. Enter the keyword rsa1 to display the host SSHv1 RSA public key.
NOTE: If you enable FIPS mode, this parameter is not available.
Defaults
none
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Example
This command is useful if the remote SSH client implements Strict Host Key Checking. You can copy the host key to your list of known hosts.
Dell#show crypto key mypubkey rsa1 1024 65537 150477578329696762034442036788963 49387088507047999199481529207062670596651487 23898733885138887260455874859980100707321824 14929030692027544033783833684808165051718757 38849817162478946467706560683627207710939806 62813807153482652190186648383244516887120415 31630245739774449604335364302251481307373438 756957374121 Dell#show crypto key mypubkey rsa ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQC9IYgcU cc8wQm+5KUQgW/zAs8V5STalGq4/+S+6H9axpQnA+A0xw eeo5iR5hvPP6Vc+HS+uWoQH+VOJ8H5Jxsm347XnYv/gpS qhgjZ/C5UwFiucVkVfYu8RDcJVIuQhLvPEebIF5Q+sD8K 89MXU90MAS/UdoiJZSOIlbaCuSTW1Q== Dell#
Related Commands
crypto key generate -- generates the SSH keys.
1312 Security
show ip ssh
Display information about established SSH sessions.
Syntax
NOTE: Some of the parameters in this command require licensing to access. For more information, contact your Dell Networking representative.
show ip ssh
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Example
Dell#show ip ssh
SSH server
: enabled.
SSH server version
: v1 and v2.
SSH server vrf
: default.
SSH server ciphers
: 3des-cbc,aes128-cbc,aes192-cbc,aes256-
cbc,aes128-ctr,aes192-ctr,aes256-ctr.
SSH server macs
: hmac-md5,hmac-md5-96,hmac-sha1,hmac-
sha1-96,hmac-sha2-256,hmac-sha2-256-96.
SSH server kex algorithms : diffie-hellman-group-exchange-sha1,diffie-
hellman-group1-sha1,diffie-hellman-group14-sha1.
Password Authentication : enabled.
Hostbased Authentication : disabled.
RSA
Authentication : disabled.
Vty
Encryption
HMAC
Remote IP
2
aes128-cbc
hmac-md5
10.16.127.141
4
aes128-cbc
hmac-md5
10.16.127.141
* 5
aes128-cbc
hmac-md5
10.16.127.141
Dell#
Related Commands
ip ssh server -- configures an SSH server. show ip ssh client-pub-keys -- displays the client-public keys.
show ip ssh client-pub-keys
Display the client public keys used in host-based authentication.
Syntax
show ip ssh client-pub-keys
Security 1313
Defaults
none
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Example
This command displays the contents of the flash://ADMIN_DIRssh/knownhosts file. Dell# show ip ssh client-pub-keys 4.8.1.2 ssh-rsa AAAAB3NzaC1yc2EAAAA BIwAAAIEAu5NoTbmnLxBknaeXZmUJMupNwN UoGlo1/yLPI5eehQTyaldRPHtGyPlcmMbCH +QJkqtyiwDPmH4njyDMYDCXY85vc55ibWsN 9qalagklnh2cj2q4nYj5x8+8OOhYeFPaHiy gd8U/FXict61jWs84Co1UTsAgRzDJ9aUSS7 5TVac= root@dt-maa-linux-1.force10networks.c om 2200:2200:2200:2200:2200::2202 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAu5NoTbmnL xBknaeXZmUJMupNwNUoGlo1/yLPI5eehQTyald RPHtGyPlcmMbCH+QJkqtyiwDPmH4njyDMYDCXY 85vc55ibWsN9qalagklnh2cj2q4nYj5x8+8OOh YeFPaHiygd8U/FXict61jWs84Co1UTsAgRzDJ9 aUSS75TVac= root@dt-maa-li nux-1.force10networks.com 10.16.151.48 ssh-rsa AAAAB3NzaC1yc2EAA AABIwAAAIEAu5NoTbmnLxBknaeXZmUJMupNwNU oGlo1/yLPI5eehQTyaldRPHtGyPlcmMbCH+QJk qtyiwDPmH4njyDMYDCXY85vc55ibWsN9qalagk lnh2cj2q4nYj5x8+8OOhYeFPaHiygd8U/FXict 61jWs84Co1UTsAgRzDJ9aUSS75TVac= Dell#
Related Commands
ip ssh pub-key-file -- configures the filename for the host-based authentication.
show ip ssh rsa-authentication
Display the authorized-keys for the RSA authentication.
Syntax
show ip ssh rsa-authentication {my-authorized-keys}
1314 Security
Parameters
my-authorized- Display the RSA authorized keys. keys
Defaults
none
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networkin OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Example
This command displays the contents of the flash:/ADMIN_DIR/ssh/authorized-keys.username file.
Dell#show ip ssh rsa-authentication my-authorized-keys ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAyB17l4gFp4r2DRHIvMc1VZd0Sg5GQxRV1y1X1JOMeO6Nd0WuYyzrQM 4qJAoBwtneOXfLBcHF3V2hcMIqaZN+CRCnw/ zCMlnCf0+qVTd1oofsea5r09kS0xTp0CNfHXZ3NuGCq9Ov33m9+U9tMwhS8vy8AVxdH4x4km3c3t5Jvc= freedom@poclab4 Dell#
Related Commands
ip ssh rsa-authentication (Config) -- configures the RSA authorized keys.
ssh
Open an SSH connection specifying the hostname, username, encryption cipher, HMAC algorithm, port number, and version of the SSH client.
Syntax
NOTE: Some of the parameters in this command require licensing to access. For more information, contact your Dell Networking representative.
Parameters
ssh {hostname | ipv4 address | ipv6 address} [-c encryption cipher | -l username | -m HMAC algorithm | -p port-number | -v {1 | 2}]
vrf vrf-name
(OPTIONAL) Enter the keyword vrf aand then the name of the VRF to specify the VRF used with the SSH session.
NOTE: The VRF configured using this command has a higher precedence than
the VRF configured using the ip ssh vrf vrf-name command. If you do
not configure a VRF using this command, then the SSH client uses the
Security 1315
hostname vrf instance
ipv4 address ipv6-address prefix-length
configured VRF (if any). If there is a mismatch between VRFs that are configured using the ip ssh source-interface command and the ssh vrf vrf-name command, then an error is reported.
(OPTIONAL) Enter the IP address or the host name of the remote device.
(OPTIONAL) E-Series Only: Enter the keyword vrf then the VRF Instance name to open an SSH connection to that instance.
(OPTIONAL) Enter the IP address in dotted decimal format A.B.C.D.
(OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format then the prefix length in the /x format. The range is from /0 to /128.
NOTE: The :: notation specifies successive hexadecimal fields of zeros.
-c encryption cipher
Enable the "FIPS mode enable", this mode will support only v2 client. "no fips mode enable"(disable) will support v1 & v2 client. This comment is applicable for both ciphers & HMAC algorithms: 3des-cbc: Force ssh to use 3des-cbc encryption cipher. aes128-cbc : Force ssh to use aes128-cbc encryption cipher
aes192-cbc : Force ssh to use aes192-cbc encryption cipher
aes256-cbc : Force ssh to use aes256-cbc encryption cipher
aes128-ctr : Force ssh to use aes128-ctr encryption cipher
aes192-ctr : Force ssh to use aes192-ctr encryption cipher
aes256-ctr : Force ssh to use aes256-ctr encryption cipher
-l username
-m HMAC algorithm
(OPTIONAL) Enter the keyword -l then the user name used in this SSH session. The default is the user name of the user associated with the terminal.
Enter one of the following HMAC algorithms to use. (For v2 clients only):
"no fips mode enable"(disable) will support v1 & v2 client.
hmac-md5: Force ssh to use hmac-md5 HMAC algorithm. hmac-md5-96: Force ssh to use hmac-md5-96 HMAC algorithm. hmac-sha1: Force ssh to use hmac-sha1 HMAC algorithm. hmac-sha1-96 : Force ssh to use hmac-sha1-96 HMAC algorithm. hmac-sha2-256 : Force ssh to use hmac-sha2-256 HMAC algorithm.
hmac-sha2-256-96: Force ssh to use hmac-sha2-256-96 HMAC algorithm.
-p port-number -v {1 | 2}
(OPTIONAL) Enter the keyword -p then the port number. The range is from 1 to 65535. The default is 22.
(OPTIONAL) Enter the keyword -v then the SSH version 1 or 2. The default is the version from the protocol negotiation.
Defaults
As shown in the Parameters section.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2)
Introduced on the S4048-ON. Introduced on the S3048-ON.
1316 Security
Usage Information
Example
Version
9.7(0.0) 9.5(0.1)
9.4.(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.12.0 8.3.7.0 7.6.1.0 7.5.1.0 pre-6.1.1.0
Description
Introduced on the S6000�ON.
Added support for the following ciphers and HMAC alogorithms on the Z9000, S6000, S4820T, S4820T. S6000�ON. aes128-cbc aes192-cbc aes256-cbc aes128-ctr aes192-ctr aes256-ctr hmac-sha2-256 hmac-sha2-256-96
Added support for VRF.
Introduced on the Z9500.
Introduced on the S6000.
Introduced on the S4820T.
Introduced on the Z9000.
Added support for the -c and -m parameters on the S4810.
Introduced on the S4810.
Introduced on the S-Series.
Added IPv6 support. Introduced on the C-Series.
Introduced on the E-Series.
Dell Networking OS supports both inbound and outbound SSH sessions using IPv4 or IPv6 addressing. Inbound SSH supports accessing the system through the management interface as well as through a physical Layer 3 interface.
Dell#ssh 10.16.151.48 -l anvltest Trying 10.16.151.48... 01:18:16: %STKUNIT0-M:CP %SEC-5-SSH_USAGE: Initiated SSH Client v2 (FIPS Disabled) to anvltest@10.16.151.48 by default from console anvltest@10.16.151.48's password: Last login: Thu Jan 5 00:17:47 2012 from login-maa-101 [anvltest@dt-maa-linux-1 ~]# exit logout Dell#
Secure DHCP Commands
DHCP as defined by RFC 2131 provides no authentication or security mechanisms. Secure DHCP is a suite of features that protects networks that use dynamic address allocation from spoofing and attacks.
clear ip dhcp snooping
Clear the DHCP binding table.
Syntax
clear ip dhcp snooping binding
Defaults
none
Command Modes EXEC Privilege
Security 1317
Command History
Related Commands
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series.
show ip dhcp snooping -- displays the contents of the DHCP binding table.
ip dhcp relay
Enable Option 82. Syntax Parameters
ip dhcp relay information-option [trust-downstream | vrf]
trustdownstream
vrf
Configure the system to trust Option 82 when it is received from the previous-hop router.
Enter the keyword vrf to include VRF related information in the Option 82. This configuration enables the relay agent to include VRF related information when it forwards the broadcasts from client to DHCP server.
Defaults
Disabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4.(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Added support for VRF. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series.
1318 Security
ip dhcp snooping
Enable DHCP Snooping globally.
Syntax
[no] ip dhcp snooping
Defaults
Disabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series.
Usage Information
Related Commands
When enabled, no learning takes place until you enable snooping on a VLAN. After disabling DHCP Snooping, the binding table is deleted and Option 82, IP Source Guard, and Dynamic ARP Inspection are disabled.
ip dhcp snooping vlan -- enables DHCP Snooping on one or more VLANs.
ip dhcp snooping binding
Create a static entry in the DHCP binding table.
Syntax Parameters
[no] ip dhcp snooping binding mac address vlan-id vlan-id ip ip-address interface type slot/port lease number
mac address
vlan-id vlan-id
ip ip-address interface type
Enter the keyword mac then the MAC address of the host to which the server is leasing the IP address.
Enter the keywords vlan-id then the VLAN to which the host belongs. The range is from 2 to 4094.
Enter the keyword ip then the IP address that the server is leasing.
Enter the keyword interface then the type of interface to which the host is connected.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
slot/port
Enter the slot and port number of the interface.
Security 1319
lease time
Enter the keyword lease then the amount of time the IP address is leased. The range is from 1 to 4294967295.
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.5.1.0 8.3.7.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Introduced on the C-Series and S-Series.
Related Commands
show ip dhcp snooping -- displays the contents of the DHCP binding table.
ip dhcp snooping database
Delay writing the binding table for a specified time.
Syntax Parameters
ip dhcp snooping database write-delay minutes
minutes
The range is from 5 to 21600.
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.0) 9.2(1.0) 8.3.19.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the Z9500. Introduced on the S4820T. Introduced on the Z9000.
1320 Security
Version
8.3.7.0 7.8.1.0
Description
Introduced on the S4810. Introduced on the C-Series and S-Series.
ip dhcp snooping database renew
Renew the binding table.
Syntax
ip dhcp snooping database renew
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series.
ip dhcp snooping trust
Configure an interface as trusted.
Syntax
[no] ip dhcp snooping trust
Defaults
Untrusted
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000.
Security 1321
Version
8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0
Description
Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series.
ip dhcp source-address-validation
Enable IP source guard.
Syntax
[no] ip dhcp source-address-validation
Defaults
Disabled.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series.
ip dhcp snooping vlan
Enable DHCP Snooping on one or more VLANs.
Syntax Parameters
[no] ip dhcp snooping vlan name
name
Enter the name of a VLAN on which to enable DHCP Snooping.
Defaults
Disabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON.
1322 Security
Usage Information
Related Commands
Version
9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0
Description
Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series.
When enabled, the system begins creating entries in the binding table for the specified VLANs. NOTE: Learning only happens if there is a trusted port in the VLAN.
ip dhcp snooping trust -- configures an interface as trusted.
show ip dhcp snooping
Display the contents of the DHCP binding table.
Syntax
show ip dhcp snooping binding
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.8.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series.
Related Commands
clear ip dhcp snooping -- clears the contents of the DHCP binding table.
Role-Based Access Control Commands
With Role-Based Access Control (RBAC), access and authorization is controlled based on a user's role. Users are granted permissions based on their user roles, not on their individual user ID. User roles are created for job functions and through those roles they acquire the permissions to perform their associated job function.
This section describes the syntax and usage of RBAC-specific commands. You can find information on other related security commands in this chapter:
Security 1323
aaa accounting aaa authentication login aaa authorization commands authorization show accounting show users username
aaa authorization role-only
Configure authentication to use the user's role only when determining if access to commands is permitted.
Syntax
aaa authorization role-only To return to the default setting, use the no aaa authentication role-only command.
Parameters
name
inherit existingrole-name
Enter a text string for the name of the user up to 63 characters. It cannot be one of the system defined roles (sysadmin, secadmin, netadmin, netoperator).
Enter the inherit keyword then specify the system defined role to inherit permissions from (sysadmin, secadmin, netadmin, netoperator).
Defaults
none
Command Modes CONFIGURATION
Command History
Version
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
9.5(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9000, S6000, S4820T, S4810, and MXL.
Usage Information
By default, access to commands are determined by the user's role (if defined) or by the user's privilege level. If the aaa authorization role-only command is enabled, then only the user's role is used. Before you enable role-based only AAA authorization: 1. Locally define a system administrator user role.This will give you access to login with full permissions
even if network connectivity to remote authentication servers is not available.
2. Configure login authentication on the console. This ensures that all users are properly identified through authentication no matter the access point
3. Specify an authentication method (RADIUS, TACACS+, or Local).
4. Specify authorization method (RADIUS, TACACS+ or Local).
5. Verify the configuration has been applied to the console or VTY line.
Related Commands
login authentication, password, radius-server host, tacacs-server host
enable
Enter EXEC Privilege mode or any other privilege level configured. After entering this command, you may need to enter a password.
Syntax
enable [level]
1324 Security
Parameters
level
(OPTIONAL) Enter a number for a privilege level of Dell Networking OS. The range is from 0 to 15.
Defaults
15
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.12.0 8.3.11.1 8.1.1.0 7.6.1.0 7.5.1.0 E-Series
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Added support for roles on the Z9000, S6000, S4820T, S4810, and MXL. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Original command.
Usage Information
Users entering EXEC Privilege mode or any other configured privilege level can access configuration commands. To protect against unauthorized access, use the enable password command to configure a password for the enable command at a specific privilege level. If no privilege level is specified, the default is privilege level 15.
NOTE: If you are authorized for the EXEC Privilege mode by your role, you do not need to enter an
enable password.
Related Commands
enable password -- configures a password for the enable command and to access a privilege level.
role
Changes command permissions for roles.
Syntax
role mode { { { addrole | deleterole } role-name } | reset } command To delete access to a command, use the no role mode role-name
Parameters
mode
Enter one of the following keywords as the mode for which you are controlling access: configure for CONFIGURATION mode exec for EXEC mode interface for INTERFACE modes line for LINE mode route-map for Route-map mode
Security 1325
addrole deleterole
role-name reset command
router for Router mode
Enter the keyword addrole to add permission to the command. You cannot add or delete rights for the sysadmin role.
Enter the keyword deleterole to remove access to the command. You cannot add or delete rights for the sysadmin role.
Enter a text string for the name of the user role up to 63 characters. These are 3 system defined roles you can modify: secadmin, netadmin, and netoperator.
Enter the keyword reset to reset all roles back to default for that command.
Enter the command's keywords to assign the command to a certain access level. You can enter one or more keywords.
Defaults
none
Command Modes CONFIGURATION
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
9.5(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9000, S6000, S4820T, S4810, and MXL.
Related Commands
userrole
show role
Display information on permissions assigned to a command, including user role and/or permission level.
Syntax Parameters
show role mode {mode} {command}
command mode mode
Enter the command's keywords to assign the command to a certain access level. You can enter one or all of the keywords.
Enter keyword then one of the following modes.
configure
exec
interface
line
route-map
router
Defaults
none
Command Modes EXEC Privilege
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
9.5(0.1)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500.
1326 Security
Examples
Related Commands
Version
9.5(0.0)
Description
Introduced on the Z9000, S6000, S4820T, S4810, MXL
Dell#show role mode configure username Role access: sysadmin Dell#show role mode configure management route Role access: netadmin, sysadmin Dell#show role mode configure management crypto-policy Role access: secadmin, sysadmin
userrole, username, privilege
show userroles
Display information on all defined user roles.
Syntax Example
show userroles
Dell#show userroles
Role
Inheritance
netoperator
netadmin
secadmin sysadmin
netoperator
testadmin
netadmin
Modes Exec Exec Config Interface Line Router IP Route-map Protocol MAC Exec Config Exec Config Interface Line Router IP Route-map Protocol MAC Exec Config Interface Line Router IP Route-map Protocol MAC
Command Modes EXEC Privilege
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
9.5(0.1)
9.5(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the Z9000, S6000, S4820T, S4810, MXL.
Example
Dell#show userroles
Role
Inheritance
netoperator
netadmin
secadmin sysadmin
netoperator
testadmin
netadmin
Modes Exec Exec Config Interface Line Router IP Route-map Protocol MAC Exec Config Exec Config Interface Line Router IP Route-map Protocol MAC Exec Config Interface Line Router IP Route-map Protocol MAC
Related Commands
userrole, username
Security 1327
userrole
Create user roles for the role-based security model.
Syntax
userrole name inherit existing-role-name
To delete a role name, use the no userrole name command. Note that the reserved role names may not be deleted.
Parameters
name
inherit existingrole-name
Enter a text string for the name of the user up to 63 characters. It cannot be one of the system defined roles (sysadmin, secadmin, netadmin, netoperator).
Enter the inherit keyword then specify the system defined role to inherit permissions from (sysadmin, secadmin, netadmin, netoperator).
Defaults
none
Command Modes CONFIGURATION
Command History
Version
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
9.5(0.1)
9.5(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the Z9000, S6000, S4820T, S4810, MXL.
Usage Information
Instead of using the system defined user roles, you can create a new user role that best matches your organization. When you create a new user role, you first inherit permissions from one of the system defined roles. Otherwise you would have to create a user role from scratch. You then restrict commands or add commands to that role. For information about this topic, See Modifying Command Permissions for Roles.
NOTE: You can change user role permissions on system pre-defined user roles or user-defined user roles.
Important Points to Remember
Consider the following when creating a user role:
Only the system administrator and user-defined roles inherited from the system administrator can create roles and usernames. Only the system administrator, security administrator, and roles inherited from these can use the role command to modify command permissions. The security administrator and roles inherited by security administrator can only modify permissions for commands they already have access to.
Make sure you select the correct role you want to inherit.
Related Commands
NOTE: If you inherit a user role, you cannot modify or delete the inheritance. If you want to change or remove the inheritance, delete the user role and create it again. If the user role is in use, you cannot delete the user role.
role mode { { { addrole | deleterole } role-name } | reset } command � Modifies (adds or deletes) command permissions for newly created user roles and system defined roles.
role mode { { { addrole | deleterole } role-name } | reset } command � Modifies (adds or deletes) command permissions for newly created user roles and system defined roles.
1328 Security
52
Service Provider Bridging
Service provider bridging is composed of virtual local area network (VLAN) Stacking, Layer 2 Protocol Tunneling, and Provider Backbone Bridging as described in the Dell Networking OS Configuration Guide Service Provider Bridging chapter.
This chapter includes command line information (CLI) for the Dell Networking operating software Layer 2 Protocol Tunneling (L2PT). L2PT enables protocols to tunnel through an 802.1q tunnel.
Dell Networking OS supports L2PT on Dell Networking OS.
For more information, refer to VLAN Stacking, Spanning Tree Protocol (STP), and GARP VLAN Registration (GVRP).
Important Points to Remember
L2PT is enabled at the interface VLAN-Stack VLAN level. For more information about Stackable VLAN (VLAN-Stacking) commands, refer to VLAN Stacking.
The default behavior is to disable protocol packet tunneling through the 802.1q tunnel. Rate-limiting is required to protect against bridge protocol data units (BPDU) attacks. A port channel (including through link aggregation control protocol [LACP]) can be configured as a VLAN-Stack access or
trunk port. Address resolution protocol (ARP) packets work as expected across the tunnel. Far-end failure detection (FEFD) works the same as with Layer 2 links. Protocols that use Multicast MAC addresses (for example, open shortest path first [OSPF]) work as expected and carry
over to the other end of the VLAN-Stack VLAN.
Topics:
� debug protocol-tunnel � protocol-tunnel � protocol-tunnel destination-mac � protocol-tunnel enable � protocol-tunnel rate-limit � show protocol-tunnel
debug protocol-tunnel
Enable debugging to ensure incoming packets are received and rewritten to a new MAC address.
Syntax
debug protocol-tunnel interface {in | out | both} [vlan vlan-id] [count value]
To disable debugging, use the no debug protocol-tunnel interface {in | out | both} [vlan vlan-id] [count value] command.
Parameters
interface
Enter one of the following interfaces and slot/port information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
Service Provider Bridging 1329
in | out | both
vlan vlan-id count value
Enter the keyword in, out, or both to debug incoming interfaces, outgoing interfaces, or both incoming and outgoing interfaces.
Enter the keyword vlan then the VLAN ID. The range is from 1 to 4094.
Enter the keyword count then the number of debug outputs. The range is from 1 to 100.
Defaults
Debug disabled.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.5.1.0 8.3.7.0 8.2.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Introduced on the C-Series, E-Series, and E-Series ExaScale. Introduced
protocol-tunnel
Enable protocol tunneling on a stacked (Q-in-Q) VLAN for specified protocol packets.
Syntax
protocol-tunnel {rate-limit rate| stp} To disable protocol tunneling for a Layer 2 protocol, use the no protocol-tunnel command.
Parameters
rate-limit rate stp
Enter the keyword rate-limit followed by a number for the rate-limit for tunneled packets on the VMAN. The range is from 64 to 320.
Enter the keyword stp to enable protocol tunneling on a spanning tree, including STP, MSTP, RSTP, and PVST.
Defaults
none
Command Modes CONF-IF-VLAN
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guid.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON.
1330 Service Provider Bridging
Example
Related Command
Version
9.2(1.0) 9.0.2.0 8.3.11.1 8.5.1.1
8.2.1.0 7.4.1.0
Description
Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Added support for 802.1X, E-LMI, GMRP, GVRP, LLDP, LACP, MMRP, MVRP, and OAM 802.3ah protocol traffic to the E-Series ExaScale. Introduced on the C-Series, E-Series, and E-Series ExaScale. Introduced
Dell#conf Dell(conf)#interface vlan 2 Dell(conf-if-vl-2)#vlan-stack compatible Dell(conf-if-vl-2)#member Te 1/2-3 Dell(conf-if-vl-2)#protocol-tunnel stp Dell(conf-if-vl-2)#protocol-tunnel enable show protocol-tunnel -- displays tunneling information for all VLANs.
protocol-tunnel destination-mac
Overwrite the BPDU destination MAC address with a specific value.
Syntax Parameters
protocol-tunnel destination-mac xstp address
stp
Change the default destination MAC address used for L2PT to another value.
Defaults
The default destination MAC is 01:01:e8:00:00:00.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series, and S-Series. Introduced
Usage Information
Related Command
When you enable VLAN-Stacking, no protocol packets are tunneled. show protocol-tunnel -- displays tunneling information for all VLANs.
Service Provider Bridging 1331
protocol-tunnel enable
Enable protocol tunneling globally on the system.
Syntax
protocol-tunnel enable To disable protocol tunneling, use the no protocol-tunnel enable command.
Defaults
Disabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced
Usage Information
Dell Networking OS must have the default CAM profile with the default microcode before you enable L2PT.
protocol-tunnel rate-limit
Enable traffic rate limiting per box.
Syntax
protocol-tunnel rate-limit rate To reset the rate limit to the default, use the no protocol-tunnel rate-limit rate command.
Parameters
rate
Enter the rate in frames per second. The range is from 75 to 3000. The default is 75.
Defaults
75 frames per second.
Command Modes CONF-IF-VLAN-STACK
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500.
1332 Service Provider Bridging
Example
Related Commands
Version
9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0
7.4.1.0
Description
Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series, E-Series TeraScale, and E-Series ExaScale. Maximum rate limit on E-Series reduced from 4000 to 3000. Introduced
Dell(conf-if-vl-2)#vlan-stack compatible Dell(conf-if-vl-2-stack)#protocol-tunnle rate-limit 100 <<<<<<<< VLAN stack mode Dell(conf-if-vl-2-stack)#show config ! interface Vlan 2
no ip address mtu 1000 vlan-stack compatible protocol-tunnel rate-limit 100 shutdown
show protocol-tunnel -- displays tunneling information for all VLANs. show running-config -- displays the current configuration.
show protocol-tunnel
Display protocol tunnel information for all or a specified VLAN-Stack VLAN.
Syntax Parameters
show protocol-tunnel [vlan vlan-id]
vlan vlan-id
(OPTIONAL) Enter the keyword vlan then the VLAN ID to display information for the one VLAN. The range is from 1 to 4094.
Defaults
none
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series, E-Series and E-Series ExaScale.
Service Provider Bridging 1333
Example
Version
7.4.1.0
Description
Introduced
Dell#show protocol-tunnel
System Rate-Limit: 75 frames/second
VLAN Protocols Interface
1000 STP,PVST
Te 5/7,Te 5/6
1001 LLDP,GVRP Te 5/7,Te 5/6
1002 MMRP,MVRP Te 5/7,Te 5/6
1003 LACP,DOT1X Te 5/7,Te 5/6
1004 OAM,PAUSE Te 5/7,Te 5/6
1005 E-LMI
Te 5/7,Te 5/6
Example (Specific VLAN)
Dell#show protocol-tunnel vlan 2
System Rate-Limit: 1000 Frames/second
Interface Vlan Protocol(s)
Te1/2
2
STP, PVST
Dell#
Related Commands
show running-config -- displays the current configuration.
1334 Service Provider Bridging
53
sFlow
The Dell Networking operating software (OS) supports sFlow commands on Dell Networking OS. Dell Networking operating software sFlow monitoring system includes an sFlow Agent and an sFlow Collector. The sFlow Agent combines the flow samples and interface counters into sFlow datagrams and forwards them to the sFlow
Collector. The sFlow Collector analyses the sFlow Datagrams received from the different devices and produces a network-wide view of
traffic flows.
Important Points to Remember
Dell Networking recommends that the sFlow Collector be connected to the Dell Networking chassis through a line card port rather than the route processor module (RPM) Management Ethernet port.
Dell Networking operating software exports all sFlow packets to the sFlow Collector. A small sampling rate can equate to many exported packets. A backoff mechanism is automatically applied to reduce this amount. Some sampled packets may be dropped when the exported packet rate is high and the backoff mechanism is about to or is starting to take effect. The dropEvent counter, in the sFlow packet, is always zero.
sFlow sampling is done on a per-port basis. Community list and local preference fields are not filled up in the extended gateway element in the sFlow datagram. The 802.1P source priority field is not filled up in the extended switch element in the sFlow datagram. Only Destination and Destination Peer AS numbers are packed in the dst-as-path field in the extended gateway element. If the packet being sampled is redirected using policy-based routing (PBR), the sFlow datagram may contain incorrect
extended gateway/router information. sFlow does not support packing extended information for IPv6 packets. Only the first 128 bytes of the IPv6 packet is
shipped in the datagram. The source virtual local area network (VLAN) field in the extended switch element is not packed if there is a routed packet. The destination VLAN field in the extended switch element is not packed if there is a multicast packet. The sFlow sampling functionality is supported only for egress traffic and not for ingress traffic. The maximum number of packets that can be sampled and processed per second is:
7500 packets when no extended information packing is enabled. 7500 packets when only extended-switch information packing is enabled (refer to sflow extended-switch enable).
Topics:
� sflow collector � sflow enable (Global) � sflow ingress-enable � sflow extended-switch enable � sflow max-header-size extended � sflow polling-interval (Global) � sflow polling-interval (Interface) � sflow sample-rate (Global) � sflow sample-rate (Interface) � show sflow
sFlow 1335
sflow collector
Configure a collector device to which sFlow datagrams are forwarded.
Syntax
sflow collector {ip-address | ipv6-address} agent-addr {ip-address | ipv6address} [number [max-datagram-size number]] | [max-datagram-size number] [vrf management]
To delete a configured collector, use the no sflow collector {ip-address | ipv6-address} agent-addr {ipv4-address | ipv6-address} [number [max-datagram-size number]] | [max-datagram-size number] [vrf management] command.
Parameters
sflow collector ip-address | ipv6-address
Enter the IP address of the collector in dotted decimal format for IPv4 or x:x:x:x::x format for IPv6.
NOTE: The :: notation specifies successive hexadecimal fields of zeros.
agent-addr ipaddress | ipv6address
Enter the keyword agent-addr followed by the sFlow agent IP address in dotted decimal format for IPv4 or x:x:x:x::x format for IPv6.
NOTE: The :: notation specifies successive hexadecimal fields of zeros.
number
max-datagramsize number vrf management
(OPTIONAL) Enter the user datagram protocol (UDP) port number. The range is from 0 to 65535. The default is 6343.
(OPTIONAL) Enter the keyword max-datagram-size then the size number in bytes. The range is from 400 to 1500. The default is 1400.
(OPTIONAL) Enter the keyword vrf followed by the keyword management to configure the collector device corresponding to the default VRF and the management VRF respectively.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4.(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.4.2.3
8.4.1.1 8.3.7.0 8.2.1.0 8.1.1.0 7.7.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Added support for VRF. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for IPv6 sFlow collectors and agents on the E-series TeraScale, CSeries, and S-Series. Added support for IPv6 sFlow collectors and agents on the E-series ExaScale. Introduced on the S4810. Introduced S-Series Stacking. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series.
1336 sFlow
Usage Information
Example
Version
6.5.1.0 6.2.1.1
Description
Expanded the no form of the command to mirror the syntax used to configure. Introduced on the E-Series.
You can configure up to two sFlow collectors (IPv4 or IPv6). If two collectors are configured, traffic samples are sent to both.
The sFlow agent address is carried in a field in SFlow packets and is used by the collector to identify the sFlow agent.
In sFlow, the agent address is a single invariant IPv4 or IPv6 address used to identify the agent to the collector. It is usually assigned the address of a loopback interface on the agent, which provides invariance. The agent address is carried as a field in the payload of the sFlow packets.
As part of the sFlow-MIB, if the SNMP request originates from a configured collector, Dell Networking OS returns the corresponding configured agent IP in the MIB requests. Dell Networking OS checks to ensure that two entries are not configured for the same collector IP with a different agent IP. Should that happen, Dell Networking OS generates the following error: %Error: Different agent-addr attempted for an existing collector.
Dell(conf)#sflow collector 10.1.1.25 agent-addr 10.1.1.10 vrf management
sflow enable (Global)
Enable sFlow globally.
Syntax
sflow enable To disable sFlow, use the no sflow enable command.
Defaults
Disabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 8.1.1.0 7.7.1.0 7.6.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced S-Series Stacking. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
sFlow 1337
Usage Information
Related Commands
sFlow is disabled by default. In addition to this command, sFlow needs to be enable on individual interfaces where sFlow sampling is desired.
sflow enable (Interface) -- enables sFlow on interfaces.
sflow ingress-enable
Enable sFlow ingress on interfaces.
Syntax
sflow ingress-enable To disable sFlow, use the no sflow ingress enable command.
Defaults
Disabled.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.7(0.0) 9.2(1.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S-Series, Z-Series, and MXL switch. Introduced on the Z9500.
Usage Information
When you enable ingress sFlow on an interface, flow sampling is done on any incoming traffic. NOTE: After a physical port is a member of a LAG, it inherits the sFlow configuration from the LAG port.
Related Commands
sflow enable (Global) -- turns sFlow globally.
sflow extended-switch enable
Enable packing information on a switch only.
Syntax
sflow extended-switch enable To disable packing information, use the no sflow extended-switch [enable] command.
Parameters
enable
Enter the keyword enable to enable global extended information.
Defaults
Disabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2)
Introduced on the S4048-ON. Introduced on the S3048-ON.
1338 sFlow
Usage Information
Related Commands
Version
9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 8.1.1.0 7.7.1.0 7.6.1.0 7.4.1.0
Description
Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on S-Series Stacking. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Dell Networking OS enhances the sflow implementation for real time traffic analysis on the E-Series to provide extended gateway information in cases where the destination IP addresses are learned by different routing protocols and for cases where the destination is reachable over ECMP.
show sflow -- displays the sFlow configuration.
sflow max-header-size extended
Set the maximum header size of a packet to 256 bytes.
Syntax
sflow max-header-size extended
To reset the maximum header size of a packet, use the[no] sflow max-header-size extended command.
Parameters
extended
Enter the keyword extended to copy 256 bytes from the sample packets to sFlow datagram.
Defaults
128 bytes
Command Modes CONFIGURATION
INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S Series and Z Series switches.
Example
Dell(conf)#sflow max-header-size extended
sFlow 1339
sflow polling-interval (Global)
Set the sFlow polling interval at a global level.
Syntax
sflow polling-interval interval value To return to the default, use the no sflow polling-interval interval command.
Parameters
interval value
Enter the interval value in seconds. The range is from 15 to 86400 seconds. The default is 20 seconds.
Defaults
20 seconds
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 8.1.1.0 7.7.1.0 7.6.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on S-Series Stacking. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
The polling interval for an interface is the maximum number of seconds between successive samples of counters sent to the collector. This command changes the global default counter polling (20 seconds) interval. You can configure an interface to use a different polling interval.
sflow polling-interval (Interface) -- sets the polling interval for an interface.
sflow polling-interval (Interface)
Set the sFlow polling interval at an interface (overrides the global-level setting.)
Syntax
sflow polling-interval interval value To return to the default, use the no sflow polling-interval interval command.
Parameters
interval value
Enter the interval value in seconds. The range is from 15 to 86400 seconds. The default is the global counter polling interval.
Defaults
The same value as the current global default counter polling interval.
Command Modes INTERFACE
1340 sFlow
Command History
Usage Information Related Commands
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 8.1.1.0 7.7.1.0 7.6.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on S-Series Stacking. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
This command sets the counter polling interval for an interface.
sflow polling-interval (Global) -- globally sets the polling interval.
sflow sample-rate (Global)
Change the global default sampling rate.
Syntax
sflow sample-rate value To return to the default sampling rate, use the no sflow sample-rate command.
Parameters
value
Enter the sampling rate value. For the C-Series and S-Series, the range is from 256 to 8388608 packets Enter values in powers of 2 only; for example, 4096, 8192, 16384, and so on. The default is 32768 packets.
Defaults
32768 packets
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000.
sFlow 1341
Usage Information
Related Commands
Version
8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 8.1.1.0 7.7.1.0 7.6.1.0 7.4.1.0
Description
Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on S-Series Stacking. Introduced on the E-Series ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Sample-rate is the average number of packets skipped before the sample is taken. This command changes the global default sampling rate. You can configure an interface to use a different sampling rate than the global sampling rate. If the value entered is not a correct power of 2, the command generates an error message with the previous and next power of 2 value. Select one of these two packet numbers and re-enter the command.
sflow sample-rate (Interface) -- changes the interface sampling rate.
sflow sample-rate (Interface)
Change the interface default sampling rate.
Syntax
sflow sample-rate value To return to the default sampling rate, use the no sflow sample-rate command.
Parameters
value
Enter the sampling rate value. For the C-Series and S-Series, the range is from 256 to 8388608 packets. Enter values in powers of 2 only; for example, 4096, 8192, 16384, etc. The default is 32768 packets.
Defaults
The Global default sampling.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 8.1.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on S-Series Stacking. Introduced on the E-Series ExaScale. Introduced on the S-Series.
1342 sFlow
Usage Information
Related Commands
Version
7.6.1.0 6.2.1.1
Description
Introduced on the C-Series. Introduced on the E-Series.
This command changes the sampling rate for an interface. By default, the sampling rate of an interface is set to the same value as the current global default sampling rate. If the value entered is not a correct power of 2, the command generates an error message with the previous and next power-of-2 value. Select one of these two number and re-enter the command.
sflow sample-rate (Global) -- changes the sampling rate globally.
show sflow
Display the current sFlow configuration.
Syntax Parameters
show sflow [interface]
interface
(OPTIONAL) Enter the following keywords and slot/port or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For the Management interface on the stack-unit, enter the keyword ManagementEthernet then the slot/port information. The slot range is from 1 to 11. The port range is 1.
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a 100/1000 Ethernet interface, enter the keyword GigabitEthernet then the slot/port information.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 8.1.1.0 7.7.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on S-Series Stacking. Introduced on the E-Series ExaScale. Introduced on the S-Series.
sFlow 1343
Usage Information
Example
Version
7.6.1.0 6.2.1.1
Description
Introduced on the C-Series. Introduced on the E-Series.
The dropEvent counter (sFlow samples dropped due to sub-sampling) shown in the following example always displays a value of zero.
Dell#show sflow sFlow services are enabled Egress Management Interface sFlow services are disabled Global default sampling rate: 32768 Global default counter polling interval: 20 Global default extended maximum header size: 128 bytes Global extended information enabled: none 1 collectors configured Collector IP addr: 100.1.1.1, Agent IP addr: 1.1.1.2, UDP port: 6343 VRF: Default 0 UDP packets exported 0 UDP packets dropped 0 sFlow samples collected stack-unit 1 Port set 1
Te 1/1: configured rate 16384, actual rate 16384 <<< sampling rate based on line speed if global sampling rate is default Dell#
1344 sFlow
54
Simple Network Management Protocol (SNMP) and Syslog
This chapter contains commands to configure and monitor the simple network management protocol (SNMP) v1/v2/v3 and Syslog. Both features are supported on Dell Networking OS.
Topics:
� SNMP Commands � Syslog Commands
SNMP Commands
The following SNMP commands are available in the Dell Networking OS.
The simple network management protocol (SNMP) is used to communicate management information between the network management stations and the agents in the network elements. Dell Networking OS supports SNMP versions 1, 2c, and 3, supporting both read-only and read-write modes. Dell Networking OS sends SNMP traps, which are messages informing an SNMP management system about the network. Dell Networking OS supports up to 16 SNMP trap receivers.
Important Points to Remember
Typically, 5-second timeout and 3-second retry values on an SNMP server are sufficient for both LAN and WAN applications. If you experience a timeout with these values, the recommended best practice on Dell Networking switches (to accommodate their high port density) is to increase the timeout and retry values on your SNMP server to the following:
SNMP Timeout -- greater than 3 seconds. SNMP Retry count -- greater than 2 seconds. If you want to query an E-Series switch using SNMP v1/v2/v3 with an IPv6 address, configure the IPv6 address on a nonmanagement port on the switch. If you want to send SNMP v1/v2/v3 traps from an E-Series using an IPv6 address, use a non-management port. SNMP v3 informs are not currently supported with IPv6 addresses. If you are using access control lists (ACLs) in an SNMP v3 configuration, group ACL overrides user ACL if the user is part of that group. SNMP operations are not supported on a virtual local area network (VLAN).
show snmp
Display the status of SNMP network elements.
Syntax
show snmp
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
Simple Network Management Protocol (SNMP) and Syslog 1345
Example
Related Commands
Version
9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 E-Series legacy command
Description
Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Dell#show snmp 32685 SNMP packets input 0 Bad SNMP version errors 0 Unknown community name 0 Illegal operation for community name supplied 0 Encoding errors 96988 Number of requested variables 0 Number of altered variables 31681 Get-request PDUs 968 Get-next PDUs 0 Set-request PDUs 61727 SNMP packets output 0 Too big errors (Maximum packet size 1500) 9 No such name errors 0 Bad values errors 0 General errors 32649 Response PDUs 29078 Trap PDUs
Dell# snmp-server community -- enables the SNMP and set community string.
show snmp engineID
Display the identification of the local SNMP engine and all remote engines that are configured on the router.
Syntax
show snmp engineID
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500.
1346 Simple Network Management Protocol (SNMP) and Syslog
Example
Related Commands
Version
9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0
Description
Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Dell#show snmp engineID
Local SNMP engineID: 0000178B02000001E80214A8
Remote Engine ID
IP-addr
Port
80001F88043132333435 172.31.1.3 5009
80001F88043938373635 172.31.1.3 5008
Dell#
snmp-server engineID -- configures local and remote SNMP engines on the router.
show snmp group
Display the group name, security model, status, and storage type of each group.
Syntax
show snmp group
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 E-Series legacy command
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
Example
The following Example displays a group named ngroup. The ngroup has a security model of version 3 (v3) with authentication (auth), the read and notify name is nview with no write view name specified, and finally the row status is active.
Dell#show snmp group groupname: v1v2creadg
security model: v1
Simple Network Management Protocol (SNMP) and Syslog 1347
Related Commands
readview : v1v2cdefault notifyview: v1v2cdefault row status: active Dell#
writeview: no write view specified context: no context specified
snmp-server group -- configures an SNMP server group.
show snmp user
Display the information configured on each SNMP user name.
Syntax
show snmp user
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 E-Series legacy command
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Example
Dell#show snmp user
User name: v1v2creadu
Engine ID: 0000178B02000001E80214A8
storage-type: nonvolatile
active
Authentication Protocol: None
Privacy Protocol: None
Dell#
snmp ifmib ifalias long
Display the entire description string through the Interface MIB, which would be truncated otherwise to 63 characters.
Syntax
snmp ifmib ifalias long
Defaults
Interface description truncated beyond 63 characters.
Command Modes CONFIGURATION
1348 Simple Network Management Protocol (SNMP) and Syslog
Command History
Example
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 unknown
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Dell#config!------command run on host connected to switch: --------------! > snmpwalk -c public 10.10.10.130 .1.3.6.1.2.1.31 | grep -i alias | more IF-MIB::ifAlias.134530304 = STRING: This is a port connected to Router2. This is a port connected to IF-MIB::ifAlias.134792448 = STRING: !------command run on Dell Networkingswitch: --------------! Dell#snmp ifmib ifalias long !------command run on server connected to switch: --------------! > snmpwalk -c public 10.10.10.130 .1.3.6.1.2.1.31 | grep -i alias | more IF-MIB::ifAlias.134530304 = STRING: This is a port connected to Router2. This is a port connected to Router2. This is a port connected to Router2. This is a port connected to Router2. This is a port connected to Router2. IF-MIB::ifAlias.134792448 = STRING: Dell#config
snmp-server community
Configure a new community string access for SNMPv1 v2 and v3.
Syntax
snmp-server community community-name {ro | rw} [ipv6 ipv6-access-list-name [ipv6 ipv6-access-list-name | access-list-name | security-name name] | security-name name [ipv6 ipv6-access-list-name | access-list-name | security-name name] | access-list-name [ipv6 ipv6-access-list-name | access-list-name | security-name name]]]
To remove access to a community, use the no snmp-server community community-string {ro | rw} [security-name name [access-list-name | ipv6 access-list-name | access-list-name ipv6 access-list-name]] command.
Parameters
community-name Enter a text string (up to 20 characters long) to act as a password for SNMP.
ro
Enter the keyword ro to specify read-only permission.
rw
Enter the keyword rw to specify read-write permission.
Simple Network Management Protocol (SNMP) and Syslog 1349
ipv6 access-list- (Optional) Enter the keyword ipv6 then an IPv6 ACL name (a string up to 16
name
characters long).
security-name name
(Optional) Enter the keywords security-name then the security name as defined by the community MIB.
access-list-name (Optional) Enter a standard IPv4 access list name (a string up to 16 characters long).
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
The following example configures a community named public that is mapped to the security named guestuser with Read Only (ro) permissions.
The security-name parameter maps the community string to an SNMPv3 user/security name as defined by the community MIB.
If a community string is configured without a security-name (for example, snmp-server community public ro), the community is mapped to a default security-name/group:
v1v2creadu / v1v2creadg -- maps to a community with ro (read-only) permissions. v1v2cwriteu/ v1v2cwriteg -- maps to a community with rw (read-write) permissions.
The community-name parameter indexes this command.
If you do not configure the snmp-server community command, you cannot query SNMP data. Only Standard IPv4 ACL and IPv6 ACL is supported in the optional access-list-name.
The command options ipv6, security-name, and access-list-name are recursive. In other words, each option can, in turn, accept any of the three options as a sub-option, and each of those sub-options can accept any of the three sub-options as a sub-option, and so forth. The second Example shows the creation of a standard IPv4 ACL called snmp-ro-acl and then assigning it to the SNMP community guest.
NOTE: For IPv6 ACLs, only IPv6 and UDP types are valid for SNMP; TCP and ICMP rules are not valid for SNMP. In IPv6 ACLs, port rules are not valid for SNMP.
Example
Dell#config Dell(conf)# snmp-server community public ro Dell(conf)# snmp-server community guest ro security-name guestuser Dell(conf)#
1350 Simple Network Management Protocol (SNMP) and Syslog
Example
Related Commands
Dell(conf)# ip access-list standard snmp-ro-acl Dell(config-std-nacl)#seq 5 permit host 10.10.10.224 Dell(config-std-nacl)#seq 10 deny any count ! Dell(conf)#snmp-server community guest ro snmp-ro-acl Dell(conf)#
ip access-list standard -- names (or selects) a standard access list to filter based on IP address. ipv6 access-list -- configures an access list based on IPv6 addresses or protocols. show running-config -- displays the current SNMP configuration and defaults.
snmp-server contact
Configure contact information for troubleshooting this SNMP node.
Syntax
snmp-server contact text To delete the SNMP server contact information, use the no snmp-server contact command.
Parameters
text
Enter an alphanumeric text string, up to 55 characters long.
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 E-Series legacy command
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
snmp-server enable traps
Enable SNMP traps.
Syntax
snmp-server enable traps [notification-type] [notification-option]
To disable traps, use the no snmp-server enable traps [notification-type] [notification-option] command.
Simple Network Management Protocol (SNMP) and Syslog 1351
Parameters
notification-type Enter the type of notification from the following list:
bgp -- Notification of changes in the BGP process. config -- Notification of changes to the startup or running configuration. ecfm -- Notification of changes to ECFM. ecmp -- Enable an ECMP trap to notify of ECMP or link bundle traffic
imbalances. envmon -- For Dell Networking device notifications when an environmental
threshold is exceeded. isis -- Notification of intermediate service traps. lacp -- Notification of changes. snmp -- Notification of RFC 1157 traps. stp -- Notification of a state change in the spanning tree protocol (RFC 1493). vlt -- Notification of virtual link trunking. vrrp -- Notification of a state change in a VRRP group. xstp -- Notification of a state change in MSTP (802.1s), RSTP (802.1w), and
PVST+.
notificationoption
For the envmon notification-type, enter one of the following optional parameters:
cam-utilization fan supply temperature
For the snmp notification-type, enter one of the following optional parameters:
authentication coldstart linkdown linkup syslog-reachable syslog-unreachable
Defaults
Not enabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.8(0.0)
9.7(0.0) 9.2(1.0) 9.2(0.0)
9.0.2.0 9.1(0.0) 8.3.19.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Added the following two SNMP notification options: syslog-reachable and syslog-unreachable. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S6000. Added support for copy-config and ECMP traps. Introduced on the S4820T. Introduced on the Z9000.
1352 Simple Network Management Protocol (SNMP) and Syslog
Usage Information
Related Commands
Version
8.3.7.0 8.4.1.0 7.6.1.0 7.5.1.0 E-Series legacy command
Description
Introduced on the S4810. Added support for VRRP traps. Added support for STP and xSTP traps. Introduced on the S-Series. Introduced on the C-Series.
Dell Networking OS supports up to 16 SNMP trap receivers. If you do not configure this command, traps that controlled by this command are not sent. If you do not specify a notification-type and notification-option, all traps are enabled.
snmp-server community -- enables SNMP and sets the community string.
snmp-server engineID
Configure the name for both the local and remote SNMP engines on the router.
Syntax
snmp-server engineID [local engineID] [remote ip-address udp-port portnumber engineID]
To return to the default, use the no snmp-server engineID [local engineID] [remote ipaddress udp-port port-number engineID] command.
Parameters
local engineID
Enter the keyword local followed by the engine ID number that identifies the copy of the SNMP on the local device.
Format (as specified in RFC 3411): 12 octets.
The first four octets are set to the private enterprise number. The remaining eight octets are the MAC address of the chassis.
remote ipaddress
Enter the keyword remote followed by the IP address that identifies the copy of the SNMP on the remote device.
udp-port port- Enter the keywords udp-port followed by the user datagram protocol (UDP) port number engineID number on the remote device. The range is from 0 to 65535. The default is 162.
Defaults
As above.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4.(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Added support for VRF. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T.
Simple Network Management Protocol (SNMP) and Syslog 1353
Usage Information
Related Commands
Version
8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 E-Series legacy command
Description
Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Changing the value of the SNMP Engine ID has important side effects. A user's password (entered on the command line) is converted to a message digest algorithm (MD5) or secure hash algorithm (SHA) security digest. This digest is based on both the password and the local Engine ID. The command line password is then destroyed, as required by RFC 2274. Because of this deletion, if the local value of the Engine ID changes, the security digests of SNMPv3 users is invalid and the users will have to be reconfigured.
For the remote Engine ID, the host IP and UDP port are the indexes to the command that are matched to either overwrite or remove the configuration.
show snmp engineID -- displays the SNMP engine and all the remote engines that are configured on the router.
show running-config snmp -- displays the SNMP running configuration.
snmp-server group
Configure a new SNMP group or a table that maps SNMP users to SNMP views.
Syntax
snmp-server group [group_name {1 | 2c | 3 {auth | noauth | priv}}] [read name] [write name] [notify name] [access access-list-name | ipv6 accesslist-name | access-list-name ipv6 access-list-name]]
To remove a specified group, use the no snmp-server group [group_name {v1 | v2c | v3 {auth | noauth | priv}}] [read name] [write name] [notify name] [access access-list-name | ipv6 access-list-name | access-list-name ipv6 accesslist-name]] command.
Parameters
group_name
Enter a text string (up to 20 characters long) as the name of the group. The following groups are created for mapping to read/write community/security-names (defaults):
v1v2creadg -- maps to a community/security-name with ro permissions. 1v2cwriteg -- maps to a community/security-name rw permissions.
1 | 2c | 3
(OPTIONAL) Enter the security model version number (1, 2c, or 3):
1 is the least secure version. 3 is the most secure of the security modes. 2c allows transmission of informs and counter 64, which allows for integers
twice the width of what is normally allowed.
The default is 1.
auth
noauth priv
(OPTIONAL) Enter the keyword auth to specify authentication of a packet without encryption.
(OPTIONAL) Enter the keyword noauth to specify no authentication of a packet.
(OPTIONAL) Enter the keyword priv to specify both authentication and then scrambling of the packet.
1354 Simple Network Management Protocol (SNMP) and Syslog
read name
(OPTIONAL) Enter the keyword read then a name (a string of up to 20 characters long) as the read view name. The default is GlobalView and is assumed to be every object belonging to the internet (1.3.6.1) OID space.
write name
(OPTIONAL) Enter the keyword write then a name (a string of up to 20 characters long) as the write view name.
notify name
(OPTIONAL) Enter the keyword notify then a name (a string of up to 20 characters long) as the notify view name.
access accesslist-name
(Optional) Enter the standard IPv4 access list name (a string up to 16 characters long).
ipv6 access-list- (Optional) Enter the keyword ipv6 then the IPv6 access list name (a string up to
name
16 characters long).
access-list-name (Optional) Enter both an IPv4 and IPv6 access list name. ipv6 access-listname
Defaults
As above.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.10.2 8.3.7.0 7.6.1.0 7.5.1.0 E-Series legacy command
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for the access parameter. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
The following Example specifies the group named harig as a version 3 user requiring both authentication and encryption and read access limited to the read named rview.
NOTE: The number of configurable groups is limited to 16 groups.
Example
Dell#conf Dell(conf)# snmp-server group harig 3 priv read rview Dell#
Related Commands
show snmp group -- displays the group name, security model, view status, and storage type of each group.
show running-config -- displays the SNMP running configuration.
Simple Network Management Protocol (SNMP) and Syslog 1355
snmp-server host
Configure the recipient of an SNMP trap operation.
Syntax
snmp-server host ip-address | ipv6-address [vrf vrf-name] traps | informs [version 1 | 2c | 3] [auth | no auth | priv] [community-string] [udp-port port-number] [notification-type]
To remove the SNMP host, use the no snmp-server host ip-address [vrf vrf-name] traps | informs [version 1 | 2c | 3] [auth | noauth | priv] [communitystring] [udp-port number] [notification-type] command.
Parameters
ip-address ipv6-address
Enter the keyword host then the IP address of the host (configurable hosts is limited to 16).
Enter the keyword host then the IPv6 address of the host in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zero.
vrf vrf-name
Enter the keyword vrf and then the name of the VRF that the SNMP server uses to connect to the host.
NOTE: You can use this attribute to inform the SNMP engine about the vrf
instance to be used to reach the corresponding remote host to send Trap or
Inform message. If no VRF is specified, then the default VRF is used.
traps informs version 1 | 2c | 3
(OPTIONAL) Enter the keyword traps to send trap notifications to the specified host. The default is traps.
(OPTIONAL) Enter the keyword informs to send inform notifications to the specified host. The default is traps.
(OPTIONAL) Enter the keyword version to specify the security model then the security model version number 1, 2c, or 3:
Version 1 is the least secure version. Version 3 is the most secure of the security modes. Version 2c allows transmission of informs and counter 64, which allows for
integers twice the width of what is normally allowed.
The default is version 1.
auth
noauth priv
communitystring
(OPTIONAL) Enter the keyword auth to specify authentication of a packet without encryption.
(OPTIONAL) Enter the keyword noauth to specify no authentication of a packet.
(OPTIONAL) Enter the keyword priv to specify both authentication and then scrambling of the packet.
Enter a text string (up to 20 characters long) as the name of the SNMP community.
NOTE: For version 1 and version 2c security models, this string represents the name of the SNMP community. The string can be set using this command; however, Dell Networking OS recommends setting the community string using the snmp-server community command before executing this command. For version 3 security model, this string is the USM user security name.
udp-port portnumber
(OPTIONAL) Enter the keywords udp-port followed by the port number of the remote host to use. The range is from 0 to 65535. The default is 162.
notification-type (OPTIONAL) Enter one of the following keywords for the type of trap to be sent to the host:
bgp -- Enable BGP state change traps. ecfm -- Enable ECFM state change traps. entity -- Enable entity change traps.
1356 Simple Network Management Protocol (SNMP) and Syslog
envmon -- Enable SNMP environmental monitor traps. eoam -- Enable EOAM state change traps ets -- Enable ets traps fips -- Enable FIP Snooping state change traps lacp -- Enable LACP state change traps. isis -- Enable ISIS adjacency change traps pfc -- Enable pfc traps snmp -- Enable SNMP trap stp -- Enable 802.1d state change traps vlt -- Enable VLT traps vrrp -- Enable VRRP state change traps xstp -- Enable 802.1s, 802.1w, and PVST+ state change traps
The default is all trap types are sent to host.
Defaults
As above.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4.(0.0) 9.2(1.0) 9.0.2.0 9.1(0.0) 8.3.19.0 8.3.11.1 8.3.7.0 8.4.1.0 7.6.1.0 7.5.1.0 E-Series legacy command
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Added support for VRF. Introduced on the Z9500. Introduced on the S6000. Added support for config and ecmp traps. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for VRRP traps. Added support for STP and xSTP notification types. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
In order to configure the router to send SNMP notifications, enter at least one snmp-server host command. If you enter the command with no keywords, all trap types are enabled for the host. If you do not enter an snmp-server host command, no notifications are sent.
In order to enable multiple hosts, issue a separate snmp-server host command for each host. You can specify multiple notification types in the command for each host.
When multiple snmp-server host commands are given for the same host and type of notification (trap or inform), each succeeding command overwrites the previous command. Only the last snmpserver host command will be in effect. For example, if you enter an snmp-server host inform command for a host and then enter another snmp-server host inform command for the same host, the second command replaces the first command.
Simple Network Management Protocol (SNMP) and Syslog 1357
Related Commands
The snmp-server host command is used with the snmp-server enable command. Use the snmp-server enable command to specify which SNMP notifications are sent globally. For a host to receive most notifications, at least one snmp-server enable command and the snmp-server host command for that host must be enabled.
NOTE: For v1 / v2c trap configuration, if the community-string is not defined using the snmpserver community command prior to using this command, the default form of the snmp-server community command automatically is configured with the community-name the same as specified in the snmp-server host command.
Configuring Informs
To send an inform, use the following steps:
1. Configure a remote engine ID. 2. Configure a remote user. 3. Configure a group for this user with access rights. 4. Enable traps. 5. Configure a host to receive informs.
snmp-server enable traps -- enables SNMP traps.
snmp-server community -- configures a new community SNMPv1 or SNMPv2c.
snmp-server location
Configure the location of the SNMP server.
Syntax
snmp-server location text To delete the SNMP location, use the no snmp-server location command.
Parameters
text
Enter an alpha-numeric text string, up to 55 characters long.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 E-Series legacy command
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
1358 Simple Network Management Protocol (SNMP) and Syslog
snmp-server packetsize
Set the largest SNMP packet size permitted. Wen the SNMP server is receiving a request or generating a reply, use the snmpserver packetsize global configuration command.
Syntax Parameters
snmp-server packetsize byte-count
byte-count
Enter one of the following values 8, 16, 24 or 32. Packet sizes are 8000 bytes, 16000 bytes, 32000 bytes, and 64000 bytes.
Defaults
8
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 E-Series legacy command
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
snmp-server trap-source
Configure a specific interface as the source for SNMP traffic.
Syntax
snmp-server trap-source interface To disable sending traps out a specific interface, use the no snmp trap-source command.
Parameters
interface
Enter the following keywords and slot/port or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For a port channel interface, enter the keywords port-channel then a number.
For a Null interface, enter the keyword null then the Null interface number. For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Defaults
The IP address assigned to the management interface is the default.
Command Modes CONFIGURATION
Simple Network Management Protocol (SNMP) and Syslog 1359
Command History
Usage Information Related Commands
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.5.1.0 7.6.1.0 7.5.1.0 E-Series legacy command
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for 4-port 40G line cards on ExaScale. Introduced on the S-Series. Introduced on the C-Series.
To enable this snmp-server trap-source command, configure an IP address on the interface and enable the interface configured as an SNMP trap source.
snmp-server community -- sets the community string.
snmp-server user
Configure a new user to an SNMP group.
Syntax
snmp-server user name {group_name remote ip-address udp-port port-number} [1 | 2c | 3] [encrypted] [auth {md5 | sha} auth-password] [priv {des56 | aes128} priv password] [access access-list-name | ipv6 access-list-name | access-list-name ipv6 access-list-name]
To remove a user from the SNMP group, use the no snmp-server user name {group_name remote ip-address udp-port port-number} [1 | 2c | 3] [encrypted] [auth {md5 | sha} auth-password] [priv {des56 | aes128} priv password] [access accesslist-name | ipv6 access-list-name | access-list-name ipv6 access-list-name] command.
Parameters
name group_name
Enter the name of the user (not to exceed 20 characters), on the host that connects to the agent.
Enter a text string (up to 20 characters long) as the name of the group. The following groups are created for mapping to read/write community/security-names (defaults):
v1v2creadu -- maps to a community with ro permissions. 1v2cwriteu -- maps to a community rw permissions.
remote ipaddress
vrf vrf-name
Enter the keywords udp-port then the user datagram protocol (UDP) port number on the remote device. The range is from 0 to 65535. The default is 162.
Enter the keywords vrf and then the name of the VRF this is used to connect to the SNMP server.
1360 Simple Network Management Protocol (SNMP) and Syslog
udp-port portnumber 1 | 2c | 3
encrypted auth md5 | sha
auth-password priv des56 | aes128
NOTE: Use this attribute to specify a VRF name that is used to connect to the remote host. If no VRF is specified, then the default VRF is used.
Enter the keywords udp-port then the UDP (User Datagram Protocol) port number on the remote device. The range is from 0 to 65535. The default is 162.
(OPTIONAL) Enter the security model version number (1, 2c, or 3):
1 is the least secure version. 3 is the most secure of the security modes. 2c allows transmission of informs and counter 64, which allows for integers
twice the width of what is normally allowed.
The default is 1.
(OPTIONAL) Enter the keyword encrypted to specify the password appear in encrypted format (a series of digits, masking the true characters of the string).
(OPTIONAL) Enter the keyword auth to specify authentication of a packet without encryption.
(OPTIONAL) Enter the keyword md5 or sha to designate the authentication level.
md5 -- Message Digest Algorithm sha -- Secure Hash Algorithm
(OPTIONAL) Enter a text string (up to 20 characters long) password that enables the agent to receive packets from the host. Minimum: eight characters long.
(OPTIONAL) Enter the keywords priv to initiate a privacy authentication level setting.
(OPTIONAL) Enter the keyword des56 or aes128 to specify the encryption mode.
aes128 -- Use 128 bit AES algorithm in CFB mode for encryption.
des56 -- Use 56 bit DES algorithm in CBC mode for encryption.
priv password
(OPTIONAL) Enter a text string (up to 20 characters long) password that enables the host to encrypt the contents of the message it sends to the agent. Minimum: eight characters long.
access accesslist-name
(Optional) Enter the standard IPv4 access list name (a string up to 16 characters long).
ipv6 access-list- (Optional) Enter the keyword ipv6 then the IPv6 access list name (a string up to
name
16 characters long).
access-list-name (Optional) Enter both an IPv4 and IPv6 access list name. ipv6 access-listname
Defaults
As above.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.6.(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Added aes 128 encryption algorithm parameter.
Simple Network Management Protocol (SNMP) and Syslog 1361
Usage Information
Example
Usage Information Example Usage Information Example
Related Commands
Version
9.4.(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0
Description
Added support for VRF. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series.
NOTE: For IPv6 ACLs, only IPv6 and UDP types are valid for SNMP. TCP and ICMP rules are not valid for SNMP. In IPv6 ACLs port rules are not valid for SNMP.
No default values exist for authentication or privacy algorithms and no default password exists. If you forget a password, you cannot recover it; the user must be reconfigured. You can specify either a plaintext password or an encrypted cypher-text password. In either case, the password is stored in the configuration in an encrypted form and displayed as encrypted in the show running-config command.
If you have an encrypted password, you can specify the encrypted string instead of the plain-text password. The following command is an Example of how to specify the command with an encrypted string.
NOTE: The number of configurable users is limited to 16.
Dell# snmp-server user privuser v3group v3 encrypted auth md5 9fc53d9d908118b2804fe80e3ba8763d priv des56 d0452401a8c3ce42804fe80e3ba8763d
The following command is an example of how to enter a plain-text password as the string authpasswd for user authuser of group v3group.
Dell#conf Dell(conf)# snmp-server user authuser v3group v3 auth md5 authpasswd
The following command configures a remote user named n3user with a v3 security model and a security level of authNOPriv.
Dell#conf Dell(conf)# snmp-server user n3user ngroup remote 172.31.1.3 udp-port 5009 3 auth md5 authpasswd
show snmp user -- displays the information configured on each SNMP user name.
snmp-server user (for AES128-CFB Encryption)
Specify that AES128-CFB encryption algorithm needs to be used for transmission of SNMP information. The Advanced Encryption Standard (AES) Cipher Feedback (CFB) 128-bit encryption algorithm is in compliance with RFC 3826. RFCs for SNMPv3 define two authentication hash algorithms, namely, HMAC-MD5-96 and HMAC-SHA1-96. These are the full forms or editions of the truncated versions, namely, HMAC-MD5 and HMAC-SHA1 authentication algorithms.
Syntax
snmp-server user name {group_name remote ip-address udp-port port-number} [1 | 2c | 3] [encrypted] [auth {md5 | sha} auth-password] [priv {des56 |
1362 Simple Network Management Protocol (SNMP) and Syslog
Parameters
aes128�cfb} priv� password] [access access-list-name | ipv6 access-listname | access-list-name ipv6 access-list-name]
To remove a user from the SNMP group, use the no snmp-server user name {group_name remote ip-address udp-port port-number} [1 | 2c | 3] [encrypted] [auth {md5 | sha} auth-password] [priv {des56 | aes128�cfb} priv-password] [access access-list-name | ipv6 access-list-name | access-list-name ipv6 accesslist-name] command.
auth-password aes128 priv-password
(OPTIONAL) Enter a text string (up to 20 characters long) password that enables the agent to receive packets from the host and to send packets to the host. Minimum: eight characters long.
(OPTIONAL) Enter the keyword aes128 to initiate the AES128-CFB encryption algorithm for transmission of SNMP packets.
(OPTIONAL) Enter a text string (up to 20 characters long) password that enables the host to encrypt the contents of the message it sends to the agent and to decrypt the contents of the message it receives from the agent. Minimum: eight characters long.
Defaults
If no authentication or privacy option is configured, then the messages are exchanged (attempted anyway) without any authentication or encryption.
Command Modes CONFIGURATION
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000-ON.
9.3(0.0)
Added support for the AES128-CFB encryption algorithm on the S4820T, S4810, S6000 and Z-Series platforms
Usage Information
Example
To enable robust, effective protection and security for SNMP packets transferred between the server and the client, you can use the snmp-server user username group groupname 3 auth authentication-type auth-password priv aes128 priv-password to specify that AES128-CFB encryption algorithm needs to be used.
You cannot modify the FIPS mode if SNMPv3 users are already configured and present in the system. An error message is displayed if you attempt to change the FIPS mode by using the fips mode enable command in Global Configuration mode. You can enable or disable FIPS mode only if SNMPv3 users are not previously set up. Otherwise, you must remove the previously configured users before you change the FIPS mode.
Dell# snmp-server user privuser v3group v3 encrypted auth md5 9fc53d9d908118b2804fe80e3ba8763d priv aes128 d0452401a8c3ce42804fe80e3ba8763d
Related Commands
show snmp user -- Displays the information configured on each SNMP user name.
snmp-server view
Configure an SNMPv3 view.
Syntax
snmp-server view view-name oid-tree {included | excluded}
To remove an SNMPv3 view, use the no snmp-server view view-name oid-tree {included | excluded} command.
Parameters
view-name
Enter the name of the view (not to exceed 20 characters).
Simple Network Management Protocol (SNMP) and Syslog 1363
oid-tree included excluded
Enter the OID sub tree for the view (not to exceed 20 characters). (OPTIONAL) Enter the keyword included to include the MIB family in the view. (OPTIONAL) Enter the keyword excluded to exclude the MIB family in the view.
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 E-Series legacy command
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
Example
The oid-tree variable is a full sub-tree starting from 1.3.6 and cannot specify the name of a sub-tree or a MIB. The following Example configures a view named rview that allows access to all objects under 1.3.6.1.
Dell# conf Dell#(conf) snmp-server view rview 1.3.6.1 included
Related Commands
show running-config snmp -- displays the SNMP running configuration.
snmp-server vrf
Configures an SNMP agent to bind to a specific VRF.
Syntax
snmp-server vrf vrf-name To undo the SNMP agent configuration, use the no snmp-server vrf vrf-name command.
Parameters
vrf vrf-name
Enter the keyword vrf and then the name of the VRF to associate an SNMP agent with that VRF.
Defaults
Not Enabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
1364 Simple Network Management Protocol (SNMP) and Syslog
Usage Information
Related Commands
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.4(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S-Series and Z9000.
Use this command to bind an SNMP agent to a VRF. The SNMP agent processes the requests from the interfaces that belong to the specified VRF. If no VRF is specified, then the default VRF is used.
show snmp user -- displays the information configured on each SNMP user name.
snmp trap link-status
Enable the interface to send SNMP link traps, which indicate whether the interface is up or down.
Syntax
snmp trap link-status To disable sending link trap messages, use the no snmp trap link-status command.
Defaults
Enabled.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.2(0.0)
8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 E-Series legacy command
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
If the interface is expected to flap during normal usage, you could disable this command.
Simple Network Management Protocol (SNMP) and Syslog 1365
Syslog Commands
The following commands allow you to configure logging functions on all Dell Networking switches.
clear logging
Clear the messages in the logging buffer.
Syntax
clear logging
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.2(0.0)
8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 E-Series legacy command
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Related Commands
show logging -- displays logging settings and system messages in the internal buffer.
clear logging auditlog
Clears audit log.
Syntax
clear logging auditlog
Defaults
none
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2)
Introduced on the S4048-ON. Introduced on the S3048-ON.
1366 Simple Network Management Protocol (SNMP) and Syslog
Example
Related Commands
Version
9.5(0.1) 9.5(0.0)
Description
Introduced on the Z9500. Introduced on the MXL.
Dell(conf)#clear logging auditlog show logging auditlog -- displays audit log
default logging buffered
Return to the default setting for messages logged to the internal buffer.
Syntax
default logging buffered
Defaults
size = 40960; level = 7 or debugging
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 7.6.1.0 7.5.1.0 E-Series legacy command
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S-Series. Introduced on the C-Series.
Related Commands
logging buffered -- sets the logging buffered parameters.
default logging console
Return the default settings for messages logged to the console.
Syntax
default logging console
Defaults
level = 7 or debugging
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Simple Network Management Protocol (SNMP) and Syslog 1367
Related Commands
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 E-Series legacy command
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
logging console -- sets the logging console parameters.
default logging monitor
Return to the default settings for messages logged to the terminal.
Syntax
default logging monitor
Defaults
level = 7 or debugging
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 E-Series legacy command
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Related Commands
logging monitor -- sets the logging monitor parameters. terminal monitor -- sends system messages to the terminal/monitor.
1368 Simple Network Management Protocol (SNMP) and Syslog
default logging trap
Return to the default settings for logging messages to the Syslog servers.
Syntax
default logging trap
Defaults
level = 6 or informational
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 E-Series legacy command
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Related Commands
logging trap -- limit messages logged to the Syslog servers based on severity.
logging
Configure an IP address or host name of a Syslog server where logging messages are sent. Multiple logging servers of both IPv4 and/or IPv6 can be configured.
Syntax
logging {ip-address | ipv6-address | hostname} {{udp {port}} | {tcp {port}} To disable logging, use the no logging command.
Parameters
ip-address ipv6-address
Enter the IPv4 address in dotted decimal format. Enter the IPv6 address in the x:x:x:x::X format.
NOTE: The :: notation specifies successive hexadecimal fields of zeros.
hostname udp
tcp
Enter the name of a host already configured and recognized by the switch.
Enter the keyword udp to enable transmission of log message over UDP followed by port number. The default port is 514
Enter the keyword tcp to enable transmission of log message over TCP followed by port number.
Defaults
Disabled.
Command Modes CONFIGURATION
Simple Network Management Protocol (SNMP) and Syslog 1369
Command History
Usage Information Related Commands
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.5(0.0) 9.2(1.0) 9.0.2.0 9.2(0.0)
8.3.19.0 8.3.11.1 8.3.7.0 8.4.1.0 7.6.1.0 7.5.1.0 E-Series legacy command
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Added udp and tcp keywords for the Z9500. Added udp and tcp keywords for the S4810, S4820T, S6000, Z9000, and MXL. Introduced on the Z9500. Introduced on the S6000. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for IPv6. Introduced on the S-Series. Introduced on the C-Series.
Multiple logging servers of both IPv4 and/or IPv6 can be configured.
logging on -- enables the logging asynchronously to logging buffer, console, Syslog server, and terminal lines.
logging trap -- enables logging to the Syslog server based on severity.
logging buffered
Enable logging and specify which messages are logged to an internal buffer. By default, all messages are logged to the internal buffer.
Syntax
logging buffered [level] [size] To return to the default values, use the default logging buffered command. To disable logging stored to an internal buffer, use the no logging buffered command.
Parameters
level
size
(OPTIONAL) Indicate a value from 0 to 7 or enter one of the following equivalent words: emergencies, alerts, critical, errors, warnings, notifications, informational, or debugging. The default is 7 or debugging.
(OPTIONAL) Indicate the size, in bytes, of the logging buffer. The number of messages buffered depends on the size of each message. The range is from 40960 to 524288. The default is 40960 bytes.
Defaults
level = 7; size = 40960 bytes
Command Modes CONFIGURATION
1370 Simple Network Management Protocol (SNMP) and Syslog
Command History
Usage Information Related Commands
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.2(0.0)
9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 E-Series legacy command
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
When you decrease the buffer size, all messages stored in the buffer are lost. Increasing the buffer size does not affect messages stored in the buffer.
clear logging -- clears the logging buffer. default logging buffered -- returns the logging buffered parameters to the default setting. show logging -- displays the logging setting and system messages in the internal buffer.
logging console
Specify which messages are logged to the console.
Syntax
logging console [level] To return to the default values, use the default logging console command. To disable logging to the console, use the no logging console command.
Parameters
level
(OPTIONAL) Indicate a value from 0 to 7 or enter one of the following parameters: emergencies, alerts, critical, errors, warnings, notifications, informational, or debugging. The default is 7 or debugging.
Defaults
level = 7; size = debugging
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON.
Simple Network Management Protocol (SNMP) and Syslog 1371
Related Commands
Version
9.2(1.0) 9.0.2.0 9.2(0.0)
8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 E-Series legacy command
Description
Introduced on the Z9500. Introduced on the S6000. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
clear logging -- clears the logging buffer. default logging console -- returns the logging console parameters to the default setting. show logging -- displays the logging setting and system messages in the internal buffer.
logging extended
Logs security and audit events to a system log server.
Syntax
logging extended
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.5(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S4810, S4820T, S6000, Z9000, and MXL.
Usage Information
This command is available with or without RBAC enabled. When RBAC is enabled you can restrict access to audit and security logs based on the CLI sessions' user roles. If extended logging is disabled, you can only view system events, regardless of RBAC user role.
When you enabled RBAC and extended logging:
Only the system administrator role can execute this command.
The system administrator and system security administrator roles can view security events and system events.
The system administrator role can view audit, security, and system events.
The network administrator and network operator roles can view system events.
1372 Simple Network Management Protocol (SNMP) and Syslog
Examples
Related Commands
Dell(conf)#logging extended show logging auditlog -- displays audit log, clear logging auditlog-- clears audit log
logging facility
Configure the Syslog facility used for error messages sent to Syslog servers.
Syntax
logging facility [facility-type] To return to the default values, use the no logging facility command.
Parameters
facility-type
(OPTIONAL) Enter one of the following parameters:
auth (authorization system) cron (Cron/at facility) deamon (system deamons) kern (kernel) local0 (local use) local1 (local use) local2 (local use) local3 (local use) local4 (local use) local5 (local use) local6 (local use) local7 (local use) lpr (line printer system) mail (mail system) news (USENET news) sys9 (system use) sys10 (system use) sys11 (system use) sys12 (system use) sys13 (system use) sys14 (system use) syslog (Syslog process) user (user process) uucp (Unix to Unix copy process)
The default is local7.
Defaults
local7
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500.
Simple Network Management Protocol (SNMP) and Syslog 1373
Related Commands
Version
9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 E-Series legacy command
Description
Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
logging -- enables logging to a Syslog server. logging on -- enables logging.
logging history
Specify which messages are logged to the history table of the switch and the SNMP network management station (if configured).
Syntax
logging history level To return to the default values, use the no logging history command.
Parameters
level
Indicate a value from 0 to 7 or enter one of the following equivalent words: emergencies, alerts, critical, errors, warnings, notifications, informational, or debugging. The default is 4 or warnings.
Defaults
warnings or 4
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 E-Series legacy command
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
When you configure the snmp-server trap-source command, the system messages logged to the history table are also sent to the SNMP network management station.
1374 Simple Network Management Protocol (SNMP) and Syslog
Related Commands
show logging -- displays information logged to the history buffer.
logging history size
Specify the number of messages stored in the Dell Networking logging history table.
Syntax
logging history size size To return to the default values, use the no logging history size command.
Parameters
size
Indicate a value as the number of messages to be stored. The range is from 0 to 500. The default is 1 message.
Defaults
1 message
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 E-Series legacy command
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Usage Information
Related Commands
When the number of messages reach the limit you set with the logging history size command, older messages are deleted as newer ones are added to the table.
show logging -- displays information logged to the history buffer.
logging monitor
Specify which messages are logged to Telnet applications.
Syntax
logging monitor [level] To disable logging to terminal connections, use the no logging monitor command.
Parameters
level
Indicate a value from 0 to 7 or enter one of the following parameters: emergencies, alerts, critical, errors, warnings, notifications, informational, or debugging. The default is 7 or debugging.
Defaults
7 or debugging
Simple Network Management Protocol (SNMP) and Syslog 1375
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.2(0.0)
9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 E-Series legacy command
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Related Commands
default logging monitor -- returns the logging monitor parameters to the default setting.
logging on
Specify that debug or error messages are asynchronously logged to multiple destinations, such as the logging buffer, Syslog server, or terminal lines.
Syntax
logging on
To disable logging to logging buffer, Syslog server and terminal lines, use the no logging on command.
Defaults
Enabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
1376 Simple Network Management Protocol (SNMP) and Syslog
Usage Information
Related Commands
Version
7.6.1.0
7.5.1.0
E-Series legacy command
Description
Introduced on the S-Series. Introduced on the C-Series.
When you use the no logging on command, messages are logged only to the console.
logging -- enables logging to the Syslog server. logging buffered -- sets the logging buffered parameters. logging console -- sets the logging console parameters. logging monitor -- sets the logging parameters for the terminal connections.
logging source-interface
Specify that the IP address of an interface is the source IP address of Syslog packets sent to the Syslog server.
Syntax
logging source-interface interface
To disable this command and return to the default setting, use the no logging source-interface command.
Parameters
interface
Enter the following keywords and slot/port or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For the Management interface on the stack-unit, enter the keyword ManagementEthernet then the slot/port information. The slot range is from 1 to 11. The port range is 1.
For a port channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a Null interface, enter the keyword null then the Null interface number. For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.2(0.0)
9.0.2.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S6000.
Simple Network Management Protocol (SNMP) and Syslog 1377
Usage Information
Related Commands
Version
8.3.19.0 8.3.11.1 8.3.7.0 8.5.1.0 7.6.1.0 7.5.1.0 E-Series legacy command
Description
Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Added support for 4-port 40G line cards on ExaScale. Introduced on the S-Series. Introduced on the C-Series.
Syslog messages contain the IP address of the interface used to egress the router. By configuring the logging source-interface command, the Syslog packets contain the IP address of the interface configured.
logging -- enables logging to the Syslog server.
logging synchronous
Synchronize unsolicited messages and Dell Networking OS output.
Syntax
logging synchronous [level level | all] [limit number-of-buffers]
To disable message synchronization, use the no logging synchronous [level level | all] [limit number-of-buffers] command.
Parameters
all level level
all limit number-ofbuffers
Enter the keyword all to ensure that all levels are printed asynchronously.
Enter the keyword level then a number as the severity level. A high number indicates a low severity level and vice versa. The range is from 0 to 7. The default is 2.
Enter the keyword all to turn off all.
Enter the keyword limit then the number of buffers to be queued for the terminal after which new messages are dropped. The range is from 20 to 300. The default is 20.
Defaults
Disabled. If enabled without the level or number-of-buffers options specified, level = 2 and number-of-buffers = 20 are the defaults.
Command Modes LINE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000.
1378 Simple Network Management Protocol (SNMP) and Syslog
Usage Information
Related Commands
Version
8.3.7.0 7.6.1.0 7.5.1.0 E-Series legacy command
Description
Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
When you enable logging synchronous, unsolicited messages appear between software prompts and outputs. Only the messages with a severity at or below the set level are sent to the console.
If the message queue limit is reached on a terminal line and messages are discarded, a system message appears on that terminal line. Messages may continue to appear on other terminal lines.
logging on -- enables logging.
logging trap
Specify which messages are logged to the Syslog server based the message severity.
Syntax
logging trap [level] To return to the default values, use the default logging trap command. To disable logging, use the no logging trap command.
Parameters
level
Indicate a value from 0 to 7 or enter one of the following parameters: emergencies, alerts, critical, errors, warnings, notifications, informational, or debugging. The default is 6 or informational.
Defaults
6 or informational
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 E-Series legacy command
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series, S55. Introduced on the C-Series.
Usage Information
To block a type of message parameter, set the logging trap level to a lower number. For example, to block severity messages at level 6, set the level to 5.
Simple Network Management Protocol (SNMP) and Syslog 1379
Related Commands
logging -- enables the logging to another device. logging on -- enables logging.
logging version
Displays syslog messages in a RFC 3164 or RFC 5424 format.
Syntax
logging version {0|1}
Defaults
0
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.5(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S4810, S4820T, S6000, Z9000, and MXL.
Usage Information
To display syslog messages in a RFC 3164 or RFC 5424 format, use the log version command in configuration mode. By default, the system log version is set to 0. The following describes the two supported log messages formats: 0 � Displays syslog messages format as described in RFC 3164, The BSD syslog Protocol
1 � Displays SYSLOG message format as described in RFC 5424, The Syslog Protocol
Example
Dell(conf)#logging version ? <0-1> Select syslog version (default = 0) Dell(conf)#logging version 1
show logging
Display the logging settings and system messages logged to the internal buffer of the switch.
Syntax Parameters
show logging [number | history [reverse][number] | reverse [number] | summary]
number history reverse summary
(OPTIONAL) Enter the number of messages displayed in the output. The range is from 1 to 65535.
(OPTIONAL) Enter the keyword history to view only information in the Syslog history table.
(OPTIONAL) Enter the keyword reverse to view the Syslog messages in FIFO (first in, first out) order.
(OPTIONAL) Enter the keyword summary to view a table showing the number of messages per type and per slot. Slots *7* and *8* represent RPMs.
Command Modes EXEC EXEC Privilege
1380 Simple Network Management Protocol (SNMP) and Syslog
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.2(0.0)
9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 E-Series legacy command
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Example (Partial)
Dell#show logging Syslog logging: enabled
Console logging: level debugging Monitor logging: level debugging Buffer logging: level debugging, 5604 Messages Logged, Size (524288 bytes) Trap logging: level informational Oct 8 09:25:37: %RPM1:RP1 %BGP-5-ADJCHANGE: Connection with neighbor 223.80.255.254 closed. Hold time expired Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.200.13.2 Up Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.1.1.13 Up Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 1.1.14.2 Up Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.1.1.14 Up Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 1.1.11.2 Up Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.1.1.5 Up Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.4.1.3 Up Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.1.1.4 Up Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.1.1.6 Up Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.1.1.12 Up Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.1.1.15 Up Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.1.1.3 Up Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.200.12.2 Up Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 1.1.10.2 Up Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Session closed by neighbor 1.1.10.2 (Hold time expired) Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.200.14.7 Up Oct 8 09:26:25: %RPM1:RP1 %BGP-5-ADJCHANGE: Connection with neighbor 1.1.11.2 closed. Neighbor recycled Oct 8 09:26:25: %RPM1:RP1 %BGP-5-ADJCHANGE: Connection with neighbor 1.1.14.2 closed. Neighbor recycled --More--
Example (History)
Dell#show logging history Syslog History Table: 1 maximum table entries, saving level Warnings or higher
SNMP notifications not Enabled
Simple Network Management Protocol (SNMP) and Syslog 1381
%RPM:0:0 %CHMGR-2-LINECARDDOWN - Line card 3 down - IPC timeout Dell#
show logging auditlog
Displays an audit log.
Syntax
show logging auditlog
Defaults
none
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.5(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S4810, S4820T, S6000, Z9000, and MXL.
Example
Dell(conf)#show logging audit
Related Commands
clear logging auditlog -- clears audit log.
show logging driverlog stack-unit
Display the driver log for the specified hardware component.
Syntax Parameters
show logging driverlog {cp | rp | linecard slot-id]
stack-unit stack- Enter the keywords stack-unit followed by the stack member ID of the switch
unit-number
for which you want to display the driver log.
defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.2(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only.
1382 Simple Network Management Protocol (SNMP) and Syslog
Usage Information
Version
9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0
Description
Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series.
This command displays internal software driver information, which may be useful during troubleshooting switch initialization errors, such as a downed Port-Pipe.
terminal monitor
Configure the Dell Networking OS to display messages on the monitor/terminal.
Syntax
terminal monitor To return to default settings, use the terminal no monitor command.
defaults
Disabled.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.2(0.0)
9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 E-Series legacy command
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series.
Related Commands
logging monitor -- sets the logging parameters on the monitor/terminal.
Simple Network Management Protocol (SNMP) and Syslog 1383
55
SNMP Traps
This chapter lists the traps sent by the Dell Networking operating software. Each trap is listed by the fields Message ID, Trap Type, and Trap Option.
Table 4. SNMP Trap List
Message ID
Trap Type
Trap Option
COLD_START
SNMP
COLDSTART
%SNMP-5-SNMP_COLD_START: SNMP COLD_START trap sent.
WARM_START
SNMP
WARMSTART
COPY_CONFIG_COMPLETE
SNMP
SNMP Copy Config Command Completed
LINK_DOWN
SNMP
%IFA-1-PORT_LINKDN: changed interface state to down:%d
LINK_UP
SNMP
%IFA-1-PORT_LINKUP: changed interface state to up:%d
AUTHENTICATION_FAIL
SNMP
%SNMP-3-SNMP_AUTH_FAIL: SNMP Authentication failed.Request with invalid community string.
EGP_NEIGHBOR_LOSS
SNMP
NONE LINKDOWN LINKUP AUTH
NONE
OSTATE_DOWN
%IFM-1-OSTATE_DN: changed interface state to down:%s
%IFM-5-CSTATE_DN:Changed interface Physical state to down: %s
OSTATE_UP
%IFM-1-OSTATE_UP: changed interface state to up:%s
%IFM-5-CSTATE_UP: Changed interface Physical state to up: %s
RMON_RISING_THRESHOLD
%RPM0-P:CP %SNMP-4RMON_RISING_THRESHOLD: RMON
SNMP SNMP SNMP
LINKDOWN LINKUP NONE
1384 SNMP Traps
Table 4. SNMP Trap List (continued)
Message ID
Trap Type
rising threshold alarm from SNMP OID <oid>
RMON_FALLING_THRESHOLD
SNMP
%RPM0-P:CP %SNMP-4RMON_FALLING_THRESHOLD: RMON falling threshold alarm from SNMP OID <oid>
RMON_HC_RISHING_THRESHOLD
SNMP
%RPM0-P:CP %SNMP-4RMON_HC_RISING_THRESHOLD: RMON high-capacity rising threshold alarm from SNMP OID <oid>
RMON_HC_FALLING_THRESHOLD
SNMP
%RPM0-P:CP %SNMP-4RMON_HC_FALLING_THRESHOLD: RMON high-capacity falling threshold alarm from SNMP OID <oid>
BER_ERR
SNMP
%IFMGR-5-BER_ERR: High Ber detected on interface : %s
BER_ERR_CLR
SNMP
%IFMGR-5-BER_ERR_CLR: High Ber cleared on interface : %s
FAST_RETRAIN
%IFMGR-5-FAST_RETRAIN: Retrain event detected on interface : %s
RESV
N/A
CHM_CARD_DOWN
SNMP
NONE ENVMON
%CHMGR-1-CARD_SHUTDOWN: %sLine card %d down - %s
%CHMGR-2-CARD_DOWN: %sLine card %d down - %s
CHM_CARD_UP
%CHMGR-5-LINECARDUP: %sLine card %d is up
CHM_CARD_MISMATCH
%CHMGR-3-CARD_MISMATCH: Mismatch: line card %d is type %s - type %s required.
CHM_CARD_PROBLEM
ENVMON ENVMON ENVMON
Trap Option NONE NONE
NONE
NONE NONE NONE NONE NONE
NONE NONE NONE
SNMP Traps 1385
Table 4. SNMP Trap List (continued)
Message ID
Trap Type
CHM_ALARM_CUTOFF
ENVMON
CHM_SFM_UP
ENVMON
CHM_SFM_DOWN
ENVMON
CHM_RPM_UP
ENVMON
%RAM-6-RPM_STATE: RPM1 is in Active State
%RAM-6-RPM_STATE: RPM0 is in Standby State
CHM_RPM_DOWN
ENVMON
%CHMGR-2-RPM_DOWN: RPM 0 down - hard reset
%CHMGR-2-RPM_DOWN: RPM 0 down - card removed
CHM_RPM_PRIMARY
ENVMON
%RAM-5-COLD_FAILOVER: RPM Failover Completed
%RAM-5-HOT_FAILOVER: RPM Failover Completed
%RAM-5-FAST_FAILOVER: RPM Failover Completed
CHM_SFM_ADD
ENVMON
%TSM-5-SFM_DISCOVERY: Found SFM 1
CHM_SFM_REMOVE
ENVMON
%TSM-5-SFM_REMOVE: Removed SFM 1
CHM_MAJ_SFM_DOWN
ENVMON
%CHMGR-0-MAJOR_SFM: Major alarm: Switch fabric down
CHM_MAJ_SFM_DOWN_CLR
ENVMON
%CHMGR-5-MAJOR_SFM_CLR: Major alarm cleared: Switch fabric up
CHM_MIN_SFM_DOWN
ENVMON
%CHMGR-2-MINOR_SFM: MInor alarm: No working standby SFM
CHM_MIN_SFM_DOWN_CLR
ENVMON
%CHMGR-5-MINOR_SFM_CLR: Minor alarm cleared: Working standby SFM present
CHM_PWRSRC_DOWN
ENVMON
1386 SNMP Traps
Trap Option NONE NONE NONE NONE
NONE
NONE
NONE NONE NONE NONE NONE NONE SUPPLY
Table 4. SNMP Trap List (continued)
Message ID
Trap Type
%CHMGR-2-PEM_PRBLM: Major alarm: problem with power entry module %s
CHM_PWRSRC_CLR
ENVMON
%CHMGR-5-PEM_OK: Major alarm cleared: power entry module %s is good
CHM_MAJ_ALARM_PS
ENVMON
%CHMGR-0-MAJOR_PS: Major alarm: insufficient power %s
CHM_MAJ_ALARM_PS_CLR
ENVMON
%CHMGR-5-MAJOR_PS_CLR: major alarm cleared: sufficient power
CHM_MIN_ALARM_PS
ENVMON
%CHMGR-1-MINOR_PS: Minor alarm: power supply nonredundant
CHM_MIN_ALARM_PS_CLR
ENVMON
%CHMGR-5-MINOR_PS_CLR: Minor alarm cleared: power supply redundant
CHM_MIN_ALRM_TEMP
ENVMON
%CHMGR-2-MINOR_TEMP: Minor alarm: chassis temperature
CHM_MIN_ALRM_TEMP_CLR
ENVMON
%CHMRG-5-MINOR_TEMP_CLR: Minor alarm cleared: chassis temperature normal (%s %d temperature is within threshold of %dC)
CHM_MAJ_ALRM_TEMP
ENVMON
%CHMGR-2-MAJOR_TEMP: Major alarm: chassis temperature high (%s temperature reaches or exceeds threshold of %dC)
CHM_MAJ_ALRM_TEMP_CLR
ENVMON
%CHMGR-2-MAJOR_TEMP_CLR: Major alarm cleared: chassis temperature lower (%s %d temperature is within threshold of %dC)
CHM_FANTRAY_BAD
ENVMON
For E1200: %CHMGR-2FAN_TRAY_BAD: Major alarm: fan tray %d is missing or down
Trap Option SUPPLY SUPPLY SUPPLY SUPPLY SUPPLY TEMP TEMP
TEMP TEMP
FAN
SNMP Traps 1387
Table 4. SNMP Trap List (continued)
Message ID
Trap Type
%CHMGR-2-ALL_FAN_BAD: Major alarm: all fans in fan tray %d are down.
For E600 and E300: %CHMGR-2FANTRAYBAD: Major alarm: fan tray is missing
%CHMGR-2-FANSBAD: Major alarm: most or all fans in fan tray are down
CHM_FANTRAY_BAD_CLR
ENVMON
For the E1200: %CHMGR-5FAN_TRAY_OK: Major alarm cleared: fan tray %d present
For the E600 and E300: %CHMGR-5-FANTRAYOK: Major alarm cleared: fan tray present
CHM_MIN_FANBAD
ENVMON
For the E1200: %CHMGR-2FAN_BAD: Minor alarm: some fans in fan tray %d are down
For the E600 and E300: %CHMGR- 2-1FANBAD: Minor alarm: fan in fan tray is down
CHM_MIN_FANBAD_CLR
ENVMON
For E1200: %CHMGR-2-FAN_OK: Minor alarm cleared: all fans in fan tray %d are good
For E600 and E300: %CHMGR-5FANOK: Minor alarm cleared: all fans in fan tray are good
TME_TASK_SUSPEND
ENVMON
%TME-2-TASK SUSPENDED: SUSPENDED - svce:%d - inst:%d - task:%s
TME_TASK_TERM
ENVMON
%TME-2ABNORMAL_TASK_TERMINATION: CRASH - task:%s %s
CHM_CPU_THRESHOLD
ENVMON
%CHMGR-5-CPU_THRESHOLD: Cpu %s usage above threshold. Cpu5SecUsage (%d)
CHM_CPU_THRESHOLD_CLR
ENVMON
%CHMGR-5-CPU_THRESHOLD_CLR: Cpu %s usage drops below threshold. Cpu5SecUsage (%d)
1388 SNMP Traps
Trap Option
FAN
FAN
FAN NONE NONE NONE NONE
Table 4. SNMP Trap List (continued)
Message ID
Trap Type
CHM_MEM_THRESHOLD
ENVMON
%CHMGR-5-MEM_THRESHOLD: Memory %s usage above threshold. MemUsage (%d)
CHM_MEM_THRESHOLD_CLR
ENVMON
%CHMGR-5-MEM_THRESHOLD_CLR: Memory %s usage drops below threshold. MemUsage (%d)
MACMGR_STN_MOVE
ENVMON
%MACMGR-5-DETECT_STN_MOVE: Station Move threshold exceeded for Mac %s in vlan %d
PORT_TEMP_MAJOR
ENVMON
%CHMGR-1-PORT_TEMP_MAJOR: Major Alarm Interface %s shut due to high temperature
PORT_TEMP_MINOR
ENVMON
%CHMGR-1-PORT_TEMP_MINOR: Minor Alarm Interface %s temperature exceeds threshold
PORT_TEMP_MAJOR_CLR
ENVMON
%CHMGR-1-PORT_TEMP_MAJOR_CLR: Major Alarm cleared for Interface %s port temperature is lower than threshold
VRRP_BADAUTH
PROTO
%RPM1-P:RP2 %VRRP-3VRRP_BAD_AUTH: vrid-1 on Gi 11/12 rcvd pkt with authentication type mismatch.
%RPM1-P:RP2 %VRRP-3VRRP_BAD_AUTH: vrid-1 on Gi 11/12 rcvd pkt with authentication failure
VRRP_GO_MASTER
%VRRP-6-VRRP_MASTER: vrid-%d on %s entering MASTER
VRRP_PROTOCOL_ERROR
VRRP_PROTOERR: VRRP protocol error on %S
BGP4_ESTABLISHED
%TRAP-5-PEER_ESTABLISHED: Neighbor %a, state %s
BGP4_BACKW_XSITION
PROTO PROTO PROTO PROTO
Trap Option NONE NONE NONE NONE NONE NONE NONE
NONE NONE NONE NONE
SNMP Traps 1389
Table 4. SNMP Trap List (continued)
Message ID
Trap Type
%TRAP-5-BACKWARD_STATE_TRANS: Neighbor %a, state %s
Trap Option
1390 SNMP Traps
56
Stacking
All commands in this chapter are specific to the Dell Networking operating software.
You can use the commands to pre-configure a switch, so that the configuration settings are invoked when the switch is attached to other S-Series units.
For information about using the S-Series stacking feature, refer to the "Stacking S-Series Switches" chapter in the Dell Networking OS Configuration Guide.
CAUTION: You cannot enable stacking simultaneously with virtual link trunking (VLT). If you enable both at the same time, unexpected behavior occurs.
The Dell Networking OS commands for data center bridging features include 802.1Qbb priority-based flow control (PFC), 802.1Qaz enhanced transmission selection (ETS), and the data center bridging exchange (DCBX) protocol.
Topics:
� redundancy disable-auto-reboot � redundancy force-failover stack-unit � redundancy protocol � reset stack-unit � show redundancy � show system stack-ports � stack-unit priority � stack-unit provision � stack-unit stack-group � upgrade system stack-unit
redundancy disable-auto-reboot
Prevent the S-Series stack management unit, stack member unit, and standby unit from rebooting if they fail.
Syntax
redundancy disable-auto-reboot stack-unit [members | stack-unit-number] To return to the default, use the no redundancy disable-auto-reboot stack-unit command.
Parameters
stack-unit members
Enter the stack-unit number. The range is from 1 to 6. Enter the keyword members for all stack-units.
Defaults
Disabled (the failed switch is automatically rebooted).
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000. Introduced on the S4820T.
Stacking 1391
Usage Information
Related Commands
Version
8.3.7.0 8.3.11.1 8.3.1.0
Description
Introduced on the S4810. Introduced on the Z9000. Added the members option.
Enabling this command keeps the failed switch in the Failed state. The switch does not reboot until it is manually rebooted. When enabled, it is not displayed in the running-config. When disabled, it is displayed in the running-config.
show redundancy -- displays the current redundancy status.
redundancy force-failover stack-unit
Force the standby unit in the stack to become the management unit.
Syntax Parameters
redundancy force-failover stack-unit
stack-unit
Enter the stack unit. The range is from 1 to 6.
Defaults
Not enabled.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 8.3.19.0 8.3.7.0 8.3.11.1 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Added the members option.
redundancy protocol
Enable hitless failover for a protocol.
Syntax Protocols
redundancy protocol
lacp xstp
Enter the LACP protocol Enter one of the following protocols: STP, RSTP, MSTP, PVST.
Defaults
Not enabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
1392 Stacking
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 8.3.19.0 8.3.7.0 8.3.11.1 8.3.1.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Added the members option.
reset stack-unit
Reset any designated stack member except the management unit (master unit).
Syntax Parameters
reset stack-unit stack--unit--number hard
stack-unit hard
Enter the stack-unit number. The range is from 1 to 6. Reset the stack unit if the unit is in a problem state.
Defaults
none
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 8.3.19.0 8.3.7.0 8.3.11.1 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000. Added the hard reset option.
Usage Information
Example
Resetting the management unit is not allowed, and an error message displays if you try to do so. Resetting is a soft reboot, including flushing the forwarding tables. Starting with Dell Networking OS version 7.8.1.0, you can run this command directly on the stack standby unit (standby master) to reset the standby. You cannot reset any other unit from the standby unit.
Dell#reset stack-unit 4 Dell#00:15:00: %STKUNIT1-M:CP %CHMGR-5-STACKUNIT_RESET: stack-unit 4 being reset 00:15:01: %STKUNIT1-M:CP %CHMGR-2-STACKUNIT_DOWN: stack-unit 4 down reset 00:15:01: %STKUNIT1-M:CP %IFMGR-1-DEL_PORT: Removed port: Te 4/1-4/48, Fo 4/51-4/52, 00:15:01: %STKUNIT2-S:CP %IFMGR-1-DEL_PORT: Removed port: Te 4/1-4/48, Fo 4/51-4/52, Dell#00:15:08: %S4048-ON:1 %IFAGT-5-STACK_PORT_LINK_DOWN: Changed stack port state to down: 1/49 00:15:08: %STKUNIT1-M:CP %CHMGR-2-STACKUNIT_DOWN: stack-unit 4 down -
Stacking 1393
Related Commands
card removed Dell# reload � reboots Dell Networking OS.
show redundancy
Display the current redundancy configuration (status of automatic reboot configuration on stack management unit).
Syntax
show redundancy
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 8.3.19.0 8.3.7.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000.
Usage Information
Example
To modify your results, use the show redundancy [pipe] command, as follows:
except -- show only text that doesn not match a pattern. find -- search for the first occurrence of a pattern. grep -- show only text that matches a pattern. no-more -- do not paginate the output. save -- save the output to a file.
Dell#show redundancy
-- Stack-unit Status --
------------------------------------------------
Mgmt ID:
0
Stack-unit ID:
0
Stack-unit Redundancy Role:
Primary
Stack-unit State:
Active
Stack-unit SW Version:
1-0(0-3563)
Link to Peer:
Down
Peer Stack-unit:
not present
-- Stack-unit Redundancy Configuration --
------------------------------------------------
Primary Stack-unit:
mgmt-id
0
Auto Data Sync:
Full
Failover Type:
Hot Failover
Auto reboot Stack-unit:
Disabled
Auto failover limit:
3 times in 60 minutes
-- Stack-unit Failover Record --
------------------------------------------------
Failover Count:
0
Last failover timestamp:
None
1394 Stacking
Last failover Reason:
None
Last failover type:
None
-- Last Data Block Sync Record: --
-----------------------------------------------
stack-unit Config: Start-up Config:
Runtime Event Log: Running Config: ACL Mgr: LACP: STP: SPAN:
Dell#
no block sync done no block sync done no block sync done no block sync done no block sync done no block sync done no block sync done no block sync done
show system stack-ports
Display information about the stacking ports on all switches in the stack.
Syntax Parameters
show system stack-ports [status | topology]
status topology
(OPTIONAL) Enter the keyword status to display the command output without the Connection field.
(OPTIONAL) Enter the keyword topology to limit the table to just the Interface and Connection fields.
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 8.3.19.0 8.3.7.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000.
Usage Information
The following describes the show system stack-ports command shown in the following example.
Field
Description
Topology
Lists the topology of stack ports connected: Ring, Daisy chain, or Standalone.
Interface
The unit/port ID of the connected stack port on this unit.
Link Speed Admin Status
Link Speed of the stack port (10 or 40) in Gb/s. The only currently listed status is Up.
Connection
The stack port ID to which this unit's stack port is connected.
Stacking 1395
Example
Dell# show system stack-ports
Topology: Ring
Interface Connection Link Speed Admin Link
(Gb/s) Status Status
--------------------------------------------------
1/49
2/49
12
up
up
1/50
12
up
down
1/51
3/49
24
up
up
2/49
1/49
12
up
up
2/50
3/51
12
up
up
3/49
1/51
24
up
up
3/51
2/50
12
up
up
3/52
12
up
down
Dell#
Example (Status)
Dell#show system stack-ports status
Topology: Daisy chain
Interface Link Speed
Admin
Link
(Gb/s)
Status
Status
--------------------------------------------
1/25
10
up
up
1/26
10
up
down
1/27
10
up
down
1/28
10
up
down
3/25
10
up
up
3/26
10
up
down
3/27
10
up
down
3/28
10
up
down
Example (Topology)
Related Commands
Dell#show system stack-ports status
Topology: Daisy chain
Interface Link Speed
Admin
Link
(Gb/s)
Status
Status
--------------------------------------------
1/25/1
10
up
up
1/26/1
10
up
down
1/27/1
10
up
down
1/28/1
10
up
down
3/25/1
10
up
up
3/26/1
10
up
down
3/27/1
10
up
down
3/28/1
10
up
down
Dell#show system stack-port topology
Topology: Daisy chain
Interface Connection
---------------------
1/25
3/25
1/26
1/27
1/28
3/25
1/25
3/26
3/27
3/28
reset stack-unit � resets the designated stack member.
show hardware stack-unit � displays the data plane or management plane input and output statistics of the designated component of the designated stack member.
show system (S-Series and Z-Series) � displays the current status of all stack members or a specific member.
1396 Stacking
stack-unit priority
Configure the ability of a switch to become the management unit of a stack.
Syntax Parameters
stack-unit stack-unit number priority 1-14
stack-number 1�14
Enter the stack member unit identifier.
This preference parameter allows you to specify the management priority of one backup switch over another, with 0 the lowest priority and 14 the highest. The switch with the highest priority value is chosen to become the management unit if the active management unit fails or on the next reload.
Defaults
0
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 8.3.19.0 8.3.7.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000.
Related Commands
reload � reboots Dell Networking OS.
stack-unit provision
Preconfigure a logical stacking ID of a switch that joins the stack. This is an optional command that is executed on the management unit.
Syntax Parameters
stack-unit [stack-number] provision {S4810|S4820T|S6000|Z9000}
stack-unit
S4810|S4820T| S6000|Z9000
Enter a stack member identifier of the switch that you want to add to the stack.
Enter the model identifier of the switch to be added as a stack member. This identifier is also referred to as the provision type.
Defaults
When this value is not set, a switch joining the stack is given the next available sequential stack member identifier.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000.
Stacking 1397
Related Commands
Version
8.3.19.0 8.3.7.0 8.3.11.1
Description
Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000.
reload � reboots Dell Networking OS. show system (S-Series and Z-Series) � displays the status of all stack members or a specific member.
stack-unit stack-group
Configure the stacking unit and stacking group by specifying an ID when adding units to a stack to ensure the unit is assigned to the correct group.
Syntax
stack-unit unit-id stack-group stack-group-id
To remove the current stack group configuration, use the no stack-unit unit-id stack-group stack-id command.
Parameters
unit-id stack-group-id
Enter the stack unit ID. Enter the stack group ID.
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 8.3.19.0 8.3.7.1 8.3.12.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Reset command mode from EXEC to CONFIGURATION.
Usage Information
The following message displays to confirm the command. Setting ports Fo 1/60 as stack group will make their interface configs obsolete after a reload.[confirm yes/no]: If "y" is entered, all nondefault configurations on any member ports of the current stack group will be removed when the unit is rebooted.
NOTE: Any scripts used to streamline the stacking configuration process must be updated to reflect the Command Mode change from EXEC Privilege to CONFIGURATION to allow the scripts to work correctly.
upgrade system stack-unit
Copy the boot image or Dell Networking OS from the management unit to one or more stack members.
Syntax
upgrade {boot | system} stack-unit {all | stack-unit-number | A | B}
1398 Stacking
Parameters
boot
system
stack-unit all A B
Enter the keyword boot to copy the boot image from the management unit to the designated stack members.
Enter the keyword system to copy the Dell Networking OS image from the management unit to the designated stack members.
Enter the stack-unit number. The range is from 1 to 6.
Enter the keyword all to copy the designated image to all stack members.
Enter the keyword A to upgrade all stacked units in System A ( only).
Enter the keyword B to upgrade all stacked units in System B ( only).
Defaults
none
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 8.3.19.0 8.3.7.0 8.3.11.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the Z9000.
Usage Information
Related Commands
To reboot using the new image, use the upgrade boot system stack-unit command.
reload -- reboots Dell Networking OS. reset stack-unit -- resets the designated stack member. show system (S-Series and Z-Series) -- displays the status of all stack members or a specific
member. show version -- displays the current Dell Networking OS version information on the system.
Stacking 1399
57
Storm Control
The Dell Networking operating software storm control feature allows you to limit or suppress traffic during a traffic storm (Broadcast/Unknown Unicast Rate Limiting or Multicast on the C-Series and S-Series). Storm control is supported on Dell Networking OS.
Important Points to Remember
Interface commands can only be applied on physical interfaces (virtual local area networks [VLANs] and link aggregation group [LAG] interfaces are not supported).
An INTERFACE-level command only supports storm control configuration on ingress. An INTERFACE-level command overrides any CONFIGURATION-level ingress command for that physical interface, if both
are configured. You can apply the CONFIGURATION-level storm control commands at ingress or egress and are supported on all physical
interfaces. When storm control is applied on an interface, the percentage of storm control applied is calculated based on the advertised
rate of the line card. It is not based on the speed setting for the line card. Do not apply per-VLAN quality of service (QoS) on an interface that has storm control enabled (either on an interface or
globally). When you enable broadcast storm control on an interface or globally on ingress, and DSCP marking for a DSCP value 1 is
configured for the data traffic, the traffic goes to queue 1 instead of queue 0. Similarly, if you enable unicast storm control on an interface or globally on ingress, and DSCP marking for a DSCP value 2 is
configured for the data traffic, the traffic goes to queue 2 instead of queue 0. NOTE: Bi-directional traffic (unknown unicast and broadcast) along with egress storm control causes the configured traffic rates split between the involved ports. The percentage of traffic that each port receives after the split is not predictable. These ports can be in the same/different port pipes or the same/different line cards.
NOTE: The policy discard drop counters are common across storm-control drops, ACL drops and QoS drops. Therefore, if your configuration includes ACL and QoS, those drops are also computed and displayed in the policy discard drops counter field along with storm-control drops. The packets dropped by the storm control feature can be monitored by viewing the value of the Policy Discard Drops field of the output of the show hardware stack-unit stack--unit--number drops command.
Topics:
� show storm-control broadcast � show storm-control multicast � show storm-control unknown-unicast � storm-control broadcast (Configuration) � storm-control broadcast (Interface) � storm-control multicast (Configuration) � storm-control multicast (Interface) � storm-control PFC/LLFC � storm-control unknown-unicast (Configuration) � storm-control unknown-unicast (Interface)
1400 Storm Control
show storm-control broadcast
Display the storm control broadcast configuration.
Syntax Parameters
show storm-control broadcast [interface]
interface
(OPTIONAL) Enter one of the following interfaces to display the interface-specific storm control configuration:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/ port information.
Defaults
none
Command Modes EXEC
EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.5.1.0 8.3.7.0 7.6.1.0 7.5.1.0 6.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
show storm-control multicast
Display the storm control multicast configuration.
Syntax Parameters
show storm-control multicast [interface]
interface
(OPTIONAL) Enter one of the following interfaces to display the interface specific storm control configuration:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number.
Storm Control 1401
Defaults
none
Command Modes EXEC
EXEC Privilege
Command History
Example
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.5.1.0 8.3.7.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Introduced on the C-Series and S-Series.
Dell#show storm-control multicast Tengigabitethernet 1/1
Multicast storm control configuration
Interface Direction
Packets/Second
-----------------------------------------
Te 1/1
Ingress
5
Dell#
show storm-control unknown-unicast
Display the storm control unknown-unicast configuration.
Syntax Parameters
show storm-control unknown-unicast [interface]
interface
(OPTIONAL) Enter one of the following interfaces to display the interface specific storm control configuration:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number.
Defaults
none
Command Modes EXEC
EXEC Privilege
1402 Storm Control
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.2(0.0)
8.3.19.0 8.3.11.1 8.5.1.0 8.3.7.0 7.6.1.0 7.5.1.0 6.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
storm-control broadcast (Configuration)
Configure the percentage of broadcast traffic allowed in the network.
Syntax
storm-control broadcast [packets_per_second in]
To disable broadcast rate-limiting, use the no storm-control broadcast [packets_per_second in] command.
storm-control broadcast [percentage decimal_value in | out]| [wred-profile name]] [packets_per_second in]
To disable broadcast rate-limiting, use the storm-control broadcast [percentage decimal_value in | out] | [wred-profile name]] [packets_per_second in] command.
Parameters
percentagedecim Enter the percentage of broadcast traffic allowed in or out of the network. al_value in | out Optionally, you can designate a decimal value percentage, for example, 55.5%. The
decimal range is from .1 to .9.
wred-profile name
Enter the keyword wred-profile followed by the profile name to designate a wredprofile.
packets_per_sec Enter the packets per second of broadcast traffic allowed into the network. The
ond in
range is from 0 to 33554368.
Defaults
none
Command Modes CONFIGURATION (conf)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
Storm Control 1403
Usage Information
Version
9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.2(0.0)
8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 7.4.1.0 6.5.1.0
Description
Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. E-Series Only: Added the percentage decimal value option. Introduced on the E-Series.
Broadcast storm control is valid on Layer 2/Layer 3 interfaces only. Layer 2 broadcast traffic is treated as unknown-unicast traffic.
storm-control broadcast (Interface)
Configure the percentage of broadcast traffic allowed on an interface (ingress only).
Syntax
storm-control broadcast [packets_per_second in]
To disable broadcast storm control on the interface, use the no storm-control broadcast [packets_per_second in] command.
Parameters
packets_per_sec Enter the packets per second of broadcast traffic allowed into the network. The
ond in
range is from 0 to 33554368.
Defaults
none
Command Modes INTERFACE (conf-if-interface-slot/port)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 7.4.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. E-Series Only: Added the percentage decimal value option.
1404 Storm Control
Version
6.5.1.0
Description
Introduced on the E-Series.
storm-control multicast (Configuration)
Configure the packets per second (pps) of multicast traffic allowed into the C-Series and S-Series networks only.
Syntax
storm-control multicast packets_per_second in
To disable storm-control for multicast traffic into the network, use the no storm-control multicast packets_per_second in command.
Parameters
packets_per_sec Enter the packets per second of multicast traffic allowed into the network. The
ond in
range is from 0 to 33554368.
Defaults
none
Command Modes CONFIGURATION (conf)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 9.2(0.0)
8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-series and S-Series.
Usage Information
Broadcast traffic (all 0xFs) should be counted against the broadcast storm control meter, not against the multicast storm control meter. It is possible, however, that some multicast control traffic may get dropped when storm control thresholds are exceeded.
storm-control multicast (Interface)
Configure the percentage of multicast traffic allowed on an C-Series or S-Series interface (ingress only) network only.
Syntax
storm-control multicast packets_per_second in
To disable multicast storm control on the interface, use the no storm-control multicast packets_per_second in command.
Parameters
packets_per_sec Enter the packets per second of broadcast traffic allowed into the network. The
ond in
range is from 0 to 33554368.
Defaults
none
Storm Control 1405
Command Modes INTERFACE (conf-if-interface-slot/port)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-series and S-Series.
storm-control PFC/LLFC
Shut down the port if it receives the PFC/LLFC frames more than the configured rate.
Syntax Parameters
storm-control pfc-llfc [pps]in shutdown
pfc-llfc in shutdown
Enter the keyword pfc-llfc to get the flow control traffic. The range is from 0 to 33554368 packets per second.
Enter the keyword shutdown to shut down the port when the rate exceeds.
Defaults
none
Command Modes INTERFACE (conf-if-interface-slot/port)
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.9(0.0)
Introduced on the C9010, S4810, S4820T, S5000, S6000, Z9500, S3048-ON, S4048-ON, and S6000�ON.
Usage Information
NOTE: PFC/LLFC storm control enabled interfaces disable the interfaces if it receives continuous PFC/LLFC packets. It can be a result of a faulty NIC/Switch that sends spurious PFC/LLFC packets.
storm-control unknown-unicast (Configuration)
Configure the percentage of unknown-unicast traffic allowed in or out of the network.
Syntax
storm-control unknown-unicast [packets_per_second in]
To disable storm control for unknown-unicast traffic, use the no storm-control unknownunicast [packets_per_second in] command.
1406 Storm Control
Parameters
packets_per_sec Enter the packets per second of broadcast traffic allowed into the network. The
ond in
range is from 0 to 33554368.
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 7.4.1.0 6.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. E-Series Only: Added the percentage decimal value option. Introduced on the E-Series.
Usage Information
Unknown Unicast Storm-Control is valid for Layer 2 and Layer 2/Layer 3 interfaces.
storm-control unknown-unicast (Interface)
Configure percentage of unknown-unicast traffic allowed on an interface (ingress only).
Syntax
storm-control unknown-unicast [percentage decimal_value in] | [wred-profile name]] [packets_per_second in]
To disable unknown-unicast storm control on the interface, use the no storm-control unknownunicast [percentage decimal_value in] | [wred-profile name]] [packets_per_second in] command.
Parameters
percentage
E-Series Only: Enter the percentage of broadcast traffic allowed in or out of the
decimal_value [in network. Optionally, you can designate a decimal value percentage, for example,
| out]
55.5%.
The percentage is from 0 to 100:
0% blocks all related traffic. 100% allows all traffic into the interface.
The decimal range is from 0.1 to 0.9.
wred-profile name
E-Series Only: (Optionally) Enter the keywords wred-profile followed by the profile name to designate a wred-profile.
packets_per_sec C-Series and S-Series Only: Enter the packets per second of broadcast traffic
ond in
allowed into the network. The range is from 0 to 33554431.
Defaults
none
Storm Control 1407
Command Modes INTERFACE (conf-if-interface-slot/port)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 7.4.1.0 6.5.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. E-Series Only: Added the percentage decimal value option. Introduced on the E-Series.
1408 Storm Control
58
Spanning Tree Protocol (STP)
The commands in this chapter configure and monitor the IEEE 802.1d spanning tree protocol (STP) and are supported on the Dell Networking switch/routing platform.
Topics:
� bridge-priority � bpdu-destination-mac-address � debug spanning-tree � description � disable � forward-delay � hello-time � max-age � protocol spanning-tree � show config � show spanning-tree 0 � spanning-tree
bridge-priority
Set the bridge priority of the switch in an IEEE 802.1D spanning tree.
Syntax
bridge-priority {priority-value | primary | secondary} To return to the default value, use the no bridge-priority command.
Parameters
priority-value
primary secondary
Enter a number as the bridge priority value. The range is from 0 to 65535. The default is 32768.
Enter the keyword primary to designate the bridge as the root bridge.
Enter the keyword secondary to designate the bridge as a secondary root bridge.
Defaults
priority-value = 32768
Command Modes SPANNING TREE (The prompt is "config-stp".)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810.
Spanning Tree Protocol (STP) 1409
Version
7.7.1.0 7.5.1.0 6.2.1.1
Description
Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
bpdu-destination-mac-address
Use the Provider Bridge Group address in Spanning Tree or GVRP PDUs.
Syntax Parameters
bpdu-destination-mac-address [stp | gvrp] provider-bridge-group
xstp gvrp
Force STP, RSTP, and MSTP to use the Provider Bridge Group address as the destination MAC address in its BPDUs.
Forces GVRP to use the Provider Bridge GVRP Address as the destination MAC address in its PDUs.
Defaults
The destination MAC address for BPDUs is the Bridge Group Address.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.2.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the C-Series and S-Series.
debug spanning-tree
Enable debugging of the spanning tree protocol and view information on the protocol.
Syntax
debug spanning-tree {stp-id [all | bpdu | config | events | exceptions | general | root] | protocol}
To disable debugging, use the no debug spanning-tree command.
Parameters
stp-id protocol all bpdu config events
Enter zero (0). The switch supports one spanning tree group with a group ID of 0. Enter the keyword for the type of STP to debug, either mstp, pvst, or rstp. (OPTIONAL) Enter the keyword all to debug all spanning tree operations. (OPTIONAL) Enter the keyword bpdu to debug bridge protocol data units. (OPTIONAL) Enter the keyword config to debug configuration information. (OPTIONAL) Enter the keyword events to debug STP events.
1410 Spanning Tree Protocol (STP)
general root
(OPTIONAL) Enter the keyword general to debug general STP operations. (OPTIONAL) Enter the keyword root to debug STP root transactions.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.5.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
When you enable debug spanning-tree bpdu for multiple interfaces, the software only sends information on BPDUs for the last interface specified.
protocol spanning-tree -- enters SPANNING TREE mode on the switch.
description
Enter a description of the spanning tree.
Syntax
description {description}
To remove the description from the spanning tree, use the no description {description} command.
Parameters
description
Enter a description to identify the spanning tree (80 characters maximum).
Defaults
none
Command Modes SPANNING TREE (The prompt is "config-stp".)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500.
Spanning Tree Protocol (STP) 1411
Related Commands
Version
9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0
Description
Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced
protocol spanning-tree -- enters SPANNING TREE mode on the switch.
disable
Disable the spanning tree protocol globally on the switch.
Syntax
disable To enable Spanning Tree Protocol, use the no disable command.
Defaults
Enabled (that is, the spanning tree protocol is disabled.)
Command Modes SPANNING TREE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.5.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Related Commands
protocol spanning-tree -- enters SPANNING TREE mode on the switch.
forward-delay
The amount of time the interface waits in the Listening state and the Learning state before transitioning to the Forwarding state.
Syntax
forward-delay seconds To return to the default setting, use the no forward-delay command.
1412 Spanning Tree Protocol (STP)
Parameters
seconds
Enter the number of seconds the Dell Networking OS waits before transitioning STP to the Forwarding state. The range is from 4 to 30. The default is 15 seconds.
Defaults
15 seconds
Command Modes SPANNING TREE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.5.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Related Commands
max-age -- changes the wait time before STP refreshes protocol configuration information. hello-time -- changes the time interval between BPDUs.
hello-time
Set the time interval between generation of the spanning tree bridge protocol data units (BPDUs).
Syntax
hello-time seconds To return to the default value, use the no hello-time command.
Parameters
seconds
Enter a number as the time interval between transmission of BPDUs. The range is from 1 to 10. The default is 2 seconds.
Defaults
2 seconds
Command Modes SPANNING TREE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000.
Spanning Tree Protocol (STP) 1413
Related Commands
Version
8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.5.1.0 6.2.1.1
Description
Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
forward-delay -- changes the wait time before STP transitions to the Forwarding state. max-age -- changes the wait time before STP refreshes protocol configuration information.
max-age
To maintain configuration information before refreshing that information, set the time interval for the spanning tree bridge.
Syntax
max-age seconds To return to the default values, use the no max-age command.
Parameters
seconds
Enter a number of seconds the Dell Networking OS waits before refreshing configuration information. The range is from 6 to 40. The default is 20 seconds.
Defaults
20 seconds
Command Modes SPANNING TREE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.5.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Related Commands
forward-delay -- changes the wait time before STP transitions to the Forwarding state. hello-time -- changes the time interval between BPDUs.
1414 Spanning Tree Protocol (STP)
protocol spanning-tree
To enable and configure the spanning tree group, enter SPANNING TREE mode.
Syntax
protocol spanning-tree stp-id To disable the Spanning Tree group, use the no protocol spanning-tree stp-id command.
Parameters
stp-id
Enter zero (0). Dell Networking OS supports one spanning tree group, group 0.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.5.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Example
STP is not enabled when you enter SPANNING TREE mode. To enable STP globally on the switch, use the no disable command from SPANNING TREE mode.
Dell(conf)#protocol spanning-tree 0 Dell(config-stp)#
Related Commands
disable -- disables spanning tree group 0. To enable spanning tree group 0, use the no disable command.
show config
Display the current configuration for the mode. Only non-default values display.
Syntax
show config
Command Modes SPANNING TREE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
Spanning Tree Protocol (STP) 1415
Example
Version
9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.7.1.0 7.5.1.0 6.2.1.1
Description
Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Dell(config-stp)#show config protocol spanning-tree 0
no disable Dell(config-stp)#
show spanning-tree 0
Display the spanning tree group configuration and status of interfaces in the spanning tree group.
Syntax Parameters
show spanning-tree 0 [active | brief | guard | interface interface | root | summary]
0 active
brief
guard
interface interface
Enter 0 (zero) to display information about that specific spanning tree group.
(OPTIONAL) Enter the keyword active to display only active interfaces in spanning tree group 0.
(OPTIONAL) Enter the keyword brief to display a synopsis of the spanning tree group configuration information.
(OPTIONAL) Enter the keyword guard to display the type of guard enabled on an STP interface and the current port state.
(OPTIONAL) Enter the keyword interface and the type slot/port of the interface you want displayed. Type slot/port options are the following:
For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
root summary
(OPTIONAL) Enter the keyword root to display configuration information on the spanning tree group root.
(OPTIONAL) Enter the keyword summary to only the number of ports in the spanning tree group and their state.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
1416 Spanning Tree Protocol (STP)
Usage Information
Example
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.5.1.0 8.4.2.1
8.3.7.0 7.7.1.0 7.5.1.0 6.2.1.1
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for 4-port 40G line cards on the E-Series ExaScale. Added support for the optional guard keyword on the C-Series, S-Series, and ESeries TeraScale. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Enable spanning tree group 0 prior to using this command. The following describes the show spanning-tree 0 command shown in the example.
Field
Description
"Bridge Identifier..."
Lists the bridge priority and the MAC address for this STP bridge.
"Configured hello..."
Displays the settings for hello time, max age, and forward delay.
"We are..."
States whether this bridge is the root bridge for the STG.
"Current root..." Lists the bridge priority and MAC address for the root bridge.
"Topology flag..."
States whether the topology flag and the detected flag were set.
"Number of..."
Displays the number of topology changes, the time of the last topology change, and on what interface the topology change occurred.
"Timers"
Lists the values for the following bridge timers: hold time, topology change, hello time, max age, and forward delay.
"Times"
List the number of seconds since the last:
hello time topology change notification aging
"Port 1..."
"Port path..." "Designated root..." "Designated port..."
Displays the Interface type slot/port information and the status of the interface (Disabled or Enabled).
Displays the path cost, priority, and identifier for the interface.
Displays the priority and MAC address of the root bridge of the STG that the interface belongs.
Displays the designated port ID.
Dell#show spann 0
Spanning Tree Protocol (STP) 1417
Executing IEEE compatible Spanning Tree Protocol Bridge Identifier has priority 32768, Address 0001.e800.0a56 Configured hello time 2, max age 20, forward delay 15 We are the root of the spanning tree Current root has priority 32768 address 0001.e800.0a56 Topology change flag set, detected flag set Number of topology changes 1 last change occurred 0:00:05 ago from TenGigabitEthernet 1/3 Timers:hold 1, topology change 35 hello 2, max age 20, forward_delay 15 Times:hello 1, topology change 1, notification 0, aging 2
Port 26 (TenGigabitEthernet 1/1) is Forwarding Port path cost 4, Port priority 8, Port Identifier 8.26 Designated root has priority 32768, address 0001.e800.0a56 Designated bridge has priority 32768, address 0001.e800.0a56 Designated port id is 8.26, designated path cost 0 Timers: message age 0, forward_delay 0, hold 0 Number of transitions to forwarding state 1 BPDU: sent:18, received 0 The port is not in the portfast mode
Port 27 (TenGigabitEthernet 1/2) is Forwarding Port path cost 4, Port priority 8, Port Identifier 8.27 Designated root has priority 32768, address 0001.e800.0a56 Designated bridge has priority 32768, address 0001.e800.0a56 Designated port id is 8.27, designated path cost 0 Timers: message age 0, forward_delay 0, hold 0 Number of transitions to forwarding state 1 BPDU: sent:18, received 0 The port is not in the portfast mode
Port 28 (TenGigabitEthernet 1/3) is Forwarding Port path cost 4, Port priority 8, Port Identifier 8.28 Designated root has priority 32768, address 0001.e800.0a56 Designated bridge has priority 32768, address 0001.e800.0a56 Designated port id is 8.28, designated path cost 0 Timers: message age 0, forward_delay 0, hold 0 Number of transitions to forwarding state 1 BPDU: sent:31, received 0 The port is not in the portfast mode
Dell#
Example (Brief)
Dell#show span 0 brief
Executing IEEE compatible Spanning Tree Protocol
Root ID Priority 32768
Address 0001.e800.0a56
Root Bridge hello time 2, max age 20, forward delay 15
Bridge ID Priority 32768,
Address 0001.e800.0a56
Configured hello time 2, max age 20, forward delay 15
Interface
Designated
Name PortID Prio Cost Sts Cost Bridge ID
PortID
-------------- ------ ---- ---- --- ----- ------------------
Te 1/1 8.26 8 4
FWD 0
32768 0001.e800.0a56 8.26
Te 1/2 8.27 8 4
FWD 0
32768 0001.e800.0a56 8.27
Te 1/3 8.28 8 4
FWD 0
32768 0001.e800.0a56 8.28
Dell#
Usage Information
The following describes the show spanning-tree 0 guard command shown in the example.
Field
Description
Interface Name Instance
STP interface. STP 0 instance.
Sts
Port state: root-inconsistent (INCON Root), forwarding (FWD), listening (LIS),
blocking (BLK), or shut down (EDS Shut).
1418 Spanning Tree Protocol (STP)
Field
Guard Type
Description
Type of STP guard configured (Root, Loop, or BPDU guard).
Example (Guard)
Dell#show spanning-tree 0 guard
Interface
Name
Instance Sts
-------- -------- ---------
Te 1/1
0
INCON(Root)
Te 1/2
0
LIS
Te 1/3
0
EDS (Shut)
Guard type ---------Rootguard Loopguard Bpduguard
spanning-tree
Assigns a Layer 2 interface to STP instance 0 and configures a port cost or port priority, or enables loop guard, root guard, or the Portfast feature on the interface.
Syntax
spanning-tree stp-id {cost cost | {loopguard | rootguard} | portfast [bpduguard [shutdown-on-violation]] | priority priority}
To disable Spanning Tree group on an interface, use the no spanning-tree stp-id {cost cost | {loopguard | rootguard} | portfast [bpduguard [shutdown-on-violation]] | priority priority} command.
Parameters
stp-id cost cost
Enter the STP instance ID. The range is 0.
Enter the keyword cost then a number as the cost. The range is from 1 to 65535. The defaults are:
1-Gigabit Ethernet interface = 4. 10-Gigabit Ethernet interface = 2. Port Channel interface with 100 Mb/s Ethernet = 18. Port Channel interface with 1 Gigabit Ethernet = 3. Port Channel interface with 10 Gigabit Ethernet = 1.
loopguard
rootguard
portfast [bpduguard [shutdown-onviol ation]]
Enter the keyword loopguard to enable STP loop guard on a port or port-channel interface.
Enter the keyword rootguard to enable STP root guard on a port or port-channel interface.
Enter the keyword portfast to enable Portfast to move the interface into Forwarding mode immediately after the root fails.
Enter the optional keyword bpduguard to disable the port when it receives a BPDU.
Enter the optional keyword shutdown-on-violation to hardware disable an interface when a BPDU is received and the port is disabled.
priority priority Enter keyword priority then a number as the priority. The range is from zero (0) to 15. The default is 8.
Defaults
cost = depends on the interface type; priority = 8
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
Spanning Tree Protocol (STP) 1419
Usage Information
Version
9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.10.1 8.4.2.1
8.3.7.0 8.2.1.0 7.7.1.0 7.5.1.0 6.2.1.1
Description
Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced the loopguard and rootguard options on the S4810. Introduced the loopguard and rootguard options on the E-Series TeraScale, C-Series, and S-Series. Introduced on the S4810. Introduced the shutdown-on-violation option. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
If you enable portfast bpduguard on an interface and the interface receives a BPDU, the software disables the interface and sends a message stating that fact. The port is in ERR_DISABLE mode, yet appears in the show interface commands as enabled. If you do not enable shutdown-onviolation, BPDUs are still sent to the RPM CPU.
STP loop guard and root guard are supported on a port or port-channel enabled in any Spanning Tree mode: Spanning Tree Protocol (STP), Rapid Spanning Tree Protocol (RSTP), Multiple Spanning Tree Protocol (MSTP), and Per-VLAN Spanning Tree Plus (PVST+).
Root guard is supported on any STP-enabled port or port-channel except when used as a stacking port. When enabled on a port, root guard applies to all VLANs configured on the port.
STP root guard and loop guard cannot be enabled at the same time on a port. For example, if you configure loop guard on a port on which root guard is already configured, the following error message is displayed: % Error: RootGuard is configured. Cannot configure LoopGuard.
Do not enable Portfast BPDU guard and loop guard at the same time on a port. Enabling both features may result in a port that remains in a blocking state and prevents traffic from flowing through it. For example, when Portfast BPDU guard and loop guard are both configured:
If a BPDU is received from a remote device, BPDU guard places the port in an Err-Disabled Blocking state and no traffic is forwarded on the port.
If no BPDU is received from a remote device, loop guard places the port in a Loop-Inconsistent Blocking state and no traffic is forwarded on the port.
To display the type of STP guard (Portfast BPDU, root, or loop guard) enabled on a port, enter the show spanning-tree 0 command.
1420 Spanning Tree Protocol (STP)
59
SupportAssist
SupportAssist sends troubleshooting data securely to Dell. SupportAssist in this Dell Networking OS release does not support automated email notification at the time of hardware fault alert, automatic case creation, automatic part dispatch, or reports. SupportAssist requires Dell Networking OS 9.9(0.0) and SmartScripts 9.7 or later to be installed on the Dell Networking device.
Topics:
� eula-consent � support-assist � support-assist activate � support-assist activity � SupportAssist Commands � SupportAssist Activity Commands � SupportAssist Company Commands � SupportAssist Person Commands � SupportAssist Server Commands � show eula-consent � show running-config � show support-assist status
eula-consent
Accept or reject the end user license agreement (EULA).
Syntax Parameters
eula-consent {support-assist} {accept | reject}
support-assist
accept reject
Enter the keywords support-assist to either accept or reject the EULA for the specified service.
Enter the keyword accept to accept the EULA for the specified service.
Enter the keyword reject to reject the EULA for the specified service.
Defaults
None
Command Modes CONFIGURATION
Command History
Version
9.9(0.0)
Description
Introduced on the S4810, S4820T, S3048�ON, S4048�ON, S5000, S6000, S6000�ON, Z9500, MXL.
Usage Information
Example
When you run the command, the system displays a message with the information directing to the URL for further information.
If you reject the EULA, the configuration mode for the specified service is not usable. If there is an existing SupportAssist configuration, the configuration is not removed and the feature is
disabled.
Dell(conf)# eula-consent support-assist accept I accept the terms of the license agreement. You can reject the license agreement by configuring this command 'eula-consent support-assist reject'.
By installing SupportAssist, you allow Dell to save your contact information (e.g. name, phone number and/or
SupportAssist 1421
Related Commands
email address) which would be used to provide technical support for your Dell products and services. Dell may use the information for providing recommendations to improve your IT infrastructure. Dell SupportAssist also collects and stores machine diagnostic information, which may include but is not limited to configuration information, user supplied contact information, names of data volumes, IP addresses, access control lists, diagnostics & performance information, network configuration information, host/server configuration & performance information and related data ("Collected Data") and transmits this information to Dell. By downloading SupportAssist and agreeing to be bound by these terms and the Dell end user license agreement, available at: www.dell.com/aeula, you agree to allow Dell to provide remote monitoring services of your IT environment and you give Dell the right to collect the Collected Data in accordance with Dells Privacy Policy, available at: www.dell.com/privacypolicycountryspecific, in order to enable the performance of all of the various functions of SupportAssist during your entitlement to receive related repair services from Dell,. You further agree to allow Dell to transmit and store the Collected Data from SupportAssist in accordance with these terms. You agree that the provision of SupportAssist may involve international transfers of data from you to Dell and/or to Dells affiliates, subcontractors or business partners. When making such transfers, Dell shall ensure appropriate protection is in place to safeguard the Collected Data being transferred in connection with SupportAssist. If you are downloading SupportAssist on behalf of a company or other legal entity, you are further certifying to Dell that you have appropriate authority to provide this consent on behalf of that entity. If you do not consent to the collection, transmission and/or use of the Collected Data, you may not download, install or otherwise use SupportAssist. support-assist -- moves to the SupportAssist Configuration mode, if the EULA has been accepted.
support-assist
Move to the SupportAssist configuration mode, if the EULA has been accepted.
Syntax
support-assist To remove all the configuration of the SupportAssist service, use the no support-assist command.
Command Modes CONFIGURATION
Command History
Version
9.9(0.0)
Description
Introduced on the S4810, S4820T, S3048�ON, S4048�ON, S5000, S6000, S6000�ON, Z9500, MXL.
Related Commands
eula-consent on page 1421 -- accepts or rejects the EULA.
support-assist activate
Enable the SupportAssist service.
Syntax
support-assist activate
Command Modes CONFIGURATION
1422 SupportAssist
Command History
Usage Information
Version
9.9(0.0)
Description
Introduced on the S4810, S4820T, S3048�ON, S4048�ON, S5000, S6000, S6000�ON, Z9500, MXL.
You are guided through a series of queries to configure SupportAssist. The generated commands are added to the running configuration, including the DNS resolve commands, if configured.
This command starts the configuration wizard for the SupportAssist. At any time, you can exit by entering Ctrl-C. If necessary, you can skip some data entry.
support-assist activity
Trigger an activity event immediately.
Syntax Parameters
support-assist activity {full-transfer} start now
full-transfer
Enter the keywords full-transfer to specify transfer of configuration, inventory, logs, and other information.
Command Modes EXEC Privilege
Command History
Version
9.9(0.0)
Description
Introduced on the S4810, S4820T, S3048�ON, S4048�ON, S5000, S6000, S6000�ON, Z9500, MXL.
SupportAssist Commands
Dell Networking OS supports the following SupportAssist mode commands.
activity
Move to the SupportAssist Activity mode for an activity. Allow the user to configure customized details for a specific activity.
Syntax
activity {full-transfer}
To remove all customized detail for a specific activity, use the no activity {activity-name} command.
Parameters
full-transfer
Enter the keywords full-transfer to specify transfer of configuration, inventory, logs, and other information.
Command Modes SUPPORTASSIST
Command History
Version
9.9(0.0)
Description
Introduced on the S4810, S4820T, S3048�ON, S4048�ON, S5000, S6000, S6000�ON, Z9500, MXL.
Usage Information
By default, each activity follows a set of default actions using a default schedule. Using this command, you can customize the set of actions and disable a certain activity.
SupportAssist 1423
contact-company
Configure the contact information for the company.
Syntax
contact-company name {company-name}[company-next-name] ... [company-nextname]
To remove the contact company information, use the no contact-company command.
Parameters
company-name
company-nextname
Enter the name for the company. If there are multiple words in the name, use optional additional fields.
(OPTIONAL) Enter the next components of the company name, up to 5 components are allowed.
Command Modes SUPPORTASSIST
Command History
Version
9.9(0.0)
Description
Introduced on the S4810, S4820T, S3048�ON, S4048�ON, S5000, S6000, S6000�ON, Z9500, MXL.
Usage Information
You can configure only one contact-company.
It is not possible to remove the components of the company name. The no form of the command removes the entire contact-company entry.
This command is optional for SupportAssist service configuration.
contact-person
Configure the contact name for an individual.
Syntax
contact-person [first <first-name>] last <last-name>
To remove the contact person and all their details, use the no contact-person [first <firstname>] last <last-name> command.
Parameters
first-name last-name
(Optional) Enter the first name for the contact person. This is optional provided each contact person name is unique. To include a space, enter a space within double quotes.
Enter the last name for the contact person. To include a space, enter a space within double quotes.
Command Modes SUPPORTASSIST
Command History
Version
9.9(0.0)
Description
Introduced on the S4810, S4820T, S3048�ON, S4048�ON, S5000, S6000, S6000�ON, Z9500, MXL.
Usage Information
Each contact person must be unique by their name.
You can configure only one contact person.
It is not possible to remove the first name or last name. The no form of the command removes the entire contact-person entry.
This command is optional for SupportAssist service configuration.
1424 SupportAssist
enable
Enable all activities and severs for the SupportAssist service.
Syntax Parameters
enable all To return to the default setting, use the no enable all command.
all
Enter the keyword all to enable all SupportAssist service activities.
Defaults
Disabled
Command Modes SUPPORTASSIST
Command History
Version
9.9(0.0)
Description
Introduced on the S4810, S4820T, S3048�ON, S4048�ON, S5000, S6000, S6000�ON, Z9500, MXL.
server
Configure the name of the remote SupportAssist Server and move to SupportAssist Server mode.
Syntax
server server-name To delete a server, use the no server server-name command.
Parameters
server-name
Enter the name of the remote SupportAssist Server. To include a space, enter a space within double quotes.
Defaults
Default server has URL stor.g3.ph.dell.com
Command Modes SUPPORTASSIST
Command History
Version
9.9(0.0)
Description
Introduced on the S4810, S4820T, S3048�ON, S4048�ON, S5000, S6000, S6000�ON, Z9500, MXL.
Usage Information
The server-name is used as a reference only and is not required to be used as part of a URL definition.
There is a reserved name of default for the default server at stor.g3.ph.dell.com. You can customize the defaults for this server by entering the server default command and use the custom commands.
You can configure one additional server.
SupportAssist Activity Commands
Dell Networking OS supports the following SupportAssist Activity mode commands.
action-manifest get
Copy an action-manifest file for an activity to the system.
Syntax Parameters
action-manifest get tftp | ftp | flash <file-specification> <local-filename>
file-specification Enter the full file specification for the action-manifest file. For example: tftp://hostip/filepath
SupportAssist 1425
local-file-name
ftp://userid:password@hostip/filepath scp://userid:password@hostip/filepath
Enter the name of the local action-manifest file, up to 32 characters long. Allowable characters are: a to z, A to Z, 0 to 9, -, _, and space.
Command Modes SUPPORTASSIST ACTIVITY
Command History
Version
9.9(0.0)
Description
Introduced on the S4810, S4820T, S3048�ON, S4048�ON, S5000, S6000, S6000�ON, Z9500, MXL.
Usage Information
Related Commands
The remote file specification includes the protocol that is used to copy the file from the remote system.
action-manifest install on page 1426 -- configures the action-manifest to use for a specific activity. action-manifest show on page 1427 -- views the list of action-manifest for a specific activity. action-manifest remove on page 1426 -- removes the action-manifest file for an activity.
action-manifest install
Configure the action-manifest to use for a specific activity.
Syntax
action-manifest install {default | <local-file-name>}
To revert to the default action-manifest file, use the action-manifest install default command.
Parameters
default local-file-name
Enter the keyword default to revert back to the default set of actions for an activity.
Enter the name of the local action-manifest file. Allowable characters are: a to z, A to Z, 0 to 9, -, _, and space.
Defaults
default
Command Modes SUPPORTASSIST ACTIVITY
Command History
Version
9.9(0.0)
Description
Introduced on the S4810, S4820T, S3048�ON, S4048�ON, S5000, S6000, S6000�ON, Z9500, MXL.
Usage Information
Related Commands
To replace the default action-manifest with a customized one, copy the action-manifest file to the system using the action-manifest put command and then use the action-manifest install command. To revert to the default action-manifest file, use the action-manifest install default command.
action-manifest get on page 1425 -- copies an action-manifest file for an activity to the system.
action-manifest show on page 1427 -- views the list of action-manifest for a specific activity.
action-manifest remove on page 1426 -- removes the action-manifest file for an activity.
action-manifest remove
Remove the action-manifest file for an activity.
Syntax
action-manifest remove <local-file-name>}
1426 SupportAssist
Parameters
local-file-name
Enter the name of the local action-manifest file. Allowable characters are: a to z, A to Z, 0 to 9, -, _, and space.
Command Modes SUPPORTASSIST ACTIVITY
Command History
Version
9.9(0.0)
Description
Introduced on the S4810, S4820T, S3048�ON, S4048�ON, S5000, S6000, S6000�ON, Z9500, MXL.
Usage Information
Related Commands
To revert to the default action-manifest file, use the action-manifest install command. If necessary, you can then remove the custom action-manifest file.
action-manifest get on page 1425 -- copies an action-manifest file for an activity to the system. action-manifest install on page 1426 -- configures the action-manifest to use for a specific activity. action-manifest show on page 1427 -- views the list of action-manifest for a specific activity.
action-manifest show
View the list of action-manifest for a specific activity.
Syntax Parameters
action-manifest show {all}
all
Enter the keyword all to view the entire list of action-manifests that are available
for an activity.
Command Modes SUPPORTASSIST ACTIVITY
Command History
Version
9.9(0.0)
Description
Introduced on the S4810, S4820T, S3048�ON, S4048�ON, S5000, S6000, S6000�ON, Z9500, MXL.
Related Commands
action-manifest get on page 1425 -- copies an action-manifest file for an activity to the system. action-manifest install on page 1426 -- configures the action-manifest to use for a specific activity. action-manifest remove on page 1426 -- removes the action-manifest file for an activity.
enable
Enable a specific SupportAssist activity.
Syntax
enable To disable a particular SupportAssist activity, use the no enable command.
Command Modes SUPPORTASSIST ACTIVITY
Command History
Version
9.9(0.0)
Description
Introduced on the S4810, S4820T, S3048�ON, S4048�ON, S5000, S6000, S6000�ON, Z9500, MXL.
Related Commands
activity on page 1423 -- moves user to the SupportAssist Activity mode for that activity.
SupportAssist 1427
SupportAssist Company Commands
Dell Networking OS supports the following SupportAssist Company mode commands.
address
Configure the address information for the company.
Syntax
address [city company-city] [{province | region | state} name] [country company-country] [{postalcode | zipcode] company-code]
To remove a portion of the company address information, use the no address [city | province | region | state | country | postalcode | zipcode] command.
To remove the complete company contact information, use the no address command.
Parameters
city companycity
(OPTIONAL) Enter the keyword city then the city or town for the company site. To include a space, enter a space within double quotes.
province | region (OPTIONAL) Enter the keyword province, region or state then the name of
| state name
province, region or state for the company site. To include a space, enter a space
within double quotes.
country
(OPTIONAL) Enter the keyword country then the country for the company site.
company-country To include a space, enter a space within double quotes.
postalcode |
zipcode company-code
(OPTIONAL) Enter the keyword postalcode or zipcode then the postal code or zip code for the company site, as one string with no spaces.
Command Modes SUPPORTASSIST COMPANY
Command History
Version
9.9(0.0)
Description
Introduced on the S4810, S4820T, S3048�ON, S4048�ON, S5000, S6000, S6000�ON, Z9500, MXL.
Usage Information
The optional parameters must be provided in the following order: city state country postalcode. If specified in a different order, the command returns an error as follows:
Dell(conf-supportassist-cmpy-test)#address city Minneapolis postalcode 55344 country USA state Minnesota
^ % Error: Invalid input at "^" marker.
Example
This command is optional for SupportAssist service configuration.
Dell(conf-supportassist-cmpy-test)#address city Minneapolis state Minnesota country USA postalcode 55344
street-address
Configure the street address information for the company.
Syntax
street-address {address1} [address2]...[address8] To remove the street address, use the no street-address command.
Parameters
address1
Enter the street address for the company.
address2..addres (OPTIONAL) Enter the street address of the company site. Up to 8 fields are
s8
allowed.
1428 SupportAssist
Command Modes SUPPORTASSIST COMPANY
Command History
Version
9.9(0.0)
Description
Introduced on the S4810, S4820T, S3048�ON, S4048�ON, S5000, S6000, S6000�ON, Z9500, MXL.
Usage Information
This command is optional for SupportAssist service configuration.
territory
Configure the territory and set the coverage for the company site.
Syntax
territory company-territory To remove the company territory information, use the no territory command.
Parameters
companyterritory
Enter the territory name for the company. To include a space, enter a space within double quotes.
Command Modes SUPPORTASSIST COMPANY
Command History
Version
9.9(0.0)
Description
Introduced on the S4810, S4820T, S3048�ON, S4048�ON, S5000, S6000, S6000�ON, Z9500, MXL.
Usage Information
This command is optional for SupportAssist service configuration.
SupportAssist Person Commands
Dell Networking OS supports the following SupportAssist Person mode commands.
email-address
Configure the email addresses to reach the contact person.
Syntax
email-address primary email-address [alternate email-address]
To remove an email address, use either the no email-address primary or no email-address alternate commands.
Parameters
primary emailaddress
alternate emailaddress
Enter the keyword primary then the primary email address for the person. Enter the keyword alternate then the alternate email address for the person.
Command Modes SUPPORTASSIST PERSON
Command History
Version
9.9(0.0)
Description
Introduced on the S4810, S4820T, S3048�ON, S4048�ON, S5000, S6000, S6000�ON, Z9500, MXL.
Usage Information
The email addresses must have the standard form of <username>@<email system> to be considered valid.
This command is optional for SupportAssist service configuration.
SupportAssist 1429
Related Commands
preferred-method on page 1430 -- configures the preferred method for contacting the person.
phone
Configure phone numbers to reach the contact person.
Syntax
phone primary phone [alternate phone]
To remove a phone number, use either the no phone primary or no phone alternate commands.
Parameters
primary phone alternate phone
Enter the keyword primary then the primary phone number for the person. Enter the keyword alternate then the alternate phone number for the person.
Command Modes SUPPORTASSIST PERSON
Command History
Version
9.9(0.0)
Description
Introduced on the S4810, S4820T, S3048�ON, S4048�ON, S5000, S6000, S6000�ON, Z9500, MXL.
Usage Information
Related Commands
The phone numbers may contain country codes, area codes and extensions, if necessary. Allowable characters are 0 to 9, x, (, ), - and +. This command is optional for SupportAssist service configuration.
preferred-method on page 1430 -- configures the preferred method for contacting the person.
preferred-method
Configure the preferred method for contacting the person.
Syntax Parameters
preferred-method {email | no-contact | phone]
email no-contact phone
Enter the keyword email to specify email as preferred method. Enter the keywords no-contact to specify that there is no preferred method. Enter the keyword phone to specify phone as preferred method.
Defaults
no-contact
Command Modes SUPPORTASSIST PERSON
Command History
Version
9.9(0.0)
Description
Introduced on the S4810, S4820T, S3048�ON, S4048�ON, S5000, S6000, S6000�ON, Z9500, MXL.
Related Commands
email-address on page 1429 -- configures the email addresses to reach the contact person. phone on page 1430 -- configures phone numbers to reach the contact person.
time-zone
Configure the time zone for contacting the person.
Syntax
time-zone zone +-HH:MM[start-time HH:MM] [end-time HH:MM] To remove the time zone, use the no time-zone [zone | start-time | end-time] command.
1430 SupportAssist
Parameters
zone +-HH:MM
start-time HH:MM stop-time HH:MM
Enter the keyword zone then a time difference from GMT expressed as HH:MM. This number may be preceded by either a + or � sign.
Enter the keywords start-time then a starting time expressed as HH:MM. Use the 24-hour clock format.
Enter the keywords stop-time then a stopping time expressed as HH:MM. Use the 24-hour clock format.
Command Modes SUPPORTASSIST PERSON
Command History
Version
9.9(0.0)
Description
Introduced on the S4810, S4820T, S3048�ON, S4048�ON, S5000, S6000, S6000�ON, Z9500, MXL.
Usage Information
This command is optional for SupportAssist service configuration.
SupportAssist Server Commands
Dell Networking OS supports the following SupportAssist Server mode commands.
proxy-ip-address
Configure a proxy for reaching the SupportAssist remote server.
Syntax
proxy-ip-address {ipv4-address | ipv6-address} port port-number [ username userid password [encryption-type] password ]
To remove the proxy, use the no proxy-ip-address command.
Parameters
ipv4-address ipv6-address
Enter the IP address of the proxy server in a dotted decimal format (A.B.C.D). Enter the IPv6 address of the proxy server in the x:x:x:x::x format.
NOTE: The :: notation specifies successive hexadecimal fields of zeros.
port port-number Enter the keyword port then the TCP/IP port number. The port number range is from 80 to 100000.
username userid (OPTIONAL) Enter the keyword username then the user ID used for the proxy server.
password encryption-type
Enter the keyword password then the encryption-type or the user password.
(OPTIONAL) Enter an encryption type for the password you enter. 0 directs the system to interpret the password as clear text. 7 indicates that the password is encrypted using a DES hashing algorithm.
password
Enter a string up to 32 characters long.
Defaults
encryption-type for the password is 0.
Command Modes SUPPORTASSIST SERVER
Command History
Version
9.9(0.0)
Description
Introduced on the S4810, S4820T, S3048�ON, S4048�ON, S5000, S6000, S6000�ON, Z9500, MXL.
Usage Information
The passwords are stored encrypted in the running configuration.
SupportAssist 1431
enable
Enable communication with the SupportAssist server.
Syntax
enable To disable communication to a specific SupportAssist server, use the no enable command.
Command Modes SUPPORTASSIST SERVER
Command History
Version
9.9(0.0)
Description
Introduced on the S4810, S4820T, S3048�ON, S4048�ON, S5000, S6000, S6000�ON, Z9500, MXL.
Related Commands
server on page 1425 -- configures the name of the remote SupportAssist server.
url
Configure the URL to reach the SupportAssist remote server.
Syntax
url uniform-resource-locator To delete the URL for the server, use the no url command.
Parameters
uniformresource-locator
Enter a text string for the URL using one of the following formats:
http://[username:password@]<hostip>:<portNum>/<filepath> https://[username:password@]<hostip>:<portNum>/<filepath>
NOTE: The host IP for the server may be specified as an IPv4 address, an IPv6 address or as a DNS hostname. If using the DNS hostname, the DNS resolver will need to be configured and enabled.
Command Modes SUPPORTASSIST SERVER
Command History
Version
9.9(0.0)
Description
Introduced on the S4810, S4820T, S3048�ON, S4048�ON, S5000, S6000, S6000�ON, Z9500, MXL.
Usage Information
The URL should be formatted to follow the ISO format.
show eula-consent
Display the EULA for the feature.
Syntax Parameters
show eula-consent {support-assist | other feature} support-assist | Enter the keywords support-assist or the text corresponding to other feature. other feature
Command Modes EXEC Privilege
Command History
Version
9.9(0.0)
Description
Introduced on the S4810, S4820T, S3048�ON, S4048�ON, S5000, S6000, S6000�ON, Z9500, MXL.
1432 SupportAssist
Example
Dell# show eula-consent SupportAssist EULA has been: Accepted Additional information about the SupportAssist EULA is as follows: By installing SupportAssist, you allow Dell to save your contact information (e.g. name, phone number and/or email address) which would be used to provide technical support for your Dell products and services. Dell may use the information for providing recommendations to improve your IT infrastructure. Dell SupportAssist also collects and stores machine diagnostic information, which may include but is not limited to configuration information, user supplied contact information, names of data volumes, IP addresses, access control lists, diagnostics & performance information, network configuration information, host/server configuration & performance information and related data (Collected Data) and transmits this information to Dell. By downloading SupportAssist and agreeing to be bound by these terms and the Dell end user license agreement, available at: www.dell.com/aeula, you agree to allow Dell to provide remote monitoring services of your IT environment and you give Dell the right to collect the Collected Data in accordance with Dells Privacy Policy, available at: www.dell.com/privacypolicycountryspecific, in order to enable the performance of all of the various functions of SupportAssist during your entitlement to receive related repair services from Dell,. You further agree to allow Dell to transmit and store the Collected Data from SupportAssist in accordance with these terms. You agree that the provision of SupportAssist may involve international transfers of data from you to Dell and/or to Dells affiliates, subcontractors or business partners. When making such transfers, Dell shall ensure appropriate protection is in place to safeguard the Collected Data being transferred in connection with SupportAssist. If you are downloading SupportAssist on behalf of a company or other legal entity, you are further certifying to Dell that you have appropriate authority to provide this consent on behalf of that entity. If you do not consent to the collection, transmission and/or use of the Collected Data, you may not download, install or otherwise use SupportAssist.
show running-config
Display the current configuration and changes from the default values.
Syntax Parameters
show running-config support-assist
support-assist
Enter the keyword support-assist to view the detailed configuration for the feature.
SupportAssist 1433
Command Modes EXEC Privilege
Command History
Version
9.9(0.0)
Description
Introduced on the S4810, S4820T, S3048�ON, S4048�ON, S5000, S6000, S6000�ON, Z9500, MXL.
Example
Dell# show running-config support-assist ! support-assist !
activity full-transfer enable activity-manifest install testing
! contact-company name My Company street-address 123 Main Street address city MyCity country MyCountry
! contact-person first john last doe email-address primary jdoe@mycompany.com preferred-method email
! server default enable url https://192.168.1.1/index.htm
show support-assist status
Display information on SupportAssist feature status including any activities, status of communication, last time communication sent, and so on.
Syntax
show support-assist status
Command Modes EXEC Privilege
Command History
Version
9.9(0.0)
Description
Introduced on the S4810, S4820T, S3048�ON, S4048�ON, S5000, S6000, S6000�ON, Z9500, MXL.
Example
Dell#show support-assist status SupportAssist Service: Installed EULA: Accepted Server: default
Enabled: Yes URL: https://stor.g3.ph.dell.com Server: chennai Enabled: Yes URL: http://10.16.148.19/
Activity
State
----------------------- -------
------------------------
full-transfer
Failure
Last Start ------------------------
Last Success
Dell#show support-assist status SupportAssist Service: Installed EULA: Accepted Server: default
Enabled: Yes URL: https://stor.g3.ph.dell.com Server: chennai Enabled: Yes
1434 SupportAssist
URL: http://10.16.148.19/
Activity
State
----------------------- -------
------------------------
full-transfer
Success
11:15:28 PST
Last Start -----------------------Aug 10 2015 11:15:26 PST
Last Success Aug 10 2015
SupportAssist 1435
60
System Time and Date
The commands in this chapter configure time values on the system, either using the Dell Networking operating software, or the hardware, or using the network time protocol (NTP). With NTP, the switch can act only as a client to an NTP clock host.
For more information, refer to the "Network Time Protocol" section of the Management chapter in the Dell Networking OS Configuration Guide.
The commands in this chapter are generally supported on Dell Networking OS with some exceptions, as notes in the Command History fields.
Topics:
� clock summer-time date � clock summer-time recurring � clock timezone � debug ntp � ntp authenticate � ntp authentication-key � ntp broadcast client � ntp disable � ntp multicast client � ntp master <stratum> � ntp server � ntp source � ntp trusted-key � show clock � show ntp associations � show ntp vrf associations � show ntp status
clock summer-time date
Set a date (and time zone) on which to convert the switch to daylight saving time on a one-time basis.
Syntax
clock summer-time time-zone date start-month start-day start-year starttime end-month end-day end-year end-time [offset]
To delete a daylight saving time zone configuration, use the no clock summer-time command.
Parameters
time-zone start-month start-day start-year start-time end-day
Enter the three-letter name for the time zone. This name is displayed in the show clock output.
Enter the name of one of the 12 months in English. You can enter the name of a day to change the order of the display to time day month year.
Enter the number of the day. The range is from 1 to 31. You can enter the name of a month to change the order of the display to time day month year.
Enter a four-digit number as the year. The range is from 1993 to 2035.
Enter the time in hours:minutes. For the hour variable, use the 24-hour format; example, 17:15 is 5:15 pm.
Enter the number of the day. The range is from 1 to 31. You can enter the name of a month to change the order of the display to time day month year.
1436 System Time and Date
end-month
end-time
end-year offset
Enter the name of one of the 12 months in English. You can enter the name of a day to change the order of the display to time day month year.
Enter the time in hours:minutes. For the hour variable, use the 24-hour format; example, 17:15 is 5:15 pm.
Enter a four-digit number as the year. The range is from 1993 to 2035.
(OPTIONAL) Enter the number of minutes to add during the summer-time period. The range is from 1 to1440. The default is 60 minutes.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Related Commands
clock summer-time recurring -- sets a date (and time zone) on which to convert the switch to daylight saving time each year.
show clock -- displays the current clock settings.
clock summer-time recurring
Set the software clock to convert to daylight saving time on a specific day each year.
Syntax
clock summer-time time-zone recurring [start-week start-day start-month start-time end-week end-day end-month end-time [offset]]
To delete a daylight saving time zone configuration, use the no clock summer-time command.
Parameters
time-zone start-week
Enter the three-letter name for the time zone. This name is displayed in the show clock output. You can enter up to eight characters.
(OPTIONAL) Enter one of the following as the week that daylight saving begins and then enter values for start-day through end-time:
week-number: Enter a number from 1 to 4 as the number of the week in the month to start daylight saving time.
first: Enter this keyword to start daylight saving time in the first week of the month.
System Time and Date 1437
start-day start-month start-time end-week
end-day end-month end-time offset
last: Enter this keyword to start daylight saving time in the last week of the month.
Enter the name of the day that you want daylight saving time to begin. Use English three letter abbreviations; for example, Sun, Sat, Mon, and so on. The range is from Sun to Sat.
Enter the name of one of the 12 months in English.
Enter the time in hours:minutes. For the hour variable, use the 24-hour format; example, 17:15 is 5:15 pm.
Enter the one of the following as the week that daylight saving ends:
week-number: enter a number from 1 to 4 as the number of the week to end daylight saving time.
first: enter the keyword first to end daylight saving time in the first week of the month.
last: enter the keyword last to end daylight saving time in the last week of the month.
Enter the weekday name that you want daylight saving time to end. Enter the weekdays using the three letter abbreviations; for example Sun, Sat, Mon, and so on. The range is from Sun to Sat.
Enter the name of one of the 12 months in English.
Enter the time in hours:minutes:seconds. For the hour variable, use the 24-hour format; example, 17:15:00 is 5:15 pm.
(OPTIONAL) Enter the number of minutes to add during the summer-time period. The range is from 1 to 1440. The default is 60 minutes.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 7.4.1.0
6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Updated the start-day and end-day options to allow for using the three-letter abbreviation of the weekday name. Introduced on the E-Series.
Related Commands
clock summer-time date -- sets a date (and time zone) on which to convert the switch to daylight saving time on a one-time basis.
show clock -- displays the current clock settings.
1438 System Time and Date
clock timezone
Configure a timezone for the switch.
Syntax
clock timezone timezone-name offset To delete a timezone configuration, use the no clock timezone command.
Parameters
timezone-name offset
Enter the name of the timezone. You cannot use spaces.
Enter one of the following:
a number from 1 to 23 as the number of hours in addition to universal time coordinated (UTC) for the timezone.
a minus sign (-) then a number from 1 to 23 as the number of hours.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Coordinated universal time (UTC) is the time standard based on the International Atomic Time standard, commonly known as Greenwich Mean time. When determining system time, include the differentiator between UTC and your local timezone. For example, San Jose, CA is the Pacific Timezone with a UTC offset of -8.
debug ntp
Display network time protocol (NTP) transactions and protocol messages for troubleshooting.
Syntax
debug ntp {adjust | all | authentication | events | loopfilter | packets | select | sync}
To disable debugging of NTP transactions, use the no debug ntp {adjust | all | authentication | events | loopfilter | packets | select | sync} command.
Parameters
adjust all
Enter the keyword adjust to display information on NTP clock adjustments. Enter the keyword all to display information on all NTP transactions.
System Time and Date 1439
authentication
events loopfilter
packets select sync
Enter the keyword authentication to display information on NTP authentication transactions.
Enter the keyword events to display information on NTP events.
Enter the keyword loopfilter to display information on NTP local clock frequency.
Enter the keyword packets to display information on NTP packets.
Enter the keyword select to display information on the NTP clock selection.
Enter the keyword sync to display information on the NTP clock synchronization.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
ntp authenticate
Enable authentication of NTP traffic between the switch and the NTP time serving hosts.
Syntax
ntp authenticate To disable NTP authentication, use the no ntp authentication command.
Defaults
Not enabled.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500.
1440 System Time and Date
Usage Information
Version
9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.1.1.0
Description
Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
You also must configure an authentication key for NTP traffic using the ntp authentication-key command.
ntp authentication-key
Specify a key for authenticating the NTP server.
Syntax Parameters
ntp authentication-key number md5 [0 | 7] key
number
Specify a number for the authentication key. The range is from 1 to 4294967295.
This number must be the same as the number parameter configured in the ntp trusted-key command.
md5 0 7 key
Specify that the authentication key is encrypted using MD5 encryption algorithm. Specify that authentication key is entered in an unencrypted format (default). Specify that the authentication key is entered in DES encrypted format. Enter the authentication key in the previously specified format.
Defaults
NTP authentication is not configured by default. If you do not specify the option [0 | 7], 0 is selected by default.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.11.1 8.2.1.0 7.6.1.0 7.5.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Added options [0 | 7] for entering the authentication key. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
After configuring the ntp authentication-key command, configure the ntp trusted-key command to complete NTP authentication.
System Time and Date 1441
Related Commands
Dell Networking OS versions 8.2.1.0 and later use an encryption algorithm to store the authentication key that is different from previous Dell Networking OS versions; beginning in version 8.2.1.0, Dell Networking OS uses DES encryption to store the key in the startup-config when you enter the ntp authentication-key command. Therefore, if your system boots with a startup-configuration from an Dell Networking OS versions prior to 8.2.1.0 in which you have configured ntp authentication-key, the system cannot correctly decrypt the key, and cannot authenticate NTP packets. In this case you must re-enter this command and save the running-config to the startup-config.
ntp authenticate -- enables NTP authentication.
ntp trusted-key -- configures a trusted key.
ntp broadcast client
Set up the interface to receive NTP broadcasts from an NTP server.
Syntax
ntp broadcast client To disable broadcast, use the no ntp broadcast client command.
Defaults
Disabled.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
ntp disable
Prevent an interface from receiving NTP packets.
Syntax
ntp disable To re-enable NTP on an interface, use the no ntp disable command.
Defaults
Disabled (that is, if you configure an NTP host, all interfaces receive NTP packets)
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
1442 System Time and Date
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
ntp multicast client
To receive NTP information from the network via multicast, configure the switch.
Syntax
ntp multicast client [multicast-address]
To disable multicast reception, use the no ntp multicast client [multicast-address] command.
Parameters
multicastaddress
(OPTIONAL) Enter a multicast address. Enter either an IPv4 address in dotted decimal format or an IPv6 address in X:X:X:X::X format. If you do not enter a multicast address, the address:
224.0.1.1 is configured if the interface address is IPv4 ff05::101 is configured if the interface address is IPv6
Defaults
Not configured.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.4.1.0 8.3.7.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Added support for IPv6 multicast addresses. Introduced on the S4810. Introduced on the E-Series.
System Time and Date 1443
ntp master <stratum>
Configure the switch as NTP Server.
Syntax Parameters
ntp master <stratum>
ntp
Enter the stratum number to identify the NTP Server's hierarchy.
master<stratum>
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.6(0.0) 9.2(1.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S4810, S4820T, S5000, S6000, Z9000, and Z9500. Introduced on the Z9500.
ntp server
Configure an NTP time-serving host.
Syntax Parameters
ntp server[vrf vrf-name] {hostname | ipv4-address | ipv6-address} [key keyid] [prefer] [version number]
vrf vrf-name
(Optional) Enter the keyword vrf and then the name of the VRF to configure a NTP time-serving host corresponding to that VRF.
ipv4-address | ipv6-address
Enter an IPv4 address (A.B.C.D) or IPv6 address (X:X:X:X::X) of NTP server.
hostname key keyid
prefer
version number
Enter the hostname of the server.
(OPTIONAL) Enter the keyword key and a number as the NTP peer key. The range is from 1 to 4294967295.
(OPTIONAL) Enter the keyword prefer to indicate that this peer has priority over other servers.
(OPTIONAL) Enter the keyword version and a number to correspond to the NTP version used on the server. The range is from 1 to 4.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
1444 System Time and Date
Usage Information
Related Commands
Version
9.8(0.0P2) 9.7(0.0) 9.6(0.0) 9.4.(0.0) 9.2(1.0) 9.0.2.0 8.3.11.1 8.4.1.0 7.6.1.0 7.5.1.0 6.1.1.0
Description
Introduced on the S3048-ON. Introduced on the S6000-ON. Added support for VRF. Added support for VRF. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Added IPv6 support. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
You can configure multiple time-serving hosts . From these time-serving hosts, the Dell Networking OS chooses one NTP host with which to synchronize. To determine which server was selected, use the show ntp associations command.
Because many polls to NTP hosts can impact network performance, Dell Networking recommends limiting the number of hosts configured.
show ntp associations -- displays the NTP servers configured and their status.
ntp source
Specify an interface's IP address to be included in the NTP packets.
Syntax
ntp source interface To delete the configuration, use the no ntp source command.
Parameters
interface
Enter the following keywords and slot/port or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For a Port Channel interface, enter the keyword lag then a number. The range is from 1 to 128.
For VLAN interface, enter the keyword vlan then a number from 1 to 4094.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2)
Introduced on the S4048-ON. Introduced on the S3048-ON.
System Time and Date 1445
Version
9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.11.1 8.5.1.0 7.6.1.0 7.5.1.0 6.1.1.0
Description
Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Added support for 4-port 40G line cards on ExaScale. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
ntp trusted-key
Set a key to authenticate the system to which NTP synchronizes.
Syntax
ntp trusted-key number To delete the key, use the no ntp trusted-key number command.
Parameters
number
Enter a number as the trusted key ID. The range is from 1 to 4294967295.
Defaults
Not configured.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.11.1 7.6.1.0 7.5.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
The number parameter in the ntp trusted-key command must be the same number as the number parameter in the ntp authentication-key command. If you change the ntp authenticationkey command, you must also change the ntp trusted-key command.
ntp authentication-key -- sets an authentication key for NTP.
ntp authenticate -- enables the NTP authentication parameters you set.
1446 System Time and Date
show clock
Display the current clock settings.
Syntax Parameters
show clock [detail]
detail
(OPTIONAL) Enter the keyword detail to view the source information of the clock.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Example
Dell#show clock 11:05:56.949 UTC Thu Oct 25 2001 Dell#
Example (Detail)
Dell#show clock detail 12:18:10.691 UTC Wed Jan 7 2009 Time source is RTC hardware Summer time starts 02:00:00 UTC Sun Mar 8 2009 Summer time ends 02:00:00 ABC Sun Nov 1 2009 Dell#
Related Commands
clock summer-time recurring -- displays the time and date from the switch hardware clock.
show ntp associations
Display the NTP master and peers.
Syntax
show ntp associations
Command Modes EXEC EXEC Privilege
System Time and Date 1447
Command History
Usage Information
Example
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
The following describes the show ntp associations command shown in the Example below.
Field
Description
(none)
One or more of the following symbols could be displayed:
* means synchronized to this peer. # means almost synchronized to this peer. + means the peer was selected for possible synchronization. - means the peer is a candidate for selection. ~ means the peer is statically configured.
remote ref clock st
when poll reach delay
offset
disp
Displays the remote IP address of the NTP peer.
Displays the IP address of the remote peer's reference clock.
Displays the peer's stratum, that is, the number of hops away from the external time source. A 16 in this column means the NTP peer cannot reach the time source.
Displays the last time the switch received an NTP packet.
Displays the polling interval (in seconds).
Displays the reachability to the peer (in octal bitstream).
Displays the time interval or delay for a packet to complete a round-trip to the NTP time source (in milliseconds).
Displays the relative time of the NTP peer's clock to the switch clock (in milliseconds).
Displays the dispersion.
Dell#show ntp associations
remote
ref clock st when poll reach delay offset disp
=============================================================
10.10.120.5 0.0.0.0
16 - 256
0 0.00 0.000 16000.0
*172.16.1.33 127.127.1.0 11 6 16
377 -0.08 -1499.9 104.16
172.31.1.33 0.0.0.0
16 - 256
0 0.00 0.000 16000.0
192.200.0.2 0.0.0.0
16 - 256
0 0.00 0.000 16000.0
* master (synced), # master (unsynced), + selected, - candidate
Dell#
1448 System Time and Date
Related Commands
show ntp status -- displays the current NTP status.
show ntp vrf associations
Displays the NTP servers configured for the VRF instance <vrf-name>.
Syntax
show ntp [vrf] <vrf-name> associations.
Command Modes EXECEXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.6(0.0) 9.4.(0.0) 9.2(1.0) 9.0.2.0 8.3.11.1 8.4.1.0 7.6.1.0 7.5.1.0 6.1.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Added support for VRF. Added support for VRF. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Added IPv6 support. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
show ntp status
Display the current NTP status.
Syntax
show ntp status
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T.
System Time and Date 1449
Usage Information
Example
Related Commands
Version
8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.1.1.0
Description
Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
The following describes the show ntp status command shown in the Example below.
Field
Description
"Clock is..."
States whether or not the switch clock is synchronized, which NTP stratum the system is assigned and the IP address of the NTP peer.
"frequency is..." Displays the frequency (in ppm), stability (in ppm) and precision (in Hertz) of the clock in this system.
"reference time Displays the reference time stamp. is..."
"clock offset is..."
"root dispersion is..."
Displays the system offset to the synchronized peer and the time delay on the path to the NTP root clock.
Displays the root and path dispersion.
"peer mode is..." State what NTP mode the switch is. This should be Client mode.
Dell#show ntp status Clock is synchronized, stratum 2, reference is 100.10.10.10 frequency is -32.000 ppm, stability is 15.156 ppm, precision is 4294967290 reference time is BC242FD5.C7C5C000 (10:15:49.780 UTC Mon Jan 10 2000) clock offset is clock offset msec, root delay is 0.01656 sec root dispersion is 0.39694 sec, peer dispersion is peer dispersion msec peer mode is client Dell# show ntp associations -- displays information on the NTP master and peer configurations.
1450 System Time and Date
61
Tunneling
Tunneling is supported on Dell Networking OS.
Topics:
� ip unnumbered � ipv6 unnumbered � tunnel allow-remote � tunnel destination � tunnel dscp � tunnel flow-label � tunnel hop-limit � tunnel keepalive � tunnel-mode � tunnel source
ip unnumbered
Configure a tunnel interface to operate without a unique IPv4 address and select the interface from which the tunnel borrows its address.
Syntax
ip unnumbered {interface-type slot/port[/subport]}
To set the tunnel back to default logical address use the no ip unnumbered command. If the tunnel was previously operational, the tunnel interface is operationally down unless you also configure the tunnel IPv6 address.
Parameters
interface-type Enter the interface type, followed by a slot number. interface-number
Defaults
None
Command Modes INTERFACE TUNNEL
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000-ON.
9.5(0.1)
Introduced on the Z9500.
9.4(0.1)
Introduced on the S4810, S4820T, S6000 and Z9000.
9.3(0.1)
Introduced on the S5000 and Z9000.
Usage Information
The ip unnumbered command fails in two conditions:
If the logical ip address is configured. If Tunnel mode is ipv6ip (where ip address over tunnel interface is not possible).
To ping the unnumbered tunnels, the logical address route information must be present at both the ends.
NOTE: The ip unnumbered command can specify an interface name that does not exist or does not have a configured IPv6 address. The tunnel interface is not changed to operationally up until the logical ip address is identified from one of the address family.
Tunneling 1451
ipv6 unnumbered
Configure a tunnel interface to operate without a unique IPv6 address and select the interface from which the tunnel borrows its address.
Syntax
ipv6 unnumbered {interface-type interface-number}
To set the tunnel back to default logical address use the no ipv6 unnumbered command. If the tunnel was previously operational, the tunnel interface is operationally down unless you also configure the tunnel IPv4 address.
Parameters
interface-type Enter the interface type, followed by the type, slot and port information. interface-number
Defaults
None.
Command Modes INTERFACE TUNNEL
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000-ON.
9.5(0.1)
Introduced on the Z9500.
9.4(0.0)
Introduced on the S4810, S4820T.
9.3(0.1)
Introduced on the S6000 and Z9000.
Usage Information
The ip unnumbered command fails in two conditions:
If the logical ip address is configured. If Tunnel mode is ipv6ip (where ip address over tunnel interface is not possible).
To ping the unnumbered tunnels, the logical address route information must be present at both the ends.
NOTE: The ipv6 unnumbered command can specify an interface name that does not exist or does not have a configured IPv6 address. The tunnel interface is not changed to operationally up until the logical ip address is identified from one of the address family.
tunnel allow-remote
Configure an IPv4 or IPv6 address or prefix whose tunneled packets are accepted for decapsulation. If you do not configure allow-remote entries, tunneled packets from any remote peer address is accepted.
This feature is supported on Dell Networking OS.
Syntax
tunnel allow-remote {ip-address | ipv6-address} [mask]
To delete a configured allow-remote entry use the no tunnel allow-remote command. Any specified address/mask values must match an existing entry for the delete to succeed. If the address and mask are not specified, this command deletes all allow-remote entries.
Parameters
ip-address ipv6�address mask
Enter the source IPv4 address in A.B.C.D format.
Enter the source IPv6 address in X:X:X:X::X format.
(OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D to match a range of remote addresses. The default mask is /32 for IPv4 addresses and /128 for IPv6 addresses, which match only the specified address.
Defaults
If you do not configure tunnel allow remote , all traffic which is destined to tunnel source address is decapsulated.
1452 Tunneling
Command Modes INTERFACE TUNNEL
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000-ON.
9.5(0.1)
Introduced on the Z9500.
9.4(0.0)
Introduced on the S4810, S4820T, S6000 and Z9000.
9.3(0.1)
Introduced on the S6000 and Z9000.
Usage Information
You can configure up to eight allow-remote entries on any multipoint receive-only tunnel.
This command fails if the address family entered does not match the outer header address family of the tunnel mode, tunnel source, or any other tunnel allow-remote.
If you configure any allow-remote , the tunnel source or tunnel mode commands fail if the outer header address family does not match that of the configured allow-remote.
tunnel destination
Set a destination endpoint for the tunnel.
Syntax
tunnel destination {ip-address | ipv6�address}
To delete a tunnel destination address, use the no tunnel destination {ip-address | ipv6� address} command.
Parameters
ip-address ipv6�address
Enter the destination IPv4 address for the tunnel. Enter the destination IPv6 address for the tunnel.
Defaults
none
Command Modes INTERFACE TUNNEL (conf-if-tu)
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000-ON.
9.5(0.1)
Introduced on the Z9500.
9.3(0.0)
Introduced on the S4810, S4820T, S6000 and Z9000.
Usage Information
The tunnel interface is inoperable without a valid tunnel destination address for the configured Tunnel mode.
To establish a logical tunnel to the particular destination address, use the destination address of the outer tunnel header. If you configure a tunnel interface or source address, the tunnel destination must be compatible.
Tunneling 1453
tunnel dscp
Configure the method to set the DSCP in the outer tunnel header.
C9000 Series
Syntax Parameters
tunnel dscp {mapped | value} To use the default tunnel mapping behavior, use the no tunnel dscp value command.
mapped value
Enter the keyword mapped to map the original packet DSCP (IPv4)/Traffic Class (IPv6) to the tunnel header DSCP (IPv4)/Traffic Class (IPv6) depending on the mode of tunnel.
Enter a value to set the DSCP value in the tunnel header. The range is from 0 to 63. The default value of 0 denotes mapping of original packet DSCP (IPv4)/Traffic Class (IPv6) to the tunnel header DSCP (IPv4)/Traffic Class (IPv6) depending on the mode of tunnel.
Defaults
0 (Mapped)
Command Modes INTERFACE TUNNEL (conf-if-tu)
Command History
Version
9.9(0.0)
Description
Introduced on the C9010.
9.8(0.0P5)
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000-ON.
9.5(0.1)
Introduced on the Z9500.
9.3(0.0)
Introduced on the S6000, S4810, S4820T, Z9000.
Usage Information
This command configures the method used to set the high 6 bits (the differentiated services codepoint) of the IPv4 TOS or the IPv6 traffic class in the outer IP header.
A value of 0 copies original packet DSCP (IPv4)/Traffic Class (IPv6) to the tunnel header DSCP (IPv4)/ Traffic Class (IPv6) depending on the mode of tunnel.
tunnel flow-label
Configure the method to set the IPv6 flow label value in the outer tunnel header.
Syntax
tunnel flow-label value To return to the default value of 0, use the no tunnel flow-label value command.
Parameters
value
Enter a value to set the IPv6 flow label value in the tunnel header. The range is from 0 to 1048575. The default value is 0.
Defaults
0 (Mapped original packet flow-label value to tunnel header flow-label value)
Command Modes INTERFACE TUNNEL (conf-if-tu)
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
1454 Tunneling
Usage Information
Version
9.7(0.0) 9.5(0.1) 9.3(0.0)
Description
Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000, S4810, S4820T, Z9000.
This command is only valid for tunnel interfaces with an IPv6 outer header.
tunnel hop-limit
Configure the method to set the IPv4 time-to-live or the IPv6 hop limit value in the outer tunnel header.
Syntax
tunnel hop-limit value To restore the default tunnel hop-limit, use the no tunnel hop-limit command.
Parameters
value
Enter the hop limit (ipv6) or time-to-live (ipv4) value to include in the tunnel header. The range is from 0 to 255. The default is 64.
Defaults
64 (Time-to-live for IPv4 outer tunnel header or hop limit for IPv6 outer tunnel header)
Command Modes INTERFACE TUNNEL (conf-if-tu)
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000-ON.
9.5(0.1)
Introduced on the Z9500.
9.3(0.0)
Introduced on the S6000, S4810, S4820T, Z9000.
Usage Information
A value of 0 copies the inner packet hop limit (ipv6) or time-to-live (ipv4) in the encapsulated packet to the tunnel header hop limit (ipv6) or time-to-live (ipv4) value.
tunnel keepalive
Configure the tunnel keepalive target, interval and attempts.
Syntax
tunnel keepalive {ip-address | ipv6-address}[interval {seconds}] [attempts {count | unlimited}]
To disable the tunnel keepalive probes use the no tunnel keepalive command.
Parameters
ip-address ipv6 address
Enter the IPv4 or IPv6 address of the peer to which the keepalive probes will be sent.
interval seconds
Enter the keyword interval then the interval time, in seconds, after which the restart process to keepalive probe packets.
The range is from 5 to 255. The default is 5.
count
(OPTIONAL) Enter the keyword count to count packets processed by the filter. The range is from 3 to 10. The default is 3.
Tunneling 1455
unlimited
Enter the keyword unlimited to specify the unlimited number of keepalive probe packets.
Defaults
Tunnel keepalive is disabled.
Command Modes INTERFACE TUNNEL
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000-ON.
9.5(0.1)
Introduced on the Z9500.
9.4(0.0)
Introduced on the S4810, S4820T, S6000 and Z9000.
Usage Information
Enabling tunnel keepalive causes ICMP echo packets to be sent to the keepalive target. The ICMP echo will be sourced from the tunnel interface logical IPv4 or IPv6 address and will be tunnel encapsulated. The response will be accepted whether it returns tunnel encapsulated or not.
When configuring tunnel keepalive at both end points of a tunnel interface it is recommended to set the tunnel keepalive target to the logical IPv4 or IPv6 address of the far end tunnel peer, rather than to the tunnel destination. This reduces the chance of both ends of the tunnel staying in keepalive down state. If both ends get into a keepalive down state that does not clear in a few seconds, then performing shutdown - no shutdown sequence on one end should bring both ends back to up.
tunnel-mode
Enable a tunnel interface. .
Syntax
tunnel mode {ipip | ipv6 | ipv6ip}[decapsulate-any] To disable an active tunnel interface, use the no tunnel mode command.
Parameters
ipip ipv6 ipv6ip decapsulate-any
Enable tunnel in RFC 2003 mode and encapsulate IPv4 and/or IPv6 datagrams inside an IPv4 tunnel.
Enable tunnel in RFC 2473 mode and encapsulate IPv4 and/or IPv6 datagrams inside an IPv6 tunnel.
Enable tunnel in RFC 4213 mode and encapsulate IPv6 datagrams inside an IPv4 tunnel.
(Optional) Enable tunnel in multipoint receive-only mode.
Defaults
There is no default tunnel mode.
Command Modes INTERFACE TUNNEL
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000-ON.
9.5(0.1)
Introduced on the Z9500.
9.4(0.0)
Added the decapsulate-any command.
9.3(0.1)
Introduced on the S6000 and Z9000.
1456 Tunneling
Usage Information
To enable a tunnel interface, use this command. You must define a tunnel mode for the tunnel to function. If you previously defined the tunnel destination or source address, the tunnel mode must be compatible.
Including the decapsulate-any option causes the command to fail if any of the following tunnel transmit options are configured: tunnel destination, tunnel dscp, tunnel flow-label, tunnel hop-limit, or tunnel keepalive. Conversely, if you configure any tunnel allow-remote entries, the tunnel--mode command fails unless the decapsulate-any option is included.
Configuration of IPv6 commands over decapsulate-any tunnel causes an error.
tunnel source
Set a source address for the tunnel.
Syntax
tunnel source {ip-address | ipv6�address | interface-type-number | anylocal}
To delete the current tunnel source address, use the no tunnel source command.
Parameters
ip-address
ipv6�address
interface-typenumber
Enter the source IPv4 address in A.B.C.D format.
Enter the source IPv6 address in X:X:X:X::X format.
For a port channel interface, enter the keywords port-channel then a number from 1 to 128.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
anylocal
Enter the anylocal command to allow the multipoint receive-only tunnel to decapsulate tunnel packets destined to any local ip address.
Defaults
none
Command Modes INTERFACE TUNNEL (conf-if-tu)
Command History
Version
9.8(0.0P5)
Description
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000-ON.
9.5(0.1)
Introduced on the Z9500.
9.4(0.0)
Added the tunnel source anylocal command.
9.3(0.0)
Introduced on the S4810, S4820T, S6000 and Z9000.
Usage Information
Added an optional keyword "anylocal" to the tunnel source command. The anylocal argument can be used in place of the ip address or interface, but only with the multipoint receive-only mode tunnels. The tunnel source anylocal command allows the multipoint receive-only tunnel to decapsulate tunnel packets addressed to any IPv4 or IPv6 (depending on the tunnel mode) address configured on the switch that is operationally Up.
Tunneling 1457
62
Uplink Failure Detection (UFD)
Uplink failure detection (UFD) provides detection of the loss of upstream connectivity and, if you use this with NIC teaming, automatic recovery from a failed link.
Topics:
� clear ufd-disable � debug uplink-state-group � description � downstream � downstream auto-recover � downstream disable links � enable � show running-config uplink-state-group � show uplink-state-group � uplink-state-group � upstream
clear ufd-disable
Re-enable one or more downstream interfaces on the switch/router that are in a UFD-Disabled Error state so that an interface can send and receive traffic.
Syntax Parameters
clear ufd-disable {interface interface | uplink-state-group group-id}
interface interface
Specify one or more downstream interfaces. For interface, enter one of the following interface types:
10 Gigabit Ethernet: tengigabitethernet {slot/port[/subport] | slot/port[/subport]-range}
40-Gigabit Ethernet:fortyGigE {slot/port} Port channel: port-channel {1�128 | port-channel-range}
Where port-range and port-channel-range specify a range of ports separated by a dash (-) and/or individual ports/port channels in any order; for example: gigabitethernet 1/1-2,5,9,11-12 port-channel 1-3,5. A comma is required to separate each port and port-range entry.
If a 40G port is fanned-out into 10G ports, the range is entered as slot/sort/ subport-slot/port/subport.
uplink-stategroup group-id
Re-enables all UFD-disabled downstream interfaces in the group. The valid group-id values are from 1 to 16.
Defaults
A downstream interface in a UFD-disabled uplink-state group is also disabled and is in a UFD-Disabled Error state.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
1458 Uplink Failure Detection (UFD)
Related Commands
Version
9.8(0.0P2) 9.2(1.0) 9.2(0.0)
8.3.19.0 8.3.12.0 8.4.2.3
Description
Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S4820T. Introduced on the S4810. Introduced on the S-Series S50.
downstream -- assigns a port or port-channel to the uplink-state group as a downstream interface. uplink-state-group -- creates an uplink-state group and enables the tracking of upstream links.
debug uplink-state-group
Enable debug messages for events related to a specified uplink-state group or all groups.
S4048�ON
Syntax Parameters
debug uplink-state-group [group-id]
To turn off debugging event messages, enter the no debug uplink-state-group [group-id] command.
group-id
Enables debugging on the specified uplink-state group. The valid group-id values are from 1 to 16.
Defaults
none
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.2(0.0)
8.3.19.0 8.3.12.0 8.4.2.3
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S4820T. Introduced on the S4810. Introduced on the S-Series S50.
Related Commands
clear ufd-disable -- re-enables downstream interfaces that are in a UFD-Disabled Error state.
Uplink Failure Detection (UFD) 1459
description
Enter a text description of an uplink-state group.
Syntax Parameters
description text
text
Text description of the uplink-state group. The maximum length is 80 alphanumeric
characters.
Defaults
none
Command Modes UPLINK-STATE-GROUP
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.2(0.0)
8.3.19.0 8.3.12.0 8.4.2.3
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S4820T. Introduced on the S4810. Introduced on the S-Series S50.
Example
Dell(conf-uplink-state-group-16)# description test Dell(conf-uplink-state-group-16)#
Related Commands
uplink-state-group -- creates an uplink-state group and enables the tracking of upstream links.
downstream
Assign a port or port-channel to the uplink-state group as a downstream interface.
Syntax
downstream interface To delete an uplink-state group, enter the no downstream interface command.
Parameters
interface
Enter one of the following interface types:
10 Gigabit Ethernet: tengigabitethernet {slot/port[/subport] | slot/port[/subport]-range}
40-Gigabit Ethernet:fortyGigE {slot/port} Port channel: port-channel {1�128 | port-channel-range}
Where port-range and port-channel-range specify a range of ports separated by a dash (-) and/or individual ports/port channels in any order; for example: gigabitethernet 1/1-2,5,9,11-12 port-channel 1-3,5. A comma is required to separate each port and port-range entry.
If a 40G port is fanned-out into 10G ports, the range is entered as slot/sort/ subport-slot/port/subport.
Defaults
none
1460 Uplink Failure Detection (UFD)
Command Modes UPLINK-STATE-GROUP
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.2(0.0)
8.3.19.0 8.3.12.0 8.4.2.3
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S4820T. Introduced on the S4810. Introduced on the S-Series S50.
Usage Information
Related Commands
You can assign physical port or port-channel interfaces to an uplink-state group.
You can assign an interface to only one uplink-state group. Configure each interface assigned to an uplink-state group as either an upstream or downstream interface, but not both.
You can assign individual member ports of a port channel to the group. An uplink-state group can contain either the member ports of a port channel or the port channel itself, but not both.
upstream -- assigns a port or port-channel to the uplink-state group as an upstream interface. uplink-state-group -- creates an uplink-state group and enables the tracking of upstream links.
downstream auto-recover
Enable auto-recovery so that UFD-disabled downstream ports in an uplink-state group automatically come up when a disabled upstream port in the group comes back up.
Syntax
downstream auto-recover To disable auto-recovery on downstream links, use the no downstream auto-recover command.
Defaults
The auto-recovery of UFD-disabled downstream ports is enabled.
Command Modes UPLINK-STATE-GROUP
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.2(0.0)
8.3.19.0 8.3.12.0 8.4.2.3
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S4820T. Introduced on the S4810. Introduced on the S-Series S50.
Uplink Failure Detection (UFD) 1461
Related Commands
downstream -- assigns a port or port-channel to the uplink-state group as a downstream interface. uplink-state-group -- creates an uplink-state group and enables the tracking of upstream links.
downstream disable links
Configure the number of downstream links in the uplink-state group that are disabled if one upstream link in an uplink-state group goes down.
Syntax
downstream disable links {number |all} To revert to the default setting, use the no downstream disable links command.
Parameters
number all
Enter the number of downstream links the UFD brings down. The range is from 1 to 1024.
Brings down all downstream links in the group.
Defaults
No downstream links are disabled when an upstream link in an uplink-state group goes down.
Command Modes UPLINK-STATE-GROUP
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.2(0.0)
8.3.19.0 8.3.12.0 8.4.2.3
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S4820T. Introduced on the S4810. Introduced on the S-Series S50.
Usage Information
Related Commands
When one upstream interface in an uplink-state group goes down, you can configure the number of downstream interfaces in an uplink-state group are put into a link-down state with an UFD-Disabled error message.
If all upstream interfaces in an uplink-state group go down, all downstream interfaces in the same uplinkstate group are put into a link-down state.
downstream -- assigns a port or port-channel to the uplink-state group as a downstream interface. uplink-state-group -- creates an uplink-state group and enables the tracking of upstream links.
enable
Enable uplink state group tracking for a specific UFD group.
Syntax
enable To disable upstream-link tracking without deleting the uplink-state group, use the no enable command.
Defaults
Upstream-link tracking is automatically enabled in an uplink-state group.
Command Modes UPLINK-STATE-GROUP
1462 Uplink Failure Detection (UFD)
Command History
Related Commands
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.2(0.0)
8.3.19.0 8.3.12.0 8.4.2.3
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S4820T Introduced on the S4810. Introduced on the S-Series S50.
uplink-state-group -- creates an uplink-state group and enables the tracking of upstream links.
show running-config uplink-state-group
Display the current configuration of one or more uplink-state groups.
Syntax Parameters
show running-config uplink-state-group [group-id]
group-id
Displays the current configuration of all uplink-state groups or a specified group. The valid group-id values are from 1 to 16.
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.2(0.0)
8.3.19.0 8.3.12.0 8.4.2.3
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S4820T. Introduced on the S4810. Introduced on the S-Series S50.
Example
Dell#show running-config uplink-state-group ! no enable uplink state track 1 downstream TenGigabitEthernet 1/2,4,6,11-19 upstream FortygigabitEthernet 1/27, 29 upstream PortChannel 1 !
Uplink Failure Detection (UFD) 1463
Related Commands
uplink state track 2 downstream TenGigabitEthernet 1/1,3,5,7-10 upstream FortygigabitEthernet 1/31,42
show uplink-state-group -- displays the status information on a specified uplink-state group or all groups.
uplink-state-group -- creates an uplink-state group and enables the tracking of upstream links.
show uplink-state-group
Display status information on a specified uplink-state group or all groups.
Syntax Parameters
show uplink-state-group [group-id] [detail]
group-id detail
Displays status information on a specified uplink-state group or all groups. The valid group-id values are from 1 to 16.
Displays additional status information on the upstream and downstream interfaces in each group
Defaults
none
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.2(0.0)
8.3.19.0 8.3.12.0 8.4.2.3
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S4820T. Introduced on the S4810. Introduced on the S-Series S50.
Example
Dell# show uplink-state-group Uplink State Group: 1 Status: Enabled, Up Uplink State Group: 3 Status: Enabled, Up Uplink State Group: 5 Status: Enabled, Down Uplink State Group: 6 Status: Enabled, Up Uplink State Group: 7 Status: Enabled, Up Uplink State Group: 16 Status: Disabled, Up
Dell# show uplink-state-group 16 Uplink State Group: 16 Status: Disabled, Up
Dell#show uplink-state-group detail
(Up): Interface up (Dwn): Interface down (Dis): Interface disabled
Uplink State Group
: 1 Status: Enabled, Up
Upstream Interfaces :
Downstream Interfaces :
Uplink State Group
: 3 Status: Enabled, Up
Upstream Interfaces : Te 1/25(Up) Te 1/28(Up)
1464 Uplink Failure Detection (UFD)
Related Commands
Downstream Interfaces : Te 5/1(Up) Te 5/1(Up) Te 5/3(Up) Te 5/5(Up) Te 5/6(Up)
Uplink State Group
: 5 Status: Enabled, Down
Upstream Interfaces : Te 1/1(Dwn) Te 1/3(Dwn) Te 1/5(Dwn)
Downstream Interfaces : Te 5/2(Dis) Te 5/4(Dis) Te 5/11(Dis) Te
5/12(Dis) Te 5/13(Dis) Te 5/14(Dis) Te 5/15(Dis)
Uplink State Group
: 6 Status: Enabled, Up
Upstream Interfaces :
Downstream Interfaces :
Uplink State Group
: 7 Status: Enabled, Up
Upstream Interfaces :
Downstream Interfaces :
Uplink State Group
: 16 Status: Disabled, Up
Upstream Interfaces : Te 1/25(Dwn) Po 8(Dwn)
Downstream Interfaces : Te 1/30(Dwn)
show running-config uplink-state-group -- displays the current configuration of one or more uplinkstate groups.
uplink-state-group -- creates an uplink-state group and enables the tracking of upstream links.
uplink-state-group
Create an uplink-state group and enable the tracking of upstream links on a switch or router.
Syntax
uplink-state-group group-id To delete an uplink-state group, enter the no uplink-state-group group-id command.
Parameters
group-id
Enter the ID number of an uplink-state group. The range is from 1 to 16.
Defaults
none
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.2(0.0)
8.3.19.0 8.3.12.0 8.4.2.3
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S4820T. Introduced on the S4810. Introduced on the S-Series S50.
Usage Information
After you enter the command, to assign upstream and downstream interfaces to the group, enter UplinkState-Group Configuration mode.
An uplink-state group is considered operationally up if at least one upstream interface in the group is in the Link-Up state.
Uplink Failure Detection (UFD) 1465
Example
Related Commands
An uplink-state group is considered operationally down if no upstream interfaces in the group are in the Link-Up state. No uplink-state tracking is performed when a group is disabled or in an operationally down state. To disable upstream-link tracking without deleting the uplink-state group, use the no enable command in uplink-state-group configuration mode.
Dell(conf)#uplink-state-group 16 Dell(conf)# 02:23:17: %RPM0-P:CP %IFMGR-5-ASTATE_UP: Changed uplink state group Admin state to up: Group 16
show running-config uplink-state-group -- displays the current configuration of one or more uplinkstate groups.
show uplink-state-group -- displays the status information on a specified uplink-state group or all groups.
upstream
Assign a port or port-channel to the uplink-state group as an upstream interface.
Syntax
upstream interface To delete an uplink-state group, use the no upstream interface command.
Parameters
interface
Enter one of the following interface types:
10 Gigabit Ethernet: tengigabitethernet {slot/port[/subport] | slot/port[/subport]-range}
40-Gigabit Ethernet:fortyGigE {slot/port} Port channel: port-channel {1�128 | port-channel-range}
Where port-range and port-channel-range specify a range of ports separated by a dash (-) and/or individual ports/port channels in any order; for example: gigabitethernet 1/1-2,5,9,11-12 port-channel 1-3,5. A comma is required to separate each port and port-range entry.
If a 40G port is fanned-out into 10G ports, the range is entered as slot/sort/ subport-slot/port/subport.
Defaults
none
Command Modes UPLINK-STATE-GROUP
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 9.2(0.0)
8.3.19.0 8.3.12.0 8.4.2.3
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S4820T. Introduced on the S4810. Introduced on the S-Series S50.
1466 Uplink Failure Detection (UFD)
Usage Information
Example
Related Commands
You can assign physical port or port-channel interfaces to an uplink-state group. You can assign an interface to only one uplink-state group. Configure each interface assigned to an uplink-state group as either an upstream or downstream interface, but not both. You can assign individual member ports of a port channel to the group. An uplink-state group can contain either the member ports of a port channel or the port channel itself, but not both.
Dell(conf-uplink-state-group-16)# upstream tengigabitethernet 1/10-15 Dell(conf-uplink-state-group-16)#
downstream -- assigns a port or port-channel to the uplink-state group as a downstream interface. uplink-state-group -- creates an uplink-state group and enables the tracking of upstream links.
Uplink Failure Detection (UFD) 1467
63
VLAN Stacking
With the virtual local area network (VLAN)-stacking feature (also called stackable VLANs and QinQ), you can "stack" VLANs into one tunnel and switch them through the network transparently.
The Dell Networking operating software supports this feature on Dell Networking OS.
For more information about basic VLAN commands, refer to the Virtual LAN (VLAN) Commands section in the Layer 2 chapter.
Important Points to Remember
If you do not enable the spanning tree protocol (STP) across the stackable VLAN network, STP bridge protocol data units (BPDUs) from the customer's networks are tunneled across the stackable VLAN network.
If you do enable STP across the stackable VLAN network, STP BPDUs from the customer's networks are consumed and not tunneled across the stackable VLAN network unless you enable protocol tunneling.
NOTE: For more information about protocol tunneling on the E-Series, refer to Service Provider Bridging.
Layer 3 protocols are not supported on a stackable VLAN network. Assigning an IP address to a stackable VLAN is supported when all the members are only stackable VLAN trunk ports. IP
addresses on a stackable VLAN-enabled VLAN are not supported if the VLAN contains stackable VLAN access ports. This facility is provided for the simple network management protocol (SNMP) management over a stackable VLAN-enabled VLAN containing only stackable VLAN trunk interfaces. Layer 3 routing protocols on such a VLAN are not supported. Dell Networking recommends that you do not use the same MAC address, on different customer VLANs, on the same stackable VLAN. Interfaces configured using stackable VLAN access or stackable VLAN trunk commands do not switch traffic for the default VLAN. These interfaces are switch traffic only when they are added to a non-default VLAN. Starting with Dell Networking OS version 7.8.1 for C-Series and S-Series (Dell Networking OS version 7.7.1 for E-Series, 8.2.1.0 for E-Series ExaScale), a vlan-stack trunk port is also allowed to be configured as a tagged port and as an untagged port for single-tagged VLANs. When the vlan-stack trunk port is also a member of an untagged vlan, the port must be in Hybrid mode. Refer to portmode hybrid.
Topics:
� dei enable � dei honor � dei mark � member � stack-unit stack-group � vlan-stack access � vlan-stack compatible � vlan-stack dot1p-mapping � vlan-stack protocol-type � vlan-stack trunk
dei enable
Enable packets to be dropped based on their DEI value.
Syntax
dei enable
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
1468 VLAN Stacking
Usage Information
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0
Introduced on the S3048-ON and S4048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series.
When packets are colored green; no packets are dropped.
dei honor
Honor the incoming DEI value by mapping it to a Dell Networking OS drop precedence. Enter the command once for 0 and once for 1.
Syntax Parameters
dei honor {0 | 1} {green | red | yellow}
0 | 1
green | red | yellow
Enter the bit value you want to map to a color.
Choose a color:
Green: High priority packets that are the least preferred to be dropped. Yellow: Lower priority packets that are treated as best-effort. Red: Lowest priority packets that are always dropped (regardless of congestion
status).
Defaults
Disabled; Packets with an unmapped DEI value are colored green.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series.
Usage Information
Enable DEI before using this command.
VLAN Stacking 1469
dei mark
Set the DEI value on egress according to the color currently assigned to the packet.
S4048�ON
Syntax Parameters
dei mark {green | yellow} {0 | 1}
0 | 1
green | red | yellow
Enter the bit value you want to map to a color.
Choose a color: Green: High priority packets that are the least preferred to be dropped. Yellow: Lower priority packets that are treated as best-effort.
Defaults
All the packets on egress are marked with DEI 0.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series and S-Series.
Usage Information
Enable DEI before using this command.
member
Assign a stackable VLAN access or trunk port to a VLAN. The VLAN must contain the vlan-stack compatible command in its configuration.
Syntax
member interface To remove an interface from a Stackable VLAN, use the no member interface command.
Parameters
interface
Enter the following keywords and slot/port or number information:
For a Port Channel interface, enter the keywords port-channel then a number.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
Defaults
Not configured.
1470 VLAN Stacking
Command Modes CONF-IF-VLAN
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.11.1 8.2.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the E-Series ExaScale. Introduced on the C-Series and S-Series.
Usage Information
Related Commands
Enable the stackable VLAN (using the vlan-stack compatible command) on the VLAN prior to adding a member to the VLAN.
vlan-stack compatible -- enables stackable VLAN on a VLAN.
stack-unit stack-group
Configure a stacking group specified by an ID.
Syntax
[no] stack-unit unit-id stack-group stack-group-id
To remove the current stack group configuration, use the no stack-unit unit-id stack-group stack-id command.
Parameters
unit-id stack-group-id
Enter the stack unit ID. Enter the stack group ID. The range is from 0 to 16.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.10.2
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810.
Usage Information
NOTE: The following message displays to confirm the command: All non-default configurations on the related member ports ports (<ports listed here>) will be removed. Do you want to continue (y/n)? If you enter "y", all non-default
VLAN Stacking 1471
configurations on any member ports of the current stack group are removed when you reboot the unit.
vlan-stack access
Specify a Layer 2 port or port channel as an access port to the stackable VLAN network.
Syntax
vlan-stack access To remove access port designation, use the no vlan-stack access command.
Defaults
Not configured.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0 7.6.1.0 E-Series original Command
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. Introduced on the C-Series and S-Series.
Usage Information
Prior to enabling this command, to place the interface in Layer 2 mode, enter the switchport command.
To remove the access port designation, remove the port (using the no member interface command) from all stackable VLAN-enabled VLANs.
vlan-stack compatible
Enable the stackable VLAN feature on a VLAN.
Syntax
vlan-stack compatible To disable the Stackable VLAN feature on a VLAN, use the no vlan-stack compatible command.
Defaults
Not configured.
Command Modes CONF-IF-VLAN
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
1472 VLAN Stacking
Usage Information
Example
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000-ON.
9.2(1.0)
Introduced on the Z9500.
9.0.2.0
Introduced on the S6000.
8.3.19.0
Introduced on the S4820T.
8.3.11.1
Introduced on the Z9000.
8.3.7.0
Introduced on the S4810.
8.2.1.0
Introduced on the E-Series ExaScale.
7.6.1.0
Introduced on the C-Series and S-Series.
E-Series original Command
Prior to disabling the stackable VLAN feature, remove the members.
To view the stackable VLANs, use the show vlan command in EXEC Privilege mode. Stackable VLANs contain members, designated by the M in the Q column of the command output.
If you enabled VRF, you cannot enable the stacked VLAN feature using this command.
If you enabled IGMP snooping, you cannot enable the stacked VLAN feature using this command.
Dell#show vlan
Codes: * - Default VLAN, G - GVRP VLANs
NUM * 1
2 3 4 5 Dell#
Status Inactive Active Active Active Active
Q Ports M Te 1/13 M Te 1/1-3 M Po1(Te 1/14-15) M Te 1/18 M Te 1/4 M Po1(Te 1/14-15) M Te 1/18 M Te 1/5 M Po1(Te 1/14-15) M Te 1/18 M Te 1/6
vlan-stack dot1p-mapping
Map C-Tag dot1p values to an S-Tag dot1p value.
Syntax Parameters
vlan-stack dot1p-mapping c-tag-dot1p values sp-tag-dot1p value
c-tag-dot1p value Enter the keyword c-tag-dot1p then the customer dot1p value that is mapped to a service provider do1p value. The range is from 0 to 7.
sp-tag-dot1p value
Enter the keyword sp-tag-dot1p then the service provider dot1p value. The range is from 0 to 7.
Defaults
none
Command Modes INTERFACE
VLAN Stacking 1473
Command History
Usage Information
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.7.0 8.3.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the C-Series and S-Series.
You can separate the C-Tag values by commas or dashed ranges. In the case of conflicts, dynamic mode CoS overrides any Layer 2 QoS configuration.
vlan-stack protocol-type
Define the stackable VLAN tag protocol identifier (TPID) for the outer VLAN tag (also called the VMAN tag). If you do not configure this command, the Dell Networking OS assigns the value 0x9100.
Syntax Parameters
vlan-stack protocol-type number
number
Enter the hexadecimal number as the stackable VLAN tag.
You may specify both bytes of the 2-byte S-Tag TPID. The range is from 0 to FFFF. The default is 9100.
Defaults
0x9100
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.7.0 8.2.1.0
8.2.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810. Introduced on the E-Series ExaScale. C-Series and S-Series accept both bytes of the 2-byte S-Tag TPID. Introduced on the E-Series ExaScale. Introduced on the C-Series and S-Series.
1474 VLAN Stacking
Usage Information
Related Commands
Version
Description
E-Series original Command
For specific interoperability limitations regarding the S-Tag TPID, see the Dell Networking OS Configuration Guide.
The four characters you may enter are shown in the following table.
Number
Resulting TPID
1 10 81 8100
0x0001 0x0010 0x0081 0x8100
portmode hybrid -- sets a port (physical ports only) to accept both tagged and untagged frames. A port configured this way is identified as a hybrid port in report displays.
vlan-stack trunk -- specifies a Layer 2 port or port channel as a trunk port to the Stackable VLAN network.
vlan-stack trunk
Specify a Layer 2 port or port channel as a trunk port to the stackable VLAN network.
Syntax
vlan-stack trunk
To remove a trunk port designation from the selected interface, use the no vlan-stack trunk command.
Defaults
Not configured.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 8.2.1.0
7.8.1.0
7.7.1.0 7.6.1.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the E-Series ExaScale. C-Series and S-Series accept both bytes of the 2-byte S-Tag TPID. Functionality augmented for C-Series and S-Series to enable multi-purpose use of the port. Functionality augmented for E-Series to enable multi-purpose use of the port. Introduced on the C-Series and S-Series.
VLAN Stacking 1475
Usage Information Example 1
Example 2
Version
Description
E-Series original Command
Prior to using this command, to place the interface in Layer 2 mode, use the switchport command.
To remove the trunk port designation, first remove the port (using the no member interface command) from all stackable VLAN-enabled VLANs.
In Example 1, a VLAN-Stack trunk port is configured and then made part of a single-tagged VLAN.
In Example 2, the tag protocol identifier (TPID) is set to 8848. The Gi 3/10 port is configured to act as a VLAN-Stack access port; the TenGi 8/0 port acts as a VLAN-Stack trunk port, switching stackable VLAN traffic for VLAN 10, while also switching untagged traffic for VLAN 30 and tagged traffic for VLAN 40. (To allow VLAN 30 traffic, you need the native VLAN feature. Use the portmode hybrid command. For more information, see the portmode hybrid command.
Dell(conf-if-te-1/42)#switchport Dell(conf-if-te-1/42)#vlan-stack trunk Dell(conf-if-te-1/42)#show config ! interface TenGigabitEthernet 1/42
no ip address switchport vlan-stack trunk no shutdown Dell(conf-if-te-1/42)#interface vlan 100 Dell(conf-if-vl-100)#vlan-stack compatible Dell(conf-if-vl-100-stack)#member tengigabitethernet 1/42 Dell(conf-if-vl-100-stack)#show config ! interface Vlan 100 no ip address vlan-stack compatible member TenGigabitEthernet 1/42 shutdown Dell(conf-if-vl-100-stack)#interface vlan 20 Dell(conf-if-vl-20)#tagged Tengigabitethernet 1/42 Dell(conf-if-vl-20)#show config ! interface Vlan 20 no ip address tagged TenGigabitEthernet 1/42 shutdown Dell(conf-if-vl-20)#do show vlan Codes: * - Default VLAN, G - GVRP VLANs Q: U - Untagged, T - Tagged
x - Dot1x untagged, X - Dot1x tagged G - GVRP tagged, M - Vlan-stack
NUM Status Description
* 1
Inactive
20 Active
100 Active
Dell(conf-if-vl-20)#
Q Ports T Te 1/42 M Te 1/42
Dell(config)#vlan-stack protocol-type 88A8 Dell(config)#interface TenGigabitethernet 3/10 Dell(conf-if-te-3/10)#no shutdown Dell(conf-if-te-3/10)#switchport Dell(conf-if-te-3/10)#vlan-stack access Dell(conf-if-te-3/10)#exit Dell(config)#interface TenGigabitethernet 5/1 Dell(conf-if-te-5/1)#no shutdown Dell(conf-if-te-5/1)#portmode hybrid Dell(conf-if-te-5/1)#switchport
1476 VLAN Stacking
Dell(conf-if-te-5/1)#vlan-stack trunk Dell(conf-if-te-5/1)#exit Dell(config)#interface vlan 10 Dell(conf-if-vlan)#vlan-stack compatible Dell(conf-if-vlan)#member Te 4/1, Te 3/10, TenGi 5/1 Dell(conf-if-vlan)#exit Dell(config)#interface vlan 30 Dell(conf-if-vlan)#untagged TenGi 5/1 Dell(conf-if-vlan)#exit Dell(config)# Dell(config)#interface vlan 40 Dell(conf-if-vlan)#tagged TenGi 5/1 Dell(conf-if-vlan)#exit Dell(config)#
VLAN Stacking 1477
64
Virtual Routing and Forwarding (VRF)
Virtual Routing and Forwarding (VRF) allows multiple instances of a routing table to co-exist on the same router at the same time.
Topics:
� ip vrf � ip http vrf � description � ip vrf forwarding � ip route-export � ip route-import � ipv6 route-export � ipv6 route-import � match source-protocol � redistribute � interface management � maximum dynamic-routes � show ip vrf � show run vrf
ip vrf
Create or delete a customer VRF.
Syntax
ip vrf {vrf-name | management} [vrf_id] To delete a customer VRF, use the no ip vrf {vrf-name | management} [vrf_id] command.
Parameters
vrf-name management vrf_id
Enter the name of the VRF that you create. Enter the keyword management to create the management VRF. (Optional) Enter the ID of the VRF that you create.
Defaults
Available by default for management VRF. For creating other customer VRFs, enable the feature vrf option in Configuration mode.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000�ON and Z9500. Introduced on the S4810 and S4820T.
Usage Information
You cannot use the keyword default as a VRF name as this name indicates a special VRF. To create a management VRF, use the keyword management.
1478 Virtual Routing and Forwarding (VRF)
The VRF ID is optional.
ip http vrf
Configure an HTTP client with a VRF used to connect to the HTTP server.
Syntax Parameters
ip http vrf {management | vrf-name} To undo the HTTP client configuration, use the ip http vrf command.
management vrf-name
Enter the keyword management for configuring the management VRF that uses an HTTP client.
Enter a VRF name that the HTTP client uses. If you do not specify a VRF name, the HTTP client uses the default VRF.
Defaults
Disabled
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.8(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4810, S4820T, S5000, S6000, S6000�ON, and Z9500.
Usage Information
To make the HTTP clients VRF-aware, use the ip http vrf command. The HTTP client uses the VRF name that you specify to reach the HTTP server. If you do not specify a VRF name, the HTTP client uses the default VRF.
description
Specify a name for a customer VRF.
Syntax
description string To delete the descriptive name for a customer VRF, use the no description string command.
Parameters
string
Enter a descriptive name for the VRF.
Defaults
None.
Command Modes VRF MODE
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON.
Virtual Routing and Forwarding (VRF) 1479
Version
9.5(0.0) 9.4.(0.0)
Description
Introduced on the Z9500. Introduced on the S-Series.
ip vrf forwarding
Attach an interface to a VRF.
Syntax
ip vrf forwarding {vrf-name | management}
To delete an interface associated with a configured VRF, use the no ip vrf forwarding {vrfname | management} command.
Parameters
vrf-name management
Enter name of the VRF that you want to associate the interface to.
Enter the keyword management to associate an interface to the management VRF.
Defaults
none
Command Modes INTERFACE-CONFIG
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4.(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON and Z9500. Introduced on the S-Series and Z9000.
Usage Information
Example
You can attach an interface to either a nondefault VRF or a management VRF. To assign a port-back to a default VRF, remove the VRF association from the interface. You can use this only if there is no IP address configured on the interface. There must be no prior Layer 3 configuration on the interface when configuring VRF. You must enable VRF before using this command. You can configure an IP subnet or address on a physical or VLAN interface that overlaps the same IP subnet or address configured on another interface only if the interfaces are assigned to different VRFs. If you assign two interfaces to the same VRF, you cannot configure overlapping IP subnets or the same IP address to them.
Dell#configure terminal Dell(conf)#ip vrf red Dell(conf-vrf)#description "Red Network" Dell(conf-vrf)#show config ! ip vrf red 4
description "Red Network" Dell(conf-vrf)#
Dell(conf-if-te-1/45)#int te 7/46 Dell(conf-if-te-1/46)#no shut Dell(conf-if-te-1/46)#ip vrf forwarding red Dell(conf-if-te-1/46)#ip add 100.1.1.1/24 Dell(conf-if-te-1/46)# Dell(conf-if-te-1/46)#
1480 Virtual Routing and Forwarding (VRF)
Dell(conf-if-te-1/46)# Dell(conf-if-te-1/46)#show config ! interface TenGigabitEthernet 1/46
ip vrf forwarding red ip address 100.1.1.1/24 no shutdown Dell(conf-if-te-1/46)#
ip route-export
Enables route leaking between VRFs. This command exports or shares IPv4 routes corresponding to one VRF with other nondefault VRFs.
Syntax Parameters
ip route-export tag [route-map-name]
route-export tag
route-map-name
Enter the keywords route-export to leak or share routes between VRFs.
Enter a tag (export route target) to expose routes to other VRFs. This tag acts as an identifier for exported routes. Use this identifier while importing these routes into another nondefault VRF.
(Optional) Enter the name of the route-map to filter the exported routes.
You can leak global routes to VRFs. As the global RTM usually contains a large pool of routes, when the destination VRF imports global routes, these routes are duplicated into the VRF's RTM. As a result, it is mandatory to use route-maps to filter out leaked routes while sharing global routes with VRFs.
Command Modes VRP mode CONFIGURATION mode
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4810, S4820T, S5000, S6000, S6000�ON, and Z9500.
Usage Information
Related Commands
To export all the routes corresponding to a source VRF, you can use the ip route-export tag command without specifying the route-map attribute. This action exposes source VRF routes to various other VRFs, which then import these routes using the ip route-import tag command.
In Dell Networking OS, you can configure one route-export per VRF as you can only expose one set of routes for leaking. However, you can configure multiple route-import targets because a VRF can accept routes from multiple VRFs.
You can expose a unique set of routes from the source VRF for leaking to other VRFs. When two VRFs leak or export routes, there is no option to discretely filter leaked routes from each source VRF. For example, you cannot import one set of routes from one VRF and another set of routes from another VRF.
Only active routes are eligible for leaking. For example, if one VRF has two routes corresponding to BGP and OSPF, in which the BGP route is not active, the OSPF route takes precedence over BGP. Even though the target VRF has specified filtering options to match BGP, the BGP route is not leaked as that route is not active in the Source VRF.
ip route-import -- imports routes from another VRF.
Virtual Routing and Forwarding (VRF) 1481
ip route-import
Imports IPv4 routes that another VRF leaks using the VRF tag during the export of these routes.
Syntax Parameters
ip route-import tag [route-map--name]
route-import tag
Enter the keywords route-import to import routes into the VRF.
Enter a tag (ASN number) to specify an import route target for importing routes from another VRF.
To import leaked routes from another VRF, use the same ASN number that is specified as the export route target at the source VRF.
route-map-name
Enter the name of the route-map to filter the imported routes. NOTE: Use the route-map attribute while importing routes from the global RTM. Route-maps allow you to filter routes at the import end based on the matching criteria that you define in the route-map.
Command Modes CONFIGURATION VRF mode
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4810, S4820T, S5000, S6000, S6000�ON, and Z9500.
Usage Information
Related Commands
It is possible to configure multiple import conditions per VRF depending on the exporting VRF. The export-target and import-target support only the match protocol and match prefix-list options. Other options that are configured in the route-maps are ignored.
ip route-export � exports routes to another VRF.
ipv6 route-export
Enables route leaking between VRFs. This command exports or shares IPv6 routes corresponding to one VRF with other nondefault VRFs.
Syntax Parameters
ipv6 route-export tag [route-map-name]
route-export tag
route-map-name
Enter the keywords route-export to leak or share routes between VRFs.
Enter a tag (ASN number) as the export route target to expose routes to other VRFs. This tag acts as an identifier for exported routes. Use this identifier while importing these routes into another nondefault VRF.
(Optional) Enter the name of the route-map to filter the exported routes. You can leak global routes to be made available to VRFs. As the global RTM usually contains a large pool of routes, when the destination VRF imports global routes, these routes are duplicated into the VRF's RTM. As a result, it is mandatory to use routemaps to filter out leaked routes while sharing global routes with VRFs.
Defaults
N/A
1482 Virtual Routing and Forwarding (VRF)
Command Modes VRF mode CONFIGURATION mode
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4810, S4820T, S5000, S6000, S6000�ON, and Z9500.
Usage Information
Related Commands
To export all the routes corresponding to a source VRF, use the ip route-export tag command without specifying the route-map attribute. This action exposes source VRF routes to other VRFs, which then import these routes using the ip route-import tag command.
In Dell Networking OS, you can configure one route-export per VRF as you can only expose one set of routes for leaking. However, you can configure multiple route-import targets because a VRF can accept routes from multiple VRFs.
You can expose a unique set of routes from the source VRF for leaking to other VRFs. When two VRFs leak or export routes, there is no option to discretely filter leaked routes from each source VRF. For example, you cannot import one set of routes from one VRF and another set of routes from another VRF.
Only active routes are eligible for leaking. For example, if one VRF has two routes corresponding to BGP and OSPF, in which the BGP route is not active, the OSPF route takes precedence over BGP. Even though the target VRF has specified filtering options to match BGP, the BGP route is not leaked as that route is not active in the source VRF.
ipv6 route-import � imports IPv6 routes from another VRF.
ipv6 route-import
Imports IPv6 routes that another VRF leaks using the tag that VRF specifies during export of these routes.
Syntax Parameters
ipv6 route-import tag [route-map-name]
route-import tag
route-map-name
Enter the keywords route-import to import IPv6 routes into the VRF.
Enter a tag (ASN number) to specify an import route target for importing routes from another VRF. To import leaked routes from another VRF, use the same ASN number that is specified as the export route target at the source VRF.
Enter the name of the route-map to filter the imported routes. NOTE: Use the route-map attribute while importing routes from the global RTM. Route-maps allow you to filter routes at the import end based on the matching criteria that you define in the route-map.
Defaults
N/A
Command Modes VRF mode CONFIGURATION mode
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
Virtual Routing and Forwarding (VRF) 1483
Usage Information
Related Commands
Version
9.8(0.0P2) 9.7(0.0)
Description
Introduced on the S3048-ON. Introduced on the S4810, S4820T, S5000, S6000, S6000�ON, and Z9500.
It is possible to configure multiple import conditions per VRF depending on the exporting VRF. The export-target and import-target support only the match the protocol and prefix-list options. Other options that you configure in the route-maps are ignored.
ipv6 route-export -- exports IPv6 routes to another VRF.
match source-protocol
Specify matching source-protocol criteria while exporting or importing routes.
Syntax Parameters
match source-protocol {bgp | isis | ospf | connected | static}
bgp isis ospf
connected
static
Enter the keyword bgp to leak or share routes corresponding to the BGP protocol.
Enter the keyword isis to leak or share routes corresponding to the ISIS protocol.
Enter the keyword ospf to leak or share routes corresponding to the OSPF protocol.
Enter the keyword connected to leak or share connected routes corresponding to the VRF.
Enter the keyword static to leak or share static routes corresponding to the VRF.
Command Modes ROUTE MAP MODE
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4810, S4820T, S5000, S6000, S6000�ON, and Z9500.
Usage Information
Related Commands
Specify the matching criteria only after defining a route-map. Before using this command, you must enter Route Map mode using the route-map route-map-name command. The match criteria that you specify is associated with the route-map that you define.
The export-target and import-target options support only the match protocol and match prefix-list options. Other options that you configure in the route-maps are ignored.
ipv6 route-import � imports IPv6 routes from another VRF.
redistribute
Redistributes leaked or exported routes corresponding to specific protocols.
Syntax
redistribute {imported-bgp | import-ospf | import-isis}
1484 Virtual Routing and Forwarding (VRF)
Parameters
imported-bgp imported-ospf imported-isis route-map
Enter the keywords imported-bgp to redistribute leaked routes that are learned using the BGP protocol.
Enter the keywords imported-ospf to redistribute leaked routes that are learned using the OSPF protocol.
Enter the keywords imported-isis to redistribute leaked routes that are learned using the ISIS protocol.
Enter the name of the route-map to specify the filtering criteria for imported routes.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4810, S4820T, S5000, S6000, S6000�ON, and Z9500.
Related Commands
ip route-import -- imports routes from another VRF.
interface management
Associates a management port with a management VRF.
Syntax
interface management
To delete the association between a management port and a management VRF, use the no interface management command.
Command Modes VRF MODE
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.0) 9.4.(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S-Series and Z9000.
Usage Information
When you use this command, the management ports corresponding to both the active unit and the standby unit are associated with the management VRF.
Virtual Routing and Forwarding (VRF) 1485
maximum dynamic-routes
Specify the maximum number of dynamic (protocol) routes a VRF can have.
Syntax
maximum dynamic-routes limit {warn-threshold threshold-value | warningonly}
To remove the limit on the maximum number of routes used, use the no maximum dynamic-routes command.
Parameters
limit
warningthreshold
Maximum number of routes allowed in a VRF. The valid range is from 1 to 16,000 (or maximum allowable for that platform if a smaller value).
The warning threshold value is a percentage of the limit value. When the number of routes reaches the specified percentage of the limit, a warning message appears. The valid range is from 1 to 100.
After the limit is reached, additional dynamic routes are not allowed.
warning-only
When you use the warning-only option, when the maximum number of dynamic routes reaches the limit, a warning message appears.
After the limit is reached, additional dynamic routes are still allowed.
Defaults
No limit is set on the maximum number of dynamic routes for a VRF.
Command Modes CONFIGURATION-VRF
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON and Z9500. Introduced on the S�Series.
Usage Information
If you do not specify the maximum route limit for a VRF, the VRF has unlimited space that extends to the maximum number of entries allowed for the system. This command does not apply to default and management VRFs.
show ip vrf
Displays information corresponding to the VRFs that you configure in the system.
Syntax Parameters
show ip [vrf vrf-name]
vrf vrf-name
Enter the keyword vrf then the name of the VRF to display information corresponding to that VRF.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
1486 Virtual Routing and Forwarding (VRF)
Example
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.0) 9.4.(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S-Series and Z9000.
show ip vrf VRF-Name fault
Nu 0, test1 test2 management
VRF-ID Interfaces
0
Te 1/1-13,18-47,
Fo 1/49,50,51,52,
Ma 1/1,
Ma 2/1,
Ma 3/1,
Ma 4/1,
Ma 5/1,
Ma 6/1,
Vl 1
1
Te 1/14,16-17
2
Te 1/15
64
Dell#show ip vrf test1 VRF-Name test1
VRF-ID Interfaces
1
Te 1/14,16-17
show run vrf
Displays configuration information corresponding to all the VRFs in the system.
Syntax Parameters
show run vrf vrf-name
vrf vrf-name
Enter the keyword vrf and then the name of the VRF.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4.(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON and Z9500. Introduced on the S-Series and Z9000.
Usage Information
This command displays information from the running-config corresponding to either a specific VRF or all the VRFs in the system.
Virtual Routing and Forwarding (VRF) 1487
Example
Dell#show run vrf test3 ! ip vrf test3
description "Banking Customer Chennai"
1488 Virtual Routing and Forwarding (VRF)
65
VLT Proxy Gateway
The Virtual link trucking (VLT) proxy gateway feature allows a VLT domain to locally terminate and route L3 packets that are destined to a Layer 3 (L3) end point in another VLT domain. Enable the VLT proxy gateway using the link layer discover protocol (LLDP) method or the static configuration. For more information, refer to Dell Networking OS Command Line Reference Guide.
Topics:
� proxy-gateway lldp � proxy-gateway static � remote-mac-address exclude-vlan � peer-domain-link port-channel exclude-vlan � proxy-gateway peer-timeout � vlt-peer-mac transmit � show vlt-proxy-gateway
proxy-gateway lldp
Enables the proxy-gateway feature using the LLDP protocol.
S4048�ON
Syntax
[no] proxy-gateway lldp
Command Modes VLT DOMAIN
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S4810, S4820T, S6000, and Z9000.
Usage Information
Example
The configuration is cached and sent to LLDP only in one of the following conditions: 1. The port-channel connecting the two VLT domains, across the DC, is a VLT LAG. 2. The protocol lldp command is globally enabled. 3. The proxy-gateway LLDP configuration is applied.
Dell(conf)#vlt-domain 1 Dell(conf-vlt-domain#proxy-gateway lldp
VLT Proxy Gateway 1489
proxy-gateway static
Enables the proxy-gateway feature using static configurations.
S4048�ON
Syntax
[no] proxy-gateway static
Command Modes VLT DOMAIN
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S4810, S4820T, S6000, Z9000.
Usage Information
Example
When you add a proxy-gateway static configuration, the setting is saved in the Layer 2 module. When you remove the static proxy gateway configuration, each proxy-gateway static MAC configured is deleted from the Layer 2 module.
Dell(conf)#vlt-domain 1 Dell(conf-vlt-domain#proxy-gateway static
remote-mac-address exclude-vlan
Configure the proxy-gateway static entry and exclude a VLAN or a range of VLANs from proxy routing.
S4048�ON
Syntax Parameters
[no] remote-mac-address mac--address [exclude-vlan vlan-range]
remote-macaddress
mac-address
vlan-range
Specify the mac-addresses of the VLT peers which are in the remote VLT domain.
Enter the 48-bit hexadecimal address in nn:nn:nn:nn:nn:nn format.
Enter the VLAN IDs in which proxy gateway is not needed. The VLANs are excluded from doing proxy gateway. The value can be a single VLAN ID, comma-separated VLAN IDs, a range of VLAN IDs, or a combination. For example: Comma-separated: 3, 4, 6 Range: 5-10 Combination: 3, 4, 5-10, 8
Command Modes VLT DOMAIN PROXY GW STATIC
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command.
1490 VLT Proxy Gateway
Usage Information
Example
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4(0.0)
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S4810, S4820T, S6000, and Z9000.
You can configure the MAC address of a VLT peer in a remote VLT domain to associate with the static VLT proxy gateway and exclude a VLAN, or a range of VLANs, from proxy routing.
Dell(conf)#vlt-domain 1 Dell(conf-vlt-domain#proxy-gateway static Dell(conf-vlt-domain-proxy-gw-static)#remote-mac-address 00:01:e8:06:95:ac exclude-vlan 3
peer-domain-link port-channel exclude-vlan
Configure the VLT port channel, which is connected to the remote VLT domain, for the proxy gateway or configure the VLANs you want to exclude from VLT proxy gateway.
S4048�ON
Syntax Parameters
[no] peer-domain-link port-channel interface-identifier exclude-vlan vlanrange
port-channel
interfaceidentifier
vlan-range
Configure the proxy-gateway interface port-channel. Enter the interface type.
Enter the VLAN IDs that you want to exclude from the proxy gateway. The value can be a single VLAN ID, comma-separated VLAN IDs, a range of VLAN IDs, or a combination. For example: Comma-separated: 3, 4, 6 Range: 5-10 Combination: 3, 4, 5-10, 8
Command Modes VLT DOMAIN PROXY GW LLDP
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.4(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S4810, S4820T, S6000, and Z9000.
Usage Information
You must configure the VLT port channel interface which is connecting to the remote VLT domain as peer-domain-link. You can also configure the VLANs you want to exclude from the VLT proxy gateway.
VLT Proxy Gateway 1491
Example
Dell(conf)#vlt-domain 1 Dell(conf-vlt-domain)#proxy-gateway lldp Dell(conf-vlt-domain-proxy-gw-lldp)#peer-domain-link port-channel 20 exclude-vlan 3
proxy-gateway peer-timeout
Enables the VLT node to timeout the transmission of the peer MAC address when the VLT peer is down.
S4048�ON
Syntax Parameters
[no] peer-timeout value
value
Enter the timeout value (in seconds). The range is from 1 to 65535. The default is infinity.
Default
Infinity
Command Modes VLT DOMAIN PROXY GW LLDP
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.7(0.0) 9.4(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Removed the default value on the S-Series and Z-Series. Introduced on the S4810, S4820T, S6000, Z9000, and MXL Switch.
Usage Information
Example
When a VLT peer goes down, the local VLT node stops sending its peer's MAC address. If you configure this timeout, the local VLT node sends its peer's MAC address until the timer expires. Use this timer when you enable vlt-peer-mac transmit. A typical use example is a square VLT topology with a single link connecting to the remote peers.
Dell(conf-vlt-domain-proxy-gw-lldp)# peer-timeout 5
vlt-peer-mac transmit
Enables the device to transmit the peer MAC address along with its own MAC address in LLDP TLV packets to the remote VLT domain.
S4048�ON
Syntax
[no] vlt-peer-mac transmit
Command Modes VLT DOMAIN PROXY GW LLDP
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
1492 VLT Proxy Gateway
Usage Information
Example
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S4810, S4820T, S6000, and Z9000.
This command enables the device to transmit its VLT peer MAC address along with its own MAC address to the remote VLT domain. By default, a node sends only its own MAC address to the remote VLT domain.
This configuration is applicable only for an LLDP proxy gateway. A typical use example is a square VLT topology with single link connecting to the remote peers.
Dell(conf-vlt-domain-proxy-gw-lldp)# vlt-peer-mac transmit
show vlt-proxy-gateway
Displays the VLT proxy gateway configuration.
S4048�ON
Syntax Parameters
show vlt-proxy-gateway [info] {lldp | static}
lldp static
Enter the keyword lldp to display details about the LLDP VLT proxy gateway configuration.
Enter the keyword static to display details about the static VLT proxy gateway configuration.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S4810, S4820T, S6000, and Z9000.
Usage Information
The proxy-gateway feature may go operationally down for any of the following reasons:
LLDP is globally disabled. LDP is disabled per port. VLT port-channel is down. LLDP neighbor is down.
If any of these conditions is true, the proxy-gateway feature could be operationally down. If so, it is shown in the show command output.
VLT Proxy Gateway 1493
Example
When more than one VLT port-channel terminates on the same ToR, the show VLT proxy-gateway info lldp command output may show the port-channel ID incorrectly.
Dell#show vlt proxy-gateway VLT Proxy Gateway Brief
------------------------Config Mode: Global LLDP Config Status: peer-mac-transmit Status:
LLDP Enabled Disabled
Dell#show vlt proxy-gateway info static
Mac Address
Exclude Vlan
-----------
------------
00:01:e8:8a:e8:f7
3,7-8
00:01:e8:8b:1c:c0
3,7-8
Dell#show vlt proxy-gateway info lldp
LagId Mac Address
Exclude Vlan
----- -----------
------------
Po 55 00:01:e8:8a:e8:f7 3,7-8 << Macs learnt via port-channel 55
Po 55 00:01:e8:8b:1c:c0 3,7-8
1494 VLT Proxy Gateway
66
Virtual Link Trunking (VLT)
Virtual link trunking (VLT) allows physical links between two chassis to appear as a single virtual link to the network core. VLT eliminates the requirement for Spanning Tree protocols by allowing link aggregation group (LAG) terminations on two separate distribution or core switches, and by supporting a loop-free topology. VLT provides Layer 2 multipathing, creating redundancy through increased bandwidth and enabling multiple parallel paths between nodes and load-balancing traffic where alternative paths exist.
NOTE: When you launch the VLT link, the VLT peer-ship is not established if any of the following is TRUE:
The VLT System-MAC configured on both the VLT peers do not match. The VLT Unit-Id configured on both the VLT peers are identical. The VLT System-MAC or Unit-Id is configured only on one of the VLT peers. The VLT domain ID is not the same on both peers.
If the VLT peer-ship is already established, changing the System-MAC or Unit-Id does not cause VLT peer-ship to go down.
Also, if the VLT peer-ship is already established and the VLT Unit-Id or System-MAC are configured on both peers, then changing the CLI configurations on the VLT Unit-Id or System-MAC is rejected if any of the following become TRUE:
After making the CLI configuration change, the VLT Unit-Id becomes identical on both peers. After making the CLI configuration change, the VLT System-MAC do not match on both peers.
When the VLT peer-ship is already established, you can remove the VLT Unit-Id or System-MAC configuration from either or both peers. However, removing configuration settings can cause the VLT ports to go down if you configure the Unit-Id or System-MAC on only one of the VLT peers.
Topics:
� back-up destination � clear vlt statistics � delay-restore � delay-restore abort-threshold � lacp ungroup member-independent � multicast peer-routing timeout � peer-link port-channel � peer-routing � peer-routing-timeout � primary-priority � show vlt brief � show vlt backup-link � show vlt counters � show vlt detail � show vlt inconsistency � show vlt mismatch � show vlt role � show vlt statistics � show vlt statistics igmp-snoop � system-mac � unit-id � vlt domain � vlt-peer-lag port-channel � show vlt private-vlan
Virtual Link Trunking (VLT) 1495
back-up destination
Configure the IPv4 or IPv6 address of the management interface on the remote VLT peer used as the VLT backup link endpoint for sending out-of-band (OOB) hello messages.
Syntax Parameters
back-up destination {[ipv4�address] | [ipv6 ipv6�address] [interval seconds]}
ipv4�address ipv6 interval seconds
Enter the IPv4 address of the backup destination.
Enter the keyword ipv6 then an IPv6 address in the X:X:X:X::X format.
Enter the keyword interval to specify the time interval to send hello messages. The range is from 1 to 5 seconds. The default is 1 second.
Defaults
1 second
Command Modes VLT DOMAIN
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.2(0.0)
9.2(0.2) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.8.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Added support for IPv6. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810.
clear vlt statistics
Clear the VLT operation statistics.
Syntax Parameters
clear vlt statistics [arp | domain | igmp-snoop | mac | multicast | ndp]
domain multicast mac arp igmp-snoop ndp
Clear the VLT statistics for the domain. Clear the VLT statistics for multicast. Clear the VLT statistics for the MAC address. Clear the VLT statistics for ARP. Clear the VLT statistics for IGMP snooping. Clear the VLT statistics for NDP.
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
1496 Virtual Link Trunking (VLT)
Example
Related Commands
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.2(0.0)
9.2(0.2) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Added multicast and ndp parameters. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810.
VLT ARP Statistics ---------------ARP Tunnel Pkts sent:0 ARP Tunnel Pkts Rcvd:0 ARP-sync Pkts Sent:0 ARP-sync Pkts Rcvd:0 ARP Reg Request sent:19 ARP Reg Request rcvd:10 show vlt statistics -- displays statistics on VLT operations.
delay-restore
Configure the delay in bringing up VLT ports after reload or peer-link restoration between the VLT peer switches.
Syntax Parameters
delay-restore
delay-restore
Enter the amount of time, in seconds, to delay bringing up the VLT ports after the VLTi device reloads or after the peer-link restores between VLT peer switches. The range from 1 to 1200. The default is 90 seconds.
Defaults
Not configured.
Command Modes VLT DOMAIN
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.2(0.0)
9.0.2.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S6000.
Virtual Link Trunking (VLT) 1497
Usage Information
Related Commands
Version
9.0.0.0 8.3.19.0 8.3.12.0
Description
Introduced on the Z9000. Introduced on the S8420T. Introduced on the S4810.
To delay the system from bringing up the VLT port for a brief period to allow IGMP snooping and Layer 3 routing protocols to converge, use the delay-restore command. Use this command:
after a VLT device reloads. if the peer VLT device was up at the time the VLTi link failed.
show vlt statistics -- displays statistics on VLT operations.
delay-restore abort-threshold
Increase the boot up timer to a value greater than 60 seconds.
Syntax
delay-restore abort-threshold <interval> To remove the boot up timer value, use the no delay-restore abort-threshold command.
Parameters
interval
Enter the interval value (in seconds) for the delay restore timer to abort. The range is from 1 to 1800 seconds. The default is 60 seconds.
This delay restore timer applies only during reload/boot-up and not in other scenarios (for example, during ICL flap).
Defaults
60 seconds
Command Modes VLT DOMAIN
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S4820T, S4810, S6000, S5000, Z9000, S6000�ON and Z9500.
Usage Information
To abort the VLT delay restore timer value as the maximum threshold, during reload, apply the maximum time interval to the hold-down ICL peer-up in the start-up configurations.
lacp ungroup member-independent
Prevent possible loop during the VLT peer switch bootup or on a device that accesses the VLT domain.
Syntax Parameters
lacp ungroup member-independent {vlt | port-channel}
vlt port-channel
Force all VLT LACP members to become switchports. Force all LACP port-channel members to become switchports.
Defaults
Not configured.
Command Modes CONFIGURATION
1498 Virtual Link Trunking (VLT)
Command History
Usage Information
Example
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.2(0.0)
9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.8.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Added port-channel parameter on the S4810. Introduced on the S4810.
LACP on the VLT ports (on a VLT switch or access device), which are members of the VLT, are not brought up until the VLT domain is recognized on the access device.
During boot-up in a stacking configuration, the system must be able to reach the DHCP server with the boot image and configuration image. To receive an offer on static LAGs between switches, only untagged DHCP requests are sent to the DHCP server. Configure the DHCP server to start in BMP mode.
If the switches are connected using LACP port-channels (for example, the VLT peer and top of rack [ToR]), use the port-channel option on the ToR-side configuration to allow member ports of an ungrouped LACP port-channel to inherit VLAN membership of that port channel. This ensures untagged VLT peer device packets reach the DHCP server on the ToR.
To ungroup the VLT and port-channel configurations, use the no lacp ungroup member independent command on a VLT port channel.
Dell(conf)#lacp ungroup member-independent ?
port-channel
LACP port-channel members become switchports
vlt
All VLT LACP members become
switchports
multicast peer-routing timeout
To retain synced multicast routes or synced multicast outgoing interface (OIF) after a VLT peer node failure, configure the timeout value for a VLT node.
Syntax
multicast peer-routing timeout value To restore the default value, use the no multicast peer-routing timeout command.
Parameters
value
Enter the timeout value (in seconds). The range is from 1 to 1200. The default is 150.
Command Modes VLT DOMAIN (conf-vlt-domain)
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Virtual Link Trunking (VLT) 1499
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.2(0.0)
9.2(0.2) 9.0.2.0
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the Z9000, S4810, and S4820T. Introduced on the S6000.
peer-link port-channel
Configure the specified port channel as the chassis interconnect trunk between VLT peers in the domain.
Syntax Parameters
peer-link port-channel port-channel-number {peer-down-vlan vlan id}
port-channelnumber
peer-down-vlan vlan id
Enter the port-channel number that acts as the interconnect trunk. The range is from 1 to 128.
Enter the keywords peer-down-vlan then a VLAN ID to configure the VLAN that the VLT peer link uses when the VLT peer is down.
Defaults
Not configured.
Command Modes VLT DOMAIN
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.2(0.0)
9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.8.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Added support for the peer-down-vlan option. Introduced on the S4810.
Usage Information
To configure the VLAN from where the VLT peer forwards packets received over the VLTi from an adjacent VLT peer that is down, use the peer-down-vlan option. When a VLT peer with bare metal provisioning (BMP) is booting up, it sends untagged DHCP discover packets to its peer over the VLTi. To ensure that the DHCP discover packets are forwarded to the VLAN that has the DHCP server, use this configuration.
1500 Virtual Link Trunking (VLT)
peer-routing
Enable Layer 3 (L3) VLT peer-routing. This command is applicable for both IPv6 and IPv4 interfaces.
Syntax
peer-routing To disable L3 VLT peer-routing, use the no peer-routing command.
Defaults
Disabled.
Command Modes VLT DOMAIN (conf-vlt-domain)
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.4(0.0) 9.2(0.0)
9.2(0.2)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Added the support for IPV6 / IPV4. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the Z9000, S4810, and S4820T.
peer-routing-timeout
Configure the delay after which peer routing disables when the peer is unavailable. This command is applicable for both IPv6 and IPv4.
Syntax
peer-routing-timeout value To restore the default value, use the no peer-routing-timeout command.
Parameters
value
Enter the timeout value (in seconds). The range is from 1 to 65535. The default value is infinity.
Command Modes VLT DOMAIN (conf-vlt-domain)
Default
Infinity
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.7(0.0) 9.5(0.1) 9.4(0.0) 9.2(0.2)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Added support for default value on the S-Series and Z-Series. Introduced on the Z9500. Added the support for IPV6 / IPV4. Introduced on the Z9000, S4810, and S4820T.
Virtual Link Trunking (VLT) 1501
Usage Information
Version
9.0.2.0
Description
Introduced on the S6000.
When the timer expires, the software checks to see if the VLT peer is available. If the VLT peer is not available, peer-routing disables on that peer.
If you do not configure this delay value, peer-routing is not disabled even when the peer is unavailable.
primary-priority
Assign the priority for master election among VLT peers.
Syntax Parameters
[no] primary-priority
value
To configure the primary role on a VLT peer, enter a lower value than the priority value of the remote peer. The range is from 1 to 65535. The default value is 32768.
Default
32768
Command Modes VLT DOMAIN
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.2(0.0)
9.0.2.0 8.3.19.0 8.3.8.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810.
Usage Information
After you configure a VLT domain on each peer switch and connect (cable) the two VLT peers on each side of the VLT interconnect, the system elects a primary and secondary VLT peer device. To configure the primary and secondary roles before the election process, use the primary-priority command. Enter a lower value on the primary peer and a higher value on the secondary peer.
If the primary peer fails, the secondary peer (with the higher priority) takes the primary role. If the primary peer (with the lower priority) later comes back online, it is assigned the secondary role (there is no preemption).
show vlt brief
Displays summarized status information about VLT domains configured on the switch.
Syntax
show vlt brief
Default
Not configured.
Command Modes EXEC
1502 Virtual Link Trunking (VLT)
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.8.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810.
Usage Information
Example (Brief)
The version shown in the show vlt brief output command displays the VLT version number which is different from the Dell Networking OS version number. VLT version numbers begin with odd numbers.
Dell#show vlt br VLT Domain Brief ------------------
Domain ID Role Role Priority ICL Link Status HeartBeat Status VLT Peer Status Version Local System MAC address Remote System MAC address Remote system version Delay-Restore timer Delay-Restore Abort Threshold Peer-Routing Peer-Routing-Timeout timer Multicast peer-routing timeout Dell#
: 1 : Secondary
: 32768 : Up : Up : Up
: 6(3) : 00:01:e8:8a:e9:91 : 00:01:e8:8a:e9:76 : 6(3) : 90 seconds : 60 seconds
: Disabled : 0 seconds
: 150 seconds
show vlt backup-link
Displays information about the backup link operation.
Syntax
show vlt backup-link
Default
Not configured.
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON.
Virtual Link Trunking (VLT) 1503
Example
Version
9.5(0.1) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.8.0
Description
Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810.
Dell_VLTpeer1# show vlt backup-link
VLT Backup Link
-----------------
Destination:
10.11.200.18
Peer HeartBeat status:
Up
HeartBeat Timer Interval:
1
HeartBeat Timeout:
3
UDP Port:
34998
HeartBeat Messages Sent:
1026
HeartBeat Messages Received: 1025
show vlt counters
Displays counter information.
Syntax Parameters
show vlt counters [arp| igmp-snoop | interface | mac | ndp]
arp igmp-snoop interface mac ndp
Enter the keyword arp to display the ARP counter information for the VLT.
Enter the keywords igmp-snoop to display the igmp-snooping counter information for the VLT.
Enter the keyword interface to display the interface counter information for the VLT.
Enter the keyword mac to display the MAC address counter information for the VLT.
Enter the keyword ndp to display the VLT counter information for NDP.
Default
Not configured.
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810.
1504 Virtual Link Trunking (VLT)
Usage Information
Example
If you do not add a parameter such as arp or mac, the output displays all the counters. Dell# show vlt counter Total VLT counters ------------------------L2 Total MAC-Address Count : IGMP MRouter Vlans count : IGMP Mcast Groups count : ARP entries count :
Example (igmpsnoop)
Dell# show vlt counter igmp-snoop Total IGMP VLT counters ---------------------IGMP MRouter Vlans count : 1 IGMP Mcast Groups count : 5
Example (igmpsnoop interface port-channel)
Dell#show vlt counter igmp-snoop interface port-channel 2 VLT Port-ID: 2 IGMP Counter ----------------------IGMP MRouter Vlans count : 0 IGMP Mcast Groups count : 5 Dell# show vlt counter igmp-snoop interface port-channel 100 VLT Port-ID: 100 IGMP Counter ----------------------IGMP MRouter Vlans count : 1 IGMP Mcast Groups count : 0 Ve
Example (NDP and Non-VLT ARP)
Dell#show vlt counters Total VLT Counters -------------------
L2 Total MAC-Address Count:
2
Total Arp Entries Learnt :
0
Total Arp Entries Synced :
0
Total Non-VLT Arp entries Learnt:
0
Total Non-VLT Arp Entries Synced
0
IGMP MRouter Vlans count :
IGMP Mcast Groups count :
Total VLT Ndp Entries Learnt :
2
Total VLT Ndp Entries Synced :
0
Total Non-VLT Ndp Entries Learnt :
0
Total Non-VLT Ndp Entries Synced :
0
show vlt detail
Displays detailed status information about VLT domains configured on the switch.
Syntax
show vlt detail
Default
Not configured.
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
Virtual Link Trunking (VLT) 1505
Example
Version
9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.8.0
Description
Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810.
Dell# Dell(conf-if-vl-100)#show vlt detail
Local LAG Id Peer LAG Id Local Status Peer Status Active VLANs
------------ ----------- ------------ ------------ -------------
10
10
UP
UP
100, 200, 300, 400,
show vlt inconsistency
Display run-time inconsistencies in the incoming interface (IIF) for spanned multicast routes (mroutes).
Syntax
show vlt inconsistency ip mroute
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.2(0.2) 9.2(0.0)
9.0.2.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the Z9000, S4810, and S4820T. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S6000.
Example
Dell#show vlt inconsistency ip mroute Spanned Multicast Routing IIF Inconsistency
Multicast Route
LocalIIF
---------------
----------
(22.22.22.200, 225.1.1.2) VLAN 5
(*, 225.1.1.2)
VLAN 15
Dell#
PeerIIF ---------
VLAN 6 te 1/5
show vlt mismatch
Display mismatches in VLT parameters.
Syntax
show vlt mismatch
1506 Virtual Link Trunking (VLT)
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
Version
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0)
9.5(0.1) 9.2(0.2) 9.2(0.0)
9.0.2.0
Introduced on the S4048-ON.
Introduced on the S3048-ON.
Introduced support for Q-in-Q implementation over VLT on the S-Series and ZSeries. Introduced on the S6000-ON.
Introduced on the Z9500.
Introduced on the Z9000, S4810, and S4820T.
Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only.
Introduced on the S6000.
Example
Dell#show vlt mismatch
Domain
-------
Parameters
Local
----------
-----
Unit-ID
1
Peer -----
2
Vlan-config
------------
Vlan-ID
Local Mode
-------
----------
Peer Mode ---------
00
--
L3
Vlan IPV4 Multicast Status
--------------------------
Vlan-ID
Local Status Peer Status
-------- ------------ -----------
4094
Active
Inactive
Dell#
Example for Qin-Q implementation over VLT
Dell#show vlt mismatch
Domain
------
Parameters
Local
----------
-----
PB for stp
Enabled
Peer ---Disabled
Vlan-type-config ---------------Codes:: P - Primary, C - Community, I - Isolated, N - Normal vlan, M Vlan-stack
Vlan-ID -------
Local -----
Peer ----
100
N
M
Port-type-config ---------------Codes:: p - PVLAN Promiscuous port, h - PVLAN Host port, t - PVLAN Trunk port,
Virtual Link Trunking (VLT) 1507
mt - Vlan-stack trunk port, mu - Vlan-stack access port, n Normal port
Vlt Lag ------128
Local ----mt
Peer ---mu
Vlan-stack protocol-type ------------------------
Local ----0x4100
Peer ----
0x8100
VLT-VLAN config ---------------
Local Lag Peer Lag Local VLANs
--------- -------- -----------
128
128
4094
Peer VLANs ----------
100
Dell#
show vlt role
Displays the VLT peer status, role of the local VLT switch, VLT system MAC address and system priority, and the MAC address and priority of the local VLT device.
Syntax
show vlt role
Default
Not configured.
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.8.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810.
Example
Dell_VLTpeer1# show vlt role
VLT Role
----------
VLT Role:
Primary
System MAC address:
00:01:e8:8a:df:bc
System Role Priority:
32768
Local System MAC address: 00:01:e8:8a:df:bc
Local System Role Priority: 32768
Dell_VLTpeer2# show vlt role
1508 Virtual Link Trunking (VLT)
VLT Role
----------
VLT Role:
Secondary
System MAC address:
00:01:e8:8a:df:bc
System Role Priority:
32768
Local System MAC address: 00:01:e8:8a:df:e6
Local System Role Priority: 32768
show vlt statistics
Displays VLT operations statistics.
Syntax Parameters
show vlt statistics [arp | domain | igmp-snoop | mac | multicast | ndp]
arp domain igmp-snoop mac multicast ndp
Enter the keyword arp to display the ARP VLT statistics. Enter the keyword domain to display the domain VLT statistics. Enter the keywords igmp-snoop to display the IGMP snooping VLT statistics. Enter the keyword mac to display the VLT MAC addresses VLT statistics. Enter the keyword multicast to display the multicast VLT statistics. Enter the keyword ndp to display the NDP VLT statistics.
Default
Not configured.
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.2(0.2) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.12.0 8.3.8.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Added parameters multicast and ndp Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Added support in the output for ARP, MAC, and IGMP snooping. Introduced on the S4810.
Related Commands
Example
clear vlt statistics -- clears the statistics on VLT operations.
NOTE: The following example shows the statistics for all the VLT parameters. If you enter a specific keyword, such as mac, only the statistics for that VLT parameter displays.
Dell_VLTpeer1#show vlt statistics
VLT Statistics
----------------
HeartBeat Messages Sent:
930
HeartBeat Messages Received: 909
ICL Hello's Sent:
927
ICL Hello's Received:
910
Virtual Link Trunking (VLT) 1509
Domain Mismatch Errors:
0
Version Mismatch Errors:
0
Config Mismatch Errors:
0
VLT MAC Statistics ---------------L2 Info Pkts sent:6, L2 Mac-sync Pkts Sent:0 L2 Info Pkts Rcvd:3, L2 Mac-sync Pkts Rcvd:2 L2 Reg Request sent:1 L2 Reg Request rcvd:2 L2 Reg Response sent:1 L2 Reg Response rcvd:1
VLT Igmp-Snooping Statistics
-------------------------------
IGMP Info Pkts sent:
4
IGMP Info Pkts Rcvd:
1
IGMP Reg Request sent: 1
IGMP Reg Request rcvd: 2
IGMP Reg Response sent: 1
IGMP Reg Response rcvd: 1
IGMP PDU Tunnel Pkt sent: 5
IGMP PDU Tunnel Pkt rcvd: 10
IGMP Tunnel PDUs sent:
10
IGMP Tunnel PDUs rcvd:
19
VLT Multicast Statistics
-------------------------------
Info Pkts Sent:
4
Info Pkts Rcvd:
2
Reg Request Sent:
2
Reg Request Rcvd:
2
Reg Response Sent:
1
Reg Response Rcvd:
0
Route updates sent to Peer:
0
Route updates rcvd from Peer: 0
Route update pkts sent to Peer: 0
Route update pkts rcvd from Peer: 0
VLT NDP Statistics -------------------NDP NA VLT Tunnel Pkts sent:16 NDP NA VLT Tunnel Pkts Rcvd:46 NDP NA Non-VLT Tunnel Pkts sent:0 NDP NA Non-VLT Tunnel Pkts Rcvd:0 Ndp-sync Pkts Sent:144 Ndp-sync Pkts Rcvd:105 Ndp Reg Request sent:25 Ndp Reg Request rcvd:24
show vlt statistics igmp-snoop
Displays the informational packets and IGMP control PDUs that are exchanged between VLT peer nodes.
Syntax
show vlt statistics igmp-snoop
Default
Not configured.
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
1510 Virtual Link Trunking (VLT)
Example
Version
9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 8.3.19.0 8.3.12.0
Description
Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the S4810.
Dell_VLTpeer1#show vlt statistics igmp-snoop
VLT Igmp-Snooping Statistics
-------------------------------
IGMP Info Pkts sent:
4
IGMP Info Pkts Rcvd:
1
IGMP Reg Request sent: 1
IGMP Reg Request rcvd: 2
IGMP Reg Response sent: 1
IGMP Reg Response rcvd: 1
IGMP PDU Tunnel Pkt sent:5
IGMP PDU Tunnel Pkt rcvd:10
IGMP Tunnel PDUs sent: 10
IGMP Tunnel PDUs rcvd: 19
system-mac
Reconfigure the default MAC address for the domain.
Syntax Parameters
system-mac mac-address
mac-address
Enter the system MAC address for the VLT domain.
Defaults
Not configured.
Command Modes VLT DOMAIN
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.5(0.1) 9.2(0.0)
9.0.0.0 8.3.19.0 8.3.8.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810.
Usage Information
When you create a VLT domain on a switch, the Dell Networking OS automatically creates a VLT-system MAC address used for internal system operations.
To reconfigure the default MAC address for the domain, use the system-mac command. The MAC address must be in the nn:nn:nn:nn:nn:nn format. Also reconfigure the same MAC address on the VLT peer switch.
Virtual Link Trunking (VLT) 1511
unit-id
Configure the default unit ID of a VLT peer switch.
Syntax Parameters
unit-id [0 | 1]
0 | 1
Configure the default unit ID of a VLT peer switch. Enter 0 for the first peer. Enter 1 for the second peer.
Defaults
Automatically assigned based on the MAC address of each VLT peer. The peer with the lower MAC address is assigned unit 0; the peer with the higher MAC address is assigned unit 1.
Command Modes VLT DOMAIN
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.2(0.0)
9.0.2.0 9.0.0.0 8.3.19.0 8.3.8.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810.
Usage Information
When you create a VLT domain on a switch, the Dell Networking OS automatically assigns a unique unit ID (0 or 1) to each peer switch. The unit IDs are used for internal system operations. To explicitly configure the unit ID of a VLT peer, use the unit-id command. Configure a different unit ID (0 or 1) on each peer switch.
This command minimizes the time required for the VLT system to determine the unit ID assigned to each peer switch when one peer reboots.
vlt domain
Enable VLT on a switch, configure a VLT domain, and enter VLT-Domain Configuration mode.
Syntax Parameters
vlt domain domain-id
domain-id
Enter the domain ID number. Configure the same domain ID on the peer switch. The range of domain IDs is from 1 to 1000.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5)
Introduced on the S4048-ON.
1512 Virtual Link Trunking (VLT)
Usage Information
Related Commands
Version
9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.2(0.0)
9.0.2.0 9.0.0.0 8.3.19.0 8.3.8.0
Description
Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810.
The VLT domain ID must be the same between the two VLT devices. If the domain ID is not the same, a syslog message generates and VLT does not launch.
show vlt -- uses the show vlt brief command to display the delay-restore value.
vlt-peer-lag port-channel
Associate the port channel to the corresponding VLT peer port channel for the VLT connection to an attached device.
Syntax Parameters
vlt-peer-lag port-channel id-number
id-number
Enter the respective VLT port-channel number of the peer device. The range is from 1 to 128.
Defaults
Not configured.
Command Modes INTERFACE PORT-CHANNEL
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.8.0 9.2(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810. Introduced on the M I/O Aggregator. This command is supported in ProgrammableMux (PMUX) mode only.
Virtual Link Trunking (VLT) 1513
show vlt private-vlan
Display the private VLAN (PVLAN) associated with the VLT LAG for VLT peer nodes.
Syntax
show vlt private-vlan
Command Modes EXEC
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.4(0.0) 9.3(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the Z9000, S4810, and S4820T.
Usage Information
Example
If you add an ICL or VLTi link as a member of a primary VLAN, the ICL becomes a part of the primary VLAN and its associated secondary VLANs, similar to the behavior for normal trunk ports. VLAN symmetry is not validated if you associate an ICL to a PVLAN.
Similarly, if you dissociate an ICL from a PVLAN, although the PVLAN symmetry exists, ICL is removed from that PVLAN. The ICL Status field displays the type of VLAN port of the VLTi link configured in a PVLAN.
Dell#show vlt private-vlan vlan-id
Codes: C- Community, I � Isolated, V � Internally tagged, T � tagged, *
- VLT Pvlan
Primary
Secondary
ICL Status
10
V (*)
20(C)
V
30 (I)
V
40
T
50(C)
T
60 (I)
T
1514 Virtual Link Trunking (VLT)
67
Virtual Extensible LAN (VXLAN)
Virtual Extensible LAN (VXLAN) is supported on Dell Networking OS.
Topics:
� feature vxlan � debug vxlan � fail-mode � vxlan-instance � vxlan-instance (VAP) � max_backoff � gateway-ip � controller � show vxlan vxlan-instance � show running-config vxlan � show vxlan vxlan-instance unicast-mac-remote � show vxlan vxlan-instance unicast-mac-local � show vxlan vxlan-instance statistics interface � show vxlan vxlan-instance physical-locator � show vxlan vxlan-instance logical network � clear vxlan vxlan-instance statistics � clear mac-address-table dynamic all
feature vxlan
Enable VXLAN configuration globally on the platform.
Syntax
feature vxlan To disable the VXLAN, use the no feature vxlan command.
Defaults
Disabled
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Version
Description
9.8(0.0) 9.7(0.0) 9.4.(0.0)
Introduced on the S4048�ON. Introduced on the S6000-ON. Introduced on the S6000.
Usage Information
Related Commands
You must configure feature VXLAN to configure VXLAN-instance. vxlan-instance -- Enable VXLAN Instance configuration on the platform.
Virtual Extensible LAN (VXLAN) 1515
debug vxlan
Debug messages between the Gateway and Controller.
Syntax
debug vxlan
Defaults
Disabled
Command Modes EXEC Privilege
Command History
Version
9.8(0.0)
9.7(0.0)
9.4(0.0)
Description
Introduced on the S4048�ON. Introduced on the S6000-ON. Introduced on the S6000.
fail-mode
Configures failure-mode on the platform.
Syntax
fail-mode secure To disable the fail-mode secure, use the no fail-mode securecommand.
Parameters
secure
Enter the keyword secure to delete all its database and hardware flows/ resources, when the VTEP loses connectivity with the controller.
Defaults
non secure
Command Modes VXLAN INSTANCE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Version
Description
9.8(0.0) 9.7(0.0) 9.4.(0.0)
Introduced on the S4048�ON. Introduced on the S6000-ON. Introduced on the S6000.
Related Commands
vxlan-instance-- Enable VXLAN Instance configuration on the platform.
vxlan-instance
Enable VXLAN Instance configuration on the platform.
Syntax Parameters
vxlan-instance instance ID To enable the vxlan-instance command, use the [no] shut command. To delete vxlan-instance from the system, use no vxlan-instance 1 command.
instance ID
Enter the VXLAN instance ID. The platform supports only the instance ID 1 in the initial release.
Defaults
Disabled
Command Modes CONFIGURATION
1516 Virtual Extensible LAN (VXLAN)
Command History
Usage Information Related Commands
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Version
Description
9.8(0.0) 9.7(0.0) 9.4.(0.0)
Introduced on the S4048�ON. Introduced on the S6000-ON. Introduced on the S6000.
You must configure VXLAN globally before using VXLAN-instance.
feature vxlan -- Enable VXLAN configuration globally on the platform.
vxlan-instance (VAP)
To configure a VXLAN-Access Port (VAP) in to VXLAN-instance
Syntax
vxlan-instance instance ID To unconfigure VAP, use the no vxlan-instance 1 command.
Parameters
instance ID
Enter the VXLAN instance ID. The platform supports only the instance ID 1 in the initial release.
Defaults
Disabled
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Version
Description
9.8(0.0) 9.7(0.0) 9.4(0.0)
Introduced on the S4048�ON. Introduced on the S6000-ON. Introduced on the S6000.
Usage Information
Related Commands
You must disable vxlan-instance before unconfiguring VAP. feature vxlan -- Enable VXLAN configuration globally on the platform.
max_backoff
Configures time to wait between connection attempts with controller.
Syntax Parameters
max_backoff time
time
Enter the time in milliseconds. The range is from 1000-180000. The default value is 30000.
Defaults
30000
Command Modes VXLAN INSTANCE
Virtual Extensible LAN (VXLAN) 1517
Command History
Usage Information Related Commands
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Version
Description
9.8(0.0) 9.7(0.0) 9.4.(0.0)
Introduced on the S4048�ON. Introduced on the S6000-ON. Introduced on the S6000.
The retry interval value caps at the value configured on the max-backoff.
vxlan-instance -- Enable VXLAN Instance configuration on the platform.
gateway-ip
Configures gateway IP address on the platform.
Syntax Parameters
gateway-ip IP address
IP address
Enter the IP address of the gateway for the VXLAN instance.
Defaults
Disabled
Command Modes VXLAN INSTANCE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Version
Description
9.8(0.0) 9.7(0.0) 9.4.(0.0)
Introduced on the S4048�ON. Introduced on the S6000-ON. Introduced on the S6000.
Related Commands
vxlan-instance -- Enable VXLAN Instance configuration on the platform.
controller
Configures controller for the VXLAN instance on the platform.
Syntax Parameters
controller controller ID ip address port port-number tcp|ptcp|pssl|ssl
controller ID
Enter the controller ID.
ip address
Enter the IP address of the controller.
port port-number (OPTIONAL) Enter the keyword port and the port number.
The range is from 1 to 6632. The default port number is 6632.
tcp ptcp
pssl
(OPTIONAL) Enter the keyword tcp to configure tcp connection to controller.
(OPTIONAL) Enter the keyword ptcp to configure passive tcp connection to controller.
(OPTIONAL) Enter the keyword pssl to configure passive ssl connection to controller.
1518 Virtual Extensible LAN (VXLAN)
ssl
(OPTIONAL) Enter the keyword ssl to configure ssl connection to controller
(Default).
Defaults
Disabled
Command Modes VXLAN INSTANCE
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Version
Description
9.8(0.0) 9.7(0.0) 9.4.(0.0)
Introduced on the S4048�ON. Introduced on the S6000-ON. Introduced on the S6000.
Related Commands
vxlan-instance -- Enable VXLAN instance configuration on the platform.
show vxlan vxlan-instance
Displays information related to Network Virtualization Overlay (NVO) Gateway.
Syntax Parameters
show vxlan vxlan-instance instance ID
instance ID
Enter the VXLAN instance ID. The platform supports only the instance ID 1 in the initial release.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Version
Description
9.8(0.0) 9.7(0.0) 9.4(0.0)
Introduced on the S4048�ON. Introduced on the S6000-ON. Introduced on the S6000.
Example
Dell#show vxlan vxlan-instance 1
Instance
: 1
Admin State
: enabled
Management IP : 192.168.200.200
Gateway IP
: 3.3.3.3
MAX Backoff
: 30000
Controller 1
: 192.168.122.6:6632 ssl (connected)
Fail Mode
: secure
Port List
:
Fo 1/49
Te 1/16 Te 1/20 Po 2
Related Commands
vxlan-instance- Enable VXLAN Instance configuration on the platform.
Virtual Extensible LAN (VXLAN) 1519
show running-config vxlan
Displays the VXLAN configuration information from running configuration.
Syntax
show running-config vxlan
Command Modes EXEC
EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Version
Description
9.8(0.0) 9.7(0.0) 9.4(0.0)
Introduced on the S4048�ON. Introduced on the S6000-ON. Introduced on the S6000.
Example
Dell#show running-config vxlan ! feature vxlan ! vxlan-instance 1 gateway-ip 3.3.3.3 fail-mode secure controller 1 192.168.122.6 port 6632 ssl no shutdown
Related Commands
vxlan-instance- Enable VXLAN Instance configuration on the platform.
show vxlan vxlan-instance unicast-mac-remote
Displays the information of the remote unicast MACs associated with the logical network related to Network Virtualization Overlay (NVO) Gateway.
Syntax Parameters
show vxlan vxlan-instance instance ID unicast-mac-remote [logical-network name | vnid VNID]
instance ID name vnidVNID
Enter the VXLAN instance ID. The platform supports only the instance ID 1 in the initial release.
(Optional) Enter the name of VXLAN logical network with a maximum length of 30 characters.
(Optional) Enter the keyword vnid and then enter the ID of the VXLAN. The range is from 1 to 16777215.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Version
Description
9.8(0.0) 9.7(0.0)
Introduced on the S4048�ON. Introduced on the S6000-ON.
1520 Virtual Extensible LAN (VXLAN)
Example
Version
9.4(0.0)
Description
Introduced on the S6000.
Dell# show vxlan vxlan-instance <1> unicast-mac-remote
Total Local Mac Count:
1
VNI
MAC
TUNNEL
4656
00:00:01:00:00:01
36.1.1.1
Related Commands
vxlan-instance- Enable VXLAN Instance configuration on the platform.
show vxlan vxlan-instance unicast-mac-local
Displays the information of the local unicast MAC associated with the logical network related to Network Virtualization Overlay (NVO) Gateway.
Syntax Parameters
show vxlan vxlan-instance instance ID unicast-mac-local [logical--network name | vnid VNID]
instance ID name vnid VNID
Enter the VXLAN instance ID. The platform supports only the instance ID 1 in the initial release.
(Optional) Enter the name of VXLAN logical network with a maximum length of 30 characters.
(Optional) Enter the keyword vnid and enter the ID of the VXLAN. The range is from 1 to 16777215.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Version
Description
9.8(0.0) 9.7(0.0) 9.4.(0.0)
Introduced on the S4048�ON. Introduced on the S6000-ON. Introduced on the S6000.
Example
Dell# show vxlan vxlan-instance <1> unicast-mac-local
Total Local Mac Count:
5
VNI
MAC
PORT
4656 4656 4656 4656 4656
00:00:02:00:03:00 00:00:02:00:03:01 00:00:02:00:03:02 00:00:02:00:03:03 00:00:02:00:03:04
Te 1/17/1 0 Te 1/17/1 0 Te 1/17/1 0 Te 1/17/1 0 Te 1/17/1 0
VLAN
Related Commands
vxlan-instance- Enable VXLAN Instance configuration on the platform.
Virtual Extensible LAN (VXLAN) 1521
show vxlan vxlan-instance statistics interface
Displays the port VLAN statistics information related to Network Virtualization Overlay (NVO) Gateway.
Syntax Parameters
show vxlan vxlan-instance instance ID statisitics interface interface
instance ID interface
Enter the VXLAN instance ID. The platform supports only the instance ID 1 in the initial release.
Enter the following keywords and slot/port or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Port Channel, enter the keywords port-channel.
Defaults
Disabled
Command Modes EXEC
EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Version
Description
9.8(0.0) 9.7(0.0) 9.4(0.0)
Introduced on the S4048�ON. Introduced on the S6000-ON. Introduced on the S6000.
Example
Dell#show vxlan vxlan-instance 1 statistics interface fortyGigE 1/49 100 Port : Fo 1/49 Vlan : 100 Rx Packets : 13 Rx Bytes : 1317 Tx Packets : 13 Tx Bytes : 1321
Related Commands
vxlan-instance- Enable VXLAN Instance configuration on the platform.
show vxlan vxlan-instance physical-locator
Displays physical locators related to Network Virtualization Overlay (NVO) Gateway.
Syntax Parameters
show vxlan vxlan-instance instance ID physical--locator vtep-ip A.B.C.D
instance ID A.B.C.D
Enter the VXLAN instance ID. The platform supports only the instance ID 1 in the initial release.
Enter the IP address of the VTEP.
Defaults
Disabled
Command Modes VXLAN INSTANCE
1522 Virtual Extensible LAN (VXLAN)
Command History
Example
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Version
Description
9.8(0.0) 9.7(0.0) 9.4.(0.0)
Introduced on the S4048�ON. Introduced on the S6000-ON. Introduced on the S6000.
Dell#show vxlan vxlan-instance 1 physical-locator Instance : 1 Tunnel : count 1
36.1.1.1 : vxlan_over_ipv4 (up)
Related Commands
vxlan-instance -- Enable VXLAN Instance configuration on the platform.
show vxlan vxlan-instance logical network
Displays logical network information related to Network Virtualization Overlay (NVO) Gateway.
Syntax Parameters
show vxlan vxlan-instance instance ID logical-network [name name]
instance ID name name
Enter the VXLAN instance ID. The platform supports only the instance ID 1 in the initial release.
(OPTIONAL) Enter the keyword name and enter the name of VXLAN logical network up to a length of maximum 30 characters.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
Version
Description
9.8(0.0) 9.7(0.0) 9.4.(0.0)
Introduced on the S4048�ON. Introduced on the S6000-ON. Introduced on the S6000.
Example
Dell#show vxlan vxlan-instance 1 logical-network
Instance
: 1
Total LN count : 1
Name
bffc3be0-13e6-4745-9f6b-0bcbc5877f01
4656
VNID
Dell#$n-instance 1 logical-network n 2a8d5d19-8845-4365-ad04-243f0b6df252 Name : 2a8d5d19-8845-4365-ad04-243f0b6df252 Description : Tunnel Key : 2 VFI : 28674 Unknown Multicast MAC Tunnels:
192.168.122.133 : vxlan_over_ipv4 (up) Port Vlan Bindings:
Te 1/8: VLAN: 0 (0x80000001), Fo 1/12: VLAN: 0 (0x80000004),
Virtual Extensible LAN (VXLAN) 1523
Related Commands
vxlan-instance -- Enable VXLAN Instance configuration on the platform.
clear vxlan vxlan-instance statistics
Syntax Parameters
clear vxlan vxlan-instance instance ID statistics
instance ID
Enter the VXLAN instance ID. The platform supports only the instance ID 1 in the initial release.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide
Version
Description
9.8(0.0) 9.7(0.0)
Introduced on the S4048�ON. Introduced on the S6000-ON.
9.4.(0.0)
Introduced on the S6000.
clear mac-address-table dynamic all
Clear the MAC address table of all MAC address learned dynamically. It clears both MAC address of the VXLAN and legacy VLAN.
Syntax Parameters
clear mac-address-table dynamic all
instance ID
Enter the VXLAN instance ID. The platform supports only the instance ID 1 in the initial release.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide
Version
Description
9.8(0.0) 9.7(0.0)
Introduced on the S4048�ON. Introduced on the S6000-ON.
9.4.(0.0)
Introduced on the S6000.
1524 Virtual Extensible LAN (VXLAN)
68
Virtual Router Redundancy Protocol (VRRP)
Virtual router redundancy protocol (VRRP) is supported by the Dell Networking operating system on Dell Networking OS.
Topics:
� IPv4 VRRP Commands � IPv6 VRRP Commands
IPv4 VRRP Commands
The following are IPv4 VRRP commands.
advertise-interval
Set the time interval between VRRP advertisements.
Syntax
advertise-interval {seconds | centisecs centisecs } To return to the default settings, use the no advertise-interval command.
Parameters
seconds
centisecs centisecs
Enter the number of seconds. The range is from 1 to 255. The default is 1 second.
Enter the keyword centisecs then the number of centisecs in multiples of 25 centisecs. The range is 25 to 4075 centisecs in multiples of 25 centisecs.
Defaults
1 second or 100 centisecs.
Command Modes INTERFACE-VRRP
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Added support for centisecs on the Z9000, S6000, S4820T, S4810, and MXL. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Virtual Router Redundancy Protocol (VRRP) 1525
Usage Information
Dell Networking recommends keeping the default setting for this command. If you do change the time interval between VRRP advertisements on one router, change it on all routers.
authentication-type
Enable authentication of VRRP data exchanges.
Syntax
authentication-type simple [encryption-type] password To delete an authentication type and password, use the no authentication-type command.
Parameters
simple encryption-type
Enter the keyword simple to specify simple authentication.
(OPTIONAL) Enter one of the following:
0 (zero) specifies an unencrypted authentication data follows. 7 (seven) specifies a hidden authentication data follows. LINE is the unencrypted (cleartext) authentication data.
password
Enter a character string up to eight characters long as a password. If you do not enter an encryption-type, the password is stored as clear text.
Defaults
Not configured.
Command Modes VRRP
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
The system encrypts the password and the show config command displays the encrypted text string.
clear counters vrrp
Clear the counters maintained on VRRP operations.
Syntax Parameters
clear counters vrrp [vrrp-id] [ipv6]
vrrp-id
(OPTIONAL) Enter the number of the VRRP group ID to clear the group's counters. The range is from 1 to 255.
1526 Virtual Router Redundancy Protocol (VRRP)
ipv6
(OPTIONAL) Enter the keyword ipv6 to clear counters from the IPv6 VRRP group.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.9(0.0)
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4.(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.2.1.1
Added support to clear the interface configurations corresponding to a range of ports. Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Added support for VRF. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
NOTE: This command also enables you to clear the port configurations corresponding to a range of ports. However, for Open Networking (ON) platforms the notation for specifying port range in the command is different from how you specify in non-ON platforms.
For non-ON platforms, you can specify multiple ports as slot/port-range. For example, if you want to clear the port configurations corresponding to all ports between 1 and 4, specify the port range as clear counters interfaces interface-type 1/1 - 4.
For ON platforms, you can specify multiple ports as slot/port/[subport] - slot/port/ [subport]. For example, if you want to clear the port configurations corresponding to all ports between 1 and 4, specify the port range as clear counters interfaces interfacetype 1/1/1 - 1/1/4.
debug vrrp
Enable VRRP debugging.
Syntax
debug vrrp [vrrp-id] {all | bfd | database | interface | ipv6 | packets | state | timer}
To disable debugging, use the no debug vrrp [vrrp-id] {all | bfd | database | interface | ipv6 | packets | state | timer} command.
Parameters
vrrp-id all bfd
(OPTIONAL) Enter a number from 1 to 255 as the VRRP group ID. Enter the keyword all to enable debugging of all VRRP groups. Enter the keyword bfd to enable debugging of VRRP BFD interactions.
Virtual Router Redundancy Protocol (VRRP) 1527
database interface
interface ipv6 packets state timer
Enter the keyword database to enable debugging of configuration changes.
Enter the following keywords and slot/port or number information:
For Port Channel interface types, enter the keywords port-channel then the number.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a VLAN interface, enter the keyword vlan then the VLAN ID. The VLAN ID range is from 1 to 4094.
Enter the keyword interface to enable debugging of interface state changes.
Enter the keyword ipv6 to enable debugging for IPv6.
Enter the keyword packets to enable debugging of VRRP control packets.
Enter the keyword state to enable debugging of VRRP state changes.
Enter the keyword timer to enable debugging of the VRRP timer.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.5.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
If you do not specify an option, debug is active on all interfaces and all VRRP groups.
description
Configure a short text string describing the VRRP group.
Syntax
description text To delete a VRRP group description, use the no description command.
Parameters
text
Enter a text string up to 80 characters long.
Defaults
Not enabled.
Command Modes VRRP
1528 Virtual Router Redundancy Protocol (VRRP)
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
disable
Disable a VRRP group.
Syntax
disable To re-enable a disabled VRRP group, use the no disable command.
Command Modes VRRP
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
To enable VRRP traffic, assign an IP address to the VRRP group using the virtual-address command and enter no disable.
virtual-address -- specifies the IP address of the virtual router.
Virtual Router Redundancy Protocol (VRRP) 1529
hold-time
Specify a delay (in seconds) before a switch becomes the MASTER virtual router. By delaying the initialization of the VRRP MASTER, the new switch can stabilize its routing tables.
Syntax
hold-time {seconds | centisecs centisecs} To return to the default value, use the no hold-time command.
Parameters
seconds
centisecs centisecs
Enter the number of seconds. The range is from 0 to 65535. The default is zero (0) seconds.
Enter the keyword centisecs then the number of centisecs in units of 25 centisecs. The range is from 0 to 65525 in units of 25 centisecs.
Defaults
zero (0) seconds or (0) centiseconds
Command Modes VRRP
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Added support for centisecs on the Z9000, S6000, S4820T, S4810, and MXL. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Related Commands
If a switch is a MASTER and you change the hold timer, disable and re-enable VRRP for the new hold timer value to take effect.
disable -- disables a VRRP group.
preempt
To preempt or become the MASTER router, configure a BACKUP router with a higher priority value.
Syntax
preempt To prohibit preemption, use the no preempt command.
Defaults
Enabled (that is, a BACKUP router can preempt the MASTER router).
Command Modes VRRP
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
1530 Virtual Router Redundancy Protocol (VRRP)
Version
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.2.1.1
Description
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
priority
Specify a VRRP priority value for the VRRP group. The VRRP protocol uses this value during the MASTER election process.
Syntax
priority priority To return to the default value, use the no priority command.
Parameters
priority
Enter a number as the priority. Enter 255 only if the router's virtual address is the same as the interface's primary IP address (that is, the router is the OWNER). The range is from 1 to 255. The default is 100.
Defaults
100
Command Modes VRRP
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.16.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
To guarantee that a VRRP group becomes MASTER, configure the VRRP group's virtual address with same IP address as the interface's primary IP address and change the priority of the VRRP group to 255.
Virtual Router Redundancy Protocol (VRRP) 1531
If you set the priority command to 255 and the virtual-address is not equal to the interface's primary IP address, an error message appears.
show config
View the nondefault VRRP configuration.
Syntax Parameters
show config [verbose]
verbose
(OPTIONAL) Enter the keyword verbose to view all the VRRP group configuration information, including default information.
Command Modes VRRP
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Example
Dell(conf-if-vrid-4)#show config vrrp-group 4 virtual-address 119.192.182.124 !
show vrrp
View the VRRP groups that are active. If no VRRP groups are active, the Dell Networking OS returns No Active VRRP group.
Syntax Parameters
show vrrp [vrrp-id][brief][interface type][ipv6][interface type][vrf vrfname]
vrrp-id brief
(OPTIONAL) Enter the virtual router identifier for the VRRP group to view only that group. The range is from 1 to 255.
(OPTIONAL) Enter the keyword brief to view a table of information about the VRRP groups.
1532 Virtual Router Redundancy Protocol (VRRP)
interface type
ipv6 vrf vrf-name
(OPTIONAL) Enter the following keywords and slot/port[/subport] or number information:
For Port Channel interface types, enter the keywords port-channel then the number. The range is from 1 to 128.
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a VLAN interface, enter the keyword vlan then the VLAN ID. The VLAN ID range is from 1 to 4094.
(OPTIONAL) Enter the keyword ipv6 to view only VRRP IPv6 groups.
(OPTIONAL) Enter the keyword vrf and then the name of the VRF to view active VRRP groups corresponding to that VRF.
Command Modes EXEC EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.4.(0.0) 9.2(1.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Added support for VRF. Introduced on the Z9500. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
The following describes the show vrrp brief command shown in the following example.
Item
Description
Interface Grp Pri
Pre
Lists the interface type, slot, and port of the configured VRRP group.
Displays the VRRP group ID.
Displays the priority value assigned to the interface. If you configured the track command to track that interface and you disable the interface, the cost is subtracted from the priority value assigned to the interface.
States whether preempt is enabled on the interface.
Y = Preempt is enabled. N = Preempt is not enabled.
State
Displays the operational state of the interface using one of the following: NA/IF (the interface is not available).
Virtual Router Redundancy Protocol (VRRP) 1533
Example (Brief)
Item
Master addr Virtual addr(s)
Description
MASTER (the interface associated with the MASTER router). BACKUP (the interface associated with the BACKUP router).
Displays the IP address of the MASTER router. Displays the virtual IP addresses of the VRRP routers associated with the interface.
Dell>Interface Grp Pri Pre State Master addr Virtual addr(s) Description-----------------------------------------------Te 1/37 1 100 Y Master 200.200.200.200 200.200.200.201 Te 1/37 2 100 Y Master 200.200.200.200 200.200.200.202
200.200.200.203 Description Te 1/37 3 100 Y Master 1.1.1.1 1.1.1.2 Te 1/37 4 100 Y Master 200.200.200.200 200.200.200.206
200.200.200.207 ... short desc Te 1/37 254 254 Y Master 200.200.200.200 200.200.200.204
200.200.200.205 Dell>
Usage Information
The following describes the show vrrp command shown in the following example.
Item
Description
TenGigabitEther net 1/3...
State: master...
Displays the interface, VRRP group ID, and network address. If the interface is not sending VRRP packets, 0.0.0.0 appears as the network address.
Displays the interface's state:
Na/If (not available) master (MASTER virtual router) backup (BACKUP virtual router)
Also displays the interface's priority and IP address of the MASTER.
Hold Down:...
Displays additional VRRP configuration information:
Hold Down displays the hold down timer interval in seconds. Preempt displays TRUE if preempt is configured and FALSE if preempt is not
configured. AdvInt displays the Advertise Interval in seconds.
Adv rcvd:...
Displays counters for the following:
Adv rcvd displays the number of VRRP advertisements received on the interface.
Adv sent displays the number of VRRP advertisements sent on the interface. Gratuitous ARP sent displays the number of gratuitous ARPs sent.
Virtual MAC address
Displays the virtual MAC address of the VRRP group.
Virtual IP address
Displays the virtual IP address of the interface's VRRP router.
Authentication:... States whether authentication is configured for the VRRP group. If it is configured, this lists the authentication type and password.
Tracking states.. Displays if the track command is configured on an interface. Also displays the following information about the tracked interface:
Dn or Up states whether the interface is down or up. The interface type slot/port information.
Example
Dell>show vrrp ------------------
1534 Virtual Router Redundancy Protocol (VRRP)
Example (VRRP VRF)
TenGigabitEthernet 1/3, VRID: 1, Net: 10.1.1.253 VRF: 0 default State: Master, Priority: 105, Master: 10.1.1.253 (local) Hold Down: 0 sec, Preempt: TRUE, AdvInt: 1 sec Adv rcvd: 0, Adv sent: 1862, Gratuitous ARP sent: 0 Virtual MAC address:
00:00:5e:00:01:01 Virtual IP address:
10.1.1.252 Authentication: (none) Tracking states for 1 interfaces:
Up TenGigabitEthernet 1/17 priority-cost 10 -----------------TenGigabitEthernet 1/4, VRID: 2, Net: 10.1.2.253 VRF: 0 default State: Master, Priority: 110, Master: 10.1.2.253 (local) Hold Down: 10 sec, Preempt: TRUE, AdvInt: 1 sec Adv rcvd: 0, Adv sent: 1862, Gratuitous ARP sent: 0 Virtual MAC address:
00:00:5e:00:01:02 Virtual IP address:
10.1.2.252 Authentication: (none) Tracking states for 2 interfaces:
Up TenGigabitEthernet 2/1 priority-cost 10 Up TenGigabitEthernet 1/17 priority-cost 10 Dell>
Dell#show vrrp vrf jay
------------------
fortyGigE 1/50, IPv4 VRID: 20, Version: 2, Net: 10.0.0.3
VRF: 1 jay
State: Master, Priority: 100, Master: 10.0.0.3 (local)
Hold Down: 0 sec, Preempt: TRUE, AdvInt: 1 sec
Adv rcvd: 0, Bad pkts rcvd: 0, Adv sent: 38, Gratuitous ARP sent: 0
Virtual MAC address:
00:00:5e:00:01:14
Virtual IP address:
10.0.0.2
Authentication: (none)
Dell#show vrrp vrf jay brief
Interface Group Pri Pre State Master addr Virtual addr(s) Description
---------------------------------------------------------------
Fo 1/50 IPv4 20 100 Y Master 10.0.0.3
10.0.0.2
Dell#
Dell#show vrrp vrf jay
------------------
fortyGigE 1/50, IPv4 VRID: 20, Version: 2, Net: 10.0.0.3
VRF: 1 jay
State: Master, Priority: 100, Master: 10.0.0.3 (local)
Hold Down: 0 sec, Preempt: TRUE, AdvInt: 1 sec
Adv rcvd: 0, Bad pkts rcvd: 0, Adv sent: 38, Gratuitous ARP sent: 0
Virtual MAC address:
00:00:5e:00:01:14
Virtual IP address:
10.0.0.2
Authentication: (none)
Dell#show vrrp vrf jay brief
Interface Group Pri Pre State Master addr Virtual addr(s) Description
--------------------------------------------------------------------
Fo 1/50 IPv4 20 100 Y Master 10.0.0.3
10.0.0.2
Dell#
Virtual Router Redundancy Protocol (VRRP) 1535
track
Monitor an interface and lower the priority value of the VRRP group on that interface if it is disabled.
Syntax
track interface [priority-cost cost] To disable monitoring, use the no track interface command.
Parameters
interface
(OPTIONAL) Enter the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
For Port Channel interface types, enter the keywords port-channel then a number.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a VLAN interface, enter the keyword vlan then the VLAN ID. The VLAN ID range is from 1 to 4094.
priority-cost
(OPTIONAL) Enter a number as the amount to subtract from the priority value. The range is from 1 to 254. The default is 10.
Defaults
priority cost = 10
Command Modes VRRP
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 7.6.1.0 7.5.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S-Series (S50 only). Introduced on the C-Series. Introduced on the E-Series.
Usage Information
If you disable the interface, the cost value is subtracted from the priority value and forces a new MASTER election if the priority value is lower than the priority value in the BACKUP virtual routers.
virtual-address
Configure up to 12 virtual router IP addresses in the VRRP group. To start sending VRRP packets, set at least one virtual IP address for the VRRP group.
Syntax
virtual-address ip-address1 [... ip-address12]
To delete one or more virtual IP addresses, use the no virtual-address ip-address1 [... ip-address12] command.
Parameters
ip-address1
Enter an IP address of the virtual router in dotted decimal format. The IP address must be on the same subnet as the interface's primary IP address.
1536 Virtual Router Redundancy Protocol (VRRP)
... ip-address12
(OPTIONAL) Enter up to 11 additional IP addresses of virtual routers in dotted decimal format. Separate the IP addresses with a space. The IP addresses must be on the same subnet as the interface's primary IP address.
Defaults
Not configured.
Command Modes VRRP
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 7.4.1.0
6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced support for telnetting to the VRRP group IP address assigned using this command. Introduced on the E-Series.
Usage Information
The VRRP group only becomes active and sends VRRP packets when you configure a virtual IP address. When you delete the virtual address, the VRRP group stops sending VRRP packets.
A system message appears after you enter or delete the virtual-address command.
To guarantee that a VRRP group becomes MASTER, configure the VRRP group's virtual IP address with the same address as the interface's primary IP address and change the priority of the VRRP group to 255.
You can ping the virtual IP addresses configured in all VRRP groups.
vrrp delay minimum
Set the delay time for VRRP initialization after an interface comes up.
Syntax Parameters
vrrp delay minimum seconds
seconds
Enter the number of seconds for the delay for VRRP initialization after an interface becomes operational. The range is from 0 to 900 (0 indicates no delay).
Defaults
0
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2)
Introduced on the S4048-ON. Introduced on the S3048-ON.
Virtual Router Redundancy Protocol (VRRP) 1537
Usage Information
Related Command
Version
9.7(0.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.8.0
Description
Introduced on the S6000-ON. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810.
This command applies to a single interface. When you use this command with the vrrp delay reload command, the later timer rules VRRP enabling. For example, if vrrp delay reload is 600 and vrrp delay minimum is 300:
When the system reloads, VRRP waits 600 seconds (10 minutes) to bring up VRRP on all interfaces that are up and configured for VRRP.
When an interface comes up, whether as part of a system reload or an interface reload, the system waits 300 seconds (5 minutes) to bring up VRRP on that interface.
vrrp delay reload -- sets the delay time for VRRP initialization after a system reboot.
vrrp delay reload
Set the delay time for VRRP initialization after a system reboot.
Syntax Parameters
vrrp delay reload seconds
seconds
Enter the number of seconds for the delay. The range is from 0 to 900 (0 indicates no delay).
Defaults
0
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 9.0.0.0 8.3.19.0 8.3.8.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the Z9000. Introduced on the S4820T. Introduced on the S4810.
Usage Information
This command applies to all the VRRP interfaces on a system. When you use this command with the vrrp delay minimum command, the later timer rules VRRP enabling. For example, if vrrp delay reload is 600 and vrrp delay minimum is 300:
When the system reloads, VRRP waits 600 seconds (10 minutes) to bring up VRRP on all interfaces that are up and configured for VRRP.
When an interface comes up, whether as part of a system reload or an interface reload, the system waits 300 seconds (5 minutes) to bring up VRRP on that interface.
For the delay timers to take effect, save the configuration and reload the system.
1538 Virtual Router Redundancy Protocol (VRRP)
Related Command
vrrp delay minimum -- sets the delay time for VRRP initialization after a line card reboot.
vrrp-group
Assign a VRRP ID to an interface. You can configure up to 12 VRRP groups per interface.
Syntax Parameters
vrrp-group vrrp-id
vrrp-id
Enter a number as the group ID. The range is from 1 to 255.
Defaults
Not configured.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.0.2.0 8.3.19.0 8.3.11.1 8.3.7.0 7.6.1.0 7.5.1.0 6.2.1.1
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the S6000. Introduced on the S4820T. Introduced on the Z9000. Introduced on the S4810. Introduced on the S-Series. Introduced on the C-Series. Introduced on the E-Series.
Usage Information
Related Command
The VRRP group only becomes active and sends VRRP packets when you configure a virtual IP address. When you delete the virtual IP address, the VRRP group stops sending VRRP packets.
virtual-address -- assigns up to 12 virtual IP addresses per VRRP group.
version
Set the VRRP protocol version for the IPv4 group.
Syntax
version {2 | 3 | both} To return to the default setting, use the no version command.
Parameters
2 3 both
Enter the keyword 2 to specify VRRP version 2 as defined by RFC 3768, Virtual Router Redundancy Protocol.
Enter the keyword 3 to specify VRRP version 3 as defined by RFC 5798, Virtual Router Redundancy Protocol.
Enter the keyword both for in-service migration from VRRP version 2 to VRRP version 3.
Defaults
2
Command Modes VRRP
Virtual Router Redundancy Protocol (VRRP) 1539
Command History
Usage Information
Example
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.5(0.1) 9.5(0.0)
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the Z9000, S6000, S4820T, S4810, and MXL.
You can use the both command to migrate from VRRPv2 to VRRPv3. When you set the VRRP protocol version to both, the switch sends only VRRPv3 advertisements but can receive either VRRPv2 or VRRPv3 packets. To migrate an IPv4 VRRP group from VRRPv2 to VRRPv3:
1. Set the switches with the lowest priority to both. 2. Set the switch with the highest priority to version 3. 3. Set all the switches from both to version 3.
NOTE: Do not run VRRP version 2 and version 3 in the same group for an extended period of time.
Dell(conf-if-te-1/1-vrid-100)#version ?
2
VRRPv2
3
VRRPv3
both
Interoperable, send VRRPv3 receive both
Dell(conf-if-te-1/1-vrid-100)#version 3
IPv6 VRRP Commands
The following are IPv6 VRRP commands.
clear counters vrrp ipv6 debug vrrp ipv6 show vrrp ipv6 vrrp-ipv6-group
The following commands apply to IPv4 and IPv6:
advertise-interval description disable hold-time preempt priority show config virtual-address
clear counters vrrp ipv6
Clear the counters recorded for IPv6 VRRP groups.
Syntax Parameters
clear counters vrrp ipv6 [vrid | vrf vrf-name]
vrid
(OPTIONAL) Enter the number of an IPv6 VRRP group. The range is from 1 to 255.
1540 Virtual Router Redundancy Protocol (VRRP)
vrf vrf-name
(OPTIONAL) Enter the name of a VRF instance to clear the counters of all IPv6 VRRP groups in the specified VRF. Maximum 32 characters.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.9(0.0)
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 8.3.19.0 8.3.10.0 8.4.1.0
8.3.2.0
Added support to clear the interface configurations corresponding to a range of ports. Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the S4810. Introduced on E-Series ExaScale, C-Series, and S-Series. Support was added for IPv6 VRRP groups in nondefault VRF instances. Introduced on the E-Series TeraScale.
Usage Information
NOTE: This command also enables you to clear the port configurations corresponding to a range of ports. However, for Open Networking (ON) platforms the notation for specifying port range in the command is different from how you specify in non-ON platforms.
For non-ON platforms, you can specify multiple ports as slot/port-range. For example, if you want to clear the port configurations corresponding to all ports between 1 and 4, specify the port range as clear counters interfaces interface-type 1/1 - 4.
For ON platforms, you can specify multiple ports as slot/port/[subport] - slot/port/ [subport]. For example, if you want to clear the port configurations corresponding to all ports between 1 and 4, specify the port range as clear counters interfaces interfacetype 1/1/1 - 1/1/4.
debug vrrp ipv6
Enable VRRP debugging.
Syntax Parameters
debug vrrp ipv6 interface [vrid] {all | packets | state | timer}
interface
Enter the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a Port Channel interface, enter the keywords port-channel then a number.
For a VLAN interface, enter the keyword vlan then the VLAN ID. The VLAN ID range is from 1 to 4094.
vrid
(OPTIONAL) Enter a number from 1 to 255 as the VRRP group ID.
all
Enter the keyword all to enable debugging of all VRRP groups.
Virtual Router Redundancy Protocol (VRRP) 1541
bfd database
packets state timer
Enter the keyword bfd to enable debugging of all VFFP BFD interactions. Enter the keyword database to display changes related to group, prefix, and interface entries in the VRRP table. Enter the keyword packets to enable debugging of VRRP control packets. Enter the keyword state to enable debugging of VRRP state changes Enter the keyword timer to enable debugging of the VRRP timer.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 8.3.19.0 8.3.10.0 8.4.1.0
8.3.2.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the S4810. Introduced on E-Series ExaScale, C-Series, and S-Series. Support was added for IPv6 VRRP groups in nondefault VRF instances. Introduced on the E-Series TeraScale.
Usage Information
If you do not specify an option, debugging is active on all interfaces and all VRRP groups.
show vrrp ipv6
View the IPv6 VRRP groups that are active. If no VRRP groups are active, the Dell Networking OS returns No Active VRRP group.
Syntax Parameters
show vrrp ipv6 [vrid] [interface] [brief] [vrf vrf-name]
vrid interface
(OPTIONAL) Enter the virtual router identifier for the VRRP group to view only that group. The range is from 1 to 255.
Enter the following keywords and slot/port[/subport] or number information:
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port[/subport] information.
For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
For a port channel interface, enter the keywords port-channel then a number.
For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
brief vrf vrf-name
(OPTIONAL) Enter the keyword brief to view a table of information on the VRRP groups.
Enter the keyword vrf then the name of the VRF to view IPv6 VRRP groups corresponding to that VRF.
Command Modes EXEC EXEC Privilege
1542 Virtual Router Redundancy Protocol (VRRP)
Command History Usage Information
Example
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.2(1.0) 8.3.19.0 8.3.10.0 8.3.2.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the Z9500. Introduced on the S4820T. Introduced on the S4810. Introduced on the E-Series TeraScale.
The following describes the show vrrp ipv6 command shown in the following example.
Line starting Description with
GigabitEthernet.. Displays the interface, VRRP group ID, and network address. If the interface is not
.
sending VRRP packets, 0.0.0.0 appears as the network IP address.
VRF
VRF instance to which the VRRP group interface belongs.
State: master... Displays the interface's state:
Na/If (not available). master (MASTER virtual router). backup (BACKUP virtual router).
Also displays the interface's priority and IP address of the MASTER.
Hold Down:...
Displays additional VRRP configuration information:
Hold Down displays the hold down timer interval in seconds. Preempt displays TRUE if preempt is configured and FALSE if preempt is not
configured. AdvInt displays the Advertise Interval in seconds.
Adv rcvd:...
Displays counters for the following:
Adv rcvd displays the number of VRRP advertisements received on the interface.
Adv sent displays the number of VRRP advertisements sent on the interface. Bad pkts rcvd displays the number of invalid packets received on the interface.
Virtual MAC address
Displays the virtual MAC address of the VRRP group.
Virtual IP address
Displays the virtual IP address of the VRRP router to which the interface is connected.
Tracking states... Displays information on the tracked interfaces or objects configured for a VRRP group (track command), including:
UP or DOWN state of the tracked interface or object (Up or Dn).
Interface type and slot/port[/subport] or object number, description, and time since the last change in the state of the tracked object.
Cost subtracted from the VRRP group priority if the state of the tracked interface/object goes DOWN.
Dell#show vrrp ipv6 -----------------TenGigabitEthernet 5/6, IPv6 VRID: 255, Version: 3, Net: fe80::201:e8ff:fe7a:6bb9
Virtual Router Redundancy Protocol (VRRP) 1543
State: Master, Priority: 101, Master: fe80::201:e8ff:fe7a:6bb9 (local) Hold Down: 0 centisec, Preempt: TRUE, AdvInt: 100 centisec Accept Mode: FALSE, Master AdvInt: 100 centisec Adv rcvd: 0, Bad pkts rcvd: 0, Adv sent: 64 Virtual MAC address:
00:00:5e:00:02:ff Virtual IP address:
1::255 fe80::255
vrrp-ipv6-group
Assign an interface to a VRRP group.
Syntax Parameters
vrrp-ipv6-group vrid
vrid
Enter the virtual-router ID number of the VRRP group. The VRID range is from 1 to
255.
Defaults
Not configured.
Command Modes INTERFACE
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
Description
9.8(0.0P5) 9.8(0.0P2) 9.7(0.0) 9.2(1.0) 8.4.2.1
8.4.1.0 8.3.19.0 8.3.7.0 8.3.2.0
Introduced on the S4048-ON. Introduced on the S3048-ON. Introduced on the S6000-ON. Introduced on the Z9500. The range of valid VRID values on the E-Series when VRF microcode is loaded in CAM changed from 1 to 15. Introduced on the E-Series ExaScale, C-Series, and S-Series. Introduced on the S4820T. Introduced on the S4810. Introduced on the E-Series TeraScale.
Usage Information
The VRRP group only becomes active and sends VRRP packets when you configure a link-local virtual IP address. When you delete the virtual address, the VRRP group stops sending VRRP packets.
When you do not load the VRF microcode in the CAM, the VRID for a VRRP group is the same as the VRID number configured with the vrrp-group or vrrp-ipv6-group commands.
When you load the VRF microcode in the CAM, the VRID for a VRRP group equals 16 times the vrrpgroup or vrrp-ipv6-group vrid number plus the ip vrf vrf-id number. For example, if you load the VRF microcode and you configure the VRRP group as 10 in VRF 2, the VRID for the VRRP group is (16 x 10) + 2, or 162. This VRID value is used in the lowest byte of the virtual MAC address of the VRRP group and is also used for VRF routing.
NOTE: For all routers to interoperate, configure the same VRID on neighboring routers (Dell
Networking or non-Dell Networking) in the same VRRP group.
Related Commands
virtual-address -- assigns up to 12 virtual IP addresses per VRRP group.
1544 Virtual Router Redundancy Protocol (VRRP)