D-Link DXS-3600 Series Reference Manual

D-Link DXS-3600 Series Reference Manual

Dxs-3600 series layer 2/3 managed 10gigabit ethernet switch
Hide thumbs Also See for DXS-3600 Series:
Table of Contents

Quick Links

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide
1
Table of Contents
loading

Summary of Contents for D-Link DXS-3600 Series

  • Page 1 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide...
  • Page 2: Table Of Contents

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Table of Contents Introduction ..................................6 Basic CLI Commands ..............................15 802.1X Commands................................ 29 Access Control List (ACL) Commands.......................... 42 Access Management Commands ..........................72 ARP Spoofing Prevention Commands .......................... 91 Authentication, Authorization, and Accounting (AAA) Commands ................
  • Page 3 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide File System Commands ............................495 Filter Database (FDB) Commands ........................... 502 GARP VLAN Registration Protocol (GVRP) Commands ..................515 Gratuitous ARP Commands ............................. 524 IGMP Proxy Commands ............................527 IGMP Snooping Commands ............................
  • Page 4 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Protocol Independent Multicast (PIM) Commands ....................930 Protocol Independent Commands ..........................948 QoS Amendment Data Center Bridge (DCB) Commands ..................964 Quality of Service (QoS) Commands ........................975 Quantized Congestion Notification (QCN) Commands ..................1008 Remote Network MONitoring (RMON) Commands ....................
  • Page 5 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Appendix C - Trap Entries ..............................1319 Appendix D - RADIUS Attributes Assignment ........................1324 Appendix E - IETF RADIUS Attributes Support ........................ 1327...
  • Page 6: Introduction

    Command Line Interface (CLI). The CLI is the primary management interface to the DXS-3600 Series switch, which will be generally be referred to simply as the “switch” within this manual. This manual is written in a way that assumes that you already have the experience and knowledge of Ethernet and modern networking principles for Local Area Networks.
  • Page 7: Command Descriptions

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide NOTE: A note indicates important information that helps you make better use of your device. NOTICE: A notice indicates either potential damage to hardware or loss of data and tells you how to avoid the problem.
  • Page 8 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide • Administrator - Privilege Level 15. This administrator user account level can monitor all system information and change any of the system configuration settings expressed in this configuration guide.
  • Page 9 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Administrator level except that a user at the administrator level can monitor and clear security related settings. Global Configuration Mode / For applying global settings, except for security related settings, on the entire switch.
  • Page 10: Interface Configuration Mode

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide In the following example, the user is logged in as an Administrator in the Privileged EXEC Mode and uses the configure terminal command to access the Global Configuration Mode:...
  • Page 11 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide • The command line console allows us to access the console interface’s Line Configuration Mode. • The command login local tell the switch that users need to enter locally configured login credentials to access the console interface.
  • Page 12: Error Messages

    The Open Slot’s ID is the ID of the module plugged into the open module slot of the switch. The DXS-3600 Series switch doesn’t support any open modules slots, thus this parameters will always by zero for this switch series. Lastly, the Port’s ID is the physical port number of the port being configured.
  • Page 13 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Left Arrow Moves the cursor to the left. Right Arrow Moves the cursor to the right. CTRL+R Toggles the insert text function on and off. When on, text can be inserted in the line and the remainder of the text will be shifted to the right.
  • Page 14 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide #------------------------------------------------------------------------------- DXS-3600-32S TenGigabit Ethernet Switch Configuration Firmware: Build 2.00.012 Copyright(C) 2013 D-Link Corporation. All rights reserved. #------------------------------------------------------------------------------- # STACK stacking config information #Box Prio- Type Exist rity #--- ----------- ----- -----...
  • Page 15: Basic Cli Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Basic CLI Commands 2-1 help This command is used to display a brief description of the help system. Use the help command in any command mode. help Parameters None.
  • Page 16: Command Mode

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide The following example shows how to use the word help to display all the Privileged EXEC Mode commands that begin with the letters “re”. The letters entered before the question mark (?) are reprinted on the next command line to allow the user to continue entering the command.
  • Page 17 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# 2-3 disable This command is used to downgrade to a level lower user level than the privileged level. disable [PRIVILEGE-LEVEL] Parameters PRIVILEGE LEVEL Specifies the privilege level to enter. If not specified, level 1 is used.
  • Page 18 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Usage Guideline This command is used to enter the Global Configuration Mode. Example This example shows how to enter into Global Configuration Mode. Switch# configure terminal Switch(config)# 2-5 login (EXEC) This command is used to configure a login username.
  • Page 19 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters login Specifies that the line login method will be login. local Specifies that the line login method will be local. Default By default, there is no login details configured for the console line.
  • Page 20 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config-line)# login Switch(config-line)# This example shows how to enter the login command. The device will check the validity of the user from the password create command. If correct, the user will have access at the particular level.
  • Page 21 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# logout 2-8 end This command is used to end the current configuration mode and return to the highest mode in the CLI mode hierarchy which is either the User EXEC Mode or the Privileged EXEC Mode.
  • Page 22 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline Use this command to exit the current configuration mode and go back to the last mode. When the user is in the User EXEC Mode or the Privilege EXEC Mode, this command will logout the session.
  • Page 23 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide history Switch# 2-11 password-recovery This command is used to recover the password related settings. Use the password recovery command in the reset configuration mode. password-recovery Parameters None. Default None.
  • Page 24: Show Environment

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Do you want to disable AAA function to let the system do the local authentication? (y/n) [n] y Switch(reset-config)# 2-12 show environment This command is used to display fan, temperature, power availability and status information.
  • Page 25: Show Unit

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# Display Parameters Power status in-operation: The power rectifier is in normal operation. failed: The power rectifier not working normally. empty: The power rectifier is not installed. 2-13 show unit This command is used to display information about system units.
  • Page 26 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 2-14 show cpu utilization This command is used to display the CPU utilization information. show cpu utilization Parameters None. Default None. Command Mode User EXEC or Any Configuration Mode.
  • Page 27 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Level: 1. Usage Guideline This command displays version information about the switch. Example This example shows how to displays version information about the switch. Switch# show version System MAC Address: 00-17-9A-14-6B-10...
  • Page 28 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide threshold. The configured range must fall within the operational range which corresponds to the minimum and maximum allowed temperatures defined for the sensor. When the configured threshold is crossed, a notification will be sent.
  • Page 29: Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 802.1X Commands 3-1 clear dot1x counters This command is used to clear 802.1X counters (diagnostics, statistics and session statistics). clear dot1x counters {all | interface INTERFACE-ID [, | -]} Parameters Specifies to clears 802.1X counters (diagnostics, statistics and session...
  • Page 30 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide both Specifies to enable bidirectional control for the port. Specifies to enable in direction control for the port. Default By default, this option is bidirectional mode. Command Mode Interface Configuration Mode.
  • Page 31 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Example This example shows how to reset the 802.1X parameters on port 1/0/1. Switch# configure terminal Switch(config)# interface eth1/0/1 Switch(config-if)# dot1x default Switch(config-if)# 3-4 dot1x port-control This command is used to control the authorization state of a port. Use the no command to revert to the default setting.
  • Page 32 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to enable the forwarding of the dot1x PDU. Use the no form of the command to disable the forwarding of the dot1x PDU. dot1x forward-pdu...
  • Page 33 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide None. Command Mode Privileged EXEC Mode. Command Default Level Level: 12. Usage Guideline Under the multi-host mode, specify an interface ID to initialize a specific port. Under the multi-auth mode, specify a MAC address to initialize a specific MAC address.
  • Page 34: Dot1X Pae Authenticator

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config-if)# dot1x max-req 3 Switch(config-if)# 3-8 dot1x pae authenticator This command is used to configure a specific port as an IEEE 802.1X port access entity (PAE) authenticator. Use the no form of this command to disable the port as an IEEE 802.1X authenticator.
  • Page 35 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters interface INTERFACE-ID Specifies the port to re-authenticate. Valid interfaces are physical ports. (Optional) Specifies a series of interfaces, or separate a range of interfaces from a previous range. No space is allowed before and after the comma.
  • Page 36 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide The 802.1X authentication function restricts unauthorized hosts from accessing the network. Use the dot1x system-auth-control command to globally enable the 802.1X authentication control. When 802.1X authentication is enabled, the system will authenticate the 802.1X user based on the method list configured by the aaa authentication dot1x default command.
  • Page 37: Show Dot1X

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config-if)# dot1x timeout server-timeout 15 Switch(config-if)# dot1x timeout supp-timeout 15 Switch(config-if)# dot1x timeout tx-period 10 Switch(config-if)# 3-12 show dot1x This command is used to display the IEEE 802.1X global configuration or interface configuration.
  • Page 38: Show Dot1X Diagnostics

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Port Control : Auto Tx Period : 30 sec Supp Timeout : 30 sec Server Timeout : 30 sec Max-req : 2 times Forward PDU : Disabled Switch# 3-13 show dot1x diagnostics This command is used to display IEEE 802.1X diagnostics.
  • Page 39: Show Dot1X Statistics

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide FailsWhileAuthenticating ReauthsWhileAuthenticating EAP-StartsWhileAuthenticating EAP-LogoffsWhileAuthenticating ReauthsWhileAuthenticated EAP-StartsWhileAuthenticated EAP-LogoffsWhileAuthenticated BackendResponses BackendAccessChallenges BackendOtherRequestsToSupplicant BackendNonNakResponsesFromSupplicant BackendAuthSuccesses BackendAuthFails Switch# 3-14 show dot1x statistics This command is used to display IEEE 802.1X statistics. If no interface is specified, information about all interfaces will be displayed.
  • Page 40 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide eth1/0/1 dot1x statistics information: EAPOL Frames RX EAPOL Frames TX EAPOL-Start Frames RX EAPOL-Req/Id Frames TX EAPOL-Logoff Frames RX EAPOL-Req Frames TX EAPOL-Resp/Id Frames RX EAPOL-Resp Frames RX Invalid EAPOL Frames RX...
  • Page 41 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# show dot1x session-statistics interface eth1/0/1 eth6/0/1 session statistic counters are following: SessionOctetsRX SessionOctetsTX SessionFramesRX SessionFramesTX SessionId SessionAuthenticationMethod : Remote Authentication Server SessionTime SessionTerminateCause :SupplicantLogoff SessionUserName Switch#...
  • Page 42: Access Control List (Acl) Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Access Control List (ACL) Commands 4-1 access-list resequence This command is used to re-sequence the sequence number of the access list entries in an access list. Use the no form of the command to reset to the default setting.
  • Page 43 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 20 permit tcp any host 10.100.1.2 30 permit icmp any any Switch(config)# ip extended access-list R&D Switch(config-ip-ext-acl)# 5 permit tcp any 10.30.0.0 255.255.0.0 Switch(config-ip-ext-acl)# exit Switch(config)# show access-list ip R&D Extended IP access list R&D(ID: 3552)5 permit tcp any 10.30.0.0 255.255.0.0...
  • Page 44 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide The command with parameter access-group will enable the ACL hardware counter for all ports that have applied the specified access-list name or number. The number of packets, that match each rule, are counted.
  • Page 45 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config)# vlan access-map vlan-map 20 Switch(config-access-map)# action redirect eth1/0/5 Switch(config-access-map)# end Switch# show vlan access-map VLAN access-map vlan-map 20 match mac address: ext_mac(ID: 6856) action: redirect eth1/0/5 Switch# 4-4 clear acl-hardware-counter This command is used to clear the ACL hardware counter.
  • Page 46 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide expert access-group {NAME | NUMBER} [in | out] no expert access-group [NAME | NUMBER] [in | out] Parameters NAME Specifies the name of the expert access-list to be configured. The name can be up to 32 characters.
  • Page 47 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide NAME Specifies the name of the extended expert access-list to be configured. The name can be up to 32 characters. NUMBER (Optional) Specifies the ID number of expert access list. For extended expert access lists, the value is from 8000 to 9999.
  • Page 48 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide egress direction. Default None. Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline If an IP access group is already configured on the interface, the command applied later will overwrite the previous setting.
  • Page 49 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide None. Command Mode Global Configuration Mode. Command Default Level Level: 12. Usage Guideline The name must be unique among all access lists. The characters used in the name are case sensitive. If the access list number is not specified, the biggest unused number in the range of IP access list numbers will be assigned automatically.
  • Page 50 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Only one access list of the same type can be applied to the same interface; but access lists of different types can be applied to the same interface. The association of an access group with an interface will consume the filtering entry resource in the switch controller.
  • Page 51 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This example shows how to configure an IPv6 extended access list, named ip6-control. Switch# configure terminal Switch(config)# ipv6 access-list extended ip6-control Swtich(config-ipv6-ext-acl)# permit tcp any 2002:f03::1/16 Switch(config-ipv6-ext-acl)# This example shows how to configure an IPv6 standard access list, named ip6-std-control.
  • Page 52 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 4-12 mac access-group This command is used to specify a MAC access list to be applied to an interface. Use the no command to remove the access group control from the interface.
  • Page 53: Match Ip Address

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide mac access-list extended NAME [NUMBER] no mac acces-list extended {NAME | NUMBER} Parameters NAME Specifies the name of the MAC access-list to be configured. The maximum length is 32 characters.
  • Page 54: Match Ipv6 Address

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode VLAN Access-map Sub-map Configuration Mode. Command Default Level Level: 12. Usage Guideline Use this command to associate an IP access list with the configured sub-map. One sub-map can only be associated with one access list (IP access list, IPv6 access list or MAC access list).
  • Page 55 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Use this command to associate an IPv6 access list with the configured sub-map. One sub-map can only be associated with one access list (IP access list, IPv6 access list or MAC access list). IPv6 sub-map just checks IPv6 packets.
  • Page 56 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config-access-map)# end Switch# show vlan access-map VLAN access-map vlan-map 20 match ip address: sp1(ID: 3999) action: forward VLAN access-map vlan-map 30 match mac address: ext_mac(ID: 7999) action: forward Switch# 4-17 permit | deny (expert access-list) This command is used to add a permit or deny entry.
  • Page 57 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide inner INNER-COS (Optional) Specifies the inner priority value. This value must be between 0 and 7. vlan OUTER-VLAN (Optional) Specifies the outer VLAN ID. inner INNER-VLAN (Optional) Specifies the inner VLAN ID.
  • Page 58 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide ICMP-CODE (Optional) Specifies the ICMP message code. The valid number for the message code is from 0 to 255. ICMP-MESSAGE (Optional) Specifies the ICMP message. The following pre-defined parameters are available for selection: beyond-scope, destination-...
  • Page 59 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 4-18 permit | deny (ip access-list) This command is used to add a permit or a deny entry. Use the no form of the command to remove an entry.
  • Page 60 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide af42 - 100100, af43 - 100110, cs1 - 001000, cs2 - 010000, cs3 - 011000, cs4 - 100000, cs5 - 101000, cs6 - 110000, cs7 - 111000, default - 000000, ef – 101110.
  • Page 61 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide sequence number that is 10 greater than the largest sequence number in that access list and is placed at the end of the list. The user can use the command access-list sequence to change the start sequence number and increment number for the specified access list.
  • Page 62 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide [ICMP-TYPE [ICMP-CODE] | ICMP-MESSAGE] [dscp VALUE] [flow-label FLOW-LABEL] [time- range PROFILE-NAME] [SEQUENCE-NUMBER] {permit | deny} {esp | pcp | sctp | protocol-id PROTOCOL-ID} {any | host SRC-IPV6-ADDR | SRC-IPV6-ADDR/PREFIX-LENGTH} {any | host DST-IPV6-ADDR | DST-IPV6-...
  • Page 63 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide multicast-listener-query, multicast-listener-done, multicast-listener- report, nd-na, nd-ns, next-header, no-admin, no-route, packet-too-big, parameter-option, parameter-problem, port-unreachable, reassembly- timeout, redirect, renum-command, renum-result, renum-seq-number, router-advertisement, router-renumbering, router-solicitation, time- exceeded, unreachable. TCP-FLAG (Optional) Specifies the TCP flag fields and the specified TCP header bits called ack (acknowledge), fin (finish), psh (push), rst (reset), syn (synchronize), or urg (urgent).
  • Page 64 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This example shows how to create two entries for an IPv6 standard access-list named “ipv6-std-control”. These entries are: permit IP packets destined to network ff02::0:2/16, and permit IP packets destined to host ff02::1:2.
  • Page 65 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode MAC Access-list Configuration Mode. Command Default Level Level: 12. Usage Guideline If a rule entry is created without a sequence number, a sequence number will be automatically assigned.
  • Page 66 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Usage Guideline If interface is not specified, all of the interfaces that have access list configured will be displayed. Example This example shows how to display access lists that are applied to all of the interfaces.
  • Page 67 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide -------------------------------------- --------------- simple-ip-acl(ID: 3998) ip ext-acl simple-rd-acl(ID: 3999) ip ext-acl rd-mac-acl(ID: 6998) mac ext-acl rd-ip-acl(ID: 1998) ip acl ip6-acl(ID: 12999) ipv6 ext-acl park-arp-acl arp acl Total Entries: 6 Switch# This example shows how to display the IP access list called R&D.
  • Page 68: Show Vlan Filter

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline If no access-map name is specified, all VLAN access-map information will be displayed. If the user enables the ACL hardware counter for an access-map, the counter will be displayed based on each sub- map.
  • Page 69 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide MAP-NAME (Optional) Specifies the name of the VLAN access map. The name can be up to 32 characters. VLAN-ID (Optional) Specifies the VLAN ID. Default None. Command Mode User EXEC or Any Configuration Mode.
  • Page 70 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Default None. Command Mode Global Configuration Mode. Command Default Level Level: 12. Usage Guideline A VLAN access map can contain multiple sub-maps. For each sub-map, one access list (IP access list, IPv6 access list or MAC access list) can be specified and one action can be specified.
  • Page 71 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide A VLAN can only be associated with one VLAN access map. Example This example shows how to apply the VLAN access-map “vlan-map” in VLAN 5. Switch# configure terminal Switch(config)# vlan filter vlan-map vlan-list 5...
  • Page 72: Access Management Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Access Management Commands 5-1 access class This command is used to specify an access list to restrict the access via a line. Use the no form of the command to remove the specified access list check.
  • Page 73 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters Specifies the separator of the login banner message, for example a pound sign (#). The delimiting character is not allowed in the login banner message. MESSAGE Specifies the contents of a login banner which will be displayed before the username and password login prompts.
  • Page 74 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide no prompt Parameters STRING Specifies a string to define the customized prompt. The prompt will be based on the specified characters or the following control characters. The space character in the string is ignored.
  • Page 75: Ip Http Server

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide switch. The password can contain embedded spaces. The password is case-sensitive. This is the default option. The plain-text password maximum length is 32. (The range is 1-32) 7 PASSWORD Specifies the password in the encrypted form based on SHA-I.
  • Page 76 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Usage Guideline This command enables the HTTP server function. The HTTPs access interface is separately controlled by SSL commands. Example This example shows how to enable the HTTP server.
  • Page 77 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide ip http access-class IP-ACL no ip http access-class IP-ACL Parameters IP-ACL Specifies a standard IP access list. The source address field of the entry defines the valid or invalid host.
  • Page 78 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Global Configuration Mode. Command Default Level Level: 12. Usage Guideline This command configures the TCP port number for the HTTP server. Example This example shows how to configure the HTTP TCP port number to 8080.
  • Page 79 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide ip telnet service-port TCP-PORT no ip telnet service-port Parameters TCP-PORT Specifies the TCP port number. TCP ports are numbered between 1 and 65535. The “well-known” TCP port for the TELNET protocol is 23.
  • Page 80 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Use this command to specify the interface IP address source address packets that initiates a Telnet connection. Example This example shows how to configure VLAN 100 as the source interface for Telnet packets to initiate a Telnet connection.
  • Page 81 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters None. Default By default, this option is enabled. Command Mode Global Configuration Mode. Command Default Level Level: 15. Usage Guideline Use this command to configure the backdoor password recovery feature which is open by default.
  • Page 82: Show Terminal

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide The password affected by this command includes the user account password, enable password, and the authentication password. Example This example shows how to enable the encryption of the password before stored in the configuration file.
  • Page 83 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide show users Parameters None. Default None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline This command displays information about the active lines on the switch.
  • Page 84: Terminal Length

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Default Level Level: 1. Usage Guideline This is the Telnet client function and can be used to communicate with another device using the Telnet feature. The Telnet software supports special Telnet commands in the form of Telnet sequences that map generic terminal control functions to operating system-specific functions.
  • Page 85: Terminal Speed

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide The command is used to configure the number of lines displayed on the screen. The terminal length command will only affect the current session. The default terminal length command will set the default value but it doesn’t affect the current session.
  • Page 86 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide terminal speed BPS no terminal speed Parameters Specifies the console rate in bits per second (bps). Default By default, this value is 115200. Command Mode Global Configuration Mode. Command Default Level Level: 12.
  • Page 87 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Example This example shows how to configure the console session to never timeout. Switch# configure terminal Switch(config)# line console Switch(config-line)# session-timeout 0 Switch(config-line)# 5-21 terminal width The command is used to set the number of character columns on the terminal screen for the current session line.
  • Page 88 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Width: 80 columns Default Length: 24 lines Default Width: 80 columns Baud rate: 9600 Switch# terminal width 120 Switch# show terminal Length: 24 lines Width: 120 columns Default Length: 24 lines...
  • Page 89 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Usage Guideline This command creates user accounts with different access levels. When the user login with Level 1, the user will be in the User EXEC Mode. The user needs to further use the enable command to enter the Privileged EXEC Mode.
  • Page 90 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode Line Configuration Mode. Command Default Level Level: 15. Usage Guideline This command is used to create a new user password. Only one password can be used for each type of line.
  • Page 91: Arp Spoofing Prevention Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide ARP Spoofing Prevention Commands 6-1 ip arp spoofing-prevention This command is used to configure an ARP Spoofing Prevention (ASP) entry of the gateway used for preventing ARP poisoning attacks. Use the no form of the command to delete an ARP spoofing prevention entry.
  • Page 92 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config)# ip arp spoofing-prevention 10.254.254.251 00-00-00-11-11-11 interface eth2/0/10 Switch(config)# ip arp spoofing-prevention 10.254.254.251 00-00-00-11-11-11 interface port-channel 3 Switch(config)# 6-2 show ip arp spoofing-prevention This command is used to display the configuration of ARP spoofing prevention.
  • Page 93: Authentication, Authorization, And Accounting (Aaa) Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Authentication, Authorization, and Accounting (AAA) Commands 7-1 aaa accounting commands This command is used to configure the accounting method list used for all commands at the specified privilege level. Use the no command to remove an accounting method list.
  • Page 94 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to configure the method list used for EXEC accounting for a specific line. Use the no form of the command to disable the accounting EXEC.
  • Page 95 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters network Specifies to perform accounting of network related service requests. start-stop Specifies to send accounting messages at both the start time and the end time of access. Users are allowed of access the network regardless of whether the start accounting message enables the accounting successfully.
  • Page 96 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide system Specifies to perform accounting for system-level events. start-stop Specifies to send accounting messages at both the start time and the end time of access. Users are allowed to access the network regardless of whether the start accounting message enables the accounting successfully.
  • Page 97 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide methods. The following are keywords that can be used to specify a method. enable – Specifies to use the local enable password for authentication. group radius – Specifies to use the servers defined by the RADIUS server host command.
  • Page 98 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide group GROUP-NAME – Specifies to use the server groups defined by the AAA group server. none - Normally, the method is listed as the last method. The user will pass authentication if it is not denied by previous method authentication.
  • Page 99 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide pass authentication if it is not denied by previous method’s authentication. Default No AAA authentication method list is configured. Command Mode Global Configuration Mode. Command Default Level Level: 15.
  • Page 100 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide group radius – Specifies to use the servers defined by the RADIUS server host command. group GROUP-NAME – Specifies to use the server groups defined by the AAA group server.
  • Page 101 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide No AAA authentication method is configured. Command Mode Global Configuration Mode. Command Default Level Level: 15. Usage Guideline Use this command to configure the default authentication method list for Web authentication. Initially, the default method list is not configured.
  • Page 102 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config-sg-radius)# server 172.19.10.100 Switch(config-sg-radius)# exit Switch(config)# 7-11 aaa group server tacacs+ This command is used to enter the TACACS+ group server configuration mode to associate server hosts with the group. Use the no form of the command to remove a TACACS+ server group...
  • Page 103 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters None. Default By default, this feature is disabled. Command Mode Global Configuration Mode. Command Default Level Level: 15. Usage Guideline The user should use the aaa new-model command to enable AAA before the authentication and accounting via the AAA method lists take effect.
  • Page 104: Accounting Exec

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide For accounting via the method list to take effect, enable AAA first by using the aaa new-model command. Create the method list first by using the aaa accounting commands command. If the method list does not exist, the command does not take effect.
  • Page 105 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 7-15 clear aaa counters servers This command is used to clear the authentication and accounting (AAA) server statistic counters. clear aaa counters servers {all | radius {IP-ADDRESS| IPV6-ADDRESS | all} | tacacs {IP-...
  • Page 106 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to specify an AAA authentication method list for the authentication of the HTTP server users. Use the no form of the command to reset to use the default method list.
  • Page 107 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode Global Configuration Mode. Command Default Level Level: 15. Usage Guideline For accounting via the method list to take effect, enable AAA first by using the aaa new-model command.
  • Page 108 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This example shows how to set VLAN100, whose IP address will be used as the source IP address, for sending RADIUS packets. Switch#configure terminal Switch(config)# ip radius source-interface vlan100...
  • Page 109 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide ip vrf forwarding VRF-NAME no ip vrf forwarding Parameters VRF-NAME Specifies the name of the Virtual Routing and Forwarding (VRF) entry. Default Server groups use the global routing table.
  • Page 110 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode Global Configuration Mode or Server Group Configuration Mode. Command Default Level Level: 15. Usage Guideline This command is used to specify the interface whose IPv6 address will be used as the source IPv6 address for sending RADIUS packets.
  • Page 111 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This example shows how to set the local console line to use the method list “CONSOLE-LINE-METHOD” for login authentication. Switch#configure terminal Switch(config)# aaa authentication login CONSOLE-LINE-METHOD group group2 local...
  • Page 112 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide radius-server host {IP-ADDRESS | IPV6-ADDRESS} [auth-port PORT] [acct-port PORT] [timeout SECONDS] [retransmit COUNT] key [0 | 7] KEY-STRING no radius-server host {IP-ADDRESS | IPV6-ADDRESS} Parameters IP-ADDRESS Specifies the IP address of the RADIUS server.
  • Page 113 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to associate a RADIUS server host with a RADIUS server group. Use the no form of the command to remove a server host from the server group.
  • Page 114: Show Aaa

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide IP-ADDRESS Specifies the IPv4 address of the authentication server. Default By default, no host is in the server group. Command Mode TACACS+ Group Server Configuration Mode. Command Default Level Level: 15.
  • Page 115 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Example This example shows how to display the AAA global state. Switch# show aaa AAA is enabled. Switch# 7-28 tacacs-server host This command is used to create a TACACS+ server host. Use the no form of this command to remove a server host.
  • Page 116: Show Radius Statistics

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 7-29 show radius statistics This command is used to display RADIUS statistics for accounting and authentication packets. show radius statistics Parameters None. Default None. Command Mode Privilege User EXEC or Any Configuration Mode.
  • Page 117 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Access Requests The number of RADIUS Access-Request packets sent to this server. This does not include retransmissions. Access Accepts The number of RADIUS Access-Accept packets (valid or invalid) received from this server.
  • Page 118 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Privilege EXEC Mode or and configuration mode. Command Default Level Level: 1. Usage Guideline Use this command to display statistics counters related to servers. Example This example shows how to display the server related statistics counters.
  • Page 119: Basic Ipv4 Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Basic IPv4 Commands 8-1 arp This command is used to add a static entry in the Address Resolution Protocol (ARP) cache. Use the no command to remove a static entry in the ARP cache.
  • Page 120 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide activity within the timeout period. The valid values are from 0 to 65535. Default The default value is 240 minutes. Command Mode Interface Configuration Mode. Command Default Level Level: 12.
  • Page 121 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This example shows how to remove all dynamic entries from the ARP cache. Switch# clear arp-cache all Switch# 8-4 ip address This command is used to set a primary or secondary IPv4 address for an interface, or acquire an IP address on an interface from the DHCP.
  • Page 122 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 8-5 ip proxy-arp This command is used to enable the proxy ARP option for an interface. Use the no command to revert to the default setting. ip proxy-arp no ip proxy-arp Parameters None.
  • Page 123: Show Arp

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Default Level Level: 12,15. Usage Guideline Use this command to enable the local proxy ARP function on an interface. This command is used in the primary VLAN of a private VLAN domain to enable routing of packets among secondary VLANs or isolated ports within the domain.
  • Page 124 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide show arp [vrf VRF-NAME] [ARP-TYPE] [IP-ADDRESS [MASK]] [INTERFACE-ID] [HARDWARE- ADDRESS] Parameters VRF-NAME (Optional) Specifies the VRF instance name. ARP-TYPE (Optional) Specifies the ARP type. dynamic – Specifies to display only dynamic ARP entries.
  • Page 125 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters INTERFACE-ID Specifies the interface ID. Default None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline This command is used to display the configured ARP aging time.
  • Page 126 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide If no parameter is specified, information for all the interfaces will be displayed. Example This example shows how to display the brief information of the IP interface. Switch# show ip interface brief...
  • Page 127 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters None. Default By default, this option is disabled. Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline Use this command to configure the IP directed broadcast state for an interface. This command does not affect unicast routing of the IP directed broadcast, forwarding of the IP directed broadcast packet whose destination networks are not subnets local to the switch.
  • Page 128: Basic Ipv6 Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Basic IPv6 Commands 9-1 clear ipv6 neighbors This command is used to clear IPv6 neighbor cache dynamic entries. clear ipv6 neighbors {all | INTERFACE-ID} Parameters Specifies to clear the dynamic neighbor cache entries associated with all interfaces.
  • Page 129 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide PREFIX-NAME Specifies the name of the prefix with a maximum of 32 characters. The syntax allows characters for general strings, but does not allow spaces. SUB-BITS Specifies the sub-prefix part and host part of the IPv6 address.
  • Page 130: Ipv6 Address Autoconfig

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config-if)# no ipv6 address dhcp-prefix 0:0:0:2::3/64 9-3 ipv6 address autoconfig This command is used to enable the automatic configuration of the IPv6 address using the stateless auto- configuration. Use the no form of the command to delete an IPv6 address formed by auto-configuration.
  • Page 131 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide ipv6 address IPV6-PREFIX/PREFIX-LENGTH eui-64 no ipv6 address IPV6-PREFIX/PREFIX-LENGTH eui-64 Parameters IPV6-PREFIX Specifies the IPv6 prefix part for the configured IPv6 address. PREFIX-LENGTH Specifies the length of the prefix. The prefix of the IPv6 address is also a local subnet on the interface.
  • Page 132 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline Use this command to configure the interface to use DHCPv6 to get an IPv6 address. When the no ipv6 address dhcp command is used, the previous DHCPv6 obtained IP address will be removed.
  • Page 133: Ipv6 Mtu

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config-if)# 9-7 ipv6 hop-limit This command is used to configure the IPv6 hop limit on the switch. Use the no form of this command to revert to the default setting.
  • Page 134 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Default By default, the IPv6 MTU value is 1500 bytes. Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline The command is available for Layer 3 capable interface configuration. Use this command to configure the MTU to be advertised in RA messages.
  • Page 135: Ipv6 Nd Prefix

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide When the neighbor host receives the RA which has flag turned on, the host should use a stateful configuration protocol to obtain IPv6 addresses. Example This example shows how to turn on the IPv6 management configure flag in RA advertised on VLAN 1.
  • Page 136: Ipv6 Nd Ra Interval

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide no ipv6 nd prefix IPV6-PREFIX/PREFIX-LENGTH Parameters IPV6-PREFIX/PREFIX- Specifies the IPv6 prefix to be created or advertised in the RA on the LENGTH interface. VALID-LIFETIME (Optional) Specifies the valid lifetime in seconds. This value must be between 0 and 4294967295.
  • Page 137 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to configure the IPv6 RA interval for an interface. Use the no form of the command to reset the RA interval to the default setting.
  • Page 138 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline The lifetime value in RA instructs the received host the lifetime value for taking the router as the default router.
  • Page 139 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 9-15 ipv6 nd reachable-time This command is used to configure the reachable time used in the ND protocol. Use the no form of the command to revert to the default setting.
  • Page 140 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide in milliseconds. This value must be between 0 and 3600000 milliseconds, in multiples of 1000. Default The default value advertised in RA is 0. The default value used by the router is 1000 (one second).
  • Page 141 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Use this command to create a static IPv6 neighbor cache entry on an interface. The static entry will be either in the REACHABLE state, if the interface is UP, or in the INCOMPLETE state if the interface is down.
  • Page 142: Show Ipv6 Interface

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 9-19 show ipv6 interface This command is used to display IPv6 interface information. show ipv6 interface [INTERFACE-ID] [brief] Parameters INTERFACE-ID (Optional) Specifies the interface for display. brief (Optional) Specifies to display brief information.
  • Page 143: Show Ipv6 Neighbors

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide FE80::201:1FF:FE02:304 vlan2 is up, Link status is down FE80::201:1FF:FE02:305 200::2 vlan3 is up, Link status is down FE80::201:1FF:FE02:306 Total Entries: 3 Switch# 9-20 show ipv6 neighbors This command is used to display IPv6 neighbor information.
  • Page 144 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Type D – Dynamic learning entry. S – Static neighbor entry. State INCMP (Incomplete) - Address resolution is being performed on the entry, but the corresponding neighbor advertisement message has not yet been received.
  • Page 145: Border Gateway Protocol (Bgp) Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 10. Border Gateway Protocol (BGP) Commands 10-1 address-family ipv4 (BGP) This command is used to enter the address family configuration mode to configure the setting specific to the address family. Use the no form of the command to revert the setting of the specified address family...
  • Page 146 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 10-2 address-family vpnv4 This command is used to enter the IPv4 VPN address family mode. Use the no form of this command to delete the configuration of the VPNv4 address family.
  • Page 147 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide NETWORK-NUMBER/ Specifies the network number and the length of the network that BGP SUBNET-LENGTH will aggregate. The format of NETWORK-NUMBER/SUBNET- LENGTH can be 10.9.18.2/8. summary-only (Optional) Specifies to filter those routes that are more specific than the aggregated route.
  • Page 148 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Default By default, this option is disabled. Command Mode Router Configuration Mode. Command Default Level Level: 12. Usage Guideline This command is used to enable the checking of next hop of the BGP aggregated routes. Only the routes with the same next hop attribute can be aggregated if the BGP aggregate next hop check is enabled.
  • Page 149 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This example shows how to apply the always-compare-med option to enable the comparison of the Multi Exit Discriminator (MED) for paths from neighbors in different autonomous systems. Switch# configure terminal...
  • Page 150 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 10-7 bgp bestpath compare-confed-aspath This command is used to configure a BGP routing process to compare the confederation AS path length of the routes received. To return the BGP routing process to the default operation, use the no form of this command.
  • Page 151 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode Router Configuration Mode. Command Default Level Level: 12. Usage Guideline By default, the BGP router does not consider router ID of the routes when comparing paths that have identical comparing factors.
  • Page 152 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 10-10 bgp bestpath med missing-as-worst This command is used to configure the router to assign a infinite value the route if missing MED. Use the no form of the command to restore the default setting.
  • Page 153 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode Router Configuration Mode. Command Default Level Level: 12. Usage Guideline In a large scale BGP network, route reflection is a mechanism used to reduce the needs of fully mesh of iBGP sessions.
  • Page 154: Bgp Confederation Identifier

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide In a large scale BGP network, route reflection is a mechanism used to reduce the needs of fully mesh of iBGP sessions. With route reflection, an autonomous system can be partitioned into a number of clusters;...
  • Page 155: Bgp Confederation Peers

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Use the bgp confederation identifier command the specify the confederation ID, and use the bgp confederation peer command to configure the neighbor session for connection to another sub-AS within the same confederation.
  • Page 156 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config-router)# bgp confederation peers 21,22,23 10-15 bgp dampening This command is used to configure the route dampening function. Use the no form of the command to restore the default setting.
  • Page 157 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Supposed that half-life is configured as 15 min, reuse is 800, and suppress is 1500. When a route flaps (from up to down), 1000 is added to the penalty of the route. Since the penalty is smaller than the suppress value, the route works normally.
  • Page 158 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config)# router bgp 65534 Switch(config-router)# no bgp default ipv4-unicast 10-17 bgp default local-preference This command is used to specify the default local preference value for the router. Use the no command to revert to the setting to default.
  • Page 159 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters None. Default By default, this option is disabled. Command Mode Router Configuration Mode. Command Default Level Level: 12. Usage Guideline All routers in a local AS must have the same setting of this command. When the bgp always-compare- med command is enabled, the Multi Exit Discriminator (MED) will be compared for paths from neighbors in different autonomous systems.
  • Page 160 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Use this command to enforce that the routes received from an eBGP peer must have the peer’s AS number as the first AS in the AS path. This feature is used to avoid the local router from spoofing by a misconfigured peer.
  • Page 161 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide bgp graceful-restart [restart-time RESTART-TIME | stalepath-time STALEPATH-TIME] no bgp graceful-restart Parameters restart-time RESTART-TIME Specifies the maximum time needed for neighbors to restart, in seconds. The value is from 1 to 3600.
  • Page 162 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Default A default router-ID will be assigned. If loopback interfaces are not configured, the router ID is set to the highest IP address of interfaces. If loopback interfaces are configured, the router ID is set to the highest IP address of loopback interfaces.
  • Page 163 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config)# router bgp 100 Switch(config-router)# bgp scan-time 30 Switch(config-router)# 10-24 clear ip bgp This command is used to reset Border Gateway Protocol (BGP) connections using hard or soft reconfiguration.
  • Page 164: Clear Ip Bgp Dampening

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide to refresh the routing entries in the neighbor peer. If a soft reset is applied to inbound session, the session will not be terminated but the local inbound routing table will be cleared and need to be rebuilt.
  • Page 165 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide IP-ADDRESS (Optional) Specifies the routing prefix to clear the dampening information. MASK-LENGTH (Optional) Specifies the mask length for the IP address. Default None. Command Mode Privileged EXEC Mode. Command Default Level Level: 12.
  • Page 166 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide soft (Optional) Specifies to issue a soft reset without tearing down the session. Default None. Command Mode Privileged EXEC Mode. Command Default Level Level: 12. Usage Guideline This command is used to initiate a hard reset or a soft reset for external BGP sessions.
  • Page 167 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# clear ip bgp flap-statistics Switch# 10-28 distance bgp This command is used to configure the distance for BGP routes. Use the no form of the command to restore to the default setting.
  • Page 168 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide ip as-path access-list ACCESS-LIST-NAME [{permit | deny} REGEXP] no ip as-path access-list ACCESS-LIST-NAME Parameters ACCESS-LIST-NAME Specifies the name of an AS path access list. The maximum length is 16 bytes permit Specifies that routes that match the rule entry are permitted.
  • Page 169 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide no ip community-list expanded COMMUNITY-LIST-NAME Parameters standard Specifies to configure a named standard community list. expanded Specifies to configure a named expanded community list. COMMUNITY-LIST-NAME Specifies the community list name. The maximum length is 16 bytes.
  • Page 170 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This example shows how to configure a rule entry for a community list “mycommlist” that permits routes that from network 10 in autonomous system 50000. Switch# configure terminal Switch(config)# ip community-list standard mycommlist permit 50000:10...
  • Page 171 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide The extended community attribute is used for implementing policy routing. It is an optional, transitive attribute and facilitates transfer of local policies through different autonomous systems. All the names of the standard extcommunity list and expended extcommunity list must not be the same.
  • Page 172 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide list matches the route, then no further check will be done against the remaining entries in the access list. If the matched entry is a permit entry, then the AS path access list is matched. If the matched entry is a deny entry, then the AS path access list is not matched.
  • Page 173: Neighbor Activate

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide When exact is not specified, to match a community list rule entry, the communities specified in the rule entry must be a subset of the communities specified in the community string of the route.
  • Page 174 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# configure terminal Switch(config)# router bgp 65100 Switch(config-router)# address-family ipv4 unicast Switch(config-router-af)# neighbor 10.4.4.4 activate 10-35 neighbor advertisement-interval This command is used to configure the minimum interval between two BGP routing UPDATE messages.
  • Page 175 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide no neighbor {IP-ADDRESS | PEER-GROUP-NAME} allowas-in Parameters IP-ADDRESS Specifies the IP address of a BGP peer. PEER-GROUP-NAME Specifies the name of a Border Gateway Protocol (BGP) peer group. The maximum length is 16 characters.
  • Page 176 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide IP-ADDRESS Specifies the IP address of the neighbor peer. PEER-GROUP-NAME Specifies the name of the BGP peer group. SECONDS Specifies the minimum interval, in seconds, between the sending of AS origination routing update messages.
  • Page 177 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide The command is used to prevent routing loops between routers within a VPN. In the VPN, the most typical application lies in that the two CE ends have the same AS number. Normally, these two CE routers can’t receive the other from the other party, because the BGP protocol will not...
  • Page 178 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config)# router bgp 65100 Switch(config-router)# address-family ipv4 unicast Switch(config-router)# neighbor 10.10.10.10 capability graceful-restart Switch(config-router)# 10-40 neighbor capability orf prefix-list This command is used to enable the advertisement of the ORF to a neighbor. Use the no form of the command to disable ORF.
  • Page 179 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config-router)# neighbor 10.20.40.10 remote-as 65200 Switch(config-router)# neighbor 10.20.40.10 prefix-list CUSTOMER in Switch(config-router)# neighbor 10.20.40.10 capability orf prefix-list send Router B: Switch# configure terminal Switch(config)# router bgp 65200 Switch(config-router)# neighbor 10.20.30.5 remote-as 65100 Switch(config-router)# neighbor 10.20.30.5 capability orf prefix-list receive...
  • Page 180: Neighbor Description

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config)# router bgp 109 Switch(config-router)# network 172.16.0.0 Switch(config-router)# neighbor 172.16.2.3 remote-as 200 Switch(config-router)# neighbor 172.16.2.3 default-originate 10-42 neighbor description This command is used to associate a description with a BGP neighbor. Use the no command to remove...
  • Page 181 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters IP-ADDRESS Specifies the IP address of the neighbor peer. PEER-GROUP-NAME Specifies the name of the BGP peer group. (Optional) Specifies the TTL value used for the BGP session.
  • Page 182 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide By default, no filter is used. Command Mode Router Configuration Mode. Address Family Configuration Mode (IPv4 unicast, VPNv4 and VRF). Command Default Level Level: 12. Usage Guideline Use this command to enable AS path filtering based on a specified AS path access list. Use the ip as- path access-list command to create an AS path access list.
  • Page 183 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide terminated when the threshold is exceeded. Default By default, the maximum number of prefix value is 16000. The threshold value is 75 percent. Command Mode Router Configuration Mode. Address Family Configuration Mode (IPv4 unicast, VPNv4 and VRF).
  • Page 184 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Address Family Configuration Mode (IPv4 unicast, VPNv4 and VRF). Command Default Level Level: 12. Usage Guideline To advertise a route to an eBGP peer, the BGP router will use the original next hop of the advertised route as the next hop if the original next hop is in the same subnet as the router’s advertising interface.
  • Page 185 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide When using this command, the BGP connection will be torn down. After a while, the connection will be rebuilt if both the BGP speakers are configured with the same password.
  • Page 186 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide neighbor IP-ADDRESS peer-group PEER-GROUP-NAME no neighbor IP-ADDRESS peer-group PEER-GROUP-NAME Parameters IP-ADDRESS Specifies the IP address of the neighbor peer. PEER-GROUP-NAME Specifies the name of the BGP peer group. Default None.
  • Page 187 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to prevent the distribution of the Border Gateway Protocol (BGP) neighbor information as specified in a prefix list, a Connectionless Network Service (CLNS) filter expression, or a CLNS filter set.
  • Page 188 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters IP-ADDRESS Specifies the IP address of the neighbor. PEER-GROUP-NAME Specifies the name of a BGP peer group. AS-NUMBER Specifies the number of the autonomous system to which the neighbor belongs.
  • Page 189 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide IP-ADDRESS Specifies the IP address of the neighbor. PEER-GROUP-NAME Specifies the name of a BGP peer group. Default This command is disabled by default. Command Mode Router Configuration Mode.
  • Page 190 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Specifies that the route map is applied to the paths advertised to the neighbor. Default None. Command Mode Router Configuration Mode. Address Family Configuration (IPv4 unicast, VPNv4 and VRF) Mode.
  • Page 191 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Default Level Level: 12. Usage Guideline If a BGP peer group is specified for the command, all the members of the peer group will inherit the setting configured with this command.
  • Page 192: Neighbor Shutdown

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Default Level Level: 12. Usage Guideline The neighbor send-community command can be specified per address family. When specified in the router configuration mode, the route map is applied to the IPv4 unicast address family only. If no community value is associated with a path, by default, the Internet community is associated with the path.
  • Page 193 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 10-57 neighbor soft-reconfiguration This command is used to enable the storing of the route information update from the neighbor peer. Use the no form of the command to disable the storing of the route update information.
  • Page 194 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters IP-ADDRESS Specifies the address of the peer. PEER-GROUP-NAME Specifies the name of the peer group, SOO-VALUE Specifies that the Site-of-Origin attribute will be encoded as a Route Origin Extended Community. There are two different types of...
  • Page 195: Neighbor Timers

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters IP-ADDRESS Specifies the IP address of the neighbor. PEER-GROUP-NAME Specifies the name of a BGP peer group. SECONDS Specifies the minimum interval value that BGP tries another TCP connection.
  • Page 196 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide HOLDTIME: 180 seconds. Command Mode Router Configuration Mode. Address Family Configuration (VRF) Mode. Command Default Level Level: 12. Usage Guideline The timers configured for a specific neighbor or peer group override the timers configured for all BGP neighbors using the timers bgp command.
  • Page 197 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This example shows how to show the routes specified by a route map named internal-map being unsuppressed for neighbor 172.16.10.10. Switch# configure terminal Switch(config)# router bgp 65100 Switch(config-router)# address-family ipv4 Switch(config-router-af)# neighbor 172.16.10.10 unsuppress-map internal-map...
  • Page 198: Neighbor Weight

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 10-63 neighbor weight This command is used to specify the weight assigned to the routes that are received from a specific neighbor. Use the no form of this command to revert to the default setting.
  • Page 199 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters NETWORK-NUMBER Specifies the network number that BGP will advertise. SUBNET-LENGTH Specifies the length of the network or sub-network. route-map MAP-NAME (Optional) Specifies the identifier of a route map. The configured network must be permitted by the specified route map to be advertised.
  • Page 200 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide external routes to BGP. internal - Specifies to redistribute only the OSPF AS-internal routes. external - Specifies to redistribute only the OSPF AS-external routes, including type-1 and type-2 routes.
  • Page 201 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide AS-NUMBER Specifies the number of an autonomous system that identifies the router to other BGP routers. This value must be between 1 and 4294967295. Default No BGP routing process is enabled by default.
  • Page 202 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Route-map Configuration Mode. Command Default Level Level: 12. Usage Guideline The AS path length is an important factor, that affects the best path selection. When the as-path is not modified by the route map the local AS is prepended to the existing AS path list.
  • Page 203: Set Dampening

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Level: 12. Usage Guideline BGP community exchange is not enabled by default. It is enabled on a per-neighbor basis with the neighbor send-community command. The community will be sent out in the BGP packet only when set community is specified in the route map, and if all match criteria are met, all set actions are performed.
  • Page 204: Set Metric

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode Route-map Configuration Mode. Command Default Level Level: 12. Usage Guideline Use this command to modify the dampening parameters of routes when match conditions are met. Example This example shows how to add a set command to modify the dampening parameters of route 120.1.1.0/24.
  • Page 205 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide To set the MED for a route advertised to a remote eBGP peer, specify the set metric command in a route map and apply the route map to the corresponding peer session. You can verify your settings by entering the show route-map command.
  • Page 206 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 10-72 set origin This command is used to set the BGP origin code. To delete an entry, use the no form of this command. set origin {igp | egp | incomplete}...
  • Page 207 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide no set weight Parameters NUMBER Specifies the weight for the matched routes. This value must be between 0 and 65535. Default There is no set weight statement. Command Mode Route-map Configuration Mode.
  • Page 208 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Default Level Level: 1. Usage Guideline Use this command to display the configured AS-path access-lists. If the access list name is not specified, all as-path access-lists are displayed.
  • Page 209 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline This command is used to display the routing entry information in BGP routing table. If a specific network is specified for the command, all the paths able to reach the network will be displayed.
  • Page 210: Show Ip Bgp Aggregate

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Network Next Hop Metric LocPrf Weight Path *> 89.1.1.0/24 10.1.1.4 *> 89.1.2.0/24 10.1.1.4 *> 89.1.3.0/24 10.1.1.4 *> 89.1.4.0/24 10.1.1.4 *> 89.1.5.0/24 10.1.1.4 *> 99.1.1.0/24 10.1.1.4 32768 Switch(config)# Display Parameters BGP table version The version number of the table.
  • Page 211 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide vpnv4 vrf VRF-NAME (Optional) Specifies a VRF name. The length of the VRF name is 12 characters. NETWORK-ADDRESS (Optional) Specifies the network address and the sub-network mask. Default None.
  • Page 212 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide (Optional) Specifies to display all the VPNv4 routing entries. rd RD-VALUE (Optional) Specifies to display the VPNv4 routing entries that match the specified RD. vrf VRF-NAME (Optional) Specifies to display the VPNv4 routing entries associated with the VRF.
  • Page 213 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide ? - Origin of the path is not clear. Network The IP address of a network. Next Hop The IP address of the next router to forward the packet.
  • Page 214 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Default Level Level: 1. Usage Guideline Use this command to display the routes that match the specified community string. If no option is specified for the command, the information for IPv4 unicast address family will be displayed.
  • Page 215 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 10-79 show ip bgp confederation This command is used to display the confederation configuration of BGP. show ip bgp confederation Parameters None. Default None. Command Mode User EXEC or Any Configuration Mode.
  • Page 216 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide vpnv4 (Optional) Specifies to display the VPNv4 address family routing entries. unicast Specifies to display the unicast routing entries. (Optional) Specifies to display all the VPNv4 routing entries. rd RD-VALUE (Optional) Specifies to display the VPNv4 routing entries that match the specified RD.
  • Page 217 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide BGP table version The version number of the table. This number is incremented whenever the table changes. local router ID The IP address of the router. Status codes The status of the path. It can be one of the following values: s - The path is suppressed.
  • Page 218 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide If no option is specified for the command, the information for IPv4 unicast address family will be displayed. Example This example shows how to display the dampened paths. Switch# show ip bgp dampening dampened-paths BGP table version is 13, local router ID is 10.1.1.99...
  • Page 219 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide ipv4 (Optional) Specifies to display the IPv4 address family routing entries. vpnv4 (Optional) Specifies to display the VPNv4 address family routing entries. unicast Specifies to display the unicast routing entries.
  • Page 220: Show Ip Bgp Dampening Parameters

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide ? - Origin of the path is not clear. Network The IP address of a network entity. From The IP address of the peer that advertised this path. Flaps The number of times the route has flapped.
  • Page 221 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide MAX Suppress Time : 60 mins Unreachable route's Half-life : 15 mins Switch# 10-84 show ip bgp filter-list This command is used to display routes that conform to a specified AS path access list.
  • Page 222 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 172.16.0.0 172.16.72.30 172.16.1.0 172.16.72.30 172.16.11.0 172.16.72.30 172.16.14.0 172.16.72.30 172.16.15.0 172.16.72.30 172.16.16.0 172.16.72.30 172.16.17.0 172.16.72.30 172.16.18.0 172.16.72.30 172.16.19.0 172.16.72.30 172.16.24.0 172.16.72.30 172.16.29.0 172.16.72.30 172.16.30.0 172.16.72.30 172.16.33.0 172.16.72.30 172.16.35.0 172.16.72.30 172.16.36.0 172.16.72.30...
  • Page 223 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to display the routes which have the same prefix and different AS path origins. show ip bgp [ipv4 unicast | vpnv4 {all | rd RD-VALUE | vrf VRF-NAME}] inconsistent-as...
  • Page 224: Show Ip Bgp Neighbors

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide show ip bgp vpnv4 {all | rd RD-VALUE | vrf VRF-NAME} labels Parameters Specifies to display all the VPNv4 routes labels. rd RD-VALUE Specifies to display the VPNv4 routes labels that match the specified vrf VRF-NAME Specifies to display the VPNv4 routes labels associated with the VRF.
  • Page 225 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide show ip bgp [ipv4 unicast | vpnv4 {all | rd RD-VALUE | vrf VRF-NAME}] neighbors [IP-ADDRESS [advertised-routes | received prefix-filter | received-routes | routes]]] Parameters ipv4 (Optional) Specifies the IPv4 address family. The type of address family determines the routing table that is displayed.
  • Page 226 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Last read: 00:00:08, last write: 00:00:08, hold time: 90, keepalive interval: 30 Configured hold time: 180, keepalive interval: 60 Neighbor capabilities: Route refresh: advertised and received (old and new)
  • Page 227: Show Ip Bgp Network

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Index 2, Offset 0, Mask 0x4 my peer-group member 5 accepted prefixes, maximum limit 12000 Threshold for warning message 75% 1 announced prefixes Connections established 1; dropped 0 Local host: 10.90.90.90, Local port: 1025 Foreign host: 10.1.1.4, Foreign port: 179...
  • Page 228: Show Ip Bgp Parameters

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide specified, all IP addresses will be displayed. vpnv4 vrf VRF-NAME (Optional) Specifies a VRF name. The length of the VRF name is 12 characters. Default None. Command Mode User EXEC or Any Configuration Mode.
  • Page 229 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Default Level Level: 1. Usage Guideline Use this command to display the parameters of BGP. Example This example shows how to display the parameters of BGP. Switch# show ip bgp parameters...
  • Page 230 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide PEER-GROUP-NAME Specifies the name of a Border Gateway Protocol (BGP) peer group. The maximum length is 16 characters. Default None. Command Mode EXEC Mode or any configuration. Command Default Level Level: 1.
  • Page 231: Show Ip Bgp Redistribute

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide with the VRF. REGEXP Specifies to display routes matching the AS path regular expression. The maximum length is 80 characters. Default None. Command Mode EXEC Mode or any configuration.
  • Page 232: Show Ip Bgp Reflection

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode EXEC Mode or any configuration. Command Default Level Level: 1. Usage Guideline Use this command to check the route redistribution configuration about BGP. If no option is specified for the command, the route redistribution information for IPv4 unicast address family is displayed.
  • Page 233 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline Use this command to display what have been already configured to the local BGP about the route reflection.
  • Page 234 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline Use this command to display the BGP information by summary. If no option is specified for the command, the BGP summary information for IPv4 unicast address family is displayed.
  • Page 235 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide COMMUNITY-LIST-NAME (Optional) Specifies the community list name. The community list name can be standard or expanded. Default None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1.
  • Page 236 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Use this command to display a specific extended community list or all configured extended community lists. Example This example shows how to display all of the configured IP extended community lists.
  • Page 237 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 10-98 synchronization This command is used to enable the advertisement of a route to an external neighbor by the BGP speaker unless the route is a local router or the BGP speaker has learned the route by IGP. Use the no form of this command to disable the option.
  • Page 238 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Default KEEP-ALIVE: 60 seconds. HOLD-TIME: 180 seconds. Command Mode Router Configuration Mode. Command Default Level Level: 12. Usage Guideline The suggested default value for the keep-alive value is a third of the hold-time value. The user can configure the timers for all BGP neighbors using the timers bgp command or configure the timers for a specific neighbor or peer group using the neighbor timers command.
  • Page 239: Debug Ip Bgp Packet

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# debug ip bgp Switch# 10-101 debug ip bgp fsm-event This command is used to turn on the BGP FSM event debug switch option. Use the no form of this command to turn off the BGP FSM event debug switch option.
  • Page 240 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide no debug ip bgp packet {receive | send} Parameters receive Specifies to turn on the BGP received packet debug switch option. send Specifies to turn on the BGP sent packet debug switch option.
  • Page 241 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode Privileged EXEC Mode. Command Default Level Level: 15. Usage Guideline Use this command to turn on the BGP route map debug switch option. When the route map matches the BGP route information, debug information will be printed if the BGP debug function is turned on.
  • Page 242: Debug Ip Bgp Show Global

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Prefix-List: ORF Apply Sent route, Neighbor <100.1.1.4, AFI/SAFI 1/1>, Prefix:<88.1.1.0/24> Prefix-List:, Apply Received route, Neighbor <100.1.1.2, AFI/SAFI 1/1>, Prefix:<88.1.2.0/24> Prefix-List: ORF Apply Sent route, Neighbor <100.1.1.4, AFI/SAFI 1/1>, Prefix:<67.1.1.0/24>...
  • Page 243: Debug Ip Bgp Show Neighbors

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 1.1.1.2 group1 Aggregate Next_Hop_Check : Disabled Default Local PREF : 100 Default HoldTime : 180 Default Keepalive : 60 Scan Time : 60 BGP Active Flags: BGP_CFLAG_COMPARE_ROUTER_ID BGP_CFLAG_ASPATH_IGNORE BGP Active AF-Flags :...
  • Page 244 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Session Activity : Enabled Peer Group : my Remote AS : 1 Local AS : 1 Remote Router ID : 182.148.0.3 BGP State : Established (UP for 00:21:48) Hold Time (Configured) : 180 Seconds...
  • Page 245: Debug Ip Bgp Show Network

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide of VPNv4. Default None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline Use this command to check the internal status and detailed information of a BGP peer group.
  • Page 246: Debug Ip Bgp Show Aggregate

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters vrf VRF-NAME (Optional) Specifies the VRF name. This name can be up to 12 characters long. Default None. Command Mode Privileged EXEC Mode or any configuration mode/ Command Default Level Level: 1.
  • Page 247: Debug Ip Bgp Show Damp

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Default None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline Use this command to check the internal status and detailed information of BGP route aggregation.
  • Page 248 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Default Level Level: 1. Usage Guideline Use this command to check the internal status and detailed information of BGP route damping. Example This example shows how to display internal detailed information about BGP route damping of the address family of IPv4.
  • Page 249: Debug Ip Bgp Show Interface

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 10-111 debug ip bgp show interface This command is used to display internal detailed information about the BGP interface. debug ip bgp show interface Parameters None. Default None. Command Mode User EXEC or Any Configuration Mode.
  • Page 250: Debug Ip Bgp Show Redistribution

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline Use this command to check the internal status and detailed information of the BGP timer.
  • Page 251 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Usage Guideline Use this command to check the internal status and detailed information of BGP route redistribution. Example This example shows how to display internal detailed information about BGP route redistribution.
  • Page 252 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide deny (_64[6-9][0-9][0-9]_|_65[0-9][0-9][0-9]_) permit 33 Total Entries: 1 Switch# 10-115 debug ip bgp show community-list This command is used to display internal detailed information about the BGP community list. debug ip bgp show community-list Parameters None.
  • Page 253: Bpdu Protection Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 11. BPDU Protection Commands 11-1 spanning-tree bpdu-protection (global) This command is used to enable the BPDU protection function globally. Use the no form of this command to return to the default setting.
  • Page 254 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters drop Specifies to drop all received BPDU packets when the interface enters the attacked state. block Specifies to drop all packets (include BPDU and normal packets) when the interface enters the attacked state.
  • Page 255 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Default Level Level: 1. Usage Guideline Use this command to display BPDU protection information. If no interface ID is specified, all interfaces’ information will be displayed. Example This example shows how to display the BPDU protection information and status of interfaces.
  • Page 256 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide...
  • Page 257: Cable Diagnostics Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 12. Cable Diagnostics Commands 12-1 test cable-diagnostics This command is used to start the cable diagnostics to test the status and length of copper cables. test cable-diagnostics interface INTERFACE-ID [,|-]...
  • Page 258 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide show cable-diagnostics [interface INTERFACE-ID [,|-]] Parameters interface INTERFACE-ID (Optional) Specifies the interface’s ID. The acceptable interface will be a physical port. (Optional) Specifies a series of interfaces, or separate a range of interfaces from a previous range.
  • Page 259 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide clear cable-diagnostics {all | interface INTERFACE-ID [,|-]} Parameters Specifies to clear cable diagnostics results for all interfaces. interface INTERFACE-ID Specifies the interface’s ID. The acceptable interface will be a physical port.
  • Page 260: Command Logging Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 13. Command Logging Commands 13-1 command logging enable This command is used to enable the command logging function. Use the no form of this command to disable the command logging function.
  • Page 261: Connectivity Fault Management (Cfm) Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 14. Connectivity Fault Management (CFM) Commands 14-1 ais This command is used to configure the parameters of the Alarm Indication Signal (AIS) function. To disable the AIS function, use the no command.
  • Page 262 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config-cfm-mep)# ais level 5 Switch(config-cfm-mep)# 14-2 alarm-time This command is used to define the time period to control when a fault alarm will be sent if a defect is reported continuously and the time period to control when a fault alarm will be reset.
  • Page 263 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config-cfm-mep)# 14-3 ccm enable This command is used to enable the CFM Continuity Check Message (CCM) function. To disable this function, use the no command. ccm enable no ccm enable Parameters None.
  • Page 264: Cfm Domain

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 10sec: Ten seconds. This is the default value. 1min: One minute. 10min: Ten minutes. Default By default, this value is 10 seconds. Command Mode CFM MA Configuration Mode. Command Default Level Level: 12.
  • Page 265 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide The command is used to define a maintenance domain and enter the maintenance domain configuration mode. Each maintenance domain has unique name amongst all those used or available to a service provider or operator.
  • Page 266 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide cfm enable no cfm enable Parameters None. Default By default, this option is disabled. Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline This command is used to enable or disable the CFM function on the specified physical interface.
  • Page 267: Cfm Linktrace

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Usage Guideline This command is used to start or stop the CFM management lock. This command will result in the MEP to send LCK PDUs to a client level MEP. Verify the status of the CFM management lock action by entering the show cfm mep command.
  • Page 268 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# 14-10 cfm loopback test This command is used to start a CFM loopback test. cfm loopback test {MAC-ADDR | remote-mepid REMOTE-MEPID} mepid MEP-ID ma name MA- NAME domain DOMAIN-NAME [num NUMBER] [length LENGTH | pattern STRING] [pdu-priority...
  • Page 269 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Request timed out. Request timed out. Request timed out. CFM loopback statistics for 00-01-02-03-04-05: Packets: Sent=4, Received=0, Lost=4(100% loss). Switch# cfm loopback test remote-mepid 2 mepid 1 ma name op-ma1 domain op-domain1...
  • Page 270 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config)# cfm domain op-domain level 2 Switch(config-cfm-md)# cfm ma name op1 vlan 2 Switch(config-cfm-ma)# 14-12 cfm mep This command is used to define a maintenance association end-point and enter the CFM MEP Configuration Mode.
  • Page 271 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config-cfm-mep)# 14-13 clear cfm counter ccm This command is used to clear CCM counters of all MEPs. clear cfm counter ccm Parameters None. Default None. Command Mode Privileged EXEC Mode.
  • Page 272 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Default Level Level: 12. Usage Guideline This command is used to delete the stored link-trace response data that has been initiated by the specified MEP. Example This example shows how to delete received link-trace responses.
  • Page 273 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# 14-16 fault-alarm This command is used to control the types of fault alarms sent by the MEP. To reset to the default setting, use no command. fault-alarm {none | all | mac-status | remote-ccm | error-ccm | xcon-ccm}...
  • Page 274 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide lck [period PERIOD] [level LEVEL] no lck [period | level] Parameters period PERIOD (Optional) Specifies the transmitting interval of the LCK PDU. It can be 1sec or 1min.The default period is 1 second.
  • Page 275 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode CFM MA Configuration Mode. Command Default Level Level: 12. Usage Guideline This command is used to create an MEP ID list in a maintenance association. To add an MEP ID into the list, use the cfm mepid-list add command.
  • Page 276 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to configure the default MIP creation for a maintenance domain. The creation of MIPs on a maintenance domain is useful for tracing the link, MIP by MIP. It also allows the user to perform a loopback from an MEP to an MIP.
  • Page 277 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide The creation of MIPs on a maintenance association is useful for tracing the link, MIP by MIP. It also allows the user to perform a loopback from an MEP to an MIP. An enumerated value indicates whether the management entity can create MHFs for this maintenance association.
  • Page 278 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide no pdu-priority Parameters pdu-priority COS-VALUE Specifies that the 802.1p priority is set in the CCM and the LTM messages transmitted by the MEP. The range of the value is from 0 to Default By default, the PDU priority is level 7.
  • Page 279 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide None. Command Mode CFM MD Configuration Mode. Command Default Level Level: 12. Usage Guideline This command is used to configure the default transmission of the sender ID TLV by MPs contained by the MD.
  • Page 280: Show Cfm

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Usage Guideline This command is used to configure the transmission of the sender ID TLV by MPs for an MA. An enumerated value indicates what, if anything, is to be included in the sender ID TLV transmitted by MPs configured in this maintenance association.
  • Page 281 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide show cfm counter ccm Parameters None. Default None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline The command is used to display the CCM RX packet counters of all MEPs.
  • Page 282 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Default None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline This command is used to display CFM maintenance domain information. Example This example shows how to display CFM maintenance domain information.
  • Page 283: Show Cfm Linktrace

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Example This example shows how to display the CFM state on the specified physical ports. Switch# show cfm interface eth1/0/12 eth1/0/12 CFM is enabled MAC Address : 00-09-5A-B9-AC-1B Domain Name: md5...
  • Page 284: Show Cfm Ma

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Example This example shows how to display the link-trace responses. Switch# show cfm linktrace mepid 1 ma name op-ma domain op-domain trans-id 0 Transaction ID: 0 From MEPID 1 to 00-07-00-00-00-1C...
  • Page 285 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Level: 1. Usage Guideline This command is used to display the CFM maintenance association information. Example This example shows how to display CFM maintenance association information. Switch# show cfm ma name ma5 domain md5...
  • Page 286 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to display the MEPs that have configurations. Example This example shows how to display the MEPs that have configurations. Switch# show cfm mepid 1 ma name op-ma domain op-domain...
  • Page 287 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide could be from some other MA. Fault Alarm All: All types of fault alarms will be sent. Some Remote MEP Defect Indication: The last CCM received by this MEP from some remote MEP indicates that remote MEP detects some defect.
  • Page 288 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide MA Name: ma6 MEPID: 3 Status: Some Remote MEP Down AIS Status: Normal LCK Status: Normal Switch# Display Parameters Status None: No defect has been present since the last FNG_RESET state.
  • Page 289 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This example shows how to display the MIP CCM database entries. Switch# show cfm mip ccm VID: 10 MAC Address: 00-07-00-00-00-1C Port: eth1/0/12 VID: 10 MAC Address: 00-07-00-00-00-1E Port: eth1/0/14...
  • Page 290 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Port State: Up Interface Status: No Last CCM Serial Number: 1000 Sender Chassis ID: None Sender Management Address: 10.90.90.90:161 Detect Time: 2013-11-01 17:00:00 Remote MEPID: 3 MAC Address: 11-22-33-44-02-05...
  • Page 291 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide interface status TLV was present in the last CCM received. Up: The interface is ready to pass packets. Down: The interface cannot pass packets. Testing: The interface is in some test mode.
  • Page 292 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide eth1/0/1 CFM RX Statistics AllPkt: 0 CCM: 0 LBR: 0 LBM: 0 LTR: 0 LTM: 0 VidDrop: 0 OpcoDrop: 0 CFM TX Statistics AllPkt: 0 CCM: 0 LBR: 0...
  • Page 293 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide cfm mp-ltr-all no cfm mp-ltr-all Parameters None. Default By default, this option is disabled. Command Mode Global Configuration Mode. Command Default Level Level: 12. Usage Guideline According to IEEE 802.1ag, a Bridge replies with one LTR to an LTM. This command can make all MPs on an LTM’s forwarding path reply with LTRs, whether they are on a Bridge or not.
  • Page 294: Cpu Access Control List (Acl) Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 15. CPU Access Control List (ACL) Commands 15-1 soft-acl filter-map This command is used to create or modify a software ACL filter map. This command will enter into the software ACL filter map configuration mode.
  • Page 295: Match Interface

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide SEQUENCE-NUMBER Specifies the sequence number of the associated match entry. The range is from 1 to 65535. The lower the number is, the higher the priority of the access list.
  • Page 296 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide interfaces. (Optional) Specifies a series of physical interfaces. No space before and after the comma. (Optional) Specifies a series of physical interfaces. No space before and after the comma.
  • Page 297 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 15-4 show soft-acl This command is used to display the information of software ACL filter maps. show soft-acl filter-map [NAME] Parameters NAME (Optional) Specifies the name of the software ACL filter map to be displayed.
  • Page 298: Cpu Port Statistics Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 16. CPU Port Statistics Commands 16-1 debug show cpu port This command is used to display statistics for Layer 2 or Layer 3 control packets that are trapped to the CPU.
  • Page 299 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide LLDP DHCP DHCPv6 ERPS IGMP PIM-IPv4 PIM-IPv6 DVMRP Reserved-IPv4-IPMC Reserved-IPv6-IPMC Unknown-IPv4-IPMC Unknown-IPv6-IPMC ICMP ICMPv6 SNTP TFTP SMTP Telnet UDP-Helper VRRP Switch# 16-2 debug clear cpu port This command is used to reset all counters for Layer 2 or Layer 3 control packets that are trapped to the CPU.
  • Page 300 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to reset all counters for Layer 2 or Layer 3 control packets that are trapped to the CPU. Example This example shows how to clear all statistics counters.
  • Page 301: Debug Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 17. Debug Commands 17-1 debug enable This command is used to enable the debug message output option. To disable the debug message output option, use the no form of this command.
  • Page 302 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Default The default debug output is buffer. Command Mode Privileged EXEC Mode. Command Default Level Level: 15. Usage Guideline Use this command to set a specified module’s debug message output to debug to the buffer or the local console.
  • Page 303 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to copy debug information to the destination filename. debug copy SOURCE-URL DESTINATION-URL debug copy SOURCE-URL {tftp: //LOCATION/DESTINATION-URL | ftp: //USER- NAME:PASSWORD@LOCATION:TCP-PORT/DESTINATION-URL | rcp: //USER- NAME@LOCATION/DESTINATION-URL} [vrf VRF-NAME]...
  • Page 304 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters None. Default None. Command Mode Privileged EXEC Mode. Command Default Level Level: 15. Usage Guideline Use this command to clear the debug buffer information. Example This example shows how to clear the debug buffer information.
  • Page 305 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to display the content of the debug buffer or utilization information of the debug buffer. debug show buffer [utilization] Parameters utilization (Optional) Specifies to display the utilization of the debug buffer. If not specified, this will display the content in the buffer.
  • Page 306 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide None. Command Mode Privileged EXEC Mode. Command Default Level Level: 15. Usage Guideline Use this command to display the information about the debug status and message output of the modules.
  • Page 307 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# debug show error log # debug log: 1 # level: fatal # clock: 10000ms # time : 2013/03/11 13:00:00 ====================== SOFTWARE FATAL ERROR ======================= Invalid mutex handle : 806D6480 Current TASK : bcmARL.0...
  • Page 308 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide None. Command Mode Privileged EXEC Mode. Command Default Level Level: 15. Usage Guideline Use this command to display technical support information. The technical support information is used to collect the switch’s information needed by the engineers to troubleshoot or analyze a problem.
  • Page 309 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide [PORT 2013-9-8 09:18:22] [MIRROR 2013-9-8 09:18:22] ******************* Mirror ******************* Mirror SW table: State: Disable ******************** Layer Two Information ******************** [VLAN 2013-9-8 09:18:22] ******************************************************************************** [LBD 2013-9-8 10:56:47] LBD is disable [TRAFFIC_SEG 2013-9-8 10:56:47] ..
  • Page 310 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Five seconds - One minute - Five minutes - 13 % Process Name 5Sec 1Min 5Min ----------------- ------ ------ ------ OS_UTIL 96 % 93 % 81 % SYS_Ctr FAN_Pooling bcmRX bcmL2X.0...
  • Page 311: Dhcp Auto-Configuration Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 18. DHCP Auto-Configuration Commands 18-1 autoconfig enable This command is used to enable the auto-configuration function. Use the no form of the command to disable the auto-configuration function. autoconfig enable...
  • Page 312 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Default None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline This command is used to display the status of the auto-configuration. Example This example shows how to display the status of the auto-configuration.
  • Page 313: Dhcp Client Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 19. DHCP Client Commands 19-1 ip dhcp client class-id This command is used to specify the vendor class identifier used as the value of Option 60 for the DHCP discover message.
  • Page 314 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide no ip dhcp client client-id Parameters INTERFACE-ID Specifies the VLAN interface, whose hexadecimal MAC address will be used as the client ID to be sent with the discover message.
  • Page 315: Ip Dhcp Client Lease

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Level: 12. Usage Guideline Use this command to specify the host name string (Option 12) to be sent with the DHCP discover message. The specification only applies to the subsequent sending of the DHCP discover messages. The setting only takes effect when the DHCP client is enabled on the interface to acquire the IP address from the DHCP server.
  • Page 316 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config-if)#...
  • Page 317: Dhcp Relay Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 20. DHCP Relay Commands 20-1 ip dhcp pool (DHCP Relay) This command is used to configure a DHCP relay pool on a DHCP relay agent and enter the DHCP pool configuration mode.
  • Page 318 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to enable the DHCP relay agent to validate and remove the relay agent information option in the received DHCP reply packet. Use the no form of the command to globally disable the check for Option 82.
  • Page 319: Ip Dhcp Relay Information Option

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide none Specifies to disable check for Option 82 of the reply packet. Default None. Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline This command only takes effect when the DHCP service is enabled.
  • Page 320 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Level: 12. Usage Guideline When DHCP Option 82 is enabled, the DHCP packet received from the client will be inserted with an Option 82 field before being relayed to the server. The DHCP Option 82 contains two sub-options respectively the circuit ID sub-option and remote ID sub-option.
  • Page 321 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 20-6 ip dhcp relay information policy This command is used to configure the Option 82 re-forwarding policy for the DHCP relay agent. Use the no form of the command to restore the default setting.
  • Page 322 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide keep Specifies that the DHCP request packet that already has the relay option is left unchanged and directly relayed to the DHCP server. replace Specifies that the DHCP request packet that already has the relay option will be replaced by a new option.
  • Page 323 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Level: 12. Usage Guideline This command is used to select different vendor’s remote ID format or configures a user-defined string of ASCII characters to be the remote ID. Example This example shows how to use vendor2 as the remote ID.
  • Page 324 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# configure terminal Switch(config)# ip dhcp relay information option Switch(config)# ip dhcp relay information option format circuit-id vendor1 Switch(config)# This example shows how to configure a user-defined string “abcd” as the circuit ID.
  • Page 325: Ip Dhcp Relay Information Trusted

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 20-11 ip dhcp relay information trusted This command is used to enable the DHCP relay agent to trust the relay information for the interface. Use the no command to disable the trusting of relay information for the interface.
  • Page 326 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide (Optional) Specifies a series of interfaces, or separate a range of interfaces from a previous range. No space is allowed before and after the comma. (Optional) Specifies a range of interfaces. No space is allowed before and after the hyphen.
  • Page 327 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide the client requests. Use the relay destination command to specify the relay destination server address. Multiple relay sources and multiple relay destinations can be specified in a pool. If a packet matches anyone of the relay sources, the packet will be forwarded to all of the relay destinations.
  • Page 328 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide When receiving a DHCP request packet, if the subnet of the received packet matches the rely source of a relay pool, the packet will be relayed based on this relay pool. Otherwise, the packet is relayed based on the IP helper address configured on the received interface.
  • Page 329 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Example This example shows how to configure a DHCP relay target for relaying packets that matches the value pattern of the option defined in the class. Switch# configure terminal...
  • Page 330 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide All interfaces are trusted source of relay agent information option Switch# 20-17 show ip dhcp relay information option-insert This command is used to display the relay option insert configuration.
  • Page 331 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide None. Default None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline Use this command to display the relay information option policy action configuration information.
  • Page 332: Dhcp Server Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 21. DHCP Server Commands 21-1 address range This command is used to specify an IP address range to be associated with a DHCP class in a DHCP address pool. Use the no form of the command to remove the address range to be associated with a DHCP class.
  • Page 333: Clear Ip Dhcp Binding

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 21-2 bootfile This command is used to specify the configuration file or image file for the DHCP client to boot the device. Use the no command to remove the specification of the boot file.
  • Page 334: Clear Ip Dhcp Conflict

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Default None. Command Mode Privileged EXEC Mode. Command Default Level Level: 12. Usage Guideline Use this command to delete the binding of addresses. If pool is specified but the IP address is specified as *, then all automatic binding entries associated with the pool will be deleted.
  • Page 335: Clear Ip Dhcp Server Statistics

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Privileged EXEC Mode. Command Default Level Level: 12. Usage Guideline Use this command to delete the address from the conflict table. The deleted address will be returned to the address pool and free to be assigned. The DHCP server detects the conflict of an IP address by using a ping operation.
  • Page 336 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Usage Guideline Use this command to clear all of DHCP statistic counters. Example This example shows how to reset all DHCP counters to zero. Switch# clear ip dhcp server statistics Switch# 21-6 class (DHCP relay &...
  • Page 337 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config-dhcp-class)# option 82 hex 5678 * Switch(config-dhcp-class)# exit Switch(config)# ip dhcp pool srv-pool1 Switch(config-dhcp-pool)# network 172.28.5.0/24 Switch(config-dhcp-pool)# class Customer-A Switch(config-dhcp-pool-class)# address-range 172.28.5.1 172.28.5.12 witch(config-dhcp-pool-class)# exit Switch(config-dhcp-pool)# class Customer-B Switch(config-dhcp-pool-class)# address-range 172.28.5.18 172.28.5.32...
  • Page 338 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide IDENTIFIER Specifies a DHCP client identifier in hexadecimal notation. Default None. Command Mode DHCP Pool Configuration Mode. Command Default Level Level: 12. Usage Guideline This command is valid for manual binding entries in a DHCP address pool. The client identifier is formatted by media type and the MAC address.
  • Page 339 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Usage Guideline Use this command to configure the default routers for the clients. The IP address of the router should be on the same subnet as the client’s subnet. Routers are listed in the order of preference. If default routers are already configured, the default routers configured later will be added to the default interface list.
  • Page 340 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide dns-server IP-ADDRESS [IP-ADDRESS2…IP-ADDRESS8] no dns-server IP-ADDRESS [IP-ADDRESS2…IP-ADDRESS8] Parameters IP-ADDRESS Specifies an IP addresses to be used by the DHCP client as the DNS server. IP-ADDRESS2…IP- Specifies multiple IP addresses, separated by spaces. Up to eight ADDRESS8 servers can be specified.
  • Page 341 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Default Level Level: 12. Usage Guideline A binding entry is a mapping between the IP address and the hardware address or the client identifier. By creating a manual binding entry, an IP address is manually assigned to a client.
  • Page 342 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Use the client-identifier command with the host command to specify the manual binding entry based on client identifier. Use the hardware-address command with the host command to specify the manual binding entry based on hardware address.
  • Page 343 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to exclude a range of IP addresses from being allocated to the client. Use the no form of the command to remove a range of excluded addresses.
  • Page 344: Ip Dhcp Ping Timeout

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Default By default, this value is 2. Command Mode Global Configuration Mode. Command Default Level Level: 12. Usage Guideline Use this command to specify the number of packets that the DHCP server will send as part of the ping operation.
  • Page 345 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Example This example shows how to configure the waiting time for a ping reply. Switch# configure terminal Switch(config)# ip dhcp ping timeout 800 Switch(config)# 21-17 ip dhcp pool (DHCP Server) This command is used to configure a DHCP address pool on the DHCP server and enter the DHCP Pool Configuration Mode.
  • Page 346 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide no ip dhcp use class Parameters None. Default By default, this option is disabled. Command Mode Global Configuration Mode. Command Default Level Level: 12. Usage Guideline Use this command to specify the DHCP server to use DHCP classes during address allocation or the DHCP relay agent to use DHCP classes to locate the relay destination addresses.
  • Page 347 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Usage Guideline Use this command to configure the duration of the lease for an IP address that is assigned from the address pool. The least setting will not be inherited from the parent address pool.
  • Page 348 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# configure terminal Switch(config)# ip dhcp pool pool1 Switch(config-dhcp-pool)# netbios-node-type h-node Switch(config-dhcp-pool)# 21-21 netbios-name-server This command is used to specify WINS name servers for the Microsoft DHCP client. Use the no form of this command to remove the configuration of specific WINS servers.
  • Page 349 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide no next-server Parameters IP-ADDRESS Specifies the boot server IP address for the client to get the boot file. Default None. Command Mode DHCP Pool Configuration Mode. Command Default Level Level: 12.
  • Page 350 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Usage Guideline Use this command in the DHCP Pool Configuration Mode to configure a network for the address pool. The user cannot configure the manual binding entry in the address pool that was configured with the network.
  • Page 351 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide ip IP-ADDRESS Specifies the IP addresses. Up to eight IP addresses can be specified. Default None. Command Mode DHCP Pool Configuration Mode. Command Default Level Level: 12. Usage Guideline This command configures DHCP options in a DHCP pool.
  • Page 352 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This example shows how to specify the DHCP server Option 72 (WWW server option) in the IP format. Two WWW servers are configured, 172.19.10.1 and 172.19.10.100. Switch# configure terminal Switch(config)# ip dhcp pool pool1 Switch(dhcp-config)# option 72 ip 172.19.10.1 172.19.10.100...
  • Page 353: Service Dhcp

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Example This example shows how a DHCP class Service-A is configured and defined with the DHCP Option 60 matching pattern 0x112233 and 0x102030. Another class Service-B is configured and defined with the DHCP Option 60 matching pattern 0x5566* and 0x5060*.
  • Page 354: Show Ip Dhcp Conflict

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide show ip dhcp binding [vrf VRF-NAME] [IP-ADDRESS] Parameters VRF-NAME (Optional) Specifies the name of the VRF instance. IP-ADDRESS (Optional) Specifies the binding entry to display. If the IP address is not specified, all binding entries or the binding entry specific to the specified pool are displayed.
  • Page 355 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to display the conflict IP addresses while the DHCP Server attempts to assign the IP address for a client. show ip dhcp conflict [vrf VRF-NAME] [IP-ADDRESS]...
  • Page 356: Show Ip Dhcp Pool

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# 21-29 show ip dhcp pool This command is used to display information about the DHCP pools. show ip dhcp pool [NAME] Parameters NAME (Optional) Specifies to display information about a specific DHCP pool.
  • Page 357: Show Ip Dhcp Server Statistics

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 21-30 show ip dhcp server This command is used to display the current status of the DHCP server. show ip dhcp server Parameters None. Default None. Command Mode User EXEC or Any Configuration Mode.
  • Page 358 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Default None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline This command displays DHCP counters. All counters are cumulative. Example This example shows how to display DHCP server statistics.
  • Page 359 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 21-32 vrf (DHCP Pool) This command is used to associate the address pool with a VRF name. vrf VRF-NAME no vrf VRF-NAME Parameters VRF-NAME Specifies the name of the VRF to which the address pool is associated with.
  • Page 360: Dhcp Snooping Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 22. DHCP Snooping Commands 22-1 ip dhcp snooping This command is used to globally enable DHCP snooping. Use the no command to disable DHCP snooping. ip dhcp snooping no ip dhcp snooping Parameters None.
  • Page 361: Ip Dhcp Snooping Database

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode Global Configuration Mode. Command Default Level Level: 12. Usage Guideline The DHCP snooping function validates the DHCP packets when it arrives at the port on the VLAN that is enabled for DHCP snooping.
  • Page 362: Clear Ip Dhcp Snooping Database Statistics

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Use this command to store the DHCP binding entry to local flash or remote server. Use the follow methods to store DHCP binding entries: • flash: Store the entries to a file in local file system.
  • Page 363 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide clear ip dhcp snooping binding [MAC-ADDRESS] [IP-ADDRESS] [vlan VLAN-ID] [interface INTERFACE-ID] Parameters MAC-ADDRESS Specifies the MAC address to clear. IP-ADDRESS Specifies the IP address to clear. vlan VLAN-ID Specifies the VLAN ID to clear.
  • Page 364: Ip Dhcp Snooping Binding

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Example This example shows how to renew the DHCP snooping binding database. Switch# renew ip dhcp snooping database tftp: //10.0.0.2/store/dhcp-snp-bind Switch# 22-7 ip dhcp snooping binding This command is used to manually configure a DHCP snooping entry.
  • Page 365: Ip Dhcp Snooping Trust

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 22-8 ip dhcp snooping trust This command is used to configure a port as a trusted interface for DHCP snooping. Use the no form of this command to return to the default setting.
  • Page 366 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 22-9 ip dhcp snooping limit entries This command is used to configure the number of the DHCP snooping binding entries that an interface can learn. Use the no command to reset the DHCP message entry limit.
  • Page 367 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Default By default, this option is disabled. Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline When the rate of the DHCP packet exceeds the limitation, the port will be changed to the error disable state.
  • Page 368: Ip Dhcp Snooping Vlan

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config)# ip dhcp snooping station-move deny Switch(config)# 22-12 ip dhcp snooping verify mac-address This command is used to enable the verification that the source MAC address in a DHCP packet matches the client hardware address.
  • Page 369 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide interfaces from a previous range. No space is allowed before and after the comma. (Optional) Specifies a range of interfaces. No space is allowed before and after the hyphen.
  • Page 370: Show Ip Dhcp Snooping Binding

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Usage Guideline Use this command to display DHCP snooping configuration settings. Example This example shows how to display DHCP snooping configuration settings. Switch# show ip dhcp snooping DHCP Snooping is enabled...
  • Page 371 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Level: 1. Usage Guideline Use this command to display DHCP snooping binding entries. Example This example shows how to display DHCP snooping binding entries. Switch# show ip dhcp snooping binding...
  • Page 372: Show Ip Dhcp Snooping Database

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# This example shows how to display DHCP snooping binding entries by VLAN 100. Switch# show ip dhcp snooping binding vlan 100 MAC Address IP Address Lease (seconds) Type...
  • Page 373 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Default None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline Use this command to display DHCP snooping database statistics. Example This example shows how to display DHCP snooping database statistics.
  • Page 374 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide CLIENT-HARDWARE- (Optional) Specifies the MAC address of the client. ADDRESS Default None. Command Mode Configure DHCP Server Screen Mode. Command Default Level Level: 12. Usage Guideline If a binding entry is defined with the client’s MAC address, then the server message with the specified server IP address and client address in the payload will be permitted.
  • Page 375 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide sent to log module and recorded in the server screen log buffer. The subsequent packets belonging to the same session will not be sent to log module unless its record in the log buffer is cleared.
  • Page 376 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide SERVER-IP-ADDRESS (Optional) Specifies the trust DHCP sever IP address. profile PROFILE-NAME (Optional) Specifies the profile with the client MAC address list for the DHCP sever. Default None. Command Mode Interface Configuration Mode.
  • Page 377 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide NUMBER (Optional) Specifies the buffer entry number. The maximum number is 1024. Default By default, this value is 32. Command Mode Global Configuration Mode. Command Default Level Level: 12.
  • Page 378 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This example shows how to display the DHCP server screen log buffer. Switch# show ip dhcp server-screen log Total log buffer size: 64 VLAN Server IP Client MAC Occurrence ---------- -------------------- --------------------- ----------------------------- 10.20.1.1...
  • Page 379: Dhcpv6 Client Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 23. DHCPv6 Client Commands 23-1 clear ipv6 dhcp client This command is used to restart the DHCPv6 client on an interface. clear ipv6 dhcp client INTERFACE-ID Parameters INTERFACE-ID Specifies the VLAN interface to restart the DHCPv6 client.
  • Page 380: Show Ipv6 Dhcp

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline Use this command to enable the prefix delegation request through an interface. The interface being configured will be in DHCP client mode. The prefix acquired from the server will be stored in the IPv6 general prefix pool represented by the general prefix name of the command, which will be in turn used in configuration of IPv6 addresses.
  • Page 381 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Use this command to display the device’s DHCPv6 DUID or use the show ipv6 dhcp interface command to display DHCPv6 related setting for interfaces. If the interface ID is not specified, all interfaces with the DHCPv6 function will be displayed.
  • Page 382: Dhcpv6 Guard Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 24. DHCPv6 Guard Commands 24-1 ipv6 dhcp guard policy This command is used to create or modify a DHCPv6 guard policy. This command will enter into the DHCPv6 guard configuration mode. Use the no command to remove the DHCPv6 guard policy.
  • Page 383 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide server messages are dropped on this port. server Specifies that the attached device is a DHCPv6 server. DHCPv6 server messages are allowed on this port. Default By default, this option is client.
  • Page 384 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Example This example shows how to create a DHCPv6 guard policy and matches the IPv6 addresses in the access list named list1. Switch# configure terminal Switch(config)# ipv6 dhcp guard policy dhcp_filter1...
  • Page 385 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters POLICY-NAME (Optional) Specifies the DHCPv6 guard policy name. Default None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline If the policy name is specified, only the specified policy information is displayed. If the policy name is not specified, information is displayed for all policies.
  • Page 386: Dhcpv6 Relay Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 25. DHCPv6 Relay Commands 25-1 ipv6 dhcp relay destination This command is used to enable the DHCP for IPv6 relay service on the interface and specify a destination address to which client messages are forwarded to. Use the no form of the command to remove a relay destination.
  • Page 387 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to configure the sub-type of the remote ID. Use the no form of this command to revert to the default settings. ipv6 dhcp relay remote-id format SUB-TYPE-NAME...
  • Page 388 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide The command is used to enable the insertion of the DHCPv6 relay agent Remote ID option function. Example This example shows how to enable the insertion of the DHCPv6 relay agent remote ID option.
  • Page 389 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide ipv6 dhcp relay remote-id udf {ascii STRING | hex HEX-STRING} Parameters ascii STRING Specifies the ASCII string (a maximum of 128 characters) for the UDF of the Remote ID.
  • Page 390 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Default Level Level: 1. Usage Guideline Use this command to display the device’s DHCPv6 DUID or use the show ipv6 dhcp interface command to display DHCPv6 related settings and information for the specified VLAN interface. If the interface ID is not specified, all interfaces that are enabled for the DHCPv6 function will be displayed.
  • Page 391 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide IPv6 DHCP relay remote-id Policy : drop Format : user-define UDF is ascii string “userstring” Switch#...
  • Page 392: Dhcpv6 Server Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 26. DHCPv6 Server Commands 26-1 address prefix This command is used to specify an address prefix for address assignment. Use the no form of this command to remove the address prefix.
  • Page 393 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to specify an address to be assigned to a specified client. Use the no form of this command to remove the static binding address. address-assignment IPV6-ADDRESS CLIENT-DUID [iaid IAID] [lifetime VALID-LIFETIME...
  • Page 394: Clear Ipv6 Dhcp Binding

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(dhcpv6-config)# ipv6 dhcp server pool1 Switch(dhcpv6-config)# This example shows how to configure a static binding address entry in an IPv6 DHCP pool named “pool2” with IAID option and associates the IPv6 DHCP pool with VLAN 200.
  • Page 395 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide domain-name DOMAIN-NAME no domain-name DOMAIN-NAME Parameters DOMAIN-NAME Specifies the domain name. Default None. Command Mode DHCPv6 Pool Configuration Mode. Command Default Level Level: 12. Usage Guideline Use this command to configure the domain name to be assigned to the requesting DHCPv6 client. Only one domain name can be specified.
  • Page 396: Ipv6 Dhcp Pool

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Use this command to configure the DNS IPv6 server address to be assigned to the requesting DHCPv6 client. Multiple server addresses can be configured by setting this command multiple times.
  • Page 397 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide ipv6 dhcp pool POOL-NAME no ipv6 dhcp pool POOL-NAME Parameters POOL-NAME Specifies the name for the address pool. The maximum length is 32 characters. Default None. Command Mode Global Configuration Mode.
  • Page 398 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Default Level Level: 12. Usage Guideline This command enables DHCP for IPv6 server service on a specified interface. An IPv6 DHCP pool can be associated with multiple interfaces. The pool must be configured before it can be associated.
  • Page 399 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide A local IPv6 prefix pool defines a block of prefixes. Define the pool with overlay prefixes with other pools. To modify the prefix for the local pool, remove the local pool first and re-create the pool. All of the prefixes that are already allocated will be freed.
  • Page 400 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Use this command to configure a static binding prefix entry to specify the prefix to be dedicatedly delegated to specific client. Multiple static binding prefix entry can be defined for a client, or an IAPD on a client.
  • Page 401 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Usage Guideline Use this command to specify a local IPv6 prefix pool in a IPv6 DHCP pool to delegate the prefix for clients serviced by the DHCP pool. Only one local IPv6 prefix pool can be specified in an IPv6 DHCP pool.
  • Page 402: Show Ipv6 Dhcp Binding

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 26-13 show ipv6 dhcp This command is used to display the DHCPv6 related setting for interfaces. show ipv6 dhcp [interface [INTERFACE-ID]] Parameters INTERFACE-ID (Optional) Specifies the VLAN interface to display the DHCPv6 related setting.
  • Page 403: Show Ipv6 Dhcp Pool

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide show ipv6 dhcp binding [IPV6-PREFIX] Parameters IPV6-PREFIX (Option) Specifies the binding entry to be displayed. Default None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1.
  • Page 404 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline This command displays all DHCPv6 server configuration pool information if the pool name parameter is not specified. Otherwise, it only displays the pool information for the specified pool name.
  • Page 405 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide preferred lifetime, valid The preferred lifetime and valid lifetime assigned to this prefix for lifetime client. DNS server The DNS server address list. Domain name The configured DNS domain list.
  • Page 406 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide POOL-NAME (Optional) Specifies the local IPv6 prefix pool to be displayed. Default None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline Use this command to display the settings for a specific local IPv6 prefix pool or the setting for all prefix if the pool name parameter is not specified.
  • Page 407: Digital Diagnostics Monitoring (Ddm) Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 27. Digital Diagnostics Monitoring (DDM) Commands 27-1 show interfaces transceiver This command is used to display the current SFP module operating parameters. show interfaces [INTERFACE-ID [,|-] transceiver [detail] Parameters...
  • Page 408 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide ++ : high alarm, + : high warning, - : low warning, -- : low alarm mA: milliamperes, mW: milliwatts A: The threshold is administratively configured. eth2/0/3 Transceiver Monitoring is enabled Transceiver Monitoring shutdown action:Alarm...
  • Page 409 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This example shows how to configure the shutdown interface eth3/0/1 when an alarm event is detected. Switch# configure terminal Switch(config)# interface eth3/0/1 Switch(config-if)# transceiver-monitoring action shutdown alarm# Switch(config-if)# 27-3 transceiver-monitoring bias-current This command is used to configure the thresholds of the bias current for a specified port.
  • Page 410 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# configure terminal Switch(config)# transceiver-monitoring bias-current eth3/0/1 high warning 10.237 WARNING: A closest value 10.238 is chosen according to the transceiver-monitoring precision definition Switch(config)# 27-4 transceiver-monitoring enable This command is used to enable the optical transceiver monitoring function for an SFP port. Use the no form of the command to disable optical transceiver monitoring.
  • Page 411 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide transceiver-monitoring rx-power INTERFACE-ID {high | low} {alarm | warning} {mwatt VALUE | dbm VALUE} no transceiver-monitoring rx-power INTERFACE-ID {high | low} {alarm | warning} Parameters INTERFACE ID Specifies the interface to modify.
  • Page 412 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 27-6 transceiver-monitoring temperature This command is used to configure the temperature thresholds for the specified port. Use the no form of the command to remove the configuration. transceiver-monitoring temperature INTERFACE-ID {high | low} {alarm | warning} VALUE...
  • Page 413 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config)# 27-7 transceiver-monitoring tx-power This command is used to configure the output power threshold for the specified port. Use the no form of the command to remove the configuration.
  • Page 414 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This example shows how to configure the TX power low warning threshold to 0.181 mW on interface eth3/0/1. Switch# configure terminal Switch(config)# transceiver-monitoring tx-power eth3/0/1 low warning mwatt 0.181 WARNING: The closest value of 0.181 is chosen according to the transceiver-monitoring...
  • Page 415 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Example This example shows how to configure the low alarm voltage threshold as 0.005 on interface eth3/0/1. Switch# configure terminal Switch(config)# transceiver-monitoring voltage eth3/0/1 low alarm 0.005 WARNING: A closer value 0.005 is chosen according to the transceiver-monitoring...
  • Page 416: Distance Vector Multicast Routing Protocol (Dvmrp) Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 28. Distance Vector Multicast Routing Protocol (DVMRP) Commands 28-1 ip dvmrp This command is used to enable DVMRP on the current interface. Use the no form to disable DVMRP on the interface.
  • Page 417 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide value of 32 means infinity (unreachable). Default The default metric value is 1. Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline For each source network reported, a route metric is associated with the route being reported. The metric is the sum of the interface metrics between the router originating the report and the source network.
  • Page 418: Show Ip Dvmrp Interface

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# configure terminal Switch(config)# interface vlan1 Switch(config-if)# ip dvmrp neighbor-timeout 60 28-4 ip dvmrp probe-time This command is used to configure the DVMRP probe interval. Use the no form of the command to return to the default value.
  • Page 419 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Default None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline This command displays Distance Vector Multicast Routing Protocol (DVMRP) information on interfaces on which DVMRP is active.
  • Page 420 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Example This example shows how to display neighbor information. Switch# show ip dvmrp neighbor Interface Neighbor Address Generation ID ExpTime --------------- ---------------- ------------- ----------- vlan1 10.10.10.11 35ef6d 0DT00H00M29S Total Entries: 1...
  • Page 421 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Level: 1. Usage Guideline This command is used to display DVMRP route information. Example This example shows how to displays route information. Switch# show ip dvmrp route State: H = Hold-down...
  • Page 422: D-Link License Management System (Dlms) Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 29. D-Link License Management System (DLMS) Commands 29-1 install dlms activation-code This command is used to install an activation code on the switch. install dlms activation-code AC-STR [unit UNIT-ID]...
  • Page 423 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 29-2 show dlms license This command is used to display the installed DLMS license information on the switch. show dlms license [unit UNIT-ID] Parameters unit UNIT-ID (Optional) Specifies the unit ID of the switch in the switch stack.
  • Page 424 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide License’. Current Active License The current license mode. The current active license is the highest level valid license. Current active license specifies the feature options that are enabled on the switch. EI indicates ‘Enhance License’.
  • Page 425: D-Link Unidirectional Link Detection (Duld) Commands

    Level: 12. Usage Guideline D-Link’s Unidirectional Link Detection is an extension for 802.3ah Ethernet OAM. It provides a mechanism to detect a unidirectional point-to-point Ethernet link without PHY support. OAM vendor specific messages are used in the detection. The detection process is started after OAM discovery was started but does not complete the negotiation in the configured discovery time.
  • Page 426 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide None. Default By default, this option is disabled. Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline This command is used to configure the Ethernet OAM unidirectional link detection action on the specified port.
  • Page 427 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config-if)# 30-4 show duld This command is used to display the information of Ethernet OAM unidirectional link detection. show duld [interface INTERFACE-ID [,|-]] Parameters interface INTERFACE-ID Specifies the interface ID to display. The allowed interfaces only include physical ports.
  • Page 428: Domain Name System (Dns) Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 31. Domain Name System (DNS) Commands 31-1 clear host This command is used to clear the dynamically learned host entries in the privileged user mode. clear host {all | [vrf VRF-NAME] [HOST-NAME]} Parameters Specifies to clear all host entries.
  • Page 429 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Global Configuration Mode. Command Default Level Level: 12. Usage Guideline The system supports the DNS caching name server function. When the caching name server function is enabled and IP domain-lookup, the system forwards the DNS query packet to the configured name server.
  • Page 430 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config)# 31-4 ip domain lookup This command is used to enable the DNS to carry out the domain name resolution. Use the no form of this command to disable the DNS domain name resolution function.
  • Page 431 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide IPV6-ADDRESS Specifies the IPv6 address of the equipment. Default None. Command Mode Global Configuration Mode. Command Default Level Level: 12. Usage Guideline The host name specified in this command needs to be qualified. To delete a static host entry, use the no command.
  • Page 432: Show Hosts

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Use this command to configure a DNS server. When the system cannot obtain an answer from a DNS server, it will attempt the subsequent server until it receives a response. If name servers are already configured, the servers configured later will be added to the server list.
  • Page 433 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters VRF-NAME (Optional) Specifies the name of the VRF instance. Default None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline Use this command to display DNS related configuration information.
  • Page 434 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline Use this command to display the DNS related configuration information. Example This example shows how to display the DNS related configuration information.
  • Page 435: Dos Prevention Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 32. DoS Prevention Commands 32-1 dos-prevention This command is used to enable and configure the DoS prevention mechanism. Use the no form of this command to reset DoS prevention to the default setting.
  • Page 436 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide • All: All of above types. NOTE: Some functions using the NTP protocol might not function properly when the Blat attack DoS prevention type is enabled as they use the same port number.
  • Page 437 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide DoS Prevention Information DoS Type State --------------------------------------- -------------- Land Attack Enabled Blat Attack Enabled TCP Null Disabled TCP Xmas Disabled TCP SYN-FIN Disabled TCP SYN SrcPort Less 1024 Disabled...
  • Page 438: Dynamic Arp Inspection Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 33. Dynamic ARP Inspection Commands 33-1 arp access-list This command is used to create or modify an ARP access list. This command will enter into the ARP access-list configuration mode. Use the no command to remove an ARP access-list.
  • Page 439 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Privileged EXEC Mode. Command Default Level Level: 12. Usage Guideline Use this command to clear the ARP inspection log buffer. Example This example shows how to clear the inspection log.
  • Page 440: Ip Arp Inspection Limit

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters ARP-ACL-NAME Specifies the access control list name with a maximum of 32 characters. vlan VLAN-ID Specifies the VLAN associated with the ARP access list. (Optional) Specifies a series of interfaces, or separate a range of interfaces from a previous range.
  • Page 441 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide rate VALUE Specifies the maximum number of the ARP packets that can be processed. The valid range is from 1 to 150 seconds. burst interval SECONDS (Optional) Specifies the length of the burst duration of the ARP packets that is allowed.
  • Page 442 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Usage Guideline Use the command to configure the maximum entry number of the log buffer. The ARP inspection log buffer keeps tracks the information of ARP packet. The first packet that is given by check will be sent to syslog module and recorded in the inspection log buffer.
  • Page 443 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to specify the additional checks to be performed during an ARP inspection check. Use the no form of the command to remove specific additional check.
  • Page 444 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters vlan VLAN-ID Specifies the VLAN to enable or disable the ARP inspection function. (Optional) Specifies a series of interfaces, or separate a range of interfaces from a previous range. No space is allowed before and after the comma.
  • Page 445 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide acl-match Specifies the logging criteria for packets that are dropped or permitted based on ACL matches. acl-match permit Specifies logging when permitted by the configured ACL. acl-match all Specifies logging when permitted or denied by the configured ACL.
  • Page 446: Show Ip Arp Inspection

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide MASK format is the same as IP address. mac any Specifies to match any source MAC address. mac host SENDER-MAC Specifies to match a single source MAC address. SENDER-MAC SENDER-MAC-...
  • Page 447 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Default Level Level: 1. Usage Guideline This command is used to display the status of DAI for a specific range of VLANs. Example This example shows how to display the statistics of packets that have been processed by DAI for VLAN...
  • Page 448 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# Display Parameters VLAN The VLAN ID that is enabled for ARP inspection. Forwarded The number of ARP packets that are forwarded by ARP inspection. Dropped The number of ARP packets that are dropped by ARP inspection.
  • Page 449 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide None: ACL-matched packets are not logged. Permit: Logging when packets are permitted by the configured ACL. Deny: Logging when packets are dropped by the configured ACL. All: ACL-matched packets are always logged.
  • Page 450: Show Ip Arp Inspection Log

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Rate (pps) The upper limit on the number of incoming packets processed per second. Burst Interval The consecutive interval in seconds over which the interface is monitored for the high rate of the ARP packets.
  • Page 451 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Sender MAC The logging ARP’s sender MAC address. Occurrence The counter of logging entries occurred and the last time of logging entry occurred.
  • Page 452: Enhanced Transmission Selection (Ets) Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 34. Enhanced Transmission Selection (ETS) Commands 34-1 ets willing This command is used to enable the Enhanced Transmission Selection (ETS) willing mode for the Data Center Bridging Exchange Protocol (DCBX) on the specified interface. Use the no form of this command to disable the willing mode.
  • Page 453 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide ets recommend {bandwidth WEIGHT0 WEIGHT1 WEIGHT2 WEIGHT3 WEIGHT4 WEIGHT5 WEIGHT6 WEIGHT7 | cos-map COS-QUEUE COS-VALUE [, | -]} no ets recommend [bandwidth | cos-map] Parameters bandwidth WEIGHT0 Specifies the recommended bandwidth for traffic classes 0 to 7. It is WEIGHT2 WEIGHT3 WEIGHT4 required to specify 8 values for traffic class 0 to 7 respectively.
  • Page 454 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide show ets interface [INTERFACE-ID [, | -]] [recommend] Parameters INTERFACE-ID (Optional) Specifies the interfaces to be displayed. (Optional) Specifies a series of interfaces, or separate a range of interfaces from a previous range. No space before and after the comma.
  • Page 455: Error Recovery Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 35. Error Recovery Commands 35-1 errdisable recovery This command is used to enable the error recovery for causes and to configure the recovery interval. Use the no command to disable the auto-recovery option or to return interval to the default setting for causes.
  • Page 456: Show Errdisable Recovery

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Example This example shows how to set the recovery timer to 200 seconds for port security violation. Switch# configure terminal Switch(config)# errdisable recovery cause psecure-violation interval 200 Switch(config)# This example shows how to enable the auto-recovery option for port security violations.
  • Page 457 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide --------- ----------------- -------------- Port1.4 psecure-violation Switch#...
  • Page 458: Ethernet Oam Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 36. Ethernet OAM Commands 36-1 ethernet oam This command is used to enable the Ethernet OAM function on the specified port. Use the no command to disable the function.
  • Page 459 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide By default, this option is enabled. Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline The following two actions are allowed by ports in the active mode, but disallowed by ports in the passive mode.
  • Page 460 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Usage Guideline The link monitoring function counts the number of symbol errors that occur during the specified window period. This event is generated if the symbol error count is equal to or greater than the specified threshold for that period.
  • Page 461 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters threshold NUMBER Specifies the number of frame errors. If the error frames occur in the specified window and exceeds the threshold value, then an error frame event is triggered. The range is 0 to 4294967295.
  • Page 462 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config)# interface eth1/0/1 Switch(config-if)# ethernet oam link-monitor error-frame window 100 Switch(config-if)# This example shows how to configure interface eth1/0/1 Ethernet OAM error frame monitor window to default value. Switch# configure terminal...
  • Page 463 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# configure terminal Switch(config)# interface eth1/0/1 Switch(config-if)# ethernet oam link-monitor error-frame-seconds Switch(config-if)# This example shows how to disable notifying an Ethernet OAM error frame event on interface eth1/0/1. Switch# configure terminal...
  • Page 464 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide OAM PDU should be generated with an error frame period event TLV indicating that the threshold has been crossed in this window. The lower bound is the number of minimum frame-size frames that can be received in 100ms on the underlying physical layer.
  • Page 465 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This example shows how to configure interface eth1/0/1 Ethernet OAM error frame period monitor threshold to default value. Switch# configure terminal Switch(config)# interface eth1/0/1 Switch(config-if)# no ethernet oam link-monitor error-frame- period threshold...
  • Page 466 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters None. Default The Ethernet OAM critical event will be notified by default. Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline This command used to configure the capability of the critical event. If the capability for a critical event is disabled, the port will never send out OAM PDUs with critical event bit set when an unspecified critical event has occurred.
  • Page 467 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Level: 12. Usage Guideline The command is used to request the remote peer to enter or exit the Ethernet OAM remote loopback mode. Use the ethernet oam remote-loopback start command to request the remote peer to enter the Ethernet OAM remote loopback mode.
  • Page 468 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 36-11 show ethernet oam configuration This command is used to display the configuration of the Ethernet OAM function. show ethernet oam configuration [interface INTERFACE-ID [, | -]] Parameters interface INTERFACE-ID Specifies the interface ID to display.
  • Page 469 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Error frame seconds event Notify state : Enabled Threshold : 1 error frame Window : 600 deciseconds Switch# 36-12 show ethernet oam status This command is used to display the status of the Ethernet OAM function.
  • Page 470 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Loopback status : No loopback Remote client Mode : Passive MAC address : 0001.0203.0405 Vendor (OUI) : 0180c2 Max OAMPDU size : 1518 bytes Unidirectional : Support Link monitoring...
  • Page 471 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 36-13 show ethernet oam statistics This command is used to display the statistics of the Ethernet OAM function. show ethernet oam statistics [interface INTERFACE-ID [, | -]] Parameters interface INTERFACE-ID Specifies the interface ID to display.
  • Page 472 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# 36-14 clear ethernet oam statistics This command is used to clear the statistics of the Ethernet OAM function. clear ethernet oam statistics {all | interface INTERFACE-ID [, | -]} Parameters Specifies to clear statistics of all interfaces.
  • Page 473 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide (Optional) Specifies a series of interfaces, or separate a range of interfaces from a previous range. No spaces before and after the comma. (Optional) Specifies a range of interfaces. No spaces before and after the hyphen.
  • Page 474 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Window 10 (decisecond) Threshold Accumulated errors : 10 0 Errored Frame Period records 0 Errored Frame Second records Switch# Display Parameters Event index When event was generated each event had the index.
  • Page 475 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Example This example shows how to clear the Ethernet OAM event log of interface eth1/0/1. Switch# clear ethernet oam event-log interface eth1/0/1 Switch#...
  • Page 476: Ethernet Ring Protection Switching (Erps) Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 37. Ethernet Ring Protection Switching (ERPS) Commands 37-1 description This command is used to specify a string that serves as a description for a G.8032 Ethernet ring instance. description DESCRIPTION...
  • Page 477 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Default None. Command Mode Global Configuration Mode. Command Default Level Level: 12. Usage Guideline Use the Ethernet ring G.8032 command to create or modify a G.8032 ring and enter the ERP configuration mode.
  • Page 478 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 37-4 tcn-propagation This command is used to enable the propagation of topology change notifications from the sub-ERP instance to the major instance. Use the no form of this command to disable the propagation of topology change notifications.
  • Page 479 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode ERP Instance Configuration Mode. Command Default Level Level: 12. Usage Guideline Use this command to assign the APS channel VLAN for an ERP instance. The APS channel VLAN needs to be assigned before an ERP instance can be set to operation state.
  • Page 480 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode ERP Instance Configuration Mode. Command Default Level Level: 12. Usage Guideline Use this command to configure the VLANs to be protected by the ERP instance. Example This example shows how to configure the service protected VLAN as 100 to 200 for ERP instance 1.
  • Page 481 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Example This example shows how to create an ERP instance 1 in the physical ring named “major-ring”. Switch# configure terminal Switch(config)# ethernet_ring g8032 major-ring Switch(config-erp-instance)# instance 1 Switch(config-erp-instance)# 37-8 level This command is used to configure the ring MEL value of an ERP instance.
  • Page 482 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to specify the sub-ring of a physical ring. Use the no form of the command to remove the sub-ring of a physical ring. sub-ring SUB-RING-NAME...
  • Page 483 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Default Level Level: 12. Usage Guideline Multiple ERP instances can be associated with the same profile. Generally, the instances associated with the same G.8032 profile protect the same set of VLANs or the set of VLANs protected by one instance is a subset of LANs protected by another instance.
  • Page 484 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Default Level Level: 12. Usage Guideline Use this command to configure the first ring port of a physical ring. Example This example shows how to configure the interface eth3/0/1 as the first ring port of the G.8032 ring “major-ring”.
  • Page 485 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config)# ethernet ring g8032 ring2 Switch(config-erp)# port1 none Switch(config-erp)# 37-13 revertive This command is used to restore to the working transport entity, in the case of the clearing of a defect.
  • Page 486 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide no rpl Parameters port0 Specifies port 0 as the RPL port. port1 Specifies port 1 as the RPL port. owner Specifies the ring node as the RPL owner node for the configured instance.
  • Page 487 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Default Level Level: 1. Usage Guideline Use the show ethernet ring g8032 brief command to display brief information of ERP instances. Use the show ethernet ring g8032 status command to display status information of ERP instances.
  • Page 488 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Admin Port1: none Operational Port1:none Port1 State:- Admin RPL Port : Port0 Operational RPL Port : Port0 Total Entries: 2 Switch# Display Parameters The ring MEL value of the ERP instance.
  • Page 489 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# Display Parameters Profile The profile associated with the ring instances. Inst ID The instance identifier of the ERP instance. RingType Indicates either the major ring or sub-ring. Node Type The RPL owner or neighbor.
  • Page 490 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# configure terminal Switch(config)# ethernet ring g8032 major-ring Switch(config-erp)# instance 1 Switch(config-erp-instance)# profile campus Switch(config-erp-instance)# activate Switch(config-erp-instance)# 37-17 timer This command is used to configure timers for an ERP domain. Use the no form of this command to reset the timer to the default setting.
  • Page 491 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide...
  • Page 492: Expansion Module Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 38. Expansion Module Commands 38-1 port-mode This command is used to configure the expansion module’s port mode. port-mode unit UNIT-ID {1st_port | 2nd_port | 3rd_port | 4th_port} {4*10giga | 40giga}...
  • Page 493 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Usage Guideline This command is used to display the expansion module’s information. Example This example shows how to display the expansion module’s information: Switch# show module-info unit 1 Unit 1...
  • Page 494 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 2nd port mode:4*10G 3rd port mode:40G 4th port mode:40G 4QXS Port Mode Configuration: 1st port mode:40G 2nd port mode:4*10G 3rd port mode:40G 4th port mode:40G Switch#...
  • Page 495: File System Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 39. File System Commands 39-1 cd This command is used to change the current directory. cd [DIRECTORY-URL] Parameters DIRECTORY-URL Specifies the URL of the directory. If not specified, the current directory will be shown.
  • Page 496 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# 39-2 delete This command is used to to delete a file. delete FILE-URL Parameters FILE-URL Specifies the name of the file to be deleted. Default None. Command Mode Privileged EXEC Mode.
  • Page 497 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Default Level Level: 1. Usage Guideline If URL is not specified, the current directory is used. By default, the current directly is located at the root of the file system located at local flash. The storage media is mounted in the file system and appears to the user as a sub-directory under the root directory.
  • Page 498 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# format /d: All sectors will be erased, proceed? (y/n) [n] y Enter volume id (up to 11 characters):Profiles Format completed. Switch# 39-5 mkdir This command is used to create a directory under the current directory.
  • Page 499 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode Privileged EXEC Mode. Command Default Level Level: 15. Usage Guideline Use this command to display the contents of a file in the file system. The command is usually used to display text files.
  • Page 500 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide A file can be renamed to a file located either within the same directory or to another directory. Example This example shows how to rename file called “doc.1” to “test.txt”.
  • Page 501 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide unit UNIT-ID (Optional) Specifies the unit ID in the stacking system. If not specified, all units are displayed. Default None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1.
  • Page 502: Filter Database (Fdb) Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 40. Filter Database (FDB) Commands 40-1 clear mac-address-table This command is used to delete a specific dynamic MAC address, all dynamic MAC addresses on a particular interface, all dynamic MAC addresses on a particular VLAN, or all dynamic MAC addresses from the MAC address table.
  • Page 503 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide SECONDS Specifies the aging time in seconds. The valid range is 0 or 10 to 1000000 seconds. Setting the aging time to 0 will disable the MAC address table aging out function.
  • Page 504 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Example This example shows how to enable the destination MAC address triggered update function. Switch# configure terminal Switch(config)# mac-address-table aging destination-hit Switch(config)# 40-4 mac-address-table learning This command is used to enable MAC address learning on the physical port. Use the no form of the command to disable learning.
  • Page 505 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide no mac-address-table notification change [interval | history-size] Parameters interval SECONDS (Optional) Specifies the interval of sending the MAC address trap message. The range is 1 to 2147483647 and the default value is 1 second.
  • Page 506 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide specified interface. vlan VLAN-ID Specifies the VLAN of the entry. The range is 1 to 4094. interface INTERFACE-ID Specifies the forwarding ports. (Optional) Specifies a series of interfaces, or separate a range of interfaces from a previous range.
  • Page 507 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide multicast filtering-mode {forward-all | forward-unregistered | filter-unregistered} no multicast filtering-mode Parameters forward-all Specifies to flood all multicast packets based on the VLAN domain. forward-unregistered Specifies to forward registered multicast packets based on the forwarding table and flood all unregistered multicast packets based on the VLAN domain.
  • Page 508 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide interfaces include physical ports and port-channels. vlan VLAN-ID (Optional) Specifies the VLAN ID. The valid values are from 1 to 4094. Default None. Command Mode User EXEC or Any Configuration Mode.
  • Page 509 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Total Entries: 2 Switch# 40-9 show mac-address-table aging-time This command is used to display the MAC address table’s aging time. show mac-address-table aging-time Parameters None. Default None. Command Mode User EXEC or Any Configuration Mode.
  • Page 510 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Default None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline If the interface is not specified, all existing interfaces will be displayed.
  • Page 511 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Level: 1. Usage Guideline If no option is specified, the global configuration will be displayed. Use the interface keyword to display information about all interfaces. If the interface ID is included, the specified interface will be displayed.
  • Page 512 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# show mac-address-table notification change history History Index: 1 Operation:ADD Vlan: 1 MAC Address: 00-f8-d0-12-34-56 eth1/0/1 History Index: 2 Operation:DEL Vlan: 1 MAC Address: 00-f8-d0-00-00-01 eth1/0/1 History Index: 3...
  • Page 513 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to enable the sending of SNMP MAC notification traps. Use the no form of the command to disable the sending of SNMP MAC notification traps.
  • Page 514 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Level: 12. Usage Guideline Even when enabling the notification trap for a specific interface by using the snmp trap mac-notification change command, the notification is sent to the notification history table only when the mac-address- table notification change command was enabled.
  • Page 515: Garp Vlan Registration Protocol (Gvrp) Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 41. GARP VLAN Registration Protocol (GVRP) Commands 41-1 clear gvrp statistics This command is used to clear the statistics for a GVRP port. clear gvrp statistics {all | interface INTERFACE-ID [, | -]}...
  • Page 516 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode Global Configuration Mode. Command Default Level Level: 12. Usage Guideline Administrators can enable the global GVRP state and individual port’s GVRP state to start GVRP on the port.
  • Page 517 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 41-4 gvrp advertise This command is used to specify the VLAN that are allowed to be advertised by the GVRP protocol. Use the no command to disable the VLAN advertisement function.
  • Page 518: Gvrp Forbidden

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide gvrp vlan create no gvrp vlan create Parameters None. Default By default, this option is enabled. Command Mode Global Configuration Mode. Command Default Level Level: 12. Usage Guideline When dynamic VLAN creation is enabled, if a port has learned a new VLAN membership and the VLAN does not exist, the VLAN will be created automatically.
  • Page 519: Gvrp Timer

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide comma. (Optional) Specifies a range of VLANs. No spaces are required before and after the hyphen. Default No VLANs are forbidden. Command Mode Interface Configuration Mode. Command Default Level Level: 12.
  • Page 520 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Leave: 60. Leave-all: 1000. Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline This command is used to configure the GVRP timer value on a port.
  • Page 521: Show Gvrp Configuration

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# configure terminal Switch(config)# gvrp nni-bpdu-address dot1d Switch(config)# 41-9 show gvrp configuration This command is used to display the GVRP settings. show gvrp configuration [interface [INTERFACE-ID [,|-]]] Parameters configuration Specifies to display the GVRP configuration.
  • Page 522: Show Gvrp Statistics

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Advertise VLAN : 1-4094 Forbidden VLAN : 3-5 eth3/0/6 GVRP Status : Enabled Join Time : 20 centiseconds Leave Time : 60 centiseconds Leave-All Time : 1000 centiseconds Advertise VLAN...
  • Page 523 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide...
  • Page 524: Gratuitous Arp Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 42. Gratuitous ARP Commands 42-1 ip arp gratuitous This command is used to enable the learning of gratuitous ARP packets in the ARP cache table. To disable ARP control, use the no form of this command.
  • Page 525 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Default Level Level: 12. Usage Guideline A gratuitous ARP request packet is an ARP request packet where the source and the destination IP address are both set to the IP address of the sending device and the destination MAC address is the broadcast address.
  • Page 526 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# configure terminal Switch(config)# ip gratuitous-arps switch(config)# interface vlan100 Switch(config-if)# arp gratuitous-send interval 1 Switch(config-if)#...
  • Page 527: Igmp Proxy Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 43. IGMP Proxy Commands 43-1 ip igmp proxy This command is used to enable the IGMP proxy function. Use the no form of this command to disable the IGMP proxy function.
  • Page 528 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide None. Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline Only one upstream can exist in an IGMP proxy device. Example This example shows how to configure interface VLAN 3 to act as the proxy upstream interface.
  • Page 529 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to enable designated forwarding on a non-querier IGMP proxy downstream interface. Use the no form of this command to disable it. ip igmp proxy designated-forwarding...
  • Page 530 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Usage Guideline Use this command to display upstream interface configurations and downstream interfaces. Example This example shows how to display the IGMP proxy configurations on the device. Switch# show ip igmp proxy...
  • Page 531 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 43-7 show ip igmp proxy forwarding This command is used to display multicast forwarding entries created by the IGMP proxy function. show ip igmp proxy forwarding [GROUP-ADDRESS] Parameters GROUP-ADDRESS Specifies the IPv4 multicast address.
  • Page 532: Igmp Snooping Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 44. IGMP Snooping Commands 44-1 clear ip igmp snooping statistics This command is used to clear the IGMP snooping related statistics. clear ip igmp snooping statistics {all | vlan VLAN-ID | interface INTERFACE-ID}...
  • Page 533 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode Interface Configuration Mode. Global Configuration Mode. Command Default Level Level: 12. Usage Guideline In the interface configuration mode, the command is only available for VLAN interface configuration. For a VLAN to operate with IGMP snooping, both the global state and per interface state must be enabled.
  • Page 534 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide None. Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline Use the ip igmp snooping access-group command on the router to restrict the multicast traffic receiver to join to specific group.
  • Page 535 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Usage Guideline The command is only available for VLAN interface configuration. The ip igmp snooping fast-leave command allows IGMP membership to be removed from a port right on receiving the leave message without using the group specific or group-source specific query mechanism.
  • Page 536 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to configure the interval at which the IGMP snooping querier sends IGMP group- specific or group-source-specific (channel) query messages. Use the no form of the command to revert to the default setting.
  • Page 537 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide limitation is exceeded. drop: Specifies that the new group will be dropped. replace: Specifies that the new group will replace the oldest group. ACCESS-LIST-NAME Specifies a standard IP access list. The group (*,G), or channel (S,G) permitted by the access list will be excluded from the limit.
  • Page 538: Ip Igmp Snooping Mrouter

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config)# interface eth4/0/24 Switch(config-if)# ip igmp snooping limit 80 except igmp_filter vlan 1000 Switch(config-if)# This example shows how to set the limit number of IGMP snooping groups with a configuration limit from an ACL that port-channel 4 (which is an access port) with the VLAN ID of 100 can join to.
  • Page 539 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide No IGMP snooping multicast router port is configured. Auto-learning is enabled. Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline This command is only available for VLAN interface configuration. To specify a multicast router port, the valid interface can be a physical port or a port-channel.
  • Page 540: Ip Igmp Snooping Querier

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide used as source MAC of the report. If the VLAN has no IP address configured, then system MAC will be used. Example This example shows how to enable IGMP snooping proxy-reporting on VLAN 1 and configure the proxy- reporting message source IP to be 1.2.2.2.
  • Page 541 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide ip igmp snooping query-interval SECONDS no ip igmp snooping query-interval Parameters SECONDS Specifies to configure the interval at which the designated router sends IGMP general-query messages. The range is 1 to 31744.
  • Page 542 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Level: 12. Usage Guideline This command is only available for VLAN interface configuration. This command configures the period of which the group member can respond to an IGMP query message before the IGMP Snooping deletes the membership.
  • Page 543 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 44-14 ip igmp snooping rate-limit This command is used to configure the upper limit per second for ingress IGMP control packets. Use the no form of this command to disable the rate limit.
  • Page 544 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline This command is only available for VLAN interface configuration. The report suppression function only works for IGMPv1 and IGMPv2 traffic. When report suppression is enabled, the switch suppresses the duplicate reports sent by hosts.
  • Page 545 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide • Last member query count – The number of group-specific queries sent before the router assumes there are no local members of a group. The default number is the value of the robustness variable.
  • Page 546 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config-vlan)# ip igmp snooping static-group 226.1.2.3 interface eth3/0/5 Switch(config-vlan)# 44-18 ip igmp snooping suppression-time This command is used to configure the interval of suppressing duplicate IGMP reports or leaves. Use the no form of the command to revert to the default setting.
  • Page 547: Show Ip Igmp Snooping

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Specifies to filter out IGMPv1 messages. Specifies to filter out IGMPv1 and IGMPv2 messages. Default By default, there is no limit on the minimum version. Command Mode Interface Configuration Mode.
  • Page 548: Show Ip Igmp Snooping Groups

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline Use this command to display IGMP snooping information for all VLANs where IGMP snooping is enabled.
  • Page 549 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline Use this command to display IGMP snooping group information. Example This example shows how to display IGMP snooping group information.
  • Page 550: Show Ip Igmp Snooping Mrouter

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide eth3/0/1: Rate limit: 30pps Access group:igmp_filter Groups/Channel Limit:25 (Exception List: igmp_filter, exceed-action: drop) eth3/0/3: Rate limit: 20pps vlan1: Access group:igmp_filter Groups/Channel Limit:Not Configured vlan2: Access group:Not Configured Groups/Channel Limit:100 (exceed-action: replace) port-channel4:...
  • Page 551 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide enabled. Default None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline Use this command to display dynamically learned or manually configured multicast router interfaces.
  • Page 552 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command displays the IGMP snooping related statistics information. Example This example shows how to display IGMP snooping statistics information. Switch# show ip igmp snooping statistics vlan 1 VLAN 1 Statistics:...
  • Page 553: Interface Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 45. Interface Commands 45-1 clear counters This command is used to clear counters for a physical port interface. clear counters {all | interface INTERFACE-ID [,|-]} Parameters Specifies to clear counters for all interfaces.
  • Page 554 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Default Level Level: 12. Usage Guideline The specified description corresponds to the MIB object “ifAlias” defined in the RFC 2233. Example This example shows how to add the description “Physical Port 10” to interface eth 1/0/10.
  • Page 555: Interface Range

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide For physical port interfaces, the user cannot enter the interface if the switch port does not exist. The physical port interface cannot be removed by the no command. Use the interface vlan command to create Layer 3 interfaces. Use the vlan command in the global configuration mode to create a VLAN before creating Layer 3 interfaces.
  • Page 556 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters Ethernet Specifies that Ethernet ports will be used for this configuration. PORTLIST Enter the list of ports that will be used for this configuration here. Default None. Command Mode Global Configuration Mode.
  • Page 557 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide eth1/0/1 counters rxHCTotalPkts txHCTotalPkts rxHCUnicastPkts txHCUnicastPkts rxHCMulticastPkts txHCMulticastPkts rxHCBroadcastPkts txHCBroadcastPkts rxHCOctets txHCOctets rxHCPkt64Octets rxHCPkt65to127Octets rxHCPkt128to255Octets rxHCPkt256to511Octets rxHCPkt512to1023Octets rxHCPkt1024to1518Octets rxHCPkt1519to1522Octets rxHCPkt1519to2047Octets rxHCPkt2048to4095Octets rxHCPkt4096to9216Octets txHCPkt64Octets txHCPkt65to127Octets txHCPkt128to255Octets txHCPkt256to511Octets txHCPkt512to1023Octets txHCPkt1024to1518Octets txHCPkt1519to1522Octets...
  • Page 558: Show Interfaces

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide dot3StatsSQETestErrors dot3StatsDeferredTransmisions dot3StatsLateCollisions dot3StatsExcessiveCollisions dot3StatsInternalMacTransmitErrors : 0 dot3StatsCarrierSenseErrors dot3StatsFrameTooLongs dot3StatsInternalMacReceiveErrors linkChange Switch# 45-6 show interfaces This command is used to display the interface information. show interfaces [INTERFACE-ID [- | ,]]...
  • Page 559 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide loopback1 is enabled, link status is up Interface type: Loopback Interface description: Loopback 1 for MIS Switch# This example shows how to display the NULL interface information for interface null0.
  • Page 560: Show Interfaces Counters

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 45-7 show interfaces counters This command is used to display counters on specified interfaces. show interfaces [INTERFACE-ID [,|-]] counters [errors] Parameters errors (Optional) Specifies to display the error counters.
  • Page 561 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide OutUcastPkts OutBcastPkts ------------- ---------------------- ---------------------- eth1/0/1 5387265 9381 eth1/0/2 eth1/0/3 eth1/0/4 eth1/0/5 eth1/0/6 eth1/0/7 eth1/0/8 Total Entries:8 Switch# This example shows how to display switch ports error counters. Switch# show interfaces ethernet 2/0/1-8,3/0/1-4 counters errors...
  • Page 562: Show Interfaces Status

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide eth3/0/2 eth3/0/3 eth3/0/4 Port Giants Symbol-Err SQETest-Err DeferredTx IntMacTx IntMacRx ------------- ---------- ---------- ---------- ---------- ---------- ---------- eth2/0/1 eth2/0/2 eth2/0/3 eth2/0/4 eth2/0/5 eth2/0/6 eth2/0/7 eth2/0/8 eth3/0/1 eth3/0/2 eth3/0/3 eth3/0/4...
  • Page 563 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide ------------- ------------- ------------ ------- -------------- ------------- eth1/0/1 not-connected 1 auto auto 10GBASE-R eth1/0/2 not-connected 1 auto auto 10GBASE-R eth1/0/3 not-connected 1 auto auto 10GBASE-R eth1/0/4 not-connected 1 auto auto...
  • Page 564 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide eth1/0/6 eth1/0/7 eth1/0/8 Total Entries: 8 Switch# 45-10 show interfaces auto-negotiation This command is used to display detailed auto-negotiation information of physical port interfaces. show interfaces [INTERFACE-ID [,|-]] auto-negotiation...
  • Page 565 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# 45-11 shutdown This command is used to disable an interface. Use the no form of the command to enable an interface. shutdown no shutdown Parameters None. Default By default, this option is no shutdown.
  • Page 566: Internet Group Management Protocol (Igmp) Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 46. Internet Group Management Protocol (IGMP) Commands 46-1 clear ip igmp groups This command is used to clear dynamic group member information obtained from the response messages in the IGMP buffer.
  • Page 567: Ip Igmp Enable

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to disable checking the subscriber’s source IP when an IGMP report or leave message is received. Use the no form of this command to reset to the default setting.
  • Page 568 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Default Level Level: 12. Usage Guideline This command is only available for VLAN interface configuration. This command only takes effect when the interface has IP address configured. Example This example shows how to enable IGMP on VLAN 1.
  • Page 569 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config-if)# ip igmp enable Switch(config-if)# ip igmp last-member-query-interval 2 Switch(config-if)# 46-5 ip igmp query-interval This command is used to configure the interval at which the router sends IGMP general query messages periodically.
  • Page 570 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters SECONDS Specifies to configure the maximum response time, in seconds, advertised in IGMP queries. The range is form 1 to 25. Default By default, this value is 10 seconds.
  • Page 571 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide The robustness variable provides fine tuning to allow for expected packet loss on an interface. The value of the robustness variable is used in calculating the following IGMP message intervals: •...
  • Page 572 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 46-9 ip igmp ssm-map static This command is used to create a static SSM mapping entry for IGMPv1 or IGMPv2 hosts. Use the no form of the command to delete an entry.
  • Page 573: Ip Igmp Version

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config)# ip access-list CHANNEL-2 Switch(config-ip-acl)# permit any 232.1.1.2 255.255.255.255 Switch(config-ip-acl)# exit Switch(config)# ip igmp ssm-map static CHANNEL-1 10.1.1.1 Switch(config)# ip igmp ssm-map static CHANNEL-2 10.2.1.1 Switch(config)# 46-10 ip igmp static-group This command is used to create a static membership on an interface for a group or a channel.
  • Page 574 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters Specifies to configure the switch to run IGMP version 1. Specifies to configure the switch to run IGMP version 2. Specifies to configure the switch to run IGMP version 3.
  • Page 575 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Default Level Level: 1. Usage Guideline Select to display multicast group information for a specific group or for a specific interface. Example This example shows how to display IGMP group information in interface VLAN 1000.
  • Page 576: Show Ip Igmp Interface

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide [n]DT[n]H[n]M[n]S. Expires The time that the entry will be removed if there is no refresh on the entry in the format of [n]DT[n]H[n]M[n]S. Stopped indicates that timing out of this entry is not determined by this expire timer.
  • Page 577 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Subscriber Source IP Check : Enabled Total Entries: 1 Switch# Display Parameters Version The IGMP protocol version running on the interface. Querier The querier IP on the interface LAN.
  • Page 578 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide SSM Mapping : Enabled Group address: 232.1.1.1 Source address: 10.1.1.1 Switch# Display Parameters SSM Mapping Enabled/Disabled: Indicates that the SSM mapping function is enabled or disabled. Group address The SSM group address.
  • Page 579: Ip Multicast (Ipmc) Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 47. IP Multicast (IPMC) Commands 47-1 clear ip multicast-statistics This command is used to clear the multicast protocol packet statistics counters. clear ip multicast-statistics [igmp] [pim] [dvmrp] Parameters igmp (Optional) Specifies to clear IGMP packets counter.
  • Page 580 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode Global Configuration Mode. Command Default Level Level: 12. Usage Guideline This command is used to configure the IP multicast forwarding lookup mode. Example This example shows how to configure the IP multicast forwarding lookup mode to MAC.
  • Page 581: Show Ip Multicast

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide ip mroute SOURCE-ADDRESS MASK {RPF-ADDRESS | null} no ip mroute {SOURCE-ADDRESS MASK | all} Parameters SOURCE-ADDRESS Specifies the network address of the multicast source. MASK Specifies the network mask for the multicast source.
  • Page 582: Show Ip Mroute

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to display multicast information of the system or any IP interface. show ip multicast [interface [INTERFACE-ID]] Parameters INTERFACE-ID (Optional) Specifies the interface name to display IP multicast information.
  • Page 583 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters GROUP-ADDRESS (Optional) Specifies the group IP address. SOURCE-ADDRESS Specifies the multicast source IP address. summary (Optional) Specifies to display an one-line, abbreviated summary of each entry in the IP multicast routing table.
  • Page 584 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide vlan121, Forwarding 0DT00H01M23S/0DT00H03M34S vlan125, Forwarding 0DT00H01M23S/null (20.1.1.1, 228.0.0.20), 0DT05H29M15S/0DT00H02M59S flags: D Incoming interface: vlan10, RPF neighbor: 10.3.4.5 Outgoing interface list: NULL Total Entries: 2 Switch# This example shows how to display a multicast sparse mode route entry.
  • Page 585 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Default None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline Display the content of the IP multicast forwarding cache information. IP multicast forwarding cache is a summary table from the IP multicast route table, IGMP snooping group member table, and multicast router ports.
  • Page 586 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Usage Guideline This command displays how the IP multicast routing performs RPF. Because the router can find RPF information from multiple routing tables (For example, the Unicast Routing Information Base, or static mroutes), the show ip rpf command displays the source from which the information is retrieved.
  • Page 587 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide show ip multicast-statistics [igmp] [pim] [dvmrp] [interface [INTERFACE-ID]] Parameters INTERFACE-ID (Optional) Specifies the interface name for which to display IP multicast statistics counter. igmp (Optional) Specifies to display both received and sent IGMP packets counter.
  • Page 588 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide DVMRP Probe DVMRP Report DVMRP Prune DVMRP Graft DVMRP Graft-Ack Unknown DVMRP Switch#...
  • Page 589: Ip Source Guard Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 48. IP Source Guard Commands 48-1 ip verify source vlan dhcp-snooping This command is used to enable IP source guard for a port. Use the no form of the command to disable IP source guard.
  • Page 590: Show Ip Source Binding

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide no ip source binding MAC-ADDRESS vlan VLAN-ID IP-ADDRESS interface INTERFACE-ID [, | -] Parameters MAC-ADDRESS Specifies the MAC address of the IP-to-MAC address binding entry. vlan VLAN-ID Specifies the VLAN that the valid host belongs to.
  • Page 591 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide show ip source binding [IP-ADDRESS] [MAC-ADDRESS] [dhcp-snooping | static] [vlan VLAN-ID] [interface INTERFACE-ID [, | -]] Parameters IP-ADDRESS (Optional) Specifies to display the IP-source guard binding entry based on IP address.
  • Page 592: Show Ip Verify Source

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide MAC Address IP Address Lease(sec) Type VLAN Interface ----------------- --------------- ---------- ------------- ----- ---------- 00-01-01-01-01-01 10.1.1.10 infinite static eth3/0/3 Total Entries: 1 Switch# This example shows how to display IP Source Guard binding entries by IP address 10.1.1.11, MAC address 00-01-01-01-01-10, at VLAN 100 on interface eth3/0/3 and learning by DHCP snooping.
  • Page 593 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Default None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline Use this command to display the hardware port ACL entries for a port in the hardware table. It indicates the hardware filter behavior that IP source guard is verified upon.
  • Page 594 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide source entry verification active. inactive-no-snooping-vlan: No DHCP snooping VLAN configured with no IP source entry verification active. IP address The client’s IP address assigned from the DHCP server or configured by the user.
  • Page 595: Ip Tunnel Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 49. IP Tunnel Commands 49-1 interface tunnel This command is used to create a tunnel and enter the interface configuration mode. Use the no command to remove a tunnel.
  • Page 596: Tunnel Destination

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline The command is only available for tunnel interface configuration. Use these commands to configure the source IP address for a tunnel interface. Assign the source IPv4 address for both manual and automatic IPv6 over IPv4 tunnel.
  • Page 597: Tunnel Mode

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Level: 12. Usage Guideline This command is only available for tunnel interface configuration. Use this command to configure the destination IPv4 or IPv6 address for a tunnel interface. Assign the destination IPv4 address for a manually configured IPv6 over IPv4 tunnel.
  • Page 598: Show Interface

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide is dynamically and automatically determined. There are two types of automatic IPv6 over IPv4 tunnels: 6to4 and ISATAP. The 6to4 tunnel is mainly used for IPv6 network to network, or host to network communication. The ISATAP tunnel is mainly used for IPv6 host to host communication.
  • Page 599 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This example shows how to display information for tunnel 3. Switch#show interface tunnel3 tunnel3 is enabled, link status is up Interface type is tunnel Interface Description: Tunnel mode is ipv6ip Tunnel source 20.0.0.3(VLAN1), destination 11.76.2.3...
  • Page 600 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide...
  • Page 601: Ip Utility Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 50. IP Utility Commands 50-1 ping This command is used to diagnose basic network connectivity. ping [vrf VRF-NAME] {IP-ADDRESS | IPV6-ADDRESS | HOST-NAME} [count TIMES] [timeout SECONDS] [source {IP-ADDRESS | IPV6-ADDRESS}]...
  • Page 602 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# This example shows how to ping the host with IPv6 address 2001:238:f8a:77:7c10:41c0:6ddd:ecab. Switch# ping 2001:238:f8a:77:7c10:41c0:6ddd:ecab Reply from 2001:238:f8a:77:7c10:41c0:6ddd:ecab , bytes=100, time<10 ms Reply from 2001:238:f8a:77:7c10:41c0:6ddd:ecab , bytes=100, time<10 ms Reply from 2001:238:f8a:77:7c10:41c0:6ddd:ecab , bytes=100, time<10 ms...
  • Page 603 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 50-3 traceroute This command is used to display a hop-by-hop path from the switch through an IP network to a specific destination host. traceroute [vrf VRF-NAME] {IP-ADDRESS | IPV6-ADDRESS | HOST-NAME}] [probe NUMBER]...
  • Page 604 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide sees a TTL value of 1, discards the datagram, and returns the time-exceeded message to the source. This process continues until the TTL is incremented to a value large enough for the datagram to reach the destination host (or until the maximum TTL is reached).
  • Page 605 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to add a target address for the forwarding of UDP broadcast packets. Use the no form of the command to remove a forwarding target address.
  • Page 606 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Default Common used application protocols are enabled. Command Mode Global Configuration Mode. Command Default Level Level: 12. Usage Guideline The following is a listing of the commonly used application protocols that will be forwarded by default if the IP helper address is configured.
  • Page 607: Ip-Mac-Port Binding (Impb) Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 51. IP-MAC-Port Binding (IMPB) Commands 51-1 clear ip ip-mac-port-binding violation This command is used to clear IP-MAC-Port Binding (IMPB) blocked entries. clear ip ip-mac-port-binding violation {all | interface INTERFACE-ID | MAC-ADDRESS} Parameters Specifies to clear all of the violation entries.
  • Page 608 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Default By default, this option is disabled. Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline When a port is enabled for IMPB strict-mode access control, a host can only access the port after the host sends ARP or IP packets and the ARP packet or IP packet sent by the host passes the binding check.
  • Page 609 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Default Level Level: 1. Usage Guideline Use this command to display the IMPB configuration or use the show ip ip-mac-port-binding violation command to display the entries blocked because of the IMPB check violation.
  • Page 610: Ipmcv6 Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 52. IPMCv6 Commands 52-1 ipv6 multicast-routing This command is used to enable IPv6 multicast routing. Use the no form of this command to disable IPv6 multicast routing. ipv6 multicast-routing...
  • Page 611: Show Ipv6 Multicast

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide RPF-IPV6ADDRESS Specifies the IPv6 address of the next hop that can be used to reach the specified network. INTERFACE-ID Specifies the RPF interface for the route. The interface where the RPF neighbor IPv6 address is located is the RPF interface.
  • Page 612: Show Ipv6 Mroute

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide multicast information. If no specific interface ID is specified, all interface will be displayed. If the keyword interface is not specified, the state of IPv6 multicast routing will be displayed.
  • Page 613 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters GROUP-ADDRESS (Optional) Specifies the group IPv6 address. SOURCE-ADDRESS (Optional) Specifies the multicast source IPv6 address. summary (Optional) Specifies to display a one-line, abbreviated summary of each entry in the IPv6 multicast routing table.
  • Page 614 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide vlan20 Switch# Display Parameters Flags Provides information about the entry. S – Sparse. Entry is operating in sparse mode. Timers: Uptime/Expires “Uptime” indicates per interface how long (in day, hours, minutes, and seconds) the entry has been in the IPv6 multicast routing table.
  • Page 615: Show Ipv6 Mroute Static

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# show ipv6 mroute forwarding-cache (2000:60:1:1::10, ff0e::1:1:1) VLAN0060 Outgoing interface list: 1/0/1, T2 (2000:60:1:1::10, ff0e::1:1:2) VLAN0060 Outgoing interface list: 1/0/1, 2/0/2 Total entries: 2 Switch# 52-6 show ipv6 mroute static This command is used to display IPv6 static multicast routes.
  • Page 616 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Mroute Indicates the IPv6 prefix of the remote network. Interface Specifies the interface of the next router (RPF neighbor) to the remote network. 52-7 show ipv6 rpf This command is used to check Reverse Path Forwarding (RPF) information for a given unicast host address.
  • Page 617 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide RPF route/mask: 2000::1000:0/64 RPF type: static Switch# This example shows how to display RPF information for the unicast host with the IPv6 address of 2000::3000:301. Switch# show ipv6 rpf 2000::3000:301...
  • Page 618: Ipv6 Snooping Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 53. IPv6 Snooping Commands 53-1 ipv6 snooping policy This command is used to create or modify an IPv6 snooping policy. This command will enter the IPv6 snooping configuration mode. Use the no command to delete an IPv6 snooping policy.
  • Page 619 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode IPv6 Snooping Configuration Mode. Command Default Level Level: 12. Usage Guideline ND Snooping is designed for a stateless auto-configuration assigned IPv6 address and manually configured IPv6 address. Before assigning an IPv6 address, the host must perform Duplicate Address Detection first.
  • Page 620 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# configure terminal Switch(config)# ipv6 snooping policy policy1 Switch(config-ipv6-snooping)# limit address-count 25 Switch(config-ipv6-snooping)# 53-4 ipv6 snooping attach-policy This command is used to apply an IPv6 snooping policy to a specified VLAN. Use the no command to remove the binding.
  • Page 621 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters None. Default IPv6 snooping is permitting station moves. Command Mode Global Configuration Mode. Command Default Level Level: 12. Usage Guideline When station move is permitted, the dynamic snooping binding entry with same VLAN ID and MAC address on the specific port can move to another port if it detects the following conditions: •...
  • Page 622 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Snooping policy: test1 Protocol: DHCP, NDP Limit Address Count: 30 Target VLAN: 100,200-210,4000 Switch# Display Parameters Protocol The protocol used for snooping. Limit Address Count The maximum number of this IPv6 Snooping policy.
  • Page 623: Ipv6 Source Guard Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 54. IPv6 Source Guard Commands 54-1 ipv6 source binding vlan This command is used to add a static entry to the binding table. Use the no form of this command to remove the static binding entry.
  • Page 624 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide POLICY-NAME Specifies the name of the source guard policy. Default None. Command Mode Global Configuration Mode. Command Default Level Level: 12. Usage Guideline The command is used to create a source guard policy name. This command will enter into the source guard policy configuration mode.
  • Page 625 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config-source-guard)# 54-4 permit link-local This command is used to allow hardware permitted data traffic send by the link-local address. Use the no form of this command to disable this function...
  • Page 626 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline When the command is applied to a port, the received IPv6 packet except ND, RA, RS and DHCP messages will perform the address binding check. The packet is allowed when it matches any of the address binding table’s entries.
  • Page 627 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# 54-7 show ipv6 neighbor binding This command is used to display the IPv6 binding table. show ipv6 neighbor binding [vlan VLAN-ID] [interface INTERFACE-ID] [ipv6 IPV6-ADDRESS] [mac MAC-ADDRESS] Parameters...
  • Page 628 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Codes The codes for the IPv6 snooping owner. D: DHCPv6 Snooping. S: Static. N: ND Snooping. IPv6 address The IPv6 address of the binding entry. MAC address The MAC address of the binding entry.
  • Page 629: Jumbo Frame Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 55. Jumbo Frame Commands 55-1 max-rcv-frame-size This command is used to configure the maximum Ethernet frame size allowed. Use the no form of the command to revert to the default setting.
  • Page 630: Layer 2 Protocol Tunnel (L2Pt) Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 56. Layer 2 Protocol Tunnel (L2PT) Commands 56-1 clear l2protocol-tunnel counters This command is used to clear the Layer 2 Protocol Tunnel (L2PT) statistics counters. clear l2protocol-tunnel counters {all | interface INTERFACE-ID} Parameters Specifies to clear counters for all interfaces.
  • Page 631 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 01-00-0c-cc-cc-cd (Optional) Specifies to tunnel the protocol packets with this destination Default By default, this option is disabled. Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline Use the command to enable tunneling of the Layer 2 protocol packet.
  • Page 632 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide no l2protocol-tunnel cos Parameters COS-VALUE Specifies the CoS value. The values are from 0 to 7. 7 is the highest priority. Default By default, this value is 5. Command Mode Global Configuration Mode.
  • Page 633 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline The tunneling of the Layer 2 protocol packets will consume CPU processing power when encapsulating, decapsulating and forwarding packets. Use this command to restrict the CPU processing bandwidth consumption by specifying a threshold in the tunneling of the specified Layer 2 protocol packets received by a port before it is dropped.
  • Page 634 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide by the system. When the maximum number of packets is exceeded, the excessive protocol packets are dropped. Use the l2protocol-tunnel global drop-threshold command and the l2protocol-tunnel drop-threshold command in the global configuration mode to leverage the bandwidth restriction.
  • Page 635 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This example shows how to specify the maximum number of STP packets that can be processed on that interface in 1 second. Switch# configure terminal Switch(config)# interface ethernet 1...
  • Page 636 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch#...
  • Page 637: Link Aggregation Control Protocol (Lacp) Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 57. Link Aggregation Control Protocol (LACP) Commands 57-1 channel-group This command is used to assign an interface to a channel group. Use the no form of the command to remove an interface from a channel-group.
  • Page 638 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 57-2 lacp port-priority This command is used to configure the port priority. Use the no form of the command to revert the port priority to the default settings. lacp port-priority PRIORITY...
  • Page 639 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide PDU periodic transmissions when using Long Timeouts Default By default, the LACP timeout mode is short. Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline This command is available for physical port interface configuration.
  • Page 640 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Example This example shows how to configure the LACP system priority to be 30000. Switch# configure terminal Switch(config)# lacp system-priority 30000 Switch(config)# 57-5 port-channel load-balance This command is used to configure the load balance algorithm that the switch uses to distribute packets across ports in the same channel.
  • Page 641 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config)# port-channel load-balance src-ip Switch(config)# 57-6 show channel-group This command is used to display the channel group information. show channel-group [channel [CHANNEL-NO] {detail | neighbor} | load-balance | sys-id]...
  • Page 642 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Port Flags State Priority Number ------------------------------------------------- eth1/0/10 bndl 32768 eth1/0/11 bndl 32768 Channel Group 2 Member Ports: 2, Maxports = 12, Protocol: Static LACP Port Port Port Flags State...
  • Page 643 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Group Protocol ------------------------ LACP Static Switch#...
  • Page 644: Link Layer Discovery Protocol (Lldp) Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 58. Link Layer Discovery Protocol (LLDP) Commands 58-1 clear lldp counters This command is used to delete LLDP statistics. clear lldp counters [all | interface INTERFACE-ID [, | -]]...
  • Page 645 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Specifies to clear LLDP neighboring information for all interfaces. INTERFACE-ID Specifies the interface’s ID. (Optional) Specifies a series of physical interfaces. No spaces before and after the comma. (Optional) Specifies a range of physical interfaces. No spaces before and after the hyphen.
  • Page 646 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide sent. vlan-name Specifies the VLAN name TLV to send. The VLAN name TLV is an optional TLV that allows an IEEE 802.1Q-compatible IEEE 802 LAN station to advertise the assigned name of any VLAN with which it is configured.
  • Page 647 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This example shows how to enable advertising Port and Protocol VLAN ID TLV. The advertised VLAN includes 1 to 3. Switch# configure terminal Switch(config)# interface ethernet 1/0/1 Switch(config-if)# lldp dot1-tlv-select protocol-vlan 1-3 Switch(config-if)# This example shows how to enable the VLAN Name TLV advertisement from vlan1 to vlan3.
  • Page 648 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Default Level Level: 12. Usage Guideline If the optional TLVs advertisement state is enabled, they will be encapsulated in LLDPDU and sent to other devices. The Data Center Bridging Exchange protocol (DCBX) is used by DCB devices to exchange configuration information with directly connected peers.
  • Page 649 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide capability of the implemented MAC and PHY. energy-efficient-eth (Optional) Specifies the energy efficient Ethernet TLV to send Default No IEEE 802.3 Organizationally Specific TLV is selected. Command Mode Interface Configuration Mode.
  • Page 650 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Example This example shows how to configure the LLDP MED fast start repeat count. Switch# configure terminal Switch(config)# lldp fast-count 10 Switch(config)# 58-7 lldp hold-multiplier This command is used to configure the hold multiplier for LLDP updates on the switch. Use the no form of this command to return to the default settings.
  • Page 651 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters IP-ADDRESS (Optional) Specifies the IPv4 address that is carried in the management address TLV. IPV6-ADDRESS (Optional) Specifies the IPv6 address that is carried in the management address TLV.
  • Page 652 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config-if-range)# This example shows how to delete the management address FE80::250:A2FF:FEBF:A056 from eth3/0/3. and eth3/0/4. Switch# configure terminal Switch(config)# interface range eth3/0/3-3/0/4 Switch(config-if-range)# no lldp management-address FE80::250:A2FF:FEBF:A056 Switch(config-if-range)# This example shows how to delete all management addresses from eth3/0/5 and then no Management Address TLV will be sent on eth3/0/5.
  • Page 653: Lldp Receive

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Example This example shows how to enable transmitting LLDP-MED TLVs and LLDP-MED Capabilities TLVs. Switch# configure terminal Switch(config)# interface ethernet 1/0/1 Switch(config-if)# lldp med-tlv-select capabilities Switch(config-if)# 58-10 lldp receive This command is used to enable a physical interface to receive LLDP messages.
  • Page 654 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters SECONDS Specifies the delay value for LLDP initialization on an interface. This value must be between 1 and 10 seconds. Default By default, this value is 2 seconds.
  • Page 655 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide By advertising LLDP packets, the switch announces the information to its neighbor through physical interfaces. On the other hand, the switch will learn the connectivity and management information from the LLDP packets advertised from the neighbor(s).
  • Page 656: Lldp Transmit

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters port-description (Optional) Specifies the port description TLV to send. The port description TLV allows network management to advertise the IEEE 802 LAN station’s port description. system-capabilities (Optional) Specifies the system capabilities TLV to send. The system capabilities field will contain a bit-map of the capabilities that defines the primary functions of the system.
  • Page 657 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters None. Default LLDP transmit is enabled on all supported interfaces. Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline This command is available for physical port configuration. This command is used to enable LLDP transmission on a physical interface.
  • Page 658 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide The LLDP transmission interval must be greater than or equal to four times of the transmission delay timer. Example This example shows how to configure the transmission delay timer to 8 seconds.
  • Page 659 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters (Optional) Specifies to enable the LLDP-MED trap state. Default The LLDP and LLDP-MED trap states are disabled. Command Mode Global Configuration Mode. Command Default Level Level: 12. Usage Guideline Use the snmp-server enable traps lldp command to enable the sending of LLDP notifications.
  • Page 660: Show Lldp

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# configure terminal Switch(config)# interface eth2/0/1 Switch(config-if)# lldp med notification enable Switch(config-if)# 58-20 lldp subtype This command is used to configure the subtype of LLDP TLV(s). lldp subtype port-id {mac-address | local}...
  • Page 661: Show Lldp Interface

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Default None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline This command is used to display the LLDP system’s global configurations. Example This example shows how to display the LLDP system’s global configuration status.
  • Page 662 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters INTERFACE-ID Specifies to display the LLDP configuration for a specific interface. Valid interfaces are physical interfaces. (Optional) Specifies a series of physical interfaces. No spaces before and after the comma.
  • Page 663: Show Lldp Local Interface

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide LLDP-MED Organizationally Specific TLVs: LLDP-MED Capabilities TLV :Enabled LLDP-MED Network Policy TLV :Disabled LLDP-MED Extended Power Via MDI PSE TLV :Disabled LLDP-MED Inventory TLV :Disabled LLDP-DCBX Organizationally Specific TLVs:...
  • Page 664 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide normal mode. Default None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline This command displays each physical interface’s local LLDP information currently available for populating outbound LLDP advertisements.
  • Page 665 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Link Aggregation Aggregation Capability : Aggregated Aggregation Status : Not Currently in Aggregation Aggregation Port ID Maximum Frame Size : 1536 LLDP-MED Capabilities Support: Capabilities :Support Network Policy :Not Support...
  • Page 666 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide TC2 : 11 TC3 : 14 TC4 : 18 TC5 : 21 TC6 : 25 TC7 : 0 ETS Recommendation Traffic Selection Algorithm TC0 : tsaEnhancedTransmission TC1 : tsaEnhancedTransmission...
  • Page 667 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide LLDP-DCBX capabilities : (See Detail) Switch# This example shows how to display local information of port 1 in brief mode. Switch# show lldp local interface ethernet 1 brief Port ID: eth1/0/1...
  • Page 668 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide : 1.3.6.1.4.1.171.10.118.2 Advertising Ports Address 2 : ------------------------------------------------ Subtype : IPv4 Address : 10.90.90.90 IF Type : IfIndex : 1.3.6.1.4.1.171.10.118.2 Advertising Ports Total Entries : 2 Switch# 58-25 show lldp neighbor interface This command is used to display each physical interface’s information currently learned from the neighbor.
  • Page 669 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Port ID : eth4/0/9 ------------------------------------------------------------------------------- Remote Entities Count : 1 Entity 1 Chassis ID Subtype : MAC Address Chassis ID : 00-01-02-03-04-05 Port ID Subtype : Local Port ID...
  • Page 670 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Inventory Management (None) Switch# This example shows how to display remote LLDP information in the normal mode. Switch# show lldp neighbor interface eth3/0/1 Port ID : 1 ---------------------------------------------------------------------- Remote Entities Count : 2...
  • Page 671 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Maximum Frame Size : 1536 LLDP-MED capabilities : (See Detail) Extended power via MDI : (See Detail) Network policy : (See Detail) Inventory Management : (See Detail) Unknown TLVs Count Switch# This example shows how to display the neighbor information on eth3/0/1 to eth3/0/2 in brief mode.
  • Page 672 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 58-26 show lldp traffic This command is used to display the system’s global LLDP traffic information. show lldp traffic Parameters None. Default None. Command Mode User EXEC or Any Configuration Mode.
  • Page 673 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to display the each physical interface’s LLDP traffic information. show lldp traffic interface INTERFACE-ID [, | -] Parameters INTERFACE-ID Specifies the interface ID. (Optional) Specifies a series of interfaces, or separate a range of interfaces from a previous range.
  • Page 674 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide value is in the reserved range, and not recognized. Total Ageouts The total number of times a complete remote data entry was deleted for the port because the Time to Live interval expired.
  • Page 675: Loopback Detection (Lbd) Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 59. Loopback Detection (LBD) Commands 59-1 loopback-detection (Global) This command is used to enable the loopback detection function globally. Use the no form of the command to disable the function globally.
  • Page 676 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide The VLAN being blocked on a port can be automatically recovered, if the errdisable recovery cause loopback-detect command is configured. Alternatively, manually recover the operation by entering the shutdown command followed by the no shutdown command for the port.
  • Page 677 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide no loopback-detection interval Parameters interval SECONDS Specifies the interval in seconds at which CPT packets are transmitted. The valid range is from 1 to 32767. Default By default, this value is 10 seconds.
  • Page 678 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Use this command to configure the list of VLANs that are enabled for loop detection. The command setting takes effect when the port’s loop detection mode is operated in the VLAN-based mode.
  • Page 679 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide eth3/0/1 Normal eth3/0/8 Normal eth4/0/6 Loop on vlan 2 Loop on vlan 3 … port-channel1 Loop port-channel2 Normal Switch# This example shows how to displays the loopback detection status for port 1/0/1.
  • Page 680: Mac Authentication Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 60. MAC Authentication Commands 60-1 mac-auth system-auth-control This command is used to enable MAC authentication globally. Use the no form of the command to disable the MAC authentication globally.
  • Page 681 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline This command is only available for physical port interface configuration. It can be used to enable MAC authentication on the specified interface.
  • Page 682 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide on the MAC address. The MAC addresses format can be configured with the authentication mac username format command. Example This example shows how to configure the password for MAC authentication.
  • Page 683: Mirror Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 61. Mirror Commands 61-1 monitor session destination interface This command is used to configure the destination interface for a port monitor session, allowing packets on source ports to be monitored via a destination port. Use the no form of the command to delete a port monitor session or remove the destination interface of the session.
  • Page 684: Monitor Session Source Interface

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to configure the RSPAN VLAN and destination port for an RSPAN source session. Use the no form of the command to remove the configuration of the RSPAN VLAN.
  • Page 685 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to configure the source port of a port monitor session. Use the no form of this command to remove a port monitor session or remove a source port from the port monitor session.
  • Page 686 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to configure an access list for flow-based monitoring. Use the no form of this command to remove an access list for flow-based monitoring. monitor session SESSION-NUMBER source acl ACCESS-LIST-NAME...
  • Page 687 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode Global Configuration Mode. Command Default Level Level: 12. Usage Guideline Use this command on the destination switch of an RSPAN session. The monitor session source remote vlan command configures the VLAN that the monitored source packets are tunneled to the switch from the remote site.
  • Page 688: Show Monitor Session

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide VLAN Configuration Mode. Command Default Level Level: 12. Usage Guideline Use the remote-span command in the VLAN configuration mode to specify a VLAN as an RSPAN VLAN. When a VLAN is specified as an RSPAN VLAN, the MAC address learning option on the RSPAN VLAN is disabled.
  • Page 689 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Usage Guideline If this command is used without specifying a session number, all monitor sessions are displayed. Example This example shows how to display a created port monitor session with the session number 1.
  • Page 690: Mld Proxy Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 62. MLD Proxy Commands 62-1 ipv6 mld proxy This command is used to enable the MLD proxy function. Use the no form of this command to disable the MLD proxy function.
  • Page 691 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide None. Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline This command only takes effect when the interface has an IPv6 address configured. Only one upstream can exist in an MLD proxy device.
  • Page 692 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 62-4 ipv6 mld proxy designated-forwarding This command is used to enable designated forwarding on a non-querier MLD proxy downstream interface. Use the no form of this command to disable it.
  • Page 693 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline Use this command to display the upstream interface configurations and downstream interfaces. Example This example shows how to display the MLD proxy configurations on the device.
  • Page 694 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Total entries: 2 Switch# This example shows how to display detailed information of group FF1E::330E:32. Switch# show ipv6 mld proxy group FF1E::330E:32 FF1E::330E:32, Include Source list: 100::1 Total Entries: 1...
  • Page 695 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# This example shows how to display detailed information of the group FF1E::330E:32. Switch# show ipv6 mld proxy forwarding FF1E::330E:32 FF1E::330E:32, 2000::2, vlan52 outgoing interface: vlan20, vlan30 Total Entries: 1...
  • Page 696: Mld Snooping Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 63. MLD Snooping Commands 63-1 clear ipv6 mld snooping statistics This command is used to clear the statistic counter of the switch. clear ipv6 mld snooping statistics {all | vlan VLAN-ID | interface INTERFACE-ID}...
  • Page 697 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode Interface Configuration Mode. Global Configuration Mode. Command Default Level Level: 12. Usage Guideline For a VLAN to operate with MLD snooping, both the global state and per interface state must be enabled.
  • Page 698 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Usage Guideline The command is only available for VLAN interface configuration. The ipv6 mld snooping fast-leave command allows MLD membership to be removed from a port right on receiving the leave message without using the group specific or group-source specific query mechanism.
  • Page 699 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to configure the interval at which the MLD snooping querier sends MLD group- specific or group-source-specific (channel) query messages. Use the no form of the command to revert to default setting.
  • Page 700 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide forbidden interface Specifies a range of interfaces as being not connected to multicast- enabled routers. INTERFACE-ID Specifies an interface or an interface list. No space is allowed before and after the comma. The interface can be a physical interface or a port-channel.
  • Page 701 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide IPV6-ADDRESS (Optional) Specifies the source IP address of proxy reporting. Default By default, this option is disabled. Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline The command is only available for VLAN interface configuration.
  • Page 702 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide If the system can play the querier role, the entity will listen for MLD query packets sent by other devices. If MLD query message is received, the device with lower value of IPv6 address becomes the querier. If MLD protocol is also enabled on the interface, MLD Snooping querier state will be disabled automatically.
  • Page 703 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide ipv6 mld snooping query-max-response-time SECONDS no ipv6 mld snooping query-max-response-time Parameters SECONDS Specifies to set the maximum response time, in seconds, advertised in MLD Snooping queries. Default By default, this value is 10 seconds.
  • Page 704 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline The command is only available for VLAN interface configuration. Example This example shows how to configure the query version to be 1 on VLAN 1000.
  • Page 705 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 63-13 ipv6 mld snooping report-suppression This command is used to enable MLD report suppression on a VLAN. To disable report suppression on a VLAN, use the no form of this command.
  • Page 706 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline The command is only available for VLAN interface configuration The robustness variable provides fine-tuning to allow for expected packet loss on an interface. The value of the robustness variable is used in calculating the following MLD message intervals: •...
  • Page 707 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Level: 12. Usage Guideline The command is only available for VLAN interface configuration. This command applies to MLD snooping on a VLAN interface to statically add group membership entries and/or source records.
  • Page 708 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 63-17 ipv6 mld snooping minimum-version This command is used to configure the minimum version of MLD hosts which MLD that is allowed on the interface. Use the no form of this command to remove the restriction from the interface.
  • Page 709: Show Ipv6 Mld Snooping Filter

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Usage Guideline Use this command to display MLD snooping information for all VLANs on which MLD snooping are enabled by not specifying specific VLAN. Example This example shows how to display MLD snooping configurations.
  • Page 710: Show Ipv6 Mld Snooping Groups

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Default Level Level: 1. Usage Guideline Use this command to display MLD snooping limit and access group information by command. Example This example shows how to display filter information when no interface is specified.
  • Page 711 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline Use this command to display MLD group information by command. Example This example shows how to display MLD snooping group information.
  • Page 712: Show Ipv6 Mld Snooping Statistics

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This example shows how to display MLD snooping multicast router information. Switch# show ipv6 mld snooping mrouter VLAN Ports -------- ------------------------------------------------------------------- eth3/0/4 (static), eth3/0/3 (static) eth3/0/6 (forbidden) eth4/0/2 (dynamic)
  • Page 713 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Interface eth4/0/4 Rx: V1Report 3, v2Report 0, Query 3, v1Done 0 Tx: v1Report 2, v2Report 2, Query 1, v1Done 2 Total Entries: 3 Switch# show ipv6 mld snooping statistics vlan 1...
  • Page 714: Multicast Listener Discovery (Mld) Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 64. Multicast Listener Discovery (MLD) Commands 64-1 ipv6 mld enable This command is used to enable the MLD protocol state. Use the no form of this command to disable the MLD protocol state.
  • Page 715 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Default By default, this value is 2. Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline This command is only available for VLAN interface configuration. The user can use this command to configure the number of group-specific or group-source specific queries sent before the router assumes there are no local members of a group.
  • Page 716 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Example This example shows how to configure the interval of the last listener query to 2 seconds on VLAN 1000. Switch# configure terminal Switch(config)# interface vlan1000 Switch(config-if)# ipv6 mld last-listener-query-interval 2...
  • Page 717 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide ipv6 mld query-max-response-time SECONDS no ipv6 mld query-max-response-time Parameters SECONDS Specifies to set the maximum response time, in seconds, advertised in MLD queries. The range is from 1 to 25.
  • Page 718 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Usage Guideline The command is only available for the VLAN interface configuration. The robustness variable provides fine-tuning to allow for expected packet loss on an interface. The value of the robustness variable is used in calculating the following MLD message intervals: •...
  • Page 719: Show Ipv6 Mld Groups

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# configure terminal Switch(config)# interface vlan1000 Switch(config-if)# ipv6 mld version 1 Switch(config-if)# 64-8 show ipv6 mld groups This command is used to display MLD group information on an interface.
  • Page 720: Show Ipv6 Mld Interface

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Uptime : 0DT00H00M42S Expires : Stopped Group mode : Include Last reporter : FE80::202:B3FF:FEF0:79D8 Group source list: Source Address Uptime Expire -------------------------------------------------- 2004:4::6 0DT00H00M42S 0DT00H03M38S Total Source Entries: 1...
  • Page 721 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Example This example shows how to display MLD interface information on VLAN 1000. Switch# show ipv6 mld interface vlan1000 VLAN 1000 Version IPv6 Address/Netmask : FE80::260:3EFF:FE86:5649/10 MLD State : Enabled...
  • Page 722: Multicast Vlan Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 65. Multicast VLAN Commands 65-1 mvlan enable This command is used to enable multicast VLAN and configure some options for the multicast VLAN feature. Use the no form of this command to disable the state or return to the default configuration.
  • Page 723 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide forward-unmatched Specifies that if the received IGMP or MLD control packet is untagged, does not match any profile, and the associated default VLAN is a multicast VLAN, or is tagged with a multicast VLAN, but does not match the associated profile, then the packet will be forwarded or dropped based on this setting.
  • Page 724 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 65-3 mvlan vlan This command is used to create a multicast VLAN. Use the no form of this command to remove a multicast VLAN. mvlan vlan VLAN-ID no mvlan vlan VLAN-ID...
  • Page 725 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide untagged Specifies that if the port is an untagged member, then the packets will be forwarded in the untagged form. INTERFACE-ID Specifies an interface or an interface list. No spaces are allowed before and after the comma.
  • Page 726 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide VLAN-NAME Specifies the VLAN name, with a maximum of 32 characters. Default The default multicast VLAN name is MVLANxxxx, where xxxx represents four numeric digits (including the leading zero) that are equal to the VLAN ID.
  • Page 727 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Example This example shows how to configure replacing the IPv4 packet priority to 4. Switch# configure terminal Switch(config)# mvlan Switch(config)# mvlan 100 Switch(config-mvlan)# replace-priority ipv4 4 Switch(config-mvlan)# 65-7 replace-source-ip This command is used to configure the source IP address which will be replaced into the reporting IGMP/MLD packet to uplink ports.
  • Page 728 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config)# mvlan Switch(config)# mvlan 100 Switch(config-mvlan)# replace-source-ip ipv4 1.10.10.10 from receiver Switch(config-mvlan)# replace-source-ip ipv6 FE80:3000::3 from source Switch(config-mvlan)# 65-8 mvlan group-profile This command is used to create a group profile for the multicast VLAN feature. Use the no form of this command to remove a group profile or all group profiles.
  • Page 729 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide PROFILE-NAME Specifies the name of the profile. Default None. Command Mode Multicast VLAN Configuration Mode. Command Default Level Level: 12. Usage Guideline A single Multicast VLAN can be bound with more than one profile as its real group range. Group ranges cannot overlap among Multicast VLANs.
  • Page 730 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Default Level Level: 12. Usage Guideline Multiple ranges can be added to a multicast VLAN profile. The IP address ranges, specified in a single profile, must be of the same address family.
  • Page 731 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 65-12 show mvlan access-group This command is used to display which multicast group profiles are bound to which multicast VLANs. show mvlan access-group [VLAN-ID] Parameters VLAN-ID Specifies the VLAN ID.
  • Page 732 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline Use this command to display all configurations and information of the multicast VLAN by not specifying the VLAN ID.
  • Page 733 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Replace Source IP The source IP address that will be replaced in the IGMP/MLD control packets before forwarded in the multicast VLAN.
  • Page 734: Multiple Spanning Tree Protocol (Mstp) Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 66. Multiple Spanning Tree Protocol (MSTP) Commands 66-1 instance This command is used to map a VLAN or a set of VLANs to an MST instance. Use the no instance without VLANs specified to remove instances.
  • Page 735 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to configure the name of an MST region. To return to the default name, use the no form of this command. name NAME no name NAME...
  • Page 736 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide MST Configuration Mode. Command Default Level Level: 12. Usage Guideline Two Ethernet switches that have the same configuration but different revision numbers are considered to be part of two different regions.
  • Page 737 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Use this command to display the MSTP configuration and operation status. If a private VLAN is configured and the secondary VLAN does not map to the same primary VLAN, the show spanning-tree mst configuration command will display a message to indicate this condition.
  • Page 738 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Designated root address: 00:02.17:2C.F4:00, priority: 32771, cost: 0 Designated bridge address: 00.02.17.2C.F4.00 priority 32771, port id: 128.1 eth3/0/2 Port state: forwarding Port role: designated, Port info: port ID: 128.193, priority: 128, cost: 200000 Designated root address 00:02:17:2C.F4:00, priority: 32771, cost: 0...
  • Page 739 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Designated Root Address: 00-54-85-26-05-00, Priority: 4096 (4096 sysid 0) Regional Root Address: 00-12-85-26-05-00, Priority: 32768 Designated Bridge Address: 00-12-85-26-05-00, Priority: 32768 Topology Changes Count : 0 Priority Link Interface...
  • Page 740 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# This example shows how to display MSTP summary information for interfaces eth3/0/3 to eth 3/0/4 of MST02. Switch# show spanning-tree mst instance 2 interface eth3/0/3-4 >>>>MST02 vlans mapped:...
  • Page 741 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Default The cost value depends on the port speed. The faster the interface's speed is will indicate a smaller cost. MST always uses long path costs. The default priority value is 128.
  • Page 742 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 66-7 spanning-tree mst max-hops This command is used to configure the MSTP maximum hop count value. Use the no form of the command to reset to the default setting.
  • Page 743 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline This MSTP hello-time only takes effect in the MSTP mode. Example This example shows how to configure the port hello-time to 1 for the Ethernet interface eth1/01.
  • Page 744 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide...
  • Page 745: Multiprotocol Label Switching (Mpls) Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 67. Multiprotocol Label Switching (MPLS) Commands 67-1 backoff This command is used to configure the initial and maximum back-off delay time. Use the no form of this command to restore the default value.
  • Page 746 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters COS-LIST to EXP-VALUE Specifies the list of CoS values to an EXP value. The series of CoS values can be separated by commas (,) or hyphens (-) with no spaces or hyphens before and after.
  • Page 747 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Default EXP to CoS map: • CoS: • EXP: Command Mode MPLS QoS Configuration Mode. Command Default Level Level: 12. Usage Guideline The EXP to CoS map is used to map an EXP value in the encapsulation of the label header to an internal CoS value.
  • Page 748 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 67-5 discovery hello This command is used to configure the LDP link hello hold-time and hello interval. Use the no form of this command to restore the default value.
  • Page 749 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide no discovery targeted-hello accept Parameters None. Default By default, this option is enabled. Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline If targeted hello message acceptance is disabled in the interface, and if the received targeted hello is not coming from the local configured targeted peer, the message will be ignored.
  • Page 750 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Level: 12. Usage Guideline LDP sends the targeted hello message at the configured interval to discover the neighbor. For a discovered neighbor, LDP maintains a hold-timer. The neighbor will time out if the timer has expired without the receipt of a hello message from the neighbor.
  • Page 751 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config)# mpls ldp configuration Switch(config-ldp)# discovery transport-address 192.168.0.1 Warning: The configuring will lead to LDP sessions restart. Switch(config-ldp)# 67-9 distribution-mode This command is used to configure the label distribution mode. Use the no form of this command to restore the default value.
  • Page 752 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide explicit-null no explicit-null Parameters None. Default By default, this option is Implicit null. Command Mode LDP Configuration Mode. Command Default Level Level: 12. Usage Guideline Use this command in the egress router to configure the Penultimate Hop Popping (PHP) behavior of the upstream router.
  • Page 753 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Usage Guideline This command is used to configure the LDP session keep-alive hold-time. LDP maintains a keep-alive hold timer for each peer session. If the keep-alive hold timer expires without receipt of an LDP PDU from the peer, LDP terminates the LDP session.
  • Page 754 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 67-13 loop-detection This command is used to enable loop detection. Use the no form of this command to disable loop detection. loop-detection no loop-detection Parameters None. Default By default, this option is disabled.
  • Page 755: Lsp Trigger

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide By default, the LSP control mode is configured as independent. Command Mode LDP Configuration Mode. Command Default Level Level: 12. Usage Guideline In Independent LSP Control, each Label Switching Router (LSR) independently binds a label to a Forwarding Equivalence Class (FEC) and distributes the binding to its label distribution peers.
  • Page 756 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Default Level Level: 12. Usage Guideline This command is used to configure LSP trigger filter rules. The LSP trigger filter rules are IP access list rules that it is used to control the IP routes that can be used to trigger the establishment of an LSP. For example, if there are two routes for 172.18.1.0/24 and 172.18.2.0/24, the LSP trigger filter permits...
  • Page 757: Md5 Authentication

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config-ldp)# 67-17 match This command is used to apply the policy to FECs. Use the no command to remove the setting. match {ip NETWORK-PREFIX/PREFIX-LENGTH | vc IP-ADDRESS VC-ID} no match {all | ip NETWORK-PREFIX/PREFIX-LENGTH | vc IP-ADDRESS VC-ID}...
  • Page 758 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Default By default, this option is disabled. Command Mode LDP Configuration Mode. Command Default Level Level: 12. Usage Guideline Use this command to enable LDP authentication. If the LDP MD5 authentication is enabled, the LSR applies the MD5 algorithm to compute the MD5 digest for the TCP segment that will be sent to the peer.
  • Page 759: Mpls Ldp Configuration

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Example This example shows how to enable MPLS globally and enable MPLS on VLAN 100. Switch# configure terminal Switch(config)# mpls ip Switch(config)# interface vlan100 Switch(config-if)# mpls ip Switch(config-if)# 67-20 mpls label protocol ldp This command is used, in the interface configuration mode, to enable LDP on this interface.
  • Page 760 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide mpls ldp configuration Parameters None. Default None. Command Mode Global Configuration Mode. Command Default Level Level: 12. Usage Guideline Use the command to enter the LDP configuration mode to configure LDP related settings.
  • Page 761 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide command to set the mapping from EXP to priority for incoming MPLS packets. The inbound EXP CoS mapping takes effect only when trust EXP is enabled. Use the class-map cos-exp command to set the mapping table for mapping from CoS to EXP for packets outbound to MPLS network.
  • Page 762 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Use this command to add a static FTN entry. At the ingress Label Edge Router (LER), the incoming IP packets that are classified to the Forwarding Equivalence Class (FEC) will be pushed with the MPLS label and forwarded to the next hop according to the FEC-to-NHLFE (FTN).
  • Page 763: Neighbor Password

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This example shows how to configure a static ILM that swaps the label from 100 to 200 for the prefix FEC 172.18.10.0/24 at the transit LSR. Switch# configure terminal Switch(config)# mpls static ilm in-label 100 forward-action swap-label 200 nexthop 120.1.1.3 fec 172.18.10.0/24...
  • Page 764 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Warning: The configuring will lead to the LDP session of the peer restart. Switch(config-ldp)# 67-26 neighbor targeted This command is used to create an LDP targeted peer. Use the no form of this command to remove a configured LDP targeted peer.
  • Page 765 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide By default, this value is 254. Command Mode LDP Configuration Mode. Command Default Level Level: 12. Usage Guideline If loop detection is enabled, the LDR ID that is in the path vector list of the label mapping message or the label request message or the path vector length exceeds the maximum length, then it is deemed that a loop occurs.
  • Page 766 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Example This example shows how to check the connectivity of the LSP for network 192.1.1.0/24. Switch# ping mpls ipv4 192.1.1.0/24 Reply from 192.1.1.1, time<10ms Reply from 192.1.1.1, time<10ms Reply from 192.1.1.1, time<10ms Reply from 192.1.1.1, time<10ms...
  • Page 767: Show Mpls

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Usage Guideline The LSR ID is used to identify the LSR in the MPLS network. It is recommended to set the LSR ID to the IP address of a loopback interface. If the command is not configured, by default, the LDP will automatically select the router ID.
  • Page 768 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# This example shows how to display the MPLS’s global settings. Switch# show mpls MPLS Status : Enabled LSP Trap Status : Disabled Switch# 67-31 show mpls forwarding-table This command is used to display the MPLS label forwarding path information.
  • Page 769: Show Mpls Ldp Bindings

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This example shows how to display all detailed MPLS label forwarding path information. Switch# Show mpls forwarding-table detail LSP: 1 Type: Transit Status: Up FEC: 201.1.1.0/24 Owner: LDP In Label: 1020 Out Label: Swap 1030 Next Hop: 172.18.1.1...
  • Page 770: Show Mpls Ldp Discovery

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Default None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline This command is used to display all LDP label binding information. Example This example shows how to display all LDP label binding information.
  • Page 771 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Usage Guideline This command displays the interfaces on which LDP neighbor has been discovered. Example This example shows how to display all MPLS LDP neighbors. Switch# show mpls ldp discovery Local LDP Identifier: 10.1.1.1:0...
  • Page 772: Show Mpls Ldp Interface

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide TCP Port : 646 UDP Port : 646 Max PDU Length : 1500 Initial Backoff : 15 Seconds Max Backoff : 600 Seconds Transport Address : 3.3.3.3 Keep Alive Time...
  • Page 773: Show Mpls Ldp Neighbor

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Oper State : Disabled Targeted Hello Accept : Acceptable Hello Interval : 5(Sec) Hello Hold Time : 15(Sec) Distribution Method : DoD Interface: if2 -------------------------------------- Admin State : Enabled...
  • Page 774: Show Mpls Ldp Neighbor Password

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Distribution Method : DU Loop Detect : Disabled Path Vector Limit Max PDU Length : 1500 Peer : 192.1.1.1:0 -------------------------------------- Protocol Version : 1.0 Transport address : 192.1.1.1 Keep Alive Time...
  • Page 775: Show Mpls Ldp Session

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This example shows how to display LDP neighbors’ password configurations. Switch# show mpls ldp neighbor password Neighbor Password ------------ ---------- 202.11.1.1 123456 192.1.1.1 abcd Total Entries : 2 Switch#...
  • Page 776 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide show mpls ldp session [peer IP-ADDRESS] [detail | statistic] Parameters peer IP-ADDRESS Specifies the IP address of the peer LSR ID. If not specified, all sessions will be displayed.
  • Page 777: Show Mpls Ldp Statistic

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# This example shows how to display LDP session statistics for peer 10.1.1.2. Switch# show mpls ldp session peer 10.1.1.2 statistic Peer 10.1.1.2 ------------------------------------------- Notification Message : TX 10/RX 2...
  • Page 778 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide SessionRejectedAdErrors SessionRejectedMaxPduErrors SessionRejectedLRErrors BadLdpIdentifierErrors BadPduLengthErrors BadMessageLengthErrors BadTlvLengthErrors MalformedTlvValueErrors KeepAliveTimerExpErrors ShutdownReceivedNotifications: ShutdownSentNotifications Switch# 67-41 show mpls lsp trigger This command is used to display MPLS LSP trigger filter rule(s). show mpls lsp trigger [SN]...
  • Page 779 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 67-42 show mpls qos This command is used to display MPLS QoS settings. show mpls qos {policy [] | ip NETWORK-PREFIX/PREFIX-LENGTH | vc IP-ADDRESS VC-ID} Parameters policy Specifies to display the MPLS QoS policy.
  • Page 780 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# 67-43 snmp-server enable traps mpls ldp This command is used to enable the LDP trap state. Use the no form of this command to disable the LDP trap state.
  • Page 781 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Default Level Level: 12. Usage Guideline This command used to configure the MPLS LSP trap state. Example This example shows how to enable the MPLS LSP trap state.
  • Page 782 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Reply from 192.1.1.1, time=40ms Trace complete. Switch# This example shows how to trace route the LSP for network 110.1.1.0/24. Switch# traceroute mpls ipv4 110.1.1.0/24 Reply from 170.1.1.1, time<10ms Request timed out Trace complete.
  • Page 783 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide...
  • Page 784: Neighbor Discovery (Nd) Inspection Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 68. Neighbor Discovery (ND) Inspection Commands 68-1 ipv6 nd inspection policy This command is used to create an ND inspection policy. This command will enter into the ND inspection policy configuration mode.
  • Page 785 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Default By default, this option is disabled. Command Mode ND Inspection Policy Configuration Mode. Command Default Level Level: 12. Usage Guideline When the switch receives an ND message that contains a link-layer address, the source MAC address is checked against the link-layer address.
  • Page 786 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This example shows how to create a ND policy named “policy1” and configures the device’s role to host. Switch# configure terminal Switch(config)# ipv6 nd inspection policy policy1 Switch(config-nd-inspection)# device-role host...
  • Page 787 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide show ipv6 nd inspection policy [POLICY-NAME] Parameters POLICY-NAME (Optional) Specifies the IPv6 RA guard policy name. Default None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1.
  • Page 788: Network Access Authentication Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 69. Network Access Authentication Commands 69-1 authentication guest-vlan This command is used to configure the guest VLAN setting. Use the no form of the command to remove the guest VLAN.
  • Page 789 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 69-2 authentication host-mode This command is used to specify the authentication mode. Use the no form of the command to reset to the default setting. authentication host-mode {multi-host | multi-auth [vlan VLAN-ID [, | -]]}...
  • Page 790 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 69-3 authentication periodic This command is used to enable periodic re-authentication for a port. Use the no form of this command to disable periodic re-authentication. authentication periodic no authentication periodic Parameters None.
  • Page 791 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Level: 12. Usage Guideline When the inactivity timer is configured, a user session will be terminated if the session sustains no activity for the configured period of time. If the inactivity timer is configured, it should be shorter than the timer value configured by authentication timer re-authentication command.
  • Page 792 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide authentication timer restart SECONDS no authentication timer restart Parameters SECONDS Specifies the authentication restart timer value. The range is from 1 to 65535 Default By default, this value is 60 seconds.
  • Page 793 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide None. Command Mode Global Configuration Mode. Command Default Level Level: 12. Usage Guideline Use this command to configure the local database used for user authentication. Example This example shows how to create a local account with user1 as the username and pass1 as password.
  • Page 794 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 69-9 authentication username mac-format This command is used to configure the MAC address format that will be used for authenticating as the username via the RADIUS server. Use the no form of this command to return to the default setting.
  • Page 795 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config)# authentication username mac-format case uppercase delimiter hyphen number 5 Switch(config)# 69-10 authentication max users This command is used to configure the maximum authenticated users for the entire system or for a port.
  • Page 796 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide authentication mac-move deny no authentication mac-move deny Parameters None. Default By default, this option is disabled. Command Mode Global Configuration Mode. Command Default Level Level: 12. Usage Guideline This command control whether to allow authenticated hosts to do roaming across different switch ports.
  • Page 797 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide By default, this option is enabled. Command Mode Global Configuration Mode. Command Default Level Level: 12. Usage Guideline The command is used to enable or disable the acceptance of an authorized configuration. When authorization is enabled for authentication, the authorized attributes (for example VLAN, 802.1p default...
  • Page 798 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Usage Guideline Use this command without parameters to display the sessions associated with all ports. Example This example shows how to display sessions on Ethernet port 1/0/1. Switch# show authentication sessions interface eth1/0/1...
  • Page 799 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide authentication. Method The Authentication method, such as 802.1X, MAC-Auth, Web-Auth, JWAC, etc… State The method authentication state. Authenticating – Host is under authentication by this method. Success – Host pass this method authentication.
  • Page 800 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide the authenticator PAE state machine and the supplicant. FAIL: Indicates that the authentication server has confirmed the supplicant is an illegal client. The backend state machine will notify the authenticator PAE state machine and the supplicant.
  • Page 801: Network Load Balancing (Nlb) Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 70. Network Load Balancing (NLB) Commands 70-1 nlb unicast-fdb This command is used to add a unicast MAC entry to the NLB unicast address table. Use the no form of the command to remove a unicast entry from the NLB unicast address table or remove interfaces from an NLB entry.
  • Page 802 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide learnt in the Layer 2 MAC address table. In this situation, the NLB has higher priority; the dynamically learnt FDB entry won't take effect. Example This example shows how to add an NLB unicast address 00-F3-22-0A-12-F4 to the MAC address table.
  • Page 803: Show Nlb Fdb

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide set as the NLB multicast MAC address. NLB entry 01:00:5E:xx:xx:xx (IPv4 multicast mapped MAC address) has higher priority. Example This example shows how to add a multicast address 01-F3-22-0A-12-F4 received on VLAN 1 candidate forwarding ports eth2/0/1 to eth2/0/5 to the NLB multicast address table.
  • Page 804: Open Shortest Path First Version 2 (Ospfv2) Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 71. Open Shortest Path First Version 2 (OSPFv2) Commands 71-1 area default-cost This command is used to specify the cost associated with the type-3 default route that will be automatically injected into the stub area and the not-so-stubby area.
  • Page 805: Area Range

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters AREA-ID Specifies the ID of the area to be assigned as an NSSA area. no-summary (Optional) Specifies that this function only takes effect when the router is an ABR.
  • Page 806 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide AREA-ID Specifies the area from which the routes will be summarized. PREFIX/PREFIX-LENGTH Specifies the prefix and length of the prefix of the summary route. advertise (Optional) Specifies to advertise a Type-3 summary LSA for the specified range of addresses.
  • Page 807 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Default Level Level: 12. Usage Guideline The command no area AREA-ID stub removes all stub related settings associated with the area. The area remains as a stub area. Use this command on all routers in the stub area.
  • Page 808: Clear Ip Ospf

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide md5 KEY digest authentication. Default No area ID is predefined. No router ID is predefined. The default authentication type is NULL. No authentication-key is predefined. No message-digest-key is predefined.
  • Page 809 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide None. Command Mode Privileged EXEC Mode. Command Default Level Level: 12. Usage Guideline When an OSPF process is cleared, the OSPF routing database will be cleared and the process is restarted.
  • Page 810: Distance Ospf

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config)# router ospf Switch(config-router)# default-information originate always Switch(config-router)# 71-8 default-metric (OSPF) This command is used to configure the default metric value for the routing protocol. Use the no command to remove the default metric setting.
  • Page 811 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters inter-area Specifies the distance for OSPF inter-area routes. intra-area Specifies the distance for OSPF intra-area routes. external-1 Specifies the distance for OSPF external type-5 and type-7 routes with a type-1 metric.
  • Page 812 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide IP-ADDRESS Specifies the IP address of the host. AREA-ID Specifies the identifier of the area that contains the stub host entry. COST Specifies cost for the stub host entry. The range is from 0 to 65535.
  • Page 813: Ip Ospf Cost

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This example shows how to enable message authentication on interface VLAN 1. Switch# configure terminal Switch(config)# interface vlan1 Switch(config-if)# ip ospf message-digest-key 10 md5 yourpass Switch(config-if)# ip ospf authentication message-digest...
  • Page 814 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide ip ospf cost COST no ip ospf cost Parameters cost COST Specifies the value of the link-state metric. The range of value is from 1 to 65535. Default By default, cost is not configured. The cost is automatically calculated.
  • Page 815 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline The dead-interval is the amount of time that the router waits to receive an OSPF hello packet from the neighbor before declaring the neighbor down.
  • Page 816 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 71-16 ip ospf message-digest-key This command is used to configure the MD5 digest key for OSPF MD5 authentication. Use the no command to remove an MD5 key. ip ospf message-digest-key KEY-ID md5 KEY...
  • Page 817 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 71-17 ip ospf network This command is used to configure the OSPF network type. To return to the default value, use the no form of this command. ip ospf network {broadcast | point-to-point}...
  • Page 818 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Default By default, this value is 1. Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline The OSPF router will determine a designated router for the multi-access network.
  • Page 819 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide interface that has a subnet defined that belongs to the network specified, by this command, will be activated. Example This example shows how to define the OSPF area 3 on interfaces with the IP address that starts with the octet value of 10.
  • Page 820 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters INTERFACE-ID Specifies the routing interface. default (Optional) Specifies the default state of a routing interface when its state is not individually specified. Default OSPF routing update packets are sent and received on the interface.
  • Page 821 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide route. route-map MAP-NAME (Optional) Specifies the route map that filters the imported routes from this source routing protocol. If not specified, all routes are redistributed. Default By default, route redistribution is disabled.
  • Page 822 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide vrf VPN-NAME (Optional) Specifies the name of the VPN routing and forwarding (VRF) instance. Default None. Command Mode Global Configuration Mode. Command Default Level Level: 12. Usage Guideline Use this command to enter the router configuration mode to configure parameters needed by OSPF.
  • Page 823: Show Ip Ospf

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config)# router ospf 1 Switch(config-router)# router-id 10.10.10.60 Switch(config-router)# 71-25 show ip ospf This command is used to display general information about the OSPF routing process. show ip ospf [vrf VRF-NAME]...
  • Page 824: Show Ip Ospf Database

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide SPF algorithm executed 19 times Number of LSA 53 Area 0.0.0.3 Number of interface in this area is 2 active interface number is 2 Number of fully adjacent neighbors in this area is 2...
  • Page 825 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Net Link States (Area 0.0.0.0) Link ID ADV Router Seq# CkSum 47.65.49.111 47.65.49.111 1819 0x80000001 0x33da Summary Link States (Area 0.0.0.0) Link ID ADV Router Seq# CkSum Route 2.1.1.0 10.47.65.160...
  • Page 826 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide vrf VRF-NAME (Optional) Specifies the IPv4 OSPF VRF process. Default None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline Use this command to display all of the LSAs generated by the advertising router.
  • Page 827 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide show ip ospf [vrf VRF-NAME] database asbr-summary [LINK-STATE-ID | self-originate | adv- router IP-ADDRESS] Parameters vrf VRF-NAME (Optional) Specifies the IPv4 OSPF VRF process. LINK-STATE-ID Specifies the link state ID (as an IP address).
  • Page 828: Show Ip Ospf Database External

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Network Mask: /0 TOS: 0 Metric: 1 Total Entries: 2 Switch# 71-29 show ip ospf database external This command is used to display information about the external LSAs. show ip ospf [vrf VRF-NAME] database external [LINK-STATE-ID | self-originate | adv-router IP-...
  • Page 829: Show Ip Ospf Database Network

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Network Mask: /24 Metric Type: 2 (Larger than any link state path) TOS: 0 Metric: 20 Forward Address: 47.65.52.2 External Route Tag: 0 Total Entries: 1 Switch# 71-30 show ip ospf database network This command is used to display information about the network LSAs.
  • Page 830 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Checksum: 0x33da Length: 32 Network Mask: /24 Attached Router: 47.65.49.111 Attached Router: 10.47.65.160 Net Link States (Area 0.0.0.1) LS age: 1015 Options: 0x2 (*|-|-|-|-|-|E|-) LS Type: network-LSA Link State ID: 47.65.51.2 (address of Designated Router) Advertising Router: 10.47.65.181...
  • Page 831 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Example This example shows how to display information about the NSSA-external LSAs. Switch# show ip ospf database nssa-external NSSA-external Link States (Area 0.0.0.61 [NSSA]) LS age: 1161 Options: 0x0 (*|-|-|-|-|-|-|-) LS Type: AS-NSSA-LSA Link State ID: 1.0.0.0 (External Network Number For NSSA)
  • Page 832 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Default None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline Use this command to display LSAs generated by the local router. Example This example shows how to display LSAs generated by the local router.
  • Page 833: Show Ip Ospf Database Router

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Total Entries: 1 Switch# 71-33 show ip ospf database router This command is used to display information about the router LSAs. show ip ospf [vrf VRF-NAME] database router [LINK-STATE-ID | self-originate | adv-router IP-...
  • Page 834 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide (Link Data) Router Interface address: 47.65.49.1 Number of TOS metrics: 0 TOS 0 Metric: 1 Link connected to: a Virtual Link (Link ID) Neighboring Router ID: 10.47.65.181 (Link Data) Router Interface address: 47.65.51.1...
  • Page 835: Show Ip Ospf Database Summary

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 71-34 show ip ospf database summary This command is used to display information about the summary LSAs. show ip ospf [vrf VRF-NAME] database summary [LINK-STATE-ID | self-originate | adv-router IP-...
  • Page 836 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide LS Seq Number: 80000001 Checksum: 0xd863 Length: 28 Network Mask: /24 TOS: 0 Metric: 1 Total Entries: 2 Switch# 71-35 show ip ospf database stub This command is used to display information about the LSAs in the stub and NSSA areas.
  • Page 837: Show Ip Ospf Interface

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Checksum: 0xb55d Length: 48 Number of Links: 2 Link connected to: a Virtual Link (Link ID) Neighboring Router ID: 10.47.65.160 (Link Data) Router Interface address: 47.65.51.2 Number of TOS metrics: 0...
  • Page 838: Show Ip Ospf Neighbor

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters INTERFACE-ID (Optional) Specifies the interface ID to display. vrf VRF-NAME (Optional) Specifies to display the interfaces in the VRF process. Default None. Command Mode User EXEC or Any Configuration Mode.
  • Page 839 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide show ip ospf neighbor [interface INTERFACE-ID | neighbor NEIGHBOR-ID] [detail] [vrf VRF- NAME] Parameters INTERFACE-ID (Optional) Specifies the interface ID to display. NEIGHBOR-ID (Optional) Specifies the Neighbor ID. detail (Optional) Specifies to display detailed information of neighbors.
  • Page 840 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Options is 0x02 (*|-|-|-|-|-|E|-) Dead timer due in 00:00:32 Neighbor is up for 00:00:28 Crypt Sequence Number is 0 Neighbor 110.1.1.1, interface address 10.90.90.90 In the area 0.0.0.0 via interface vlan1 Neighbor priority is 1, State is Exchange, 4 state changes DR is 10.10.9.2, BDR is 10.90.90.90...
  • Page 841: Debug Ip Ospf

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline Use this command to display virtual link information. Example This example shows how to display virtual link information.
  • Page 842: Debug Ip Ospf Neighbor

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Example This example shows how to turn on the OSPF debug function. Switch# debug ip ospf Switch# 71-40 debug ip ospf neighbor This command is used to turn on the OSPF neighbor state debug switch. Use the no form of the command to turn off the OSPF neighbor state debug switch.
  • Page 843 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide None. Default By default the OSPF interface state debug switch is turned off. Command Mode Privileged EXEC Mode. Command Default Level Level: 15. Usage Guideline Use this command to turn on or turn off the OSPF interface state debug switch. When the OSPF interface state changes or some events happen to change the interface state, debug information will print.
  • Page 844 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# debug ip ospf lsa-originating Switch# Build Router LSA id 100.1.1.2 for area 0.0.0.0 seq 80000001 tic 10 71-43 debug ip ospf lsa-flooding This command is used to turn on the OSPF LSA flooding debug switch. Use the no form of the command to turn off the OSPF LSA flooding debug switch.
  • Page 845 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide None. Default By default the OSPF packet receiving debug switch is turned off. Command Mode Privileged EXEC Mode. Command Default Level Level: 15. Usage Guideline Use this command to turn on or turn off the OSPF packet receiving debug switch. When one OSPF protocol packet is received, the debug information will print if the OSPF debug function is turned on.
  • Page 846: Debug Ip Ospf Spf

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Send out a Hello on interface 10.1.1.1 dst 255.0.0.5 tic 200 Send out a Hello on interface 100.1.1.1 dst 255.0.0.5 tic 220 71-46 debug ip ospf spf This command is used to turn on the OSPF SPF calculation debug switch. Use the no form of the command to turn off the OSPF SPF calculation debug switch.
  • Page 847 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide By default the OSPF timer switch is turned off. Command Mode Privileged EXEC Mode. Command Default Level Level: 15. Usage Guideline Use this command to turn on or turn off the OSPF timer debug switch. When the event related to the OSPF timer happens, the debug information will print if the OSPF debug function is turned on.
  • Page 848 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 71-49 debug ip ospf route This command is used to turn on the OSPF route debug switch. Use the no form of the command to turn off the OSPF route debug switch.
  • Page 849 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Default Level Level: 15. Usage Guideline Use this command to turn on or turn off the OSPF redistribution debug switch. When one route of other protocol is redistributed into OSPF or not redistributed into OSPF any more, the debug information will print if the OSPF debug function is turned on.
  • Page 850: Debug Ip Ospf Clear Counter

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide LSAck Drop Auth Fail : 0 Packet Sending: Total Hello LSAck Neighbor State: Change : 3 SeqMismatch : 0 SPF Calculation: Intra Inter Extern : 1 Switch# 71-52 debug ip ospf clear counter This command is used to reset OSPF statistic counters.
  • Page 851: Debug Ip Ospf Show Database

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This example shows how to reset all OSPF statistic counters. Switch# debug ip ospf clear counter Switch# 71-53 debug ip ospf show database This command is used to view detailed information about the OSPF LSDB.
  • Page 852 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide .0..= O: O Bit Isn't Set 0..= 7 Bit Isn't Set LS Sequence Number: 0x80000001 Length: 36 Flags: 0x0 ..0 = B: NO Area Border Router ..
  • Page 853 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide LSID: 192.194.138.0 RTID: 90.2.0.1 Switch# 71-55 debug ip ospf show redistribution This command is used to display the current internal OSPF redistribution list. debug ip ospf show redistribution Parameters None.
  • Page 854 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters None. Default None. Command Mode Privileged EXEC Mode. Command Default Level Level: 15. Usage Guideline Use this command to check the information about the route to be aggregated.
  • Page 855: Open Shortest Path First Version 3 (Ospfv3) Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 72. Open Shortest Path First Version 3 (OSPFv3) Commands 72-1 area default-cost This command is used to set the summary-default cost of a stub area. To disable this function, use the no form of this command.
  • Page 856: Area Stub

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide no area AREA-ID range IPv6-PREFIX/PREFIX-LENGTH Parameters AREA-ID Specifies the identifier of the area which routes are to be summarized. It can be specified as an IPv4 address. IPv6-PREFIX Specifies the IPv6 prefix.
  • Page 857 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide no-summary (Optional) Specifies to prevent an ABR from sending summary LSAs into the stub area. Default By default, this option is disabled. Command Mode Router Configuration Mode. Command Default Level Level: 12.
  • Page 858 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide dead-interval SECONDS (Optional) Specifies the interval in seconds, during which no packets are received and after which a neighbor is regarded as off-line. The valid setting is 1-65535. transmit-delay SECONDS (Optional) Specifies the interval that the router waits before it transmits a packet.
  • Page 859 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 72-5 auto-cost reference-bandwidth This command is used to control the reference value IPv6 OSPF uses when calculating metrics for interfaces. To return the reference value to its default, use the no form of this command.
  • Page 860 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline The OSPF database is cleared, repopulated, and then the SPF algorithm is performed. Use the process ID option to clear only one OSPF process.
  • Page 861: Ipv6 Ospf Area

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config-rtr)# redistribute rip Switch(config-rtr)# 72-8 distance ospf This command is used to configure the distance for specific OSPF routes. Use the no form of the command to restore to the default setting.
  • Page 862: Ipv6 Ospf Cost

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide ipv6 ospf PROCESS-ID area AREA-ID [instance INSTANCE-ID] no ipv6 ospf PROCESS-ID area AREA-ID [instance INSTANCE-ID] Parameters AREA-ID Specifies the identifier of the area. It can be specified as an IPv4 address.
  • Page 863 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide metric. It can be a value in the range from 1 to 65535. Default By default the cost is not configured. Command Mode Interface Configuration Mode. Command Default Level Level: 12.
  • Page 864: Ipv6 Ospf Priority

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This example shows how to set the IPv6 OSPF dead interval to 60 seconds. Switch# configure terminal Switch(config)# interface vlan1 Switch(config-if)# ipv6 ospf dead-interval 60 Switch(config-if)# 72-12 ipv6 ospf hello-interval This command is used to specify the interval between hello packets that the software sends on the interface.
  • Page 865 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters PRIORITY Specifies the number value of the priority of the router. The range is from 0 to 255. Default By default, the router priority is 1. Command Mode Interface Configuration Mode.
  • Page 866: Ipv6 Router Ospf

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide After sending an LSA to a neighbor, the router keeps the LSA until it receives an acknowledgement. In case the router does not receive an acknowledgement during the set time (the retransmit interval value), it retransmits the LSA.
  • Page 867 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to configure an IPv6 OSPF routing process and enter the router configuration mode. To remove an OSPF routing process, use the no form of this command.
  • Page 868 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Usage Guideline This command removes the specified OSPF area and its configuration, such as area default-cost, area range, area stub, and area virtual-link. Example This example shows how to remove area 0.0.0.3 of OSPF process 1.
  • Page 869 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to redistribute routes from other routing domain into IPv6 OSPF routing domain. Use the no command to disable redistribution. redistribute PROTOCOL [metric METRIC-VALUE] [metric-type TYPE-VALUE]...
  • Page 870 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 72-20 router-id (IPv6) This command is used to specify a router ID for the OSPF process. Use the no command to return to the automatic router ID. router-id ROUTER-ID...
  • Page 871 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline The information displayed by the show ipv6 ospf command is useful in debugging OSPF routing operations.
  • Page 872: Show Ipv6 Ospf Database

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Area ranges are Area 0.0.0.7 (active) Number of interfaces in this area is 1 active interface number is 1 Number of fully adjacent virtual neighbors through this area is 0 SPF algorithm executed 3 times Number of LSA 26.
  • Page 873 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide show ipv6 ospf [PROCESS-ID] database [external | inter-area prefix | inter-area router | link | network | prefix | router] [adv-router ROUTER-ID | self-originate] [area AREA-ID] Parameters PROCESS-ID (Optional) Specifies the process ID. The ID of a process is used internally and should be uniquely locally assigned.
  • Page 874 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 10.76.37.3 512 0x80000001 0xdf6f 10.76.37.30 400 0x80000001 0x48fa Link-LSA (Interface vlan3) ADV Router Seq# CkSum LinkCnt 10.76.37.30 400 0x80000001 0x3210 Router-LSA (Area 0.0.0.0) (BACKBONE) ADV Router Seq# CkSum LinkCnt 10.76.37.3...
  • Page 875 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide ADV Router Seq# CkSum Prefix 10.76.37.3 346 0x80000003 0x84a6 3ffe:1::/64 10.76.37.30 395 0x80000002 0xd345 3ffe:3::/64 Intra-Area-Prefix-LSA (Area 0.0.0.1) ADV Router Seq# CkSum Ref-LsType Ref-LSID Prefix 10.76.37.3 370 0x80000002 0xe744 Router-LSA 0.0.0.0...
  • Page 876 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Neighbor Interface ID: 2147483649 Neighbor Router ID: 10.47.65.182 Link connected to: a Virtual Link Metric: 1 Interface ID: 2147483810 Neighbor Interface ID: 2147483649 Neighbor Router ID: 10.47.65.183 LS age: 1766 LS Type: Router-LSA Link State ID: 0.0.0.0...
  • Page 877 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# This example shows how to display information about inter-area prefix LSAs. Switch# show ipv6 ospf database inter-area prefix OSPFv3 Router with ID (10.47.65.180) (Process 1) Inter-Area-Prefix-LSA (Area 0.0.0.0) (BACKBONE)
  • Page 878 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Total Entries: 2 Switch# This example shows how to display information about external LSAs. Switch# show ipv6 ospf database external OSPFv3 Router with ID (10.47.65.180) (Process 1) AS-external-LSA LS age: 279 LS Type: AS-External-LSA Link State ID: 0.0.0.1...
  • Page 879 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide OSPFv3 Router with ID (10.47.65.180) (Process 4765) Link-LSA (Interface vlan49) LS age: 347 LS Type: Link-LSA Link State ID: 0.0.4.49 Advertising Router: 10.47.65.180 LS Seq Number: 0x80000003 Checksum: 0x62B6...
  • Page 880 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Number of Prefixes: 1 Prefix: 2113:1::/64, Prefix Options: 0 (-|-|-|-) Metric: 0 Total Entries: 2 Switch# This example shows how to display all the LSAs of the advertising router 10.47.65.182.
  • Page 881: Show Ipv6 Ospf Interface

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Flags: 0x03 (-|-|E|B) Options: 0x000013 (-|R|-|-|E|V6) Number of Links: 2 Link connected to: a Virtual Link Metric: 1 Interface ID: 2147483809 Neighbor Interface ID: 2147483649 Neighbor Router ID: 10.47.65.182...
  • Page 882: Show Ipv6 Ospf Neighbor

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide MTU 1500, Instance ID 0 Router ID 10.76.37.30, Network Type BROADCAST, Cost: 1 (default) Transmit Delay is 1 sec, State BDR, Priority 1 Designated Router (ID) 10.76.37.3 Local Address fe80::219:5bff:fef5:2cc1 Backup Designated Router (ID) 10.76.37.30...
  • Page 883 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide In the area 0.0.0.0 via interface vlan8 Neighbor priority is 1, State is FULL, 5 state changes DR is 12.0.0.1 BDR is 36.0.0.0 Options is 0x000013 (-|R|-|-|E|V6) Neighbor 36.20.0.0, Link Local address FE80::2C0:8FFF:FE04:1128 In the area 0.0.0.0 via interface vlan10...
  • Page 884 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Virtual Link to router 10.90.90.90 is up Transit area 0.0.0.3 via interface vlan40, instance ID 0 Local Peer Address FD80::2A10:7BFF:FE7D:D963/128 Remote Peer Address 4000::A/128 Transmit Delay is 1 sec, State Point-To-Point,...
  • Page 885: Policy-Based Routing (Pbr) Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 73. Policy-based Routing (PBR) Commands 73-1 ip policy route-map This command is used to specify a route map as the routing policy on an interface. To disable policy routing on the interface, use the no form of this command.
  • Page 886 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 73-2 show ip policy This command is used to display the route map used for policy-based routing. show ip policy Parameters None. Default None. Command Mode User EXEC or Any Configuration Mode.
  • Page 887: Port Security Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 74. Port Security Commands 74-1 clear port-security This command is used to delete the auto-learned secured MAC addresses. clear port-security {all | {address MAC-ADDR | interface INTERFACE-ID [, | -]} [vlan VLAN-ID]} Parameters Specifies to delete all auto-learned secured entries.
  • Page 888 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide INTEFACE-ID Specifies the ID of the interface to be displayed. (Optional) Specifies a series of interfaces, or separate a range of interfaces from a previous range. No space is allowed before and after the comma.
  • Page 889 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide switchport port-security [maximum VALUE | violation {protect | restrict | shutdown} | mode {permanent | delete-on-timeout} | mac-address [permanent] MAC-ADDRESS [vlan VLAN-ID]] no switchport port-security [maximum | violation | mode | mac-address [permanent] MAC-...
  • Page 890 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide As a permanent secured entry of a port security enabled port, the MAC address cannot be moved to another port. When the maximum setting is changed, the learned address will remain unchanged when the maximum number increases.
  • Page 891 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters MINUTES Specifies the aging time for the auto-learned dynamic secured address on this port. Its range is from 1 to 1440 in minutes. type Specifies to set the aging type.
  • Page 892 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters global Specifies that this setting will be applied to the system. vlan VLAN-ID Specifies the VLAN ID that will be used. VALUE Specifies the maximum number of port security entries that can be learned on the system or specified VLAN.
  • Page 893: Power Saving Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 75. Power Saving Commands 75-1 dim led This command is used to disable the port LED function. Use the no form of the command to restore the LED function.
  • Page 894 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide port-shutdown Specifies that power saving will be applied by scheduled port shutdown. hibernation Specifies that power saving will be applied by scheduled system hibernation. Default By default, this option is disabled.
  • Page 895 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide By default, this option is disabled. Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline Use this command to enable or disable the specified port’s EEE power saving function. The Energy- Efficient Ethernet (EEE) power-saving mode saves power consumption while a link is up when there is low utilization of packet traffic.
  • Page 896 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config)# 75-5 power-saving hibernation time-range This command is used to configure the time range profile for the system hibernation schedule. Use the no form of the command to delete the specified time range profile.
  • Page 897 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide maximum length is 32 characters. Default None. Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline Use this command to add or delete a time range profile for the port shutdown schedule. When the schedule is up, the specific port will be disabled.
  • Page 898 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Example This example shows how to display all power saving configuration information. Switch#show power-saving Function Version: 3.00 Link Detection Power Saving State: Disabled Length Detection Power Saving State: Disabled...
  • Page 899: Priority-Based Flow Control (Pfc) Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 76. Priority-based Flow Control (PFC) Commands 76-1 clear priority-flow-control counters This command is used to clear the Priority-based Flow Control (PFC) counters of the specified interface(s). clear priority-flow-control counters {all | INTERFACE-ID [, | -]} {rx | tx | both} Parameters Specifies to clear PFC counters on all interfaces.
  • Page 900 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters None. Default By default, this option is disabled. Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline Priority-based Flow Control (PFC), which is defined in IEEE 802.1Qbb, extends the basic IEEE 802.3x pause semantics and uses the IEEE 802.1p CoS values in the IEEE 802.1Q VLAN tag to differentiate up...
  • Page 901 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide INTERFACE-ID (Optional) Specifies the interface to display. (Optional) Specifies a series of interfaces, or separate a range of interfaces from a previous range. No spaces before and after the comma.
  • Page 902 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide eth 1/0/28 8 Switch# Display Parameters PFC Cap PFC Capability: Specifies the device’s limitation of how many traffic classes may simultaneously be supported by PFC. Oper PFC On Priorities The CoS list that the operational PFC is on.
  • Page 903: Private Vlan Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 77. Private VLAN Commands 77-1 private-vlan This command is used to configure a VLAN as a private VLAN. Use the no form of this command to remove the private VLAN configuration.
  • Page 904 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 77-2 private-vlan association This command is used to associate secondary VLANs with a primary VLAN. Use the no form of this command to remove the association of secondary VLANs with the primary VLAN.
  • Page 905 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide None. Default None. Command Mode MST Configuration Mode. Command Default Level Level: 12. Usage Guideline The secondary VLANs need to be mapped to the same MST ID as the primary VLAN if private VLAN is configured.
  • Page 906 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide For a promiscuous port, use the switchport mode private-vlan promiscuous command to specify the port mode and use the switchport private-vlan mapping command to associate the port with a primary VLAN and define the mapping secondary VLAN.
  • Page 907 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# configure terminal Switch(config)# interface eth1/0/1 Switch(config-if)# switchport mode private-vlan host Switch(config-if)# switchport private-vlan host-association 1000 1001 Switch(config-if)# 77-6 switchport private-vlan mapping This command is used to associate the private VLAN membership with a promiscuous port. Use the no command to remove the association.
  • Page 908 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 77-7 show vlan private-vlan This command is used to display private VLAN configurations. show vlan private-vlan Parameters None. Default None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1.
  • Page 909: Protocol Independent Multicast (Pim) Ipv6 Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 78. Protocol Independent Multicast (PIM) IPv6 Commands 78-1 ipv6 pim This command is used to enable IPv6 PIM Sparse-Mode on an interface. To disable this function, use the no form of this command.
  • Page 910 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline When an interface is configured as a border, it will prevent bootstrap router (BSR) messages from being sent or received through it.
  • Page 911 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Usage Guideline This command only affects PIM-SM operation. This command causes the router to send bootstrap messages to all its PIM neighbors, with the address of the designated interface as the BSR address. A PIM-SM domain must contain a unique BSR (Bootstrap router) which is responsible for collect and advertise the RP information.
  • Page 912 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command causes the router to send a PIMv2 message advertising itself as a candidate RP to the BSR. Example This example shows how to configure the router with the interface VLAN 1 to be advertised as the candidate RP with a priority of 10.
  • Page 913 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 78-6 ipv6 pim hello-interval This command is used to configure the frequency of PIM hello messages. Use the no form of this command to return to the default interval.
  • Page 914 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline This command is only valid for the VLAN interface. This command only takes effect when the interface is PIM-SM enabled.
  • Page 915 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This example shows how to configure VLAN 100 as a PIM passive interface. Switch# configure terminal Switch(config)# interface vlan100 Switch(config-if)# ipv6 pim passive Switch(config-if)# 78-9 ipv6 pim register-checksum-wholepkt This command is used to configure the router to calculate the checksum of register message over the entire PIM message including the data portion.
  • Page 916 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters SECONDS Specifies the register probe time value in seconds. The range is from 1 to 127. Default By default, this value is 5 seconds. Command Mode Global Configuration Mode.
  • Page 917 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Suppression Time to prevent a possible negative value in the setting of the Register-Stop Timer. The minimal value for Register Suppression Time is 3. Example This example shows how to configure the register suppression time to 30 seconds.
  • Page 918 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide ipv6 pim rp-address IPV6-ADDRESS [GROUP-ACCESS-LIST] [override] no ipv6 pim rp-address IPV6-ADDRESS Parameters IPV6-ADDRESS Specifies the IPv6 address of a router to be a PIM RP. GROUP-ACCESS-LIST (Optional) Specifies the name of an access list that defines which multicast groups the RP should be used.
  • Page 919 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to configure the PIM Shortest Path Tree (SPT) threshold value for the specified groups. Use the no form of this command to restore to the default value.
  • Page 920: Show Ipv6 Pim

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Global Configuration Mode. Command Default Level Level: 12. Usage Guideline This command only affects IPv6 PIM-SM. This command is used to configure the keep-alive timer, which is the period during which the PIM router will maintain the (S, G) state in the absence of explicit (S, G) local membership or (S, G) join messages received to maintain it.
  • Page 921: Show Ipv6 Pim Bsr

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide vlan100, group-list: rp-cand, interval: 60, priority: 192 BSR Candidate vlan100, hash-mask-length: 30, priority: 1 Switch# 78-17 show ipv6 pim bsr This command is used to display bootstrap router (BSR) information.
  • Page 922 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This example shows how to display information that has been learned from various C-RPs at the BSR. In this example, two candidate RPs have sent advertisements for the FF00::/8 or the default IPv6 multicast range.
  • Page 923 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide source, such as the bootstrap router (BSR) or static configuration. Specifies to display ranges learned through the BSR. embedded-rp Specifies to display group ranges learned through the embedded rendezvous point (RP).
  • Page 924: Show Ipv6 Pim Interface

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 78-19 show ipv6 pim interface This command is used to display the configuration for Protocol Independent Multicast (PIM) on interface(s). show ipv6 pim interface sparse-mode [INTERFACE-ID] [detail] Parameters INTERFACE-ID...
  • Page 925 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Interface Link-Local Address : fe80::207:e9ff:fe02:81d Interface Global Address : 3ffe:192:168:1::53 Mode : Sparse Designated Router : fe80::20e:cff:fe01:facc Designated Router Priority Designated Router Priority Enabled : True Generation ID : 164585476...
  • Page 926: Show Ipv6 Pim Mroute

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 78-20 show ipv6 pim mroute This command is used to display the PIM IPv6 multicast routing table. show ipv6 pim mroute sparse-mode Parameters None. Default None. Command Mode User EXEC or Any Configuration Mode.
  • Page 927 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Assert State: No Info, Assert Timer: off Assert Winner: ::, Metric: 0, Pref: 0 (3ffe:6000:1005::DD, ff13::10, rpt) Uptime: 0DT00H00M05S, Flags:S RP: 3ffe:6000:1005::36, RPF nbr: FE80::217:55FF:FEC0:16, RPF Interface: vlan101 Upstream Interface:...
  • Page 928: Show Ipv6 Pim Neighbor

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 78-21 show ipv6 pim neighbor This command is used to display PIM neighbor information. show ipv6 pim neighbor sparse-mode [detail] [INTERFACE-ID] Parameters detail (Optional) Specifies to display IPv6 PIM neighbor information in detail.
  • Page 929 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Indicates the PIM version used by this neighbor. DR Pri/Mode The priority and mode of the designated router (DR). DR Priority: uses N to indicate that the neighbor does not support the DR Priority option in the Hello message, otherwise, the DR priority value will be displayed.
  • Page 930: Protocol Independent Multicast (Pim) Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 79. Protocol Independent Multicast (PIM) Commands 79-1 ip pim This command is used to enable PIM on the interface for either Sparse Mode (SM) or Dense Mode (DM) operation. Use the no command to disable the PIM function on the interface.
  • Page 931 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config-if)# ip pim sparse-mode Switch(config-if)# 79-2 ip pim bsr-candidate This command is used to configure the router to announce itself as the Candidate Bootstrap Router (CBSR). Use the no form of this command to disable this router to act as a CBSR.
  • Page 932 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 79-3 ip pim dr-priority This command is used to configure the Designated Router (DR) priority value. Use the no command to restore the default value. ip pim dr-priority PRIORITY...
  • Page 933 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Default By default, this value is 60 seconds. Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline This command only takes effect when the interface is PIM-SM enabled.
  • Page 934 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This example shows how to configure VLAN 100 as a PIM passive interface. Switch# configure terminal Switch(config)# interface vlan 100 Switch(config-if)# ip pim passive Switch(config-if)# 79-6 ip pim query-interval This command is used to configure the frequency of the PIM hello message.
  • Page 935 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide ip pim register-checksum-wholepkt rp-address-list ACCESS-LIST-NAME no ip pim register-checksum-wholepkt Parameters ACCESS-LIST-NAME Specifies the name of the IP access list which specifies a list of RP addresses. This is the address in the source address field of the access list entry.
  • Page 936 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Default Level Level: 12. Usage Guideline The register probe time is the time before the Register Stop Timer (RST) expires when a DR may send a Null-Register to the RP to cause it to resend a Register-Stop message.
  • Page 937 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 79-10 ip pim rp-address This command is used to statically configure the RP address for multicast groups. To remove an RP address, use the no form of this command.
  • Page 938 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide no ip pim rp-candidate INTERFACE-ID Parameters INTERFACE-ID Specifies the interface ID. The IP address associated with this interface is advertised as a candidate RP address. group-list ACCESS-LIST- (Optional) Specifies the name of the standard IP access list that...
  • Page 939 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters SECONDS Specifies the keep alive time, in the range from 1 to 65525 seconds. Default By default, this value is 185 seconds. Command Mode Global Configuration Mode. Command Default Level Level: 12.
  • Page 940: Ip Pim Ssm

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide inifinity, the traffic keeps following the share tree. With the mode 0, the source tree will be established and the traffic switchover to the source tree. Example This example shows how to set the SPT threshold to infinity.
  • Page 941: Show Ip Pim

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 79-15 show ip pim This command is used to display the PIM global information. show ip pim Parameters None. Default None. Command Mode User EXEC or Any Configuration Mode.
  • Page 942: Show Ip Pim Interface

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide show ip pim bsr-router Parameters None. Default None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline Use this command to display the elected BSR information and information about the locally configured candidate rendezvous point (RP) advertisement.
  • Page 943 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide show ip pim interface [dense-mode | sparse-mode | sparse-dense-mode] [INTERFACE-ID] [detail] Parameters INTERFACE-ID (Optional) Specifies the interface which to display the interface information. Only VLAN interface IDs are applicable.
  • Page 944: Show Ip Pim Neighbor

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide : 90.1.1.1 DR Priotity Generation ID : 1645d8a00 Hello Interval : 30 seconds Join Prune timer : 60 seconds PIM Passive Mode : Disabled vlan200 Address : 50.111.111.111 : Enabled...
  • Page 945: Show Ip Pim Rp Mapping

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Level: 1. Usage Guideline Use this command to determine which routers on the LAN are configured for PIM. Example This example shows how to display the PIM neighbor information on all interfaces.
  • Page 946 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Uptime: 0DT16H52M39S, expires: 0DT00H02M50S Group(s): 225.0.0.0/8 RP: 1.1.1.10 Info source: static Switch# Display Parameters The address of the RP for the group specified. Info source Indicates from which system the router learned this RP information.
  • Page 947 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch# This example shows how to display the RP with the group address 225.1.1.1. Switch#show ip pim rp-hash 225.1.1.1 RP: 1.1.1.10 Info source: static Switch#...
  • Page 948: Protocol Independent Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 80. Protocol Independent Commands 80-1 distance This command is used to define an administrative distance for static routes. Use no command to revert to the default setting. distance [vrf VRF-NAME] {static | default} DISTANCE...
  • Page 949 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Parameters ACCESS-LIST-NAME Specifies a standard IP access list to define which received route updates are to be accepted and which route updates are to be advertised. INTERFACE-ID (Optional) Specifies the interface to apply the distribute list.
  • Page 950 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide GE-LENGTH (Optional) Specifies the minimum prefix length of the route that can be matched. LE-LENGTH (Optional) Specifies the maximum prefix length of the route that can be matched. DESCRIPTION Specifies the description for prefix list.
  • Page 951 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide NETWORK-MASK Specifies the network mask. IP-ADDRESS Specifies the IP address of the next hop that can be used to reach destination network. primary (Optional) Specifies the route as the primary route to the destination.
  • Page 952 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide NETWORK-PREFIX/PREFIX- (Optional) Specifies the network prefix and the prefix length of the LENGTH static route. NEXT-HOP-ADDRESS (Optional) Specifies the IPv6 address of the next hop to reach the destination network. If the address is a link-local address, then the interface ID also need to be specified.
  • Page 953 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide (Optional) Specifies to include the source IP address in the hash value computation. crc32_lower (Optional) Specifies to include the lower 5 bits of the CRC in the hash value computation.
  • Page 954 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode Router Configuration Mode. Command Default Level Level: 12. Usage Guideline There are a number of sources that a route can be learned from. Each route is associated with a distance.
  • Page 955: Show Ip Protocols

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Seq 10 permit 20 10.50.0.0/16 le 24 Total Entries: 1 Switch# 80-9 show ip protocols This command is used to display the state of the routing process. show ip protocols [rip | ospf | bgp] [vrf VRF-NAME] Parameters (Optional) Specifies to display the RIP protocol overall configuration.
  • Page 956 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide vlan31 vlan32 vlan33 Routing for Networks: vlan10 (1.0.0.1/255.0.0.0) vlan20 (2.0.0.1/255.0.0.0) vlan40 (4.0.0.1/255.0.0.0) vlan70 (7.0.0.3/255.0.0.0) vlan8 (8.0.0.1/255.0.0.0) vlan11 (11.0.0.1/255.0.0.0) vlan1 (40.90.90.90/255.0.0.0) vlan31 (131.0.0.1/255.255.0.0) vlan32 (132.0.0.1/255.255.0.0) vlan33 (133.0.0.1/255.255.0.0) Routing Information Sources:...
  • Page 957: Show Ip Route

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 7.255.255.254 8.0.0.2 11.0.0.2 131.0.0.2 132.0.0.2 133.0.0.2 4.0.0.2 Distribute list: vlan1 filtered by abc. vlan8 filtered by abc. vlan11 filtered by abc. External-1 Distance 110,External-2 Distance 115,inter-area distance 90, intra-area distance 80.
  • Page 958 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Level: 1. Usage Guideline The routing table gathers routes learned from different protocols. If multiple routes can reach the same network, the one with the best distance and the next hop is reachable will be chosen as the best and set to hardware for routing of packets.
  • Page 959 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide N1 - OSPF not-so-stubby area (NSSA) external type 1 route. N2 - OSPF NSSA external type 2 route. The candidate default. The next hop is reachable. > The route with the best distance among routes learned from multiple protocols.
  • Page 960 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Total Multi-path Switch# 80-12 show ipv6 route This command is used to display the entry in routing table. show ipv6 route {[IPV6-ADDRESS | NETWORK-PREFIX/PREFIX-LENGTH [longer-prefixes] | INTERFACE-ID | PROTOCOL] [database] | hardware}...
  • Page 961 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Code: C - connected, S - static, R - RIP, O - OSPF, IA - OSPF inter area E1 - OSPF external type 1, E2 - OSPF external type 2...
  • Page 962 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide C - Connected. Sub-Code IA - OSPF inter-area route. E1 - OSPF external type 1 route. E2 - OSPF external type 2 route. The next hop is reachable. >...
  • Page 963 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide...
  • Page 964: Qos Amendment Data Center Bridge (Dcb) Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 81. QoS Amendment Data Center Bridge (DCB) Commands 81-1 class type network-qos This command is used to specify the name of the type network Quality of Service (QoS) class map to be associated with a traffic policy and then enter into the policy-map type network QoS class configuration mode.
  • Page 965 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide This command is used to create or modify a type network QoS class map that defines the criteria for packet matching. class-map type network-qos match-any NAME Parameters NAME Specifies the name of the class map with a maximum of 32 characters.
  • Page 966 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide number of zero stands for strict priority mode. Default By default, 4, 7, 11, 14, 18, 21, 25 (in percentage) are assigned for Traffic Classes 0 to 6. By default, 0 is assigned for Traffic Class 7 which means that the transmission selection algorithm is “strict priority”.
  • Page 967 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide transmit characteristics. When the offered load in the traffic class doesn’t use its allocated bandwidth, ETS will allow other traffic classes to use the available bandwidth. The bandwidth assigned to each traffic class is configured in unit of percentage by the ets-queue bandwidth command.
  • Page 968 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Use the pause policy map type network-qos class configuration command to enable PFC pause characteristics on a class referenced in a type network QoS policy map. • Use the service-policy type network-qos input interface configuration command to apply a type network QoS policy map.
  • Page 969 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Use the policy-map type network-qos command to enter the policy-map configuration mode from where to configure or modify the policy for the traffic class. Use the class-map type network-qos match-any and match cos commands to configure the match criteria for a class.
  • Page 970 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Use the service-policy type network-qos command to attach a single type network QoS policy map to input interfaces. A policy map need not be created before specifying it in this command. A command will not take effect when it associates a non-existent service policy.
  • Page 971 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Class Map my_class_map_3 match cos 5 Switch# 81-9 show mls qos queuing interface This command is used to display the weight configuration for different scheduler algorithms on specified interface(s).
  • Page 972 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide ------- ETS bandwidth weights: Percentages ------------------ strict priority strict priority strict priority strict priority Switch# 81-10 show policy-map interface This command is used to display the policy map configuration on the specified interface.
  • Page 973 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Policy Map: policy1(network-qos) : input Class Map my_class_map_2 pause Policy Map: policy2 : input Class police police cir 500000 bc 10000 pir 1000000 be 10000 exceed-action set-dscp-transmit 2 violate-action drop...
  • Page 974 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide pause Switch#...
  • Page 975: Quality Of Service (Qos) Commands

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 82. Quality of Service (QoS) Commands 82-1 class This command is used to specify the name of the class map to be associated with a traffic policy and then enter into policy map class configuration mode.
  • Page 976 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide class-map [match-all | match-any] NAME no class-map NAME Parameters NAME Specifies the name of the class map with a maximum of 32 characters. match-all (Optional) Specifies how to evaluate multiple match criteria. Multiple match statements in the class map will be evaluated based on the logical AND.
  • Page 977 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide no match {access-group name ACCESS-LIST-NAME | cos [inner] COS-LIST | [ip] dscp DSCP- LIST | [ip] precedence IP-PRECEDENCE-LIST | protocol PROTOCOL-NAME | vlan [inner] VLAN- ID-LIST} Parameters access-group name ACCESS- Specifies an access list to be matched.
  • Page 978 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide • ip - IP (version 4). • ipv6 - IP (version 6). • netbios - NetBIOS. • nfs - Network File System. • ntp - Network Time Protocol. •...
  • Page 979 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 82-4 mls qos aggregate-policer This command is used to define a named aggregate policer for use in policy maps. To delete a named aggregate policer, use the no form of this command. The mls qos aggregate-policer command is for single rate policing and the mls qos aggregate-policer cir command is for two-rate policing.
  • Page 980: Mls Qos Cos

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide color-aware (Optional) Specifies the option for the single rate three colors policer or two rates three colors policer. When color-aware is not specified, the policer works in the color blind mode. When color-aware is specified, the policer works in color aware mode.
  • Page 981 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline When the override option is not specified, the CoS of the packets will be the packet’s CoS if the packets are tagged, and will be the port default CoS if the packet is untagged.
  • Page 982 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Use this command to attach an ingress DSCP mutation table to an interface. The ingress DSCP mutation will mutate the DSCP value right after the packet is received by the interface, and QoS handles the packet with this new value.
  • Page 983 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 82-8 mls qos map dscp-color This command is used to define the DSCP to color map for the mapping of a packet’s initial color. To return the color map to the default setting, use the no form of this command.
  • Page 984 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Default CoS Value: DSCP Value: 8-15 16-23 24-31 32-39 40-47 48-55 56-63 Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline The DSCP to CoS map is used by a DSCP trust port to map a DSCP value to an internal CoS value. In turn this CoS value is then mapped to the CoS queue based on the CoS to queue map configured by the priority-queue cos-map command.
  • Page 985 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide When a packet is received by an interface, based on a DSCP mutation map, the incoming DSCP can be mutated to another DSCP immediately before any QoS operations. The DSCP mutation is helpful to integrate domains with different DSCP assignments.
  • Page 986: Mls Qos Trust

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide subtracted from the corresponding credit counter and the service right is turned over to the next lower CoS queue. When the credit counter drops below 0, the queue is no longer serviced until its credits are replenished.
  • Page 987 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide When the interface is set to trust DSCP, the DSCP of the arriving packet will be trusted for the subsequent QoS operations. First, the DSCP will be mapped to an internal CoS value, which will be subsequently used to determine the CoS queue.
  • Page 988 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide ACTION Specifies the action to take on packets. Use one of the following keywords: drop - Drops the packet. set-dscp-transmit VALUE - Sets the IP differentiated services code point (DSCP) value and transmits the packet with the new IP DSCP value.
  • Page 989: Police Aggregate

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config-cmap)# exit Switch(config)# policy-map police-setting Switch(config-pmap)# class access-match Switch(config-pmap-c)# police 8 1 exceed-action drop Switch(config-pmap-c)# exit Switch(config-pmap)# exit Switch(config)# interface eth3/0/1 Switch(config-if)# service-policy input police-setting Switch(config-if)# 82-14 police aggregate This command is used to configure a named aggregate policer as the policy for a traffic class in a policy map.
  • Page 990: Police Cir

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config-pmap-c)# exit Switch(config-pmap)# class class3 Switch(config-pmap-c)# police aggregate agg_policer1 Switch(config-pmap-c)# 82-15 police cir This command is used to configure traffic policing for two rates, the committed information rate (CIR) and the peak information rate (PIR).
  • Page 991 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Policy-map Class Configuration Mode. Command Default Level Level: 12. Usage Guideline As a packet arrives at a port, the packet will be initialized with a color. The receiving port either trusts DSCP or CoS.
  • Page 992 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 32 alphanumeric characters. Default None. Command Mode Global Configuration Mode. Command Default Level Level: 12. Usage Guideline Use the policy-map command to enter the policy-map configuration mode from where the user can configure or modify the policy for the traffic class.
  • Page 993 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Default The default priority (CoS) to queue mapping is: 0 to 2, 1 to 0, 2 to 1, 3 to 3, 4 to 4, 5 to 5, 6 to 6, 7 to 7.
  • Page 994 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Usage Guideline Use this command to configure the minimal and maximum bandwidth for a specified queue. When the minimal bandwidth is configured, the packet transmitted from the queue can be guaranteed. When the maximum bandwidth is configured, packets transmitted from the queue cannot exceed the maximum bandwidth even if the bandwidth is available.
  • Page 995 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Level: 12. Usage Guideline The specified limitation cannot exceed the maximum speed of the specified interface. For the ingress bandwidth limitation, the ingress will send a pause frame or a flow control frame when the received traffic exceeds the limitation.
  • Page 996 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide For cust2-classes, gold is configured to use Cos Queue 6 and be policed by a single rate policer with a committed rate of 1600 Kbps. Silver is policed by a single rate policer with a committed rate of 4000 Kbps, and bronze is policed by a single rate policer with a committed rate of 16000 Kbps.
  • Page 997 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide 82-21 This command is used to configure the new precedence field, DSCP field, and CoS field of the outgoing packet. The user can also specify the CoS queue for the packet.
  • Page 998 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide Switch(config-pmap)# 82-22 show class-map This command is used to display the class map configuration. show class-map [NAME] Parameters NAME (Optional) Specifies the name of the class map. The class map name can be a maximum of 31 alphanumeric characters.
  • Page 999: Show Mls Qos Interface

    DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide NAME (Optional) Specifies the name of the aggregate policer. Default None. Command Mode User EXEC or Any Configuration Mode. Command Default Level Level: 1. Usage Guideline This command is used to display the configured aggregated policer.
  • Page 1000 DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide map cos-color Specifies to displays the CoS to color map. map dscp-cos Specifies to displays the mapping of DSCP to CoS Default None. Command Mode User EXEC or Any Configuration Mode.

This manual is also suitable for:

Dxs-3600-32s

Table of Contents