Force10 S55T - Network switch DELL - Free user manual and instructions

Product Type	Network Switch
Brand	Dell
Model	Force10 S55T
Form Factor	Rack-mountable, 1U
Ports	24x Gigabit Ethernet, 4x 10 Gigabit Ethernet (SFP+)
Switching Capacity	176 Gbps
Forwarding Rate	131 Mpps
Power Supply	Dual, hot-swappable AC power supplies (100-240V AC, 50-60Hz)
Dimensions (W x H x D)	17.3 x 1.7 x 18.5 inches (44 x 4.3 x 47 cm)
Weight	Approximately 13 kg (28.7 lbs)
Operating System	Dell Force10 OS (FTOS) 8.3.5.6
Management	CLI (Console, Telnet, SSH), SNMP v1/v2c/v3, sFlow
Layer 2 Features	VLAN, STP, RSTP, MSTP, PVST+, GVRP, LACP, Link Aggregation, IGMP Snooping
Layer 3 Features	Static routing, RIP, OSPF, BGP, VRRP, PIM-SM, PIM-SSM
Security	ACL (IPv4/IPv6/MAC), 802.1X, SSH, AAA, RADIUS, TACACS+
QoS	Policy-based QoS, traffic shaping, congestion management
Stacking	Up to 12 units in a stack
Cooling	Fan modules, side-to-side airflow
Operating Temperature	0°C to 40°C (32°F to 104°F)
Certifications	CE, FCC, UL

Frequently Asked Questions - Force10 S55T DELL

How do I access the CLI on the Dell Force10 S55T?

You can access the CLI via a serial console port or a Telnet/SSH session. By default, after boot, you are placed in EXEC mode. Use the enable command to enter EXEC Privilege mode.

How to configure a VLAN on the S55T?

Enter configuration mode (configure), then create a VLAN using interface vlan . Assign ports to the VLAN in interface configuration mode using the switchport access vlan command.

How to update the firmware on the Dell Force10 S55T?

Use the copy command to transfer the new FTOS image to flash, then configure boot parameters with boot system. Finally, reload the switch with reload. See the upgrade commands in the manual.

What is the default username and password for the S55T?

The default credentials are not set; you are not prompted for login on console. For Telnet/SSH, an administrator must create users via the username command in configuration mode.

How to enable sFlow on an interface?

First enable sFlow globally with sflow enable in configuration mode. Then enter interface mode for the desired port and issue sflow enable to start sampling.

How to reset the Dell Force10 S55T to factory defaults?

Use the restore factory-defaults stack-unit clear-all command in EXEC Privilege mode. This deletes startup-config and persistent settings, then the unit reboots.

How to configure Link Aggregation (LAG) on the S55T?

Create a port-channel interface with interface port-channel . Add physical interfaces to the LAG using channel-group mode active (LACP) or on.

How to view the running configuration?

In EXEC Privilege mode, use the show running-config command. You can filter output with a pipe and keywords like grep or include.

How to set an IP address on a management interface?

Enter interface mode for the management port (e.g., interface ManagementEthernet 0/0) and use ip address .

How to configure VRRP on the S55T?

Enable VRRP on an interface with vrrp-group and set the virtual IP with virtual-address . Configure priority and timers as needed.

USER MANUAL Force10 S55T DELL

Dell Command Line Reference Guide for the S55 System 8.3.5.6

Notes, Cautions, and Warnings

NOTE: A NOTE indicates important information that helps you make better use of your computer.

△ CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the problem.

WARNING: A WARNING indicates a potential for property damage, personal injury, or death.

Information in this publication is subject to change without notice. © 2014 Dell Force10. All rights reserved.

Reproduction of these materials in any manner whatsoever without the written permission of Dell Inc. is strictly forbidden.

Trademarks used in this text: Dell™, the Dell logo, Dell Boomi™, Dell Precision™, OptiPlex™, Latitude™, PowerEdge™, PowerVault™, PowerConnect™, OpenManage™, EqualLogic™, Compellent™, KACE™, FlexAddress™, Force10™ and Vostro™ are trademarks of Dell Inc. Intel®, Pentium®, Xcon®, Core® and Celeron® are registered trademarks of Intel Corporation in the U.S. and other countries. AMD® is a registered trademark and AMD Opteron™, AMD Phenom™ and AMD Sempron™ are trademarks of Advanced Micro Devices, Inc. Microsoft®, Windows®, Windows Server®, Internet Explorer®, MS-DOS®, Windows Vista® and Active Directory® are either trademarks or registered trademarks of Microsoft Corporation in the United States and/or other countries. Red Hat® and Red Hat® Enterprise Linux® are registered trademarks of Red Hat, Inc. in the United States and/or other countries. Novell® and SUSE® are registered trademarks of Novell Inc. in the United States and other countries. Oracle® is a registered trademark of Oracle Corporation and/or its affiliates. Citrix®, Xen®, XenServer® and XenMotion® are either registered trademarks or trademarks of Citrix Systems, Inc. in the United States and/or other countries. VMware®, Virtual SMP®, vMotion®, vCenter® and vSphere® are registered trademarks or trademarks of VMware, Inc. in the United States or other countries. IBM® is a registered trademark of International Business Machines Corporation.

Other trademarks and trade names may be used in this publication to refer to either the entities claiming the marks and names or their products. Dell Inc. disclaims any proprietary interest in trademarks and trade names other than its own.

1 About this Guide .... 11

Objectives 11

Audience 11

Conventions 11

Information Symbols 12

Related Documents 12

2 CLI Basics....13

Accessing the Command Line ....13

Multiple Configuration Users 14

Navigating the Command Line Interface 14

Obtaining Help 15

Using the Keyword No 17

Filtering show Commands 17

Displaying All Output 18

Filtering Command Output Multiple Times ....18

Command Modes 18

EXEC Mode 19

EXEC Privilege Mode ....19

CONFIGURATION Mode 19

INTERFACE Mode ....19

LINE Mode 20

TRACE-LIST Mode 20

MAC ACCESS LIST Mode ....20

IP ACCESS LIST Mode ....21

ROUTE-MAP Mode .....21

PREFIX-LIST Mode 21

AS-PATH ACL Mode .....21

IP COMMUNITY LIST Mode .....22

REDIRECT-LIST Mode .....22

SPANNING TREE Mode 22

Per-VLAN SPANNING TREE Plus Mode .....22

RAPID SPANNING TREE Mode 23

MULTIPLE SPANNING TREE Mode 23

PROTOCOL GVRP Mode .....23

ROUTER OSPF Mode 23

ROUTER RIP Mode ....24

ROUTER BGP Mode 24

Determining the Chassis Mode 24

3 File Management ....25

Overview 25

Basic File Management Commands .....25

4 Control and Monitoring ....67

Overview 67

Commands 67

5 802.1ag....163

Overview 163

Commands 163

6 802.1X....175

Important Points to Remember 175

7 Access Control Lists (ACL)....191

Overview 191

Commands Common to all ACL Types 191

Common IP ACL Commands 193

Standard IP ACL Commands 197

Extended IP ACL Commands .....204

Common MAC Access List Commands .235

Standard MAC ACL Commands .....238

Extended MAC ACL Commands 242

IP Prefix List Commands 248

Route Map Commands .....254

AS-Path Commands 272

IP Community List Commands .....276

8 Border Gateway Protocol IPv4(BGPv4) .....281

Overview 281

BGPv4 Commands 282

MBGP Commands 358

BGP Extended Communities (RFC 4360)....383

9 Bare Metal Provisioning ....393

Overview 393

Commands 393

10 Content Addressable Memory (CAM) .....399

Overview 399

CAM Profile Commands ....399

Important Points to Remember ....399

11 Dynamic Host Configuration Protocol (DHCP) .....413

Overview 413

Commands to Configure the System to be a DHCP Server ....413

Commands to Configure Secure DHCP 421

12 Dell Force10 Resilient Ring Protocol (FRRP) .....427

Overview 427

Commands 427

Important Points to Remember 427

13 GARP VLAN Registration (GVRP) 435

Overview 435

Commands 435

Important Points to Remember 436

14 Internet Group Management Protocol (IGMP) .....445

Overview 445

IGMP Commands 445

Important Points to Remember 445

IGMP Snooping Commands ....456

Important Points to Remember for IGMP Snooping ....456

Important Points to Remember for IGMP Querier ....456

15 Interfaces 461

Overview 461

Basic Interface Commands 461

Port Channel Commands ....517

16 IPv4 Routing ....527

Overview 527

Commands 527

17 IPv6 Access Control Lists (IPv6 ACLs) .....579

Overview 579

Important Points to Remember 579

IPv6 ACL Commands 579

IPv6 Route Map Commands 604

18 IPv6 Basics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 609

Overview 609

Commands 609

19 iSCSI Optimization .....621
Overview 621

20 Link Aggregation Control Protocol (LACP) .....629

Overview 629

Commands 629

21 Layer 2 .637

Overview 637

MAC Addressing Commands 637

Virtual LAN (VLAN) Commands 655

22 Link Layer Detection Protocol (LLDP)....665

Overview 665

Commands 665

LLDP-MED Commands 676

23 Multiple Spanning Tree Protocol (MSTP) .....685

Overview 685

Commands 685

24 Multicast....699

Overview 699

IPv4 Multicast Commands 699

IPv6 Multicast Commands .....707

25 Neighbor Discovery Protocol (NDP)....713

Overview 713

Commands 713

26 Open Shortest Path First (OSPFv2 and OSPFv3) .....721

Overview 721

OSPFv2 Commands 721

27 PIM-Sparse Mode (PIM-SM). 779

Overview 779

IPv4 PIM-Sparse Mode Commands 779

28 PIM-Source Specific Mode (PIM-SSM)....795

Overview 795

IPv4 PIM Commands 795

IPv4 PIM-Source Specific Mode C0mands 795

29 Port Monitoring ....799

Overview 799

Commands 799

Important Points to Remember 799

30 Private VLAN (PVLAN) .....805

Overview 805

Commands 805

Private VLAN Concepts ....805

31 Per-VLAN Spanning Tree plus (PVST+).815

Overview 815

Commands 815

32 Quality of Service (QoS) 827

Overview 827

Global Configuration Commands 827

Per-Port QoS Commands ....828

Policy-Based QoS Commands .836

Important Points to Remember—multicast-bandwidth option .....850

Queue-Level Debugging 872

33 Router Information Protocol (RIP)....885

Overview 885

Commands 885

34 Remote Monitoring (RMON) .....905

Overview 905

Commands 905

35 Rapid Spanning Tree Protocol (RSTP) .....917

Overview 917

Commands 917

36 Security .927

Overview 927

Commands 927

AAA Accounting Commands 927

Authorization and Privilege Commands 930

Authentication and Password Commands .....934

RADIUS Commands 946

TACACS+ Commands 951

Port Authentication (802.1X) Commands 954

Important Points to Remember 954

SSH Server and SCP Commands .....962

Secure DHCP Commands .974

37 Service Provider Bridging .....979

Overview 979

Commands 979

Important Points to Remember 979

38 sFlow....985

Overview 985

Important Points to Remember .....985

Commands 986

39 SNMP and Syslog. .995

Overview 995

SNMP Commands 995

Important Points to Remember 996

Syslog Commands 1011

40 Storm Control .....1025

Overview 1025

Commands 1025

Important Points to Remember 1025

41 S-Series Stacking Commands 1035

Overview 1035

Commands 1035

42 Spanning Tree Protocol (STP) 1049

Overview 1049

Commands 1049

43 Time and Network Time Protocol (NTP) .....1059

Overview 1059

Commands 1059

44 S55 u-Boot 1075

Overview 1075

Commands 1075

45 Uplink Failure Detection (UFD) 1081

Overview 1081

Commands 1081

46 VLAN Stacking .....1091

Overview 1091

Commands 1091

Important Points to Remember 1091

47 Virtual Router Redundancy Protocol (VRRP)....1101

Overview 1101

Commands 1101

48 S-Series Debugging and Diagnostics 1113

Diagnostics and Monitoring Commands 1113

Offline Diagnostic Commands 1114

Important Points to Remember 1114

Buffer Tuning Commands 1116

Hardware Commands 1121

49 SNMP Traps .....1131

About this Guide

This book provides information on the FTOS Command Line Interface (CLI). It includes some information on the protocols and features found in FTOS and on the Dell Networking systems supported by FTOS (C-Series C, E-Series E, and S-Series S).

This chapter includes:

• Objectives
• Audience
• Conventions
• Related Documents

Objectives

This document is intended as a reference guide for the FTOS command line interface (CLI) commands used with the S55 system.

Audience

This document is intended for system administrators who are responsible for configuring or maintaining networks. This guide assumes you are knowledgeable in Layer 2 and Layer 3 networking technologies.

Conventions

This document uses the following conventions to describe command syntax:

Convention Description

keyword	Keywords are in bold and should be entered in the CLI as listed.
parameter	Parameters are in italics and require a number or word to be entered in the CLI.
{X} Keywords and parameters within braces must be entered in the CLI.
[X] Keywords and parameters within brackets are optional.
x | y Keywords and parameters separated by bar require you to choose one.
x||y Keywords and parameters separated by a double bar enables you to choose any or all of them.

Information Symbols

Table 1-1 describes symbols contained in this guide.

Table 1-1. Information Symbols

Symbol Brief	Description
C	C-Series	This symbol indicates that the selected feature is supported on the C-Series.
E	E-Series	This symbol indicates that the selected feature is supported on the E-Series TeraScale AND E-Series ExaScale.
ET	E-Series TeraScale	This symbol indicates that the selected feature is supported on the E-Series TeraScale platform only.
EX	E-Series ExaScale	This symbol indicates that the selected feature is supported on the E-Series ExaScale platform only.
S	S-Series	This symbol indicates that the selected feature is supported on the S-Series. Note that when a feature is supported on all the S-Series systems, including the S55, this symbol is used.
	S55 This symbol indicates that the selected feature is supported on the S55 but not on other S-Series systems.

Related Documents

For more information about the system, refer to the following documents:

• FTOS Configuration Guide for the S55
• S55 Installation Guide
- Release Notes for FTOS

CLI Basics

This chapter describes the command structure and command modes. FTOS commands are in a text-based interface that allows you to launch commands, change the command modes, and configure interfaces and protocols.

This chapter covers the following topics:

• Accessing the Command Line
  • Multiple Configuration Users
  • Navigating the Command Line Interface
• Obtaining Help
  • Using the Keyword No
  • Filtering show Commands
• Command Modes

Accessing the Command Line

When the system boots successfully, you are positioned on the command line in the EXEC mode and not prompted to log in. You can access the commands through a serial console port or a Telnet session. When you Telnet into the switch, you are prompted to enter a login name and password.

Figure 2-1 is an example of a successful Telnet login session.

Figure 2-1. Login Example

telnet 172.31.1.53
Trying 172.31.1.53...
Connected to 172.31.1.53.
Escape character is '^]'.
Login: username
Password:
FTOS> 

Once you log into the switch, the prompt provides you with current command-level information (refer to Table 2-1).

Multiple Configuration Users

When a user enters the CONFIGURATION mode and another user(s) is already in that configuration mode, FTOS generates an alert warning message similar to the following:

Figure 2-2. Configuration Mode User Alert

FTOS#conf
% Warning: The following users are currently configuring the system:
User "" on line console0
User "admin" on line vty0 (123.12.1.123)
User "admin" on line vty1 (123.12.1.123)
User "Irene" on line vty3 (123.12.1.321)
FTOS#conf 

When another user enters the CONFIGURATION mode, FTOS sends a message similar to the following, where the user in this case is “admin” on vty2:

% Warning: User "admin" on line vty2 "172.16.1.210" is in configuration

Navigating the Command Line Interface

The Command Line Interface (CLI) prompt displayed by FTOS is comprised of:

• “hostname”— the initial part of the prompt, “FTOS” by default. You can change it with the hostname command, as described in hostname.
  • The second part of the prompt, reflecting the current CLI mode, as shown in Table 2-1.

The CLI prompt changes as you move up and down the levels of the command structure. Table 2-1 lists the prompts and their corresponding command levels, called modes. Starting with the CONFIGURATION mode, the command prompt adds modifiers to further identify the mode. The command modes are explained in Command Modes.

Note: Some of the following modes are not available on C-Series or S-Series.

Table 2-1. Command Prompt and Corresponding Command Mode

Prompt CLI Command Mode
FTOS> EXEC
FTOS# EXEC Privilege
FTOS(conf)# CONFIGURATION

Table 2-1. Command Prompt and Corresponding Command Mode

Prompt	CLI Command Mode
FTOS(conf-if)#FTOS(conf-if-gi-0/0)#FTOS(conf-if-tc-0/0)#FTOS(conf-if-lo-0)#FTOS(conf-if-nu-0)#FTOS(conf-if-po-0)#FTOS(conf-if-vl-0)#FTOS(conf-if-so-0/0)#FTOS(conf-if-ma-0/0)#FTOS(conf-if-range)#	INTERFACE
FTOS(config-ext-nacl)#FTOS(config-std-nacl)#	IP ACCESS LIST
FTOS(config-line-aux)#FTOS(config-line-console)#FTOS(config-line-vty)#	LINE
FTOS(config-ext-macl)#FTOS(config-std-macl)#	MAC ACCESS LIST
FTOS(config-mon-scss)# MONITOR SESSION
FTOS(config-span)# STP
FTOS(config-mstp)# MULTIPLE SPANNING TREE
FTOS(config-pvst)# Per-VLAN SPANNING TREE Plus
FTOS(config-rstp)# RAPID SPANNING TREE
FTOS(config-gvrp)# PROTOCOL GVRP
FTOS(config-route-map)# ROUTE-MAP
FTOS(conf-nprefixl)# PREFIX-LIST
FTOS(conf-router_rip)# ROUTER RIP
FTOS(conf-redirect-list)# REDIRECT
FTOS(conf-router_bgp)# ROUTER BGP
FTOS(conf-router_ospf)# ROUTER OSPF
FTOS(conf-router_isis)#	ROUTER ISIS
FTOS(conf-trace-acl)#	TRACE-LIST

Obtaining Help

As soon as you are in a command mode there are several ways to access help.

• To obtain a list of keywords at any command mode, do the following:
— Enter a ? at the prompt or after a keyword. There must always be a space before the ?.

• To obtain a list of keywords with a brief functional description, do the following:

— Enter help at the prompt.

• To obtain a list of available options, do the following:

— Type a keyword followed by a space and a ?

- Type a partial keyword followed by a ?

— A display of keywords beginning with the partial keyword is listed.

Figure 2-3 illustrates the results of entering ip ? at the prompt.
Figure 2-3. Partial Keyword Example

FTOS (conf) #ip ?
access-list    Named access-list
as-path    BGP autonomous system path filter
community-list    Add a community list entry
domain-list    Domain name to complete unqualified host name
domain-lookup    Enable IP Domain Name System hostname translation
domain-name    Define the default domain name
fib    FIB configuration commands
ftp    FTP configuration commands
host    Add an entry to the ip hostname table
max-frag-count    Max. fragmented packets allowed in IP re-assembly
multicast-routing    Enable IP multicast forwarding
name-server    Specify address of name server to use
pim    Protocol Independent Multicast
prefix-list    Build a prefix list
radius    Interface configuration for RADIUS
redirect-list    Named redirect-list
route    Establish static routes
scp    SCP configuration commands
source-route    Process packets with source routing header options
ssh    SSH configuration commands
tacacs    Interface configuration for TACACS+
telnet    Specify telnet options
tftp    TFTP configuration commands
trace-group    Named trace-list
trace-list    Named trace-list
FTOS (conf) #ip 

When entering commands, you can take advantage of the following timesaving features:

• The commands are not case sensitive.
• You can enter partial (truncated) command keywords. For example, you can enter int gig int interface for the interface gigabitethernet interface command.
• Use the TAB key to complete keywords in commands.
• Use the up arrow key to display the last enabled command.
  • Use either the Backspace key or the Delete key to erase the previous character.

Use the left and right arrow keys to navigate left or right in the FTOS command line. Table 2-2 defines the key combinations valid at the FTOS command line.

Table 2-2. Short-cut Keys and their Actions

Key Combination Action
CNTL-A Moves the cursor to the beginning of the command line.
CNTL-B Moves the cursor back one character.
CNTL-D Deletes character at cursor.
CNTL-E Moves the cursor to the end of the line.
CNTL-F Moves the cursor forward one character.
CNTL-I Completes a keyword.
CNTL-K Deletes all characters from the cursor to the end of the command line.
CNTL-L Re-enters the previous command.
CNTL-N Return to more recent commands in the history buffer after recalling commands with Ctrl-P or the up arrow key
CNTL-P Recalls commands, beginning with the last command
CNTL-R Re-enters the previous command.
CNTL-U Deletes the line.
CNTL-W Deletes the previous word.
CNTL-X Deletes the line.
CNTL-Z Ends continuous scrolling of command outputs.
Esc B Moves the cursor back one word.
Esc F Moves the cursor forward one word.
Esc D	Deletes all characters from the cursor to the end of the word.

Using the Keyword No

To disable, delete, or return to default values, use the no form of the commands. For most commands, if you type the keyword no in front of the command, you will disable that command or delete it from the running configuration. In this document, the no form of the command is discussed in the Command Syntax portion of the command description.

Filtering show Commands

You can filter the display output of a show command to find specific information, to display certain information only, or to begin the command output at the first instance of a regular expression or phrase.

When you execute a show command, followed by a pipe ( | ) and one of the parameters listed below and a regular expression, the resulting output either excludes or includes those parameters, as defined by the parameter:

• display — display additional configuration information

• except— display only text that does not match the pattern (or regular expression)
  • find — search for the first occurrence of a pattern
• grep — display text that matches a pattern
  • no-more — do not paginate the display output
  • save - copy output to a file for future use

Note: FTOS accepts a space before or after the pipe, no space before or after the pipe, or any combination. For example:

FTOS#command | grep gigabit | except regular-expression | find regular-expression

The grep command option has an ignore-case sub-option that makes the search case-insensitive. For example, the commands:

• show run | grep Ethernet would return a search result with instances containing a capitalized "Ethernet," such as interface GigabitEthernet 0/0.
• show run | grep ethernet would not return the search result, above, because it only searches for instances containing a non-capitalized “ethernet.”

Executing the command show run | grep Ethernet ignore-case would return instances containing both “Ethernet” and “ethernet.”

Displaying All Output

To display the output all at once (not one screen at a time), use the no-more after the pipe. This is similar to the terminal length screen-length command except that the no-more option affects the output of just the specified command. For example:

FTOS#show running-config|no-more

Filtering Command Output Multiple Times

You can filter a single command output multiple times. Place the save option as the last filter. For example:

FTOS# command | grep regular-expression | except regular-expression | grep other-regular-expression | find regular-expression | no-more | save

Command Modes

To navigate to various CLI modes, you need to use specific commands to launch each mode. Navigation to these modes is discussed in the following sections.

Note: Some of the following modes are not available on C-Series or S-Series.

EXEC Mode

When you initially log in to the switch, by default, you are logged into the EXEC mode. This mode allows you to view settings and to enter the EXEC Privilege mode to configure the device. While you are in the EXEC mode, the > prompt is displayed following the “hostname” prompt, as described above. which is “FTOS” by default. You can change it with the hostname command. See the command hostname. Each mode prompt is preceded by the hostname.

EXEC Privilege Mode

The enable command accesses the EXEC Privilege mode. If an administrator has configured an "Enable" password, you will be prompted to enter it here.

The EXEC Privilege mode allows you to access all commands accessible in EXEC mode, plus other commands, such as to clear ARP entries and IP addresses. In addition, you can access the CONFIGURATION mode to configure interfaces, routes, and protocols on the switch. While you are logged in to the EXEC Privilege mode, the # prompt is displayed.

CONFIGURATION Mode

In the EXEC Privilege mode, use the configure command to enter the CONFIGURATION mode and configure routing protocols and access interfaces.

To enter the CONFIGURATION mode:

1. Verify that you are logged in to the EXEC Privilege mode.
2. Enter the configure command. The prompt changes to include (conf).

From this mode, you can enter INTERFACE by using the interface command.

INTERFACE Mode

Use the INTERFACE mode to configure interfaces or IP services on those interfaces. An interface can be physical (for example, a Gigabit Ethernet port) or virtual (for example, the Null interface).

To enter INTERFACE mode:

1. Verify that you are logged into the CONFIGURATION mode.
2. Enter the interface command followed by an interface type and interface number that is available on the switch.
3. The prompt changes to include the designated interface and slot/port number, as outlined in Table 2-3.

Table 2-3. Interface prompts

Prompt Interface Type
FTOS(conf-if)# INTERFACE mode
FTOS(conf-if-gi-0/0)# Gigabit Ethernet interface followed by slot/port information
FTOS(conf-if-te-0/0)# Ten Gigabit Ethernet interface followed by slot/port information
FTOS(conf-if-lo-0)# Loopback	interface number.
FTOS(conf-if-nu-0)# Null Interface followed by zero
FTOS(conf-if-po-0)# Port-channel interface number
FTOS(conf-if-vl-0)# VLAN Interface followed by VLAN number (range 1 to 4094)
FTOS(conf-if-so-0/0)# SONET interface followed by slot/port information.
FTOS(conf-if-ma-0/0)# Management Ethernet interface followed by slot/port information
FTOS(conf-if-range)#	Designated interface range (used for bulk configuration; seeinterface range).

LINE Mode

Use the LINE mode to configure console or virtual terminal parameters.

To enter LINE mode:

1. Verify that you are logged in to the CONFIGURATION mode.
2. Enter the line command. You must include the keywords console or vty and their line number available on the switch. The prompt changes to include (config-line-console) or (config-line-vty).

You can exit this mode by using the exit command.

TRACE-LIST Mode

When in the CONFIGURATION mode, use the trace-list command to enter the TRACE-LIST mode and configure a Trace list.

1. Verify that you are logged in to the CONFIGURATION mode.
2. Enter the ip trace-list command. You must include the name of the Trace list. The prompt changes to include (conf-trace-acl).

You can exit this mode by using the exit command.

MAC ACCESS LIST Mode

While in the CONFIGURATION mode, use the mac access-list standard or mac access-list extended command to enter the MAC ACCESS LIST mode and configure either standard or extended access control lists (ACL).

To enter MAC ACCESS LIST mode:

1. Verify that you are logged in to the CONFIGURATION mode.
2. Use the mac access-list standard or mac access-list extended command. You must include a name for the ACL. The prompt changes to include (conf-std-macl) or (conf-ext-macl).

You can return to the CONFIGURATION mode by entering the exit command.

IP ACCESS LIST Mode

While in the CONFIGURATION mode, use the ip access-list standard or ip access-list extended command to enter the IP ACCESS LIST mode and configure either standard or extended access control lists (ACL).

To enter IP ACCESS LIST mode:

1. Verify that you are logged in to the CONFIGURATION mode.
2. Use the ip access-list standard or ip access-list extended command. You must include a name for the ACL. The prompt changes to include (conf-std-nacl) or (conf-ext-nacl).

You can return to the CONFIGURATION mode by entering the exit command.

ROUTE-MAP Mode

While in the CONFIGURATION mode, use the route-map command to enter the ROUTE-MAP mode and configure a route map.

To enter ROUTE-MAP mode:

1. Verify that you are logged in to the CONFIGURATION mode.
2. Use the route-map map-name [permit | deny] [sequence-number] command. The prompt changes to include (route-map).

You can return to the CONFIGURATION mode by entering the exit command.

PREFIX-LIST Mode

While in the CONFIGURATION mode, use the ip prefix-list command to enter the PREFIX-LIST mode and configure a prefix list.

To enter PREFIX-LIST mode:

1. Verify that you are logged in to the CONFIGURATION mode.
2. Enter the ip prefix-list command. You must include a name for the prefix list. The prompt changes to include (conf-nprefix1).

You can return to the CONFIGURATION mode by entering the exit command.

AS-PATH ACL Mode

Use the AS-PATH ACL mode to configure an AS-PATH Access Control List (ACL) on the E-Series. See Chapter 7, Access Control Lists (ACL).

To enter AS-PATH ACL mode:

1. Verify that you are logged in to the CONFIGURATION mode.
2. Enter the ip as-path access-list command. You must include a name for the AS-PATH ACL. The prompt changes to include (config-as-path).

You can return to the CONFIGURATION mode by entering the exit command.

IP COMMUNITY LIST Mode

Use the IP COMMUNITY LIST mode to configure an IP Community ACL on the E-Series. See Chapter 7, Access Control Lists (ACL).

To enter IP COMMUNITY LIST mode:

1. Verify that you are logged in to the CONFIGURATION mode.
2. Enter the ip community-list command. You must include a name for the Community list. The prompt changes to include (config-community-list).

You can return to the CONFIGURATION mode by entering the exit command.

REDIRECT-LIST Mode

To enter REDIRECT-LIST mode:

1. Verify that you are logged in to the CONFIGURATION mode.
2. Use the ip redirect-list command. You must include a name for the Redirect-list. The prompt changes to include (conf-redirect-list).

You can return to the CONFIGURATION mode by entering the exit command.

SPANNING TREE Mode

Use the STP mode to enable and configure the Spanning Tree protocol, as described in Chapter 42, Spanning Tree Protocol (STP).

To enter STP mode:

1. Verify that you are logged into the CONFIGURATION mode.
2. Enter the protocol spanning-tree stp-id command.
   You can return to the CONFIGURATION mode by entering the exit command.

Per-VLAN SPANNING TREE Plus Mode

Use PVST+ mode to enable and configure the Per-VLAN Spanning Tree (PVST+) protocol, as described in Chapter 31, Per-VLAN Spanning Tree plus (PVST+).

Note: The protocol is PVST+, but the plus sign is dropped at the CLI prompt

To enter PVST+ mode:

1. Verify that you are logged into the CONFIGURATION mode.
2. Enter the protocol spanning-tree pvst command.
   You can return to the CONFIGURATION mode by entering the exit command.

RAPID SPANNING TREE Mode

Use PVST+ mode to enable and configure the RSTP protocol, as described in Chapter 35, Rapid Spanning Tree Protocol (RSTP).

To enter RSTP mode:

1. Verify that you are logged into the CONFIGURATION mode.

2. Enter the protocol spanning-tree rstp command.

You can return to the CONFIGURATION mode by entering the exit command.

MULTIPLE SPANNING TREE Mode

Use MULTIPLE SPANNING TREE mode to enable and configure the Multiple Spanning Tree protocol, as described in Chapter 23, Multiple Spanning Tree Protocol (MSTP).

To enter MULTIPLE SPANNING TREE mode:

1. Verify that you are logged into the CONFIGURATION mode.

2. Enter the protocol spanning-tree mstp command.

You can return to the CONFIGURATION mode by entering the exit command.

PROTOCOL GVRP Mode

Use the PROTOCOL GVRP mode to enable and configure GARP VLAN Registration Protocol (GVRP), as described in Chapter 13, GARP VLAN Registration (GVRP).

To enter PROTOCOL GVRP mode:

1. Verify that you are logged into the CONFIGURATION mode.

2. Enter the protocol gvrp command syntax.

You can return to the CONFIGURATION mode by entering the exit command.

ROUTER OSPF Mode

Use the ROUTER OSPF mode to configure OSPF, as described in Chapter 26, Open Shortest Path First (OSPFv2 and OSPFv3).

To enter ROUTER OSPF mode:

1. Verify that you are logged into the CONFIGURATION mode.
2. Use the router ospf {process-id} command. The prompt changes to include (conf-router_ospf-id).

You can switch to the INTERFACE mode by using the interface command or you can switch to the ROUTER RIP mode by using the router rip command.

ROUTER RIP Mode

Use the ROUTER RIP mode to configure RIP on the C-Series or E-Series, as described in Chapter 33, Router Information Protocol (RIP).

To enter ROUTER RIP mode:

1. Verify that you are logged into the CONFIGURATION mode.
2. Enter the router rip command. The prompt changes to include (conf-router_rip).

You can switch to the INTERFACE mode by using the interface command or you can switch to the ROUTER OSPF mode by using the router ospf command.

ROUTER BGP Mode

Use the ROUTER BGP mode to configure BGP on the C-Series or E-Series, as described in Chapter 8, Border Gateway Protocol IPv4(BGPv4).

To enter ROUTER BGP mode:

1. Verify that you are logged into the CONFIGURATION mode.
2. Enter the router bgp as-number command. The prompt changes to include (conf-router_bgp).

You can return to the CONFIGURATION mode by entering the exit command.

Determining the Chassis Mode

The chassis mode in FTOS determines which hardware is being supported in an E-Series chassis. The chassis mode is programmed into an EEPROM on the backplane of the chassis and the change takes place only after the chassis is rebooted. Configuring the appropriate chassis mode enables the system to use all the ports on the card and recognize all software features.

File Management

Overview

This chapter contains commands needed to manage the configuration files and includes other file management commands found in FTOS.

Basic File Management Commands

The commands included in this chapter are:

• boot config
• boot host
• boot network
• boot system (S55)
• boot system gateway
  • cd
• change bootflash-image
  • copy
  • copy (Streamline Upgrade)
• copy running-config startup-config
• delete
• dir
• download alt-boot-image
• download alt-full-image
• download alt-system-image
• format (C-Series and E-Series)
• format flash (S-Series)
• logging coredump
• logging coredump server
  • pwd
• rename
• restore fpga-image
• restore fpga-image
  • show boot system
  • show bootvar
  • show file

• show file-systems
• show linecard
• show os-version
• show running-config
• show sfm
• show startup-config
• show version
- upgrade (E-Series version)
- upgrade (C-Series version)
- upgrade (S-Series management unit)
- upgrade fpga-image (E-Series)
- upgrade fpga-image (C-Series)
- upgrade fpga-image (S55)

boot config

Set the location and name of the configuration file that is loaded at system start-up (or reload) instead of the default startup-configuration.

Syntax

boot config {remote-first | rpm0 file-url | rpm1 file-url}

To return to the default setting, enter no boot config {remote-first | rpm0 | rpm1}.

Parameters

remote-first	Enter the keywords remote-first to attempt to load the boot configuration files from a remote location.
rpm0	Enter the keywords rpm0 first to specify the local boot configuration file for RPM 0.
rpm1	Enter the keywords rpm1 first to specify the local boot configuration file for RPM 1.
file-url	Enter the location information:For a file on the internal Flash, enter flash:// followed by the filename.For a file on the external Flash, enter slot0:// followed by the filename.

Defaults

Not configured.

Command Modes

CONFIGURATION

Command History

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

Usage Information

To display these changes in the show bootvar command output, you must save the running configuration to the startup configuration (copy running-config startup-config or write).

Dell Networking strongly recommends using local files for configuration (RPM0 or RPM1 flash or slot0).

When you specify a file as the boot config file, it is listed in the boot variables (bootvar) as LOCAL CONFIG FILE. If you do not specify a boot config file, then the startup-configuration is used, although the bootvar shows LOCAL CONFIG FILE = variable does not exist. When you specify a boot config file, the switch reloads with that config file, rather than the startup-config. Note that if you specify a local config file which is not present in the specified location, then the startup-configuration is loaded.

The write memory command always saves the running-configuration to the file labeled startup-configuration. When using a LOCAL CONFIG FILE other than the startup-config, use the copy command to save any running-configuration changes to that local file.

Output for show bootvar with no boot configuration configured

FTOS#show bootvar
PRIMARY IMAGE FILE = flash://FTOS-EF-8.2.1.0.bin
SECONDARY IMAGE FILE = flash://FTOS-EF-7.6.1.0.bin
DEFAULT IMAGE FILE = flash://FTOS-EF-7.5.1.0.bin
LOCAL CONFIG FILE = variable does not exist
PRIMARY HOST CONFIG FILE = variable does not exist
SECONDARY HOST CONFIG FILE = variable does not exist
PRIMARY NETWORK CONFIG FILE = variable does not exist
SECONDARY NETWORK CONFIG FILE = variable does not exist
CURRENT IMAGE FILE = flash://FTOS-EF-8.2.1.0.bin
CURRENT CONFIG FILE 1 = flash://startup-config
CURRENT CONFIG FILE 2 = variable does not exist
CONFIG LOAD PREFERENCE = local first
BOOT INTERFACE GATEWAY IP ADDRESS = variable does not exist 

Output for show bootvar with boot configuration configured

FTOS#show bootvar
PRIMARY IMAGE FILE = flash://FTOS-EF-8.2.1.0.bin
SECONDARY IMAGE FILE = flash://FTOS-EF-7.6.1.0.bin
DEFAULT IMAGE FILE = flash://FTOS-EF-7.5.1.0.bin
LOCAL CONFIG FILE = variable does not exist
PRIMARY HOST CONFIG FILE = variable does not exist
SECONDARY HOST CONFIG FILE = variable does not exist
PRIMARY NETWORK CONFIG FILE = variable does not exist
SECONDARY NETWORK CONFIG FILE = variable does not exist
CURRENT IMAGE FILE = flash://FTOS-EF-8.2.1.0.bin
CURRENT CONFIG FILE 1 = flash://CustomerA.cfg
CURRENT CONFIG FILE 2 = variable does not exist
CONFIG LOAD PREFERENCE = local first
BOOT INTERFACE GATEWAY IP ADDRESS = variable does not exist 

Related Commands

show bootvar

Display the variable settings for the E-Series boot parameters.

boot host

Set the location of the configuration file from a remote host.

Syntax

boot host {primary | secondary} remote-url

To return to the default settings, enter no boot host {primary | secondary} command.

Parameters

primary

Enter the keywords primary to attempt to load the primary host configuration files.

	secondary	Enter the keywords secondary to attempt to load the secondary host configuration files.
	remote-url	Enter the following location keywords and information:For a file on an FTP server, enter ftp://user:password@hostip/filepathFor a file on a TFTP server, enter tftp://hostip/filepath
Defaults	Not configured.
Command Modes	CONFIGURATION
Command History	Version 7.5.1.0 Introduced on C-Series
	E-Series original Command
Usage Information	To display these changes in the show bootvar command output, you must save the running configuration to the startup configuration (using the copy command).
Related Commands	show bootvar	Display the variable settings for the E-Series boot parameters.

boot network

Set the location of the configuration file in a remote network.

Syntax

boot network {primary | secondary} remote-url

To return to the default settings, enter no boot network {primary | secondary} command.

Parameters

primary	Enter the keywords primary to attempt to load the primary network configuration files.
secondary	Enter the keywords secondary to attempt to load the secondary network configuration files.
remote-url	Enter the following location keywords and information:For a file on an FTP server, enter ftp://user:password@hostip/filepathFor a file on a TFTP server, enter tftp://hostip/filepath

Defaults

None

Command Modes

CONFIGURATION

Command History

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

Usage Information

To display these changes in the show bootvar command output, you must save the running configuration to the startup configuration (using the copy command).

Related Commands

show bootvar

Display the variable settings for the E-Series boot parameters.

boot system (C-Series and E-Series)

Tell the system where to access the FTOS image used to boot the system.

Syntax

boot system {rpm0 | rpm1} (default | primary | secondary} file-url

To return to the default boot sequence, use the no boot system {rpm0 | rpm1} {primary | secondary} command.

Parameters

rpm0	Enter the keyword rpm0 to configure boot parameters for RPM0.
rpm1	Enter the keyword rpm1 to configure boot parameters for RPM1.
default	After entering rpm0 or rpm1, enter the keyword default to specify the parameters to be used if those specified by primary or secondary fail. The default location should always be the internal flash device (flash:), so that you can be sure that a verified image is available there.
primary	After entering rpm0 or rpm1, enter the keyword primary to configure the boot parameters used in the first attempt to boot FTOS.
secondary	After entering rpm0 or rpm1, enter the keyword secondary to configure boot parameters used if the primary operating system boot selection is not available.
file-url	To boot from a file:on the internal Flash, enter flash:// followed by the filename.on an FTP server, enter ftp://user:password@hostip/filepathon the external Flash, enter slot0:// followed by the filename.on a TFTP server, enter tftp://hostip/filepath

Defaults

Not configured.

Command Modes

CONFIGURATION

Command History

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

Usage Information

To display these changes in the show bootvar command output, you must save the running configuration to the startup configuration (using the copy command) and reload system.

Related Commands

change bootflash-image Change the primary, secondary, or default boot image configuration.

boot system gateway Specify the IP address of the default next-hop gateway for the management subnet.

boot system (S55)

S60

Tell the system where to access the FTOS image used to boot the system.

Syntax

boot system {gateway ip address| stack-unit [0-11 / all] |default |primary {system {A: |B:} | tftp: || secondary]}

To return to the default boot sequence, use the no boot system command.

Parameters	gateway	Enter the IP address of the default next-hop gateway for the management subnet
	stack-unit	Enter the stack-unit number for the master switch.
	ip-address	Enter an IP address in dotted decimal format.
	0-11, all	Stack-unit number
	default	Enter thedefaultkeyword to use the primary FTOS image.
	primary	Enter theprimarykeyword to use the primary FTOS image.
	secondary	Enter thesecondarykeyword to use the primary FTOS image.
	tftp: EnterTFTP: to retrieve the image from a TFTP server.tftp://hostip/filcpath
	A: / B:	Enter A: or B: to boot one of the system partitions.
Defaults	Not configured.
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on the S55
Usage Information	To display these changes in theshow bootvarcommand output, you must save the running configuration to the startup configuration (using thecopycommand) and reload system.
Related Commands	boot system gatewaySpecify the IP address of the default next-hop gateway for the management subnet.

boot system gateway

Specify the IP address of the default next-hop gateway for the management subnet.

Syntax

boot system gateway ip-address

To delete a gateway configuration, enter no boot system gateway.

Parameters

ip-address

Enter an IP address in dotted decimal format.

Command Modes

CONFIGURATION

Usage Information

Saving the address to the startup configuration file preserves the address in NVRAM in case the startup configuration file is deleted.

Command History

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

Related Commands

change bootflash-image Change the primary, secondary, or default boot image configuration.

cd

Change to a different working directory.

Syntax

cd directory

Parameters

directory

(OPTONAL) Enter one of the following:

• flash: (internal Flash) or any sub-directory
• slot0: (external Flash) or any sub-directory (C-Series and E-Series only)

Command Modes

EXEC Privilege

Command History

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

change bootflash-image

Change boot flash image from which to boot.

Syntax

change bootflash-image {cp | linecard linecard-slot | rp}

Parameters

cp	Enter the keyword cp to change the bootflash image on the Control Processor on the RPM.
linecard linecard-slot	Enter the keyword linecard followed by the slot number to change the bootflash image on a specific line card.C-Series Range: 0-7E-Series Range: 0 to 13 on the E1200; 0 on 6 on the E600, and 0 to 5 on the E300.
rp	Enter the keyword rp to change the bootflash image on the RPM Route Processor.

Defaults

Not configured.

Command Modes

EXEC Privilege

Command History

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

Usage Information

A system message appears stating that the bootflash image has been changed. You must reload the system before the system can switch to the new bootflash image.

copy

Copy one file to another location.

Syntax

copy source-file-url destination-file-url

Parameters

file-url

Enter the following location keywords and information:To copy a file from the internal FLASH, enter flash:// followed by the filename.To copy a file on an FTP server, enter ftp://user:password@hostip/filepathTo copy a file from the internal FLASH on RPM0, enter rpm0flash://filepathTo copy a file from the external FLASH on RPM0, enter rpm0slot0://filepathTo copy a file from the internal FLASH on RPM1, enter rpm1flash://filepathTo copy a file from the external FLASH on RPM1, enter rpm1slot0://filepathTo copy the running configuration, enter the keyword running-config.To copy the startup configuration, enter the keyword startup-config.To copy using Secure Copy (SCP), enter the keyword scp: (If scp: is entered in the source position, then enter the target URL;Ifscp: is entered in the target position, first enter the source URL; see below for examples.)To copy a file on the external FLASH, enter slot0:// followed by the filename.To copy a file on a TFTP server, enter tftp://hostip/filepathExaScale onlyTo copy a file from a USB drive on RPM0, enter rpm0usbflash://filepathExaScale and S55To copy a file from an external USB drive, enter usbflash://filepath

Command Modes

Command History

EXEC Privilege

Version 8.3.5.0 Introduced on the S55.

Version 8.2.1.0 Added usbflash and rpm0usbflash commands on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series and added SSH port number to SCP prompt sequence on all systems.

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

Usage Information

FTOS supports a maximum of 100 files, at the root directory level, on both the internal and external Flash.

The usbflash and rpm0usbflash commands are supported on E-Series ExaScale platform only. Refer to the FTOS Release Notes for a list of approved USB vendors.

When copying a file to a remote location (for example, using Secure Copy (SCP)), enter only the keywords and FTOS prompts you for the rest of the information.

For example, when using SCP, you can enter copy running-config scp:

The running-config is the source, and the target is specified in the ensuing prompts. FTOS prompts you to enter any required information, as needed for the named destination—remote destination, destination filename, user ID and password, etc.

When you use the copy running-config startup-config command to copy the running configuration (the startup configuration file amended by any configuration changes made since the system was started) to the startup configuration file, FTOS creates a backup file on the internal flash of the startup configuration.

FTOS supports copying the running-configuration to a TFTP server or to an FTP server:

copy running-config tftp:

copy running-config ftp:

Command Example: copy running-config scp:

FTOS#copy running-config scp:/
Address or name of remote host []: 10.10.10.1
Destination file name [startup-config]? old_running
User name to login remote host? home
Password to login remote host? home 

In this example — copy scp: flash: — specifying SCP in the first position indicates that the target is to be specified in the ensuing prompts. Entering flash: in the second position means that the target is the internal Flash. In this example the source is on a secure server running SSH, so the user is prompted for the UDP port of the SSH server on the remote host.

Using scp to copy from an SSH Server

FTOS#copy scp: flash:
Address or name of remote host []: 10.11.199.134
Port number of the server [22]: 99
Source file name []: test.cfg
User name to login remote host: admin
Password to login remote host:
Destination file name [test.cfg]: test1.cfg 

Related Commands

cd Change working directory.

copy (Streamline Upgrade)

Copy a system image to a local file and update the boot profile.

Syntax
copy source-url target-url [boot-image [synchronize-rpm [external]]]
Parameters

source-url	Enter the source file in url format. The source file is a valid Dell Networking release image. Image validation is automatic.
target-url	Enter the local target file in url format.
boot-image	Enter the keywordboot-imageto designate this copy command as a streamline update.
synchronize-rpm	Enter the keywordsynchronize-rpmto copy the new image file to the peer RPM.
external	Enter the keywordexternalto designate the target device on the peer RPM as external flash (instead of the default internal flash).Default: Internal Flash

Defaults
No default behavior

Command Modes
CONFIGURATION
Command History

Version 7.5.1.0 Introduced on C-Series

Version 6.1.1.0 Introduced

Usage Information

In this streamline copy command, the source image is copied to the primary RPM and then, if specified, to the standby RPM. After the copy is complete, the new image file path on each RPM is automatically configured as the primary image path for the next boot. The current system image (the one from which the RPM booted) is automatically configured as the secondary image path.

Note: The keywords boot-image, synchronize-rpm, and external can be used on the Primary RPM only.

copy running-config startup-config

Copy running configuration to the startup configuration.

Syntax

copy running-config startup-config {duplicate}

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55.

Version 7.5.1.0 Introduced on C-Series

Version 6.3.1.0 Introduced

Usage Information

This command is useful for quickly making a changed configuration on one chassis available on external flash in order to move it to another chassis.

When you use the copy running-config startup-config duplicate command to copy the running configuration to the startup configuration, FTOS creates a backup file on the internal flash of the startup configuration.

delete

Delete a file from the flash. Once deleted, files cannot be restored.

Syntax

delete flash-url [no-confirm]

Parameters

flash-url Enter the following location and keywords:

- For a file or directory on the internal Flash, enter directory name.

flash:// followed by the filename or

- For a file or directory on the external Flash, enter directory name.

slot0:// followed by the filename or

no-confirm

(OPTIONAL) Enter the keyword no-confirm to specify that FTOS does not require user input for each file prior to deletion.

Command Modes

EXEC Privilege

Command History

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

dir

C E S	Display the files in a filesystem. The default is the current directory.
Syntax	dir [filename | directory name:]
Parameters	filename | directory name:	(OPTIONAL) Enter one of the following:For a file or directory on the internal Flash, enter followed by the filename or directory name.For a file or directory on the external Flash, enter followed by the filename or directory name:	flash://slot0://
Command Modes	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	E-Series original Command
Example	Command Example dir for the Internal FlashFTOS#dirDirectory of flash:1 -rwx 6478482 May 13 101 16:54:34 E1200.BINflash: 64077824 bytes total (57454592 bytes free)FTOS#
Related Commands	cd Change working directory.

download alt-boot-image

Download an alternate boot image to the chassis.

Syntax

Command Modes	EXEC Privilege
Command History	Version 7.7.1.0 Removed from E-Series and C-Series
	Version 7.5.1.0 Introduced on C-Series
	E-Series original Command
Usage Information	Starting with FTOS 7.7.1.0, the functions of this command are incorporated into the upgrade command.
	For software upgrade details, see the FTOS Release Notes.
Related Commands	upgrade (E-Series version)	Upgrade the bootflash or boot selector versions.
	upgrade (C-Series version)	Upgrade the bootflash or boot selector versions.

download alt-full-image

E	Download an alternate FTOS image to the chassis.
Syntax	download alt-full-image file-url
Command Modes	EXEC Privilege
Command History	Version 7.7.1.0 Removed form E-Series
	Version 6.5.1.0 Introduced
Usage Information	Starting with FTOS 7.7.1.0, the functions of this command are incorporated into the upgrade command.
	For software upgrade details, see the FTOS Release Notes.
Related Commands	upgrade (E-Series version) Upgrade the bootflash or boot selector versions

download alt-system-image

E	Download an alternate system image (not the boot flash or boot selector image) to the chassis.
Syntax	download alt-system-image file-url
Command Modes	EXEC Privilege
Command History	Version 7.7.1.0 Removed from E-Series
	Version 6.5.1.0 Introduced
Usage Information	Starting with FTOS 7.7.1.0, the functions of this command are incorporated into the upgrade command.
	For software upgrade details, see the FTOS Release Notes.
Related Commands	upgrade (E-Series version) Upgrade the bootflash or boot selector versions

format (C-Series and E-Series)

Erase all existing files and reformat a filesystem. Once the filesystem is formatted, files cannot be restored.

Syntax format filesystem: [dosFs1.0 | dosFs2.0]

Parameters	filesystem:	Enter one of the following:To reformat the internal Flash, enter flash:To reformat the external Flash, enter slot0:
	dosFs1.0 Enter the keyword dosFs1.0 to format in DOS 1.0 (the default)
	dosFs2.0 Enter the keyword dosFs2.0 to format in DOS 2.0
Default	DOS 1.0 (dosFs1.0)
Command Modes	EXEC Privilege
Command History	Version 7.5.1.0 Introduced on C-Series
	E-Series original Command
Usage Information	When you format flash:
	1 The startup-config is erased.
	2 All cacheboot data files are erased and you must reconfigure cacheboot to regain it.
	3 All generated SSH keys are erased and you must recreate them.
	4 All archived configuration files are erased.
	5 All trace logs, crash logs, core dumps, and call-home logs are erased.
	6 In-service Process patches are erased.
	After reformatting is complete, three empty directories are automatically created on flash: CRASH_LOG_DIR, TRACE_LOG_DIR and NVTRACE_LOG_DIR.
	Note: Version option is available on LC-ED-RPM only. LC-EE3-RPM, LC-EF-RPM, and LC-EF3-RPM supports DOS 2.0 only.
Related Commands	show file	Display contents of a text file in the local filesystem.
	show file-systems	Display information about the file systems on the system.

format flash (S-Series)

Erase all existing files and reformat the filesystem in the internal flash memory. Once the filesystem is formatted, files cannot be restored.

Syntax

format flash:

Default

flash memory

Command Modes

EXEC Privilege

Command History

Version 7.8.1.0 Introduced on S-Series

Usage Information

You must include the colon (:) when entering this command.

Caution: This command deletes all files, including the startup configuration file. So, after executing this command, consider saving the running config as the startup config (use the write memory command or copy run start).

Related Commands	copy	Copy the current configuration to either the startup-configuration file or the terminal.
	show file	Display contents of a text file in the local filesystem.
	show file-systems	Display information about the file systems on the system.

format flash (S55)

S60

Erase all existing files and reformat the filesystem in the internal flash memory or the USB drive. Once the filesystem is formatted, files cannot be restored.

Syntax

format [flash: | usbflash:]

Parameters

flash:	Reformat the filesystem in the internal flash memory
usbflash:	Reformat the filesystem in the connected USB drive memory

Default

flash memory

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Usage Information

You must include the colon (:) when entering this command.

Caution: This command deletes all files, including the startup configuration file. So, after executing this command, consider saving the running config as the startup config (use the write memory command or copy run start).

logging coredump

C E S

Enable coredump.

Syntax

logging coredump {cp | linecard {number | all} | rps | stack-unit {id | all}}

Disable coredump using the command no logging coredump {cp | linecard {number | all} | rps}

Parameters

cp	Enable coredump for the CP.
linecard	Enable coredump for a linecard.
rps	Enable coredump for RP 1 and 2.
stack-unit	Enable coredump for the stack-unit.Range: S55 0-11All other S-Series 0-7

Defaults

The kernel coredump is enabled by default for RP 1 and 2 on E-Series. The kernel coredump for CP and application coredump are disabled on all systems by default.

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.7.1.0 Restructured command to accommodate coredumps for CP. Introduced on C-Series and S-Series

Version 6.5.1.0 Application coredump naming convention enhanced to include application.

Version 6.1.1.0 Introduced

Usage Information

The Kernel core dump can be large and may take up to 5 to 30 minutes to upload. FTOS does not overwrite application coredumps so you should delete them as necessary to conserve space on the flash; if the flash is out of memory, the coredump is aborted. On the S-Series, if the FTP server is not reachable, the application coredump is aborted. FTOS completes the coredump process and waits until the upload is complete before rebooting the system.

Related Commands

logging coredump server

Designate a sever to upload kernel core-dumps.

logging coredump server

Designate a server to upload coredumps.

Syntax

logging coredump server address username name password [type] password

Disable logging coredumps to a server using the command no logging coredump server address username name password [type] password

Parameters

address	Enter the server IP address in dotted decimal format (A.B.C.D) or hostname.
name	Enter a username to access the target server.
type	Enter the password type:• Enter 0 to enter an unencrypted password.• Enter 7 to enter a password that has already been encrypted using a Type 7 hashing algorithm.
password	Enter a password to access the target server.

Defaults

Crash kernel files are uploaded to flash by default.

Command Modes

CONFIGURATION

Command History

Version 7.7.1.0 Restructured command to accommodate coredumps for CP. Introduced on C-Series and S-Series.

Version 6.1.1.0 Introduced

Usage Information

Since flash space may be limited, using this command ensures your entire crash kernel files are uploaded successfully and completely.

Note: You must disable logging coredump before you designate a new server destination for your coredumps.

Related Commands

logging coredump

Disable the kernel coredump

pwd

Display the current working directory.

Syntax

pwd

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

Example

Command Example: pwd

FTOS#pwd flash: FTOS#

Related Commands

cd Change directory.

rename

Rename a file in the local file system.

Syntax

rename url url

Parameters

url

Enter the following keywords and a filename:

- For a file on the internal Flash, enter

flash://followed by the filename.

- For a file on the external Flash, enter

slot0:// followed by the filename.

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

restore factory-defaults

S60

Restore factory defaults.

Syntax

restore factory-defaults stack-unit {0-11 | all} {clear-all | nvram}

Parameters

factory-defaults	Return the system to its factory default mode.
0-11	Enter this keyword to restore only the mentioned stack-unit.
all	Enter this keyword to restore all units in the stack.

	clear-all	Enter this keyword to reset the NvRAM and the system startup configuration.
	nvram	Enter this keyword to reset the NvRAM only.
Command Modes	EXEC Privilege
Command History	Version 8.3.3.9 Introduced on the S60
	Version 8.3.5.5 Introduced on the S55
	Version 8.3.17.1 Supported on M I/O Aggregator
Usage Information	Restoring factory defaults deletes the existing startup configuration and all persistent settings (stacking, fanout, etc.).
	Dell Networking recommends backing up the startup configuration before using this command.
	When restoring all units in a stack, all the units in the stack are placed into stand-alone mode.
	When restoring a single unit in a stack, that unit is placed in stand-alone mode. No other units in the stack are affected.
	When restoring units in stand-alone mode, the units remain in stand-alone mode after the restoration.
	After the restore is complete, the units power cycle immediately.

Caution: There is no undo for this command.

Example

Figure 3-1. restore factory-defaults (all units in a stack) Command Example

Figure 3-2. restore factory-defaults (single unit in a stack) Command Example

Figure 3-3. restore factory-defaults (NvRAM only, all units in a stack) Command Example

Figure 3-4. restore factory-defaults (NvRAM only, single unit in a stack) Command Example

restore fpga-image

Copy the backup C-Series FPGA image to the primary FPGA image.

Syntax

restore fpga-image {rpm | linecard} number

Parameters

rpm Enter rpm to upgrade an RPM FPGA.
linecard Enter linecard to upgrade a line card FPGA.
number	Enter the line card or RPM slot number.C-Series Line Card Range: 0-7, RPM Range: 0-1

Defaults

None.

Command Mode

EXEC Privilege

Command History

Version 7.7.1.0 Renamed keyword primary-fpga-flash to fpga-image.

Version 7.5.1.0 Introduced on C-Series

Example

Command example: restore fpga-image

FTOS#restore fpga-image linecard 4 Current FPGA information in the system:

Card	FPGA Name	Current Version	New Version
LC4	48 Port 1G LCM FPGA	A: 3.6	restore

* Warning - Upgrading FPGA is inherently risky and should * only be attempted when necessary. A failure at this upgrade may * cause a board RMA. Proceed with caution !

Restore fpga image for linecard 4 [yes/no]: yes

FPGA restore in progress. Please do NOT power off the card. ……

Upgrade result : Linecard 4 FPGA restore successful.

Usage Information

Reset the card using the power-cycle option after restoring the FPGA command.

Related Commands

reset Reset a card.

restore factory-defaults

\$60

S55

Restore factory defaults.

Syntax

restore factory-defaults stack-unit {0-5 | all} {clear-all | nvram}

Parameters

factory-defaults	Return the system to its factory default mode.
0-5	Enter this keyword to restore only the mentioned stack-unit.
all	Enter this keyword to restore all units in the stack.
clear-all	Enter this keyword to reset the NvRAM and the system startup configuration.
nvram	Enter this keyword to reset the NvRAM only.

Command Modes

EXEC Privilege

Command History

Version 8.3.3.9 Introduced on the S60

Version 8.3.5.5 Introduced on the S55

Version 8.3.17.1 Supported on M I/O Aggregator

Usage Information

Restoring factory defaults deletes the existing startup configuration and all persistent settings (stacking, fanout, etc.).

When restoring all units in a stack, all the units in the stack are placed into stand-alone mode.

When restoring a single unit in a stack, that unit placed in stand-alone mode. No other units in the stack are affected.

When restoring units in stand-alone mode, the units remain in stand-alone mode after the restoration.

After the restore is complete, the units power cycle immediately.

Caution: There is no undo for this command.

Example

Figure 3-5. restore factory-defaults (all units in a stack) Command Example

FTOS#restore factory-defaults stack-unit all clear-all
**********************************************************************
* Warning - Restoring factory defaults will delete the existing *
* startup-config and all persistent settings (stacking, fanout, etc.)*
* All the units in the stack will be split into standalone units. *
* After restoration the unit(s) will be powercycled immediately. *
* Proceed with caution !
**********************************************************************
Proceed with factory settings? Confirm [yes/no]:yes
-- Restore status --
Unit    Nvram    Config
----
0    Success    Success
1    Success    Success
2    Success    Success
3    Not present
4    Not present
5    Not present

Power-cycling the unit(s).
FTOS# 

Figure 3-6. restore factory-defaults (single unit in a stack) Command Example

FTOS#restore factory-defaults stack-unit 0 clear-all
**********************************************************************
* Warning - Restoring factory defaults will delete the existing *
* startup-config and all persistent settings (stacking, fanout, etc.)*
* After restoration the unit(s) will be powercycled immediately. *
* Proceed with caution !
**********************************************************************
Proceed with factory settings? Confirm [yes/no]:yes
--
Restore status --
Unit    Nvram    Config
----
0    Success    Success

Power-cycling the unit(s).
FTOS# 

Figure 3-7. restore factory-defaults (NvRAM only, all units in a stack) Command Example

Figure 3-8. restore factory-defaults (NvRAM only, single unit in a stack) Command Example

show boot system

Displays information about boot images currently configured on the system.

Syntax

show boot system {all | linecard [slot | all] | rpm | stack-unit [0-11 / all]}

Parameters

all	Enter this keyword to display boot image information for all linecards and rpms.
linecard	Enter this keyword to display boot image information for the specified linecard(s) on the system.

	rpm	Enter this keyword to display boot image information for all rpms on the system.
	stack-unit	Enter this keyword to display boot image information for one or all the S55 units.
Defaults	No default values or behavior
Command Modes	EXEC
	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.7.1.0 Introduced on C-Series and E-Series

Example

FTOS#show boot system all
Current system image information in the system:
Type	Boot Type	A	B
CP	DOWNLOAD BOOT invalid		invalid
RP1	DOWNLOAD BOOT invalid		invalid
RP2	DOWNLOAD BOOT invalid		invalid
linecard 0 is not present.
linecard 1	DOWNLOAD BOOT invalid		invalid
linecard 2	DOWNLOAD BOOT 4.7.5.387		6.5.1.8
linecard 3	DOWNLOAD BOOT invalid		invalid
linecard 4	DOWNLOAD BOOT invalid		invalid
linecard 5 is not present.
Peer RPM:
Type	Boot Type	A	B
CP	DOWNLOAD BOOT invalid		invalid
RP1	DOWNLOAD BOOT invalid		invalid
RP2	DOWNLOAD BOOT invalid		invalid

show bootvar

Syntax

Display the variable settings for the system boot parameters.

Command Modes

show bootvar

Command History

EXEC Privilege

Version 8.3.5.0 Introduced on S55

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

Example Command Output example: show bootvar

FTOS#show bootvar
PRIMARY IMAGE FILE = ftp://box:password@10.31.1.205//home/5.3.1/5.3.1.0/FTOS-ED-RPM1-5.3.1.0.bin
SECONDARY IMAGE FILE = variable does not exist
DEFAULT IMAGE FILE = flash://FTOS-ED-5.3.1.0.bin
LOCAL CONFIG FILE = variable does not exist
PRIMARY HOST CONFIG FILE = variable does not exist
SECONDARY HOST CONFIG FILE = variable does not exist
PRIMARY NETWORK CONFIG FILE = variable does not exist
SECONDARY NETWORK CONFIG FILE = variable does not exist
CURRENT IMAGE FILE = ftp://box:password@10.31.1.205//home/5.3.1/5.3.1.0/FTOS-ED-RPM1-5.3.1.0.bin
CURRENT CONFIG FILE 1 = flash://startup-config
CURRENT CONFIG FILE 2 = variable does not exist
CONFIG LOAD PREFERENCE = local first
BOOT INTERFACE GATEWAY IP ADDRESS = variable does not exist
FTOS# 

Related Commands

boot config Set the location of configuration files on local devices.
boot host Set the location of configuration files from the remote host.
boot network Set the location of configuration files from a remote network.
boot system (S55) Set the location of FTOS image files.
boot system gateway	Specify the IP address of the default next-hop gateway for the management subnet.

show file

Display contents of a text file in the local filesystem.

Syntax
show file filesystem

Parameters	filesystem	Enter one of the following:flash: for the internal Flashslot0: for the external Flash
hand Modes	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	E-Series original Command

Example

Command output example (Partial): show file

FTOS#show file flash://startup-config
!
boot system rpm0 primary ftp://test:server@10.16.1.144//home/images/E1200_405-3.1.2b1.86.bin
boot system rpm0 secondary flash://FTOS-ED-6.1.1.0.bin
boot system rpm0 default ftp://:@/\
!
redundancy auto-synchronize persistent-data
redundancy primary rpm0
!
hostname E1200-20
!
enable password 7 94849d8482d5c3
!
username test password 7 93e1e7e2ef
!
enable restricted 7 948a9d848cd5c3
!
protocol spanning-tree 0
bridge-priority 8192
rapid-root-failover enable
!
interface GigabitEthernet 0/0
no ip address
shutdown 

Related Commands

format (C-Series and E-Series)	Erase all existing files and reformat a filesystem on the E-Series or C-Series platform.
format flash (S-Series)	Erase all existing files and reformat the filesystem in the internal flash memory on and S-Series.
show file-systems	Display information about the file systems on the system.

show file-systems

Display information about the file systems on the system.

Syntax

show file-systems

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

Example

Command Output example: show file-system

FTOS#show file-systems
Size(b)	Free(b)	Feature	Type	Flags	Prefixes
63938560	51646464	dosFs2.0	MMC	rw	flash:
63938560	18092032	dosFs1.0	MMC	rw	slot0:
-	-	-	network	rw	ftp:
-	-	-	network	rw	tftp:
-	-	-	network	rw	scp:

show file-systems Command Output Fields

Field Description
size(b) Lists the size in bytes of the storage location. If the location is remote, no size is listed.
Free(b) Lists the available size in bytes of the storage location. If the location is remote, no size is listed.
Feature Displays the formatted DOS version of the device.
Type Displays the type of storage. If the location is remote, the word network is listed.
Flags Displays the access available to the storage location. The following letters indicate the level of access:• r = read access• w = write access
Prefixes Displays the name of the storage location.

Related Commands

format (C-Series and E-Series)	Erase all existing files and reformat a filesystem.
format flash (S-Series)	Erase all existing files and reformat the filesystem in the internal flash memory.
show file	Display contents of a text file in the local filesystem.
show sfm Display the current SFM status.

show linecard

View the current linecard status.

Syntax
show linecard [number | all | boot-information]
Parameters

number	Enter a number to view information on that linecard. Range: 0 to 6.
all	(OPTIONAL) Enter the keyword all to view a table with information on all present linecards.
boot-information	(OPTIONAL) Enter the keyword boot-information to view cache boot information of all line cards in table format.

Command Modes
EXEC Privilege

Command History

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

Example

Command output example (E-Series): show linecard boot-information

FTOS#show linecard boot-information
-- Line cards --
Boot Serial Booted Next Cache
<h1 id="status-curtype-number-from-boot-boot">Status CurType number from boot boot</h1>
flash
----
0 -
1 -
2 -
3 online E48TF FX000032632 4.7.7.171 4.7.7.171 A: invalid B:
invalid A: 2.3.2.1 [b] B: 2.3.2.1
4 -
5 -
6 -
FTOS# 

show os-version

Display the release and software image version information of the image file specified or, optionally, the image loaded on the RPM (C-Series and E-Series only).

Syntax

show os-version [file-url]

Parameters

file-url (OPTIONAL) Enter the following location keywords and information:
• For a file on the internal Flash, enter flash:// followed by the filename.
• For a file on an FTP server, enter ftp://user:password@hostip/filepath
• For a file on the external Flash, enter slot0:// followed by the filename.
• For a file on a TFTP server, enter tftp://hostip/filepath
Note: ftp and tftp are the only S-Series options. 

Defaults

No default values or behavior

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.
Version 7.6.1.0 Introduced on S-Series
Version 7.5.1.0 Introduced on C-Series
E-Series original Command 

Usage Information

Note: A filepath that contains a dot (.) is not supported.

Example

Command output example (E-Series): show os-version

Platform	Version	Size	ReleaseTime
E-series: EF	7.5.1.0	27676168	Aug 15 2007 10:06:21
TARGET IMAGE INFORMATION :
Type	Version	Target	checksum
runtime	7.5.1.0	control processor	passed
runtime	7.5.1.0	route processor	passed
runtime	7.5.1.0	terascale linecard	passed
boot flash	2.4.1.1	control processor	passed
boot flash	2.4.1.1	route processor	passed
boot flash	2.3.1.3	terascale linecard	passed
boot selector	2.4.1.1	control processor	passed
boot selector	2.4.1.1	route processor	passed
boot selector	2.3.1.3	terascale linecard	passed

FTOS#

Example

Command output example (C-Series): show os-version

FTOS#show os-version
RELEASE IMAGE INFORMATION :
Platform	Version	Size	ReleaseTime
C-series: CB	7.5.1.0	23734363	Aug 18	2007 11:49:51
TARGET IMAGE INFORMATION :
Type	Version		Target	checksum
runtime	7.5.1.0	control	processor	passed
runtime	7.5.1.0		linecard	passed
boot flash	2.7.0.1	control	processor	passed
boot flash	1.0.0.40		linecard	passed
boot selector	2.7.0.1	control	processor	passed
boot selector	1.0.0.40		linecard	passed
FPGA IMAGE INFORMATION :
Card	Version	Release	Date
Primary RPM	4.1	May	02	2007
Secondary RPM	4.1	May	02	2007
LC0	3.2	May	02	2007
LC5	3.2	May	02	2007
LC6	2.2	May	02	2007

FTOS#

show running-config

CES

Display the current configuration and display changes from the default values.

Syntax

show running-config [entity] [configured] [status]

Parameters

entity

(OPTIONAL) Enter one of the keywords listed below to display that entity's current (non-default) configuration. Note that, if nothing is configured for that entity, nothing is displayed and the prompt returns:

• aaa for the current AAA configuration
• acl for the current ACL configuration
  • arp for the current static ARP configuration
  • as-path for the current AS-path configuration
  • bgp for the current BGP configuration
  • boot for the current boot configuration
  • cam-profile for the current CAM profile in the configuration.
  • class-map for the current class-map configuration
  • community-list for the current community-list configuration
  • fefd for the current FEFD configuration
• ftp for the current FTP configuration
  • fvrp for the current FVRP configuration
  • host for the current host configuration
• hardware-monitor for hardware-monitor action-on-error settings
  • igmp for the current IGMP configuration
  • interface for the current interface configuration
  • isis for the current ISIS configuration
  • line for the current line configuration
• load-balance for the current port-channel load-balance configuration
• logging for the current logging configuration
  • mac for the current MAC ACL configuration
  • mac-address-table for the current MAC configuration
• management-route for the current Management port forwarding configuration
• mroute for the current Mroutes configuration
• ntp for the current NTP configuration
• ospf for the current OSPF configuration
  • pim for the current PIM configuration
  • policy-map-input for the current input policy map configuration
  • policy-map-output for the current output policy map configuration
• prefix-list for the current prefix-list configuration
  • privilege for the current privilege configuration
  • radius for the current RADIUS configuration
  • redirect-list for the current redirect-list configuration
  • redundancy for the current RPM redundancy configuration
  • resolve for the current DNS configuration
• rip for the current RIP configuration
• route-map for the current route map configuration

	· snmp for the current SNMP configuration· spanning-tree for the current spanning tree configuration· static for the current static route configuration· tacacs+ for the current TACACS+ configuration· tftp for the current TFTP configuration· trace-group for the current trace-group configuration· trace-list for the current trace-list configuration· users for the current users configuration· wred-profile for the current wired-profile configuration
configured	(OPTIONAL) Enter the keyword configuration to display line card interfaces with non-default configurations only.
status	(OPTIONAL) Enter the keyword status to display the checksum for the running configuration and the start-up configuration.

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Added hardware-monitor option

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

Version 7.4.1.0 Expanded to include last configuration change and start-up last updated (date and time) and who made the change

Version 6.5.4.0 Added status option

Example

Command output example (partial): show running-config

FTOS#show running-config
Current Configuration ...
! Version 7.4.1.0
! Last configuration change at Tue Apr 10 17:43:38 2007 by admin
! Startup-config last updated at Thu Mar 29 02:35:08 2007 by default
!
boot system rpm0 primary flash://FTOS-EF-7.4.1.0.bin
boot system rpm0 secondary flash://FTOS-EF-6.3.1.2.bin
boot system rpm0 default flash://FTOS-EF-6.5.1.8.bin
!
... 

Example

Command output example: show running-config

FTOS#show running-config status
running-config checksum 0xB4B9BF03
startup-config checksum 0x8803620F
FTOS#

Usage Information

The status option enables you to display the size and checksum of the running configuration and the startup configuration.

show sfm

View the current SFM status.

Syntax

show sfm [number [brief] | all]

Parameters

number	Enter a number to view information on that SFM. Range: 0 to 8.
all	(OPTIONAL) Enter the keyword all to view a table with information on all present SFMs.
brief	(OPTIONAL) Enter the keyword brief to view a list with SFM status. Note: The brief option is not available on C-Series.

Command Modes
EXEC
EXEC Privilege
Command History

Version 8.3.5.3 Updated to support PPID on the S55
Version 7.5.1.0 Introduced on C-Series
E-Series original Command
E-Series Example
Command output example (Partial) on E-Series: show sfm

FTOS#show sfm

Switch Fabric State: up

Switch Mode: SFM3

-- SFM card 0 --

Status : active (Older version of SFM for Exascale)

Card Type : SFM3 - Switch Fabric Module

Up Time : 18 hr, 40 min

Last Restart : remote-off

Temperature : 42C

Power Status : AC

Serial Number : VC074300030

Part Number : 7520020001 Rev 03

Vendor Id : 04

Date Code : 01402006

Country Code : 01

Piece Part ID : CN-0RVY43-75412-123-0030

PPID Revision : 003

Service Tag : SVCTG00

Expr Svc Code : 628 458 860 16

FPGA : 0x0.0.3

Booting from : EEPROM0

-- SFM card 1 --

Status : active (Older version of SFM for Exascale)

Card Type : SFM3 - Switch Fabric Module

Up Time : 18 hr, 40 min

Last Restart : remote-off

Temperature : 42C

Power Status : AC

Serial Number : VC074300032

Part Number : 7520020001 Rev 03

Vendor Id : 04

Date Code : 01402006

Country Code : 01

Piece Part ID : CN-0RVY43-75412-82B-0456

PPID Revision : 1B2

Service Tag : SVCTG01

Expr Svc Code : 628 458 860 17

FPGA : 0x0.0.3

Booting from : EEPROM0

!---- output truncated ----!

show sfm Command Output Fields

Field Description
Switch Fabric State: States that the Switch Fabric is up (8 SFMs are online and operating).
Status Displays the SFM's active status.
Card Type States the type of SFM.
Up Time Displays the number of hours and minutes since the RPM's last reboot.
Temperature Displays the temperature of the RPM.Minor alarm status if temperature is over 65°C.
Power Status Displays power status: absent, down, or up
Serial Num Displays the line card serial number.
Part Num Displays the line card part number.
Vendor ID Displays an internal code, which specifies the manufacturing vendor.
Date Code Displays the line card's manufacturing date.
Country Code Displays the country of origin.01 = USA

ommand output example: show sfm all

FTOS#show sfm all
Switch Fabric State: up
Switch Mode: SFM3
-- Switch Fabric Modules --
Slot Status
0 active (Older version of SFM for Exascale)
1 active (Older version of SFM for Exascale)
2 active (Older version of SFM for Exascale)
3 active (Older version of SFM for Exascale)
4 not present
FTOS# 

show startup-config

Display the startup configuration.

Syntax

show startup-config

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

Version 7.4.1.0 Expanded to include last configuration change and start-up last updated (date and time) and who made the change.

Example

Command output example (partial): show startup-config

FTOS#show startup-config
! Version 7.4.1.0
! Last configuration change at Thu Mar 29 02:16:07 2007 by default
! Startup-config last updated at Thu Mar 29 02:35:08 2007 by default
!
boot system rpm0 primary flash://FTOS-EF-7.4.1.0.bin
boot system rpm0 secondary flash://FTOS-EF-6.3.1.2.bin
boot system rpm0 default flash://FTOS-EF-6.5.1.8.bin
!
... 

Related Commands

show running-config Display current (running) configuration.

show version

Display the current FTOS version information on the system.

Syntax

show version

Command Modes

EXEC Privilege

Command History

Version 9.0.0.0 Introduced on Z9000.

Version 8.3.12.0 Introduced on S4810.

Version 7.6.1.0 Introduced on S-Series.

Version 7.5.1.0 Introduced on C-Series.

E-Series original Command

Example (E-Series)

FTOS#show version
Dell Force10 Networks Real Time Operating System SoftwareDe
Dell Force10 Operating System Version: 1.0
Dell Force10 Application Software Version: 5.3.1.0
Copyright (c) 1999-2004 by Dell Force10 Networks, Inc.
Build Time: Sun May 9 00:57:03 PT 2004
Build Path: /local/local0/Release/5-4-1/SW/Bsp/Diag
Dell Force10 uptime is 1 days, 3 hours, 16 minutes 

System image file is "/home/5.3.1/5.3.1.0/FTOS-ED-RPM1-5.3.1.0.bin"

Chassis Type: E1200
Control Processor: IBM PowerPC 405GP (Rev D) with 268435456 bytes of memory.
Route Processor 1: IBM PowerPC 405GP (Rev D) with 536870912 bytes of memory.
Route Processor 2: IBM PowerPC 405GP (Rev D) with 536870912 bytes of memory. 

128K bytes of non-volatile configuration memory.

1 Route Processor Module
9 Switch Fabric Module
1 24-port GE line card with SFP optics (EE)
1 12-port GE Flex line card with SFP optics (EE)
1 2-port OC48c line card with SR optics (EC)
2 24-port GE line card with SX optics (EB)
1 2-port 10GE WAN PHY line card with 10Km (1310nm) optics (EE)

Example (S-Series)

1 12-port GE Flex line card with SFP optics (EC)
1 2-port 10GE LAN PHY line card with 10Km (1310nm) optics (ED)
1 12-port OC12c/3c PoS line card with IR optics (EC)
1 24-port GE line card with SFP optics (ED)
1 FastEthernet/IEEE 802.3 interface(s)
120 GigabitEthernet/IEEE 802.3 interface(s)
14 SONET network interface(s)
4 Ten GigabitEthernet/IEEE 802.3 interface(s)
FTOS# 

FTOS#show version
Dell Force10 Networks Real Time Operating System Software
Dell Force10 Operating System Version: 1.0
Dell Force10 Application Software Version: E7-8-1-13
Copyright (c) 1999-2008 by Dell Force10 Networks, Inc.
Build Time: Mon Nov 24 18:59:27 2008
Build Path: /local/local/sw/build/build2/Release/7-8-1/SW/SRC
Dell Force10 uptime is 1 minute(s)
System Type: S50V
Control Processor: MPC8451E with 252739584 bytes of memory. 

32M bytes of boot flash memory. 

1 48-port E/FE/GE with POE (SB)
48 GigabitEthernet/IEEE 802.3 interface(s)
4 Ten GigabitEthernet/IEEE 802.3 interface(s)
FTOS# 

Example (S4810)

FTOS#
FTOS#show version
Dell Force10 Real Time Operating System Software
Dell Force10 Operating System Version: 1.0
Dell Force10 Application Software Version: Z9K-ICC-PRIM-SYNC-8-3-11-173
Copyright (c) 1999-2012 by Dell Inc. All Rights Reserved.
Build Time: Mon Jul 16 22:19:01 PDT 2012
Build Path: /local/local/build/build15/8.3.12.0/SW/SRC/Radius
FTOS uptime is 1 minute(s) 

System image file is "s4810-14" 

System Type: S4810
Control Processor: Freescale QorIQ P2020 with 2147483648 bytes of memory.
128M bytes of boot flash memory. 

1 52-port GE/TE/FG (SE)
52 Ten GigabitEthernet/IEEE 802.3 interface(s)
FTOS#
FTOS#
FTOS#
FTOS#config t
FTOS(conf)#int te 0/5
FTOS(conf-if-te-0/5)#no shut
FTOS(conf-if-te-0/5)#
FTOS(conf-if-te-0/5)#
FTOS(conf-if-te-0/5)#
FTOS(conf-if-te-0/5)#
FTOS(conf-if-te-0/5)#ipv6 nd prefix FEC0::/10
FTOS(conf-if-te-0/5)#
FTOS(conf-if-te-0/5)#show conf
!
interface TenGigabitEthernet 0/5
ip address 78.21.1.3/24
ipv6 nd prefix fec0::/10
flowcontrol rx on tx on
no shutdown

st-pet-z9k-6#show version
Dell Force10 Real Time Operating System Software
Dell Force10 Operating System Version: 2.1
Dell Force10 Application Software Version: 9.0(0.0)
Copyright (c) 1999-2012 by Dell Inc. All Rights Reserved.
Build Time: Mon Oct 22 00:52:30 PDT 2012
Build Path: /sites/sjc/work/build/buildSpaces/build04/E9-0-0/SW/SRC
st-pet-z9k-6 uptime is 23 hour(s), 23 minute(s)

System image file is "system://A"

System Type: Z9000
Control Processor: Intel Jasper Forest with 3474911232 bytes of memory.

8G bytes of boot flash memory.

1 32-port TE/FG (ZB)
24 Ten GigabitEthernet/IEEE 802.3 interface(s)
26 Forty GigabitEthernet/IEEE 802.3 interface(s) 

Table 3-1. show version Command Fields

Lines beginning with Description
Dell Force10 Network... Name of the operating system
Dell Force10 Operating... OS version number
Dell Force10 Application... Software version
Copyright (c)... Copyright information
Build Time... Software build's date stamp
Build Path... Location of the software build files loaded on the system
Dell Force10 uptime is... Amount of time the system has been up
System image... Image file name
Chassis Type: Chassis type (E1200, E600, E600i, E300, C300, C150)
Control Processor:...	Control processor information and amount of memory on processor.
Route Processor 1:...	E-Series route processor 1 information and the amount of memory on that processor.
Route Processor 2:...	E-Series route processor 2 information and the amount of memory on that processor.
128K bytes...	Amount and type of memory on system.
1 Route Processor...	Hardware configuration of the system, including the number and type of physical interfaces available.

upgrade (E-Series version)

Upgrade the bootflash, boot selector, or system image on a processor.

Syntax

upgrade {bootflash-image | bootselector-image | system-image} {all | linecard linecard-slot | rpm} {booted | file-url}

Parameters

bootflash-image	Enter the keyword bootflash-image to upgrade the bootflash image.
bootselector-image	Enter the keyword bootselector-image to upgrade the boot selector image.Use with TAC supervision only.
system-image	Enter the keyword system-image to upgrade the cache boot image.
all	Enter the keyword all to upgrade the bootflash/boot selector image on all processors in the E-Series. This keyword does not upgrade the bootflash on the standby RPM.
linecard linecard-slot	Enter the keyword linecard followed by the slot number to change the bootflash image on a specific line card.E-Series Range: 0 to 13 on the E1200; 0 to 6 for the E600; 0 to 5 on the E300
rpm	Enter the keyword rpm to upgrade the bootflash/boot selector image on all processors on the RPM.
booted	Enter this keyword to upgrade using the image packed with the currently running FTOS image.
file-url	Enter the following location keywords and information to upgrade using an FTOS image other than the one currently running:Enter the transfer method and file location:flash://filenameftp://userid.password@hostip/filepathslot0://filenametftp://hostip/filepath

Defaults

No configuration or default values

Command Modes

EXEC Privilege

Command History

Version 7.7.1.0	Removed alt-bootflash-image, alt-bootselector-image, alt-system-image options, rp1, rp2, and cp options.
E-Series original Command

Usage Information

A system message appears stating the Bootflash upgrade status. Reload the system to boot from the upgraded boot images.

Once the URL is specified, the same downloaded image can be used for upgrading an individual RPM, line cards, SFM FPGA, and system-image for cache-boot without specifying the file-url again using the command upgrade {bootflash-image | bootselector-image | system-image} {all | linecard linecard-slot | rpm}. After 20 minutes, the cached memory is released and returned for general use, but the URL is maintained and you do not have to specify it for subsequent upgrades.

Related Commands

upgrade fpga-image (E-Series)	Upgrade the FPGA version in the specified E-Series SFM.
boot system (S55)	Display configured boot image information

upgrade (C-Series version)

Upgrade the bootflash or boot selector image on a processor.

Syntax

upgrade {bootflash-image | bootselector-image | system-image}

{all | linecard {number | all} | rpm} [booted | file-url | repair]

Parameters

bootflash-image	Enter the keyword bootflash-image to upgrade the bootflash image.
bootselector-image	Enter the keyword bootselector-image to upgrade the boot selector image. Use with TAC supervision only.
system-image	Enter the keyword system-image to upgrade the system image. Use with TAC supervision only.
all	Enter the keyword all to upgrade the bootflash or boot selector image on all processors. This keyword does not upgrade the bootflash on the standby RPM.Enter the keyword all after the keyword linecard to upgrade the bootflash or boot selector image on all linecards.
linecard number	Enter the keyword linecard followed by the line card slot number.Range: I E1200, E1200i AC/DC: 0-13E600, E600i: 0-6E300: 0-5C300: 0-7C150: 0-3
rpm	Enter the keyword rpm to upgrade the system image of a selector image on all processors on the RPM.
repair	Enter this keyword to upgrade a line card newly inserted into an already upgraded chassis. This option is only available with the system-image keyword.
booted	Upgrade the bootflash or bootselector image using the currently running FTOS image.
file-url	Enter the following location keywords and information to upgrade using an FTOS image other than the one currently running:To specify an FTOS image on the internal flash, enter flash:// file-path/filename.To specify an FTOS image on an FTP server, enter ftp:// user:password@hostip/filepathTo specify an FTOS image on the external flash on the primary RPM, slot0://file-path/filenameTo copy a file on a TFTP server, enter tftp://hostip/filepath/filename

Defaults

FTOS uses the boot flash image that was packed with it if no URL is specified.

Command Modes

EXEC Privilege

Command History

Version 7.7.1.0 Introduced system-image option

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

Usage Information

A system message appears stating the Bootflash upgrade status. Reload the system to boot from the upgraded boot images.

Once the URL is specified, the same downloaded image can be used for upgrading an individual RPM, line cards, SFM FPGA, and system-image for cache-boot without specifying the file-url again using the command upgrade {bootflash-image | bootselector-image | system-image} {all | linecard linecard-slot | rpm}. After 20 minutes, the cached memory is released and returned for general use, but the URL is maintained and you do not have to specify it for subsequent upgrades.

Related Commands

upgrade fpga-image (E-Series)	Upgrade the FPGA version in the specified E-Series SFM.
boot system (S55)	Display configured boot image information

upgrade (S-Series management unit)

S

Upgrade the bootflash image or system image of the S-Series management unit.

Syntax

upgrade {boot | system} {ftp: | scp: | tftp: | flash: {A: /B:} | stack-unit | usbflash:} file-url

Parameters

boot	Enter this keyword to change the boot image.
system	Enter this keyword to change the system image.
ftp:	After entering this keyword you can either follow it with the location of the source file in this form://userid:password@hostip/filepath, or press Enter to launch a prompt sequence.
scp:	After entering this keyword you can either follow it with the location of the source file in this form://userid:password@hostip/filepath, or press Enter to launch a prompt sequence.
tftp:	After entering this keyword you can either follow it with the location of the source file in this form://hostlocation/filepath, or press Enter to launch a prompt sequence.
flash:	After entering this keyword you can either follow it with the location of the source file in this form: flash//filepath,or press Enter to launch a prompt sequence.S55 only
A:|B:	Enter the partition to upgrade from the flash.S55 only
stack-unit:	After entering this keyword to synch the image to the stack-unit.
usbflash:	After entering this keyword you can either follow it with the location of the source file in this form: usbflash://filepath, or press Enter to launch a prompt sequence.S55 only

Defaults

No configuration or default values

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55

Version 7.7.1.0 Added support for TFTP and SCP.

Version 7.6.1.0 Introduced on S-Series

Usage Information

You must reload FTOS after executing this command. Use the command upgrade system stack-unit (S-Series stack member) on page 242 to copy FTOS from the management unit to one or more stack members.

FTOS#upgrade system ?
ftp: Copy from remote file system (ftp://userid:password@hostip/filepath)
scp: Copy from remote file system (scp://userid:password@hostip/filepath)
tftp: Copy from remote file system (tftp://hostip/filepath)

FTOS#$upgrade system ftp://username:password@10.11.1.1/FTOS-SB-7.7.1.0.bin

Erasing Sseries ImageUpgrade Table of Contents, please wait

12946259 bytes successfully copied
FTOS#reload 

upgrade fpga-image (E-Series)

E Upgrade the FPGA version in the specified E-Series SFM and automatically initiate an automatic reset to complete the version upgrade.

Syntax upgrade fpga-image {sfm} {all | id} [booted | flash:// | ftp: | slot0: | tftp]

Parameters

sfm Enter the keyword sfm to upgrade the FPGA on the SFMs.
rpm	Enter the keyword rpm to upgrade all processors on the RPM.
all Enter the keyword all to upgrade the FPGA on all the SFMs.
id	Enter the keyword id to upgrade the FPGA on all a specific SFM.
	Enter the path to the upgrade source. Enteringupdates the FPGA from the flash.

Defaults No default values or behavior

Command Modes EXEC Privilege

Command History
Version 8.3.1.0 Added rpm option

Version 7.5.1.0 Introduced on E-Series

Example Command example: upgrade sfm autoreset

FTOS#upgrade sfm 1 autoreset
SFM1: upgrade in progress
!!! !!! !!!
SFM1: upgrade complete
SFM1 is active. Resetting it might temporarily impact traffic.
Proceed with reset [confirm yes/no]: yes
FTOS# 

Related Commands	show sfm Display the SFM status.
	upgrade (E-Series version)	Upgrade the E-Series.
Usage Information	On E-Series ExaScale, you cannot upgrade SFMs using this command when Cache Boot is configured. If you attempt an upgrade, you must reload the chassis to recover.

upgrade fpga-image (C-Series)

© Upgrade the primary FPGA image.

Syntax upgrade fpga-image {rpm {number | all} | linecard {number | all} [system-fpga | link-fpga] | all} {booted | file-url}

rpm number	Enter rpm followed by the RPM slot number to upgrade an RPM FPGA Range: 0-1
linecard number	Enter linecard followed by the line card slot number to upgrade a linecard FPGA. Range: 0-7 on the C300, 0-3 on the C150
all	Enter the keyword all to upgrade all RPM and linecard FPGAs. Enter the keyword all after the keyword rpm to upgrade all FPGAs on all RPMs. Enter the keyword all after the keyword linecard to upgrade all FPGAs on all linecards.
system-fpga	(OPTIONAL) Enter system-fpga to upgrade only the system FPGA on a fiber linecard. Contact the Dell Networking TAC before using this keyword.
link-fpga	(OPTIONAL) Enter link-fpga to upgrade only the link FPGA on a fiber linecard. Contact the Dell Networking TAC before using this keyword.
booted	Upgrade the FPGA image using the currently running FTOS image.
file-url	Enter the following location keywords and information to upgrade the FPGA using an FTOS image other than the one currently running:To specify an FTOS image on the internal flash, enter flash:// file-path/filename.To specify an FTOS image on an FTP server, enter ftp:// user:password@hostip/filepathTo specify an FTOS image on the external flash on the primary RPM, slot0://file-path/filenameTo copy a file on a TFTP server, enter tftp://hostip/filepath/ filename

Defaults None.

Command Mode EXEC Privilege

Command History	Version 7.7.1.0	Renamed theprimary-fpga-flashkeyword tofpga-image.Added support for upgrading using a remote FTOS image.
	Version 7.6.1.0	Added support for theallkeyword
	Version 7.5.1.0 Introduced on C-Series

Example

Command example: upgrade fpga-image

FTOS#conf
FTOS (conf) # upgrade primary-fpga-flash rpm
Proceed to upgrade primary fpga flash for rpm 0 [confirm yes/no]: yes
FTOS# 

Usage Information

Reset the card using the power-cycle option after restoring the FPGA command.

Related Commands

reset	Reset a line card or RPM.
restore fpga-image	This command copies the backup FPGA image to the primary FPGA image.

upgrade fpga-image (S55)

S60

Upgrade the FPGA version on the S55.

Syntax

upgrade fpga-image stack-unit {0-11} booted

Parameters

stack-unit	Enter the keyword stack-unit to upgrade the FPGA on the specified S55 chassis.
booted	Upgrade the FPGA image using the currently running FTOS image.

Defaults

No default values or behavior

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55

Example

Command example: upgrade fpga-image

Card	FPGA Name	Current Version	New Version
Unit0	S55 SYSTEM FPGA	15	16

Upgrade fpga image for stack-unit 0 [yes/no]: yes

FPGA upgrade in progress. Please do NOT power off the card. !!!!!!!!!

Upgrade result :

[EMPTY]

Unit 0 FPGA upgrade successful. Power cycle the stack-unit to complete the upgrade.

FTOS#

Control and Monitoring

Overview

This chapter contains the following commands to configure and monitor the system, including Telnet, FTP, and TFTP as they apply to platforms C E S.

Commands

audible cut-off show command-history
banner exec show command-tree
banner login show console lp
banner motd show cpu-traffic-stats
cam-audit linecard show debugging
clear alarms show environment (C-Series and clear command history show environment (S-Series)	E-Series)
clear line show inventory (C-Series and E-Series)
configure show inventory (S-Series)
debug cpu-traffic-stats show linecard
debug ftpserver show linecard boot-information
disable show memory (C-Series and E-Series)
do show memory (S-Series)
enable	show processes cpu (C-Series and E-Series)
enable xfp-power-updates	show processes cpu (S-Series)
end	show processes ipc flow-control
epoch	show processes memory (C-Series and E-Series)
exec-banner show processes memory (S-Series)
exec-timeout	show rpm
exit	show software ifm
ftp-server topdir	show switch links
ftp-server username	show system (S-Series)
hostname show tech-support (C-Series and E-Series)
ip ftp password show tech-support (S-Series)
ip ftp source-interface show util-threshold cpu
ip ftp username show util-threshold mem
ip telnet server enable ssh-peer-rpm
ip telnet source-interface ssh-peer-stack-unit
ip tftp blksize telnet
ip tftp source-interface telnet-peer-stack-unit
line telnet-peer-stack-unit
linecard terminal length
module power-off terminal xml
motd-banner traceroute
ping undebug all
power-off show util-threshold cpu
power-on util-threshold cpu (C- and E-Series)
reload util-threshold cpu (S-Series)
reset	util-threshold mem (C- and E-Series)
rpmlocation-led	util-threshold mem (S-Series)
send	upload trace-log
service timestamps	virtual-ip
show alarms	write
show chassis

audible cut-off

E Turn off an audible alarm.

Syntax audible cut-off

Defaults Not configured.

Command Modes EXEC Privilege

banner exec

C E S Configure a message that is displayed when a user enters the EXEC mode.

Syntax banner exec c line c

To delete a banner, enter no banner exec.

Parameters

c	Enter the keywordsbanner exec, and then enter a character delineator, represented here by the letter c, and press ENTER.
line	Enter a text string for your banner message ending the message with your delineator.In the example below, the delineator is a percent character (%); the banner message is “testing, testing”.

Defaults

No banner is displayed.

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

Usage Information

Optionally, use the banner exec command to create a text string that is displayed when the user accesses the EXEC mode. The exec-banner command toggles that display.

Example

FTOS(conf)#banner exec ?
LINE    c banner-text c, where 'c' is a delimiting character
FTOS(conf)#banner exec %
Enter TEXT message. End with the character '%'.
This is the banner%
FTOS(conf)#end
FTOS#exit
4d21h5m: %RPM0-P:CP %SEC-5-LOGOUT: Exec session is terminated for user on line console
This is the banner
FTOS con0 now available
Press RETURN to get started.
4d21h6m: %RPM0-P:CP %SEC-5-LOGIN_SUCCESS: Login successful for user on line console
This is the banner
FTOS> 

Related Commands

banner login Sets a banner for login connections to the system.

banner motd Sets a Message of the Day banner.

exec-banner Enable the display of a text string when the user enters the EXEC mode.

line Enable and configure console and virtual terminal lines to the system.

banner login

Set a banner to be displayed when logging on to the system.

Syntax

banner login {keyboard-interactive | no keyboard-interactive} [c line c]

Enter no banner login to delete the banner text.

Enter no banner login keyboard-interactive to automatically go to the banner message prompt (does not require a carriage return).

Parameters

keyboard-interactive	Enter this keyword to require a carriage return (CR) to get the message banner prompt.
c	Enter a delineator character to specify the limits of the text banner. In Figure 4-1, the % character is the delineator character.
line	Enter a text string for your text banner message ending the message with your delineator.In the example in Figure 4-1, the delineator is a percent character (%).Ranges:maximum of 50 linesup to 255 characters per line

Defaults

No banner is configured and the CR is required when creating a banner.

Command Modes
CONFIGURATION
Command History

Version 8.3.5.0 Introduced on the S55.
Version 8.2.1.0	Introducedkeyboard-interactivekeyword
Version 8.1.1.0 Introduced on E-Series ExaScale
Version 7.6.1.0 Introduced on S-Series
Version 7.5.1.0 Introduced on C-Series
E-Series original Command

Usage Information

A login banner message is displayed only in EXEC Privilege mode after entering the enable command followed by the password. These banners are not displayed to users in EXEC mode.

Related Commands

banner exec Sets a banner to be displayed when you enter EXEC Privilege mode.

banner motd Sets a Message of the Day banner.

Example

Figure 4-1. Command Example: banner login

FTOS (conf) #banner login ?
keyboard-interactive    Press enter key to get prompt
LINE    c banner-text c, where 'c' is a delimiting character
FTOS (conf) #no banner login ?
keyboard-interactive    Prompt will be displayed by default
<cr>
FTOS (conf) #banner login keyboard-interactive

Enter TEXT message. End with the character '%'.
This is the banner%
FTOS (conf) #end
FTOS#exit

13d21h9m: %RPM0-P:CP %SEC-5-LOGOUT: Exec session is terminated for user on line console

This is the banner

FTOS con0 now available

Press RETURN to get started.
13d21h10m: %RPM0-P:CP %SEC-5-LOGIN_SUCCESS: Login successful for user on line console

This is the banner
FTOS> 

banner motd

Set a Message of the Day (MOTD) banner.

Syntax

banner motd c line c

To delete a Message of the Day banner, enter no banner motd.

Parameters

c	Enter a delineator character to specify the limits of the text banner. In the above figures, the % character is the delineator character.
line	Enter a text string for your message of the day banner message ending the message with your delineator.In the example figures above, the delineator is a percent character (%).

Defaults

No banner is configured.

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

Usage Information

A MOTD banner message is displayed only in EXEC Privilege mode after entering the enable command followed by the password. These banners are not displayed to users in EXEC (non-privilege) mode.

Related Commands

banner exec Sets a banner to be displayed when you enter the EXEC Privilege mode.

banner login Sets a banner to be displayed after successful login to the system.

cam-audit linecard

Enable audit of the IPv4 forwarding table on all line cards.

Syntax

cam-audit linecard all ipv4-fib interval time-in-minutes

To disable audit, use the no cam-audit linecard all ipv4-fib command

Parameters

all	Enter the keyword all to enable CAM audit on all line cards.
ipv4-fib	Enter the keyword ipv4-fib to designate the CAM audit on the IPv4 forwarding entries.
interval time-in-minutes	Enter the keyword interval followed by the frequency in minutes of the CAM audit.Range: 5 to 1440 minutes (24 hours)Default: 60 minutes

Defaults

Disabled

Command Modes

CONFIGURATION

Command History

Version 7.4.1.0 Introduced on E-Series

Usage Information

Enables periodic audits of software and hardware copies of the IPv4 forwarding table.

clear alarms

Clear alarms on the system.

Syntax

clear alarms

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

Usage Information

This command clear alarms that are no longer active. If an alarm situation is still active, it is seen in the system output.

clear command history

Clear the command history log.

Syntax

clear command history

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

Related Commands

show command-history Display a buffered log of all commands entered by all users along with a time stamp.

clear line

Reset a terminal line.

Syntax

clear line {line-number|aux 0|console 0|vty number}

Parameters

line-number Enter a number for one of the 12 terminal lines on the system. Range: 0 to 11.

aux 0 Enter the keywords aux 0 to reset the Auxiliary port.

Note: This option is supported on E-Series only.

console 0 Enter the keyword console 0 to reset the Console port.

vty number Enter the keyword vty followed by a number to clear a Terminal line. Range: 0 to 9

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

configure

Enter the CONFIGURATION mode from the EXEC Privilege mode.

Syntax

configure [terminal]

Parameters	terminal (OPTIONAL) Enter the keyword terminal to specify that you are configuring from the terminal.
Command Modes	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	E-Series original Command
Example	Figure 4-2. Command Example: configureFTOS#configureFTOS (conf)#

debug cpu-traffic-stats

Enable the collection of CPU traffic statistics.

Syntax

debug cpu-traffic-stats

To disable the debugging, execute the no debug cpu-traffic-stats command.

Defaults

Disabled

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

Version 6.2.1.1 Introduced on E-Series

Usage Information

This command enables (and disables) the collection of CPU traffic statistics from the time this command is executed (not from system boot). However, excessive traffic received by a CPU will automatically trigger (turn on) the collection of CPU traffic statics. The following message is an indication that collection of CPU traffic is automatically turned on. Use the show cpu-traffic-stats to view the traffic statistics.

Excessive traffic is received by CPU and traffic will be rate controlled

Note: This command must be enabled before the show cpu-traffic-stats command will display traffic statistics. Dell Networking recommends that you disable debugging (no debug cpu-traffic-stats) once troubleshooting is complete.

Related Commands

show cpu-traffic-stats Display cpu traffic statistics

debug ftpserver

View transactions during an FTP session when a user is logged into the FTP server.

Syntax

debug ftpserver

To stop debugging, enter no debug ftpserver.

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

disable

Return to the EXEC mode.

Syntax

disable [level]

Parameters

level

(OPTIONAL) Enter a number for a privilege level of the FTOS.

Range: 0 to 15.

Default: 1

Defaults

1

Command Modes

EXEC Privilege

Command History

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

do

Allows the execution of most EXEC-level commands from all CONFIGURATION levels without returning to the EXEC level.

Syntax

do command

Parameters

command

Enter an EXEC-level command.

Defaults

No default behavior

Command Modes

CONFIGURATION

INTERFACE

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

Version 6.1.1.0 Introduced on E-Series

Usage Information

The following commands are not supported by the do command:

• enable
• disable
• exit
• config

Example

Figure 4-3. Command Example: do

FTOS(conf-if-te-5/0)#do clear counters
Clear counters on all interfaces [confirm]
FTOS(conf-if-te-5/0)#
FTOS(conf-if-te-5/0)#do clear logging
Clear logging buffer [confirm]
FTOS(conf-if-te-5/0)#
FTOS(conf-if-te-5/0)#do reload
System configuration has been modified. Save? [yes/no]: n
Proceed with reload [confirm yes/no]: n
FTOS(conf-if-te-5/0)# 

enable

Enter the EXEC Privilege mode or any other privilege level configured. After entering this command, you may need to enter a password.

Syntax

enable [level]

Parameters

level (OPTIONAL) Enter a number for a privilege level of FTOS.

Range: 0 to 15.

Default: 15

Defaults

15

Command Modes

EXEC

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

Usage Information

Users entering the EXEC Privilege mode or any other configured privilege level can access configuration commands. To protect against unauthorized access, use the enable password command to configure a password for the enable command at a specific privilege level. If no privilege level is specified, the default is privilege level 15.

Related Commands

enable password Configure a password for the enable command and to access a privilege level.

enable xfp-power-updates

Enable XFP power updates for SNMP.

Syntax

enable xfp-power-updates interval seconds

To disable XFP power updates, use the no enable xfp-power-updates command.

Parameters

interval seconds

Enter the keyword interval followed by the polling interval in seconds. Range: 120 to 6000 seconds Default: 300 seconds (5 minutes)

Defaults

Disabled

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series and E-Series

Usage Information

The chassis MIB contain the entry chSysXfpRecvPower in the chSysPortTable table. Periodically, IFA polls the XFP power for each of the ports, and sends the values to IFM where it is cached. The default interval for the polling is 300 seconds (5 minutes). Use this command to enable the polling and to configure the polling frequency.

end

Return to the EXEC Privilege mode from other command modes (for example, the CONFIGURATION or ROUTER OSPF modes).

Syntax

end

Command Modes

CONFIGURATION, SPANNING TREE, MULTIPLE SPANNING TREE, LINE, INTERFACE, TRACE-LIST, VRRP, ACCESS-LIST, PREFIX-LIST, AS-PATH ACL, COMMUNITY-LIST, ROUTER OSPF, ROUTER RIP, ROUTER ISIS, ROUTER BGP

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

Related Commands

exit Return to the lower command mode.

epoch

Set the epoch scheduling time for the chassis.

Syntax

epoch {2.4 |3.2 | 10.4}

To return to the default setting, enter no epoch.

Parameters

2.4	Enter the keyword 2.4 to set the epoch to 2.4 micro-seconds and lower the latency.This option is available on the E600i and E1200i E-Series ExaScale systems only.
3.2	Enter the keyword 3.2 to set the epoch to 3.2 micro-seconds and lower the latency.This option is available on the E600/E600i and E1200/E1200i only. ExaScale does not supports this setting with FTOS 8.3.1.0 and later.
10.4	Enter the keyword 10.4 to set the epoch to 10.4 micro-seconds.This is the default setting and is available on the E300, E600/E600i, and E1200.

Defaults

10.4

Command Modes

CONFIGURATION

Command History

Version 8.3.1.0 Added 2.4 micro-seconds option. ExaScale supports only 10.4 microseconds and 2.4 microseconds with FTOS 8.3.1.0 and later.

Version 8.1.1.2 Introduced on E-Series ExaScale E600i

Version 8.1.1.0 Introduced on E-Series ExaScale E1200i

Version 6.2.1.1 Support for E300 introduced (10.4 only)

Version 6.1.1.0 Values changed as described above

Usage Information

You save the configuration and reload the chassis for the changes to the epoch command setting to take affect.

When using 10 SFMs in an ExaScale chassis, the 10.4 and 2.4 settings are both linearate. Additionally, the 2.4 setting has a lower latency.

When using 9 SFMs in an ExaScale chassis, the 10.4 setting is linearate; the 2.4 setting reduces throughput. Dell Networking recommends using the 10.4 setting when the system has 9 SFMs.

Using 8 SFMs in an ExaScale chassis reduces throughput at any epoch setting.

Note: The E300 supports only the 10.4 epoch setting. The E-Series TeraScale E600/E600i and the E1200/E1200i systems support the 10.4 and the 3.2 epoch settings.

Note: For E-Series ExaScale, the 2.4 setting is supported on FTOS version 8.3.1.0 and later. The 10.4 setting is supported on all ExaScale FTOS versions. The 3.2 setting is only supported on FTOS versions 8.2.1.0 and earlier.

exec-banner

Enable the display of a text string when the user enters the EXEC mode.

Syntax exec-banner

To disable the banner on terminal lines, enter no exec-banner.

Defaults Enabled on all lines (if configured, the banner appears).

Command Modes LINE

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

Usage Optionally, use the banner exec command to create a text string that is displayed when the user accesses the EXEC mode. This command toggles that display.

Related Commands

banner exec Configure a banner to display when entering the EXEC mode.

line Enable and configure console and virtual terminal lines to the system.

exec-timeout

Set a time interval the system will wait for input on a line before disconnecting the session.

Syntax exec-timeout minutes [seconds]

To return to default settings, enter no exec-timeout.

Parameters

minutes	Enter the number of minutes of inactivity on the system before disconnecting the current session. Range: 0 to 35791 Default: 10 minutes for console line; 30 minutes for VTY line.
seconds	(OPTIONAL) Enter the number of seconds Range: 0 to 2147483 Default: 0 seconds

Defaults 10 minutes for console line; 30 minutes for VTY lines; 0 seconds

Command Modes LINE

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

Usage To remove the time interval, enter exec-timeout 0 0. Information

Example Figure 4-4. FTOS time-out display

FTOS con0 is now available

Press RETURN to get started. FTOS>

exit

Return to the lower command mode.

Syntax

exit

Command Modes

EXEC Privilege, CONFIGURATION, LINE, INTERFACE, TRACE-LIST, PROTOCOL GVRP, SPANNING TREE, MULTIPLE SPANNING TREE, MAC ACCESS LIST, ACCESS-LIST, AS-PATH ACL, COMMUNITY-LIST, PREFIX-LIST, ROUTER OSPF, ROUTER RIP, ROUTER ISIS, ROUTER BGP

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

Related Commands

end Return to the EXEC Privilege command mode.

ftp-server enable

Enable FTP server functions on the system.

Syntax

ftp-server enable

To disable FTP server on the system, enter no ftp-server enable.

Defaults

Disabled.

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

Example

Figure 4-5. Example of Logging on to an FTP Server

morphous$ ftp 10.31.1.111 Connected to 10.31.1.111. 220 FTOS (1.0) FTP server ready Name (10.31.1.111:dch): dch 331 Password required Password: 230 User logged in ftp> pwd 257 Current directory is "flash:" ftp> dir 200 Port set okay 150 Opening ASCII mode data connection size date time name ----- ---- ---- ---- ---- 512 Jul-20-2004 18:15:00 tgtimg 512 Jul-20-2004 18:15:00 diagnostic 512 Jul-20-2004 18:15:00 other 512 Jul-20-2004 18:15:00 tgt 226 Transfer complete 329 bytes received in 0.018 seconds (17.95 Kbytes/s) ftp>

Related Commands

ftp-server topdir Set the directory to be used for incoming FTP connections to the E-Series.

ftp-server username Set a username and password for incoming FTP connections to the E-Series.

ftp-server topdir

Specify the top-level directory to be accessed when an incoming FTP connection request is made.

Syntax

ftp-server topdir directory

To return to the default settings, enter no ftp-server topdir.

Parameters

directory

Enter the directory path.

Defaults

The internal flash is the default directory.

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

Usage Information

After you enable FTP server functions with the ftp-server enable command, Dell Networking recommends that you specify a top-level directory path. Without a top-level directory path specified, the FTOS directs users to the flash directory when they log in to the FTP server.

Related Commands

ftp-server enable Enables FTP server functions on the E-Series.

ftp-server username Set a username and password for incoming FTP connections to the E-Series.

ftp-server username

Create a user name and associated password for incoming FTP server sessions.

Syntax

ftp-server username username password [encryption-type] password

To delete a user name and its password, use the no ftp-server username username command.

Parameters

username	Enter a text string up to 40 characters long as the user name.
password password	Enter the keyword password followed by a string up to 40 characters long as the password.Without specifying an encryption type, the password is unencrypted.
encryption-type	(OPTIONAL) After the keyword password enter one of the following numbers:0 (zero) for an unencrypted (clear text) password7 (seven) for hidden text password.

Defaults

Not enabled.

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

hostname

Set the host name of the system.

Syntax

hostname name

To delete a hostname assigned, enter no hostname.

Parameters

name	Enter a text string, up to 32 characters long.

Defaults

FTOS

Command Modes

CONFIGURATION

Command History

Version 8.3.5.5. Changed to FTOS.

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

Usage The hostname is used in the prompt. Information

ip ftp password

Syntax	Specify a password for outgoing FTP connections.ip ftp password [encryption-type] passwordTo remove a password and return to the default setting, use theno ip ftp password [password] command.
Parameters	encryption-type	(OPTIONAL) Enter one of the following numbers:0 (zero) for an unencrypted (clear text) password7 (seven) for hidden text password
	password	Enter a string up to 40 characters as the password.
Defaults	Not configured.
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	E-Series original Command
Usage Information	The password is listed in the configuration file; you can view the password by entering theshow running-config ftpcommand.
	The password configured by the ip ftp password command is used when you use theftp: parameter in thecopycommand.
Related Commands	copy Copy files.
	ip ftp username Set the user name for FTP sessions.

ip ftp source-interface

Specify an interface's IP address as the source IP address for FTP connections.

Syntax ip ftp source-interface interface

To delete an interface, use the no ip ftp source-interface interface command.

Parameters	interface	Enter the following keywords and slot/port or number information:For an 100/1000 Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For Loopback interfaces, enter the keywordloopbackfollowed by a number from zero (0) to 16383.For a Port Channel interface, enter the keywordport-channelfollowed by a number:C-Series and S-Series: 1-128E-Series: 1 to 255 for TeraScale and ExaScaleFor SONET interface types, enter the keywordsonetfollowed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernet followed by the slot/port information.For a VLAN interface, enter the keywordvlanfollowed by a number from 1 to 4094.
Defaults	The IP address on the system that is closest to the Telnet address is used in the outgoing packets.
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.2.1.0 Increased number of VLANs on ExaScale to 4094 (was 2094)
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Introduced on C-Series
	E-Series original Command
Related Commands	copy Copy files from and to the switch.

ip ftp username

Assign a user name for outgoing FTP connection requests.

Syntax

ip ftp username username

To return to anonymous FTP connections, use the no ip ftp username [username] command.

Parameters

username

Enter a text string as the user name up to 40 characters long.

Defaults

No user name is configured.

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

	Version 7.5.1.0 Introduced on C-Series
	E-Series original Command
Usage Information	You must also configure a password with the ip ftp password command.
Related Commands	ip ftp password Set the password for FTP connections.

ip telnet server enable

Enable the Telnet server on the switch.

Syntax

ip telnet server enable

To disable the Telnet server, execute the no ip telnet server enable command.

Defaults

Enabled

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Introduced on C-Series

Version 6.1.1.0 Introduced on E-Series

Related Commands

ip ssh server

Enable SSH server on the system.

ip telnet source-interface

Set an interface's IP address as the source address in outgoing packets for Telnet sessions.

Syntax

ip telnet source-interface interface

To return to the default setting, use the no ip telnet source-interface [interface] command.

Parameters

interface

Enter the following keywords and slot/port or number information:For an 100/1000 Ethernet interface, enter the keyword slot/port information.For a 1-Gigabit Ethernet interface, enter the keyword slot/port information.For Loopback interfaces, enter the keyword (0) to 16383.For the SONET interfaces, enter the keyword sonet followed by slot/port information.For a Port Channel, enter the keyword port-channel followed by a number:C-Series and S-Series: 1-128E-Series: 1 to 255 for TeraScale and ExaScaleFor a 10-Gigabit Ethernet interface, enter the keyword tenGigabitEthernet followed by the slot/port information.For VLAN interface, enter the keyword vlan followed by a number from 1 to 4094.

Defaults	The IP address on the system that is closest to the Telnet address is used in the outgoing packets.
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.2.1.0 Increased number of VLANs on ExaScale to 4094 (was 2094)
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Introduced on C-Series
	E-Series original Command
Related Commands	telnet Telnet to another device.

ip tftp blksize

S55

S60

Configure the TFTP block size.

Syntax
ip tftp blksize blocksize

Parameters	block-size	Enter the number of bytes to allocate for the TFTP block size.
		Default: 512.
		Range is from 512 to 8192.

Defaults 512

Command Modes CONFIGURATION

Command History	Version 8.3.3.9 Introduced on the S60.
	Version 8.3.5.5 Introduced on the S55.

Usage Ensure your TFTP server supports file transfers over 32 MB in size. Recent TFTP servers will support the larger file size, but TFTP servers running older TFTP protocol will not.

ip tftp source-interface

Assign an interface's IP address in outgoing packets for TFTP traffic.

Syntax

ip tftp source-interface interface

To return to the default setting, use the no ip tftp source-interface interface command.

Parameters

interface

Enter the following keywords and slot/port or number information:For an 100/1000 Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.For Loopback interfaces, enter the keyword loopback followed by a number from zero (0) to 16383.For a Port Channel, enter the keyword port-channel followed by a number:C-Series and S-Series: 1-128E-Series: 1 to 255 for TeraScale and ExaScaleFor the SONET interfaces, enter the keyword sonet followed by slot/port information.For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.For a VLAN interface, enter the keyword vlan followed by a number from 1 to 4094.

Defaults

The IP address on the system that is closest to the Telnet address is used in the outgoing packets.

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.2.1.0 Increased number of VLANs on ExaScale to 4094 (was 2094)

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

line

Enable and configure console and virtual terminal lines to the system. This command accesses LINE mode, where you can set the access conditions for the designated line.

Syntax

line {aux 0 | console 0 | vty number [end-number]}

Parameters

aux 0	Enter the keyword aux 0 to configure the auxiliary terminal connection.Note: This option is supported on E-Series only.
console 0	Enter the keyword console 0 to configure the console port.The console option for the S-Series is <0-0>.

	vty number	Enter the keyword vty followed by a number from 0 to 9 to configure a virtual terminal line for Telnet sessions.The system supports 10 Telnet sessions.
	end-number	(OPTIONAL) Enter a number from 1 to 9 as the last virtual terminal line to configure.You can configure multiple lines at one time.
Defaults	Not configured
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	E-Series original Command
Usage Information	You cannot delete a terminal connection.
Related Commands	access-class	Restrict incoming connections to a particular IP address in an IP access control list (ACL).
	password Specify a password for users on terminal lines.
	show linecard Display the line card(s) status.
linecard	Pre-configure a line card in a currently empty slot of the system or a different line card type for the slot.
Syntax	linecard number card-typeTo delete a card setting, use theno linecard number command.
Parameters	number	Enter the number of the slot.C-Series Range: 0-7E-Series Range: 0 to 13 on a E1200/E1200i, 0 to 6 on a E600/E6001, and 0 to 5 on a E300.
	card-type	Enter the line card ID (see the Supported Hardware section in the Release Notes).
Defaults	Not configured
Command Modes	CONFIGURATION
Command History	Version 8.1.1.2 Introduced on E-Series ExaScale E600i
	Version 8.1.1.0 Introduced on E-Series ExaScale E1200i
	Version 7.5.1.0 Introduced on C-Series
	E-Series original Command

linecard

Usage Information

Use this command only for empty slots or a slot where you have hot-swapped a different line card type. Before inserting a card of a different type into the pre-configured slot, execute the no linecard number command. The following screenshot shows the current supported C-Series line cards, along with their "card types" (card-type IDs).

Figure 4-6. Command Example: show linecard on Empty C300 Slot

FTOS#show linecard 3
-- Line card 11 --
Status : not present

FTOS#linecard 3 ?
E46TB 36-port GE 10/100/1000Base-T with RJ45 - 8-port FE/GE with SFP - 2-port 10GE with SFP+
E46VB 36-port GE 10/100/1000Base-T with RJ45 and PoE - 8-port FE/GE with SFP - 2-port 10GE with SFP+
E48PB 48-port FE/GE line card with SFP optics (CB)
E48TB 48-port GE 10/100/1000Base-T line card with RJ45 interfaces (CB)
E48VB 48-port GE 10/100/1000Base-T line card with RJ45 interfaces and PoE (CB)
EX4PB 4-port 10GE LAN PHY line card with XFP optics (CB)
EX8PB 8-port 10GE LAN PHY line card with XFP optics (CB)
FTOS#linecard 3 EX4PB
FTOS#show linecard 3
-- Line card 11 --
Status : not present
Required Type : EX4PB - 4-port 10GE LAN PHY line card with XFP optics (CB)
FTOS# 

Note: It is advisable to shut down interfaces on a line card that you are hot-swapping.

Related Commands

show linecard Display the line card(s) status.

module power-off

Turn off power to a line card at next reboot.

Syntax

module power-off linecard number

To remove the command from the running configuration, use the no module power-off linecard number command.

Parameters

linecard number	Enter the keyword line card followed by the line card slot number
	C-Series Range: 0-7
	E-Series Range: 0 to 13 on a E1200/1200i, 0 to 6 on a E600/E600i, and 0 to 5 on a E300.

Defaults

Not configured.

Command Modes

CONFIGURATION

Command History

Version 8.1.1.2 Introduced on E-Series ExaScale E600i

Version 8.1.1.0 Introduced on E-Series ExaScale E1200i

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

motd-banner

Enable a Message of the Day (MOTD) banner to appear when you log in to the system.

Syntax motd-banner

To disable the MOTD banner, enter no motd-banner.

Defaults Enabled on all lines.

Command Modes LINE

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

ping

Test connectivity between the system and another device by sending echo requests and waiting for replies.

Syntax

ping [vrf ] [host | ip-address | ipv6-address] [count {number | continuous}] [datagram-size] [timeout] [source (ip src-ipv4-address) | interface] [tos] [df-bit (y|n)] [validate-reply(y|n)] [pattern pattern] [sweep-min-size] [sweep-max-size] [sweep-interval] [ointerface (ip src-ipv4-address) | interface]

Parameter

vrf	(OPTIONAL) E-Series Only: Enter the VRF Instance name of the device to which you are testing connectivity.
host	(OPTIONAL) Enter the host name of the devices to which you are testing connectivity.
ip-address	(OPTIONAL) Enter the IPv4 address of the device to which you are testing connectivity. The address must be in the dotted decimal format.
ipv6-address	(OPTIONAL) E-Series only Enter the IPv6 address, in the X:X:X:X::X format, to which you are testing connectivity.Note:The :: notation specifies successive hexadecimal fields of zeros
count	Enter the number of echo packets to be sent.number: 1-2147483647Continuous: transmit echo request continuouslyDefault: 5
datagram size	Enter the ICMP datagram size.Range: 36 - 15360 bytesDefault: 100
timeout	Enter the interval to wait for an echo reply before timing out.Range: 0 -3600 secondsDefault: 2 seconds
source	(IPv4 only) Enter the IPv4 source ip address or the source interface.Enter the IP address in A.B.C.D formatFor an 100/1000 Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For a Port Channel, enter the keywordport-channelfollowed by a number:C-Series and S-Series: 1-128E-Series: 1 to 255 for TeraScale and ExaScaleE-Series only For the SONET interfaces, enter the keywordsonetfollowed by slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernetfollowed by the slot/port information.For a VLAN interface, enter the keywordvlanfollowed by a number from 1 to 4094.
tos	(IPv4 only) Enter the type of service required.Range: 0-255Default: 0
df-bit	(IPv4 only) Enter Y or N for the “don't fragment” bit in IPv4 headerN: Do not set the “don't fragment” bitY: Do set “don't fragment” bitDefault is No.
validate-reply	(IPv4 only) Enter Y or N for reply validation.N: Do not validate reply dataY: Do validate reply dataDefault is No.
pattern pattern	(IPv4 only) Enter the IPv4 data pattern.Range: 0-FFFFDefault: 0xABCD
sweep-min-size	Enter the minimum size of datagram in sweep range.Range: 52-15359 bytes
sweep-max-size	Enter the maximum size of datagram in sweep range.Range: 53-15359 bytes
sweep-interval	Enter the incremental value for sweep size.1-15308 seconds
ointerface	(IPv4 only) Enter the outgoing interface for multicast packets.Enter the IP address in A.B.C.D formatFor an 100/1000 Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For a Port Channel, enter the keywordport-channelfollowed by a number:C-Series and S-Series: 1-128E-Series: 1 to 255for TeraScale and ExaScaleE-Series only For the SONET interfaces, enter the keywordsonetfollowed by slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernetfollowed by the slot/port information.For a VLAN interface, enter the keywordvlanfollowed by a number from 1 to 4094.

Defaults

Command Modes

See parameters above.

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.3.1.0 Introduced extended ping options.

Version 8.2.1.0 Introduced on E-Series ExaScale (IPv6)

Version 8.1.1.0 Introduced on E-Series ExaScale (IPv4)

Version 7.9.1.0 Introduced VRF

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced support for C-Series

Version 7.4.1.0 Added support for IPv6 address on E-Series

Usage Information

When you enter the ping command without specifying an IP/IPv6 address (Extended Ping), you are prompted for a target IP/IPv6 address, a repeat count, a datagram size (up to 1500 bytes), a timeout in seconds, and for Extended Commands. See Appendix, for information on the ICMP message codes that return from a ping command.

Figure 4-7. Command Example: ping (IPv4)

FTOS#ping 172.31.1.255
Type Ctrl-C to abort.
Sending 5, 100-byte ICMP Echos to 172.31.1.255, timeout is 2 seconds:
Reply to request 1 from 172.31.1.208 0 ms
Reply to request 1 from 172.31.1.216 0 ms
Reply to request 1 from 172.31.1.205 16 ms
:
:
Reply to request 5 from 172.31.1.209 0 ms
Reply to request 5 from 172.31.1.66 0 ms
Reply to request 5 from 172.31.1.87 0 ms
FTOS# 

Figure 4-8. Command Example: ping (IPv6)

FTOS#ping 100::1
Type Ctrl-C to abort.
Sending 5, 100-byte ICMP Echos to 100::1, timeout is 2 seconds:
!!!!!
Success rate is 100.0 percent (5/5), round-trip min/avg/max = 0/0/0 (ms)
FTOS# 

power-off

Turn off power to a selected line card or the standby (extra) Switch Fabric Module (SFM).

Syntax

power-off {linecard number | sfm sfm-slot-id}

Parameters

linecard number	Enter the keyword linecard and a number for the line card slot number.C-Series Range: 0-7E-Series Range: 0 to 13 on a E1200/E1200i, 0 to 6 on a E600/E600i, and 0 to 5 on a E300.
sfm sfm-slot-id	Enter the keyword sfm by the slot number of the SFM to which you want to turn off power.Note: This option is supported on E-Series only.

Defaults

Disabled

Command Modes

EXEC Privilege

Command History

Version 8.1.1.2 Introduced on E-Series ExaScale E600i

Version 8.1.1.0 Introduced on E-Series ExaScale E1200i

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

Related Commands

power-on Power on a line card or standby SFM.

power-on

Turn on power to a line card or the standby (extra) Switch Fabric Module (SFM).

Syntax

power-on {linecard number | sfm sfm-slot-id}

Parameters

linecard number	Enter the keyword linecard and a number for the line card slot number.C-Series Range: 0-7E-Series Range: 0 to 13 on a E1200/E1200i, 0 to 6 on a E600/E600i, and 0 to 5 on a E300.
sfm standby	Enter the keyword sfm followed by the slot number of the SFM to power on.Note: This option is supported on E-Series only.

Defaults

Disabled

Command Modes

EXEC Privilege

Command History

Version 8.1.1.2 Introduced on E-Series ExaScale E600i

Version 8.1.1.0 Introduced on E-Series ExaScale E1200i

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

Related Commands	power-off Power off a line card or standby SFM.
reload
C E S	Reboot FTOS.
Syntax	reload
Command Modes	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	E-Series original Command
Usage Information	If there is a change in the configuration, FTOS will prompt you to save the new configuration. Or you can save your running configuration with thecopy running-configcommand.
	Refer to Chapter 9, Bare Metal Provisioning for information related to the BMP reload options.
Related Commands	reset Reset a line card, RPM, or a failed SFM (TeraScale and ExaScale).
	reset stack-unit Reset any designated stack member except the management unit
	reload-type Configure a switch to reload in normal mode or as a DHCP client with all ports configured for Layer 3 traffic.
reset
C E	Reset a line card, RPM, or a failed SFM (TeraScale only).
Syntax	reset {linecard number [hard | power-cycle] | rpm number [hard | power-cycle] | sfm slot number}
Parameters	linecard number	Enter the keywordlinecardand a number for the line card slot number.(Optional) Add the keywordhard or power-cycle (power-cycleis C-Series only) to power cycle the line card.C-Series Range: 0-7E-Series Range: 0 to 13 on E1200/E1200i, 0 to 6 on E600/E600i, and 0 to 5 on E300
	hard Enter the keyword hard to power cycle the line card.
	power-cycle	Enter the keywordpower-cyleafter upgrading a C-Series FPGA to cause the FPGA to be reprogrammed based on the contents of the FPGA PROM.Note: This option is supported on C-Series only.
	rpm number	Enter the keyword rpm followed by a number for the RPM slot number.(Optional) Add the keyword hard or power-cycle (C-Series only) to powercycle the RPM.Range: 0 to 1
	sfm slot number	Enter the keyword sfm followed by the failed or powered-off SFM slot number.Note: Supported on E-Series only
Defaults	Disabled.
Command Modes	EXEC Privilege
Command History	Version 7.5.1.0 Introduced on C-Series
	E-Series original Command
Usage Information	The command reset without any options is a soft reset, which means FTOS boots the line card from itsruntime image. The hard option reloads the FTOS image on the line card. Use the power-cycle afterupgrading an FPGA.
	When a soft reset is issued on a line card (reset linecard number), FTOS boots the line card from itsruntime image. Only when you enter reset linecard number hard is the software image reloaded onthe line card.
Related Commands	reload Reboots the system.
	restore fpga-image Copy the backup C-Series FPGA image to the primary FPGA image.

rpm location-led

Toggle the location LED on/off on the E-Series ExaScale RPM (LC-EH-RPM).

Syntax
rpm slot number location-led [on | off]

Parameters	rpm slot number	Enter the slot numberE1200i: 0-13E600i: 0-6
	on |off	Toggles the LED on the RPM on or off.
Defaults	OFF
Command Modes	EXEC
Command History	Version 8.2.1.0 Introduced on the E-Series ExaScale
Usage Information	The LED setting is not saved through power cycles.

send

Send messages to one or all terminal line users.

Syntax
send [*] | [line] | [aux] | [console] | [vty]

Parameters	*	Enter the asterisk character * to send a message to all tty lines.
	line	Send a message to a specific line.Range: 0 to 11
	aux	Enter the keyword aux to send a message to an Auxiliary line.Note: This option is supported on E-Series only.
	console	Enter the keyword console to send a message to the Primary terminal line.
	vty	Enter the keyword vty to send a message to the Virtual terminal

Defaults
No default behavior or values

Command Modes
EXEC
Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

Version 6.5.1.0 Introduced on E-Series

Usage Information
Messages can contain an unlimited number of lines, however each line is limited to 255 characters. To move to the next line, use the . To send the message use CTR-Z, to abort a message use CTR-C.

service timestamps

Add time stamps to debug and log messages. This command adds either the uptime or the current time and date.

Syntax
service timestamps [debug | log] [datetime [localtime] [msec] [show-timezone] | uptime]
To disable timestamping, use the no service timestamps [debug | log] command.
Parameters

debug	(OPTIONAL) Enter the keyword debug to add timestamps to debug messages.
log	(OPTIONAL) Enter the keyword log to add timestamps to log messages with severity 0 to 6.
datetime	(OPTIONAL) Enter the keyword datetime to have the current time and date added to the message.
localtime	(OPTIONAL) Enter the keyword localtime to include the localtime in the timestamp.
msec	(OPTIONAL) Enter the keyword msec to include milliseconds in the timestamp.
show-timezone	(OPTIONAL) Enter the keyword show-timezone to include the time zone information in the timestamp.
uptime	(OPTIONAL) Enter the keyword uptime to have the timestamp based on time elapsed since system reboot.

Defaults	Not configured.
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	E-Series original Command
Usage Information	If you do not specify parameters and enter service timestamps, it appears as service timestamps debug uptime in the running-configuration.
	Use the show running-config command to view the current options set for the service timestamps command.

show alarms

View alarms for the RPM, SFMs, line cards and fan trays.

Syntax

show alarms [threshold]

Parameters

threshold (OPTIONAL) Enter the keyword threshold to display the temperature thresholds set for the line cards, RPM, and SFMs.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

E-Series Example

Figure 4-9. Command Example: show alarms on E-Series

FTOS# show alarms
-- Minor Alarms --
Alarm Type	Duration
RPM 0 PEM A failed or rmvd	7 hr, 37 min
SFM 0 PEM A failed or rmvd	7 hr, 37 min
SFM 1 PEM A failed or rmvd	7 hr, 37 min
SFM 2 PEM A failed or rmvd	7 hr, 37 min
SFM 3 PEM A failed or rmvd	7 hr, 37 min
SFM 4 PEM A failed or rmvd	7 hr, 37 min
SFM 5 PEM A failed or rmvd	7 hr, 37 min
SFM 6 PEM A failed or rmvd	7 hr, 37 min
SFM 7 PEM A failed or rmvd	7 hr, 36 min
line card 1 PEM A failed or rmvd	7 hr, 36 min
line card 4 PEM A failed or rmvd	7 hr, 36 min
only 8 SFMs in chassis	7 hr, 35 min
-- Major Alarms --
Alarm Type	Duration
No major alarms
FTOS#

show chassis

View the configuration and status of modules in the system. Use this command to determine the chassis mode.

Syntax

show chassis [brief]

Parameters

brief (OPTIONAL) Enter the keyword brief to view a summary of the show chassis output.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

Example

Figure 4-10. Command Example: show chassis brief on E-Series

-- Line cards --
Slot Status			NxtBoot	ReqTyp	CurTyp	Version	Ports
0	not present
1	not present
2	not present
3	not present
4	not present
5	not present
6	not present
7	not present
8	not present
9	not present
10	not present
11	online		online	E48PF	E48PF	6.1.1.0	48
12	not present			E48PF
13	not present			E48PF
-- Route Processor Modules --
Slot Status			NxtBoot	Version
0	active		online	6.1.1.0
1	not present
Switch Fabric State: up
-- Switch Fabric Modules --
Slot Status
0	active
1	active
2	active
3	active
4	active
5	active
6	active
7	active
8	active
-- Power Entry Modules --
Bay Status
0 up 1 up
-- Fan Status -- Tray Status Temp Volt Speed PEMO PEM1 Fan1 Fan2 Fan3
0 up < 50C 12-16V low/2100-2700 RPM up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up UpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUPUP UP U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P UP U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U P U FAN3 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100

Related Commands

show linecard View line card status

show rpm View Route Processor Module status.

show sfm View Switch Fabric Module status.

show command-history

Display a buffered log of all commands entered by all users along with a time stamp.

Syntax

show command-history

Defaults

None.

Command Mode

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series and E-Series

Usage Information

One trace log message is generated for each command. No password information is saved to this file. A command-history trace log is saved to a file upon an RPM failover. This file can be analyzed by the Dell Networking TAC to help identify the root cause of an RPM failover.

Example

Figure 4-11. Command Example: show command-history

FTOS#show command-history

[11/20 15:47:22]: CMD-(CLI):[service password-encryption]by default from console

[11/20 15:47:22]: CMD-(CLI):[service password-encryption hostname FTOS]by default from console

- Repeated 3 times.

[11/20 15:47:23]: CMD-(CLI):[service timestamps log datetime]by default from console

[11/20 15:47:23]: CMD-(CLI):[hostname FTOS]by default from console

[11/20 15:47:23]: CMD-(CLI):[enable password 7 *****]by default from console

[11/20 15:47:23]: CMD-(CLI):[username admin password 7 *****]by default from console

[11/20 15:47:23]: CMD-(CLI):[enable restricted 7 *****]by default from console

[11/20 15:47:23]: CMD-(CLI):[protocol spanning-tree rstp]by default from console

[11/20 15:47:23]: CMD-(CLI):[protocol spanning-tree pvst]by default from console

[11/20 15:47:23]: CMD-(CLI):[no disable]by default from console

[11/20 15:47:23]: CMD-(CLI):[interface gigabitethernet 0/1]by default from console

[11/20 15:47:23]: CMD-(CLI):[ip address 1.1.1.1 /24]by default from console

[11/20 15:47:23]: CMD-(CLI):[ip access-group abc in]by default from console

[11/20 15:47:23]: CMD-(CLI):[no shutdown]by default from console

[11/20 15:47:23]: CMD-(CLI):[interface gigabitethernet 0/2]by default from console

[11/20 15:47:23]: CMD-(CLI):[no ip address]by default from console

[11/20 15:47:23]: CMD-(CLI):[shutdown]by default from console

[11/20 15:47:23]: CMD-(CLI):[interface gigabitethernet 0/3]by default from console

[11/20 15:47:23]: CMD-(CLI):[ip address 5.5.5.1 /24]by default from console

[11/20 15:47:23]: CMD-(CLI):[no shutdown]by default from console

[11/20 15:47:23]: CMD-(CLI):[interface gigabitethernet 0/4]by default from console

[11/20 15:47:23]: CMD-(CLI):[no ip address]by default from console

[11/20 15:47:23]: CMD-(CLI):[shutdown]by default from console

[11/20 15:47:23]: CMD-(CLI):[interface gigabitethernet 0/5]by default from console

[11/20 15:47:23]: CMD-(CLI):[no ip address]by default from console

[11/20 15:47:23]: CMD-(CLI):[shutdown]by default from console

[11/20 21:17:35]: CMD-(CLI):[line console 0]by default from console

[11/20 21:17:36]: CMD-(CLI):[exec-timeout 0]by default from console

[11/20 21:17:36]: CMD-(CLI):[exit]by default from console

[11/20 21:19:25]: CMD-(CLI):[show command-history]by default from console

FTOS#

Related Commands

clear command history

Clear the command history log.

show command-tree

Display the entire CLI command tree, and optionally, display the utilization count for each commands and its options.

Syntax show command-tree [count | no]

Parameters	count	Display the command tree with a usage counter for each command.
	no	Display all of the commands that may be preceded by the keyword no, which is the keyword used to remove a command from the running-configuration.

Defaults None

Command Mode	EXEC
	EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.2.1.0 Introduced

Usage Information Reload the system to reset the command-tree counters.

Example	FTOS#show command-tree count!Enable privilege mode:
	enable<0-15>	command usage:3option usage:	0
	exit	command usage:1
	show command-treecount	command usage:9option usage:	3
	show version!Global configuration mode:	command usage:1
	aaa authentication enableWORD	command usage:1option usage:	1
	default	option usage:	0
	enable	option usage:	0
	line	option usage:	0
	none	option usage:	0
	radius	option usage:	1
	tacacs+	option usage:	0

show console lp

View the buffered boot-up log of a line card.

Syntax show console lp number

Parameters	number	Enter the line card slot number.
		Range: 0–7 for the C300
		Range: 0–13 for the E1200
		Range: 0–6 for the E600
		Range: 0–5 for the E300
Defaults	None
Command Mode	EXEC
	EXEC Privilege
Command History	Version 7.5.1.0 Introduced on C-Series
	E-Series original Command
Usage Information	Caution: Use this command only when you are working directly with a technical support representative to troubleshoot a problem. Do not use this command unless a technical support representative instructs you to do so.

show cpu-traffic-stats

View the CPU traffic statistics.

Syntax

show cpu-traffic-stats [port number | all | cp | linecard {all | slot#} | rp1 | rp2 ]

Parameters

port number	(OPTIONAL) Enter the port number to display traffic statistics on that port only. Range: 1 to 1568
all	(OPTIONAL) Enter the keyword all to display traffic statistics on all the interfaces receiving traffic, sorted based on traffic.
cp	(OPTIONAL) Enter the keyword cp to display traffic statistics on the specified CPU.Note: This option is supported on E-Series only.
linecard	(OPTIONAL) Enter the keyword linecard followed by either all or the slot number to display traffic statistics on the designated line card.Note: This option is supported on C-Series only.
rp1	(OPTIONAL) Enter the keyword rp1 to display traffic statistics on the RP1.Note: This option is supported on E-Series only.
rp2	(OPTIONAL) Enter the keyword rp2 to display traffic statistics on the RP2.Note: This option is supported on E-Series only.

Defaults all

Command Modes

EXEC

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

Version 6.2.1.1 Introduced on E-Series

E-Series Example

Figure 4-12. Command Example: show cpu-traffic-stats on the E-Series

FTOS#show cpu-traffic-stats Processor: CP
Received 100% traffic on GigabitEthernet 8/2 LLC:0, SNAP:0, IP:100, ARP:0, other:0 Unicast:100, Multicast:0, Broadcast:0	Total packets:100
Processor: RP1
Received 62% traffic on GigabitEthernet 8/2 LLC:0, SNAP:0, IP:500, ARP:0, other:0 Unicast:500, Multicast:0, Broadcast:0	Total packets:500
Received 37% traffic on GigabitEthernet 8/1 LLC:0, SNAP:0, IP:300, ARP:0, other:0 Unicast:300, Multicast:0, Broadcast:0	Total packets:300
Processor: RP2
No CPU traffic statistics. FTOS#

Usage Information

Traffic statistics are sorted on a per-interface basis; the interface receiving the most traffic is displayed first. All CPU and port information is displayed unless a specific port or CPU is specified. Traffic information is displayed for router ports only; not for management interfaces. The traffic statistics are collected only after the debug cpu-traffic-stats command is executed; not from the system bootup.

Note: After debugging is complete, use the no debug cpu-traffic-stats command to shut off traffic statistics collection.

Related Commands

debug cpu-traffic-stats Enable CPU traffic statistics for debugging

show debugging

View a list of all enabled debugging processes.

Syntax

show debugging

Command Mode

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

Example

Figure 4-13. Command Example: show debugging

show environment (C-Series and E-Series)

View the system component status (for example, temperature, voltage).

Syntax

show environment [all | fan | linecard | linecard-voltage | PEM | RPM | SFM]

Parameters

all Enter the keyword all to view all components.
fan	Enter the keyword fan to view information on the fans. The output of this command is chassis dependent. See Figure 4-10, Figure 4-11, and Figure 4-12 for a comparison of output.
linecard	Enter the keyword linecard to view only information on line cards
linecard-voltage	Enter the keyword linecard-voltage to view line card voltage information.
PEM	Enter the keyword pem to view only information on power entry modules.
RPM Enter the keyword rpm to view only information on RPMs.
SFM Enter the keyword sfm to view only information on SFMs. Note: This option is supported on E-Series only.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.8.1.0 Added temperature information for C-Series fans

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

Usage Information

Fan speed is controlled by temperatures measured at the sensor located on the fan itself. The fan temperatures shown with this command may not accurately reflect the temperature and fan speed. Refer to your hardware installation guide for fan speed and temperature information.

Examples

Figure 4-14. Command Example: show environment

FTOS#show environment
-- Fan Status --
Status Temp Fan1 Fan2 Fan3 Serial Num Version
up 32C 6000 RPM 6000 RPM 7500 RPM FX000040889 3.2
-- Power Supplies --
Bay Status
0 absent
1 up
2 up
3 up
-- Line Card Environment Status --
Slot Status Temp Voltage
0 not present
1 online 66C ok
2 not present
3 online 59C ok
4 online 64C ok
5 not present
6 online 59C ok
-- RPM Environment Status --
Slot Status Temp Voltage
0 active 36C ok
1 not present
-- SFM Environment Status --FTOS#

Figure 4-15. Command Example: show environment fan

FTOS#show environment fan
-- Fan Status --
Status	Temp	Fan1	Fan2	Fan3	Serial Num	Version
up	32C	6000 RPM	6000 RPM	6000 RPM	FX000040889	3.2

show environment (S-Series)

S View S-Series system component status (for example, temperature, voltage).

Syntax show environment [all | fan | stack-unit unit-id | pem | thermal-sensor]

Parameters

all Enter the keyword all to view all components.
fan	Enter the keyword fan to view information on the fans. The output of this command is chassis dependent.
stack-unit unit-id	Enter the keyword stack-unit followed by the unit-id to display information on a specific stack member.Unit ID range:S55: 0-11all other S-Series: 0-7

Command Modes

pem	Enter the keyword pem to view only information on power entry modules.
thermal-sensor	Enter the keyword thermal-sensor to view only information on the thermal sensors.

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 The output of the show environment fan command for S-Series is changed to display fan speeds instead of just showing the fan status as up or down.

Version 7.6.1.0 Introduced for S-Series. S-Series options and output differ from the C-Series/E-Series version.

Example

Figure 4-16. Command Example: show environment on the S55

FTOS#show environment
-- Fan Status --
Status Temp Fan1 Fan2 Fan3 Serial Num Version
up 32C 6000 RPM 6000 RPM 7500 RPM FX000040889 3.2
-- Power Supplies --
Bay Status
0 absent
1 up
2 up
3 up
-- Line Card Environment Status --
Slot Status Temp Voltage
0 not present
1 online 66C ok
2 not present
3 online 59C ok
4 online 64C ok
5 not present
6 online 59C ok
-- RPM Environment Status --
Slot Status Temp Voltage
0 active 36C ok
1 not present
-- SFM Environment Status --FTOS#FTOS#

Example

Figure 4-17. Command Example: show environment fan

FTOS#show environment fan
-- Fan Status --
Status	Temp	Fan1	Fan2	Fan3	Serial Num	Version
up	32C	6000 RPM	6000 RPM	6000 RPM	FX000040889	3.2

Example

Figure 4-18. Command Example: show environment pem

FTOS#show environment pem
-- Power Supplies --
Unit	Bay	Status	Type
0	0	up	AC
0	1	absent

Example

Figure 4-19. Command Example: show environment stack-unit

FTOS#show environment stack-unit 0

-- Unit Environment Status --

Unit Status Temp Voltage

0* online 49C ok

* Management Unit

Example

Figure 4-20. Command Example: show environment thermal-sensor

FTOS#show environment thermal-sensor
-- Thermal Sensor Readings (deg C) --
Unit	Sensor0	Sensor1	Sensor2	Sensor3	Sensor4	Sensor5
0	30	33	36	30	30	32
FTOS#

show inventory (C-Series and E-Series)

Display the chassis type, components (including media), FTOS version including hardware identification numbers and configured protocols.

Syntax

show inventory [media slot]

Parameters

media slot	(OPTIONAL) Enter the keyword media followed by the slot number.
	C-Series Range: 0-7
	E-Series Range: 0 to 13 on a E1200, 0 to 6 on a E600/E600i, and 0 to 5 on a E300

Defaults

No default behavior or values

Command Modes

CONFIGURATION

Command History

8.3.5.3 Updated to support PPID on the S55

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.8.1.0 Output expanded to include SFP+ media in C-Series.

Version 7.7.1.0 Vendor field removed from output of show inventory media.

Version 7.5.1.0 Introduced on C-Series and expanded to include transceiver media

Version 6.2.1.0 Expanded to include Software Protocol Configured field on E-Series

Version 5.3.1.0 Introduced on E-Series

Usage Information

The show inventory media command provides some details about installed pluggable media (SFP, XFP), as shown in Figure 4-23. Use the show interfaces command to get more details about installed pluggable media.

The display output might include a double asterisk ( ^** ) next to the SFMs, for example:

$$ \begin{array}{l l l l l l} \ddots & & \text {CC - E - SFM} * * & 0 0 0 4 8 7 5 & 7 4 9 0 0 0 7 4 1 1 & \text {A} \ 1 & & \text {CC - E - SFM} * * & 0 0 0 4 8 8 9 & 7 4 9 0 0 0 7 4 1 1 & \text {A} \ \dots & & \end{array} $$

The double asterisk generally indicates the SFM's frequency capabilities, indicating either that they are operating at 125 MHz or that the frequency capability, which is stored in an EPROM, cannot be determined.

If there are no fiber ports in the line card, then just the header under show inventory media will be displayed. If there are fiber ports but no optics inserted, then the output will display "Media not present or accessible".

C300 Example

Figure 4-21. Example output of show inventory for C300 (C-Series)

Slot Item	Serial Number	Part Number	Revision
C300	TY000001400	7520029999	04
3 LC-CB-GE-48T	FX000020075	7520036700	01
0 LC-CB-RPM	0060361	7520029300	02
0 CC-C-1200W-AC	N/A	N/A	N/A
1 CC-C-1200W-AC	N/A	N/A	N/A
0 CC-C300-FAN
* - standby
Software Protocol Configured
OSPF
FTOS#

E-Series Example

Figure 4-22. Example output of show inventory for E-Series

Slot Item Serial Number Part Number Rev Piece Part ID Rev Svc Tag Exprs Svc Code
E600i TY000002693 7520023900 03 US-0RVY43-76991-82B-0456 1B2 SVCTGCH 628 458 864 65
1 LC-EH-10GE-10S FX000049121 7520042807 03 N/A N/A N/A
1 LC-PIC0 FX000049647 7490105800 01 N/A N/A N/A
1 LC-PIC1 FX000049650 7490105800 01 N/A N/A N/A
3 LC-EJ-10GE-10S FX000097669 7520047602 A N/A N/A N/A
3 LC-PIC0 FX000047055 7490105800 01 N/A N/A N/A
3 LC-PIC1 FX000048680 7490105800 02 N/A N/A N/A
4 LC-EH-GE-90M FX000046835 7520041702 01 N/A N/A N/A
4 LC-PIC0 FX000046905 7490102401 02 N/A N/A N/A
6 LC-EH-GE-90M FX000044725 7520041702 01 N/A N/A N/A
6 LC-PIC0 FX000044256 7490102401 02 N/A N/A N/A
O LC-EH-RPM FX000056234 7520043401 05 N/A N/A N/A
CC-E-SFM3 VC074300030 7520020001 03 CN-ORVY43-75412-123-0030 003 SVCTG00 628 458 860 16
CC-E-SFM3 VC074300032 7520020001 03 CN-ORVY43-75412-82B-0456 1B2 SVCTG01 628 458 860 17
CC-E-SFM3 VC074300032 7520020001 03 CN-ORVY43-75412-82B-0456 1B2 SVCTG02 628 458 860 18
CC-E-SFM3 0068166 7520020001 03 N/A N/A N/A
CC-E600-250W-AC VC074300032 752002640D 02 N/A N/A N/A
CC-E600-250W-AC VC074300087 75200264D D O N/A N/A N/A
CC-E600-25COW-AC VC737COWO46 752COWO46D D O N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA NA
* - standby
Software Protocol Configured
BGP
MCAST
OSPF
PIM
SNMP

Example

Figure 4-23. Example output of show inventory media slot (partial)

FFTOS#show inventory media 3 Slot Port Type Media Serial Number F10Qualified
...	3 11 SFP 1000BASE-SX U9600L0	Yes
...

Example

Figure 4-24. Example Output of show inventory media

FTOS#show inventory media
Slot	Port	Type	Media	Serial Number	F10Qualified
1	0		Media not present or accessible
1	1		Media not present or accessible
1	2		Media not present or accessible
1	3		Media not present or accessible
1	4		Media not present or accessible
1	5	SFP+	10GBASE-SR AM70PXW	Yes
1	6		Media not present or accessible
1	7		Media not present or accessible
1	8	SFP+	10GBASE-SR AM70W84	Yes
1	9		Media not present or accessible
3	0		Media not present or accessible
3	1		Media not present or accessible
3	2		Media not present or accessible
3	3		Media not present or accessible
3	4		Media not present or accessible
3	5		Media not present or accessible
3	6		Media not present or accessible
3	7		Media not present or accessible
3	8		Media not present or accessible

Related Commands	show interfaces	Display a specific interface configuration.
	show interfaces transceiver	Display the physical status and operational status of an installed transceiver. The output also displays the transceiver's serial number.

show inventory (S-Series)

S Display the S-Series switch type, components (including media), FTOS version including hardware identification numbers and configured protocols.

Syntax show inventory [media slot]

Parameters	media slot (OPTIONAL) Enter the keyword media followed by the stack ID of the stack member for which you want to display pluggable media inventory.
Defaults	No default behavior or values
Command Modes	CONFIGURATION
Command History	Version 8.3.5.3 Updated to support PPID on the S55
	Version 8.3.5.0 Introduced on the S55.
	Version 7.6.1.0 Introduced this version of the command for S-Series. S-Series output differs from E-Series.
Usage	If there are no fiber ports in the unit, then just the header under show inventory media will be displayed. If there are fiber ports but no optics inserted, then the output will display "Media not present or accessible".

Example 1 Figure 4-25. Example output of show inventory for S-Series

FTOS #show inventory
System Type : S4810
System Mode : 1.0
Software Version : E8-3-12-2
Unit Type	Serial Number	Part Number	Rev	Piece Part ID	Rev	Svc Tag	Exprs	Svc Code
* 2 S4810-01-64F	HADL123J20113	7590009602	A	N/A	N/A	N/A	N/A
2 S4810-FWR-AC	H6DL123J20113	7590008502	A	N/A	N/A	N/A	N/A
2 S4810-FAN	N/A	N/A	N/A	N/A	N/A	N/A	N/A
2 S4810-FAN	N/A	N/A	N/A	N/A	N/A	N/A	N/A
* - Management Unit
Software Protocol Configured
FTOS#

Example 2

Figure 4-26. Example Output of show inventory media (S-Series)(partial)

FTOS#show inventory media ?
Slot	Port	Type	Media	Serial Number	F10Qualified
0	0	SFP	1000BASE-SX	P681WK0	Yes
0	1	SFP	1000BASE-SX	PGF3T36	Yes
0	2	SFP	1000BASE-SX	PGF420E	Yes
0	3	SFP	1000BASE-SX	P118HQ2	Yes
0	4	SFP	1000BASE-SX	PGF4244	Yes
0	5	SFP	1000BASE-SX	P5N1BN6	Yes
0	6	SFP	1000BASE-SX	P7529KV	Yes
0	7	SFP	1000BASE-SX	PGC514G	Yes
0	8	SFP	1000BASE-SX	PLE71GD	Yes
0	9	SFP	1000BASE-SX	PLE71NO	Yes
0	10	SFP	1000BASE-SX	PLE71M7	Yes
0	11	SFP	1000BASE-SX	PLE71LL	Yes
0	12	SFP	1000BASE-SX	B320210110	Yes
0	13	SFP	1000BASE-SX	B322237357	Yes
0	14	SFP	1000BASE-SX	P118PGB	Yes
0	15	SFP	1000BASE-SX	PGF425R	Yes
0	16	SFP	1000BASE-SX	PLE71MF	Yes
0	17	SFP	1000BASE-SX	AMEH367	Yes
0	18	SFP	1000BASE-SX	PLE71LZ	Yes
0	19	SFP	1000BASE-SX	PGA531L	Yes
0	20	SFP	1000BASE-SX	PLE71M8	Yes
0	21	SFP	1000BASE-SX	PGC51EM	Yes
0	22	SFP	1000BASE-SX	PLP32BP	Yes
0	23	SFP	1000BASE-SX	AJHG367	Yes
0	24	SFP	1000BASE-SX	P11BWUJ	Yes
0	25	SFP	1000BASE-SX	P741RVM	Yes
0	26	SFP	1000BASE-SX	PGF3T9H	Yes
0	27	SFP	1000BASE-SX	PGC51ZE	Yes
0	28	SFP	1000BASE-SX	PGC525W	Yes
!---- output truncated ----!

Related Commands

show interfaces interface configuration.

show interfaces transceiver

Display the physical status and operational status of an installed transceiver. The output also displays the transceiver’s serial number.

show linecard

Display the line card(s) status.

Syntax

show linecard [number [brief] | all]

Parameters

number	(OPTIONAL) Enter a slot number to view information on the line card in that slot. C-Series Range: 0-7 E-Series Range: 0 to 13 on a E1200, 0 to 6 on a E600, and 0 to 5 on a E300.
all	(OPTIONAL) Enter the keyword all to view a table with information on all present line cards.
brief	(OPTIONAL) Enter the keyword brief to view an abbreviated list of line card information.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.3 Updated to support PPID on the S55

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

E-Series Example

Figure 4-27. Command Example: show linecard on E-Series

-- Line card 0 --
Status : not present

-- Line card 1 --
Status : online
Next Boot : online
Required Type : EXW10SH - 10-port 10GE LAN/WAN PHY line card with SFP+ options 10M CAM (EH)
Current Type : EXW10SH - 10-port 10GE LAN/WAN PHY line card with SFP+ options 10M CAM (EH)
Hardware Rev : Base - 1.4 PP0 - 02 PP1 - 02
Num Ports : 10
Up Time : 18 hr, 42 min
FTOS Version : 8-4-1-317
Jumbo Capable : yes
Boot Flash : A: 2.9.1.1c B: 2.9.2.0E0 [booted]
Memory Size : 1073741824 bytes
Temperature : 65C
Power Status : AC
Voltage : ok
Serial Number : FX000049121
Part Number : 7520042807 Rev 03
Vendor Id : 04
Date Code : 01212010
Country Code : 01
Piece Part ID : N/A
PPID Revision : N/A
Service Tag : N/A
Expr Svc Code : N/A
Last Restart : soft reset
Auto Reboot : enabled

-- Line card 2 --
Status : not present

-- Line card 3 --
Status : online
Next Boot : online
Required Type : EXW10SJ - 10-port 10GE LAN/WAN PHY line card with !---- output truncated ----! 

C-Series Example

Figure 4-28. Command Example: show linecard on C-Series

FTOS#show linecard 11
-- Line card 11 --
Status : online
Next Boot : online
Required Type : E48PF - 48-port GE line card with SFP optics (EF)
Current Type : E48PF - 48-port GE line card with SFP optics (EF)
Hardware Rev : Base - 1.0 PP0 - n/a PP1 - n/a
Num Ports : 48
Up Time : 12 hr, 37 min
FTOS Version : 6.2.1.x
Jumbo Capable : yes
Boot Flash : A: 2.0.3.4 B: 2.0.3.4 [booted]
Memory Size : 268435456 bytes
Temperature : 49C
Power Status : PEM0: absent or down PEM1: up
Voltage : ok
Serial Number :
Part Number : Rev
Vendor Id :
Date Code :
Country Code :
FTOS# 

Table 4-1 list the definitions of the fields shown in Figure 4-27.
Table 4-1. Descriptions for show linecard output

Field Description
Line card	Displays the line card slot number (only listed in show linecard all command output).
Status Displays the line card's status.
Next Boot Displays whether the line card is to be brought online at the next system reload.
Required Type Displays the line card type configured for the slot.The Required Type and Current Type must match. Use the linecard command to reconfigure the line card type if they do not match.
Current Type Displays the line card type installed in the slot.The Required Type and Current Type must match. Use the linecard command to reconfigure the line card type if they do not match.
Hardware Rev Displays the chip set revision.
Num Ports Displays the number of ports in the line card.
Up Time Displays the number of hours and minutes the card is online.
FTOS Version Displays the operating software version.
Jumbo Capable	Displays Yes or No indicating if the line card can support Jumbo frames.
Boot Flash Ver	Displays the two possible Bootflash versions. The [Booted] keyword next to the version states which version was used at system boot.
Memory Size	List the memory of the line card processor.
Temperature	Displays the temperature of the line card.Minor alarm status if temperature is over 65°C.
Power Status	Lists the type of power modules used in the chassis:AC = AC power supplyDC = DC Power Entry Module (PEM)
Voltage	Displays OK if the line voltage is within range.
Serial Number	Displays the line card serial number.
Part Num	Displays the line card part number.
Vendor ID Displays an internal code	which specifies the manufacturing vendor.
Date Code	Displays the line card's manufacturing date.

Figure 4-29. Command Example: show linecard brief

FTOS#show linecard 11 brief
-- Line card 11 --
Status : online
Next Boot : online
Required Type : E48PF - 48-port GE line card with SFP optics (EF)
Current Type : E48PF - 48-port GE line card with SFP optics (EF)
Hardware Rev : Base - 1.0 PP0 - n/a PP1 - n/a
Num Ports : 48
Up Time : 11 hr, 24 min
FTOS Version : 6.1.1.0
Jumbo Capable : yes
FTOS# 

Related Commands

linecard	Pre-configure a line card in a currently empty slot of the system or a different line card type for the slot.
show interfaces linecard	Display information on all interfaces on a specific line card.
show chassis View information on all elements of the system.
show rpm View information on the RPM.
show sfm View information on the SFM.

show linecard boot-information

View the line card status and boot information.

Syntax

show linecard boot-information

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 6.5.1.4 Introduced on E-Series

Example

Figure 4-30. Command Example: show linecard boot-information

FTOS#show linecard boot-information
#	Status	CurType	Serial number	Booted from	Next boot	Cache boot	Boot flash
0	-
1	online	EXW10SH	FX000049121	8-4-1-317	8-4-1-317	A: 8-4-1-213 B:	A: 2.9.1.1c B: 2.9.2.0E0 [b]
2	-
3	online	EXW10SJ	FX000097669	8-4-1-317	8-4-1-317	A: 8-4-1-305 B: invalid	A: 2.9.1.1 [b] B: 2.9.1.1
4	online	E90MH	FX000046835	8-4-1-317	8-4-1-317	A: 8-4-1-213 B: invalid	A: 2.9.1.1 B: 2.9.1.1 [b]
5	-
6	online	E90MH	FX000044725	8-4-1-317	8-4-1-317	A: 8-4-1-213 B: invalid	A: 2.9.1.1 [b] B: 2.9.1.1
FTOS#

Table 4-2 defines the fields in Figure 4-30.
Table 4-2. Descriptions for show linecard boot-information output

Field Description
# Displays the line card slot numbers, beginning with slot 0. The number of slots listed is dependent on your chassis: E-Series: 0 to 13 on a E1200, 0 to 6 on a E600/E600i, and 0 to 5 on a E300.
Status Indicates if a line card is online, offline, or booting. If a line card is not detected in the slot, a hyphen (-) is displayed.
CurType	Displays the line card identification number, for example EXW4PF.
Serial number Displays the line card serial number.
Booted from Indicates whether the line card cache booted or system booted. In addition, the image with which the line card booted is also displayed. If the line card cache booted, then the output is A: or B: followed by the image in the flash partition (A: 6.5.1.4 or B: 6.5.1.4).If the line card system booted, then display is the current FTOS version number (6.5.1.4).
Next boot Indicates if the next line card boot is a cache boot or system boot and which image will be used in the boot.
Cache boot Displays the system image in cache boot flash partition A: and B: for the line card. If the cache boot does not contain a valid image, “invalid” is displayed.
Boot flash Displays the two possible Boot flash versions. The [b] next to the version number is the current boot flash, that is the image used in the last boot.

Usage Information

Related Commands

The display area of this command uses the maximum 80 character length. If your display area is not set to 80 characters, the display will wrap.

show linecard	View the line card status
upgrade (E-Series version)	Upgrade the boot flash, boot selector, or system image
download alt-boot-image	Download an alternate boot image to the chassis
download alt-full-image	Download an alternate FTOS image to the chassis
download alt-system-image	Download an alternate system image to the chassis

show memory (C-Series and E-Series)

View current memory usage on the system.

Syntax
show memory [cp | lp slot-number | rp1 | rp2]

Parameters	cp	(OPTIONAL) Enter the keyword cp to view information on the Control Processor on the RPM.
	lp slot-number	(OPTIONAL) Enter the keyword lp and the slot number to view information on the line-card processor in that slot.C-Series Range: 0-7E-Series Range: 0 to 13 on a E1200/E1200i, 0 to 6 on a E600/E600i, and 0 to 5 on a E300.
	rp1	(OPTIONAL) Enter the keyword rp1 to view information on Route Processor 1 on the RPM.Note: This option is supported on the E-Series only.
	rp2	(OPTIONAL) Enter the keyword rp2 to view information on Route Processor 2 on the RPM.Note: This option is supported on the E-Series only.

Command Modes

EXEC

EXEC Privilege

Command History

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

Usage Information

The output for show memory displays the memory usage of LP part (sysdlp) of the system. The Sysdlp is an aggregate task that handles all the tasks running on C-Series' and E-Series' LP.

In FTOS Release 7.4.1.0 and higher, the total counter size (for all 3 CPUs) in show memory (C-Series and E-Series) and show processes memory (C-Series and E-Series) will differ based on which FTOS processes are counted.

• In the show memory (C-Series and E-Series) display output, the memory size is equal to the size of the application processes.
• In the show processes memory (C-Series and E-Series) display output, the memory size is equal to the size of the application processes plus the size of the system processes.

E-Series Example

Figure 4-31. Command Example: show memory on E-Series

FTOS#show memory
Statistics On CP Processor
Total (b)	Used (b)	Free (b)	Lowest (b)	Largest (b)
452689184	64837834	387851350	387805590	371426976
Statistics On RP1 Processor
Total (b)	Used (b)	Free (b)	Lowest (b)	Largest (b)
629145600	4079544	625066056	625066056	0
Statistics On RP2 Processor
Total (b)	Used (b)	Free (b)	Lowest (b)	Largest (b)
510209568	47294716	462914852	462617968	446275376
FTOS#

Table 4-3 defines the fields displayed in Figure 4-31.
Table 4-3. Descriptions for show memory output

Field Description
Lowest Displays the memory usage the system went to in the lifetime of the system. Indirectly, it indicates the maximum usage in the lifetime of the system: Total minus Lowest.
Largest The current largest available. This relates to block size and is not related to the amount of memory on the system.

show memory (S-Series)

S View current memory usage on the S-Series switch.

Syntax show memory [stack-unit id]

Parameters	stack-unit id	(OPTIONAL) Enter the keyword stack-unit followed by the stack unit ID of the S-Series stack member to display memory information on the designated stack member.Unit ID range:S55: 0-11all other S-Series: 0-7
Command Modes	EXEC
	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.6.1.0 Introduced this version of the command for the S-Series
Usage Information	The output for show memory displays the memory usage of LP part (sysdlp) of the system. The Sysdlp is an aggregate task that handles all the tasks running on the S-Series' CPU.

Example Figure 4-32. Command Example: show memory on S-Series

FTOS#show memory stack-unit 0Statistics On Unit 0 Processor
Total (b)	Used (b)	Free (b)	Lowest (b)	Largest (b)
268435456	4010354	264425102	264375410	264425102

show processes cpu (C-Series and E-Series)

View CPU usage information based on processes running in the system.

Syntax

show processes cpu [cp | rp1 | rp2] [lp [linecard-number [1-99] | all | summary]

Parameters

cp	(OPTIONAL) Enter the keyword cp to view CPU usage of the Control Processor.
rp1	(OPTIONAL) Enter the keyword rp1 to view CPU usage of the Route Processor 1.Note: This option is supported on the E-Series only.
rp2	(OPTIONAL) Enter the keyword rp2 to view CPU usage of the Route Processor 2.Note: This option is supported on the E-Series only.
lp linecard [1-99]	(OPTIONAL) Enter the keyword lp followed by the line card number to display the CPU usage of that line card.The optional 1-99 variable sets the number of tasks to display in order of the highest CPU usage in the past five (5) seconds.
lp all	(OPTIONAL) Enter the keyword lp all to view CPU utilization on all active line cards.
lp summary	(OPTIONAL) Enter the keyword lp summary to view a summary of the line card CPU utilization.

Command Modes

EXEC

EXEC Privilege

Command History

Version 7.5.1.0 Introduced on C-Series
Version 7.4.1.0	Modified: Added the lp all option
Version 6.5.1.0	Modified: The granularity of the output for rp1 and rp2 is changed. The the output is now at the process level, so process-specific statistics are displayed.

Example 1

Figure 4-33. Command Example: show processes cpu (Partial)

FTOS#show processes cpu CPU Statistics On CP Processor
CPU utilization for five seconds: 4%/2%; one minute: 2%; five minutes: 2%
PID	Runtime(ms)	Invoked	uSecs	5Sec	1Min	5Min	TTY	Process
0xd02e4e8	1498633	89918	16666	3.00%	2.67%	2.67%	0	KP
0xd9d4c70	0	0	0	0.00%	0.00%	0.00%	0	tLogTask
0xd9cd200	0	0	0	0.00%	0.00%	0.00%	0	soc_dpc
0xd9bf588	0	0	0	0.00%	0.00%	0.00%	0	tARL
0xd9bd2f8	0	0	0	0.00%	0.00%	0.00%	0	tBCMlink
0xd9bb0e0	700	42	16666	0.00%	0.00%	0.00%	0	tBcmTask
0xd9798d0	106683	6401	16666	0.00%	0.00%	0.00%	0	tNetTask
0xd3368a0	0	0	0	0.00%	0.00%	0.00%	0	tWdbTask
0xd3329b0	166	10	16600	0.00%	0.00%	0.00%	0	tWdtTask
0xd32a8c8	102500	6150	16666	0.00%	0.00%	0.00%	0	tme
0xd16b1d8	12050	723	16666	0.00%	0.00%	0.00%	0	ipc
0xd1680c8	33	2	16500	0.00%	0.00%	0.00%	0	irc
0xd156008	116	7	16571	0.00%	0.00%	0.00%	RpmAvailMgr

Example 2 Figure 4-34. Command Example: show processes cpu rp1

FTOS#show processes cpu rpl
CPU utilization for five seconds: 0%/0%; one minute: 0%; five minutes: 0%
PID	Runtime (ms)	Invoked	uSecs	5Sec	1Min	5Min	TTY	Process
0x0000007c	60	6	10000	0.00%	0.00%	0.00%	0	ospf
0x00000077	460	46	10000	0.00%	0.00%	0.00%	0	dsm
0x00000074	100	10	10000	0.00%	0.00%	0.00%	0	ipml
0x0000006e	180	18	10000	0.00%	0.00%	0.00%	0	rtm
0x0000006b	100	10	10000	0.00%	0.00%	0.00%	0	rip
0x00000068	120	12	10000	0.00%	0.00%	0.00%	0	acl
0x00000064	690	69	10000	0.00%	0.00%	0.00%	0	sysdl
0x00000062	20	2	10000	0.00%	0.00%	0.00%	0	sysmbn
0x00000024	880	88	10000	0.00%	0.00%	0.00%	0	sshd
0x00000022	0	0	0	0.00%	0.00%	0.00%	0	inetd
0x00000020	2580	258	10000	0.00%	0.00%	0.00%	0	mount_mfs
0x00000013	0	0	0	0.00%	0.00%	0.00%	0	mount_mfs
0x00000006	80	8	10000	0.00%	0.00%	0.00%	0	sh
0x00000005	30	3	10000	0.00%	0.00%	0.00%	0	aiodoned
0x00000004	840	84	10000	0.00%	0.00%	0.00%	0	ioflush
0x00000003	250	25	10000	0.00%	0.00%	0.00%	0	reaper
0x00000002	0	0	0	0.00%	0.00%	0.00%	0	pagedaemon
0x00000001	160	16	10000	0.00%	0.00%	0.00%	0	init
0x00000000	700	70	10000	0.00%	0.00%	0.00%	0	swapper
0x00000088	260	26	10000	0.00%	0.00%	0.00%	0	bgp

Example 3 Figure 4-35. Command Example: show processes cpu rp2

FTOS#show processes cpu rp2
CPU utilization for five seconds: 0%/0%; one minute: 0%; five minutes: 0%
PID	Runtime (ms)	Invoked	uSecs	5Sec	1Min	5Min	TTY	Process
0x00000090	140	14	10000	0.00%	0.00%	0.00%	0	vrrp
0x0000008d	120	12	10000	0.00%	0.00%	0.00%	0	fvrp
0x00000088	360	36	10000	0.00%	0.00%	0.00%	0	xslp
0x00000084	60	6	10000	0.00%	0.00%	0.00%	0	span
0x00000083	180	18	10000	0.00%	0.00%	0.00%	0	pim
0x00000080	80	8	10000	0.00%	0.00%	0.00%	0	igmp
0x0000007b	130	13	10000	0.00%	0.00%	0.00%	0	ipm2
0x00000078	700	70	10000	0.00%	0.00%	0.00%	0	mrtm
0x00000074	100	10	10000	0.00%	0.00%	0.00%	0	12mgr
0x00000070	80	8	10000	0.00%	0.00%	0.00%	0	12pm
0x0000006c	80	8	10000	0.00%	0.00%	0.00%	0	arpm
0x00000068	60	6	10000	0.00%	0.00%	0.00%	0	acl2
0x00000064	750	75	10000	0.00%	0.00%	0.00%	0	sysd2
0x00000062	0	0	0	0.00%	0.00%	0.00%	0	sysmbn
0x00000024	880	88	10000	0.00%	0.00%	0.00%	0	sshd
0x00000022	0	0	0	0.00%	0.00%	0.00%	0	inetd
0x00000020	2250	225	10000	0.00%	0.00%	0.00%	0	mount_mfs
0x00000013	0	0	0	0.00%	0.00%	0.00%	0	mount_mfs
0x00000006	100	10	10000	0.00%	0.00%	0.00%	0	sh
0x00000005	0	0	0	0.00%	0.00%	0.00%	0	aiodoned
0x00000004	960	96	10000	0.00%	0.00%	0.00%	0	ioflush
0x00000003	140	14	10000	0.00%	0.00%	0.00%	0	reaper
0x00000002	0	0	0	0.00%	0.00%	0.00%	0	pagedaembn
0x00000001	160	16	10000	0.00%	0.00%	0.00%	0	init
0x00000000	700	70	10000	0.00%	0.00%	0.00%	0	swapper
0x00000098	140	14	10000	0.00%	0.00%	0.00%	0	msdp

Usage Information The CPU utilization for the last five seconds as shown in Figure 4-33 is 4%/2%. The first number (4%) is the CPU utilization for the last five seconds. The second number (2%) indicates the percent of CPU time spent at the interrupt level.

show processes cpu (S-Series)

⑤ Display CPU usage information based on processes running in an S-Series.

Syntax show processes cpu [management-unit 1-99 [details] | stack-unit id | summary | ipc | memory [stack-unit id]]

Parameters

management-unit 1-99 [details]	(OPTIONAL) Display processes running in the control processor. The 1-99 variable sets the number of tasks to display in order of the highest CPU usage in the past five (5) seconds. Add the details keyword to display all running processes (except sysdlp). See Example 3.
stack-unit id	(OPTIONAL) Enter the keyword stack-unit followed by the stack member ID.As an option of show processes cpu, this option displays CPU usage for the designated stack member. See Example 2.Or, as an option of memory, this option limits the output of memory statistics to the designated stack member. See Example 5.Unit ID range:S55: 0-11all other S-Series: 0-7
summary	(OPTIONAL) Enter the keyword summary to view a summary view of CPU usage for all members of the stack. See Example 1.
ipc (OPTIONAL) Enter the keyword ipc to display inter-process communication statistics.
memory	(OPTIONAL) Enter the keyword memory to display memory statistics. See Example 4.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.7.1.0 Modified: Added management-unit [details] keywords.

Version 7.6.1.0 Introduced for S-Series

Example 1
Figure 4-36. Command Example: show processes cpu summary on S-Series

FTOS#show processes cpu summary
CPU utilization 5Sec 1Min 5Min
Unit0	0%	0%	0%
CPU utilization 5Sec 1Min 5Min
Unit1*	1%	0%	0%
Unit2	0%	0%	0%
Unit3	0%	0%	0%
* Mgmt Unit

Example 2

Figure 4-37. Command Example: show processes cpu management-unit on S-Series

FTOS#show processes cpu management-unit 0
CPU utilization for five seconds: 1%/0%; one minute: 10%; five minutes: 2%
PID	Runtime (ms)	Invoked	uSecs	5Sec	1Min	5Min	TTY
Process
272	20	2	10000	0.00%	0.00%	0.00%	0
topoDPC
271	0	0	0	0.00%	0.00%	0.00%	0
bcmNHOP
270	0	0	0	0.00%	0.00%	0.00%	0
bcmDISC
269	0	0	0	0.00%	0.00%	0.00%	0
bcmATP-RX
268	0	0	0	0.00%	0.00%	0.00%	0
bcmATP-TX
267	30	3	10000	0.00%	0.00%	0.00%	0
bcmSTACK
266	380	38	10000	0.00%	0.00%	0.08%	0
bcmRX
265	30	3	10000	0.00%	0.00%	0.00%	0
bcmLINK.0
264	0	0	0	0.00%	0.00%	0.00%	0
bcmXGS3AsyncTX
263	0	0	0	0.00%	0.00%	0.00%	0
bcmTX
262	160	16	10000	0.00%	0.00%	0.00%	0
bcmCNTR.0
260	0	0	0	0.00%	0.00%	0.00%	0
bcmDPC
253	10690	1069	10000	0.00%	10.00%	2.97%	0
sysd
251	2380	238	10000	0.00%	0.00%	0.50%	0
kfldintr
58	30	3	10000	0.00%	0.00%	0.00%	0
sh
36	50	5	10000	0.00%	0.00%	0.00%	0 13 5 3 1
!---- output truncated ----!

Example 3

Figure 4-38. Command Example: show processes cpu stack-unit on S-Series

Figure 4-39. Command Example: show processes memory on S-Series

FTOS#show processes memory
Memory Statistics On Unit 0 Processor (bytes)
====================
start
Total : 160231424, MaxUsed : 130596864 [09/19/2007 03:11:17]
CurrentUsed: 130596864, CurrentFree: 29634560
SharedUsed : 14261872, SharedFree : 6709672
PID Process ResSize Size Allocs Frees Max
Current
124 KernLrnAgMv 140410880 0 0 0 0
0
117 frrp 5677056 217088 87650 0 87650
87650
116 xstp 7585792 1536000 551812 49692 518684
502120
109 span 5709824 221184 55386 0 55386
55386
108 pim 5869568 720896 12300 0 12300
12300
103 igmp 5513216 327680 18236 16564 18236
1672
100 mrtm 6905856 516096 72846 0 72846
72846
96 l2mgr 6107136 491520 254858 115948 172038
138910
92 l2pm 5607424 221184 667578 579740 120966
87838
86 arpm 5353472 208896 54528 16564 54528
37964
83 ospf 4210688 475136 0 0 0
0
80 dsm 6057984 552960 22838 0 22838
22838

Example 5

Figure 4-40. Command Example: show processes memory stack-unit on S-Series

FTOS#show processes memory stack-unit 0
Memory Statistics On Unit 0 Processor (bytes)
----
start
Total : 160231424, MaxUsed : 130596864 [09/19/2007 03:11:17]
CurrentUsed: 130560000, CurrentFree: 29671424
SharedUsed : 14261872, SharedFree : 6709672
PID Process	ResSize	Size	Allocs	Frees	Max
Current
124 KernLrnAgMv	140410880	0	0	0	0
0
117 frrp	5677056	217088	87650	0	87650
87650
116 xstp	7585792	1536000	551812	49692	518684
502120
109 span	5709824	221184	55386	0	55386
55386
108 pim	5869568	720896	12300	0	12300
12300
103 igmp	5513216	327680	18236	16564	18236
1672
100 mrtm	6905856	516096	72846	0	72846
72846

Related Commands

show hardware layer2 acl	Display Layer 2 ACL data for the selected stack member and stack member port-pipe.
show hardware layer3	Display Layer 3 ACL or QoS data for the selected stack member and stack member port-pipe.
show hardware stack-unit	Display the data plane or management plane input and output statistics of the designated component of the designated stack member.
show hardware system-flow	Display Layer 3 ACL or QoS data for the selected stack member and stack member port-pipe.
show interfaces stack-unit	Display information on all interfaces on a specific S-Series stack member.
show processes memory (S-Series)	Display CPU usage information based on processes running in an S-Series

show processes ipc flow-control

Display the Single Window Protocol Queue (SWPQ) statistics.

Syntax

show processes ipc flow-control [cp | rp1 | rp2 | lp linecard-number]

Parameters

cp	(OPTIONAL) Enter the keyword cp to view the Control Processor's SWPQ statistics.
rp1	(OPTIONAL) Enter the keyword rp1 to view the Control Processor's SWPQ statistics on Route Processor 1.*
rp2	(OPTIONAL) Enter the keyword rp2 to view the Control Processor's SWPQ statistics on Route Processor 2.*
lp linecard-number	(OPTIONAL) Enter the keyword lp followed by the line card number to view the Control Processor's SWPQ statistics on the specified line card.*

* In the S-Series, this command supports only the cp keyword, not the rp1, rp2, and lp options. See Figure 4-45.

Defaults

No default values or behavior

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series and E-Series

Example 1 Figure 4-41. Command Example: show processes ipc flow-control from C-Series

FTOS# show processes ipc flow-control cp
Q Statistics on CP Processor
TxProcess	RxProcess		Cur Len	High Mark	Time Out	Retries	Msg Sent	Ack Rcvd	Aval Retra	Max Retra
ACL0	RTM0	0	0	0	0	0	0	10	10
ACL0	DIFFSERV0		0	0	0	0	0	0	10	10
ACL0	IGMP0		0	0	0	0	0	0	10	10
ACL0	PIM0		0	0	0	0	0	0	10	10
ACL0	ACL20		0	1	0	0	2	2	50	50
CFG0	CFGDATASYNCO		0	2	0	0	7	7	255	255
DHCP0	ACL0		0	1	0	0	9	9	25	25
DHCP0	IFMGR0		0	0	0	0	0	0	25	25
RTM0	ARPMGRO		0	1	0	0	1	1	136	136
ACL20	IGMP0		0	0	0	0	0	0	50	50
LACP0	IFMGR0		0	2	0	0	4	4	25	25
ARPMGRO	MRTM0		0	0	0	0	0	0	100	100
ACL20	PIMO		0	0	0	0	0	0	50	50
MACMGRO	ACL0		0	1	0	0	1	1	25	25
TCLASSMGR.0 IFMGRO

Example 2 Figure 4-42. Command Example: show processes ipc flow-control rp from E-Series

FTOS# show processes ipc flow-control cp
Q Statistics on CP Processor
TxProcess	RxProcess	Cur Len	High Mark	Time Out	Retries	Msg Sent	Ack Rcvd	Aval Retra	Max Retra
DHCP0	ACL0	0	1	0	0	6	6	25	25
DHCP0	IFMGR0	0	0	0	0	0	0	25	25
IFMGR0	FEFD0	0	3	0	0	27	27	8	8
IFMGR0	IPMGR0	0	6	0	0	44	44	8	8
IFMGR0	SNMP0	0	1	0	0	16	16	8	8
IFMGR0	SFL_CPO	0	4	0	0	31	31	8	8
IFMGR0	EVENTTERMLOGO	0	1	0	0	6	6	8	8
IFMGR0	PORTMIRRO	0	0	0	0	0	0	8	8
IFMGR0	DHCP0	0	1	0	0	6	6	8	8
IFMGR0	TCLASSMGR0	0	2	0	0	13	13	8	8
IFMGR0	VRRP0	0	3	0	0	25	25	8	8
IFMGR0	MRTMO	0	2	0	0	21	21	8
TCLASSMGR0	ARPMGRO	0	0	0	0

Table 4-4 list the definitions of the fields shown in Figure 4-41 and Figure 4-42.
Table 4-4. Description of show processes ipc flow-control cp output

Field Description
Source QID /Tx Process Source Service Identifier
Destination QID/Rx Process Destination Service Identifier
Cur Len Current number of messages enqueued
High Mark Highest number of packets in the queue at any point of time
#of to / Timeout Timeout count
#of Retr /Retrics Number of retransmissions
#msg Sent/Msg Sent/ Number of messages sent
#msg Ackd/Ack Revd Number of messages acknowledged
Retr /Available Retra Number of retries left
Total/ Max Retra Number of retries allowed

Example 2 Figure 4-43. Command Example: show processes ipc flow-control rp

FTOS# show processes ipc flow-control rp2
[qid] Source->Dest	Cur Len	High Mark	#of to	#of Retr	#msg Sent	#msg Ackd	Retr total
[1] unknown2->unknown2	0	0	0	0	0	0	3	3
[2] 12pm0->spanMgr0	0	2	0	0	2298	2298	25	25
[3] fvrp0->macMgr0	0	0	0	0	0	0	25	25
[4] 12pm0->fvrp0	0	2	0	0	1905	1905	25	25
[5] fvrp0->12pm0	0	0	0	0	0	0	25	25
[6] stp0->12pm0	0	0	0	0	0	0	25	25
[7] spanMgr0->macMgr0	0	0	0	0	0	0	25	25
[8] spanMgr0->ipMgr0	0	0	0	0	0	0	25	25

Example 3 Figure 4-44. Command Example: show processes ipc flow-control Ip

FTOS#show processes ipc flow-control lp 10 Q Statistics on LP 10
	TxProcess	RxProcess	Cur Len	High Mark	Time Out	Retries	Msg Sent	Ack Rcvd	Aval Retra	Max Retra
ACL_AGENT10		PIM0	0	0	0	0	0	0	20	20
ACL_AGENT10		PIM0	0	0	0	0	0	0	20	20
FRRPAGT10		FRRP0	0	0	0	0	0	0	30	30
IFAGT10		IFMGRO	0	1	0	0	1	1	8	8
LPDMACAGENT10		MACMGR0	0	0	0	0	0	0	25	25
FTOS#

Example 4 Figure 4-45. Command Example: show processes ipc flow-control on S-Series

Usage Information The Single Window Protocol (SWP) provides flow control-based reliable communication between the sending and receiving software tasks.

Important Points to Remember

• A sending task enqueues messages into the SWP queue3 for a receiving task and waits for an acknowledgement.
• If no response is received within a defined period of time, the SWP timeout mechanism resubmits the message at the head of the FIFO queue.
• After retrying a defined number of times, the following timeout message is generated:
  SWP-2-NOMORETIMEOUT
• In the display output in Figure 4-45, a retry (Retries) value of zero indicates that the SWP mechanism reached the maximum number of retransmissions without an acknowledgement.

show processes memory (C-Series and E-Series)

View memory usage information based on processes running in the system.

Syntax
show processes memory [cp | lp slot-number {lp all | lp summary} | rp1 | rp2]
Parameters

cp	(OPTIONAL) Enter the keyword cp to view memory usage of the Control Processor.
lp slot-number	(OPTIONAL) Enter the keyword lp and the slot number to view information on the line-card processor in that slot.C-Series Range: 0-7E-Series Range: 0 to 13 on a E1200/E1200i, 0 to 6 on a E600/E600i, and 0 to 5 on a E300.
lp all	(OPTIONAL) Enter the keyword lp all to view CP memory usage on all active line cards.
lp summary	(OPTIONAL) Enter the keyword lp summary to view a summary of the line card CP memory usage.
rp1	(OPTIONAL) Enter the keyword rp1 to view memory usage of the Route Processor 1.Note: This option is supported on the E-Series only.
rp2	(OPTIONAL) Enter the keyword rp2 to view memory usage of the Route Processor 2.Note: This option is supported on the E-Series only.

Command Modes
EXEC

EXEC Privilege
Command History

Version 8.1.1.2 Introduced on E-Series ExaScale E600i
Version 8.1.1.0 Introduced on E-Series ExaScale E1200i
Version 7.5.1.0 Introduced on C-Series
Version 7.4.1.0	Added lp all and lp summary options
Version 6.5.1.0	For rp1 and rp2 only, the output displays memory consumption of all the processes including a summary (see Figure 4-47 and Figure 4-48.

Usage Information

The output for show process memory displays the memory usage statistics running on CP part (sysd) of the system. The Sysd is an aggregate task that handles all the tasks running on C-Series' and E-Series' CP.

In FTOS Release 7.4.1.0 and higher, the total counter size (for all 3 CPUs) in show memory and show processes memory will differ based on which FTOS processes are counted.

• In the show memory (C-Series and E-Series) display output, the memory size is equal to the size of the application processes.
• In the show processes memory (C-Series and E-Series) display output, the memory size is equal to the size of the application processes plus the size of the system processes.

Example Figure 4-46. Command Example: show processes memory (partial)

FTOS#show processes memory Memory Statistics On CP Processor (bytes)
Total: 452689184, MaxUsed:		64886986, CurrentUsed:		64873866, Current
TaskName	TotalAllocated	TotalFreed	MaxHeld	CurrentHolding
tRootTask	39083408	1395840	38143920	37687568
tARL	64	0	64	64
tBcmTask	256	0	256	256
tPortmapd	18560	0	18560	18560
tShell	3440	0	3440	3440
tPingTmo0	0	1088	0	0
tExcTask	0	592864	0	0
tme	4002494	192	4002302	4002302
ipc	34060	192	34060	33868
irc	943436	0	943436	943436
RpmAvailMgr	9376	32	9344	9344
ev	133188	0	133188	133188
evterm	26752	0	26752	26752
evhdlr	2528	8064	2528	0
dlm	7556256	7366960	1239104	189296
dla	416	0	416	416
tsm	15136	0	15136	15136
fmg	766560	0	766560	766560
fileProc	416	0	416	416
sysAdmTsk	42028	0	42028	42028

Example Figure 4-47. Command Example: show processes memory rp1

FTOS#show processes memory rp1
Total : 954650624, MaxUsed : 114135040 [3/8/2006 15:1:42]
CurrentUsed: 114135040, CurrentFree: 840515584
SharedUsed : 7849096, SharedFree : 13122448
PID	Process	ResSize	Size	Allocs	Frees	Max	Current
124	ospf	3215360	425984	0	0	0	0
119	dsm	7749632	1859584	797026	0	797026	797026
114	ipml	3821568	229376	297324	0	297324	297324
112	rtm	4722688	421888	925008	0	925008	925008
107	rip	3731456	253952	198216	0	198216	198216
104	acl	4734976	430080	1127524	0	1127524	1127524
100	sysdl	11636736	2019328	965798	0	965798	965798
98	sysmon	528384	94208	0	0	0	0
36	sshd	1286144	430080	0	0	0	0
34	inetd	663552	98304	0	0	0	0
32	mount_mfs	42397696	2514944	0	0	0	0
19	mount_mfs	364544	2449408	0	0	0	0
6	sh	446464	737280	0	0	0	0
5	aiodoned	76529664	0	0	0	0	0
4	ioflush	76529664	0	0	0	0	0
3	reaper	76529664	0	0	0	0	0
2 pagedaemon		76529664

Figure 4-48. Command Example: show processes memory rp2

FTOS#show processes memory rp2
Total : 953700352, MaxUsed : 149417984 [3/8/2006 12:33:6]
CurrentUsed: 149417984, CurrentFree: 804282368
SharedUsed : 7847200, SharedFree : 13124344
PID	Process	ResSize	Size	Allocs	Frees	Max	Current
145	vrrp	3870720	266240	297324	0	297324	297324
141	fvrp	4472832	204800	797010	0	797010	797010
138	xstp	10764288	7155712	367534	0	367534	367534
133	span	4136960	167936	565810	0	565810	565810
132	plm	6664192	516096	2812528	0	2812528	2812528
128	igmp	4112384	344064	627684	0	627684	627684
124	ipm2	3923968	237568	363396	0	363396	363396
120	mrtm	25567232	593920	697790	0	697790	697790
116	12mgr	4579328	520192	830098	0	830098	830098
112	12pm	3874816	225280	367446	32948	367446	334498
108	arpm	3702784	208896	268420	0	268420	268420
104	acl2	3485696	94208	132144	0	132144	132144
100	sysd2	11657216	1679360	998834	0	998834	998834
98	sysmon	528384	94208	0	0	0	0
36	sshd	1286144	430080	0	0	0	0
34	inetd	663552	98304	0	0	0	0
32	mount_mfs	41791488	2514944	0	0	0	0
19	mount_mfs	364544	2449408	0	0	0	0
6	sh	446464	737280	0	0	0	0
5	aiodoned	76967936	0	0	0	0	0
4	ioflush	76967936	0	0	0	0	0
3	reaper	76967936	0	0	0	0	0
2	pagedaemon	76967936	0	0	0	0	0
1	init	139264	2375680	0	0	0	0
0	swapper	76967936	0	0	0	0	0
FTOS#

Table 4-5 defines the fields that appear in the show processes memory output.

Table 4-5. Descriptions of show processes memory rp1/rp2 output

Field Description
Total: Total system memory available
MaxUsed: Total maximum memory used ever (history indicated with time stamp)
CurrentUsed: Total memory currently in use
CurrentFree: Total system memory available
SharedUsed: Total used shared memory
SharedFree: Total free shared memory
PID	Process ID
Process	Process Name
ResSize	Actual resident size of the process in memory
Size	Process test, stack, and data size
Allocs	Total dynamic memory allocated
Frees	Total dynamic memory freed
Max	Maximum dynamic memory allocated
Current	Current dynamic memory in use

show processes memory (S-Series)

Display memory usage information based on processes running in the S-Series system.

Syntax
show processes memory {management-unit | stack unit {0-7| all | summary}}

Parameters	management-unit	Enter the keyword management-unit for CPU memory usage of the stack management unit.
	stack unit 0–7	Enter the keyword stack unit followed by a stack unit ID of the member unit for which to display memory usage on the forwarding processor.
	all	Enter the keyword all for detailed memory usage on all stack members.
	summary	Enter the keyword summary for a brief summary of memory availability and usage on all stack members.

Command Modes
EXEC
EXEC Privilege
Command History
Version 8.3.5.0 Introduced on the S55.
Version 7.7.1.0 Modified: Added management-unit option
Version 7.6.1.0 Introduced on S-Series

Usage The output for show process memory displays the memory usage statistics running on CP part (sysd) of Information the system. The Sysd is an aggregate task that handles all the tasks running on S-Series' CP.

For S-Series, the output of show memory and this command will differ based on which FTOS processes are counted.

• In the show memory display output, the memory size is equal to the size of the application processes.
• In the output of this command, the memory size is equal to the size of the application processes plus the size of the system processes.

Example
Figure 4-49. Command Example: show processes memory on S-Series

FTOS#show processes memory stack-unit 0
Total: 268435456, MaxUsed: 2420244, CurrentUsed: 2420244, CurrentFree: 266015212
TaskName	TotalAllocated	TotalFreed	MaxHeld	CurrentHolding
tme	435406	397536	54434	37870
ipc	16652	0	16652	16652
timerMgr	33304	0	33304	33304
sysAdmTsk	33216	0	33216	33216
tFib4	1943960	0	1943960	1943960
aclAgent	90770	16564	74206	74206
ifagt_1	21318	16564	21318	4754
dsagt	6504	0	6504	6504
MacAgent	269778	0	269778	269778

Figure 4-50. Command Example: show processes memory management-unit

FTOS#show processes management-unit
Total : 151937024, MaxUsed : 111800320 [2/25/2008 4:18:53]
CurrentUsed: 98848768, CurrentFree: 53088256
SharedUsed : 13007848, SharedFree : 7963696
PID Process ResSize Size Allocs Frees Max Current
337 KernLrnAgMv 117927936 0 0 0 0 0
331 vrrp 5189632 249856 50572 0 50572 50572
323 frrp 5206016 241664 369238 0 369238 369238
322 xstp 7430144 2928640 38328 0 38328 38328
321 pim 5267456 823296 62168 0 62168 62168
314 igmp 4960256 380928 18588 16564 18588 2024
313 mrtm 6742016 1130496 72758 0 72758 72758
308 l2mgr 5607424 552960 735214 380972 619266 354242
301 l2pm 5001216 167936 1429522 1176044 286606 253478
298 arpm 4628480 217088 71092 33128 71092 37964
294 ospf 5468160 503808 724204 662560 78208 61644
288 dsm 6778880 1159168 39490 16564 39490 22926
287 rtm 5713920 602112 442280 198768 376024 243512
284 rip 4562944 258048 528 0 528 528
281 lacp 4673536 266240 221060 0 221060 221060
277 ipml 4837376 380928 83788 0 83788 83788
273 acl 5005312 512000 239564 149076 123616 90488
272 topoDPC 117927936 0 0 0 0
271 bcmNHOP 117927936 0
270 bcmDISC 117927936
269 bcmATP-RX	117927936
268 bcmATP-TX	117927936
267 bcmSTACK	117927936
266 bcmRX	117927936
265 bcmLINK.0	117927936
!---- output truncated ----!

Table 4-6 defines the fields that appear in the show processes memory output.

Table 4-6. Descriptions of show processes memory output

Field Description
Total: Total system memory available
MaxUsed: Total maximum memory used ever (history indicated with time stamp)
CurrentUsed: Total memory currently in use
CurrentFree: Total system memory available
SharedUsed: Total used shared memory
SharedFree:	Total free shared memory
PID	Process ID
Process	Process Name
ResSize	Actual resident size of the process in memory
Size	Process test, stack, and data size
Allocs	Total dynamic memory allocated
Frees	Total dynamic memory freed
Max	Maximum dynamic memory allocated
Current	Current dynamic memory in use

show processes switch-utilization

Show switch fabric utilization.

Syntax

show processes switch-utilization

Command Mode

EXEC

EXEC Privilege

Command History

Version 8.1.1.0 Introduced on E-Series ExaScale

E-Series original Command

Example

Figure 4-51. Command Example: show processes switch-utilization

FTOS#show processes switch-utilization
Switch fabric utilization			5Sec	1Min	5Min
3%	3%	3%

Usage Information

An asterisk (*) in the output indicates a legacy card that is not support by the show processes switch-utilization command.

show rpm

Show the current RPM status.

Syntax

show rpm [number [brief] | all]

Parameters

number	(OPTIONAL) Enter either zero (0) or 1 for the RPM.
all	(OPTIONAL) Enter the keyword all to view a table with information on all present RPMs.
brief	(OPTIONAL) Enter the keyword brief to view an abbreviated list of RPM information.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.3 Updated to support PPID on the S55

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

E-Series Example

Figure 4-52. Command Example: show rpm on E-Series

FTOS#show rpm
-- RPM card 0 --
Status : active
Next Boot : online
Card Type : RPM - Route Processor Module (LC-EH-RPM)
Hardware Rev : 3.1
Num Ports : 1
Up Time : 18 hr, 48 min
Last Restart : reset by user
FTOS Version : 8-4-1-317
Jumbo Capable : yes
CP Boot Flash : A: 2.5.1.0 [booted] B: 2.5.1.0
RP1 Boot Flash : A: 2.5.1.0 [booted] B: 2.5.1.0
RP2 Boot Flash : A: 2.5.1.0 [booted] B: 2.5.1.0
CP Mem Size : 1073741824 bytes
RP1 Mem Size : 1073741824 bytes
RP2 Mem Size : 1073741824 bytes
MMC Mem Size : 3566329856 bytes
External MMC : 128180224 bytes
USB Mem Size : n/a
Temperature : 36C
Power Status : AC
Voltage : ok
Serial Number : FX000056234
Part Number : 7520043401 Rev 05
Vendor Id : 04
Date Code : 01072010
Country Code : 01
Piece Part ID : N/A
PPID Revision : N/A
Service Tag : N/A
Expr Svc Code : N/A

-- RPM card 1 --
Status : not present
FTOS# 

Table 4-7 defines the fields displayed in Figure 4-52.

Table 4-7. Descriptions of show rpm output

Field Description
Status Displays the RPM’s status.
Next Boot Displays whether the	RPM is to be brought online at the next system reload.
Card Type Displays the RPM catalog number.
Hardware Rev Displays theE-Series chipset hardware revision level: 1.0 (non-Jumbo); 1.5 (Jumbo-enabled); 2.0 (or above is TeraScale).
Num Ports Displays the number of active ports.
Up Time Displays the number of hours and minutes since the RPM’s last reboot.
Last Restart States the reason for the last RPM reboot.C-Series possible values:“normal power-cycle” (reset power-cyclecommand)“reset by master” (peer RPM reset by master RPM)“over temperature shutdown”“power supply failed”E-Series possible values:“normal power-cycle” (insufficient power, normal power cycle)“reset by user” (automatic failover, software reload of both RPMs, or master RPM resetting peer)“force-failover” (redundancy force-failovercommand)

Table 4-7. Descriptions of show rpm output

Field	Description
FTOS Version Displays the operating software version.
Jumbo Capable Displays a Yes or No indicating if the RPM is capable of sending and receiving Jumbo frames.This field does not indicate if the chassis is in Jumbo mode; for that determination, use theshow chassis briefcommand.
CP Boot Flash Displays the two possible Boot Flash versions for the Control Processor. The [Booted] keyword next to the version states which version was used at system boot.
RP1 Boot Flash Displays the two possible Boot Flash versions for the Routing Processor 1. The [Booted] keyword next to the version states which version was used at system boot.
RP2 Boot Flash Displays the two possible Boot Flash versions for the Routing Processor 2. The [Booted] keyword next to the version states which version was used at system boot.
CP Mem Size Displays the memory of the Control Processor.
RP1 Mem Size Displays the memory of the Routing Processor 1.
PR2 Mem Size Displays the memory of the Routing Processor 2.
Temperature Displays the temperature of the RPM.Minor alarm status if temperature is over 65^ C.
Power Status Lists the status of the power modules in the chassis.
Voltage Displays the power rails for the line card.
Serial Num Displays the line card serial number.
Part Num Displays the line card part number.
Vendor ID	Displays an internal code, which specifies the manufacturing vendor.
Date Code	Displays the line card's manufacturing date.
Country Code	Displays the country of origin.01 = USA

Related Commands

show chassis	View information on all elements of the system.
show linecard	View information on a line card.
show sfm	View information on the SFM.

show software ifm

Display interface management (IFM) data.

Syntax

show software ifm {clients [summary] | ifagt number | ifcb interface | stack-unit unit-ID | trace-flags}

Parameters

clients	Enter the keyword clients to display IFM client information.
summary	(OPTIONAL) Enter the keyword summary to display brief information about IFM clients.
ifagt number	Enter the keyword ifagt followed by the number of an interface agent to display software pipe and IPC statistics.
ifcb interface	Enter the keyword ifcb followed by one of the following interface IDs followed by the slot/port information to display interface control block information for that interface:For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet.For a Port Channel interface, enter the keyword port-channel.For a 10G Ethernet interface, enter the keyword TenGigabitEthernet.C-Series options also include:fastethernet for a Fast Ethernet interfaceloopback for a Loopback interfacemanagementethernet for a Management Ethernet interfacenull for a Null interfacevlan for a VLAN interface (Range: 1–4094, 1-2094 for ExaScale)
stack-unit unit-ID	Enter the keyword stack-unit followed by the stack member number to display IFM information for that unit.Unit ID range:S55: 0-11all other S-Series: 0-7Note: This option is only available on S-Series.
trace-flags	Enter the keyword trace-flags to display IFM information for internal trace flags.

Defaults

None

Command Mode

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Introduced for C-Series and S-Series

S-Series Example

Figure 4-53. Command Example: show software ifm clients summary on S-Series

show switch links {backplane | internal}

Parameters	backplane	Enter the keyword backplane to view a table with information on the link status of the switch fabric backplane for both SFMs.
	internal	Enter the keyword internal to view a table with information on the internal status of the switch fabric modules.
Defaults	None
hand Modes	EXEC
Command History	Version 7.5.1.0 Introduced on C-Series

Example

Figure 4-54. Command Example: show switch links backplane

FTOS# show switch links backplane
Switch fabric backplane link status:
LC SlotID Port7	Port0	SFM0 Links Status			Port4	SFM1 Links Status
		Port1	Port2	Port3		Port5	Port6
0	up	up	up	up	down	down	down	down
1	not present
2	not present
3	not present
4	not present
5	not present
6	up	up	up	up	down	down	down	down
7	not present
up - Both ends of the link are up down - Both ends of the link are down up / down - SFM side up and LC side down down / up - SFM side down and LC side up FTOS#

show system (S-Series)

S Display the current status of all stack members or a specific member.

Syntax show system [brief | stack-unit unit-id | stack-ports {status / topology}]

Parameters

brief	(OPTIONAL) Enter the keyword brief to view an abbreviated list of system information.
stack-unit unit-id	(OPTIONAL) Enter the keyword stack-unit followed by the stack member ID for information on that stack member.Unit ID range:S55: 0-11all other S-Series: 0-7
stack-ports status / topology	(OPTIONAL) Enter the keyword stack-ports for information on the status or topology of the S55 stack ports.Note: THis option applies to the S55 only.

Command Modes
EXEC EXEC Privilege

Command History

Version 8.3.5.3 Updated to support PPID on the S55

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Modified output: Boot Flash field will display code level for boot code 2.8.1.1 and newer, while older boot codes are displayed as "Present".

Version 7.7.1.0 Modified output: Added Master Priority field.

Version 7.6.1.0 Introduced for S-Series switches

Usage

Figure 4-57 shows the output from the show system brief command.

Figure 4-56 shows the output from the show system stack-unit command on a non-S55 system.

Figure 4-57 shows the output from the show system stack-unit command on an S55.

Example

Figure 4-55. Command Example: show system brief

FTOS#show system brief
Stack MAC : 0:1:e8:d6:4:70
-- Stack Info --
Unit	UnitType	Status	ReqTyp	CurTyp	Version	Ports
0	Member	not present
1	Standby	online	50V	50V	7.7.1.0	52
2	Mgmt	online	50V	50V	7.7.1.0	52
3	Member	not present
4	Member	not present
5	Member	not present
6	Member	not present
7	Member	not present
-- Module Info --
Unit	Module No	Status	Module Type		Ports
1	0	online	S50-01-10GE-2P		2
1	1	online	S50-01-24G-2S		1
2	0	online	S50-01-10GE-2P		2
2	1	online	S50-01-24G-2S		1
-- Power Supplies --
Unit	Bay Status Type
1	0 up AC
1	1 absent AC
2	0 up
2	1 absent
-- Fan Status --
Unit	TrayStatus Fan0 Fan1 Fan2 Fan3 Fan4 Fan5
1	up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up Up UpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUpUmpupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupupunpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpumpurnpmptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnptnpttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttnttunttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnuttnatnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnpunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunppunPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPUNPPNUPPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPPCMPLMMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPMPM PMPSMPM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PUM PULFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFPUFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP UFP USFSTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTNTTANTTTNUTTTNUTTTNUTTTNUTTTNUTTTNUTTTNUTTTNUTTTNUTTTNUTTTNUTTTNUTTTNUTTTNUTTTNUTTTNUTTTNUTTTNUTTTNUTTTNUTTTNUTTTNUTTTNUTTTNUTTTNUTTTNUTTTNUTTTNUTTTNUTTTNUTTTNUTTTNUTTTNUTTTNUTITT NUTITT NUTITT NUTITT NUTITT NUTITT NUTITT NUTITT NUTITT NUTITT NUTITT NUTITT NUTITT NUTITT NUTITT NUTITT NUTITT NUTITT NUTITT NUTITT NUTITT NUTITT NUTITT NUTITT NUTITT NUTITT NUTITT NUTITT NUTITT NUTITT NUTITT NUTITT NUTITT NUTITT NATTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttt t nnctttttttttttttttttttttttttttttttttttttttttttttttttttttttt t nnctt t nnctt t nnctt t nnctt t nnctt t nnctt t nnctt t nnctt t nnctt t nnctt t nnctt t nnctt t nnctt t nnctt t nnctt t nnctt t nnctt t nnctt t nnctt t nnctt t nnctt t nnctt t nnctt t nnctt t nnctt t nnact tt nput u p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un p Un pUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnpUnqnsu##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##s##stsssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssscccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaacccaaccaaacccaaacccaaacccaaacccaaacccaaacccaaacccaaacccaaacccaaacccaaacccaaacccaaacccaaacccaaacccaaacccaaacccaaacccaaacccaaacccaaacccaaacccaaacccaaacccaaacccaaacccaaacccaaacccaaacccaaacccaaacccaaacccaaacccaaacccaaaacccaaaacccaaaacccaaaacccaaaacccaaaacccaaaacccaaaacccaaaacccaaaacccaaaacccaaaacccaaaacccaaaacccaaaacccaaaaaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaacaatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacatacata catacatacata catacata catacata catacata catacata catacata catacata catacata catacata catacata catacata catacata catacata catacata catacata catacata catacata catacata catacata catacata catacata catacata catacata catacata catacata catacata deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta deta dtau ddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontddontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDDontDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDantDan Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant DAnt Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Dant Danta a a b a b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b BFTOS#

Example

Figure 4-56. Command Example: show system stack-unit

FTOS# show system stack-unit 0
-- Unit 0 --
Unit Type : Management Unit
Status : online
Next Boot : online
Required Type : S55 - 48-port E/FE/GE (SD)
Current Type : S55 - 48-port E/FE/GE (SD)
Master priority : 9
Hardware Rev : 2.0
Num Ports : 52
Up Time : 1 wk, 2 day, 17 hr, 19 min
FTOS Version : 8-3-5-294
Jumbo Capable : yes
POE Capable : no
Boot Flash : 1.0.0.1
Memory Size : 2147483648 bytes
Temperature : 47C
Voltage : ok
Serial Number : GCDL111700081
Part Number : 7590009001 Rev A
Vendor Id : 07
Date Code : 01172011
Country Code : 02
Piece Part ID : N/A
PPID Revision : N/A
Service Tag : N/A
Expr Svc Code : N/A
Auto Reboot : enabled
Burned In MAC : 00:01:e8:8a:e4:cc
No Of MACs : 3
-- Module 0 -- Status : not present
-- Module 1 -- Status : online Module Type : S55-10GE-2SFP+ - 2-port 10GE SFP+ (SD) Num Ports : 2 Hot Pluggable : yes
-- Power Supplies -- Unit Bay Status Type 0 0 down AC 0 1 up AC -- Fan Status -- Unit Bay TrayStatus Fan0 Speed 0 0 up up 9120 0 1 up up 8880

Example

Figure 4-57. Command Example: show system stack-unit (S55)

Related Commands

show version Display the FTOS version.
show processes memory (S-Series)	Display memory usage based on running processes.
show system stack-ports	Display information about the stack ports on all switches in the S-Series stack.
show hardware stack-unit	Display the data plane and management plane input and output statistics of a particular stack member.
stack-unit priority	Configure the ability of an S-Series switch to become the management unit of a stack.

show tech-support (C-Series and E-Series)

Display, or save to a file, a collection of data from other show commands, the information necessary for Dell Networking technical support to perform troubleshooting.

Syntax
show tech-support [linecard 0-6 | page] | {display | except | find | grep | no-more | save}
Parameters

linecard 0-6	(OPTIONAL) Enter the keyword linecard followed by the linecard number to view information relating to a specific linecard.
page	(OPTIONAL) Enter the keyword page to view 24 lines of text at a time.Press the SPACE BAR to view the next 24 lines.Press the ENTER key to view the next line of text.
display, except, find, grep, no-more	If you use the pipe command ( | ), then enter one of these keywords to filter command output. Refer to Chapter 2, CLI Basics for details on filtering commands.
save	Enter the save keyword (following the pipe) to save the command output.flash: Save to local flash drive (flash://filename (max 20 chars))slot0: Save to local file system (slot0://filename (max 20 chars))

Command Modes
EXEC Privilege

Command History

Version 7.8.1.0	Introduced save to file options
Version 7.5.1.0	Introduced on C-Series
Version 6.5.4.0	Show clock included in display on E-Series

C-Series Example

Figure 4-58. Command Example: show tech-support (partial) on C-Series

FTOS#show tech-support page

---- show version ----

Dell Force10 Networks Real Time Operating System Software

Dell Force10 Operating System Version: 1.0

Dell Force10 Application Software Version:8.3.12.0

Copyright (c) 1999-2011 by Dell Inc.

Build Time: Thu Mar 22 20:27:34 PDT 2012

Build Path: /sites/maa/work/sw//C-SERIES/SW/SRC

FTOS uptime is 18 minutes

System image file is "/work/sw/IMAGES/Chassis/C300-ODC-2/FTOS-CS.bin"

Chassis Type: C300

Control Processor: IBM PowerPC 750FX (Rev D2.2) with 1073741824 bytes of memory. 128K bytes of non-volatile configuration memory.

1 Route Processor/Switch Fabric Module 2 48-port GE 10/100/1000Base-T line card with RJ45 interface (CB) 1 FastEthernet/IEEE 802.3 interface(s) 96 GigabitEthernet/IEEE 802.3 interface(s)

---- show HA information ----

-- RPM Status --

RPM Slot ID: 0 RPM Redundancy Role: Primary RPM State: Active RPM SW Version: CS-1-1-317 Link to Peer: Down Peer RPM: not present

-- RPM Redundancy Configuration --

Primary RPM: rpm0 Auto Data Sync: Full Failover Type: Hot Failover Auto reboot RPM: Disabled Auto failover limit: 3 times in 60 minutes

...more----

E-Series Example

Figure 4-59. Command Example: show tech-support save (partial) on E-Series

FTOS#show tech-support ?
linecard	Line card
page	Page through output
|	Pipe through a command
<cr>
FTOS#show tech-support linecard 3 | ?
display	Display additional information
except	Show only text that does not match a pattern
find	Search for the first occurrence of a pattern
grep	Show only text that matches a pattern
no-more	Don't paginate output
save	Save output to a file
FTOS#show tech-support linecard 3 | save ?
flash:	Save to local file system (flash://filename (max 20 chars))
slot0:	Save to local file system (slot0://filename (max 20 chars))
FTOS#show tech-support linecard 3 | save flash://LauraSave Start saving show command report .......
FTOS#dir Directory of flash:
1 drwx 32768 Jan 01 1980 00:00:00 +00:00 .
2 drwx 512 Aug 22 2008 14:21:13 +00:00 ..
3 drwx 8192 Mar 30 1919 10:31:04 +00:00 TRACE_LOG_DIR
4 drwx 8192 Mar 30 1919 10:31:04 +00:00 CRASH_LOG_DIR
5 drwx 8192 Mar 30 1919 10:31:04 +00:00 NVTRACE_LOG_DIR
6 drwx 8192 Mar 30 1919 10:31:04 +00:00 CORE_DUMP_DIR
7 d--- 8192 Mar 30 1919 10:31:04 +00:00 ADMIN_DIR
8 -rwx 33059550 Jul 11 2007 17:49:46 +00:00 FTOS-EF-7.4.2.0.bin
9 drwx 8192 Jan 01 1980 00:18:28 +00:00 diag
10 -rwx 29555751 May 12 2008 17:29:42 +00:00 FTOS-EF-4.7.6.0.bin
11 -rwx 27959813 Apr 04 2008 15:05:12 +00:00 FTOS-EF-7.5.1.0.bin
12 -rwx 4693 May 12 2008 17:24:36 +00:00 config051508
13 -rwx 29922288 Jan 11 2008 14:58:36 +00:00 FTOS-EF-7.6.1.0.bin
14 -rwx 6497 Aug 22 2008 14:18:56 +00:00 startup-config
15 -rwx 5832 Jul 25 2008 11:13:36 +00:00 startup-config.bak
16 -rwx 29947358 Jul 25 2008 11:04:26 +00:00 FTOS-EF-7.6.1.2.bin
17 -rwx 10375 Aug 25 2008 10:55:18 +00:00 LauraSave
flash: 520962048 bytes total (40189952 bytes free)FTOS#

Usage Information

Without the linecard or page option, the command output is continuous, use CNTL-z to interrupt the command output.

The save option works with other filtering commands. This allows you to save specific information of a show command. The save entry should always be the last option.

For example: FTOS#show tech-support |grep regular-expression |except regular-expression | find regular-expression | save flash://result

This display output is an accumulation of the same information that is displayed when you execute one of the following show commands:

• show cam-profile
• show cam-ipv4flow
• show chassis
• show clock
• show environment
• show file-system
• show interface

Related Commands

• show inventory
• show ip management-route
• show ip protocols
• show ip route summary
• show processes cpu
• show processes memory
• show redundancy
• show rpm
• show running-conf
• show sfm
• show version

show version Display the FTOS version.

show linecard Display the line card(s) status.

show environment (C-Series and E-Series)

Display system component status.

show processes memory (C-Series and E-Series)

Display memory usage based on running processes.

show tech-support (S-Series)

S Display a collection of data from other show commands, necessary for Force10 Networks technical support to perform troubleshooting on S-Series switches.

Syntax show tech-support [stack-unit unit-id | page]

Parameters	stack-unit	(OPTIONAL) Enter the keyword stack-unit to view CPU memory usage for the stack member designated byunit-id.Unit ID range:S55: 0-11all other S-Series: 0-7
	page	(OPTIONAL) Enter the keyword pageto view 24 lines of text at a time.Press the SPACE BAR to view the next 24 lines.Press the ENTER key to view the next line of text.
		When using the pipe command ( | ), enter one of these keywords to filter command output.Refer toChapter 2, CLI Basicsfor details on filtering commands.
	saveEnter the savekeyword to save the command output.flash: Save to local flash drive (flash://filename (max 20 chars))
hand Modes	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.8.1.0 Introduced save to file options
	Version 7.6.1.0 Expanded to support S-Series switches

S-Series Examples

Figure 4-60. Command Example: show tech-support save (partial) on S-Series

FTOS#show tech-support ?
page Page through output
stack-unit Unit Number
| Pipe through a command
<cr>
FTOS#show tech-support stack-unit 1 ?
| Pipe through a command
<cr>
FTOS#show tech-support stack-unit 1 | ?
except Show only text that does not match a pattern
find Search for the first occurrence of a pattern
grep Show only text that matches a pattern
no-more Don't paginate output
save Save output to a file

FTOS#show tech-support stack-unit 1 | save ?
flash: Save to local file system (flash://filename (max 20 chars))

FTOS#show tech-support stack-unit 1 | save flash://LauraSave
Start saving show command report ......
FTOS#
FTOS#dir
Directory of flash:
1 drw- 16384 Jan 01 1980 00:00:00 +00:00 .
2 drwx 1536 Jul 13 1996 02:38:06 +00:00 ..
3 d--- 512 Nov 20 2007 15:46:44 +00:00 ADMIN_DIR
4 -rw- 7124 Jul 13 1996 02:33:04 +00:00 startup-config
5 -rw- 3303 Feb 14 2008 22:01:16 +00:00 startup-config.oldChassis
6 -rw- 6561 May 17 1996 04:10:54 +00:00 startup-config.bak
7 -rw- 6539 May 29 1996 10:35:42 +00:00 test.cfg
8 -rw- 276 Jul 15 1996 23:11:14 +00:00 LauraSave

flash: 3104256 bytes total (3072512 bytes free)
FTOS# 

Figure 4-61. Command Example: show tech-support (partial) on S-Series

FTOS#show tech-support stack-unit 0
---- show version ----
Dell Force10 Networks Real Time Operating System Software
Dell Force10 Operating System Version: 1.0
Dell Force10 Application Software Version:8.3.12.0
Copyright (c) 1999-2011 by Dell Inc.
Build Time: Thu Mar 22 20:27:34 PDT 2012
Build Path: /sites/maa/work/sw/purushothaman/cser-latest/depot/main/Dev/Cyclone/
FTOS uptime is 18 minutes

System Type: S50N
Control Processor: MPC8451E with 255545344 bytes of memory.

32M bytes of Boot-Flash memory.
    1 48-port E/FE/GE (SB)
    48 GigabitEthernet/IEEE 802.3 interface(s)
    4 Ten GigabitEthernet/IEEE 802.3 interface(s)

---- show clock ----
12:03:01.695 UTC Wed Nov 21 2007

---- show running-config ----
Current Configuration ...
! Version E_MAIN4.7.5.414
! Last configuration change at Wed Nov 21 11:42:19 2007 by default
!
service timestamps log datetime
!
hostname FTOS
!
enable password 7 xxxxxxxx
!
username admin password 7 xxxxxxxx
!
enable restricted 7 xxxxxxxx
!
interface GigabitEthernet 0/1
no ip address
shutdown
!
interface GigabitEthernet 0/2
no ip address
shutdown
!
---- output truncated ----! 

Usage Information

Without the page or stack-unit option, the command output is continuous, use Ctrl-z to interrupt the command output.

The save option works with other filtering commands. This allows you to save specific information of a show command. The save entry should always be the last option.

For example: FTOS#show tech-support |grep regular-expression |except regular-expression | find regular-expression | save flash://result

This display output is an accumulation of the same information that is displayed when you execute one of the following show commands:

• show cam
• show clock
• show environment
• show file
• show interfaces
• show inventory

Related Commands

• show ip protocols
• show ip route summary
• show processes cpu
• show processes memory
• show redundancy
• show running-conf
• show version

show version Display the FTOS version.

show system (S-Series) Display the current switch status.

show environment (S-Series)

Display system component status.

show processes memory (S-Series) Display memory usage based on running processes.

show util-threshold cpu

C E S

S55 S60

Display the set CPU utilization threshold values.

Syntax show util-threshold cpu

Defaults None

Command Modes EXEC Privilege

Command History

Version 8.3.3.8 Introduced on S60

Version 8.3.5.3 Introduced on S55

Version 8.4.1.0 Introduced on C-Series, E-Series, S25 and S50

Usage For C- and E-Series, this command displays all the CPU thresholds of the type of processor that is busy.

For S-Series, this command displays all the CPU thresholds of the management, standby and stack-units.

Related Commands util-threshold cpu (S-Series) Set the CPU utilization threshold values for S50 and S25 platforms util-threshold mem (C- and E-Series) Set the memory utilization threshold values for C- and E-Series platforms util-threshold mem (S-Series) Set the memory utilization threshold values for S50 and S25 platforms

show util-threshold mem

C E S

S55 S60

Display the set memory utilization threshold values.

Syntax show util-threshold memory

Defaults	None
Command Modes	EXEC PRIVILEGE
Command History	Version 8.3.3.8 Introduced on S60Version 8.3.5.3 Introduced on S55Version 8.4.1.0 Introduced on C-Series, E-Series, S25 and S50
Usage Information	For C- and E-Series, this command displays all the memory utilization thresholds of the type of processor that is busy.
	For S-Series, this command displays all the memory utilization thresholds of the management, standby or stack-units.
Related Commands	util-threshold cpu (S-Series)	Set the CPU utilization threshold values for S50 and S25 platforms
	util-threshold mem (C- and E-Series)	Set the memory utilization threshold values for C- and E-Series platforms
	util-threshold mem (S-Series)	Set the memory utilization threshold values for S50 and S25 platforms

ssh-peer-rpm

Syntax	ssh-peer-rpm [-I username]
Parameters	-I username	(OPTIONAL) Enter the keyword -I followed by your user name.Default: The user name associated with the terminal
Defaults	Not configured.
Command Modes	EXEC
	EXEC Privilege
Command History	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.5.1.0 Introduced on C-Series
	Version 6.3.1.0 Introduced on E-Series
Usage Information	This command is not available when the peer RPMs are running different FTOS releases.

ssh-peer-stack-unit

S60

Open an SSH connection to the peer RPM.

Syntax ssh-peer-stack-unit [-I username]

Parameters

- I username (OPTIONAL) Enter the keyword -I followed by your user name.

Default: The user name associated with the terminal

Defaults

Not configured.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

telnet

Connect through Telnet to a server.

Syntax

telnet {host | ip-address | ipv6-address prefix-length | vrf vrf instance name } [/source-interface]

Parameters

host	Enter the name of a server.
ip-address	Enter the IPv4 address in dotted decimal format of the server.
ipv6-address prefix-length	Enter the IPv6 address in the x:x:x:x::x format followed by the prefix length in the /x format.Range: /0 to /128Note:The :: notation specifies successive hexadecimal fields of zeros
vrf instance	(Optional) E-Series Only: Enter the keyword vrf followed by the VRF Instance name.
source-interface	(OPTIONAL) Enter the keywords /source-interface followed by the interface information to include the interface's IP address.Enter the following keywords and slot/port or number information:For a 100/1000 Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.For a Loopback interface, enter the keyword loopback followed by a number from zero (0) to 16383.For the Null interface, enter the keyword null followed by 0.For a Port Channel interface, enter the keyword port-channel followed by a number:C-Series and S-Series Range: 1-128E-Series Range: 1 to 255 for TeraScaleFor SONET interface types, enter the keyword sonet followed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernet followed by the slot/port information.For a VLAN interface, enter the keyword vlan followed by a number from 1 to 4094.

Defaults

Not configured.

Command Modes	EXEC
	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.2.1.0 Introduced on E-Series ExaScale (IPv6)Increased number of VLANs on ExaScale to 4094 (was 2094)
	Version 8.1.1.0 Introduced on E-Series ExaScale (IPv4)
	Version 7.9.1.0 Introduced VRF.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series and added support for IPv6 address on E-Series only

telnet-peer-rpm

Open a Telnet connection to the peer RPM.

Syntax

telnet-peer-rpm

Defaults

Not configured.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.5.1.0 Introduced on C-Series

Version 6.2.1.1 Introduced on E-Series

Usage Information

Opening a telnet connection from the Standby RPM to an Active RPM follows the authentication procedure configured in the chassis. However, opening a telnet connection from the Active RPM into the Standby RPM requires local authentication.

Configuring an ACL on a VTY line will block a Telnet session using the telnet-peer-rpm command in the standby to active RPM direction only. Such an ACL will not block an internal Telnet session in the active RPM to standby RPM direction.

telnet-peer-stack-unit

Open a Telnet connection to the peer stack unit.

Syntax

telnet-peer-stack-unit

Defaults

Not configured.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

terminal length

Configure the number of lines displayed on the terminal screen.

Syntax

terminal length screen-length
To return to the default values, enter terminal no length.
Parameters

screen-length

Enter a number of lines. Entering zero will cause the terminal to display without pausing. Range: 0 to 512. Default: 24 lines.

Defaults

24 lines

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

terminal xml

Enable XML mode in Telnet and SSH client sessions.

Syntax

terminal xml

To exit the XML mode, enter terminal no xml.

Defaults

Disabled

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.7.1.0 Introduced on C-Series

Version 6.5.1.0 Introduced for E-Series

Usage Information

This command enables the XML input mode where you can either cut and paste XML requests or enter the XML requests line-by-line. For more information on using the XML feature, refer to the XML chapter in the FTOS Configuration Guide.

traceroute

View a packet's path to a specific device.

Syntax
traceroute {host | vrf instance | ip-address | ipv6-address}

Parameters
host	Enter the name of device.
vrf instance	(Optional) E-Series Only: Enter the keyword vrf followed by the VRF Instance name.
ip-address	Enter the IP address of the device in dotted decimal format.
ipv6-address	Enter the IPv6 address, in the x:x:x:x::x format, to which you are testing connectivity.Note: The :: notation specifies successive hexadecimal fields of zeros

Defaults
Timeout = 5 seconds; Probe count = 3; 30 hops max; 40 byte packet size; UDP port = 33434
Command Modes
EXEC

EXEC Privilege
Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.2.1.0 Introduced on E-Series ExaScale with IPv6

Version 8.1.1.0 Introduced on E-Series ExaScale (IPv4 only)

Version 7.9.1.0 Introduced VRF.

Version 7.6.1.0 Added support for S-Series

Version 7.5.1.0 Introduced on C-Series

Version 7.4.1.0 Added support for IPv6 address on E-Series

E-Series original Command

Usage Information

When you enter the traceroute command without specifying an IP address (Extended Traceroute), you are prompted for a target and source IP address, timeout in seconds (default is 5), a probe count (default is 3), minimum TTL (default is 1), maximum TTL (default is 30), and port number (default is 33434). To keep the default setting for those parameters, press the ENTER key.

For IPv6, you are prompted for a minimum hop count (default is 1) and a maximum hop count (default is 64).

Example
Figure 4-62. Command Example: traceroute (IPv4)

FTOS#traceroute www.force10networks.com

Translating "www.force10networks.com"...domain server (10.11.0.1) [OK]Type Ctrl-C to abort.

Tracing the route to www.force10networks.com (10.11.84.18), 30 hops max, 40 byte packets

TTL Hostname Probel Probe2 Probe31 10.11.199.190 001.000 ms 001.000 ms 002.000 ms2 gwegress-sjc-02.force10networks.com (10.11.30.126) 005.000 ms 001.000 ms 001.000 ms3 fw-sjc-01.force10networks.com (10.11.127.254) 000.000 ms 000.000 ms 000.000 ms4 www.force10networks.com (10.11.84.18) 000.000 ms 000.000 ms 000.000 ms

FTOS#

Figure 4-63 contains examples of the IPv6 traceroute command with both a compressed IPv6 address and uncompressed address.

Example

Figure 4-63. Command Example: traceroute (IPv6)

FTOS#traceroute 100::1 Type Ctrl-C to abort.
Tracing the route to 100::1, 64 hops max, 60 byte packets
Hops Hostname	Probe1	Probe2	Probe3
1 100::1	000.000 ms	000.000 ms	000.000 ms
FTOS#traceroute 3ffe:501:ffff:100:201:e8ff:fe00:4c8b
Type Ctrl-C to abort.
Tracing the route to 3ffe:501:ffff:100:201:e8ff:fe00:4c8b, 64 hops max, 60 byte packets
Hops Hostname	Probe1	Probe2	Probe3
1 3ffe:501:ffff:100:201:e8ff:fe00:4c8b
	000.000 ms	000.000 ms	000.000 ms
FTOS#

Related Commands

ping Test connectivity to a device.

undebug all

Disable all debug operations on the system.

Syntax undebug all

Defaults No default behavior or values

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

upload trace-log

Upload trace log files from the three CPUs (cp, rp1, and rp2)

Syntax

upload trace-log {cp {cmd-history | hw-trace | sw-trace} | rp1 {cmd-history | hw-trace | sw-trace} | rp2 {cmd-history | hw-trace | sw-trace}}

Parameters

cp | rp1 | rp2	Enter the keyword cp | rp1 | rp2 to upload the trace log from that CPU.
cmd-history	(OPTIONAL) Enter the keyword cmd-history to upload the CPU's command history.

	hw-trace	(OPTIONAL) Enter the keyword hw-trace to upload the CPU’s hardware trace.
	sw-trace	(OPTIONAL) Enter the keyword sw-trace to upload the CPU’s software trace.
Defaults	No default behavior or values
Command Modes	EXEC
	EXEC Privilege
Command History	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.5.1.0 Introduced on C-Series and expanded to support command history, hardware trace, and software trace logs
	Version 6.1.1.0 Introduced on E-Series

Usage Information

The log information is uploaded to flash:/TRACE_LOG_DIR.

util-threshold cpu (C- and E-Series)

Configure the high or low CPU utilization thresholds for SNMP traps.

Syntax

util-threshold cpu {5sec | 1min | 5min} {rp1 | rp2 | cp | lp slot-id | all} {high {0-100} | {low [0-100]}

To return to the default settings, use the no util-threshold cpu command syntax.

Parameters

cpu	Indicate the length of time in which the cpu has been busy.
utilization	• 5sec
time	• 1min
	• 5min
processor type	Indicate the type of processor to be used to configure the CPU utilization information.
	• rp1 = route processor1
	• rp2 = route processor2
	• cp = control processor
	• lp slot-id = the line card slot-id
	• all = use all of the processors to configure the CPU utilization information.
utilization threshold in %	Indicate the high or low values for the CPU utilization thresholds in percentage format.
	• high. Range: 0 - 100
	• low. Range: 0 - 100
	Note: A threshold level of 0 will disable the syslog and SNMP trap.

Example

util-threshold cpu 5sec cp high 50

In this example, the low threshold value is not specified so it will take the value set for the high threshold value. In all other instances, the low threshold value must be equal to or less than that of the high threshold value.

Defaults

High CPU utilization threshold: 1min = 85%, 5min = 80%

Low CPU utilization threshold: 1min = 75%, 5min = 70%

Command Modes

CONFIG

Command History

Version 8.4.2.3 Introduced on C-Series, S25 and S50

Version 8.4.2.0 Introduced on E-Series TeraScale

Version 8.4.1.0 Introduced on E-Series ExaScale

Usage Information

When the total CPU utilization exceeds the configured threshold for a given time, a threshold notification is sent as a SNMP trap. If a low threshold value is not specified, the low threshold value is set to the same value as the high threshold value. The system will generate a SYSLOG and SNMP Trap each time the configured threshold is crossed.

Note: The 5sec util-threshold cpu command is disabled by default on all platforms. To enable the command, enter util-threshold cpu 5sec all high {value greater than zero}. To disable the SYSLOG and traps for the 5sec cpu utilization thresholds, enter util-threshold cpu 5sec all high 0 or no util-threshold cpu 5sec {rp1 | rp2 | cp | lp slot-id | all}

Related Commands

show util-threshold mem Display the set values of the memory utilization thresholds

util-threshold cpu (S-Series)

S S55 S60	Configure the high or low CPU utilization thresholds for SNMP traps.
Syntax	util-threshold cpu {5sec | 1min | 5min} {Management-unit | standby | stack-unit unit-number | all} {high {0-100} | {low [0-100}}}
	To return to the default setting, enter no util-threshold cpu.
Parameters	cpu utilization time	Enter the keyword that indicates the amount of threshold time to configure the CPU utilization thresholds.5sec1min5min
	unit Indicate the unit where you want to configure the CPU utilization thresholds.Management-unitstandbystack-unit unit-number = select the number of the unit in the stackall = use all of the units to configure the cpu utilization information.
	utilization threshold in %	Indicate the high or low values for the CPU utilization threshold in percentage format.high. Range: 0 - 100low. Range: 0 - 100Note: A threshold level of 0 will disable the syslog and SNMP trap.
Defaults	High threshold default = 1 minute = 85%; 5 minutes = 80%Low threshold default = 1 minute = 75%; 5 minutes = 70%
Command Modes	CONFIG
Command History	Version 8.3.3.8 Introduced on S60.Version 8.3.5.3 Introduced on S55.Version 8.4.2.2 Introduced on C-Series, S25 and S50.Version 8.4.2.0 Introduced on E-Series TeraScale.Version 8.4.1.0 Introduced on E-Series ExaScale.
Usage Information	When the total CPU utilization exceeds the configured threshold for a given time, a threshold notification is sent as a SNMP trap. If a low threshold value is not specified, the low threshold value is set to the same value as the high threshold value. The system will generate a SYSLOG and SNMP Trap each time the configured threshold is crossed.
Related Commands	show util-threshold mem Display the set values of the memory utilization thresholds

util-threshold mem (C- and E-Series)

Configure the high or low memory utilization thresholds for SNMP traps.

Syntax

util-threshold mem {rp1 | rp2 | cp | lp slot-id | all} {high {0-100} | {low [0-100]}

To return to the default setting, use the no util-threshold mem command syntax.

Parameters

processor type	Indicate the type of processor that will be used to configure the memory utilization information.
	• rp1 = route processor1
	• rp2 = route processor2
	• cp = control processor
	• lp slot-id = the line card slot-id
	• all = use all of the processors to configure the memory utilization information.
utilization threshold in %	Indicate the high or low values for the memory utilization threshold in percentage format.
	• high. Range: 0 - 100
	• low. Range: 0 - 100
	Note: A threshold level of 0 will disable the syslog and SNMP trap.

Defaults

High threshold default = 92%

Low threshold default = 82%

Command Modes
CONFIG

Command History

Version 8.4.2.2 Introduced on C-Series, S25 and S50

Version 8.4.2.0 Introduced on E-Series TeraScale

Version 8.4.1.0 Introduced on E-Series ExaScale

Usage Information

When the total memory utilization exceeds the configured threshold for a given time, a threshold notification is sent as a SNMP trap. If a low threshold value is not specified, the low threshold value is set to the same value as the high threshold value.

To return the memory thresholds to the default values, enter no util-threshold mem rp1 | rp2 | cp | lp number | all

Related Commands

show util-threshold mem Display the set values of the memory utilization thresholds

util-threshold mem (S-Series)

S55	Configure the high or low memory utilization thresholds for SNMP traps.
S60
Syntax	util-threshold mem {Management-unit | standby | stack-unit unit-number | all} {high {0-100} | {low [0-100}}}
	To return to the default setting, enter the no util-threshold mem command syntax.
Parameters	unit	Indicate the unit where you want to configure the memory utilization thresholds. Management-unit standby stack-unit unit-number = select the number of the unit in the stack all = use all of the units to configure the memory utilization information.
	utilization threshold in %	Indicate the high or low values for the memory utilization in percentage format. high. Range: 0 - 100 low. Range: 0 - 100 Note: A threshold level of 0 will disable the syslog and SNMP trap.
Defaults	High threshold default = 92%Low threshold default = 82%
Command Modes	CONFIG
Command History	Version 8.3.3.8 Introduced on S60.Version 8.3.5.3 Introduced on S55.Version 8.4.2.2 Introduced on C-Series, S25 and S50Version 8.4.2.0 Introduced on E-Series TeraScaleVersion 8.4.1.0 Introduced on E-Series ExaScale
Usage Information	When the total memory utilization exceeds the configured threshold for a given time, a threshold notification is sent as a SNMP trap. If a low threshold value is not specified, the low threshold value is set to the same value as the high threshold value.
Related Commands	show util-threshold mem Display the set values of the memory utilization thresholds
virtual-ip
C E	Configure a virtual IP for the active management interface.
Syntax	virtual-ip ip addressTo return to the default, use the no virtual-ip ip address command.
Parameters	ip address	Enter the IP address of the active management interface in a dotted decimal format (A.B.C.D.)

Defaults	No default behavior or values
Command Modes	CONFIGURATION
Command History	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.5.1.0 Introduced on C-Series
	E-Series original Command
Related Commands	ip address Assign a primary and secondary IP address to the interface.

write

Copy the current configuration to either the startup-configuration file or the terminal.

Syntax

Parameters	memory	Enter the keyword memory to copy the current running configuration to the startup configuration file. This command is similar to the copy running-config startup-config command.
	terminal	Enter the keyword terminal to copy the current running configuration to the terminal. This command is similar to the show running-config command.

Command Modes
EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series original Command

Related Commands
Usage Information

The write memory command saves the running-configuration to the file labeled startup-configuration. When using a LOCAL CONFIG FILE other than the startup-config not named "startup-configuration" (for example, you used a specific file during the boot config command) the running-config is not saved to that file; use the copy command to save any running-configuration changes to that local file.

802.1ag

Overview

802.1ag is available only on platform: S

Commands

This chapter contains the following commands:

• ccm disable
• ccm transmit-interval
• clear ethernet cfm traceroute-cache
• database hold-time
• disable
• domain
• ethernet cfm
• ethernet cfm mep
• ethernet cfm mip
• mep cross-check
• mep cross-check enable
• mep cross-check start-delay
• ping ethernet
  • show ethernet cfm domain
  • show ethernet cfm maintenance-points local
  • show ethernet cfm maintenance-points remote
  • show ethernet cfm mipbd
  • show ethernet cfm statistics
  • show ethernet cfm port-statistics
  • show ethernet cfm traceroute-cache
• service
• traceroute cache hold-time
• traceroute cache size
• traceroute ethernet

ccm disable

5	Disable CCM.
Syntax	ccm disable
	Enter no ccm disable to enable CCM.
Defaults	Disabled
Command Modes	ECFM DOMAIN
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.3.1.0 Introduced on S-Series

ccm transmit-interval

S	Configure the transmit interval (mandatory). The interval specified applies to all MEPs in the domain.
Syntax	ccm transmit-interval seconds
Parameters	seconds	Enter a transmit interval.Range: 1,10,60,600
Defaults	10 seconds
Command Modes	ECFM DOMAIN
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.3.1.0 Introduced on S-Series

clear ethernet cfm traceroute-cache

5 Delete all Link Trace Cache entries.
Syntax clear ethernet cfm traceroute-cache
Defaults	None
Command Modes	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.3.1.0 Introduced on S-Series

database hold-time

Set the amount of time that data from a missing MEP is kept in the Continuity Check Database.

Syntax	database hold-time minutes
Parameters	minutes	Enter a hold-time.Range: 100-65535 minutes
Defaults	100 minutes
Command Modes	ECFM DOMAIN
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.3.1.0 Introduced on S-Series

disable

S Disable Ethernet CFM without stopping the CFM process.

Syntax disable

Defaults Disabled

Command Modes ETHERNET CFM

Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.3.1.0 Introduced on S-Series

domain

S Create maintenance domain.

Syntax domain name md-level number

Parameters	name	Name the maintenance domain.
	md-level number	Enter a maintenance domain level.Range: 0-7
Defaults	None
mand Modes	ETHERNET CFM
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.3.1.0 Introduced on S-Series

ethernet cfm

⑤ Spawn the CFM process. No CFM configuration is allowed until the CFM process is spawned.

Syntax	ethernet cfm
Defaults	Disabled
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.3.1.0 Introduced on S-Series

ethernet cfm mep

S

Create an MEP.

Syntax

ethernet cfm mep {up-mep | down-mep} domain {name | level} ma-name name mepid mep-id

Parameters

[up-mep | down-mep]	Specify whether the MEP is up or down facing.Up-MEP: monitors the forwarding path internal to an bridge on the customer or provider edge; on Dell Networking systems the internal forwarding path is effectively the switch fabric and forwarding engine.Down-MEP: monitors the forwarding path external another bridge.
domain [name | level]	Enter this keyword followed by the domain name or domain level.
ma-name name	Enter this keyword followed by the name of the maintenance association.
mepid mep-id	Enter an MEP ID.Range: 1-8191

Defaults

None

Command Modes

INTERFACE

Command History

Version 8.3.5.0 Introduced on the S55. Version 8.3.1.0 Introduced on S-Series

ethernet cfm mip

S

Create an MIP.

Syntax

ethernet cfm mip domain {name | level} ma-name name

Parameters

domain [name | level]	Enter this keyword followed by the domain name or domain level.
ma-name name	Enter this keyword followed by the name of the maintenance association.
None
INTERFACE
Version 8.3.5.0 Introduced on the S55.
Version 8.3.1.0 Introduced on S-Series

Defaults

Command Modes

Command History

mep cross-check
S Enable cross-checking for an MEP.

Syntax	mep cross-check mep-id
Parameters	mep-id	Enter the MEP IDRange: 1-8191
Defaults	None
Command Modes	ECFM DOMAIN
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.3.1.0 Introduced on S-Series

mep cross-check enable
S Enable cross-checking.

Syntax	mep cross-check enable {port | vlan-id}
Parameters	port	Down service with no VLAN association.
	vlan-id	Enter the VLAN to apply the cross-check.
Defaults	None
Command Modes	ECFM DOMAIN
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.3.1.0 Introduced on S-Series

mep cross-check start-delay

Configure the amount of time the system waits for a remote MEP to come up before the cross-check operation is started.

Syntax	mep cross-check start-delay number
Parameters	start-delay number	Enter a start-delay in seconds. Range: 3-100 seconds
Defaults	3 ccms
Command Modes	ETHERNET CFM

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.3.1.0 Introduced on S-Series

ping ethernet

S

Send a Loopback message.

Syntax

ping ethernet domain [name1 level] ma-name m a-name remote {dest-mep-id | mac-addr mac-address} source {src-mep-id | port interface}
Parameters

name | level	Enter the domain name or level.
ma-name ma-name	Enter the keyword followed by the maintenance association name.
dest-mep-id	Enter the MEP ID that will be the target of the ping.
mac-addr mac-address	Enter the keyword followed by the MAC address that will be the target of the ping.
src-mep-id	Enter the MEP ID that will originate the ping.
port interface	Enter the keyword followed by the interface that will originate the ping.

Defaults

None

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.3.1.0 Introduced on S-Series

show ethernet cfm domain

S

Display maintenance domain information.

Syntax

show ethernet cfm domain [name | level | brief]
Parameters

name | level	Enter the maintenance domain name or level.
brief	Enter this keyword to display a summary output.

Defaults

None

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.3.1.0 Introduced on S-Series

Example FTOS# show ethernet cfm domain

Domain Name: customer

Level: 7

Total Service: 1 Services

MA-Name	VLAN	CC-Int	X-CHK Status
My_MA	200	10s	enabled
My_Domain
: 1
MA-Name	VLAN	CC-Int	X-CHK Status
Your_MA	100	10s	enabled

show ethernet cfm maintenance-points local

S Display configured MEPs and MIPs.

Syntax show ethernet cfm maintenance-points local [mep | mip]

Parameters	mep	Enter this keyword to display configured MEPs.
	mip	Enter this keyword to display configured MIPs.

Defaults None

Command Modes EXEC Privilege

Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.3.1.0 Introduced on S-Series

Example FTOS#show ethernet cfm maintenance-points local mip

MPID	Domain Name MA Name	Level VLAN	Type Dir	Port MAC	CCM-Status
0	servicel My_MA	4 3333	MIP DOWN	Gi 0/5 00:01:e8:0b:c6:36	Disabled
0	servicel Your_MA	4 3333	MIP UP	Gi 0/5 00:01:e8:0b:c6:36	Disabled

show ethernet cfm maintenance-points remote

S Display the MEP Database.

Syntax show ethernet cfm maintenance-points remote detail [active | domain {level | name} | expired | waiting]

Parameters	active	Enter this keyword to display only the MEPs in active state.
	domain [name | level]	Enter this keyword followed by the domain name or domain level.
	expired	Enter this keyword to view MEP entries that have expired due to connectivity failure.
	waiting	Enter this keyword to display MEP entries waiting for response.
Defaults	None
Command Modes	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.3.1.0 Introduced on S-Series
Example	FTOS#show ethernet cfm maintenance-points remote detail
	MAC Address: 00:01:e8:58:68:78Domain Name: cfm0MA Name: test0Level: 7VLAN: 10MP ID: 900Sender Chassis ID: FTOSMEP Interface status: UpMEP Port status: ForwardingReceive RDI: FALSEMP Status: Active

show ethernet cfm mipbd

S Display the MIP Database.

Syntax show ethernet cfm mipdb

Defaults None

Command Modes EXEC Privilege

Command History Version 8.3.5.0 Introduced on the S55.

Version 8.3.1.0 Introduced on S-Series

show ethernet cfm statistics

⑤ Display MEP statistics.

Syntax show ethernet cfm statistics [domain {name / level} vlan-id vlan-id mpid mpid]

Parameters	domain	Enter this keyword to display statistics for a particular domain.
	name | level	Enter the domain name or level.
	vlan-id vlan-id	Enter this keyword followed by a VLAN ID.
	mpid mpid	Enter this keyword followed by a maintenance point ID.

Defaults None

Command Modes EXEC Privilege

Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.3.1.0 Introduced on S-Series
Example	FTOS# show ethernet cfm statistics
	Domain Name: Customer
	Domain Level: 7
	MA Name: My_MA
	MPID: 300
	CCMs:
	Transmitted:	1503	RcvdSeqErrors:	0
	LTRs:
	Unexpected Rcvd:	0
	LBRs:
	Received:	0	Rcvd Out Of Order:	0
	Received Bad MSDU:	0
	Transmitted:	0

show ethernet cfm port-statistics

S Display CFM statistics by port.

Syntax show ethernet cfm port-statistics [interface type slot/port]

Parameters	interface type	Enter this keyword followed by the interface type.
	slot/port	Enter the slot and port numbers for the port.
Defaults	None
mand Modes	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.3.1.0 Introduced on S-Series
Example	FTOS#show ethernet cfm port-statistics interface gigabitethernet 0/5Port statistics for port: Gi 0/5================
	RX Statistics================
	Total CFM Pkts 75394 CCM Pkts 75394LBM Pkts 0 LTM Pkts 0LBR Pkts 0 LTR Pkts 0Bad CFM Pkts 0 CFM Pkts Discarded 0CFM Pkts forwarded 102417
	TX Statistics================
	Total CFM Pkts 10303 CCM Pkts 0LBM Pkts 0 LTM Pkts 3LBR Pkts 0 LTR Pkts 0

show ethernet cfm traceroute-cache

S Display the Link Trace Cache.

Syntax	show ethernet cfm traceroute-cache
Defaults	None
Command Modes	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.3.1.0 Introduced on S-Series
Example	FTOS#show ethernet cfm traceroute-cache
	Traceroute to 00:01:e8:52:4a:f8 on Domain Customer2, Level 7, MA name Test2 with VLAN 2
	Hops	Host Next Host	IngressMAC Egress MAC	Ingr Action Egress Action	Relay FWD Status	Action
	4	00:00:00:01:e8:53:4a:f8	00:01:e8:52:4a:f8	IngOK		RlyHit
		00:00:00:01:e8:52:4a:f8				Terminal MEP

service

S Create maintenance association.

Syntax service name vlan vlan-id

Parameters	name	Enter a maintenance association name.
	vlan vlan-id	Enter this keyword followed by the VLAN ID.Range: 1-4094
Defaults	None
mand Modes	ECFM DOMAIN
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.3.1.0 Introduced on S-Series

traceroute cache hold-time

Set the amount of time a trace result is cached.

Syntax traceroute cache hold-time minutes

Parameters

minutes

Enter a hold-time. Range: 10-65535 minutes

Defaults 100 minutes

Command Modes ETHERNET CFM

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.3.1.0 Introduced on S-Series

traceroute cache size

Set the size of the Link Trace Cache.

Syntax

traceroute cache size entries

Parameters

entries

Enter the number of entries the Link Trace Cache can hold.

Range: 1 - 4095 entries

Defaults

100 entries

Command Modes

ETHERNET CFM

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.3.1.0 Introduced on S-Series

traceroute ethernet

Send a Linktrace message to an MEP.

Syntax

traceroute ethernet domain [name | level] ma-name ma-name remote {mep-id mep-id | mac-addr mac-address}

Parameters

domain name / level

Enter the keyword followed by the domain name or level.

ma-name ma-name

Enter the keyword followed by the maintenance association name.

mepid mep-id

Enter the MEP ID that will be the trace target.

mac-addr mac-address

Enter the MAC address of the trace target.

Defaults

None

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.3.1.0 Introduced on S-Series

802.1X

The 802.1X Port Authentication commands are:

• debug dot1x
• dot1x auth-type mab-only
• dot1x authentication (Interface)
• dot1x auth-fail-vlan
• dot1x auth-server
• dot1x guest-vlan
• dot1x host-mode
• dot1x mac-auth-bypass
• dot1x max-eap-req
• dot1x max-supplicants
• dot1x port-control
• dot1x quiet-period
• dot1x reauthentication
• dot1x reauth-max
• dot1x server-timeout
• dot1x supplicant-timeout
• dot1x tx-period
  • show dot1x cos-mapping interface
  • show dot1x interface

An authentication server must authenticate a client connected to an 802.1X switch port. Until the authentication, only EAPOL (Extensible Authentication Protocol over LAN) traffic is allowed through the port to which a client is connected. Once authentication is successful, normal traffic passes through the port.

FTOS supports RADIUS and Active Directory environments using 802.1X Port Authentication.

Important Points to Remember

FTOS limits network access for certain users by using VLAN assignments. 802.1X with VLAN assignment has these characteristics when configured on the switch and the RADIUS server.

• 802.1X is supported on C-Series, E-Series, and S-Series.
• 802.1X is not supported on the LAG or the channel members of a LAG.
• If no VLAN is supplied by the RADIUS server or if 802.1X authorization is disabled, the port is configured in its access VLAN after successful authentication.

- If 802.1X authorization is enabled but the VLAN information from the RADIUS server is not valid, the port returns to the unauthorized state and remains in the configured access VLAN. This prevents ports from appearing unexpectedly in an inappropriate VLAN due to a configuration error. Configuration errors create an entry in Syslog.

• If 802.1X authorization is enabled and all information from the RADIUS server is valid, the port is placed in the specified VLAN after authentication.
• If port security is enabled on an 802.1X port with VLAN assignment, the port is placed in the RADIUS server assigned VLAN.
• If 802.1X is disabled on the port, it is returned to the configured access VLAN.
• When the port is in the force authorized, force unauthorized, or shutdown state, it is placed in the configured access VLAN.
• If an 802.1X port is authenticated and put in the RADIUS server assigned VLAN, any change to the port access VLAN configuration will not take effect.
• The 802.1X with VLAN assignment feature is not supported on trunk ports, dynamic ports, or with dynamic-access port assignment through a VLAN membership.

debug dot1x

Display 802.1X debugging information.

Syntax
debug dot1x [all | errors | packets | state-machine] [interface interface]

Parameters	all	Enable all 802.1X debug messages.
	errors	Display information about all 802.1X errors.
	packets	Display information about all 802.1X packets.
	state-machine	Display information about all 802.1X packets.
	interface interface	Restricts the debugging information to an interface.
Defaults	Disabled
mand Modes	EXEC Privilege
Command History	Version 8.4.1.0 Introduced on C-Series and S-Series

dot1x auth-type mab-only

C S	Use only the host MAC address to authenticate a device with MAC authentication bypass (MAB).
Syntax	dot1x auth-type mab-only
Defaults	Disabled
Command Modes	INTERFACE
Command History	Version 8.4.2.1 Introduced on the C-Series and S-Series
	Version 8.4.2.1 Introduced on S55 and S60 platforms
	Version 8.3.5.6 Introduced on S55 and S60 platforms
Usage Information	The prerequisites for enabling MAB-only authentication on a port are:802.1X authentication must be enabled globally on the switch and on the port (dot1x authentication command).MAC authentication bypass must be enabled on the port (dot1x mac-auth-bypass command).In MAB-only authentication mode, a port authenticates using the host MAC address even though 802.1xauthentication is enabled. If the MAB-only authentication fails, the host is placed in the guest VLAN (if configured).To disable MAB-only authentication on a port, enter the no dot1x auth-type mab-only command.
Related Commands	dot1x mac-auth-bypass

dot1x authentication (Configuration)

C E S	Enable dot1x globally; dot1x must be enabled both globally and at the interface level.
Syntax	dot1x authenticationTo disable dot1x on an globally, use theno dot1x authenticationcommand.
Defaults	Disabled
Command Modes	CONFIGURATION
Command History	Version 7.6.1.0 Introduced on C-Series and S-Series
	Version 7.4.1.0 Introduced on E-Series
Related Commands	dot1x authentication (Interface)

dot1x authentication (Interface)

Enable dot1x on an interface; dot1x must be enabled both globally and at the interface level.

Syntax

dot1x authentication

To disable dot1x on an interface, use the no dot1x authentication command.

Defaults

Disabled

Command Modes

INTERFACE

Command History

Version 7.6.1.0 Introduced on C-Series and S-Series

Version 7.4.1.0 Introduced on E-Series

Related Commands

dot1x authentication (Configuration)

dot1x auth-fail-vlan

Configure a authentication failure VLAN for users and devices that fail 802.1X authentication.

Syntax

dot1x auth-fail-vlan vlan-id [max-attempts number]

To delete the authentication failure VLAN, use the no dot1x auth-fail-vlan vlan-id [max-attempts number] command.

Parameters

vlan-id

Enter the VLAN Identifier.

Range: 1 to 4094

max-attempts number

(OPTIONAL) Enter the keyword max-attempts followed number of attempts desired before authentication fails.

Range: 1 to 5

Default: 3

Defaults

3 attempts

Command Modes

CONFIGURATION (conf-if-interface-slot/port)

Command History

Version 7.6.1.0 Introduced on C-Series, E-Series and S-Series

Usage Information

If the host responds to 802.1X with an incorrect login/password, the login fails. The switch will attempt to authenticate again until the maximum attempts configured is reached. If the authentication fails after all allowed attempts, the interface is moved to the authentication failed VLAN.

Once the authentication VLAN is assigned, the port-state must be toggled to restart authentication. Authentication will occur at the next re-authentication interval (dot1x reauthentication).

Related Commands

dot1x port-control

dot1x guest-vlan

show dot1x interface

dot1x auth-server

C E S	Configure the authentication server to RADIUS.
Syntax	dot1x auth-server radius
Defaults	No default behavior or values
Command Modes	CONFIGURATION
Command History	Version 7.6.1.0 Introduced on C-Series and S-Series
	Version 7.4.1.0 Introduced on E-Series

dot1x guest-vlan

Syntax	Configure a guest VLAN for limited access users or for devices that are not 802.1X capable.dot1x guest-vlan vlan-idTo disable the guest VLAN, use theno dot1x guest-vlan vlan-idcommand.
Parameters	vlan-id	Enter the VLAN Identifier.Range: 1 to 4094
Defaults	Not configured
Command Modes	CONFIGURATION (conf-if-interface-slot/port)
Command History	Version 7.6.1.0 Introduced on C-Series, E-Series, and S-Series
Usage Information	802.1X authentication is enabled when an interface is connected to the switch. If the host fails to respond within a designated amount of time, the authenticator places the port in the guest VLAN.If a device does not respond within 30 seconds, it is assumed that the device is not 802.1X capable.Therefore, a guest VLAN is allocated to the interface and authentication, for the device, will occur at the next re-authentication interval (dot1x reauthentication).If the host fails authentication for the designated amount of times, the authenticator places the port in authentication failed VLAN (dot1x auth-fail-vlan).Note: Layer 3 portion of guest VLAN and authentication fail VLANs can be created regardless if the VLAN is assigned to an interface or not. Once an interface is assigned a guest VLAN (which has an IP address), then routing through the guest VLAN is the same as any other traffic. However, interface may join/leave a VLAN dynamically.
Related Commands	dot1x auth-fail-vlan
	dot1x reauthentication
	show dot1x interface

dot1x host-mode

Enable single-host or multi-host authentication.

Syntax
dot1x host-mode {single-host | multi-host | multi-auth}

Parameters	single-host	Enable single-host authentication.
	multi-host	Enable multi-host authentication.
	multi-auth	Enable multi-supplicant authentication.
Defaults	single-host
Command Modes	INTERFACE
Command History	Version 8.4.1.0 The multi-auth option was introduced on the C-Series and S-Series.
	Version 8.3.2.0	The single-host and multi-host options were introduced on the C-Series, E-Series TeraScale, and S-Series
	Version 8.3.5.6 Introduced on S55 and S60 platforms
Usage Information	• Single-host mode authenticates only one host per authenticator port, and drops all other traffic on the port.• Multi-host mode authenticates the first host to respond to an Identity Request, and then permits all other traffic on the port.• Multi-supplicant mode authenticates every device attempting to connect to the network on through the authenticator port.
Related Commands	show dot1x interface

dot1x mac-auth-bypass

Enable MAC authentication bypass. If 802.1X times out because the host did not respond to the Identity Request frame, FTOS attempts to authenticate the host based on its MAC address.

Syntax

dot1x mac-auth-bypass

Command Modes

Command History

INTERFACE

Version 8.4.1.0 Introduced on C-Series and S-Series

Version 8.3.5.6 Introduced on S55 and S60 platforms

Usage Information

To disable MAC authentication bypass on a port, enter the no dot1x mac-auth-bypass command.

Related Commands

dot1x auth-type mab-only

dot1x max-eap-req

Configure the maximum number of times an EAP (Extensive Authentication Protocol) request is transmitted before the session times out.

Syntax dot1x max-eap-req number

To return to the default, use the no dot1x max-eap-req command.

Parameters	number	Enter the number of times an EAP request is transmitted before a session time-out. Range: 1 to 10 Default: 2
Defaults	2
mand Modes	INTERFACE
Command History	Version 7.6.1.0 Introduced on C-Series and S-Series
	Version 7.4.1.0 Introduced on E-Series

dot1x max-supplicants

Restrict the number of supplicants that can be authenticated and permitted to access the network through the port. This configuration is only takes effect in multi-auth mode.

Syntax dot1x max-supplicants number

Parameters	number	Enter the number of supplicants that can be authenticated on a single port in multi-auth mode. Range: 1-128 Default: 128
Defaults	128 hosts can be authenticated on a single authenticator port.
Command Modes	INTERFACE
Command History	Version 8.4.1.0 Introduced on C-Series and S-Series
	Version 8.3.5.6 Introduced on S55 and S60 platforms
Related Commands	dot1x host-mode

dot1x port-control

Enable port control on an interface.

Syntax dot1x port-control {force-authorized | auto | force-unauthorized}

Parameters	force-authorized	Enter the keyword force-authorized to forcibly authorize a port.
	auto	Enter the keyword auto to authorize a port based on the 802.1X operation result.
	force-unauthorized	Enter the keyword force-unauthorized to forcibly de-authorize a port.
Defaults	No default behavior or values
Command Modes	INTERFACE
Command History	Version 7.6.1.0 Introduced on C-Series and S-Series
	Version 7.4.1.0 Introduced on E-Series
Usage Information	The authenticator performs authentication only when port-control is set to auto.

dot1x quiet-period

Set the number of seconds that the authenticator remains quiet after a failed authentication with a client.

Syntax

dot1x quiet-period seconds

To disable quiet time, use the no dot1x quiet-time command.

Parameters

seconds

Enter the number of seconds.

Range: 1 to 65535

Default: 30

Defaults

30 seconds

Command Modes

INTERFACE

Command History

Version 7.6.1.0 Introduced on C-Series and S-Series

Version 7.4.1.0 Introduced on E-Series

dot1x reauthentication

Enable periodic re-authentication of the client.

Syntax

dot1x reauthentication [interval seconds]

To disable periodic re-authentication, use the no dot1x reauthentication command.

Parameters

interval seconds

(Optional) Enter the keyword interval followed by the interval time, in seconds, after which re-authentication will be initiated. Range: 1 to 31536000 (1 year) Default: 3600 (1 hour)

Defaults 3600 seconds (1 hour)

Command Modes INTERFACE

Command History

Version 7.6.1.0 Introduced on C-Series and S-Series

Version 7.4.1.0 Introduced on E-Series

dot1x reauth-max

Configure the maximum number of times a port can re-authenticate before the port becomes unauthorized.

Syntax dot1x reauth-max number

To return to the default, use the no dot1x reauth-max command.

Parameters

number

Enter the permitted number of re-authentications. Range: 1 - 10 Default: 2

Defaults 2

Command Modes INTERFACE

Command History

Version 7.6.1.0 Introduced on C-Series and S-Series

Version 7.4.1.0 Introduced on E-Series

dot1x server-timeout

Syntax	Configure the amount of time after which exchanges with the server time out.dot1x server-timeout secondsTo return to the default, use theno dot1x server-timeout command.
Parameters	seconds	Enter a time-out value in seconds.Range: 1 to 300, where 300 is implementation dependant. Default: 30
Defaults	30 seconds
Command Modes	INTERFACE
Command History	Version 7.6.1.0 Introduced on C-Series and S-Series
	Version 7.4.1.0 Introduced on E-Series
Usage Information	When you configure the dot1x server-timeout value, you must take into account the communication medium used to communicate with an authentication server and the number of RADIUS servers configured. Ideally, the dot1x server-timeout value (in seconds) is based on the configured RADIUS-server timeout and retransmit values and calculated according to the following formula: dot1x server-timeout seconds > (radius-server retransmit seconds + 1) * radius-server timeout secondsWhere the default values are as follows: dot1x server-timeout (30 seconds), radius-server retransmit (3 seconds), and radius-server timeout (5 seconds).For example:FTOS (conf) #radius-server host 10.11.197.105 timeout 6FTOS (conf) #radius-server host 10.11.197.105 retransmit 4FTOS (conf) #interface gigabitethernet 2/23FTOS (conf-if-gi-2/23) #dot1x server-timeout 40

dot1x supplicant-timeout

Configure the amount of time after which exchanges with the supplicant time out.

Syntax

dot1x supplicant-timeout seconds

To return to the default, use the no dot1x supplicant-timeout command.

Parameters	seconds	Enter a time-out value in seconds. Range: 1 to 300, where 300 is implementation dependant. Default: 30
Defaults	30 seconds
mand Modes	INTERFACE
Command History	Version 7.6.1.0 Introduced on C-Series and S-Series
	Version 7.4.1.0 Introduced on E-Series

dot1x tx-period

Configure the intervals at which EAPOL PDUs are transmitted by the Authenticator PAE.

Syntax

dot1x tx-period seconds

To return to the default, use the no dot1x tx-period command.

Parameters	seconds	Enter the interval time, in seconds, that EAPOL PDUs are transmitted. Range: 1 to 31536000 (1 year) Default: 30
Defaults	30 seconds
mand Modes	INTERFACE
Command History	Version 7.6.1.0 Introduced on C-Series and S-Series
	Version 7.4.1.0 Introduced on E-Series

show dot1x cos-mapping interface

Display the CoS priority-mapping table provided by the RADIUS server and applied to authenticated supplicants on an 802.1X-enabled port.

Syntax
show dot1x cos-mapping interface interface [mac-address mac-address]

Parameters	interface	Enter one of the following keywords and slot/port or number information:For a Gigabit Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For a Fast Ethernet interface, enter the keywordFastEthernetfollowed by the slot/port information.For a Ten Gigabit Ethernet interface, enter the keywordTenGigabitEthernetfollowed by the slot/port information.
	mac-address	(Optional) MAC address of an 802.1X-authenticated supplicant.
Defaults	No default values or behavior
Command Modes	EXEC
	EXEC privilege
Command History	Version 8.4.2.1 Introduced on the C-Series and S-Series
Usage Information	Enter a supplicant's MAC address using themac-addressoption to display CoS mapping information only for the specified supplicant.You can display the CoS mapping information applied to traffic from authenticated supplicants on 802.1X-enabled ports that are in single-host, multi-host, and multi-supplicant authentication modes.

Defaults
Command History
Usage Information

Figure 6-1. show dot1x cos-mapping interface Command Example

FTOS#show dot1x cos-mapping interface gigabitehternet 2/21
802.1p CoS re-map table on Gi 2/21:
Dot1p	Remapped Dot1p
0	7
1	6
2	5
3	4
4	3
5	2
6	1
7	0
FTOS#show dot1x cos-mapping int g 2/21 mac-address 00:00:01:00:07:00
802.1p CoS re-map table on Gi 2/21:
802.1p CoS re-map table for Supplicant: 00:00:01:00:07:00
Dot1p	Remapped Dot1p
0	7
1	6
2	5
3	4
4	3
5	2
6	1
7	0

show dot1x interface

Display the 802.1X configuration of an interface.

Syntax
show dot1x interface interface [mac-address mac-address]

Parameters	interface	Enter one of the following keywords and slot/port or number information:For a Gigabit Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For a Fast Ethernet interface, enter the keywordFastEthernetfollowed by the slot/port information.For a Ten Gigabit Ethernet interface, enter the keywordTenGigabitEthernetfollowed by the slot/port information.
	mac-address	(Optional) MAC address of a supplicant.
Defaults	No default values or behavior
Command Modes	EXEC
	EXEC privilege
Command History	Version 8.4.2.1	Introduced mac-addressoption on the C-Series and S-Series
	Version 7.6.1.0 Introduced on C-Series, E-Series, and S-Series
Usage Information	C-Series and S-Series only: Enter a supplicant's MAC address using themac-addressoption to display information only on the 802.1X-enabled port to which the supplicant is connected.
	If 802.1X multi-supplicant authentication is enabled on a port, additional 802.1X configuration details (port authentication status, untagged VLAN ID, authentication PAE state, and backend state) are displayed for each supplicant as shown in Figure 6-4.

Defaults

Command History	Version 8.4.2.1 Introduced mac-address option on the C-Series and S-Series
	Version 7.6.1.0 Introduced on C-Series, E-Series, and S-Series
Usage Information	C-Series and S-Series only: Enter a supplicant's MAC address using the mac-address option to display information only on the 802.1X-enabled port to which the supplicant is connected.
	If 802.1X multi-supplicant authentication is enabled on a port, additional 802.1X configuration details (port authentication status, untagged VLAN ID, authentication PAE state, and backend state) are displayed for each supplicant as shown in Figure 6-4.

Example

Figure 6-2. show dot1x interface Command Example

FTOS#show dotlx int Gi 2/32
802.1x information on Gi 2/32:
Dotlx Status:	Enable
Port Control:	AUTO
Port Auth Status:	UNAUTHORIZED
Re-Authentication:	Disable
Untagged VLAN id:	None
Guest VLAN:	Enable
Guest VLAN id:	10
Auth-Fail VLAN:	Enable
Auth-Fail VLAN id:	11
Auth-Fail Max-Attempts:	3
Tx Period:	30 seconds
Quiet Period:	60 seconds
ReAuth Max:	2
Supplicant Timeout:	30 seconds
Server Timeout:	30 seconds
Re-Auth Interval:	3600 seconds
Max-EAP-Req:	2
Auth Type:	SINGLE_HOST
Auth PAE State:	Initialize
Backend State:	Initialize
FTOS#

Figure 6-3. show dot1x interface mac-address Command Example

Figure 6-4. show dot1x interface (with Multi-Supplicant Authentication enabled) Example

FTOS#show dot1x interface g 0/21
802.1x information on Gi 0/21:
Dot1x Status:	Enable
Port Control:	AUTO
Re-Authentication:	Disable
Guest VLAN:	Enable
Guest VLAN id:	100
Auth-Fail VLAN:	Disable
Auth-Fail VLAN id:	NONE
Auth-Fail Max-Attempts:	NONE
Mac-Auth-Bypass:	Disable
Mac-Auth-Bypass Only:	Disable
Tx Period:	30 seconds
Quiet Period:	60 seconds
ReAuth Max:	3
Supplicant Timeout:	30 seconds
Server Timeout:	30 seconds
Re-Auth Interval:	60 seconds
Max-EAP-Req:	2
Host Mode:	MULTI_AUTH
Max-Supplicants:	128
Port status and State info for Supplicant: 00:00:00:00:00:10
Port Auth Status:	AUTHORIZED
Untagged VLAN id:	400
Auth PAE State:	Authenticated
Backend State:	Idle
Port status and State info for Supplicant: 00:00:00:00:00:11
Port Auth Status:	AUTHORIZED
Untagged VLAN id:	300
Auth PAE State:	Authenticated
Backend State:	Idle
Port status and State info for Supplicant: 00:00:00:00:00:15
Port Auth Status:	AUTHORIZED (GUEST-VLAN)
Untagged VLAN id:	100
Auth PAE State:	Authenticated
Backend State:	Idle

Access Control Lists (ACL)

Overview

Access Control Lists (ACLs) are supported on platforms C E S

FTOS supports the following types of Access Control List (ACL), IP prefix list, and route map:

• Commands Common to all ACL Types
  • Common IP ACL Commands
  • Standard IP ACL Commands
  • Extended IP ACL Commands
• Common MAC Access List Commands
  • Standard MAC ACL Commands
• Extended MAC ACL Commands
  • IP Prefix List Commands
• Route Map Commands
  • AS-Path Commands
  • IP Community List Commands

Note: For IPv6 ACL commands, see Chapter 17, IPv6 Access Control Lists (IPv6 ACLs).

Commands Common to all ACL Types

The following commands are available within each ACL mode and do not have mode-specific options. Some commands may use similar names, but require different options to support the different ACL types (for example, deny).

• description
• remark
  • show config

description

Configure a short text string describing the ACL.

Syntax description text

To delete the ACL description, enter no description.

Parameters	text	Enter a text string up to 80 characters long.
Defaults	Not enabled.
Command Modes	CONFIGURATION-STANDARD-ACCESS-LIST
	CONFIGURATION-EXTENDED-ACCESS-LIST
	CONFIGURATION-MAC ACCESS LIST-STANDARD
	CONFIGURATION-MAC ACCESS LIST-EXTENDED
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.2.1.1 Introduced on E-Series
remark
C E S	Enter a description for an ACL entry.
Syntax	remark [remark-number] [description]
	To delete the description, use theno remark[remark number] command. Note that it is not necessary to include the remarks description that you are deleting.
Parameters	remark-number	Enter the remark number. Note that the same sequence number can be used for the remark and an ACL rule. Range: 0 to 4294967290
	description	Enter a description of up to 80 characters.
Defaults	Not configured
Command Modes	CONFIGURATION-STANDARD-ACCESS-LIST
	CONFIGURATION-EXTENDED-ACCESS-LIST
	CONFIGURATION-MAC ACCESS LIST-STANDARD
	CONFIGURATION-MAC ACCESS LIST-EXTENDED
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series Exa Scale
	Version 7.6.1.0 Added support for S-Series
	Version 7.5.1.0 Added support for C-Series
	pre-Version 6.4.1.0 Introduced for E-Series
Usage Information	Theremarkcommand is available in each ACL mode. You can configure up to 4294967290 remarks in a given ACL.

The following example shows the use of the remark command twice within the CONFIGURATION-STANDARD-ACCESS-LIST mode. Here, the same sequence number was used for the remark and for an associated ACL rule. The remark will precede the rule in the running-config because it is assumed that the remark is for the rule with the same sequence number, or the group of rules that follow the remark.

Example

Figure 7-1. Command Example: remark

FTOS(config-std-nacl)#remark 10 Deny rest of the traffic
FTOS(config-std-nacl)#remark 5 Permit traffic from XYZ Inc.
FTOS(config-std-nacl)#show config
!
ip access-list standard test
remark 5 Permit traffic from XYZ Inc.
seq 5 permit 1.1.1.0/24
remark 10 Deny rest of the traffic
seq 10 Deny any
FTOS(config-std-nacl)# 

Related Commands

show config Display the current ACL configuration.

show config

Display the current ACL configuration.

Syntax

show config

Command Modes

CONFIGURATION-STANDARD-ACCESS-LIST

CONFIGURATION-EXTENDED-ACCESS-LIST

CONFIGURATION-MAC ACCESS LIST-STANDARD

CONFIGURATION-MAC ACCESS LIST-EXTENDED

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

Version 6.2.1.1 Introduced

Example

Figure 7-2. Command Example: show config

FTOS (config-ext-nacl) #show conf
!
ip access-list extended patches
FTOS (config-ext-nacl) # 

Common IP ACL Commands

The following commands are available within both IP ACL modes (Standard and Extended) and do not have mode-specific options. When an access-list (ACL) is created without any rule and then applied to an interface, ACL behavior reflects an implicit permit.

C and S (non-S55) platforms support Ingress IP ACLs only.

The supports both Ingress and Egress IP ACLs.

The following commands allow you to clear, display, and assign IP ACL configurations.

• access-class
  • clear counters ip access-group
• ip access-group
• ip control-plane egress-filter
  • show ip accounting access-list

Note: See also Commands Common to all ACL Types.

access-class

Syntax	Apply a standard ACL to a terminal line.
	access-class access-list-name
	To remove an ACL, use the no access-class access-list-name command.
Parameters	access-list-name	Enter the name of a configured Standard ACL, up to 140 characters.
Defaults	Not configured.
Command Modes	LINE
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	pre-Version 6.2.1.1 Introduced

clear counters ip access-group

C E S	Erase all counters maintained for access lists.
Syntax	clear counters ip access-group [access-list-name]
Parameters	access-list-name	(OPTIONAL) Enter the name of a configured access-list, up to 140 characters.
Command Modes	EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

pre-Version 6.2.1.1 Introduced

ip access-group

Assign an IP access list (IP ACL) to an interface.

Syntax

ip access-group access-list-name {in | out} [implicit-permit] [vlan vlan-id]

To delete an IP access-group configuration, use the no ip access-group access-list-name {in | out} [implicit-permit] [vlan vlan-id] command.

Parameters

access-list-name	Enter the name of a configured access list, up to 140 characters.
in Enter the keyword in to apply the ACL to incoming traffic.
out	Enter the keyword out to apply the ACL to outgoing traffic.Note: Available only on 12-port 1-Gigabit Ethernet FLEX line card. Refer to your line card documentation for specifications. Not available on S-Series.
implicit-permit	(OPTIONAL) Enter the keyword implicit-permit to change the default action of the ACL from implicit-deny to implicit-permit (that is, if the traffic does not match the filters in the ACL, the traffic is permitted instead of dropped).
vlan vlan-id	(OPTIONAL) Enter the keyword vlan followed by the ID numbers of the VLANs.Range: 1 to 4094, 1-2094 for ExaScale (can used IDs 1-4094)

Defaults

Not enabled.

Command Modes

INTERFACE

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

pre-Version 6.2.1.1 Introduced

You can assign one ACL (standard or extended ACL) to an interface.

Usage Information

Note: This command is supported on the loopback interfaces of EE3, and EF series RPMs. It is not supported on loopback interfaces ED series RPM, or on C-Series or S-Series loopback interfaces.

Related Commands

When you apply an ACL that filters IGMP traffic, all IGMP traffic is redirected to the CPUs and soft-forwarded, if required, in the following scenarios:

• on a Layer 2 interface - if a Layer 3 ACL is applied to the interface.
  • on a Layer 3 port or on a Layer 2/Layer 3 port

ip access-list standard Configure a standard ACL.

ip access-list extended Configure an extended ACL.

ip control-plane egress-filter

S60

Enable egress Layer 3 ACL lookup for IPv4 CPU traffic

Syntax ip control-plane egress-filter

Defaults Not enabled.

Command Modes EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

show ip accounting access-list

C E S

Display the IP access-lists created on the switch and the sequence of filters.

Syntax show ip accounting {access-list access-list-name | cam_count} interface interface

Parameters

access-list-name	Enter the name of the ACL to be displayed.
cam_count	List the count of the CAM rules for this ACL.
interface interface	Enter the keywordinterfacefollowed by the interface type and slot/port or number information:For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernet followed by the slot/port information.For a Port Channel interface, enter the keywordport-channelfollowed by a number:C-Seriesand S-SeriesRange: 1-128E-SeriesRange: 1 to 255 for TeraScale and ExaScale.For a SONET interface, enter the keywordsonetfollowed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernetfollowed by the slot/port information.

Command Modes
EXEC EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

pre-Version 6.2.1.1 Introduced

Example

Figure 7-3. Command Example: show ip accounting access-lists

FTOS#show ip accounting access FILTER1 interface gig 1/6
Extended IP access list FILTER1
seq 5 deny ip any 191.1.0.0 /16 count (0x00 packets)
seq 10 deny ip any 191.2.0.0 /16 order 4
seq 15 deny ip any 191.3.0.0 /16
seq 20 deny ip any 191.4.0.0 /16
seq 25 deny ip any 191.5.0.0 /16 

Table 7-1 defines the information in Figure 7-3.

Table 7-1. show ip accounting access-lists Command Example Field

Field Description
“Extended IP ...” Displays the name of the IP ACL.
“seq 5 ...” Displays the filter. If the k	keywords count or byte were configured in the filter, the number of packets or bytes processed by the filter is displayed at the end of the line.
“order 4” Displays the QoS order of	priority for the ACL entry.

Standard IP ACL Commands

When an ACL is created without any rule and then applied to an interface, ACL behavior reflects an implicit permit.

C and S platforms (except the S55) support Ingress IP ACLs only.

The supports both Ingress and Egress IP ACLs.

The commands needed to configure a Standard IP ACL are:

• deny
• ip access-list standard
• permit
• resequence access-list
• resequence prefix-list ipv4
• seq

Note: See also Commands Common to all ACL Types and Common IP ACL Commands.

deny

Syntax

Configure a filter to drop packets with a certain IP address.

deny {source [mask] | any | host ip-address} [count [byte] | log] [dscp value] [order] [monitor] [fragments]

To remove this filter, you have two choices:

• Use the no seq sequence-number command syntax if you know the filter's sequence number or
  • Use the no deny { source [mask] | any | host ip-address} command.

Parameters

source	Enter the IP address in dotted decimal format of the network from which the packet was sent.
mask	(OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous (discontiguous).
any	Enter the keyword any to specify that all routes are subject to the filter.
host ip-address	Enter the keyword host followed by the IP address to specify a host IP address only.
count	(OPTIONAL) Enter the keyword count to count packets processed by the filter.
byte	(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
log	(OPTIONAL, E-Series only) Enter the keyword log to enter ACL matches in the log.
dscp	(OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP values.
order	(OPTIONAL) Enter the keyword order to specify the QoS order of priority for the ACL entry.Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority)Default: If the order keyword is not used, the ACLs have the lowest order by default(255).
monitor	(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section “Flow-based Monitoring” in the Port Monitoring chapter of the FTOS Configuration Guide.
fragments	Enter the keyword fragments to use ACLs to control packet fragments.

Defaults

Not configured.

Command Modes

CONFIGURATION-STANDARD-ACCESS-LIST

Command History

Version 8.3.5.0	Introduced on the S55.
Version 8.3.1.0	Add DSCP value for ACL matching.
Version 8.2.1.0	Allows ACL control of fragmented packets for IP (Layer 3) ACLs.
Version 8.1.1.0	Introduced on E-Series ExaScale
Version 7.6.1.0	Added support for S-Series
Version 7.5.1.0	Added support for C-Series
Version 7.4.1.0	Added support for non-contiguous mask and added themonitoroption.
Version 6.5.1.0	Expanded to include the optional QoS order priority for the ACL entry.

Usage Information

The order option is relevant in the context of the Policy QoS feature only. See the “Quality of Service” chapter of the FTOS Configuration Guide for more information.

When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets' details.

The monitor option is relevant in the context of flow-based monitoring only. See the Chapter 29, Port Monitoring.

The C-Series and S-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented.

Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.

Related Commands

ip access-list standard Configure a standard ACL.

permit Configure a permit filter.

ip access-list standard

Create a standard IP access list (IP ACL) to filter based on IP address.

Syntax

ip access-list standard access-list-name

To delete an access list, use the no ip access-list standard access-list-name command.

Parameters

access-list-name

Enter a string up to 140 characters long as the ACL name.

Defaults

All IP access lists contain an implicit “deny any,” that is, if no match occurs, the packet is dropped.

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.

Version 7.6.1.0 Added support for S-Series

Version 7.5.1.0 Added support for C-Series

Version 7.4.1.0 Added support for non-contiguous mask and added the monitor option.

Version 6.5.1.0 Expanded to include the optional QoS order priority for the ACL entry.

Usage Information

FTOS supports one ingress and one egress IP ACL per interface.

Prior to 7.8.1.0, names are up to 16 characters long.

The number of entries allowed per ACL is hardware-dependent. Refer to your line card documentation for detailed specification on entries allowed per ACL.

Example

Figure 7-4. Command Example: ip access-list standard

FTOS (conf) #ip access-list standard TestList

FTOS (config-std-nacl) #

Related Commands

ip access-list extended Create an extended access list.

show config Display the current configuration.

permit

Configure a filter to permit packets from a specific source IP address to leave the switch.

Syntax

permit { source [mask] | any | host ip-address} [count [byte] | log] [dscp value] [order] [monitor]

To remove this filter, you have two choices:

• Use the no seq sequence-number command syntax if you know the filter's sequence number or
  • Use the no permit {source [mask] | any | host ip-address} command.

Parameters

source	Enter the IP address in dotted decimal format of the network from which the packet was sent.
mask	(OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
any	Enter the keyword any to specify that all routes are subject to the filter.
host ip-address	Enter the keyword host followed by the IP address to specify a host IP address or hostname.
count	(OPTIONAL) Enter the keyword count to count packets processed by the filter.
dscp	(OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP values.
byte	(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
log	(OPTIONAL, E-Series only) Enter the keyword log to enter ACL matches in the log.
order	(OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry.Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority)Default: If the order keyword is not used, the ACLs have the lowest order by default (255).
monitor	(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section “Flow-based Monitoring” in the Port Monitoring chapter of the FTOS Configuration Guide.

Defaults

Not configured.

Command Modes

CONFIGURATION-STANDARD-ACCESS-LIST

Command History

Version 8.3.5.0 Introduced on the S55.
Version 8.3.1.0 Add DSCP value for ACL matching.
Version 8.2.1.0 Allows ACL control of fragmented packets for IP (Layer 3) ACLs.
Version 8.1.1.0 Introduced on E-Series ExaScale
Version 7.6.1.0 Added support for S-Series
Version 7.5.1.0 Added support for C-Series
Version 7.4.1.0	Added support for non-contiguous mask and added the monitor option.
Version 6.5.10	Expanded to include the optional QoS order priority for the ACL entry.

Usage Information

The order option is relevant in the context of the Policy QoS feature only. See the “Quality of Service” chapter of the FTOS Configuration Guide for more information.

When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets' details.

The monitor option is relevant in the context of flow-based monitoring only. See Chapter 29, Port Monitoring.

The C-Series and S-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented.

Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.

Related Commands

deny Assign a IP ACL filter to deny IP packets. ip access-list standard Create a standard ACL.

resequence access-list

Re-assign sequence numbers to entries of an existing access-list.

Syntax

resequence access-list {ipv4 | ipv6 | mac} {access-list-name StartingSeqNum Step-to-Increment}

Parameters

ipv4 | ipv6 | mac	Enter the keyword ipv4, or mac to identify the access list type to resequence.
access-list-name	Enter the name of a configured IP access list.
StartingSeqNum	Enter the starting sequence number to resequence.Range: 0 - 4294967290
Step-to-Increment	Enter the step to increment the sequence number.Range: 1 - 4294967290

Defaults

No default values or behavior

Command Modes

EXEC

EXEC Privilege

Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.2.1.0 Introduced on E-Series ExaScale (IPv6)
	Version 8.1.1.0 Introduced on E-Series ExaScale (IPv4)
	Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	Version 7.4.1.0 Introduced
Usage information	When all sequence numbers have been exhausted, this feature permits re-assigning new sequence number to entries of an existing access-list.
Related Commands	resequence prefix-list ipv4 Resequence a prefix list

resequence prefix-list ipv4

Re-assign sequence numbers to entries of an existing prefix list.

Syntax
resequence prefix-list ipv4 {prefix-list-name StartingSeqNum Step-to-increment}

Parameters	prefix-list-name	Enter the name of configured prefix list, up to 140 characters long.
	StartingSeqNum	Enter the starting sequence number to resequence.Range: 0 – 65535
	Step-to-Increment	Enter the step to increment the sequence number.Range: 1 – 65535
Defaults	No default values or behavior
Command Modes	EXEC
	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
	Version 7.6.1.0 Added support for S-Series
	Version 7.5.1.0 Added support for C-Series
	Version 7.4.1.0 Introduced
Usage Information	When all sequence numbers have been exhausted, this feature permits re-assigning new sequence number to entries of an existing prefix list.
	Prior to 7.8.1.0, names are up to 16 characters long.
Related Commands	resequence access-list Resequence an access-list

Syntax

Assign a sequence number to a deny or permit filter in an IP access list while creating the filter.

seq sequence-number {deny | permit} {source [mask] | any | host ip-address} } [count [byte] | log] [dscp value] [order] [monitor] [fragments]

To delete a filter, use the no seq sequence-number command.

Parameters

sequence-number	Enter a number from 0 to 4294967290.
deny	Enter the keyword deny to configure a filter to drop packets meeting this condition.
permit	Enter the keyword permit to configure a filter to forward packets meeting this criteria.
source	Enter a IP address in dotted decimal format of the network from which the packet was received.
mask	(OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
any	Enter the keyword any to specify that all routes are subject to the filter.
host ip-address	Enter the keyword host followed by the IP address to specify a host IP address or hostname.
count	(OPTIONAL) Enter the keyword count to count packets processed by the filter.
byte	(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
log	(OPTIONAL, E-Series only) Enter the keyword log to enter ACL matches in the log.
dscp	(OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP values.
order	(OPTIONAL) Enter the keyword order to specify the QoS order for the ACL entry.Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority)Default: If the order keyword is not used, the ACLs have the lowest order by default (255).
monitor	(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section “Flow-based Monitoring” in the Port Monitoring chapter of the FTOS Configuration Guide.
fragments	Enter the keyword fragments to use ACLs to control packet fragments.

Defaults

Not configured

Command Modes

CONFIGURATION-STANDARD-ACCESS-LIST

Command History

Version 8.3.5.0	Introduced on the S55.
Version 8.3.1.0	Add DSCP value for ACL matching.
Version 8.2.1.0	Allows ACL control of fragmented packets for IP (Layer 3) ACLs.
Version 8.1.1.0	Introduced on E-Series ExaScale

Usage Information

Version 7.6.1.0 Added support for S-Series
Version 7.5.1.0 Added support for C-Series
Version 7.4.1.0	Added support for non-contiguous mask and added the monitor option.
Version 6.5.10	Expanded to include the optional QoS order priority for the ACL entry.

The monitor option is relevant in the context of flow-based monitoring only. See Chapter 29, Port Monitoring.

The order option is relevant in the context of the Policy QoS feature only. The following applies:

• The seq sequence-number is applicable only in an ACL group.
• The order option works across ACL groups that have been applied on an interface via QoS policy framework.
  • The order option takes precedence over the seq sequence-number.
• If sequence-number is not configured, then rules with the same order value are ordered according to their configuration order.
• If the sequence-number is configured, then the sequence-number is used as a tie breaker for rules with the same order.

When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets' details.

Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.

Related Commands

deny Configure a filter to drop packets.
permit Configure a filter to forward packets.
seq	Assign a sequence number to a deny or permit filter in an IP access list while creating the filter.

Extended IP ACL Commands

When an ACL is created without any rule and then applied to an interface, ACL behavior reflects an implicit permit.

The following commands configure extended IP ACLs, which in addition to the IP address also examine the packet's protocol type.

and S platforms (except the S55) support Ingress IP ACLs only.

supports both Ingress and Egress IP ACLs.

• deny
• deny arp
• deny ether-type
• deny icmp

• deny tcp

• deny udp

• ip access-list extended
• permit
• permit arp
• permit ether-type
• permit icmp
• permit tcp
• permit udp
• resequence access-list
• resequence prefix-list ipv4
• seq arp
• seq ether-type
  • seq

Note: See also Commands Common to all ACL Types and Common IP ACL Commands.

deny

Syntax

Configure a filter that drops IP packets meeting the filter criteria.

deny {ip | ip-protocol-number} {source mask|any|host ip-address} {destination mask|any|host ip-address} [count [byte] | log] [dscp value] [order] [monitor] [fragments]

To remove this filter, you have two choices:

• Use the no seq sequence-number command syntax if you know the filter's sequence number or
• Use the no deny {ip | ip-protocol-number} {source mask|any|host ip-address} {destination mask|any|host ip-address} command.

Parameters

ip	Enter the keyword ip to configure a generic IP access list. The keyword ip specifies that the access list will deny all IP protocols.
ip-protocol-number	Enter a number from 0 to 255 to deny based on the protocol identified in the IP protocol header.
source	Enter the IP address of the network or host from which the packets were sent.
mask	Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
any	Enter the keyword any to specify that all routes are subject to the filter.
host ip-address	Enter the keyword host followed by the IP address to specify a host IP address.
destination	Enter the IP address of the network or host to which the packets are sent.
count	(OPTIONAL) Enter the keyword count to count packets processed by the filter.
byte	(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
log	(OPTIONAL, E-Series only) Enter the keyword log to enter ACL matches in the log.
dscp	(OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP values.

	order	(OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry. Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority) Default: If the order keyword is not used, the ACLs have the lowest order by default (255).
	monitor	(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section “Flow-based Monitoring” in the Port Monitoring chapter of the FTOS Configuration Guide.
	fragments	Enter the keyword fragments to use ACLs to control packet fragments.
Defaults	Not configured.
Command Modes	CONFIGURATION-EXTENDED-ACCESS-LIST
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.3.1.0 Add DSCP value for ACL matching.
	Version 8.2.1.0 Allows ACL control of fragmented packets for IP (Layer 3) ACLs.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Added support for S-Series
	Version 7.5.1.0 Added support for C-Series
	Version 7.4.1.0 Added support for non-contiguous mask and added the monitor option.
	Version 6.5.10 Expanded to include the optional QoS order priority for the ACL entry.
Usage Information	The order option is relevant in the context of the Policy QoS feature only. See the “Quality of Service” chapter of the FTOS Configuration Guide for more information.
	When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details.
	The C-Series and S-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented.
	The monitor option is relevant in the context of flow-based monitoring only. See the Chapter 29, Port Monitoring.
Related Commands	Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
	deny tcp Assign a filter to deny TCP packets.
	deny udp Assign a filter to deny UDP packets.
	ip access-list extended Create an extended ACL.

deny arp

Configure an egress filter that drops ARP packets on egress ACL supported line cards (see your line card documentation).

Syntax

deny arp {destination-mac-address mac-address-mask | any} vlan vlan-id {ip-address | any | opcode code-number} [count [byte] | log] [order] [monitor]

To remove this filter, use one of the following:

• Use the no seq sequence-number command syntax if you know the filter's sequence number or
• Use the no deny arp {destination-mac-address mac-address-mask | any} vlan vlan-id {ip-address | any | opcode code-number} command.

Parameters

destination-mac-address mac-address-mask	Enter a MAC address and mask in the nn:nn:nn:nn:nn format.For the MAC address mask, specify which bits in the MAC address must match.The MAC ACL supports an inverse mask, therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly.
any	Enter the keyword any to match and drop any ARP traffic on the interface.
vlan vlan-id	Enter the keyword vlan followed by the VLAN ID to filter traffic associated with a specific VLAN.Range: 1 to 4094, 1-2094 for ExaScale (can used IDs 1-4094)To filter all VLAN traffic specify VLAN 1.
ip-address	Enter an IP address in dotted decimal format (A.B.C.D) as the target IP address of the ARP.
opcode code-number	Enter the keyword opcode followed by the number of the ARP opcode.Range: 1 to 23.
count	(OPTIONAL) Enter the keyword count to count packets processed by the filter.
byte	(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
log	(OPTIONAL, E-Series only) Enter the keyword log to have the information kept in an ACL log file.
order	(OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry.Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority)Default: If the order keyword is not used, the ACLs have the lowest order by default (255).
monitor	(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section “Flow-based Monitoring” in the Port Monitoring chapter of the FTOS Configuration Guide.

Defaults

Not configured.

Command Modes

CONFIGURATION-EXTENDED-ACCESS-LIST

Command History

Version 8.2.1.0 Allows ACL control of fragmented packets for IP (Layer 3) ACLs.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.4.1.0 Added monitor option

Version 6.5.10 Expanded to include the optional QoS order priority for the ACL entry.

Usage Information

The order option is relevant in the context of the Policy QoS feature only. See the “Quality of Service” chapter of the FTOS Configuration Guide for more information.

The monitor option is relevant in the context of flow-based monitoring only. See Chapter 29, Port Monitoring.

When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets' details.

You cannot include IP, TCP or UDP (Layer 3) filters in an ACL configured with ARP or Ether-type (Layer 2) filters. Apply Layer 2 ACLs (ARP and Ether-type) to Layer 2 interfaces only.

Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.

deny ether-type

E

Configure an egress filter that drops specified types of Ethernet packets on egress ACL supported line cards (see your line card documentation).

Syntax

deny ether-type protocol-type-number {destination-mac-address mac-address-mask|any} vlan vlan-id {source-mac-address mac-address-mask|any} [count [byte] | log] [order] [monitor]

To remove this filter, use one of the following:

• Use the no seq sequence-number command syntax if you know the filter's sequence number or
• Use the no deny ether-type protocol-type-number {destination-mac-address mac-address-mask|any} vlan vlan-id {source-mac-address mac-address-mask|any} command.

Parameters

protocol-type-number	Enter a number from 600 to FFFF as the specific Ethernet type traffic to drop.
destination-mac-address mac-address-mask	Enter a MAC address and mask in the nn:nn:nn:nn:nn format.For the MAC address mask, specify which bits in the MAC address must match.The MAC ACL supports an inverse mask, therefore, a mask of ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly.
any	Enter the keyword any to match and drop specific Ethernet traffic on the interface.
vlan vlan-id	Enter the keyword vlan followed by the VLAN ID to filter traffic associated with a specific VLAN.Range: 1 to 4094, 1-2094 for ExaScale (can used IDs 1-4094)To filter all VLAN traffic specify VLAN 1.

source-mac-address mac-address-mask	Enter a MAC address and mask in the nn:nn:nn:nn:nn format.For the MAC address mask, specify which bits in the MAC address must match.The MAC ACL supports an inverse mask, therefore, a mask of If:If:If:If:If:If:allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly.
count	(OPTIONAL) Enter the keyword count to count packets processed by the filter.
byte	(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
log	(OPTIONAL, E-Series only) Enter the keyword log to have the information kept in an ACL log file.
order	(OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry.Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority)Default: If the order keyword is not used, the ACLs have the lowest order by default (255).
monitor	(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section “Flow-based Monitoring” in the Port Monitoring chapter of the FTOS Configuration Guide.

Defaults

Not configured.

Command Modes

CONFIGURATION-EXTENDED-ACCESS-LIST

Command History

Version 8.2.1.0 Allows ACL control of fragmented packets for IP (Layer 3) ACLs.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.4.1.0	Added monitor option
Version 6.5.10	Expanded to include the optional QoS order priority for the ACL entry.

Usage Information

The order option is relevant in the context of the Policy QoS feature only. See the “Quality of Service” chapter of the FTOS Configuration Guide for more information.

When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets' details.

The monitor option is relevant in the context of flow-based monitoring only. See Chapter 29, Port Monitoring.

You cannot include IP, TCP or UDP (Layer 3) filters in an ACL configured with ARP or Ether-type (Layer 2) filters. Apply Layer 2 ACLs (ARP and Ether-type) to Layer 2 interfaces only.

Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.

deny icmp

Configure a filter to drop all or specific ICMP messages.

Syntax

deny icmp {source mask | any | host ip-address} {destination mask | any | host ip-address} [dscp] [message-type] [count [byte] | log] [order] [monitor] [fragments]

To remove this filter, you have two choices:

• Use the no seq sequence-number command syntax if you know the filter's sequence number or
• Use the no deny icmp { source mask | any | host ip-address} { destination mask | any | host ip-address} command.

Parameters

source	Enter the IP address of the network or host from which the packets were sent.
mask	Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
any	Enter the keyword any to specify that all routes are subject to the filter.
host ip-address	Enter the keyword host followed by the IP address to specify a host IP address.
destination	Enter the IP address of the network or host to which the packets are sent.
dscp	Enter this keyword to deny a packet based on DSCP value.Range: 0-63
message-type	(OPTIONAL) Enter an ICMP message type, either with the type (and code, if necessary) numbers or with the name of the message type (ICMP message types are listed in Table 7-2).Range: 0 to 255 for ICMP type; 0 to 255 for ICMP code
count	(OPTIONAL) Enter the keyword count to count packets processed by the filter.
byte	(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
log	(OPTIONAL, E-Series only) Enter the keyword log to have the information kept in an ACL log file.
order	(OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry.Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority)Default: If the order keyword is not used, the ACLs have the lowest order by default (255).
monitor	(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section “Flow-based Monitoring” in the Port Monitoring chapter of the FTOS Configuration Guide.
fragments	Enter the keyword fragments to use ACLs to control packet fragments.

Defaults

Not configured

Command Modes

CONFIGURATION-EXTENDED-ACCESS-LIST

Command History

Version 8.3.1.0 Added dscp keyword.

Version 8.2.1.0 Allows ACL control of fragmented packets for IP (Layer 3) ACLs.

Version 8.1.1.0 Introduced on E-Series ExaScale

Usage Information

Version 7.4.1.0	Added support for non-contiguous mask and added the monitor option.
Version 6.5.10	Expanded to include the optional QoS order priority for the ACL entry.

The order option is relevant in the context of the Policy QoS feature only. See the “Quality of Service” chapter of the FTOS Configuration Guide for more information.

When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets' details.

The monitor option is relevant in the context of flow-based monitoring only. See Chapter 29, Port Monitoring.

Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.

Table 7-2 lists the keywords displayed in the CLI help and their corresponding ICMP Message Type Name.
Table 7-2. ICMP Message Type Keywords

Keyword ICMP Message Type	Name
administratively-prohibited Administratively prohibited
alternate-address Alternate host address
conversion-error Datagram conversion error
dod-host-prohibited	Host prohibited
dod-net-prohibited	Net prohibited
echo	Echo
echo-reply	Echo reply
general-parameter-problem	Parameter problem
host-isolated	Host isolated
host-precedence-unreachable Host unreachable for precedence
host-redirect	Host redirect
host-tos-redirect	Host redirect for TOS
host-tos-unreachable	Host unreachable for TOS
host-unknown	Host unknown
host-unreachable	Host unreachable
information-reply	Information replies
information-request	Information requests
mask-reply	Mask replies
mask-request	Mask requests
mobile-redirect	Mobile host redirect
net-redirect	Network redirect
net-tos-redirect	Network redirect for TOS
net-tos-unreachable	Network unreachable for TOS

Table 7-2. ICMP Message Type Keywords

Keyword	ICMP Message Type Name
net-unreachable	Network unreachable
network-unknown	Network unknown
no-room-for-option Parameter required but no room
option-missing Parameter required but not present
packet-too-big Fragmentation needed and DF set
parameter-problem All parameter problems
port-unreachable	Port unreachable
precedence-unreachable	Precedence cutoff
protocol-unreachable	Protocol unreachable
reassembly-timeout	Reassembly timeout
redirect	All redirects
router-advertisement Router discovery advertisements
router-solicitation	Router discovery solicitations
source-quench	Source quenches
source-route-failed	Source route failed
time-exceeded	All time exceeded
timestamp-reply	Timestamp replies
timestamp-request	Timestamp requests
traceroute	Traceroute
ttl-exceeded	TTL exceeded
unreachable	All unreachables

deny tcp

Syntax

Configure a filter that drops TCP packets meeting the filter criteria.

deny tcp {source mask | any | host ip-address} [bit] [operator port [port]] {destination mask | any | host ip-address} [dscp] [bit] [operator port [port]] [count [byte] | log] [order] [monitor] [fragments]

To remove this filter, you have two choices:

• Use the no seq sequence-number command syntax if you know the filter's sequence number or
• Use the no deny tcp { source mask | any | host ip-address} { destination mask | any | host ip-address} command.

Parameters

source	Enter the IP address of the network or host from which the packets were sent.
mask	Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
any	Enter the keyword any to specify that all routes are subject to the filter.
host ip-address	Enter the keyword host followed by the IP address to specify a host IP address.
dscp	Enter this keyword to deny a packet based on DSCP value. Range: 0-63
bit	Enter a flag or combination of bits: ack: acknowledgement field fin: finish (no more data from the user) psh: push function rst: reset the connection syn: synchronize sequence numbers urg: urgent field
operator	(OPTIONAL) Enter one of the following logical operand: • eq = equal to • neq = not equal to • gt = greater than • lt = less than • range = inclusive range of ports (you must specify two ports for the port command parameter.
port port	Enter the application layer port number. Enter two port numbers if using the range logical operand. Range: 0 to 65535. The following list includes some common TCP port numbers: • 23 = Telnet • 20 and 21 = FTP • 25 = SMTP • 169 = SNMP
destination	Enter the IP address of the network or host to which the packets are sent.
mask	Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
count	(OPTIONAL) Enter the keyword count to count packets processed by the filter.
byte	(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
log	(OPTIONAL, E-Series only) Enter the keyword log to enter ACL matches in the log. Supported on Jumbo-enabled line cards only.
order	(OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry. Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority) Default: If the order keyword is not used, the ACLs have the lowest order by default (255).
monitor	(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section “Flow-based Monitoring” in the Port Monitoring chapter of the FTOS Configuration Guide.
fragments	Enter the keyword fragments to use ACLs to control packet fragments.

Defaults

Not configured.

Command Modes

CONFIGURATION-EXTENDED-ACCESS-LIST

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.3.1.0 Added dscp keyword.

Version 8.2.1.0 Allows ACL control of fragmented packets for IP (Layer 3) ACLs.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Added support for S-Series

Version 7.5.1.0 Added support for C-Series

Version 7.4.1.0 Added support for non-contiguous mask and added the monitor option. Deprecated established keyword.

Version 6.5.10 Expanded to include the optional QoS order priority for the ACL entry.

Usage Information

The order option is relevant in the context of the Policy QoS feature only. See the “Quality of Service” chapter of the FTOS Configuration Guide for more information.

When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets' details.

The C-Series and S-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented.

The monitor option is relevant in the context of flow-based monitoring only. See Chapter 29, Port Monitoring.

Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.

Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators (gt, lt, range) may require more than one entry. The range of ports is configured in the CAM based on bitmask boundaries; the space required depends on exactly what ports are included in the range.

For example, an ACL rule with TCP port range 4000 - 8000 uses 8 entries in the CAM:

Rule#	Data	Mask	From	To	#Covered
1	0000111110100000	1111111111100000	4000	4031	32
2	0000111111000000	1111111111000000	4032	4095	64
3	0001000000000000	1111100000000000	4096	6143	2048
4	0001100000000000	1111110000000000	6144	7167	1024
5	0001110000000000	1111111000000000	7168	7679	512
6	0001111000000000	1111111100000000	7680	7935	256
7	0001111100000000	1111111111000000	7936	7999	64
8	0001111101000000	1111111111111111	8000	8000	1
Total Ports: 4001

But an ACL rule with TCP port lt 1023 takes only one entry in the CAM:

Rule#	Data	Mask	From	To	#Covered
1	0000000000000000	1111110000000000	0	1023	1024
Total Ports: 1024

Related Commands

deny Assign a filter to deny IP traffic.

deny udp Assign a filter to deny UDP traffic.

deny udp

Syntax

Configure a filter to drop UDP packets meeting the filter criteria.

deny udp { source mask | any | host ip-address} [operator port [port]] { destination mask | any | host ip-address} [dscp] [operator port [port]] [count [byte] | log] [order] [monitor] [fragments]

To remove this filter, you have two choices:

• Use the no seq sequence-number command syntax if you know the filter's sequence number or
• Use the no deny udp {source mask | any | host ip-address} {destination mask | any | host ip-address} command.

Parameters

source	Enter the IP address of the network or host from which the packets were sent.
mask	Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
any	Enter the keyword any to specify that all routes are subject to the filter.
host ip-address	Enter the keyword host followed by the IP address to specify a host IP address.
dscp	Enter this keyword to deny a packet based on DSCP value.Range: 0-63
operator	(OPTIONAL) Enter one of the following logical operand:eq = equal toneq = not equal togt = greater thanlt = less thanrange = inclusive range of ports
port port	(OPTIONAL) Enter the application layer port number. Enter two port numbers if using therange logical operand.Range: 0 to 65535
destination	Enter the IP address of the network or host to which the packets are sent.
mask	Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
count	(OPTIONAL) Enter the keyword count to count packets processed by the filter.
byte	(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
log	(OPTIONAL, E-Series only) Enter the keyword log to enter ACL matches in the log. Supported on Jumbo-enabled line cards only.
order	(OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry.Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority)Default: If the order keyword is not used, the ACLs have the lowest order by default (255).

	monitor	(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section “Flow-based Monitoring” in the Port Monitoring chapter of the FTOS Configuration Guide.
	fragments	Enter the keyword fragments to use ACLs to control packet fragments.
Defaults	Not configured
Command Modes	CONFIGURATION-EXTENDED-ACCESS-LIST
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.3.1.0 Added dscp keyword.
	Version 8.2.1.0 Allows ACL control of fragmented packets for IP (Layer 3) ACLs.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Added support for S-Series
	Version 7.5.1.0 Added support for C-Series
	Version 7.4.1.0 Added support for non-contiguous mask and added the monitor option.
	Version 6.5.10 Expanded to include the optional QoS order priority for the ACL entry.
Usage Information	The order option is relevant in the context of the Policy QoS feature only. See the “Quality of Service” chapter of the FTOS Configuration Guide for more information.When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details.The C-Series and S-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented.The monitor option is relevant in the context of flow-based monitoring only. See the Chapter 29, Port Monitoring.Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators (gt, lt, range) may require more than one entry. The range of ports is configured in the CAM based on bitmask boundaries; the space required depends on exactly what ports are included in the range.

For example, an ACL rule with TCP port range 4000 - 8000 will use 8 entries in the CAM:

Rule#	Data	Mask	From	To	#Covered
1	0000111110100000	1111111111100000	4000	4031	32
2	0000111111000000	1111111111000000	4032	4095	64
3	0001000000000000	1111100000000000	4096	6143	2048
4	0001100000000000	1111110000000000	6144	7167	1024
5	0001110000000000	1111111000000000	7168	7679	512
6	0001111000000000	1111111100000000	7680	7935	256
7	0001111100000000	1111111111000000	7936	7999	64
8	0001111101000000	111111111111111	8000	8000	1

Total Ports: 4001

But an ACL rule with TCP port lt 1023 takes only one entry in the CAM:

Rule#	Data	Mask	From	To	#Covered
1	0000000000000000	1111110000000000	0	1023	1024

Total Ports: 1024

Related Commands

deny Assign a deny filter for IP traffic.

deny tcp Assign a deny filter for TCP traffic.

ip access-list extended

Name (or select) an extended IP access list (IP ACL) based on IP addresses or protocols.

Syntax

ip access-list extended access-list-name

To delete an access list, use the no ip access-list extended access-list-name command.

Parameters

access-list-name Enter a string up to 140 characters long as the access list name.

Defaults

All access lists contain an implicit “deny any”; that is, if no match occurs, the packet is dropped.

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

pre-Version 6.2.1.1 Introduced on E-Series

Usage Information

The number of entries allowed per ACL is hardware-dependent. Refer to your line card documentation for detailed specification on entries allowed per ACL.

Prior to 7.8.1.0, names are up to 16 characters long.

Example

Figure 7-5. Command Example: ip access-list extended

FTOS (conf) #ip access-list extended TESTListEXTEND

FTOS (config-ext-nacl) #

Related Commands

ip access-list standard Configure a standard IP access list.

show config Display the current configuration.

permit

Configure a filter to pass IP packets meeting the filter criteria.

Syntax

permit {ip | ip-protocol-number} {source mask | any | host ip-address} {destination mask | any | host ip-address} [count [byte] | log] [dscp value] [order] [monitor] [fragments]

To remove this filter, you have two choices:

• Use the no seq sequence-number command syntax if you know the filter's sequence number or
• Use the no deny {ip | ip-protocol-number} {source mask | any | host ip-address} {destination mask | any | host ip-address} command.

Parameters

ip	Enter the keyword ip to configure a generic IP access list. The keyword ip specifies that the access list will permit all IP protocols.
ip-protocol-number	Enter a number from 0 to 255 to permit based on the protocol identified in the IP protocol header.
source	Enter the IP address of the network or host from which the packets were sent.
mask	Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
any	Enter the keyword any to specify that all routes are subject to the filter.
host ip-address	Enter the keyword host followed by the IP address to specify a host IP address.
destination	Enter the IP address of the network or host to which the packets are sent.
count	(OPTIONAL) Enter the keyword count to count packets processed by the filter.
byte	(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
log	(OPTIONAL, E-Series only) Enter the keyword log to enter ACL matches in the log.
dscp	(OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP values.
order	(OPTIONAL) Enter the keyword order to specify the QoS order of priority for the ACL entry.Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority)Default: If the order keyword is not used, the ACLs have the lowest order by default (255).

	monitor	(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section “Flow-based Monitoring” in the Port Monitoring chapter of the FTOS Configuration Guide.
	fragments	Enter the keyword fragments to use ACLs to control packet fragments.
Defaults	Not configured.
Command Modes	CONFIGURATION-EXTENDED-ACCESS-LIST
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.3.1.0 Add DSCP value for ACL matching.
	Version 8.2.1.0 Allows ACL control of fragmented packets for IP (Layer 3) ACLs.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	Version 7.4.1.0 Added support for non-contiguous mask and added the monitor option.
	Version 6.5.10 Expanded to include the optional QoS order priority for the ACL entry.
Usage Information	The order option is relevant in the context of the Policy QoS feature only. See the “Quality of Service” chapter of the FTOS Configuration Guide for more information.
	When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details.
	The C-Series and S-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented.
	The monitor option is relevant in the context of flow-based monitoring only. See the Chapter 29, Port Monitoring.
Related Commands	Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
	ip access-list extended Create an extended ACL.
	permit tcp Assign a permit filter for TCP packets.
	permit udp Assign a permit filter for UDP packets.
permit arpE	Configure a filter that forwards ARP packets meeting this criteria. This command is supported only on 12-port GE line cards with SFP optics; refer to your line card documentation for specifications.
Syntax	permit arp{destination-mac-address mac-address-mask|any} vlan vlan-id{ip-address|any|opcode code-number}[count [byte] |log][order][monitor][fragments]

To remove this filter, use one of the following:

• Use the no seq sequence-number command syntax if you know the filter's sequence number or
• Use the no permit arp {destination-mac-address mac-address-mask | any} vlan vlan-id {ip-address | any | opcode code-number} command.

Parameters

destination-mac-address mac-address-mask	Enter a MAC address and mask in the nn:nn:nn:nn:nn format.For the MAC address mask, specify which bits in the MAC address must match.The MAC ACL supports an inverse mask, therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly.
any	Enter the keyword any to match and drop any ARP traffic on the interface.
vlan vlan-id	Enter the keyword vlan followed by the VLAN ID to filter traffic associated with a specific VLAN.Range: 1 to 4094, 1-2094 for ExaScale (can used IDs 1-4094)To filter all VLAN traffic specify VLAN 1.
ip-address	Enter an IP address in dotted decimal format (A.B.C.D) as the target IP address of the ARP.
opcode code-number	Enter the keyword opcode followed by the number of the ARP opcode.Range: 1 to 16.
count	(OPTIONAL) Enter the keyword count to count packets processed by the filter.
byte	(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
log	(OPTIONAL, E-Series only) Enter the keyword log to have the information kept in an ACL log file.
order	(OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry.Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority)Default: If the order keyword is not used, the ACLs have the lowest order by default (255).
monitor	(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section “Flow-based Monitoring” in the Port Monitoring chapter of the FTOS Configuration Guide.
fragments	Enter the keyword fragments to use ACLs to control packet fragments.

Defaults

Not configured.

Command Modes

CONFIGURATION-EXTENDED-ACCESS-LIST

Command History

Version 8.2.1.0 Allows ACL control of fragmented packets for IP (Layer 3) ACLs.
Version 8.1.1.0	Introduced on E-Series ExaScale
Version 7.4.1.0	Added support for non-contiguous mask and added the monitor option.
Version 6.5.10	Expanded to include the optional QoS order priority for the ACL entry.

Usage Information

The order option is relevant in the context of the Policy QoS feature only. See the “Quality of Service” chapter of the FTOS Configuration Guide for more information.

When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets' details.

The monitor option is relevant in the context of flow-based monitoring only. See the Chapter 29, Port Monitoring.

You cannot include IP, TCP or UDP filters in an ACL configured with ARP filters.

Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.

permit ether-type

E Configure a filter that allows traffic with specified types of Ethernet packets. This command is supported only on 12-port GE line cards with SFP optics; refer to your line card documentation for specifications.

Syntax

permit ether-type protocol-type-number {destination-mac-address mac-address-mask | any} vlan vlan-id {source-mac-address mac-address-mask | any} [count [byte] | log] [order] [monitor]

To remove this filter, use one of the following:

• Use the no seq sequence-number command syntax if you know the filter's sequence number or
• Use the no permit ether-type protocol-type-number {destination-mac-address mac-address-mask|any} vlan vlan-id {source-mac-address mac-address-mask|any} command.

Parameters

protocol-type-number	Enter a number from 600 to FFF as the specific Ethernet type traffic to drop.
destination-mac-address mac-address-mask	Enter a MAC address and mask in the nn:nn:nn:nn:nn format.For the MAC address mask, specify which bits in the MAC address must match.The MAC ACL supports an inverse mask, therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly.
any	Enter the keyword any to match and drop specific Ethernet traffic on the interface.
vlan vlan-id	Enter the keyword vlan followed by the VLAN ID to filter traffic associated with a specific VLAN.Range: 1 to 4094, 1-2094 for ExaScale (can used IDs 1-4094)To filter all VLAN traffic specify VLAN 1.
source-mac-address mac-address-mask	Enter a MAC address and mask in the nn:nn:nn:nn:nn format.For the MAC address mask, specify which bits in the MAC address must match.The MAC ACL supports an inverse mask, therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly. (OPTIONAL) Enter the keyword count to count packets processed by the filter.
count

byte	(OPTIONAL) Enter the keywordbyteto count bytes processed by the filter.
log	(OPTIONAL, E-Series only) Enter the keywordlogto have the information kept in an ACL log file.
order	(OPTIONAL) Enter the keywordorderto specify the QoS priority for the ACL entry.Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority)Default: If the order keyword is not used, the ACLs have the lowest order by default (255).
monitor	(OPTIONAL) Enter the keywordmonitorwhen the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section “Flow-based Monitoring” in the Port Monitoring chapter of theFTOS Configuration Guide.

Defaults

Not configured.

Command Modes

CONFIGURATION-EXTENDED-ACCESS-LIST

Command History

Version 8.2.1.0 Allows ACL control of fragmented packets for IP (Layer 3) ACLs.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.4.1.0	Added monitor option
Version 6.5.10	Expanded to include the optional QoS order priority for the ACL entry.

Usage Information

The order option is relevant in the context of the Policy QoS feature only. See the “Quality of Service” chapter of the FTOS Configuration Guide for more information.

When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets' details.

The monitor option is relevant in the context of the flow-based monitoring feature only. See Chapter 29, Port Monitoring.

You cannot include IP, TCP or UDP filters in an ACL configured with ARP filters.

Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.

permit icmp

Configure a filter to allow all or specific ICMP messages.

Syntax

permit icmp { source mask | any | host ip-address} { destination mask | any | host ip-address} [dscp] [message-type] [count [byte] | log] [order] [monitor] [fragments]

To remove this filter, you have two choices:

- Use the no seq sequence-number command syntax if you know the filter's sequence number or

- Use the no permit icmp {source mask | any | host ip-address} {destination mask | any | host ip-address} command.

Parameters

source	Enter the IP address of the network or host from which the packets were sent.
mask	Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
any	Enter the keyword any to specify that all routes are subject to the filter.
host ip-address	Enter the keyword host followed by the IP address to specify a host IP address.
destination	Enter the IP address of the network or host to which the packets are sent.
dscp	Enter this keyword to deny a packet based on DSCP value.Range: 0-63
message-type	(OPTIONAL) Enter an ICMP message type, either with the type (and code, if necessary) numbers or with the name of the message type (ICMP message types are listed in Table 7-2).Range: 0 to 255 for ICMP type; 0 to 255 for ICMP code
count	(OPTIONAL) Enter the keyword count to count packets processed by the filter.
byte	(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
log	(OPTIONAL, E-Series only) Enter the keyword log to have the information kept in an ACL log file.
order	(OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry.Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority)Default: If the order keyword is not used, the ACLs have the lowest order by default (255).
monitor	(OPTIONAL) Enter the keyword monitor to monitor traffic on the monitoring interface specified in the flow-based monitoring session along with the filter operation.
fragments	Enter the keyword fragments to use ACLs to control packet fragments.

Defaults

Not configured

Command Modes

CONFIGURATION-STANDARD-ACCESS-LIST

Command History

Version 8.3.1.0	Added dscp keyword.
Version 8.2.1.0 Allows ACL control of fragmented packets for IP (Layer 3) ACLs.
Version 8.1.1.0 Introduced on E-Series ExaScale
Version 7.4.1.0	Added support for non-contiguous mask and added the monitor option.
Version 6.5.10	Expanded to include the optional QoS order priority for the ACL entry.

Usage Information

The order option is relevant in the context of the Policy QoS feature only. See the “Quality of Service” chapter of the FTOS Configuration Guide for more information.

When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets' details.

The monitor option is relevant in the context of the flow-based monitoring feature only. See Chapter 29, Port Monitoring.

Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.

permit tcp C E S

Syntax

Configure a filter to pass TCP packets meeting the filter criteria.

permit tcp { source mask | any | host ip-address} [bit] [operator port [port]] { destination mask | any | host ip-address} [bit] [dscp] [operator port [port]] [count [byte] | log] [order] [monitor] [fragments]

To remove this filter, you have two choices:

• Use the no seq sequence-number command syntax if you know the filter's sequence number or
• Use the no permit tcp {source mask | any | host ip-address} {destination mask | any | host ip-address} command.

Parameters

source	Enter the IP address of the network or host from which the packets were sent.
mask	Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
any	Enter the keyword any to specify that all routes are subject to the filter.
host ip-address	Enter the keyword host followed by the IP address to specify a host IP address.
bit	Enter a flag or combination of bits:ack: acknowledgement fieldfin: finish (no more data from the user)psh: push functionrst: reset the connectionsyn: synchronize sequence numbersurg: urgent field
dscp	Enter this keyword to deny a packet based on DSCP value.Range: 0-63
operator	(OPTIONAL) Enter one of the following logical operand:eq = equal toneq = not equal togt = greater thanlt = less thanrange = inclusive range of ports (you must specify two port for the port parameter.)

port port	Enter the application layer port number. Enter two port numbers if using the range logical operand. Range: 0 to 65535. The following list includes some common TCP port numbers: 23 = Telnet 20 and 21 = FTP 25 = SMTP 169 = SNMP
destination	Enter the IP address of the network or host to which the packets are sent.
mask	Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
count	(OPTIONAL) Enter the keyword count to count packets processed by the filter.
byte	(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
log	(OPTIONAL, E-Series only) Enter the keyword log to enter ACL matches in the log.
order	(OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry. Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority) Default: If the order keyword is not used, the ACLs have the lowest order by default (255).
monitor	(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section “Flow-based Monitoring” in the Port Monitoring chapter of the FTOS Configuration Guide.
fragments	Enter the keyword fragments to use ACLs to control packet fragments.

Defaults

Not configured.

Command Modes

CONFIGURATION-EXTENDED-ACCESS-LIST

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.3.1.0 Added dscp keyword.

Version 8.2.1.0 Allows ACL control of fragmented packets for IP (Layer 3) ACLs.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Added support for S-Series

Version 7.5.1.0 Added support for C-Series

Version 7.4.1.0 Added support for non-contiguous mask and added the monitor option. Deprecated established keyword.

Version 6.5.10 Expanded to include the optional QoS order priority for the ACL entry.

Usage Information

The order option is relevant in the context of the Policy QoS feature only. See the Quality of Service chapter of the FTOS Configuration Guide for more information.

Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.

The monitor option is relevant in the context of the flow-based monitoring feature only. See Chapter 29, Port Monitoring.

When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets' details.

The C-Series and S-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented.

Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators (gt, lt, range) may require more than one entry. The range of ports is configured in the CAM based on bitmask boundaries; the space required depends on exactly what ports are included in the range.

For example, an ACL rule with TCP port range 4000 - 8000 uses 8 entries in the CAM:

Rule#	Data	Mask	From	To	#Covered
1	0000111110100000	1111111111100000	4000	4031	32
2	0000111111000000	1111111111000000	4032	4095	64
3	0001000000000000	1111100000000000	4096	6143	2048
4	0001100000000000	1111110000000000	6144	7167	1024
5	0001110000000000	1111111000000000	7168	7679	512
6	0001111000000000	1111111100000000	7680	7935	256
7	0001111100000000	1111111111000000	7936	7999	64
8	0001111101000000	111111111111111	8000	8000	1
Total Ports: 4001

But an ACL rule with TCP port It 1023 takes only one entry in the CAM:

Rule#	Data	Mask	From	To	#Covered
1	0000000000000000	1111110000000000	0	1023	1024
Total Ports: 1024

Related Commands

ip access-list extended Create an extended ACL.

permit Assign a permit filter for IP packets.

permit udp Assign a permit filter for UDP packets.

permit udp C E S

Configure a filter to pass UDP packets meeting the filter criteria.

Syntax

permit udp { source mask | any | host ip-address} [operator port [port]] { destination mask | any | host ip-address} [dscp] [operator port [port]] [count [byte] | log] [order] [monitor] [fragments]

To remove this filter, you have two choices:

• Use the no seq sequence-number command syntax if you know the filter's sequence number or
• Use the no permit udp {source mask | any | host ip-address} {destination mask | any | host ip-address} command.

Parameters

source	Enter the IP address of the network or host from which the packets were sent.
mask	Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
any	Enter the keyword any to specify that all routes are subject to the filter.
host ip-address	Enter the keyword host followed by the IP address to specify a host IP address.
dscp	Enter this keyword to deny a packet based on DSCP value.Range: 0-63
operator	(OPTIONAL) Enter one of the following logical operand:eq = equal toneq = not equal togt = greater thanlt = less thanrange = inclusive range of ports (you must specify two ports for the port parameter.)
port port	(OPTIONAL) Enter the application layer port number. Enter two port numbers if using therange logical operand.Range: 0 to 65535
destination	Enter the IP address of the network or host to which the packets are sent.
count	(OPTIONAL) Enter the keyword count to count packets processed by the filter.
byte	(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
log	(OPTIONAL, E-Series only) Enter the keyword log to enter ACL matches in the log.
order	(OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry.Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority)Default: If the order keyword is not used, the ACLs have the lowest order by default (255).
monitor	(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section “Flow-based Monitoring” in the Port Monitoring chapter of the FTOS Configuration Guide.
fragments	Enter the keyword fragments to use ACLs to control packet fragments.

Defaults

Not configured.

Command Modes

CONFIGURATION-EXTENDED-ACCESS-LIST

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.3.1.0 Added dscp keyword.

Version 8.2.1.0 Allows ACL control of fragmented packets for IP (Layer 3) ACLs.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Added support for S-Series

Version 7.5.1.0 Added support for C-Series

Version 7.4.1.0 Added support for non-contiguous mask and added the monitor option.

Version 6.5.10 Expanded to include the optional QoS order priority for the ACL entry.

Usage Information

The order option is relevant in the context of the Policy QoS feature only. See the Quality of Service chapter of the FTOS Configuration Guide for more information.

The monitor option is relevant in the context of the flow-based monitoring feature only. See Chapter 29, Port Monitoring.

Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.

When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets' details.

The C-Series and S-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented.

Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators (gt, lt, range) may require more than one entry. The range of ports is configured in the CAM based on bitmask boundaries; the space required depends on exactly what ports are included in the range.

For example, an ACL rule with TCP port range 4000 - 8000 uses 8 entries in the CAM:

Rule#	Data	Mask	From	To	#Covered
1	0000111110100000	1111111111100000	4000	4031	32
2	0000111111000000	1111111111000000	4032	4095	64
3	0001000000000000	1111100000000000	4096	6143	2048
4	0001100000000000	1111110000000000	6144	7167	1024
5	0001110000000000	1111111000000000	7168	7679	512
6	0001111000000000	1111111100000000	7680	7935	256
7	0001111100000000	1111111111000000	7936	7999	64
8	0001111101000000	1111111111111111	8000	8000	1

Total Ports: 4001

But an ACL rule with TCP port It 1023 takes only one entry in the CAM:

Rule#	Data	Mask	From	To	#Covered
1	0000000000000000	1111110000000000	0	1023	1024
Total Ports: 1024

Related Commands

ip access-list extended Configure an extended ACL.

permit Assign a permit filter for IP packets.

permit tcp Assign a permit filter for TCP packets.

resequence access-list

Re-assign sequence numbers to entries of an existing access-list.

Syntax
resequence access-list {ipv4 | mac} {access-list-name StartingSeqNum Step-to-Increment}

Parameters	ipv4 | mac	Enter the keyword ipv4, or mac to identify the access list type to resequence.
	access-list-name	Enter the name of a configured IP access list, up to 140 characters.
	StartingSeqNum	Enter the starting sequence number to resequence.Range: 0 - 4294967290
	Step-to-Increment	Enter the step to increment the sequence number.Range: 1 - 4294967290
Defaults	No default values or behavior
mand Modes	EXEC
	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
	Version 7.6.1.0 Added support for S-Series
	Version 7.5.1.0 Added support for C-Series
	Version 7.4.1.0 Introduced for E-Series
Usage Information	When all sequence numbers have been exhausted, this feature permits re-assigning new sequence number to entries of an existing access-list.
	Prior to 7.8.1.0, names are up to 16 characters long.
Related Commands	resequence prefix-list ipv4 Resequence a prefix list

resequence prefix-list ipv4

Re-assign sequence numbers to entries of an existing prefix list.

Syntax
resequence prefix-list ipv4 {prefix-list-name StartingSeqNum Step-to-increment}

Parameters	prefix-list-name	Enter the name of configured prefix list, up to 140 characters long.
	StartingSeqNum	Enter the starting sequence number to resequence.Range: 0 – 65535
	Step-to-Increment	Enter the step to increment the sequence number.Range: 1 – 65535

Defaults

No default values or behavior

Command Modes	EXEC
	EXEC Privilege
Command History	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
	Version 7.6.1.0 Added support for S-Series
	Version 7.5.1.0 Added support for C-Series
	Version 7.4.1.0 Introduced for E-Series
Usage Information	When all sequence numbers have been exhausted, this feature permits re-assigning new sequence number to entries of an existing prefix list.
	Prior to 7.8.1.0, names are up to 16 characters long.
Related Commands	resequence access-list Resequence an access-list

seq arp

E

Configure an egress filter with a sequence number that filters ARP packets meeting this criteria. This command is supported only on 12-port GE line cards with SFP optics; refer to your line card documentation for specifications.

Syntax

seq sequence-number {deny | permit} arp {destination-mac-address mac-address-mask | any} vlan vlan-id {ip-address | any | opcode code-number} [count [byte] | log] [order] [monitor]

To remove this filter, use the no seq sequence-number command.

Parameters

sequence-number	Enter a number from 0 to 4294967290.
deny	Enter the keyworddenyto drop all traffic meeting the filter criteria.
permit	Enter the keywordpermitto forward all traffic meeting the filter criteria.
destination-mac-address mac-address-mask	Enter a MAC address and mask in the nn:nn:nn:nn:nn format.For the MAC address mask, specify which bits in the MAC address must match.The MAC ACL supports an inverse mask, therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly.
any	Enter the keywordanyto match and drop any ARP traffic on the interface.
vlan vlan-id	Enter the keywordvlanfollowed by the VLAN ID to filter traffic associated with a specific VLAN.Range: 1 to 4094, 1-2094 for ExaScale (can used IDs 1-4094)To filter all VLAN traffic specify VLAN 1.
ip-address	Enter an IP address in dotted decimal format (A.B.C.D) as the target IP address of the ARP.
opcode code-number	Enter the keywordopcodefollowed by the number of the ARP opcode.Range: 1 to 16.
count	(OPTIONAL) Enter the keywordcountto count packets processed by the filter.

byte	(OPTIONAL) Enter the keywordbyteto count bytes processed by the filter.
log	(OPTIONAL, E-Series only) Enter the keywordlogto have the information kept in an ACL log file.
order	(OPTIONAL) Enter the keywordorderto specify the QoS priority for the ACL entry.Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority)Default: If the order keyword is not used, the ACLs have the lowest order by default (255).
monitor	(OPTIONAL) Enter the keywordmonitorwhen the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section “Flow-based Monitoring” in the Port Monitoring chapter of theFTOS Configuration Guide.

Defaults

Not configured.

Command Modes

CONFIGURATION-EXTENDED-ACCESS-LIST

Command History

Version 8.2.1.0 Allows ACL control of fragmented packets for IP (Layer 3) ACLs.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.4.1.0	Added monitor option
Version 6.5.10	Expanded to include the optional QoS order priority for the ACL entry.

Usage Information

The monitor option is relevant in the context of the flow-based monitoring feature only. See Chapter 29, Port Monitoring.

When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets' details.

The order option is relevant in the context of the Policy QoS feature only. The following applies:

- The seq sequence-number is applicable only in an ACL group.

• The order option works across ACL groups that have been applied on an interface via QoS policy framework.
  • The order option takes precedence over the seq sequence-number.
• If sequence-number is not configured, then rules with the same order value are ordered according to their configuration order.
• If the sequence-number is configured, then the sequence-number is used as a tie breaker for rules with the same order.

Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.

You cannot include IP, TCP or UDP (Layer 3) filters in an ACL configured with ARP or Ether-type (Layer 2) filters. Apply Layer 2 ACLs to interfaces in Layer 2 mode.

seq ether-type

E

Configure an egress filter with a specific sequence number that filters traffic with specified types of Ethernet packets. This command is supported only on 12-port GE line cards with SFP optics; refer to your line card documentation for specifications.

Syntax

seq sequence-number {deny | permit} ether-type protocol-type-number {destination-mac-address mac-address-mask | any} vlan vlan-id {source-mac-address mac-address-mask | any} [count [byte] | log] [order] [monitor]

To remove this filter, use the no seq sequence-number command.

Parameters

sequence-number	Enter a number from 0 to 4294967290.
deny	Enter the keyworddenyto drop all traffic meeting the filter criteria.
permit	Enter the keywordpermitto forward all traffic meeting the filter criteria.
protocol-type-number	Enter a number from 600 to FFFF as the specific Ethernet type traffic to drop.
destination-mac-address mac-address-mask	Enter a MAC address and mask in the nn:nn:nn:nn:nn format.For the MAC address mask, specify which bits in the MAC address must match.The MAC ACL supports an inverse mask, therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly.
any	Enter the keywordanyto match and drop specific Ethernet traffic on the interface.
vlan vlan-id	Enter the keywordvlanfollowed by the VLAN ID to filter traffic associated with a specific VLAN.Range: 1 to 4094, 1-2094 for ExaScale (can used IDs 1-4094)To filter all VLAN traffic specify VLAN 1.
source-mac-address mac-address-mask	Enter a MAC address and mask in the nn:nn:nn:nn:nn format.For the MAC address mask, specify which bits in the MAC address must match.The MAC ACL supports an inverse mask, therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly. (OPTIONAL) Enter the keywordcountto count packets processed by the filter.
byte	(OPTIONAL) Enter the keywordbyteto count bytes processed by the filter.
log	(OPTIONAL, E-Series only) Enter the keywordlogto have the information kept in an ACL log file.
order	(OPTIONAL) Enter the keywordorderto specify the QoS priority for the ACL entry.Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority)Default: If the order keyword is not used, the ACLs have the lowest order by default (255).
monitor	(OPTIONAL) Enter the keywordmonitorwhen the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section “Flow-based Monitoring” in the Port Monitoring chapter of theFTOS Configuration Guide.

Defaults

Not configured.

Command Modes

CONFIGURATION-EXTENDED-ACCESS-LIST

Command History

Version 8.2.1.0 Allows ACL control of fragmented packets for IP (Layer 3) ACLs.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.4.1.0 Added monitor option

Version 6.5.10 Expanded to include the optional QoS order priority for the ACL entry.

Usage Information

The monitor option is relevant in the context of the flow-based monitoring feature only. See Chapter 29, Port Monitoring.

When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets' details.

The order option is relevant in the context of the Policy QoS feature only. The following applies:

• The seq sequence-number is applicable only in an ACL group.
• The order option works across ACL groups that have been applied on an interface via QoS policy framework.
  • The order option takes precedence over the seq sequence-number.
• If sequence-number is not configured, then rules with the same order value are ordered according to their configuration order.
• If the sequence-number is configured, then the sequence-number is used as a tie breaker for rules with the same order.

Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.

You cannot include IP, TCP or UDP (Layer 3) filters in an ACL configured with ARP or Ether-type (Layer 2) filters. Apply Layer 2 filters to interfaces in Layer 2 mode.

seq

Assign a sequence number to a deny or permit filter in an extended IP access list while creating the filter.

Syntax

seq sequence-number {deny | permit} {ip-protocol-number | icmp | ip | tcp | udp}

{source mask|any|host ip-address} {destination mask|any|host ip-address} [operator port [port]] [count [byte] | log] [dscp value] [order] [monitor] [fragments]

To delete a filter, use the no seq sequence-number command.

Parameters

sequence-number	Enter a number from 0 to 4294967290.
deny	Enter the keyword deny to configure a filter to drop packets meeting this condition.
permit	Enter the keyword permit to configure a filter to forward packets meeting this criteria.
ip-protocol-number	Enter a number from 0 to 255 to filter based on the protocol identified in the IP protocol header.
icmp	Enter the keyword icmp to configure an ICMP access list filter.
ip	Enter the keyword ip to configure a generic IP access list. The keyword ip specifies that the access list will permit all IP protocols.
tcp	Enter the keyword tcp to configure a TCP access list filter.
udp	Enter the keyword udp to configure a UDP access list filter.
source	Enter the IP address of the network or host from which the packets were sent.
mask	Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
any	Enter the keyword any to specify that all routes are subject to the filter.
host ip-address	Enter the keyword host followed by the IP address to specify a host IP address.
operator	(OPTIONAL) Enter one of the following logical operands:eq = equal toneq = not equal togt = greater thanIt = less thanrange = inclusive range of ports (you must specify two ports for the port parameter.)
port port	(OPTIONAL) Enter the application layer port number. Enter two port numbers if using the range logical operand.Range: 0 to 65535The following list includes some common TCP port numbers:23 = Telnet20 and 21 = FTP25 = SMTP169 = SNMP
destination	Enter the IP address of the network or host to which the packets are sent.
message-type	(OPTIONAL) Enter an ICMP message type, either with the type (and code, if necessary) numbers or with the name of the message type (ICMP message types are listed in Table 7-2).Range: 0 to 255 for ICMP type; 0 to 255 for ICMP code
count	(OPTIONAL) Enter the keyword count to count packets processed by the filter.
byte	(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
log	(OPTIONAL, E-Series only) Enter the keyword log to enter ACL matches in the log. Supported on Jumbo-enabled line cards only.
dscp	(OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP values.
order	(OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry.Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority)Default: If the order keyword is not used, the ACLs have the lowest order by default (255).
monitor	(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section “Flow-based Monitoring” in the Port Monitoring chapter of the FTOS Configuration Guide.
fragments	Enter the keyword fragments to use ACLs to control packet fragments.

Defaults

Not configured

Command Modes

CONFIGURATION-EXTENDED-ACCESS-LIST

Command History

Version 8.3.5.0 Introduced on the S55.
Version 8.3.1.0 Add DSCP value for ACL matching.
Version 8.2.1.0 Allows ACL control of fragmented packets for IP (Layer 3) ACLs.
Version 8.1.1.0 Introduced on E-Series ExaScale
Version 7.6.1.0 Added support for S-Series
Version 7.5.1.0 Added support for C-Series
Version 7.4.1.0	Added support for non-contiguous mask and added themonitoroption. Deprecated establishedkeyword
Version 6.5.10	Expanded to include the optional QoS orderpriority for the ACL entry.

Usage Information

The monitor option is relevant in the context of the flow-based monitoring feature only. See Chapter 29, Port Monitoring.

When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets' details.

The order option is relevant in the context of the Policy QoS feature only. The following applies:

• The seq sequence-number is applicable only in an ACL group.
• The order option works across ACL groups that have been applied on an interface via QoS policy framework.
  • The order option takes precedence over the seq sequence-number.
• If sequence-number is not configured, then rules with the same order value are ordered according to their configuration order.
• If the sequence-number is configured, then the sequence-number is used as a tie breaker for rules with the same order.

If the sequence-number is configured, then the sequence-number is used as a tie breaker for rules with the same order.

Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.

Related Commands

deny Configure a filter to drop packets.

permit Configure a filter to forward packets.

Common MAC Access List Commands

The following commands are available within both MAC ACL modes (Standard and Extended) and do not have mode-specific options.

C and S platforms (except the S55) support Ingress MAC ACLs only.

The supports both Ingress and Egress MAC ACLs.

The following commands allow you to clear, display and assign MAC ACL configurations.

• clear counters mac access-group
- mac access-group
• show mac accounting access-list

clear counters mac access-group

Clear counters for all or a specific MAC ACL.

Syntax
clear counters mac access-group [mac-list-name]

Parameters	mac-list-name (OPTIONAL) Enter the name of a configured MAC access list.
Command Modes	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	pre-Version 6.1.1.0 Introduced for E-Series

mac access-group

Apply a MAC ACL to traffic entering or exiting an interface.

Syntax
mac access-group access-list-name {in [vlan vlan-range] | out}
To delete a MAC access-group, use the no mac access-group mac-list-name command.
Parameters

access-list-name	Enter the name of a configured MAC access list, up to 140 characters.
vlan vlan-range	(OPTIONAL) Enter the keywordvlanfollowed a range of VLANs. Note that this option is available only with theinkeyword option.Range: 1 to 4094, 1-2094 for ExaScale (can used IDs 1-4094)
in	Enter the keywordinto configure the ACL to filter incoming traffic.
out	Enter the keywordoutto configure the ACL to filter outgoing traffic. Not available on S-Series.

Defaults

No default behavior or configuration

Command Modes
INTERFACE
Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.

Version 7.6.1.0 Support added for S-Series

Usage Information

Version 7.5.1.0 Support added for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

You can assign one ACL (standard or extended) to an interface.

Prior to 7.8.1.0, names are up to 16 characters long.

Related Commands

mac access-list standard Configure a standard MAC ACL.

mac access-list extended Configure an extended MAC ACL.

show mac accounting access-list

Display MAC access list configurations and counters (if configured).

Syntax

show mac accounting access-list access-list-name interface interface in | out

Parameters

access-list-name	Enter the name of a configured MAC ACL, up to 140 characters.
interface interface	Enter the keywordinterfacefollowed by the one of the following keywords and slot/port or number information:For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernet followed by the slot/port information.For a Port Channel interface, enter the keywordport-channelfollowed by a number:C-Seriesand S-SeriesRange: 1-128E-SeriesRange: 1 to 255 for TeraScale and ExaScale.For a SONET interface, enter the keywordsonetfollowed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernetfollowed by the slot/port information.
in | out	Identify whether ACL is applied ay Ingress (in) or egress (out) side.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Example

Figure 7-6. Command Example: show mac accounting access-list

FTOS#show mac accounting access-list mac-ext interface po 1
Extended mac access-list mac-ext on GigabitEthernet 0/11
    seq 5 permit host 00:00:00:00:00:11 host 00:00:00:00:00:19 count (393794576 packets)
    seq 10 deny host 00:00:00:00:00:21 host 00:00:00:00:00:29 count (89076777 packets)
    seq 15 deny host 00:00:00:00:00:31 host 00:00:00:00:00:39 count (0 packets)
    seq 20 deny host 00:00:00:00:00:41 host 00:00:00:00:00:49 count (0 packets)
    seq 25 permit any any count (0 packets)
Extended mac access-list mac-ext on GigabitEthernet 0/12
    seq 5 permit host 00:00:00:00:00:11 host 00:00:00:00:00:19 count (57589834 packets)
    seq 10 deny host 00:00:00:00:00:21 host 00:00:00:00:00:29 count (393143077 packets)
    seq 15 deny host 00:00:00:00:00:31 host 00:00:00:00:00:39 count (0 packets)
    seq 20 deny host 00:00:00:00:00:41 host 00:00:00:00:00:49 count (O packets)
    seq 25 permit any any count (O packets)
FTOS# 

Related Commands

show mac accounting destination Display destination counters for Layer 2 traffic (available on physical interfaces only).

Standard MAC ACL Commands

When an access-list is created without any rule and then applied to an interface, ACL behavior reflects implicit permit.

C and S platforms (except the S55 system) support Ingress MAC ACLs only.

The supports both Ingress and Egress MAC ACLs.

The following commands configure standard MAC ACLs:

• deny
  • mac access-list standard
• permit
  • seq

Note: See also Commands Common to all ACL Types and Common MAC Access List Commands.

deny

Configure a filter to drop packets with a the MAC address specified.

Syntax

deny {any | mac-source-address [mac-source-address-mask]} [count [byte]] [log] [monitor]

To remove this filter, you have two choices:

• Use the no seq sequence-number command syntax if you know the filter's sequence number or
  • Use the no deny {any | mac-source-address mac-source-address-mask} command.

Parameters

any	Enter the keyword any to specify that all traffic is subject to the filter.
mac-source-address	Enter a MAC address in nn:nn:nn:nn:nn:nn format.

	mac-source-address-mask	(OPTIONAL) Specify which bits in the MAC address must match. If no mask is specified, a mask of 00:00:00:00:00:00 is applied (in other words, the filter allows only MAC addresses that match).
	count	(OPTIONAL) Enter the keyword count to count packets processed by the filter.
	byte	(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
	log	(OPTIONAL, E-Series only) Enter the keyword log to log the packets.
	monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section “Flow-based Monitoring” in the Port Monitoring chapter of the FTOS Configuration Guide.
Defaults	Not enabled.
Command Modes	CONFIGURATION-MAC ACCESS LIST-STANDARD
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	Version 7.4.1.0 Added monitor option
	pre-Version 6.1.1.0 Introduced for E-Series
	Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
Usage Information	When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details.
Related Commands	permit Configure a MAC address filter to pass packets.
	seq Configure a MAC address filter with a specified sequence number.

mac access-list standard

Name a new or existing MAC access control list (MAC ACL) and enter the MAC ACCESS LIST mode to configure a standard MAC ACL. See Commands Common to all ACL Types and Common MAC Access List Commands.

Syntax mac access-list standard mac-list-name

To delete a MAC access list, use the no mac access-list standard mac-list-name command.

Parameters

mac-list-name

Enter a text string as the name of the standard MAC access list (140 character maximum).

Defaults Not configured

Command Modes CONFIGURATION

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Usage Information

FTOS supports one ingress and one egress MAC ACL per interface.

Prior to 7.8.1.0, names are up to 16 characters long.

The number of entries allowed per ACL is hardware-dependent. Refer to your line card documentation for detailed specification on entries allowed per ACL.

C-Series and S-Series support ingress ACLs only.

Example

Figure 7-7. Command Example: mac-access-list standard

FTOS (conf) #mac-access-list access-list standard TestMAC
FTOS (config-std-macl) #?
deny	Specify packets to reject
description	List description
exit	Exit from access-list configuration mode
no	Negate a command or set its defaults
permit	Specify packets to forward
remark	Specify access-list entry remark
seq	Sequence numbers
show	Show Standard ACL configuration

permit

Configure a filter to forward packets from a specific source MAC address.

Syntax

permit {any | mac-source-address [mac-source-address-mask]} [count [byte]] | [log] [monitor]

To remove this filter, you have two choices:

• Use the no seq sequence-number command syntax if you know the filter's sequence number or
  • Use the no permit {any | mac-source-address mac-source-address-mask} command.

Parameters

any	Enter the keyword any to forward all packets received with a MAC address.
mac-source-address	Enter a MAC address in nn:nn:nn:nn:nn:nn format.

mac-source-address-mask	(OPTIONAL) Specify which bits in the MAC address must match. If no mask is specified, a mask of 00:00:00:00:00:00 is applied (in other words, the filter allows only MAC addresses that match).
count	(OPTIONAL) Enter the keyword count to count packets processed by the filter.
byte	(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
log	(OPTIONAL, E-Series only) Enter the keyword log to log the packets.
monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section “Flow-based Monitoring” in the Port Monitoring chapter of the FTOS Configuration Guide.

Defaults

Not configured.

Command Modes

CONFIGURATION-MAC ACCESS LIST-STANDARD

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.

Usage Information

When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets' details.

Related Commands

deny Configure a MAC ACL filter to drop packets.

seq Configure a MAC ACL filter with a specified sequence number.

seq

Assign a sequence number to a deny or permit filter in a MAC access list while creating the filter.

Syntax

seq sequence-number {deny | permit} {any | mac-source-address [mac-source-address-mask]} [count [byte]] [log] [monitor]

To remove this filter, use the no seq sequence-number command.

Parameters

sequence-number	Enter a number between 0 and 65535.
deny	Enter the keyword deny to configure a filter to drop packets meeting this condition.
permit	Enter the keyword permit to configure a filter to forward packets meeting this criteria.

	any Enter the keyword any to filter all packets.
	mac-source-address	Enter a MAC address in nn:nn:nn:nn:nn:nn format.
	mac-source-address-mask	(OPTIONAL) Specify which bits in the MAC address must match. If no mask is specified, a mask of 00:00:00:00:00:00 is applied (in other words, the filter allows only MAC addresses that match).
	count	(OPTIONAL) Enter the keyword count to count packets processed by the filter.
	byte	(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
	log	(OPTIONAL, E-Series only) Enter the keyword log to log the packets.
	monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section “Flow-based Monitoring” in the Port Monitoring chapter of the FTOS Configuration Guide.
Defaults	Not configured.
Command Modes	CONFIGURATION-MAC ACCESS LIST-STANDARD
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	Version 7.4.1.0 Added monitor option
	pre-Version 6.1.1.0 Introduced for E-Series
Usage Information	Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
	When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details.
Related Commands	deny Configure a filter to drop packets.
	permit Configure a filter to forward packets.

Extended MAC ACL Commands

When an access-list is created without any rule and then applied to an interface, ACL behavior reflects implicit permit.

C and S platforms (except the S55 system) support Ingress MAC ACLs only.

The supports both Ingress and Egress MAC ACLs.

The following commands configure Extended MAC ACLs.

• deny
  • mac access-list extended
• permit
  • seq

Note: See also Commands Common to all ACL Types and Common MAC Access List Commands.

deny

Syntax

Configure a filter to drop packets that match the filter criteria.

deny {any | host mac-address | mac-source-address mac-source-address-mask} {any | host mac-address | mac-destination-address mac-destination-address-mask} [ethertype-operator] [count [byte]] [log] [monitor]

To remove this filter, you have two choices:

• Use the no seq sequence-number command syntax if you know the filter's sequence number or
• Use the no deny {any | host mac-address | mac-source-address mac-source-address-mask} {any | host mac-address | mac-destination-address mac-destination-address-mask} command.

Parameters

any Enter the keyword any to drop all packets.
host mac-address	Enter the keyword host followed by a MAC address to drop packets with that host address.
mac-source-address	Enter the source MAC address in nn:nn:nn:nn:nn:nn format.
mac-source-address-mask	Specify which bits in the MAC address must match.The MAC ACL supports an inverse mask, therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly.
mac-destination-address	Enter the destination MAC address and mask in nn:nn:nn:nn:nn:nn format.
mac-destination-address-mask	Specify which bits in the MAC address must match.The MAC ACL supports an inverse mask, therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly.
ethertype operator	(OPTIONAL) To filter based on protocol type, enter one of the following Ethertypes:ev2 - is the Ethernet II frame format,llc - is the IEEE 802.3 frame format,snap - is the IEEE 802.3 SNAP frame format.
count (OPTIONAL) Enter the keyword count to count packets processed by the filter.
byte (OPTIONAL) Enter the keyword byte to count bytes processed by the filter.

	log	(OPTIONAL, E-Series only) Enter the keyword log to log the packets.
	monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section “Flow-based Monitoring” in the Port Monitoring chapter of the FTOS Configuration Guide.
Defaults	Not configured.
Command Modes	CONFIGURATION-MAC ACCESS LIST-EXTENDED
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	Version 7.4.1.0 Added monitor option
	pre-Version 6.1.1.0 Introduced for E-Series
	Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
Usage Information	When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details.
Related Commands	permit Configure a filter to forward based on MAC addresses.
	seq Configure a filter with specific sequence numbers.

mac access-list extended

Name a new or existing extended MAC access control list (extended MAC ACL).

Syntax

mac access-list extended access-list-name

To delete a MAC access list, use the no mac access-list extended access-list-name command.

Parameters

access-list-name

Enter a text string as the MAC access list name, up to 140 characters.

Defaults

No default configuration

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.

Usage Information

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

The number of entries allowed per ACL is hardware-dependent. Refer to your line card documentation for detailed specification on entries allowed per ACL.

Prior to 7.8.1.0, names are up to 16 characters long.

Example

Figure 7-8. Command Example: mac-access-list extended

FTOS (conf) #mac-access-list access-list extended TestMATExt
FTOS (config-ext-macl) #remark 5 IPv4
FTOS (config-ext-macl) #seq 10 permit any any ev2 eq 800 count bytes
FTOS (config-ext-macl) #remark 15 ARP
FTOS (config-ext-macl) #seq 20 permit any any ev2 eq 806 count bytes
FTOS (config-ext-macl) #remark 25 IPv6
FTOS (config-ext-macl) #seq 30 permit any any ev2 eq 86dd count bytes
FTOS (config-ext-macl) #seq 40 permit any any count bytes
FTOS (config-ext-macl) #exit
FTOS (conf) #do show mac accounting access-list snickers interface g0/47 in
Extended mac access-list snickers on GigabitEthernet 0/47
seq 10 permit any any ev2 eq 800 count bytes (559851886 packets 191402152148 bytes)
seq 20 permit any any ev2 eq 806 count bytes (74481486 packets 5031686754 bytes)
seq 30 permit any any ev2 eq 86dd count bytes (7751519 packets 797843521 bytes) 

Related Commands

mac access-list standard Configure a standard MAC access list.

show mac accounting access-list Display MAC access list configurations and counters (if configured).

permit

Configure a filter to pass packets matching the criteria specified.

Syntax

permit {any | host mac-address | mac-source-address mac-source-address-mask} {any | host mac-address | mac-destination-address mac-destination-address-mask} [ethertype operator] [count [byte]] | [log] [monitor]

To remove this filter, you have two choices:

• Use the no seq sequence-number command syntax if you know the filter's sequence number or
• Use the no permit {any | host mac-address | mac-source-address mac-source-address-mask} {any | mac-destination-address mac-destination-address-mask} command.

Parameters

any Enter the keyword any to forward all packets.

host Enter the keyword host followed by a MAC address to forward packets with that host address.

mac-source-address Enter the source MAC address in nn:nn:nn:nn:nn:nn format.

	mac-source-address-mask	Specify which bits in the MAC address must be matched.The MAC ACL supports an inverse mask, therefore, a mask offf:ff:ff:ff:ff:ff allows entries that do not match and a mask of00:00:00:00:00:00 only allows entries that match exactly.
	mac-destination-address	Enter the destination MAC address and mask innn:nn:nn:nn:nn:nn format.
	mac-destination-address-mask	Specify which bits in the MAC address must be matched.The MAC ACL supports an inverse mask, therefore, a mask offf:ff:ff:ff:ff:ff allows entries that do not match and a mask of00:00:00:00:00:00 only allows entries that match exactly.
	ethertype operator	(OPTIONAL) To filter based on protocol type, enter one of the following Ethertypes:ev2 - is the Ethernet II frame format.llc - is the IEEE 802.3 frame format.snap - is the IEEE 802.3 SNAP frame format.
	count (OPTIONAL) Enter the keyword count to count packets processed by the filter.
	byte (OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
	log	(OPTIONAL, E-Series only) Enter the keyword log to log the packets.
	monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section “Flow-based Monitoring” in the Port Monitoring chapter of the FTOS Configuration Guide.
Defaults	Not configured.
Command Modes	CONFIGURATION-MAC ACCESS LIST-EXTENDED
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	Version 7.4.1.0 Added monitor option
	pre-Version 6.1.1.0 Introduced for E-Series
	Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
Usage Information	When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details.
Related Commands	deny Configure a filter to drop traffic based on the MAC address.
	seq Configure a filter with specific sequence numbers.

Configure a filter with a specific sequence number.

Syntax

seq sequence-number {deny | permit} {any | host mac-address | mac-source-address mac-source-address-mask} {any | host mac-address | mac-destination-address mac-destination-address-mask} [ethertype operator] [count [byte]] [log] [monitor]

To delete a filter, use the no seq sequence-number command.

Parameters

sequence-number	Enter a number as the filter sequence number.Range: zero (0) to 65535.
deny	Enter the keyworddenyto drop any traffic matching this filter.
permit	Enter the keywordpermitto forward any traffic matching this filter.
any Enter the keywordanyto filter all packets.
host mac-address	Enter the keywordhostfollowed by a MAC address to filter packets with that host address.
mac-source-address	Enter the source MAC address in nn:nn:nn:nn:nn:nn format.The MAC ACL supports an inverse mask, therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly.
mac-source-address-mask	Specify which bits in the MAC address must be matched.
mac-destination-address	Enter the destination MAC address and mask in nn:nn:nn:nn:nn:nn format.
mac-destination-address-mask	Specify which bits in the MAC address must be matched.The MAC ACL supports an inverse mask, therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly.
ethertype operator	(OPTIONAL) To filter based on protocol type, enter one of the following Ethertypes:ev2- is the Ethernet II frame format.llc- is the IEEE 802.3 frame format.snap- is the IEEE 802.3 SNAP frame format.
count	(OPTIONAL) Enter the keywordcountto count packets processed by the filter.
byte	(OPTIONAL) Enter the keywordbyteto count bytes processed by the filter.
log	(OPTIONAL, E-Series only) Enter the keywordlogto log the packets.
monitor (OPTIONAL) Enter the keywordmonitorwhen the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section “Flow-based Monitoring” in the Port Monitoring chapter of theFTOS Configuration Guide.

Defaults

Not configured

Command Modes

CONFIGURATION-MAC ACCESS LIST-STANDARD

Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	Version 7.4.1.0 Added monitor option
	pre-Version 6.1.1.0 Introduced for E-Series

Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.

Usage Information

When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets' details.

Related Commands

deny Configure a filter to drop traffic.

permit Configure a filter to forward traffic.

IP Prefix List Commands

When an access-list is created without any rule and then applied to an interface, ACL behavior reflects implicit permit.

Use these commands to configure or enable IP prefix lists.

• clear ip prefix-list
• deny
• ip prefix-list
• permit
  • seq
  • show config
  • show ip prefix-list detail
  • show ip prefix-list summary

clear ip prefix-list

Reset the number of times traffic met the conditions (“hit” counters) of the configured prefix lists.

Syntax

clear ip prefix-list [prefix-name]

Parameters

prefix-name (OPTIONAL) Enter the name of the configured prefix list to clear only counters for that prefix list, up to 140 characters long.

Command Modes

EXEC Privilege

Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	pre-Version 6.1.1.0 Introduced for E-Series
Default	Clears “hit” counters for all prefix lists unless a prefix list is specified.
Related Commands	ip prefix-list Configure a prefix list.

deny

Configure a filter to drop packets meeting the criteria specified.

Syntax

deny ip-prefix [ge min-prefix-length] [le max-prefix-length]

To delete a drop filter, use the no deny ip-prefix command.

Parameters

ip-prefix	Specify an IP prefix in the network/length format. For example, 35.0.0.0/8 means match the first 8 bits of address 35.0.0.0.
ge min-prefix-length	(OPTIONAL) Enter the keyword ge followed by the minimum prefix length, which is a number from zero (0) to 32.
le max-prefix-length	(OPTIONAL) Enter the keyword le followed by the maximum prefix length, which is a number from zero (0) to 32.

Defaults

Not configured.

Command Modes

PREFIX-LIST

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Usage Information

Sequence numbers for this filter are automatically assigned starting at sequence number 5. If the options ge or le are not used, only packets with an exact match to the prefix are filtered.

Related Commands

permit Configure a filter to pass packets. seq Configure a drop or permit filter with a specified sequence number.

ip prefix-list

Syntax	Enter the PREFIX-LIST mode and configure a prefix list.ip prefix-list prefix-nameTo delete a prefix list, use theno ip prefix-list prefix-namecommand.
Parameters	prefix-name	Enter a string up to 16 characters long as the name of the prefix list, up to 140 characters long.
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	pre-Version 6.1.1.0 Introduced for E-Series
Usage Information	Prefix lists redistribute OSPF and RIP routes meeting specific criteria. For related RIP commands supported on C-Series and E-Series, see Chapter 33, Router Information Protocol (RIP). For related OSPF commands supported on all three platforms, see Chapter 26, Open Shortest Path First (OSPFv2 and OSPFv3).Prior to 7.8.1.0, names are up to 16 characters long.
Related Commands	show ip route list Display IP routes in an IP prefix list.
	show ip prefix-list summary Display a summary of the configured prefix lists.
permit
Syntax	Configure a filter that passes packets meeting the criteria specified permit ip-prefix [ge min-prefix-length] [le max-prefix-length]To delete a forward filter, use theno permit ip-prefix command.
Parameters	ip-prefix	Specify an IP prefix in the network/length format. For example, 35.0.0.0/8 means match the first 8 bits of address 35.0.0.0.
	ge min-prefix-length	(OPTIONAL) Enter the keyword ge followed by the minimum prefix length, which is a number from zero (0) to 32.
	le max-prefix-length	(OPTIONAL) Enter the keyword le followed by the maximum prefix length, which is a number from zero (0) to 32.
Command Modes	PREFIX-LIST
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	pre-Version 6.1.1.0 Introduced for E-Series
Usage Information	Sequence numbers for this filter are automatically assigned starting at sequence number 5.
	If the options ge or le are not used, only packets with an exact match to the prefix are filtered.
Related Commands	deny Configure a filter to drop packets.
	seq Configure a drop or permit filter with a specified sequence number.
SeqCESSyntax	Assign a sequence number to a deny or permit filter in a prefix list while configuring the filter.
	seq sequence-number {deny | permit} {any} | [ip-prefix /nn {ge min-prefix-length} {le max-prefix-length}] | [bitmask number]
	To delete a specific filter, use the no seq sequence-number {deny | permit} {any} | [ip-prefix {ge min-prefix-length} {le max-prefix-length}] | [bitmask number].
Parameters	sequence-number	Enter a number.Range: 1 to 4294967294.
	deny	Enter the keyword deny to configure a filter to drop packets meeting this condition.
	permit	Enter the keyword permit to configure a filter to forward packets meeting this condition.
	any (OPTIONAL) Enter the keyword any to match any packets.
	ip-prefix /nn	(OPTIONAL) Specify an IP prefix in the network/length format. For example, 35.0.0.0/8 means match the first 8 bits of address 35.0.0.0.
	ge min-prefix-length	(OPTIONAL) Enter the keyword ge followed by the minimum prefix length, which is a number from zero (0) to 32.
	le max-prefix-length	(OPTIONAL) Enter the keyword le followed by the maximum prefix length, which is a number from zero (0) to 32.
	bitmask number	Enter the keyword bitmask followed by a bitmask number in dotted decimal format.
Defaults	Not configured.
Command Modes	PREFIX-LIST
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Added support for S-Series
	Version 7.5.1.0 Added support for C-Series
	Version 6.3.1.0 Added bitmask option
Usage Information	If the options ge or le are not used, only packets with an exact match to the prefix are filtered.
Related Commands	deny Configure a filter to drop packets.
	permit Configure a filter to pass packets.

show config

Display the current PREFIX-LIST configurations.

Syntax

show config

Command Modes

PREFIX-LIST

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Example

Figure 7-9. Command Example: show config

FTOS (conf-nprefix1) #show config !

ip prefix-list snickers

FTOS (conf-nprefix1) #

show ip prefix-list detail

Display details of the configured prefix lists.

Syntax

show ip prefix-list detail [prefix-name]

Parameters

prefix-name (OPTIONAL) Enter a text string as the name of the prefix list, up to 140 characters.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Example

Figure 7-10. Command Example: show ip prefix-list detail

FTOS#show ip prefix-list detail
Prefix-list with the last deletion/insertion: filter_ospf
ip prefix-list filter_in:
count: 3, range entries: 3, sequences: 5 - 10
    seq 5 deny 1.102.0.0/16 le 32 (hit count: 0)
    seq 6 deny 2.1.0.0/16 ge 23 (hit count: 0)
    seq 10 permit 0.0.0.0/0 le 32 (hit count: 0)
ip prefix-list filter_ospf:
count: 4, range entries: 1, sequences: 5 - 10
    seq 5 deny 100.100.1.0/24 (hit count: 5)
    seq 6 deny 200.200.1.0/24 (hit count: 1)
    seq 7 deny 200.200.2.0/24 (hit count: 1)
    seq 10 permit 0.0.0.0/0 le 32 (hit count: 132)
FTOS# 

show ip prefix-list summary

Display a summary of the configured prefix lists.

Syntax

show ip prefix-list summary [prefix-name]

Parameters	prefix-name (OPTIONAL) Enter a text string as the name of the prefix list, up to 140 characters long.
Command Modes	EXEC
	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	pre-Version 6.1.1.0 Introduced for E-Series

Example

Figure 7-11. Command Example: show ip prefix-list summary

FTOS#show ip prefix summary
Prefix-list with the last deletion/insertion: test
ip prefix-list test:
count: 3, range entries: 1, sequences: 5 - 15
ip prefix-list test1:
count: 2, range entries: 2, sequences: 5 - 10
ip prefix-list test2:
count: 1, range entries: 1, sequences: 5 - 5
ip prefix-list test3:
count: 1, range entries: 1, sequences: 5 - 5
ip prefix-list test4:
count: 1, range entries: 1, sequences: 5 - 5
ip prefix-list test5:
count: 1, range entries: 1, sequences: 5 - 5
ip prefix-list test6:
count: 1, range entries: 1, sequences: 5 - 5
FTOS# 

Route Map Commands

When an access-list is created without any rule and then applied to an interface, ACL behavior reflects implicit permit.

The following commands allow you to configure route maps and their redistribution criteria.

• continue
  • description
• match as-path
• match community
• match interface
• match ip address
• match ip next-hop
• match ip route-source
• match metric
• match origin
• match route-type
• match tag
• route-map
• set as-path
• set automatic-tag
• set comm-list delete
• set community
• set level
• set local-preference
• set metric
• set metric-type
• set next-hop
• set origin
• set tag
• set weight

• show config
• show route-map

continue

Configure a route-map to go to a route-map entry with a higher sequence number.

Syntax

continue [sequence-number]

To remove the continue clause, use the no continue [sequence-number] command.

Parameters

sequence-number	(OPTIONAL) Enter the route map sequence number.
	Range: 1 - 65535
	Default: no sequence number

Defaults

Not Configured

Command Modes

ROUTE-MAP

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

Version 7.4.1.0 Introduced

Usage Information

The continue feature allows movement from one route-map entry to a specific route-map entry (the sequence number). If the sequence number is not specified, the continue feature simply moves to the next sequence number (also known as an implied continue). If a match clause exists, the continue feature executes only after a successful match occurs. If there are no successful matches, continue is ignored.

Match clause with Continue clause

The continue feature can exist without a match clause. A continue clause without a match clause executes and jumps to the specified route-map entry.

With a match clause and a continue clause, the match clause executes first and the continue clause next in a specified route map entry. The continue clause launches only after a successful match. The behavior is:

• A successful match with a continue clause—the route map executes the set clauses and then goes to the specified route map entry upon execution of the continue clause.
• If the next route map entry contains a continue clause, the route map will execute the continue clause if a successful match occurs.
• If the next route map entry does not contain a continue clause, the route map evaluates normally. If a match does not does not occur, the route map does not continue and will fall through to the next sequence number, if one exists.

Set clause with Continue clause

If the route-map entry contains sets with the continue clause, then set actions is performed first followed by the continue clause jump to the specified route map entry.

• If a set actions occurs in the first route map entry and then the same set action occurs with a different value in a subsequent route map entry, the last set of actions overrides the previous set of actions with the same set command.
• If set community additive and set as-path prepend are configure, the communities and AS numbers are pre-pended.

Related Commands

set community Specify a COMMUNITY attribute

set as-path Configure a filter to modify the AS path

description

Add a description to this route map.

Syntax

description { description }

To remove the description, use the no description {description} command.

Parameters

description

Enter a description to identify the route map (80 characters maximum).

Defaults

No default behavior or values

Command Modes

ROUTE-MAP

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

pre-Version 7.7.1.0 Introduced

Related Commands

route-map Enable a route map

match as-path

Configure a filter to match routes that have a certain AS number in their BGP path.

Syntax

match as-path as-path-name

To delete a match AS path filter, use the no match as-path as-path-name command.

Parameters

as-path-name

Enter the name of an established AS-PATH ACL, up to 140 characters.

Defaults

Not configured.

Command Modes

ROUTE-MAP

Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	pre-Version 6.1.1.0 Introduced for E-Series
Related Commands	set as-path Add information to the BGP AS_PATH attribute.

match community

Configure a filter to match routes that have a certain COMMUNITY attribute in their BGP path.

Syntax

match community community-list-name [exact]

To delete a community match filter, use the no match community command.

Parameters

community-list-name	Enter the name of a configured community list.
exact	(OPTIONAL) Enter the keywordsexactto process only those routes with this community list name.

Defaults

Not configured.

Command Modes

ROUTE-MAP

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Related Commands

ip community-list Configure an Community Access list.

set community Specify a COMMUNITY attribute.

neighbor send-community Send COMMUNITY attribute to peer or peer group.

match interface

Configure a filter to match routes whose next hop is on the interface specified.

Syntax

match interface interface

To remove a match, use the no match interface interface command.

Parameters	interface	Enter the following keywords and slot/port or number information:For a Fast Ethernet interface, enter the keywordFastEthernet followed by the slot/port information.For a Gigabit Ethernet interface, enter the keywordGigabitEthernet followed by the slot/port information.For the loopback interface, enter the keywordloopback followed by a number from zero (0) to 16383.For a Port Channel interface, enter the keywordport-channel followed by a number:C-Series and S-Series Range: 1-128E-Series Range: 1 to 255 for TeraScale and ExaScale.For a SONET interface, enter the keywordsonet followed by the slot/port information.For a Ten Gigabit Ethernet interface, enter the keywordTenGigabitEthernet followed by the slot/port information.For a VLAN, enter the keyword vlan followed by a number from 1 to 4094, 1-2094 for ExaScale (can used IDs 1-4094).
Defaults	Not configured
Command Modes	ROUTE-MAP
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	pre-Version 6.1.1.0 Introduced for E-Series
Related Commands	match ip address Redistribute routes that match an IP address.
	match ip next-hop Redistribute routes that match the next-hop IP address.
	match ip route-source Redistribute routes that match routes advertised by other routers.
	match metric Redistribute routes that match a specific metric.
	match route-type Redistribute routes that match a route type.
	match tag Redistribute routes that match a specific tag.

match ip address

Configure a filter to match routes based on IP addresses specified in an access list.

Syntax

match ip address prefix-list-name

To delete a match, use the no match ip address prefix-list-name command.

Parameters

prefix-list-name

Enter the name of configured prefix list, up to 140 characters.

Defaults

Not configured.

Command Modes

ROUTE-MAP

Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	pre-Version 6.1.1.0 Introduced for E-Series
Related Commands	match interface Redistribute routes that match the next-hop interface.
	match ip next-hop Redistribute routes that match the next-hop IP address.
	match ip route-source Redistribute routes that match routes advertised by other routers.
	match metric Redistribute routes that match a specific metric.
	match route-type Redistribute routes that match a route type.
	match tag Redistribute routes that match a specific tag.

match ip next-hop

Configure a filter to match based on the next-hop IP addresses specified in an IP access list or IP prefix list.

Syntax match ip next-hop {access-list | prefix-list prefix-list-name}

To delete a match, use the no match ip next-hop {access-list-name | prefix-list prefix-list-name} command.

Parameters	access-list-name	Enter the name of a configured IP access list, up to 140 characters.
	prefix-list prefix-list-name	Enter the keywords prefix-list followed by the name of configured prefix list.
Defaults	Not configured.
mand Modes	ROUTE-MAP
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	pre-Version 6.1.1.0 Introduced for E-Series
Related Commands	match interface Redistribute routes that match the next-hop interface.
	match ip address Redistribute routes that match an IP address.
	match ip route-source Redistribute routes that match routes advertised by other routers.
	match metric Redistribute routes that match a specific metric.

match ip route-source

Syntax	Configure a filter to match based on the routes advertised by routes specified in IP access lists or IP prefix lists.
	match ip route-source {access-list | prefix-list prefix-list-name}
	To delete a match, use the no match ip route-source {access-list | prefix-list prefix-list-name} command.
Parameters	access-list-name	Enter the name of a configured IP access list, up to 140 characters.
	prefix-list prefix-list-name	Enter the keywords prefix-list followed by the name of configured prefix list, up 10 140 characters.
Defaults	Not configured.
Command Modes	ROUTE-MAP
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	pre-Version 6.1.1.0 Introduced for E-Series
Related Commands	match interface Redistribute routes that match the next-hop interface.
	match ip address Redistribute routes that match an IP address.
	match ip next-hop Redistribute routes that match the next-hop IP address.
	match metric Redistribute routes that match a specific metric.
	match route-type Redistribute routes that match a route type.
	match tag Redistribute routes that match a specific tag.

match metric

Configure a filter to match on a specified value.

Syntax

match metric metric-value

To delete a value, use the no match metric [metric-value] command.

Parameters

metric-value

Enter a value to match.

Range: zero (0) to 4294967295.

Defaults	Not configured.
Command Modes	ROUTE-MAP
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	pre-Version 6.1.1.0 Introduced for E-Series
Related Commands	match interface Redistribute routes that match the next-hop interface.
	match ip address Redistribute routes that match an IP address.
	match ip next-hop Redistribute routes that match the next-hop IP address.
	match ip route-source Redistribute routes that match routes advertised by other routers.
	match route-type Redistribute routes that match a route type.
	match tag Redistribute routes that match a specific tag.

match origin

Configure a filter to match routes based on the value found in the BGP path ORIGIN attribute.

Syntax
match origin {egp | igp | incomplete}
To disable matching filter, use the no match origin {igp | egp | incomplete} command.

Parameters	egp	Enter the keyword egp to match routes originating outside the AS.
	igp	Enter the keyword igp to match routes originating within the same AS.
	incomplete	Enter the keyword incomplete to match routes with incomplete routing information.
Defaults	Not configured.
hand Modes	ROUTE-MAP
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	pre-Version 6.1.1.0 Introduced for E-Series

match route-type

Configure a filter to match routes based on the how the route is defined.

Syntax

match route-type {external [type-1 | type-2] | internal | level-1 | level-2 | local}

To delete a match, use the no match route-type {local | internal | external [type-1 | type-2] | level-1 | level-2} command.

Parameters	external [type-1| type-2]	Enter the keyword external followed by either type-1 or type-2 to match only on OSPF Type 1 routes or OSPF Type 2 routes.
	internal	Enter the keyword internal to match only on routes generated within OSPF areas.
	level-1	Enter the keyword level-1 to match IS-IS Level 1 routes.
	level-2	Enter the keyword level-2 to match IS-IS Level 2 routes.
	local	Enter the keyword local to match only on routes generated within the switch.
Defaults	Not configured.
Command Modes	ROUTE-MAP
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	pre-Version 6.1.1.0 Introduced for E-Series
Related Commands	match interface Redistribute routes that match the next-hop interface.
	match ip address Redistribute routes that match an IP address.
	match ip next-hop Redistribute routes that match the next-hop IP address.
	match ip route-source Redistribute routes that match routes advertised by other routers.
	match metric Redistribute routes that match a specific metric.
	match tag Redistribute routes that match a tag.

match tag

Configure a filter to redistribute only routes that match a specified tag value.

Syntax

match tag tag-value

To remove a match, use the no match tag command.

Parameters

tag-value

Enter a value as the tag on which to match. Range: zero (0) to 4294967295.

Defaults

Not configured

Command Modes

ROUTE-MAP

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Related Commands

match interface Redistribute routes that match the next-hop interface.

match ip address Redistribute routes that match an IP address.

match ip next-hop Redistribute routes that match the next-hop IP address.

match ip route-source Redistribute routes that match routes advertised by other routers.

match metric Redistribute routes that match a specific metric.

match route-type Redistribute routes that match a route type.

route-map C E S

Syntax

Enable a route map statement and configure its action and sequence number. This command also places you in the ROUTE-MAP mode.

route-map map-name [permit | deny] [sequence-number]

To delete a route map, use the no route-map map-name [permit | deny] [sequence-number] command.

Parameters

map-name	Enter a text string of up to 140 characters to name the route map for easy identification.
permit	(OPTIONAL) Enter the keyword permit to set the route map default as permit.If no keyword is specified, the default is permit.
deny	(OPTIONAL) Enter the keyword deny to set the route map default as deny.
sequence-number	(OPTIONAL) Enter a number to identify the route map for editing and sequencing with other route maps. You are prompted for a sequence number if there are multiple instances of the route map.Range: 1 to 65535.

Defaults

Not configured

If no keyword (permit or deny) is defined for the route map, the permit action is the default.

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Example

Figure 7-12. Command Example: route-map

FTOS (conf) #route-map dempsey FTOS (config-route-map) #

Usage Information

Use caution when you delete route maps because if you do not specify a sequence number, all route maps with the same map-name are deleted when you use no route-map map-name command.

Related Commands	Prior to 7.8.1.0, names are up to 16 characters long.
	show config Display the current configuration.
set as-path
C E S	Configure a filter to modify the AS path for BGP routes.
Syntax	set as-path prepend as-number [... as-number]
Parameters	To remove an AS-Path setting, use the no set as-path {prepend as-number | tag} command.
	prepend as-number	Enter the keyword prepend followed by up to eight AS numbers to be inserted into the BGP path information. Range: 1 to 65535
Defaults	Not configured
Command Modes	ROUTE-MAP
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	pre-Version 6.1.1.0 Introduced for E-Series
Usage Information	You can prepend up to eight AS numbers to a BGP route.
	This command influences best path selection in BGP by inserting a tag or AS number into the AS_PATH attribute.
Related Commands	match as-path Redistribute routes that match an AS-PATH attribute.
	ip as-path access-list Configure an AS-PATH access list.
	neighbor filter-list Configure a BGP filter based on the AS-PATH attribute.
	show ip community-lists Display configured IP Community access lists.

set automatic-tag

Configure a filter to automatically compute the tag value of the route.

Syntax

set automatic-tag

To return to the default, enter no set automatic-tag.

Defaults

Not configured.

Command Modes

ROUTE-MAP

Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	pre-Version 6.1.1.0 Introduced for E-Series
Related Commands	set level Specify the OSPF area for route redistribution.
	set metric Specify the metric value assigned to redistributed routes.
	set metric-type Specify the metric type assigned to redistributed routes.
	set tag Specify the tag assigned to redistributed routes.

set comm-list delete

Configure a filter to remove the specified community list from the BGP route's COMMUNITY attribute.

Syntax

set comm-list community-list-name delete

To insert the community list into the COMMUNITY attribute, use the no set comm-list community-list-name delete command.

Parameters

community-list-name Enter the name of an established Community list, up to 140 characters.

Defaults

Not configured.

Command Modes

ROUTE-MAP

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Usage Information

The community list used in the set comm-list delete command must be configured so that each filter contains only one community. For example, the filter deny 100:12 is acceptable, but the filter deny 120:13 140:33 results in an error.

If the set comm-list delete command and the set community command are configured in the same route map sequence, then the deletion command (set comm-list delete) is processed before the insertion command (set community).

Prior to 7.8.1.0, names are up to 16 characters long.

Related Commands

ip community-list Configure community access list.

match community Redistribute routes that match the COMMUNITY attribute.

set community Specify a COMMUNITY attribute.

set community

Allows you to assign a BGP COMMUNITY attribute.

Syntax
set community { community-number | local-as | no-advertise | no-export | none } [additive]
To delete a BGP COMMUNITY attribute assignment, use the no set community { community-number | local-as | no-advertise | no-export | none} command.
Parameters

community-number	Enter the community number in AA:NN format where AA is the AS number (2 bytes) and NN is a value specific to that autonomous system.
local-AS	Enter the keywords local-AS to drop all routes with the COMMUNITY attribute of NO_EXPORT_SUBCONFED.All routes with the NO_EXPORT_SUBCONFED (0xFFFFF03) community attribute must not be advertised to external BGP peers.
no-advertise	Enter the keywords no-advertise to drop all routes containing the well-known community attribute of NO_ADVERTISE.All routes with the NO_ADVERTISE (0xFFFFF02) community attribute must not be advertised to other BGP peers.
no-export	Enter the keywords no-export to drop all routes containing the well-known community attribute of NO_EXPORT.All routes with the NO_EXPORT (0xFFFFF01) community attribute must not be advertised outside a BGP confederation boundary.
none	Enter the keywords none to remove the community attribute from routes meeting the route map criteria.
additive	(OPTIONAL) Enter the keyword additive add the communities to already existing communities.

Defaults
Not configured

Command Modes
ROUTE-MAP
Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Related Commands

ip community-list Configure a Community access list.
match community Redistribute routes that match a BGP COMMUNITY attribute.
neighbor send-community Assign the COMMUNITY attribute.
show ip bgp community Display BGP community groups.
show ip community-lists	Display configured Community access lists.

set level

Configure a filter to specify the IS-IS level or OSPF area to which matched routes are redistributed.

Syntax

set level {backbone | level-1 | level-1-2 | level-2 | stub-area}

To remove a set level condition, use the no set level {backbone | level-1 | level-1-2 | level-2 | stub-area} command.

Parameters

backbone	Enter the keywordbackboneto redistribute matched routes to the OSPF backbone area (arca 0.0.0.0).
level-1	Enter the keywordlevel-1to redistribute matched routes to IS-IS Level 1.
level-1-2	Enter the keywordlevel-1-2to redistribute matched routes to IS-IS Level 1 and Level 2.
level-2	Enter the keywordlevel-2to redistribute matched routes to IS-IS Level 2.
stub-area	Enter the keywordstubto redistributed matched routes to OSPF stub areas.

Defaults

Not configured.

Command Modes

ROUTE-MAP

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Related Commands

set automatic-tag Compute the tag value of the route.

set metric Specify the metric value assigned to redistributed routes.

set metric-type Specify the metric type assigned to redistributed routes.

set tag Specify the tag assigned to redistributed routes.

set local-preference

Configure a filter to set the BGP LOCAL_PREF attribute for routers within the local autonomous system.

Syntax

set local-preference value

To delete a BGP LOCAL_PREF attribute, enter no set local-preference.

Parameters

value

Enter a number as the LOCAL_PREF attribute value.

Range: 0 to 4294967295

Defaults

Not configured

Command Modes

ROUTE-MAP

Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	pre-Version 6.1.1.0 Introduced for E-Series
Usage Information	The set local-preference command changes the LOCAL_PREF attribute for routes meeting the route map criteria. To change the LOCAL_PREF for all routes, use the command.
Related Commands	bgp default local-preference Change default LOCAL_PREF attribute for all routes.
set metric
C E S	Configure a filter to assign a new metric to redistributed routes.
Syntax	set metric [+ | -] metric-valueTo delete a setting, enter no set metric.
Parameters	+ (OPTIONAL) Enter + to add a metric-value to the redistributed routes.
	- (OPTIONAL) Enter - to subtract a metric-value from the redistributed routes.
	metric-value	Enter a number as the new metric value.Range: zero (0) to 4294967295
Defaults	Not configured
Command Modes	ROUTE-MAP
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	pre-Version 6.1.1.0 Introduced for E-Series
Related Commands	set automatic-tag Compute the tag value of the route.
	set levelSpecify the OSPF area for route redistribution.
	set metric-typeSpecify the route type assigned to redistributed routes.
	set tagSpecify the tag assigned to redistributed routes.

set metric-type

Configure a filter to assign a new route type for routes redistributed to OSPF.

Syntax

set metric-type {internal | external | type-1 | type-2}

To delete a setting, enter no set metric-type.

Parameters	internal	Enter the keywordinternalto assign the Interior Gateway Protocol metric of the next hop as the route’s BGP MULTI_EXIT_DES (MED) value.
	external	Enter the keywordexternalto assign the IS-IS external metric.
	type-1	Enter the keywordtype-1to assign the OSPF Type 1 metric.
	type-2	Enter the keywordtype-2to assign the OSPF Type 2 metric.

Defaults Not configured.

Command Modes ROUTE-MAP

Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.3.1.0 Implemented internal keyword
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	pre-Version 6.1.1.0 Introduced for E-Series
Related Commands	set automatic-tag Compute the tag value of the route.
	set levelSpecify the OSPF area for route redistribution.
	set metricSpecify the metric value assigned to redistributed routes.
	set tagSpecify the tag assigned to redistributed routes.

set next-hop

C E S Configure a filter to specify an IP address as the next hop.

Syntax set next-hop ip-address

To delete the setting, use the no set next-hop ip-address command.

Parameters

ip-address

Specify an IP address in dotted decimal format.

Defaults Not configured.

Command Modes ROUTE-MAP

Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	pre-Version 6.1.1.0 Introduced for E-Series

Usage Information If the set next-hop command is configured, its configuration takes precedence over the neighbor next-hop-self command in the ROUTER BGP mode.

Related Commands	If you configure the set next-hop command with the interface's (either Loopback or physical) IP address, the software declares the route unreachable.
	match ip next-hop Redistribute routes that match the next-hop IP address.
	neighbor next-hop-self Configure the routers as the next hop for a BGP neighbor.
set origin
Syntax	Configure a filter to manipulate the BGP ORIGIN attribute.
	set origin {igp | egp | incomplete}
	To delete an ORIGIN attribute setting, enter no set origin.
Parameters	egp	Enter the keyword egp to set routes originating from outside the local AS.
	igp	Enter the keyword igp to set routes originating within the same AS.
	incomplete	Enter the keyword incomplete to set routes with incomplete routing information.
Defaults	Not configured.
Command Modes	ROUTE-MAP
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	pre-Version 6.1.1.0 Introduced for E-Series
set tag
Syntax	Configure a filter to specify a tag for redistributed routes.
	set tag tag-value
	To delete a setting, enter no set tag.
Parameters	tag-value	Enter a number as the tag. Range: zero (0) to 4294967295.
Defaults	Not configured
Command Modes	ROUTE-MAP
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Support added for S-Series

Related Commands

Version 7.5.1.0 Support added for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

set automatic-tag Compute the tag value of the route.

set level Specify the OSPF area for route redistribution.

set metric Specify the metric value assigned to redistributed routes.

set metric-type Specify the route type assigned to redistributed routes.

set weight

Configure a filter to add a non-RFC compliant attribute to the BGP route to assist with route selection.

Syntax

set weight weight

To delete a weight specification, use the no set weight weight command.

Parameters

weight Enter a number as the weight to be used by the route meeting the route map specification.

Routes with a higher weight are preferred when there are multiple routes to the same destination.

Range: 0 to 65535

Default: router-originated = 32768; all other routes = 0

Defaults

router-originated = 32768 ; all other routes = 0

Command Modes

ROUTE-MAP

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Usage Information

If you do not use the set weight command, router-originated paths have a weight attribute of 32768 and all other paths have a weight attribute of zero.

show config

Display the current route map configuration.

Syntax

show config

Command Modes

ROUTE-MAP

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Support added for S-Series

	Version 7.5.1.0 Support added for C-Series
	pre-Version 6.1.1.0 Introduced for E-Series
Example	Figure 7-13. Command Example: show configFTOS (config-route-map) #show config!route-map hopper permit 10FTOS (config-route-map)#
show route-mapC E S Display the current route map configurations.
Syntax	show route-map [map-name]
Parameters	map-name (OPTIONAL) Enter the name of a configured route map, up to 140 characters.
Command Modes	EXEC
	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	pre-Version 6.1.1.0 Introduced for E-Series
Example	Figure 7-14. Command Example: show route-mapFTOS#show route-maproute-map firpo, permit, sequence 10Match clauses:Set clauses:tag 34FTOS#
Related Commands	route-map Configure a route map.

AS-Path Commands

This feature is supported on E-Series only, as indicated by this character under each command heading:

E

The following commands configure AS-Path ACLs.

• deny

• ip as-path access-list

• permit
  • show config
  • show ip as-path-access-lists

deny

E Create a filter to drop routes that match the route's AS-PATH attribute. Use regular expressions to identify which routes are affected by the filter.

Syntax deny as-regular-expression

To remove this filter, use the no deny as-regular-expression command.

Parameters

as-regular-expression

Enter a regular expression to match BGP AS-PATH attributes.Use one or a combination of the following:. = (period) matches on any single character, including white space* = (asterisk) matches on sequences in a pattern (zero or more sequences)+ = (plus sign) matches on sequences in a pattern (one or more sequences)? = (question mark) matches sequences in a pattern (0 or 1 sequences).You must enter an escape sequence (CTRL+v) prior to entering the ? regular expression.[ ] = (brackets) matches a range of single-character patterns.^ = (caret) matches the beginning of the input string. (If the caret is used at the beginning of a sequence or range, it matches on everything BUT the characters specified.)S = (dollar sign) matches the end of the output string._ = (underscore) matches a comma (,), left brace ({}), right brace ({}), left parenthesis, right parenthesis, the beginning of the input string, the end of the input string, or a space |= (pipe) matches either character.

Defaults Not configured

Command Modes AS-PATH ACL

Usage Information The regular expression must match part of the ASCII-text in the AS-PATH attribute of the BGP route.

Command History Version 8.1.1.0 Introduced on E-Series ExaScale pre-Version 6.1.1.0 Introduced for E-Series

ip as-path access-list

Enter the AS-PATH ACL mode and configure an access control list based on the BGP AS_PATH attribute.

Syntax ip as-path access-list as-path-name

To delete an AS-PATH ACL, use the no ip as-path access-list as-path-name command.

Parameters	as-path-name	Enter the access-list name, up to 140 characters.
Defaults	Not configured
Command Modes	CONFIGURATION
Example	Figure 7-15. Command Example: ip as-path access-listFTOS (conf) #ip as-path access-list TestPathFTOS (config-as-path) #
Usage Information	Use thematch as-pathor commands to apply the AS-PATH ACL to BGP routes.
Command History	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
	pre-Version 6.1.1.0 Introduced for E-Series
Related Commands	match as-pathMatch on routes contain a specific AS-PATH.
	Configure filter based on AS-PATH information.

permit

Create a filter to forward BGP routes that match the route's AS-PATH attributes. Use regular expressions to identify which routes are affected by this filter.

Syntax

permit as-regular-expression

To remove this filter, use the no permit as-regular-expression command.

Parameters

as-regular-expression

Enter a regular expression to match BGP AS-PATH attributes.Use one or a combination of the following:. = (period) matches on any single character, including white space.* = (asterisk) matches on sequences in a pattern (zero or more sequences)+ = (plus sign) matches on sequences in a pattern (one or more sequences)? = (question mark) matches sequences in a pattern (0 or 1 sequences). You must enter an escape sequence (CTRL+v) prior to entering the ? regular expression.[ ] = (brackets) matches a range of single-character patterns.^ = (caret) matches the beginning of the input string. (If the caret is used at the beginning of a sequence or range, it matches on everything BUT the characters specified.)$ = (dollar sign) matches the end of the output string._ = (underscore) matches a comma (,), left brace ( ), right brace ( ), left parenthesis, right parenthesis, the beginning of the input string, the end of the input string, or a space |= (pipe) matches either character.

Defaults	Not configured
Command Modes	AS-PATH ACL

Command History

Version 8.1.1.0 Introduced on E-Series ExaScale

pre-Version 6.1.1.0 Introduced for E-Series

show config

E Display the current configuration.

Syntax show config

Command Mode AS-PATH ACL

Command History

Version 8.1.1.0 Introduced on E-Series ExaScale

pre-Version 6.1.1.0 Introduced for E-Series

Example Figure 7-16. Command Example: show config (AS-PATH ACL)

FTOS (config-as-path) #show config
!
ip as-path access-list snickers
deny .3
FTOS (config-as-path) # 

show ip as-path-access-lists

E Display the all AS-PATH access lists configured on the E-Series.

Syntax show ip as-path-access-lists

Command Modes EXEC

EXEC Privilege

Command History

Version 8.1.1.0 Introduced on E-Series ExaScale

pre-Version 6.1.1.0 Introduced for E-Series

Example Figure 7-17. Command Example: show ip as-path-access-lists

FTOS#show ip as-path-access-lists ip as-path access-list 1 permit ^$ permit (.) deny . ip as-path access-list 91 permit ^$ deny . permit (.) FTOS#

IP Community List Commands

IP Community List commands are supported on E-Series only, as indicated by this character under each command heading: [E]

The commands in this section are.

• deny
• ip community-list
• permit
  • show config
  • show ip community-lists

deny

E Create a filter to drop routes matching a BGP COMMUNITY number.

Syntax

deny { community-number | local-AS | no-advertise | no-export | quote-regexp regular-expressions-list | regexp regular-expression}

To delete a description, enter no deny { community-number | local-AS | no-advertise | no-export | quote-regexp regular-expressions-list | regexp regular-expression}.

Parameters

community-number	Enter the community number in AA:NN format where AA is the AS number (2 bytes) and NN is a value specific to that autonomous system.
local-AS	Enter the keywords local-AS to drop all routes with the COMMUNITY attribute of NO_EXPORT_SUBCONFED.All routes with the NO_EXPORT_SUBCONFED (0xFFFFF03) community attribute must not be advertised to external BGP peers.
no-advertise	Enter the keywords no-advertise to drop all routes containing the well-known community attribute of NO_ADVERTISE.All routes with the NO_ADVERTISE (0xFFFFF02) community attribute must not be advertised to other BGP peers.

	no-export	Enter the keywords no-export to drop all routes containing the well-known community attribute of NO_EXPORT. All routes with the NO_EXPORT (0xFFFFF01) community attribute must not be advertised outside a BGP confederation boundary.
	regexp regular-expression	Enter the keyword regexp followed by a regular expression. Use one or a combination of the following: . = (period) matches on any single character, including white space * = (asterisk) matches on sequences in a pattern (zero or more sequences) + = (plus sign) matches on sequences in a pattern (one or more sequences) ? = (question mark) matches sequences in a pattern (0 or 1 sequences). You must enter an escape sequence (CTRL+v) prior to entering the ? regular expression. [] = (brackets) matches a range of single-character patterns. ^ = (caret) matches the beginning of the input string. (If the caret is used at the beginning of a sequence or range, it matches on everything BUT the characters specified.) S = (dollar sign) matches the end of the output string. _ = (underscore) matches a comma (.), left brace ((), right brace ()), left parenthesis, right parenthesis, the beginning of the input string, the end of the input string, or a space. |= (pipe) matches either character.
Defaults	Not configured.
Command Modes	COMMUNITY-LIST
Command History	Version 8.1.1.0 Introduced on E-Series ExaScale
	pre-Version 6.1.1.0 Introduced for E-Series

ip community-list

E Enter COMMUNITY-LIST mode and create an IP community-list for BGP.

Syntax ip community-list comm-list-name

To delete a community-list, use the no ip community-list comm-list-name command.

Parameters comm-list-name Enter a text string as the name of the community-list, up to 140 characters.

Command Modes CONFIGURATION

Example Figure 7-18. Command Example: ip community-list

FTOS(conf)#ip community-list TestComList FTOS(config-community-list)#

Command History	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
	pre-Version 6.1.1.0 Introduced for E-Series

permit

Configure a filter to forward routes that match the route's COMMUNITY attribute.

Syntax

permit { community-number | local-AS | no-advertise | no-export | quote-regexp regular-expressions-list | regexp regular-expression}

To remove this filter, use the no permit { community-number | local-AS | no-advertise | no-export | quote-regexp regular-expressions-list | regexp regular-expression} command.

Parameters

community-number	Enter the community number in AA:NN format where AA is the AS number (2 bytes) and NN is a value specific to that autonomous system.
local-AS	Enter the keywords local-AS to drop all routes with the COMMUNITY attribute of NO_EXPORT_SUBCONFED.All routes with the NO_EXPORT_SUBCONFED (0xFFFFF03) community attribute must not be advertised to external BGP peers.
no-advertise	Enter the keywords no-advertise to drop all routes containing the well-known community attribute of NO_ADVERTISE.All routes with the NO_ADVERTISE (0xFFFFF02) community attribute must not be advertised to other BGP peers.
no-export	Enter the keywords no-export to drop all routes containing the well-known community attribute of NO_EXPORT.All routes with the NO_EXPORT (0xFFFFF01) community attribute must not be advertised outside a BGP confederation boundary.
regexpregular-expression	Enter the keyword regexp followed by a regular expression. Use one or a combination of the following:. = (period) matches on any single character, including white space.* = (asterisk) matches on sequences in a pattern (zero or more sequences)+ = (plus sign) matches on sequences in a pattern (one or more sequences)? = (question mark) matches sequences in a pattern (0 or 1 sequences). You must enter an escape sequence (CTRL+v) prior to entering the ? regular expression.[] = (brackets) matches a range of single-character patterns.^ = (caret) matches the beginning of the input string. (If the caret is used at the beginning of a sequence or range, it matches on everything BUT the characters specified.)$ = (dollar sign) matches the end of the output string._ = (underscore) matches a comma (,), left brace ((), right brace ()), left parenthesis, right parenthesis, the beginning of the input string, the end of the input string, or a space |= (pipe) matches either character.

Defaults

Not configured

Command Modes

COMMUNITY-LIST

Command History

Version 8.1.1.0 Introduced on E-Series ExaScale

pre-Version 6.1.1.0 Introduced for E-Series

show config

E Display the non-default information in the current configuration.

Syntax show config

Command Mode COMMUNITY-LIST

Command History

Version 8.1.1.0 Introduced on E-Series ExaScale

pre-Version 6.1.1.0 Introduced for E-Series

Example

Figure 7-19. Command Example: show config (COMMUNITY-LIST

FTOS(config-std-community-list)#show config
!
ip community-list standard patches
deny 45:1
permit no-export
FTOS(config-std-community-list)# 

show ip community-lists

E Display configured IP community lists in alphabetic order.

Syntax show ip community-lists [name]

Parameters

name (OPTIONAL) Enter the name of the standard or extended IP community list, up to 140 characters.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.

pre-Version 6.1.1.0 Introduced for E-Series

Example

Figure 7-20. Command Example: show ip community-lists

FTOS#show ip community-lists
ip community-list standard 1
deny 701:20
deny 702:20
deny 703:20
deny 704:20
deny 705:20
deny 14551:20
deny 701:112
deny 702:112
deny 703:112
deny 704:112
deny 705:112
deny 14551:112
deny 701:666
deny 702:666
deny 703:666
deny 704:666
deny 705:666
deny 14551:666
FTOS# 

Border Gateway Protocol IPv4(BGPv4)

Overview

BGPv4 is supported as shown in the following table.

FTOS version Platform support
8.3.5.0 S55
8.1.1.0 E-Series ExaScale
7.8.1.0 S-Series
7.7.1.0. C-Series
pre-7.7.1.0 E-Series TeraScale		[CZB6]

For detailed information on configuring BGP, refer to the BGP chapter in the FTOS Configuration Guide.

This chapter contains the following sections:

• BGPv4 Commands
• MBGP Commands
  • BGP Extended Communities (RFC 4360)

BGPv4 Commands

Border Gateway Protocol (BGP) is an external gateway protocol that transmits interdomain routing information within and between Autonomous Systems (AS). BGP version 4 (BGPv4) supports Classless InterDomain Routing (CIDR) and the aggregation of routes and AS paths. Basically, two routers (called neighbors or peers) exchange information including full routing tables and periodically send messages to update those routing tables.

Note: FTOS Version 7.7.1 supports 2-Byte (16-bit) and 4-Byte (32-bit) format for Autonomous System Numbers (ASNs), where the 2-Byte format is 1-65535, the 4-Byte format is 1-4294967295.

Note: FTOS Version 8.3.1.0 supports Dotted format as well as the Traditional Plain format for AS Numbers. The dot format is displayed when using the show ip bgp commands. To determine the comparable dot format for an ASN from a traditional format, use ASN/65536. ASN%65536.

For more information about using the 2 or 4-Byte format, refer to the FTOS Configuration Guide.

The following commands enable you to configure and enable BGP.

• address-family
• aggregate-address
  • bgp always-compare-med
• bgp asnotation
  • bgp bestpath as-path ignore
  • bgp bestpath med confed
  • bgp bestpath med missing-as-best
  • bgp bestpath router-id ignore
  • bgp client-to-client reflection
• bgp cluster-id
  • bgp confederation identifier
  • bgp confederation peers
• bgp dampening
  • bgp default local-preference
• bgp enforce-first-as
• bgp fast-external-fallover
  • bgp four-octet-as-support
• bgp graceful-restart
  • bgp log-neighbor-changes
  • bgp non-deterministic-med
  • bgp recursive-bgp-next-hop
  • bgp regex-eval-optz-disable
• bgp router-id
• bgp soft-reconfig-backup
  • capture bgp-pdu neighbor
  • capture bgp-pdu max-buffer-size
• clear ip bgp
• clear ip bgp dampening
• clear ip bgp flap-statistics
• debug ip bgp

• debug ip bgp dampening

• debug ip bgp events

• debug ip bgp keepalives
• debug ip bgp notifications
• debug ip bgp soft-reconfiguration
• debug ip bgp updates
• default-metric
• description
• distance bgp
• maximum-paths
• neighbor activate
  • neighbor advertisement-interval
• neighbor advertisement-start
• neighbor allowas-in
• neighbor default-originate
• neighbor description
• neighbor distribute-list
• neighbor ebgp-multihop
• neighbor fall-over
• neighbor filter-list
• neighbor graceful-restart
• neighbor local-as
• neighbor maximum-prefix
• neighbor next-hop-self
• neighbor password
• neighbor peer-group (assigning peers)
  • neighbor peer-group (creating group)
• neighbor peer-group passive
• neighbor remote-as
• neighbor remove-private-as
• neighbor route-map
• neighbor route-reflector-client
• neighbor send-community
• neighbor shutdown
• neighbor soft-reconfiguration inbound
• neighbor timers
• neighbor update-source
• neighbor weight
• network
• network backdoor
• redistribute
• redistribute isis
• redistribute ospf
• router bgp
  • show capture bgp-pdu neighbor
  • show config
  • show ip bgp

• show ip bgp cluster-list
• show ip bgp community
• show ip bgp community-list
• show ip bgp dampened-paths
• show ip bgp detail
• show ip bgp extcommunity-list
• show ip bgp filter-list
• show ip bgp flap-statistics
• show ip bgp inconsistent-as
• show ip bgp neighbors
• show ip bgp next-hop
• show ip bgp paths
• show ip bgp paths as-path
• show ip bgp paths community
• show ip bgp peer-group
• show ip bgp regexp
• show ip bgp summary
• show running-config bgp
- timers bgp

address-family

Enable the IPv4 multicast or the IPv6 address family.

Syntax
address-family [ipv4 multicast| ipv6unicast]

Parameters	ipv4 multicast	Enter BGPv4 multicast mode.
	ipv6 unicast	Enter BGPv6 mode.
Defaults	Not configured.
hand Modes	ROUTER BGP
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 6.5.1.0 Introduced

aggregate-address

Summarize a range of prefixes to minimize the number of entries in the routing table.

Syntax

aggregate-address ip-address mask [advertise-map map-name] [as-set] [attribute-map map-name] [summary-only] [suppress-map map-name]

Parameters

ip-address mask	Enter the IP address and mask of the route to be the aggregate address. Enter the IP address in dotted decimal format (A.B.C.D) and mask in /prefix format (/x).
advertise-map map-name	(OPTIONAL) Enter the keywordsadvertise-mapfollowed by the name of a configured route map to set filters for advertising an aggregate route.
as-set	(OPTIONAL) Enter the keywordas-setto generate path attribute information and include it in the aggregate.AS_SET includes AS_PATHand community information from the routes included in the aggregated route.
attribute-map map-name	(OPTIONAL) Enter the keywordsattribute-mapfollowed by the name of a configured route map to modify attributes of the aggregate, excluding AS_PATH and NEXT_HOP attributes.
summary-only	(OPTIONAL) Enter the keywordsummary-onlyto advertise only the aggregate address. Specific routes will not be advertised.
suppress-map map-name	(OPTIONAL) Enter the keywordssuppress-mapfollowed by the name of a configured route map to identify which more-specific routes in the aggregate are suppressed.

Defaults

Not configured.

Command Modes

ROUTER BGP ADDRESS FAMILY

ROUTER BGP ADDRESS FAMILY IPv6

Usage Information

At least one of the routes included in the aggregate address must be in the BGP routing table for the configured aggregate to become active.

Do not add the as-set parameter to the aggregate, if routes within the aggregate are constantly changing as the aggregate will flap to keep track of the changes in the AS_PATH.

In route maps used in the suppress-map parameter, routes meeting the deny clause are not suppress; in other words, they are allowed. The opposite is true: routes meeting the permit clause are suppressed.

If the route is injected via the network command, that route will still appear in the routing table if the summary-only parameter is configured in the aggregate-address command.

The summary-only parameter suppresses all advertisements. If you want to suppress advertisements to only specific neighbors, use the neighbor distribute-list command.

In the show ip bgp command, aggregates contain an 'a' in the first column and routes suppressed by the aggregate contain an 's' in the first column.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

bgp always-compare-med

C E S	Enables you to enable comparison of the MULTI_EXIT_DISC (MED) attributes in the paths from different external ASs.
Syntax	bgp always-compare-medTo disable comparison of MED, enter no bgp always-compare-med.
Defaults	Disabled (that is, the software only compares MEDs from neighbors within the same AS).
Command Modes	ROUTER BGP
Usage Information	Any update without a MED attribute is the least preferred routeIf you enable this command, use the clear ip bgp * command to recompute the best path.
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.2.1.0 Introduced command
	Version 7.7.1.0 Introduced support on C-Series

bgp asnotation

C E S	Enables you to implement a method for AS Number representation in the CLI.
Syntax	bgp asnotation [asplain / asdot+ / asdot]To disable a dot or dot+ representation and return to ASPLAIN, enter no bgp asnotation.
Defaults	asplain
Command Modes	ROUTER BGP
Usage Information	You must enable bgp four-octet-as-support before enabling this feature. If you disable four-octect-support after using dot or dot+ format, the AS Numbers revert to asplain text.When you apply an asnotation, it is reflected in the running-configuration. If you change the notation type, the running-config is updated dynamically and the new notation is shown.
Related Commands	bgp four-octet-as-support Enable 4-byte support for the BGP process
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.3.1.0 Introduced Dynamic Application of AS Notation changes
	Version 8.2.1.0 Introduced

Example

Figure 8-1. Dynamic changes of the bgp asnotation command in the running config

FTOS(conf)#router bgp 1
FTOS(conf-router_bgp)#bgp asnotation asdot
FTOS(conf-router_bgp)#ex
FTOS(conf)#do show run | grep bgp

router bgp 1
bgp four-octet-as-support
bgp asnotation asdot

FTOS(conf)#router bgp 1
FTOS(conf-router_bgp)#bgp asnotation asdot+
FTOS(conf-router_bgp)#ex

FTOS(conf)#do show run | grep bgp
router bgp 1
bgp four-octet-as-support
bgp asnotation asdot+

FTOS(conf)#router bgp 1
FTOS(conf-router_bgp)#bgp asnotation asplain
FTOS(conf-router_bgp)#ex
FTOS(conf)#do show run | grep bgp
router bgp 1
bgp four-octet-as-support

FTOS(conf)# 

bgp bestpath as-path ignore

Ignore the AS PATH in BGP best path calculations.

Syntax

bgp bestpath as-path ignore

To return to the default, enter no bgp bestpath as-path ignore.

Defaults

Disabled (that is, the software considers the AS_PATH when choosing a route as best).

Command Modes

ROUTER BGP

Usage Information

If you enable this command, use the clear ip bgp * command to recompute the best path.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

bgp bestpath med confed

Enable MULTI_EXIT_DISC (MED) attribute comparison on paths learned from BGP confederations.

Syntax

bgp bestpath med confed

	To disable MED comparison on BGP confederation paths, enter no bgp bestpath med confed.
Defaults	Disabled
Command Modes	ROUTER BGP
Usage Information	The software compares the MEDs only if the path contains no external autonomous system numbers. If you enable this command, use theclear ip bgp* command to recompute the best path.
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.8.1.0 Introduced support on S-Series
	Version 7.7.1.0 Introduced support on C-Series

bgp bestpath med missing-as-best

During path selection, indicate preference to paths with missing MED (MULTI_EXIT_DISC) over those paths with an advertised MED attribute.

Syntax

bgp bestpath med missing-as-best

To return to the default selection, use the no bgp bestpath med missing-as-best command.

Defaults

Disabled

Command Modes

ROUTER BGP

Usage Information

The MED is a 4-byte unsigned integer value and the default behavior is to assume a missing MED as 4294967295. This command causes a missing MED to be treated as 0. During the path selection, paths with a lower MED are preferred over those with a higher MED.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

Version 6.3.1.0 Introduced

bgp bestpath router-id ignore

Do not compare router-id information for external paths during best path selection.

Syntax

bgp bestpath router-id ignore

To return to the default selection, use the no bgp bestpath router-id ignore command.

Defaults

Disabled

Command Modes

ROUTER BGP

Usage Information

Configuring this option will retain the current best-path. When sessions are subsequently reset, the oldest received path will be chosen as the best-path.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.3.1.0 Introduced

bgp client-to-client reflection

Enables you to enable route reflection between clients in a cluster.

Syntax

bgp client-to-client reflection

To disable client-to-client reflection, enter no bgp client-to-client reflection.

Defaults

Enabled when a route reflector is configured.

Command Modes

ROUTER BGP

Usage Information

Route reflection to clients is not necessary if all client routers are fully meshed.

Related Commands

bgp cluster-id Assign ID to a BGP cluster with two or more route reflectors.

neighbor route-reflector-client Configure a route reflector and clients.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

bgp cluster-id

Assign a cluster ID to a BGP cluster with more than one route reflector.

Syntax

bgp cluster-id {ip-address | number}

To delete a cluster ID, use the no bgp cluster-id {ip-address | number} command.

Parameters

ip-address Enter an IP address as the route reflector cluster ID.

number

Enter a route reflector cluster ID as a number from 1 to 4294967295.

Defaults

Not configured.

Command Modes

ROUTER BGP

Usage Information

When a BGP cluster contains only one route reflector, the cluster ID is the route reflector's router ID. For redundancy, a BGP cluster may contain two or more route reflectors and you assign a cluster ID with the bgp cluster-id command. Without a cluster ID, the route reflector cannot recognize route updates from the other route reflectors within the cluster.

The default format for displaying the cluster-id is dotted decimal, but if you enter the cluster-id as an integer, it will be displayed as an integer.

Related Commands	bgp client-to-client reflection Enable route reflection between route reflector and clients.
	neighbor route-reflector-client Configure a route reflector and clients.
	show ip bgp cluster-list View paths with a cluster ID.
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.8.1.0 Introduced support on S-Series
	Version 7.7.1.0 Introduced support on C-Series

bgp confederation identifier

Configure an identifier for a BGP confederation.

Syntax

bgp confederation identifier as-number

To delete a BGP confederation identifier, use the no bgp confederation identifier as-number command.

Parameters

as-number

Enter the AS number.

You must configure your system to accept 4-Byte formats before entering a 4-Byte AS Number. All the routers in the Confederation must be 4 or 2-Byte identified routers. You cannot mix them.

The autonomous systems configured in this command are visible to the EBGP neighbors. Each autonomous system is fully meshed and contains a few connections to other autonomous systems. The next hop, MED, and local preference information is preserved throughout the confederation.

FTOS accepts confederation EBGP peers without a LOCAL_PREF attribute. The software sends AS_CONFED_SET and accepts AS_CONFED_SET and AS_CONF_SEQ.

Related Commands

bgp four-octet-as-support Enable 4-Byte support for the BGP process.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

Added support for 4-Byte format

bgp confederation peers

Specify the Autonomous Systems (ASs) that belong to the BGP confederation.

Syntax

bgp confederation peers as-number [...as-number]

To return to the default, enter no bgp confederation peers.

Parameters	as-number	Enter the AS number. Range: 0-65535 (2-Byte) or 1-4294967295 (4-Byte) or 0.1-65535.65535 (Dotted format)
	...as-number	(OPTIONAL) Enter up to 16 confederation numbers. Range: 0-65535 (2-Byte) or 1-4294967295 (4-Byte) or 0.1-65535.65535 (Dotted format)
Defaults	Not configured.
Hand Modes	ROUTER BGP
Usage Information	All the routers in the Confederation must be 4 or 2 byte identified routers. You cannot mix them. The Autonomous Systems configured in this command are visible to the EBGP neighbors. Each Autonomous System is fully meshed and contains a few connections to other Autonomous Systems. After specifying autonomous systems numbers for the BGP confederation, recycle the peers to update their configuration.
Related Commands	bgp confederation identifier Configure a confederation ID.
	bgp four-octet-as-support Enable 4-byte support for the BGP process.
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.8.1.0 Introduced support on S-Series
	Version 7.7.1.0 Introduced support on C-Series Added support for 4-byte format

bgp dampening

Enable BGP route dampening and configure the dampening parameters.

Syntax

bgp dampening [half-life reuse suppress max-suppress-time] [route-map map-name]

To disable route dampening, use the no bgp dampening [half-life reuse suppress max-suppress-time] [route-map map-name] command.

Parameters

half-life	(OPTIONAL) Enter the number of minutes after which the Penalty is decreased. After the router assigns a Penalty of 1024 to a route, the Penalty is decreased by half after the half-life period expires.Range: 1 to 45.Default: 15 minutes
reuse	(OPTIONAL) Enter a number as the reuse value, which is compared to the flapping route's Penalty value. If the Penalty value is less than the reuse value, the flapping route is once again advertised (or no longer suppressed).Range: 1 to 20000.Default: 750
suppress	(OPTIONAL) Enter a number as the suppress value, which is compared to the flapping route's Penalty value. If the Penalty value is greater than the suppress value, the flapping route is no longer advertised (that is, it is suppressed).Range: 1 to 20000.Default: 2000
max-suppress-time	(OPTIONAL) Enter the maximum number of minutes a route can be suppressed. The default is four times the half-life value.Range: 1 to 255.Default: 60 minutes.
route-map map-name	(OPTIONAL) Enter the keyword route-map followed by the name of a configured route map.Only match commands in the configured route map are supported.

Defaults Disabled.

Command Modes ROUTER-BGP-ADDRESS FAMILY

Usage Information If you enter bgp dampening, the default values for half-life, reuse, suppress, and max-suppress-time are applied. The parameters are position-dependent, therefore, if you configure one parameter, you must configure the parameters in the order they appear in the CLI.

Related Commands show ip bgp dampened-paths View the BGP paths

Command History Version 8.3.5.0 Introduced on the S55. Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.0 Introduced support on C-Series

bgp default local-preference

Change the default local preference value for routes exchanged between internal BGP peers.

Syntax bgp default local-preference value

To return to the default value, enter no bgp default local-preference.

Parameters	value	Enter a number to assign to routes as the degree of preference for those routes. When routes are compared, the higher the degree of preference or local preference value, the more the route is preferred.Range: 0 to 4294967295Default: 100
Defaults	100
Command Modes	ROUTER BGP
Usage Information	The bgp default local-preference command setting is applied by all routers within the AS. To set the local preference for a specific route, use the set local-preference command in the ROUTE-MAP mode.
Related Commands	set local-preference Assign a local preference value for a specific route.
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.8.1.0 Introduced support on S-Series
	Version 7.7.1.0 Introduced on C-Series

bgp enforce-first-as

Disable (or enable) enforce-first-as check for updates received from EBGP peers.

Syntax

bgp enforce-first-as

To turn off the default, use the no bgp enforce-first-as command.

Defaults

Enabled

Command Modes

ROUTER BGP

Usage Information

This is enabled by default, that is for all updates received from EBGP peers, BGP ensures that the first AS of the first AS segment is always the AS of the peer. If not, the update is dropped and a counter is incremented. Use the show ip bgp neighbors command to view the “failed enforce-first-as check counter.

If enforce-first-as is disabled, it can be viewed via the show ip protocols command.

Related Commands

show ip bgp neighbors View the information exchanged by BGP neighbors

show ip protocols View Information on routing protocols.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support for C-Series

Version 7.4.1.0 Introduced

bgp fast-external-fallover

C E S	Enable the fast external fallover feature, which immediately resets the BGP session if a link to a directly connected external peer fails.
Syntax	bgp fast-external-fallover
	To disable fast external fallover, enter no bgp fast-external-fallover.
Defaults	Enabled.
Command Modes	ROUTER BGP
Usage Information	The bgp fast-external-fallover command appears in the show config command output.
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.8.1.0 Introduced support on S-Series
	Version 7.7.1.0 Introduced support for C-Series

bgp four-octet-as-support

C E S	Enable 4-byte support for the BGP process.
Syntax	bgp four-octel-as-support
	To disable fast external fallover, enter no bgp four-octet-as-support.
Defaults	Disabled (supports 2-Byte format)
Command Modes	ROUTER BGP
Usage Information	Routers supporting 4-Byte ASNs advertise that function in the OPEN message. The behavior of a 4-Byte router will be slightly different depending on whether it is speaking to a 2-Byte router or a 4-Byte router.When creating Confederations, all the routers in the Confederation must be 4 or 2 byte identified routers. You cannot mix them.Where the 2-Byte format is 1-65535, the 4-Byte format is 1-4294967295. Both formats are accepted, and the advertisements will reflect the entered format.For more information about using the 2 or 4-Byte format, refer to the FTOS Configuration Guide.
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.8.1.0 Introduced support on S-Series
	Version 7.7.1.0 Introduced commandIntroduced support on C-Series

bgp graceful-restart

Enable graceful restart on a BGP neighbor, a BGP node, or designate a local router to support graceful restart as a receiver only.

Syntax
bgp graceful-restart [restart-time seconds] [stale-path-time seconds] [role receiver-only]
To return to the default, enter the no bgp graceful-restart command.
Parameters

restart-time seconds	Enter the keyword restart-time followed by the maximum number of seconds needed to restart and bring-up all the peers.Range: 1 to 3600 secondsDefault: 120 seconds
stale-path-time seconds	Enter the keyword stale-path-time followed by the maximum number of seconds to wait before restarting a peer’s stale paths.Default: 360 seconds.
role receiver-only	Enter the keyword role receiver-only to designate the local router to support graceful restart as a receiver only.

Defaults

as above

Command Modes

ROUTER-BGP

Usage Information

This feature is advertised to BGP neighbors through a capability advertisement. In receiver only mode, BGP saves the advertised routes of peers that support this capability when they restart.

BGP graceful restart is active only when the neighbor becomes established. Otherwise it is disabled. Graceful-restart applies to all neighbors with established adjacency.

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

bgp log-neighbor-changes

Enable logging of BGP neighbor resets.

Syntax

bgp log-neighbor-changes

To disable logging, enter no bgp log-neighbor-changes.

Defaults

Enabled.

Command Modes

ROUTER BGP

Usage Information

Use the show logging command in the EXEC mode to view BGP neighbor resets.

The bgp log-neighbor-changes command appears in the show config command output.

Related Commands

show logging View logging settings and system messages logged to the system.

Command History	Version 7.8.1.0 Introduced support on S-Series
	Version 7.7.1.0 Introduced support on C-Series
bgp non-deterministic-med
C E S	Compare MEDs of paths from different Autonomous Systems.
Syntax	bgp non-deterministic-med
	To return to the default, enter no bgp non-deterministic-med.
Defaults	Disabled (that is, paths/routes for the same destination but from different ASs will not have their MEDs compared).
Command Modes	ROUTER BGP
Usage Information	In non-deterministic mode, paths are compared in the order in which they arrive. This method can lead to FTOS choosing different best paths from a set of paths, depending on the order in which they are received from the neighbors since MED may or may not get compared between adjacent paths. In deterministic mode (no bgp non-deterministic-med), FTOS compares MED between adjacent paths within an AS group since all paths in the AS group are from the same AS.When you change the path selection from deterministic to non-deterministic, the path selection for existing paths remains deterministic until you enter clear ip bgp command to clear existing paths.
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.8.1.0 Introduced support on S-Series
	Version 7.7.1.0 Introduced support on C-Series

bgp recursive-bgp-next-hop

Enable next-hop resolution through other routes learned by BGP.

Syntax

bgp recursive-bgp-next-hop

To disable next-hop resolution, use the no bgp recursive-bgp-next-hop command.

Defaults

Enabled

Command Modes

ROUTER BGP

Usage Information

This command is a knob to disable BGP next-hop resolution via BGP learned routes. During the next-hop resolution, only the first route that the next-hop resolves through is verified for the route's protocol source and is checked if the route is learned from BGP or not.

The clear ip bgp command is required for this command to take effect and to keep the BGP database consistent. Execute the clear ip bgp command right after executing this command.

Related Commands

clear ip bgp Description.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

Version 7.2.1.0 Introduced

bgp regex-eval-optz-disable

Disables the Regex Performance engine that optimizes complex regular expression with BGP.

Syntax

bgp regex-eval-optz-disable

To re-enable optimization engine, use the no bgp regex-eval-optz-disable command.

Defaults

Enabled by default

Command Modes

ROUTER BGP (conf-router_bgp)

Usage Information

BGP uses regular expressions (regex) to filter route information. In particular, the use of regular expressions to filter routes based on AS-PATHs and communities is quite common. In a large scale configuration, filtering millions of routes based on regular expressions can be quite CPU intensive, as a regular expression evaluation involves generation and evaluation of complex finite state machines.

BGP policies, containing regular expressions to match as-path and communities, tend to use a lot of CPU processing time, which in turn affects the BGP routing convergence. Additionally, the show bgp commands, which are filtered through regular expressions, use up CPU cycles particularly with large databases. The Regex Engine Performance Enhancement feature optimizes the CPU usage by caching and reusing regular expression evaluation results. This caching and reuse may be at the expense of RP1 processor memory.

Related Commands

show ip protocols View information on all routing protocols enabled and active on the E-Series.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

Version 7.6.1.0 Introduced

Example

Figure 8-2. Command Example: no bgp regex-eval-optz-disable

FTOS (conf-router_bgp) # no bgp regex-eval-optz-disable
FTOS (conf-router_bgp) # do show ip protocols
Routing Protocol is "ospf 22222"
    Router ID is 2.2.2.2
    Area    Routing for Networks
    51    10.10.10.0/00

Routing Protocol is "bgp 1"
Cluster Id is set to 10.10.10.0
Router Id is set to 10.10.10.0
Fast-external-fallover enabled
Regular expression evaluation optimization enabled
Capable of ROUTE_REFRESH
For Address Family IPv4 Unicast
    BGP table version is 0, main routing table version 0
    Distance: external 20 internal 200 local 200

FTOS (conf-router_bgp) # 

bgp router-id

Assign a user-given ID to a BGP router.

Syntax

bgp router-id ip-address

To delete a user-assigned IP address, enter no bgp router-id.

Parameters

ip-address Enter an IP address in dotted decimal format to reset only that BGP neighbor.

Defaults

The router ID is the highest IP address of the Loopback interface or, if no Loopback interfaces are configured, the highest IP address of a physical interface on the router.

Command Modes

ROUTER BGP

Usage Information

Peering sessions are reset when you change the router ID of a BGP router.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

bgp soft-reconfig-backup

Use this command only when route-refresh is not negotiated to avoid the peer from resending messages.

Syntax bgp soft-reconfig-backup

To return to the default setting, use the no bgp soft-reconfig-backup command.

Defaults

Off

Command Modes

ROUTER BGP

Usage Information

When soft-reconfiguration is enabled for a neighbor and the clear ip bgp soft in is executed, the update database stored in the router is replayed and updates are reevaluated. With this command, the replay and update process is triggered only if route-refresh request is not negotiated with the peer. If the request is indeed negotiated (upon execution of clear ip bgp soft in), then BGP sends a route-refresh request to the neighbor and receives all of the peer's updates.

Note: This command is supported in BGP Router Configuration mode for IPv4 Unicast address only.

Related Commands

clear ip bgp soft in Activate inbound policies without resetting the BGP TCP session.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

Version 7.2.1.0 Introduced

capture bgp-pdu neighbor

Enable capture of an IPv4 BGP neighbor packet.

Syntax

capture bgp-pdu neighbor ipv4-address direction {both | rx | tx}

To disable capture of the IPv4 BGP neighbor packet, use the no capture bgp-pdu neighbor ipv4-address command.

Parameters

ipv4-address Enter the IPv4 address of the target BGP neighbor.

direction {both | rx | tx}

Enter the keyword direction and a direction—either rx for inbound, tx for outbound, or both.

Defaults

Not configured.

Command Modes

EXEC Privilege

Related Commands

capture bgp-pdu max-buffer-size Specify a size for the capture buffer.

show capture bgp-pdu neighbor Display BGP packet capture information

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

Version 7.5.1.0 Introduced

capture bgp-pdu max-buffer-size

Set the size of the BGP packet capture buffer. This buffer size pertains to both IPv4 and IPv6 addresses.

Syntax
capture bgp-pdu max-buffer-size 100-102400000

Parameters	100-102400000	Enter a size for the capture buffer.
Defaults	40960000 bytes.
Command Modes	EXEC Privilege
Related Commands	capture bgp-pdu neighbor Enable capture of an IPv4 BGP neighbor packet.
	show capture bgp-pdu neighbor	Display BGP packet capture information for an IPv6 address on the E-Series.
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.8.1.0 Introduced support on S-Series
	Version 7.7.1.0 Introduced support on C-Series
	Version 7.5.1.0 Introduced

clear ip bgp

Reset BGP sessions on the E-Series. The soft parameter (BGP Soft Reconfiguration) clears the policies without resetting the TCP connection.

Syntax
clear ip bgp * | as-number | ip-address [flap-statistics | soft [in | out]]

Parameters	* Enter an asterisk (*) to reset all BGP sessions.
	as-number Enter the AS number to reset all neighbors belonging to that AS. Range: 0-65535 (2-Byte) or 1-4294967295 (4-Byte) or 0.1-65535.65535 (Dotted format)
	ip-address Enter an IP address in dotted decimal format to reset all prefixes from that neighbor.
	flap-statistics (OPTIONAL) Enter the keyword flap-statistics to reset the flap statistics on all prefixes from that neighbor.
	soft (OPTIONAL) Enter the keyword soft to configure and activate policies without resetting the BGP TCP session, that is, BGP Soft Reconfiguration. Note: If you enter clear ip bgp ip-address soft, both inbound and outbound policies are reset.
	in (OPTIONAL) Enter the keyword in to activate only inbound policies.
	out (OPTIONAL) Enter the keyword out to activate only outbound policies.

Command Modes

EXEC Privilege

Related Commands	bgp recursive-bgp-next-hop Disable next-hop resolution through other routes learned by BGP
	bgp soft-reconfig-backup Turn on BGP Soft Reconfiguration
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.8.1.0 Introduced support on S-Series
	Version 7.7.1.0 Introduced support on C-Series
	Version 6.5.1.0 Expanded to include the as-number option

clear ip bgp peer-group

Reset a peer-group's BGP sessions.

Syntax

clear ip bgp peer-group peer-group-name

Parameters

peer-group-name

Enter the peer group name to reset the BGP sessions within that peer group.

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

clear ip bgp dampening

Clear information on route dampening and return suppressed route to active state.

Syntax

clear ip bgp dampening [ip-address mask]

Parameters

ip-address mask

(OPTIONAL) Enter an IP address in dotted decimal format and the prefix mask in slash format (/x) to clear dampening information only that BGP neighbor.

Command Modes

EXEC Privilege

Usage Information

After you enter this command, the software deletes history routes and returns suppressed routes to active state.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

clear ip bgp flap-statistics

Clear BGP flap statistics, which includes number of flaps and the time of the last flap.

Syntax
clear ip bgp flap-statistics [ip-address mask | filter-list as-path-name | regexp regular-expression]

Parameters	ip-address mask	(OPTIONAL) Enter an IP address in dotted decimal format and the prefix mask in slash format (/x) to reset only that prefix.
	filter-listas-path-name	(OPTIONAL) Enter the keywordfilter-listfollowed by the name of a configured AS-PATH list.
	regexpregular-expression	(OPTIONAL) Enter the keywordregexpfollowed by regular expressions. Use one or a combination of the following:. = (period) any single character (including a white space)* = (asterisk) the sequences in a pattern (0 or more sequences)+ = (plus) the sequences in a pattern (1 or more sequences)? = (question mark) sequences in a pattern (either 0 or 1 sequences). You must enter an escape sequence (CTRL+v) prior to entering the ? regular expression.[ ] = (brackets) a range of single-character patterns.( ) = (parenthesis) groups a series of pattern elements to a single element{{ } = (braccs) minimum and the maximum match count^ = (caret) the beginning of the input string. If the caret is used at the beginning of a sequence or range, it matches on everything BUT the characters specified.$ = (dollar sign) the end of the output string.

Command Modes
EXEC Privilege
Usage Information
If you enter clear ip bgp flap-statistics without any parameters, all statistics are cleared.
Related Commands
show debugging View enabled debugging operations.
show ip bgp flap-statistics View BGP flap statistics.
undebug all Disable all debugging operations.
Command History
Version 8.3.5.0 Introduced on the S55.
Version 7.8.1.0 Introduced support on S-Series
Version 7.7.1.0 Introduced support on C-Series

debug ip bgp

Display all information on BGP, including BGP events, keepalives, notifications, and updates.

Syntax

debug ip bgp [ip-address | peer-group peer-group-name] [in | out]

To disable all BGP debugging, enter no debug ip bgp.

Parameters

ip-address	Enter the IP address of the neighbor in dotted decimal format.
peer-group peer-group-name	Enter the keyword peer-group followed by the name of the peer group.
in	(OPTIONAL) Enter the keyword in to view only information on inbound BGP routes.
out	(OPTIONAL) Enter the keyword out to view only information on outbound BGP routes.

Command Modes

EXEC Privilege

Usage Information

To view information on both incoming and outgoing routes, do not include the in and out parameters in the debugging command. The in and out parameters cancel each other; for example, if you enter debug ip bgp in and then enter debug ip bgp out, you will not see information on the incoming routes.

Entering a no debug ip bgp command removes all configured debug commands for BGP.

Related Commands

debug ip bgp events View information about BGP events.

debug ip bgp keepalives View information about BGP keepalives.

debug ip bgp notifications View information about BGP notifications.

debug ip bgp updates View information about BGP updates.

show debugging View enabled debugging operations.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

debug ip bgp dampening

Display information on routes being dampened.

Syntax

debug ip bgp dampening [in | out]

To disable debugging, enter no debug ip bgp dampening.

Parameters

in	(OPTIONAL) Enter the keyword in to view only inbound dampened routes.
out	(OPTIONAL) Enter the keyword out to view only outbound dampened routes.

Command Modes

EXEC Privilege

Usage Information

Enter no debug ip bgp command to remove all configured debug commands for BGP.

Related Commands

show debugging View enabled debugging operations.

show ip bgp dampened-paths View BGP dampened routes.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

debug ip bgp events

Display information on local BGP state changes and other BGP events.

Syntax

debug ip bgp [ip-address | peer-group peer-group-name] events [in | out]

To disable debugging, use the no debug ip bgp [ip-address | peer-group peer-group-name] events command.

Parameters

ip-address	(OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.
peer-group peer-group-name	(OPTIONAL) Enter the keyword peer-group followed by the name of the peer group.
in	(OPTIONAL) Enter the keyword in to view only events on inbound BGP messages.
out	(OPTIONAL) Enter the keyword out to view only events on outbound BGP messages.

Command Modes

EXEC Privilege

Usage Information

Enter no debug ip bgp command to remove all configured debug commands for BGP.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

debug ip bgp keepalives

Display information about BGP keepalive messages.

Syntax

debug ip bgp [ip-address | peer-group peer-group-name] keepalives [in | out]

To disable debugging, use the no debug ip bgp [ip-address | peer-group peer-group-name] keepalives [in | out] command.

Parameters

ip-address	(OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.
peer-group peer-group-name	(OPTIONAL) Enter the keyword peer-group followed by the name of the peer group.
in	(OPTIONAL) Enter the keyword in to view only inbound keepalive messages.
out	(OPTIONAL) Enter the keyword out to view only outbound keepalive messages.

Command Modes

EXEC Privilege

Usage Information

Enter no debug ip bgp command to remove all configured debug commands for BGP.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

debug ip bgp notifications

Enables you to view information about BGP notifications received from neighbors.

Syntax

debug ip bgp [ip-address | peer-group peer-group-name] notifications [in | out]

To disable debugging, use the no debug ip bgp [ip-address | peer-group peer-group-name] notifications [in | out] command.

Parameters

ip-address	(OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.
peer-group peer-group-name	(OPTIONAL) Enter the keyword peer-group followed by the name of the peer group.
in	(OPTIONAL) Enter the keyword in to view BGP notifications received from neighbors.
out	(OPTIONAL) Enter the keyword out to view BGP notifications sent to neighbors.

Command Modes

EXEC Privilege

Usage Information

Enter no debug ip bgp command to remove all configured debug commands for BGP.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

debug ip bgp soft-reconfiguration

Enable soft-reconfiguration debug.

Syntax

debug ip bgp {ip-address | peer-group-name} soft-reconfiguration

To disable, use the no debug ip bgp {ip-address | peer-group-name} soft-reconfiguration command.

Parameters

ip-address	(OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.
peer-group-name	(OPTIONAL) Enter the name of the peer group to disable or enable all routers within the peer group.

Defaults

Disabled

Command Modes	EXEC Privilege
Usage Information	This command turns on BGP soft-reconfiguration inbound debugging. If no neighbor is specified, debug is turned on for all neighbors.
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.8.1.0 Introduced support on S-Series
	Version 7.7.1.0 Introduced support on C-Series
	Version 7.2.1.0 Introduced

debug ip bgp updates

Enables you to view information about BGP updates.

Syntax debug ip bgp updates [in | out | prefix-list prefix-list-name]

To disable debugging, use the no debug ip bgp [ip-address | peer-group peer-group-name] updates [in | out] command.

Parameters	in	(OPTIONAL) Enter the keyword in to view only BGP updates received from neighbors.
	out	(OPTIONAL) Enter the keyword out to view only BGP updates sent to neighbors.
	prefix-list prefix-list-name	(OPTIONAL) Enter the keyword prefix-list followed by the name of an established prefix list. If the prefix list is not configured, the default is permit (to allow all routes).
	ip-address	(OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.
	peer-group-name	(OPTIONAL) Enter the name of the peer group to disable or enable all routers within the peer group.

Command Modes EXEC Privilege

Usage Information Enter no debug ip bgp command to remove all configured debug commands for BGP.

Command History Version 8.3.5.0 Introduced on the S55. Version 7.7.1 Introduced support on C-Series

default-metric

Enables you to change the metrics of redistributed routes to locally originated routes. Use this command with the redistribute command.

Syntax default-metric number

To return to the default setting, enter no default-metric.

Parameters	number	Enter a number as the metric to be assigned to routes from other protocols. Range: 1 to 4294967295.
Defaults	0
Command Modes	ROUTER BGP
Usage Information	The default-metric command in BGP sets the value of the BGP MULTI_EXIT_DISC (MED) attribute for redistributed routes only.
Related Commands	bgp always-compare-med Enable comparison of all BGP MED attributes.
	redistribute Redistribute routes from other routing protocols into BGP.
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.8.1.0 Introduced support on S-Series
	Version 7.7.1.0 Introduced support on C-Series

description

C E S	Enter a description of the BGP routing protocol
Syntax	description {description}
	To remove the description, use the no description {description} command.
Parameters	description Enter a description to identify the BGP protocol (80 characters maximum).
Defaults	No default behavior or values
Command Modes	ROUTER BGP
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.8.1.0 Introduced support on S-Series
	Version 7.7.1.0 Introduced support on C-Series
	pre-7.7.1.0 Introduced
Related Commands	router bgp Enter ROUTER mode on the switch.

distance bgp

Configure three administrative distances for routes.

Syntax

distance bgp external-distance internal-distance local-distance

To return to default values, enter no distance bgp.

Parameters

external-distance	Enter a number to assign to routes learned from a neighbor external to the AS. Range: 1 to 255. Default: 20
internal-distance	Enter a number to assign to routes learned from a router within the AS. Range: 1 to 255. Default: 200
local-distance	Enter a number to assign to routes learned from networks listed in the network command. Range: 1 to 255. Default: 200

Defaults

external-distance = 20; internal-distance = 200; local-distance = 200.

Command Modes

ROUTER BGP

Caution: Force10 Networks recommends that you do not change the administrative distance of internal routes. Changing the administrative distances may cause routing table inconsistencies.

Usage Information

The higher the administrative distance assigned to a route means that your confidence in that route is low. Routes assigned an administrative distance of 255 are not installed in the routing table. Routes from confederations are treated as internal BGP routes.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

maximum-paths

Configure the maximum number of parallel routes (multipath support) BGP supports.

Syntax

maximum-paths {ebgp | ibgp} number

To return to the default values, enter no maximum-paths.

Parameters

ebgp	Enter the keywordebgpto enable multipath support for External BGP routes.
ibgp	Enter the keywordibgpto enable multipath support for Internal BGP routes.
number	Enter a number as the maximum number of parallel paths.Range: 1 to 16Default: 1

Defaults 1

Command Modes

ROUTER BGP

Usage Information

If you enable this command, use the clear ip bgp * command to recompute the best path.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

neighbor activate

This command allows the specified neighbor/peer group to be enabled for the current AFI/SAFI (Address Family Identifier/Subsequent Address Family Identifier).

Syntax

neighbor [ip-address | peer-group-name] activate

To disable, use the no neighbor [ip-address | peer-group-name] activate command.

Parameters

ip-address	(OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.
peer-group-name	(OPTIONAL) Enter the name of the peer group
activate	Enter the keyword activate to enable the neighbor/peer group in the new AFI/SAFI.

Defaults

Disabled

Command Modes

CONFIGURATION-ROUTER-BGP-ADDRESS FAMILY

Usage Information

By default, when a neighbor/peer group configuration is created in the Router BGP context, it is enabled for the IPv4/Unicast AFI/SAFI. By using activate in the new context, the neighbor/peer group is enabled for AFI/SAFI.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

neighbor advertisement-interval

Set the advertisement interval between BGP neighbors or within a BGP peer group.

Syntax

neighbor {ip-address | peer-group-name} advertisement-interval seconds

To return to the default value, use the no neighbor {ip-address | peer-group-name} advertisement-interval command.

Parameters

ip-address	Enter the IP address of the neighbor in dotted decimal format.
peer-group-name	Enter the name of the peer group to set the advertisement interval for all routers in the peer group.
seconds	Enter a number as the time interval, in seconds, between BGP advertisements.Range: 0 to 600 seconds.Default: 5 seconds for internal BGP peers; 30 seconds for external BGP peers.

Defaults

seconds = 5 seconds (internal peers); seconds = 30 seconds (external peers)

Command Modes ROUTER BGP

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

neighbor advertisement-start

Set the minimum interval before starting to send BGP routing updates.

Syntax

neighbor {ip-address} advertisement-start seconds

To return to the default value, use the no neighbor {ip-address} advertisement-start command.

Parameters

ip-address	Enter the IP address of the neighbor in dotted decimal format.
seconds	Enter a number as the time interval, in seconds, before BGP route updates are sent.Range: 0 to 3600 seconds.

Defaults

none

Command Modes

ROUTER BGP

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

neighbor allowas-in

Set the number of times an AS number can occur in the AS path

Syntax

neighbor {ip-address | peer-group-name} allowas-in number

To return to the default value, use the no neighbor {ip-address | peer-group-name} allowas-in command.

Parameters

ip-address	Enter the IP address of the neighbor in dotted decimal format.
peer-group-name	Enter the name of the peer group to set the advertisement interval for all routers in the peer group.
number	Enter a number of times to allow this neighbor ID to use the AS path. Range: 1 to 10.

Defaults

Not configured.

Command Modes

ROUTER BGP

Related Commands

bgp four-octet-as-support Enable 4-Byte support for the BGP process.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced on C-Series and E-Series

neighbor default-originate

Inject the default route to a BGP peer or neighbor.

Syntax

neighbor {ip-address | peer-group-name} default-originate [route-map map-name]

To remove a default route, use the no neighbor {ip-address | peer-group-name} default-originate command.

Parameters

ip-address	Enter the IP address of the neighbor in dotted decimal format.
peer-group-name	Enter the name of the peer group to set the default route of all routers in that peer group.
route-map map-name	(OPTIONAL) Enter the keyword route-map followed by the name of a configured route map.

Defaults

Not configured.

Command Modes

ROUTER BGP

Usage Information

If you apply a route map to a BGP peer or neighbor with the neighbor default-originate command configured, the software does not apply the set filters in the route map to that BGP peer or neighbor.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

neighbor description

Assign a character string describing the neighbor or group of neighbors (peer group).

Syntax

neighbor {ip-address | peer-group-name} description text

To delete a description, use the no neighbor {ip-address | peer-group-name} description command.

Parameters

ip-address Enter the IP address of the neighbor in dotted decimal format.

peer-group-name Enter the name of the peer group.

text Enter a continuous text string up to 80 characters.

Defaults

Not configured.

Command Modes

ROUTER BGP

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

neighbor distribute-list

Distribute BGP information via an established prefix list.

Syntax

neighbor {ip-address | peer-group-name} distribute-list prefix-list-name {in | out}

To delete a neighbor distribution list, use the no neighbor {ip-address | peer-group-name} distribute-list prefix-list-name {in | out} command.

Parameters

ip-address	Enter the IP address of the neighbor in dotted decimal format.
peer-group-name	Enter the name of the peer group to apply the distribute list filter to all routers in the peer group.
prefix-list-name	Enter the name of an established prefix list.If the prefix list is not configured, the default is permit (to allow all routes).
in Enter the keyword in to distribute only inbound traffic.
out Enter the keyword out to distribute only outbound traffic.

Defaults

Not configured.

Command Modes

ROUTER BGP

Usage Information

Other BGP filtering commands include: neighbor filter-list, ip as-path access-list, and neighbor route-map.

Related Commands

ip as-path access-list Configure IP AS-Path ACL.

neighbor filter-list Assign a AS-PATH list to a neighbor or peer group.

neighbor route-map Assign a route map to a neighbor or peer group.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

neighbor ebgp-multihop

Attempt and accept BGP connections to external peers on networks that are not directly connected.

Syntax

neighbor {ip-address | peer-group-name} ebgp-multihop [ttl]

To disallow and disconnect connections, use the no neighbor {ip-address | peer-group-name} ebgp-multihop command.

Parameters	ip-address	Enter the IP address of the neighbor in dotted decimal format.
	peer-group-name	Enter the name of the peer group.
	ttl (OPTIONAL) Enter the number of hops as the Time to Live (ttl) value.
		Range: 1 to 255.
		Default: 255

Defaults Disabled.

Command Modes ROUTER BGP

Usage To prevent loops, the neighbor ebgp-multihop command will not install default routes of the multihop Information peer. Networks not directly connected are not considered valid for best path selection.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

neighbor fall-over

Enable or disable fast fall-over for BGP neighbors.

Syntax neighbor {ipv4-address | peer-group-name} fall-over

To disable, use the no neighbor {ipv4-address | peer-group-name} fall-over command.

Parameters	ipv4-address	Enter the IP address of the neighbor in dotted decimal format.
	peer-group-name	Enter the name of the peer group.

Defaults Disabled

Command Modes ROUTER BGP

Usage Information When fall-over is enabled, BGP keeps track of IP or IPv6 reachability to the peer remote address and the peer local address. Whenever either address becomes unreachable (i.e., no active route exists in the routing table for peer IP or IPv6 destination/local address), BGP brings down the session with the peer.

Related Commands

show ip bgp neighbors Display information on the BGP neighbors

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

Version 7.4.1.0 Introduced

neighbor filter-list

Configure a BGP filter based on the AS-PATH attribute.

Syntax

neighbor {ip-address | peer-group-name} filter-list as-path-name {in | out}

To delete a BGP filter, use the no neighbor {ip-address | peer-group-name} filter-list as-path-name {in | out} command.

Parameters

ip-address	Enter the IP address of the neighbor in dotted decimal format.
peer-group-name	Enter the name of the peer group to apply the filter to all routers in the peer group.
as-path-name	Enter the name of an established AS-PATH access list (up to 140 characters).If the AS-PATH access list is not configured, the default is permit (allow routes).
in Enter the keyword in to filter inbound BGP routes.
out Enter the keyword out to filter outbound BGP routes.

Defaults

Not configured.

Command Modes

ROUTER BGP

Usage Information

Use the ip as-path access-list command syntax in the CONFIGURATION mode to enter the AS-PATH ACL mode and configure AS-PATH filters to deny or permit BGP routes based on information in their AS-PATH attribute.

Related Commands

ip as-path access-list Enter AS-PATH ACL mode and configure AS-PATH filters.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series Increased name string to accept up to 140 characters. Prior to 7.8.1.0, ACL names are up to 16 characters long.

Version 7.7.1.0 Introduced support on C-Series

neighbor graceful-restart

Enable graceful restart on a BGP neighbor.

Syntax

neighbor {ip-address | peer-group-name} graceful-restart [restart-time seconds] [stale-path-time seconds] [role receiver-only]

To return to the default, enter the no bgp graceful-restart command.

Parameters

ip-address	Enter the IP address of the neighbor in dotted decimal format.
peer-group-name	Enter the name of the peer group to apply the filter to all routers in the peer group.

	restart-time seconds	Enter the keyword restart-time followed by the maximum number of seconds needed to restart and bring-up all the peers. Range: 1 to 3600 seconds Default: 120 seconds
	stale-path-time seconds	Enter the keyword stale-path-time followed by the maximum number of seconds to wait before restarting a peer's stale paths. Default: 360 seconds.
	role receiver-only	Enter the keyword role receiver-only to designate the local router to support graceful restart as a receiver only.
Defaults	as above
Command Modes	ROUTER BGP
Usage Information	This feature is advertised to BGP neighbors through a capability advertisement. In receiver only mode, BGP saves the advertised routes of peers that support this capability when they restart.
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.8.1.0 Introduced support on S-Series
	Version 7.7.1.0 Introduced support on C-Series

neighbor local-as

Configure Internal BGP (IBGP) routers to accept external routes from neighbors with a local AS number in the AS number path

Syntax

neighbor {ip-address | peer-group-name} local-as as-number [no-prepend]

To return to the default value, use the no neighbor {ip-address | peer-group-name} local-as command.

Parameters

ip-address	Enter the IP address of the neighbor in dotted decimal format.
peer-group-name	Enter the name of the peer group to set the advertisement interval for all routers in the peer group.
as-number	Enter the AS number to reset all neighbors belonging to that AS.Range: 0-65535 (2-Byte) or1-4294967295 (4-Byte) or0.1-65535.65535 (Dotted format)
no prepend Specifies that local AS values are not prepended to announcements from the neighbor.

Defaults

Not configured.

Command Modes

ROUTER BGP

Related Commands

bgp four-octet-as-support Enable 4-Byte support for the BGP process.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced command

Introduced support on C-Series

neighbor maximum-prefix

Control the number of network prefixes received.

Syntax

neighbor {ip-address | peer-group-name} maximum-prefix maximum [threshold] [warning-only]

To return to the default values, use the no neighbor {ip-address | peer-group-name} maximum-prefix maximum command.

Parameters

ip-address	Enter the IP address of the neighbor in dotted decimal format.
peer-group-name	Enter the name of the peer group.
maximum	Enter a number as the maximum number of prefixes allowed for this BGP router.Range: 1 to 4294967295.
threshold	(OPTIONAL) Enter a number to be used as a percentage of themaximumvalue.When the number of prefixes reaches this percentage of themaximumvalue, the E-Series software sends a message.Range: 1 to 100 percent.Default: 75
warning-only	(OPTIONAL) Enter the keyword warning-onlyto set the router to send a log message when the maximum value is reached. If this parameter is not set, the router stops peering when the maximum number of prefixes is reached.

Defaults

threshold = 75

Command Modes

ROUTER BGP

Usage Information

If the neighbor maximum-prefix is configured and the neighbor receives more prefixes than allowed by the neighbor maximum-prefix command configuration, the neighbor goes down and the show ip bgp summary command displays (prfxd) in the State/PfxRcd column for that neighbor. The neighbor remains down until you enter the clear ip bgp command for the neighbor or the peer group to which the neighbor belongs or you enter neighbor shutdown and neighbor no shutdown commands.

Related Commands

show ip bgp summary Displays the current BGP configuration.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

neighbor next-hop-self

Enables you to configure the router as the next hop for a BGP neighbor. (This command is used for IBGP).

Syntax

neighbor {ip-address | peer-group-name} next-hop-self

To return to the default setting, use the no neighbor {ip-address | peer-group-name} next-hop-self command.

Parameters

ip-address	Enter the IP address of the neighbor in dotted decimal format.
peer-group-name	Enter the name of the peer group.

Defaults

Disabled.

Command Modes

ROUTER BGP

Usage Information

If the set next-hop command in the ROUTE-MAP mode is configured, its configuration takes precedence over the neighbor next-hop-self command.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

neighbor password

Enable Message Digest 5 (MD5) authentication on the TCP connection between two neighbors.

Syntax

neighbor {ip-address | peer-group-name} password [encryption-type] password

To delete a password, use the no neighbor {ip-address | peer-group-name} password command.

Parameters

ip-address Enter the IP address of the router to be included in the peer group.
peer-group-name	Enter the name of a configured peer group.
encryption-type	(OPTIONAL) Enter 7 as the encryption type for thepasswordentered. 7 means that the password is encrypted and hidden.
password	Enter a text string up to 80 characters long. The first character of thepasswordmust be a letter.You cannot use spaces in the password.

Defaults

Not configured.

Command Modes

ROUTER BGP

Usage Information

Configure the same password on both BGP peers or a connection does not occur. When you configure MD5 authentication between two BGP peers, each segment of the TCP connection between them is verified and the MD5 digest is checked on every segment sent on the TCP connection.

Configuring a password for a neighbor will cause an existing session to be torn down and a new one established.

If you specify a BGP peer group by using the peer-group-name parameter, all the members of the peer group will inherit the characteristic configured with this command.

If you configure a password on one neighbor, but you have not configured a password for the neighboring router, the following message appears on the console while the routers attempt to establish a BGP session between them:

%RPM0-P:RP1 %KERN-6-INT: No BGP MD5 from [peer's IP address]:179 to [local router's IP address]:65524

Also, if you configure different passwords on the two routers, the following message appears on the console:

%RPM0-P:RP1 %KERN-6-INT: BGP MD5 password mismatch from [peer's IP address] : 11502 to [local router's IP address] :179

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

neighbor peer-group (assigning peers)

Enables you to assign one peer to a existing peer group.

Syntax

neighbor ip-address peer-group peer-group-name

To delete a peer from a peer group, use the no neighbor ip-address peer-group peer-group-name command.

Parameters

ip-address Enter the IP address of the router to be included in the peer group.

peer-group-name Enter the name of a configured peer group.

Defaults

Not configured.

Command Modes

ROUTER BGP

Usage Information

You can assign up to 256 peers to one peer group.

When you add a peer to a peer group, it inherits all the peer group's configured parameters. A peer cannot become part of a peer group if any of the following commands are configured on the peer:

• neighbor advertisement-interval
- neighbor distribute-list out
- neighbor filter-list out
- neighbor next-hop-self
- neighbor route-map out
- neighbor route-reflector-client
- neighbor send-community

A neighbor may keep its configuration after it was added to a peer group if the neighbor's configuration is more specific than the peer group's, and the neighbor's configuration does not affect outgoing updates.

A peer group must exist before you add a peer to it. If the peer group is disabled (shutdown) the peers within the group are also disabled (shutdown).

Related Commands	clear ip bgp Resets BGP sessions.
	neighbor peer-group (creating group) Create a peer group.
	show ip bgp peer-group View BGP peers.
	show ip bgp neighbors View BGP neighbors configurations.
Command History
	Version 8.3.5.0 Introduced on the S55.
	Version 7.8.1.0 Introduced support on S-Series
	Version 7.7.1.0 Introduced support on C-Series

neighbor peer-group (creating group)

Enables you to create a peer group and assign it a name.

Syntax

neighbor peer-group-name peer-group

To delete a peer group, use the no neighbor peer-group-name peer-group command.

Parameters	peer-group-name	Enter a text string up to 16 characters long as the name of the peer group.
Defaults	Not configured.
Hand Modes	ROUTER BGP
Usage Information	When a peer group is created, it is disabled (shut mode).
Related Commands	neighbor peer-group (assigning peers) Assign routers to a peer group.
	neighbor remote-as Assign a indirectly connected AS to a neighbor or peer group.
	neighbor shutdown Disable a peer or peer group.
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.8.1.0 Introduced support on S-Series
	Version 7.7.1.0 Introduced support on C-Series

neighbor peer-group passive

Enable passive peering on a BGP peer group, that is, the peer group does not send an OPEN message, but will respond to one.

Syntax

neighbor peer-group-name peer-group passive

	To delete a passive peer-group, use the no neighbor peer-group-name peer-group passive command.
Parameters	peer-group-name	Enter a text string up to 16 characters long as the name of the peer group.
Defaults	Not configured.
Command Modes	ROUTER BGP
Usage Information	After you configure a peer group as passive, you must assign it a subnet using the neighbor soft-reconfiguration inbound command.
Related Commands	neighbor soft-reconfiguration inbound Assign a subnet to a dynamically-configured BGP neighbor.
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.8.1.0 Introduced support on S-Series
	Version 7.7.1.0 Introduced support on C-Series

neighbor remote-as

Create and specify the remote peer to the BGP neighbor.

Syntax

neighbor {ip-address | peer-group-name} remote-as number

To delete a remote AS entry, use the no neighbor {ip-address | peer-group-name} remote-as number command.

Parameters

ip-address Enter the IP address of the neighbor to enter the remote AS in its routing table.

peer-group-name	Enter the name of the peer group to enter the remote AS into routing tables of all routers within the peer group.
number	Enter a number of the AS.Range: 0-65535 (2-Byte) or 1-4294967295 (4-Byte)

Defaults

Not configured.

Command Modes

ROUTER BGP

Usage Information

You must configure your system to accept 4-Byte formats before entering a 4-Byte AS Number. If the number parameter is the same as the AS number used in the router bgp command, the remote AS entry in the neighbor is considered an internal BGP peer entry.

This command creates a peer and the newly created peer is disabled (shutdown).

Related Commands

router bgp Enter the ROUTER BGP mode and configure routes in an AS.

bgp four-octet-as-support Enable 4-Byte support for the BGP process.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

Added 4-Byte support.

neighbor remove-private-as

Remove private AS numbers from the AS-PATH of outgoing updates.

Syntax

neighbor {ip-address | peer-group-name} remove-private-as

To return to the default, use the no neighbor {ip-address | peer-group-name} remove-private-as command.

Parameters

ip-address Enter the IP address of the neighbor to remove the private AS numbers.

peer-group-name Enter the name of the peer group to remove the private AS numbers

Defaults

Disabled (that is, private AS number are not removed).

Command Modes

ROUTER BGP

Usage Information

Applies to EBGP neighbors only.

You must configure your system to accept 4-Byte formats before entering a 4-Byte AS Number.

If the AS-PATH contains both public and private AS number or contains AS numbers of an EBGP neighbor, the private AS numbers are not removed.

If a confederation contains private AS numbers in its AS-PATH, the software removes the private AS numbers only if they follow the confederation numbers in the AS path.

Private AS numbers are 64512 to 65535 (2-Byte).

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series Added 4-Byte support.

neighbor route-map

Apply an established route map to either incoming or outbound routes of a BGP neighbor or peer group.

Syntax

neighbor {ip-address | peer-group-name} route-map map-name {in | out}

To remove the route map, use the no neighbor {ip-address | peer-group-name} route-map map-name {in | out} command.

Parameters	ip-address	Enter the IP address of the neighbor in dotted decimal format.
	peer-group-name	Enter the name of the peer group.
	map-name	Enter the name of an established route map.If the Route map is not configured, the default is deny (to drop all routes).
	in Enter the keyword in to filter inbound routes.
	out Enter the keyword out to filter outbound routes.
Defaults	Not configured.
Command Modes	ROUTER BGP
Usage Information	When you apply a route map to outbound routes, only routes that match at least one section of the route map are permitted.
	If you identify a peer group by name, the peers in that peer group inherit the characteristics in the Route map used in this command. If you identify a peer by IP address, the Route map overwrites either the inbound or outbound policies on that peer.
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.8.1.0 Introduced support on S-Series
	Version 7.7.1.0 Introduced support on C-Series

neighbor route-reflector-client

Configure a neighbor as a member of a route reflector cluster.

Syntax

neighbor {ip-address | peer-group-name} route-reflector-client

To indicate that the neighbor is not a route reflector client or to delete a route reflector configuration, use the no neighbor {ip-address | peer-group-name} route-reflector-client command.

Parameters

ip-address

Enter the IP address of the neighbor in dotted decimal format.

peer-group-name Enter the name of the peer group.

All routers in the peer group receive routes from a route reflector.

Defaults

Not configured.

Command Modes

ROUTER BGP

Usage Information

The first time you enter this command it configures the neighbor as a route reflector and members of the route-reflector cluster. Internal BGP (IBGP) speakers do not need to be fully meshed if you configure a route reflector.

When all clients of a route reflector are disabled, the neighbor is no longer a route reflector.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

neighbor send-community

Send a COMMUNITY attribute to a BGP neighbor or peer group. A COMMUNITY attribute indicates that all routes with that attribute belong to the same community grouping.

Syntax

neighbor {ip-address | peer-group-name} send-community

To disable sending a COMMUNITY attribute, use the no neighbor {ip-address | peer-group-name} send-community command.

Parameters

ip-address	Enter the IP address of the peer router in dotted decimal format.
peer-group-name	Enter the name of the peer group to send a COMMUNITY attribute to all routers within the peer group.

Defaults

Not configured and COMMUNITY attributes are not sent to neighbors.

Command Modes

ROUTER BGP

Usage Information

To configure a COMMUNITY attribute, use the set community command in the ROUTE-MAP mode.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

neighbor shutdown

Disable a BGP neighbor or peer group.

Syntax

neighbor {ip-address | peer-group-name} shutdown

To enable a disabled neighbor or peer group, use the neighbor {ip-address | peer-group-name} no shutdown command.

Parameters

ip-address	Enter the IP address of the neighbor in dotted decimal format.
peer-group-name	Enter the name of the peer group to disable or enable all routers within the peer group.

Defaults

Enabled (that is, BGP neighbors and peer groups are disabled.)

Command Modes

ROUTER BGP

Usage Information

Peers that are enabled within a peer group are disabled when their peer group is disabled.

The neighbor shutdown command terminates all BGP sessions on the BGP neighbor or BGP peer group. Use this command with caution as it terminates the specified BGP sessions. When a neighbor or peer group is shutdown, use the show ip bgp summary command to confirm its status.

Related Commands

show ip bgp summary Displays the current BGP configuration.

show ip bgp neighbors Displays the current BGP neighbors.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

neighbor soft-reconfiguration inbound

Enable soft-reconfiguration for BGP.

Syntax

neighbor {ip-address | peer-group-name} soft-reconfiguration inbound

To disable, use the no neighbor {ip-address | peer-group-name} soft-reconfiguration inbound command.

Parameters

ip-address Enter the IP address of the neighbor in dotted decimal format.

peer-group-name Enter the name of the peer group to disable or enable all routers within the peer group.

Defaults

Disabled

Command Modes

ROUTER BGP

Usage Information

This command enables soft-reconfiguration for the BGP neighbor specified. BGP will store all the updates received by the neighbor but will not reset the peer-session.

Caution: Inbound update storage is a memory-intensive operation. The entire BGP update database from the neighbor is stored in memory regardless of the inbound policy results applied on the neighbor.

Note: This command is supported in BGP Router Configuration mode for IPv4 Unicast address only.

Related Commands

show ip bgp neighbors Display routes received by a neighbor

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

Version 7.4.1.0 Introduced

neighbor subnet

Enable passive peering so that the members of the peer group are dynamic

Syntax

neighbor peer-group-name subnet subnet-number mask

To remove passive peering, use the no neighbor peer-group-name subnet subnet-number mask command.

Parameters	subnet-number	Enter a subnet number in dotted decimal format (A.B.C.D.) as the allowable range of addresses included in the Peer group.To allow all addresses, enter 0.0.0.0/0.
	mask	Enter a prefix mask in / prefix-length format (/x).
Defaults	Not configured.
hand Modes	ROUTER BGP
Command History	Version 7.8.1.0 Introduced support on S-Series
	Version 7.7.1.0 Introduced support on C-Series

neighbor timers

Set keepalive and hold time timers for a BGP neighbor or a peer group.

Syntax

neighbor {ip-address | peer-group-name} timers keepalive holdtime

To return to the default values, use the no neighbor {ip-address | peer-group-name} timers command.

Parameters

ip-address	Enter the IP address of the peer router in dotted decimal format.
peer-group-name	Enter the name of the peer group to set the timers for all routers within the peer group.
keepalive	Enter a number for the time interval, in seconds, between keepalive messages sent to the neighbor routers.Range: 1 to 65535Default: 60 seconds
holdtime	Enter a number for the time interval, in seconds, between the last keepalive message and declaring the router dead.Range: 3 to 65535Default: 180 seconds

Defaults

keepalive = 60 seconds; holdtime = 180 seconds.

Command Modes

ROUTER BGP

Usage Information

Timer values configured with the neighbor timers command override the timer values configured with the any other command.

When two neighbors, configured with different keepalive and holdtime values, negotiate for new values, the resulting values will be as follows:

• the lower of the holdtime values is the new holdtime value, and
- whichever is the lower value; one-third of the new holdtime value, or the configured keepalive value is the new keepalive value.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

neighbor update-source

Enable the E-Series software to use Loopback interfaces for TCP connections for BGP sessions.

Syntax

neighbor {ip-address | peer-group-name} update-source interface

To use the closest interface, use the no neighbor {ip-address | peer-group-name} update-source interface command.

Parameters

ip-address	Enter the IP address of the peer router in dotted decimal format.
peer-group-name	Enter the name of the peer group to disable all routers within the peer group.
interface	Enter the keyword loopback followed by a number of the loopback interface. Range: 0 to 16383.

Defaults

Not configured.

Command Modes

ROUTER BGP

Usage Information

Loopback interfaces are up constantly and the BGP session may need one interface constantly up to stabilize the session. The neighbor update-source command is not necessary for directly connected internal BGP sessions.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

neighbor weight

Assign a weight to the neighbor connection, which is used to determine the best path.

Syntax

neighbor {ip-address | peer-group-name} weight weight

To remove a weight value, use the no neighbor {ip-address | peer-group-name} weight command.

Parameters

ip-address	Enter the IP address of the peer router in dotted decimal format.
peer-group-name	Enter the name of the peer group to disable all routers within the peer group.
weight	Enter a number as the weight.Range: 0 to 65535Default: 0

Defaults

0

Command Modes

ROUTER BGP

Usage Information

In the FTOS best path selection process, the path with the highest weight value is preferred.

Note: Reset the neighbor connection (clear ip bgp * command) to apply the weight to the connection and recompute the best path.

If the set weight command is configured in a route map applied to this neighbor, the weight set in that command overrides the weight set in the neighbor weight command.

Related Commands

set weight Assign a weight to all paths meeting the route map criteria.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

network

Specify the networks for the BGP process and enter them in the BGP routing table.

Syntax

network ip-address mask [route-map map-name]

To remove a network, use the no network ip-address mask [route-map map-name] command.

Parameters

ip-address	Enter an IP address in dotted decimal format of the network.
mask	Enter the mask of the IP address in the slash prefix length format (for example, /24).The mask appears in command outputs in dotted decimal format (A.B.C.D).
route-mapmap-name	(OPTIONAL) Enter the keywordroute-mapfollowed by the name of an established route map.Only the following ROUTE-MAP mode commands are supported:match ip addressset communityset local-preferenceset metricset next-hopset originset weightIf the route map is not configured, the default is deny (to drop all routes).

Defaults

Not configured.

Command Modes

ROUTER BGP

Usage Information

FTOS software resolves the network address configured by the network command with the routes in the main routing table to ensure that the networks are reachable via non-BGP routes and non-default routes.

Related Commands

redistribute Redistribute routes into BGP.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

network backdoor

Specify this IGP route as the preferred route.

Syntax

network ip-address mask backdoor
To remove a network, use the no network ip-address mask backdoor command.
Parameters

ip-address	Enter an IP address in dotted decimal format of the network.
mask	Enter the mask of the IP address in the slash prefix length format (for example, /24).The mask appears in command outputs in dotted decimal format (A.B.C.D).

Defaults

Not configured.

Command Modes

ROUTER BGP

Usage Information

Though FTOS does not generate a route due to backdoor config, there is an option for injecting/sourcing a local route in presence of network backdoor config on a learned route.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

redistribute

Redistribute routes into BGP.

Syntax

redistribute {connected | static} [route-map map-name]

To disable redistribution, use the no redistribution {connected | static} command.

Parameters

connected Enter the keyword connected to redistribute routes from physically connected interfaces.

	static	Enter the keywordstaticto redistribute manually configured routes.These routes are treated as incomplete routes.
	route-mapmap-name	(OPTIONAL) Enter the keywordroute-mapfollowed by the name of an established route map.Only the following ROUTE-MAP mode commands are supported:match ip addressset communityset local-preferenceset metricset next-hopset originset weightIf the route map is not configured, the default is deny (to drop all routes).
Defaults	Not configured.
Command Modes	ROUTER BGP
Usage Information	With FTOS version 8.3.1.0 and later, the redistribute command can be used to advertise the IGP cost as the MED on redistributed routes. When the route-map is set with metric-type internal and applied outbound to an EBGP peer/peer-group, the advertised routes corresponding to those peer/peer-group will have IGP cost set as MED.
	If you do not configuredefault-metriccommand, in addition to theredistributecommand, or there is no route map to set the metric, the metric for redistributed static and connected is “0”.
	To redistribute the default route (0.0.0.0/0) configure theneighbordefault-originatecommand.
Related Commands	neighbor default-originateInject the default route.
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.3.1.0 Introduced ability to substitute IGP cost for MED when a peer/peer-group outbound route-map is set as internal.
	Version 7.8.1.0 Introduced support on S-Series
	Version 7.7.1.0 Introduced support on C-Series

redistribute isis

Redistribute IS-IS routes into BGP.

Syntax

redistribute isis [WORD][level-1| level-1-2 | level-2] [metric metric-value] [route-map map-name]

To return to the default values, enter the no redistribute isis [WORD][level-1| level-1-2 | level-2] [metric metric-value] [route-map map-name] command.

Parameters

WORD	ISO routing area tag
level-1	(OPTIONAL) Enter the keyword level-1 to independently redistributed into Level 1 routes only.
level-1-2	(OPTIONAL) Enter the keyword level-1-2 to independently redistributed into Level 1 and Level 2 routes. This is the default.
level-2	(OPTIONAL) Enter the keyword level-2 to independently redistributed into Level 2 routes only
metric metric-value	(OPTIONAL) Enter the keyword metric followed by the metric value used for the redistributed route. Use a metric value that is consistent with the destination protocol.Range: 0 to 16777215Default: 0
route-map map-name	Enter the keyword route-map followed by the map name that is an identifier for a configured route map.The route map should filter imported routes from the source routing protocol to the current routing protocol.If you do not specify a map-name, all routes are redistributed. If you specify a keyword, but fail to list route map tags, no routes will be imported.

Defaults level-1-2

Command Modes ROUTER BGP

Example

Figure 8-3. Command Example: redistribute isis

FTOS(conf)#router bgp 1
FTOS(conf-router_bgp)#redistribute isis level-1 metric 44 route-map rmap-is2bgp
FTOS(conf-router_bgp)#show running-config bgp
!
router bgp 1
redistribute isis level-1 metric 44 route-map rmap-is2bgp 

Usage Information

With FTOS version 8.3.1.0 and later, the redistribute command can be used to advertise the IGP cost as the MED on redistributed routes. When the route-map is set with metric-type internal and applied outbound to an EBGP peer/peer-group, the advertised routes corresponding to those peer/peer-group will have IGP cost set as MED.

IS-IS to BGP redistribution supports matching of level-1 or level-2 routes or all routes (default). More advanced match options can be performed using route maps. The metric value of redistributed routes can be set by the redistribution command.

Command History

Version 8.3.1.0 Introduced ability to substitute IGP cost for MED when a peer/peer-group outbound route-map is set as internal.

Version 6.3.1.0 Introduced

redistribute ospf

Redistribute OSPF routes into BGP.

Syntax

redistribute ospf process-id [[match external {1 | 2}] [match internal]] [route-map map-name]

To stop redistribution of OSPF routes, use the no redistribute ospf process-id command.

Parameters

process-id	Enter the number of the OSPF process. Range: 1 to 65535
match external {1 | 2}	(OPTIONAL) Enter the keywords match external to redistribute OSPF external routes. You can specify 1 or 2 to redistribute those routes only.
match internal	(OPTIONAL) Enter the keywords match internal to redistribute OSPF internal routes only.
route-map map-name	(OPTIONAL) Enter the keywords route-map followed by the name of a configured Route map.

Defaults

Not configured.

Command Modes

ROUTER BGP

Usage Information

With FTOS version 8.3.1.0 and later, the redistribute command can be used to advertise the IGP cost as the MED on redistributed routes. When the route-map is set with metric-type internal and applied outbound to an EBGP peer/peer-group, the advertised routes corresponding to those peer/peer-group will have IGP cost set as MED.

When you enter redistribute isis process-id command without any other parameters, FTOS redistributes all OSPF internal routes, external type 1 routes, and external type 2 routes. This feature is not supported by an RFC.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.3.1.0 Introduced ability to substitute IGP cost for MED when a peer/peer-group outbound route-map is set as internal.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

router bgp

Enter ROUTER BGP mode to configure and enable BGP.

Syntax

router bgp as-number

To disable BGP, use the no router bgp as-number command.

Parameters

as-number

Enter the AS number. Range: 1 to 65535 (2-Byte) or 1-4294967295 (4-Byte) or 0.1-65535.65535 (Dotted format)

Defaults

Not enabled.

Command Modes

CONFIGURATION

Example

Figure 8-4. Command Example: router bgp

FTOS (conf) #router bgp 3

FTOS (conf-router_bgp) #

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

Usage Information

At least one interface must be in Layer 3 mode for the router bgp command to be accepted. If no interfaces are enabled for Layer 3, an error message appears: % Error: No router id configured.

show capture bgp-pdu neighbor

Display BGP packet capture information for an IPv4 address on the system.

Syntax

show capture bgp-pdu neighbor ipv4-address

Parameters

ipv4-address

Enter the IPv4 address (in dotted decimal format) of the BGP address to display packet information for that address.

Command Modes

EXEC Privilege

Example

Figure 8-5. Command Example: show capture bgp-pdu neighbor

FTOS(conf-router_bgp)#show capture bgp-pdu neighbor 20.20.20.2

Incoming packet capture enabled for BGP neighbor 20.20.20.2

Available buffer size 40958758, 26 packet(s) captured using 680 bytes

PDU[1] : len 101, captured 00:34:51 ago

ffffffff fffffff fffffff fffffff 00650100 00000013 00000000

00000000 419ef06c 00000000

00000000 00000000 00000000 00000000 0181a1e4 0181a25c 41af92c0

00000000 00000000 00000000

00000000 00000001 0181a1e4 0181a25c 41af9400 00000000

PDU[2] : len 19, captured 00:34:51 ago

ffffffff fffffff fffffff fffffff 00130400

PDU[3] : len 19, captured 00:34:51 ago

ffffffff fffffff fffffff fffffff 00130400

[.. . ]

Outgoing packet capture enabled for BGP neighbor 20.20.20.2

Available buffer size 40958758, 27 packet(s) captured using 562 bytes

PDU[1] : len 41, captured 00:34:52 ago

ffffffff fffffff fffffff fffffff 00290104 000100b4 14141401

0c020a01 04000100 01020080

00000000

PDU[2] : len 19, captured 00:34:51 ago

ffffffff fffffff fffffff fffffff 00130400

PDU[3] : len 19, captured 00:34:50 ago

ffffffff fffffff fffffff fffffff 00130400

[.. . ]

FTOS#

Related Commands

capture bgp-pdu max-buffer-size Specify a size for the capture buffer.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

Version 7.5.1.0 Introduced

show config

View the current ROUTER BGP configuration.

Syntax

show config

Command Modes

ROUTER BGP

Example

Figure 8-6. show config Command Example

FTOS(conf-router_bgp)#show confi
!
router bgp 45
neighbor suzanne peer-group
neighbor suzanne no shutdown
neighbor sara peer-group
neighbor sara shutdown
neighbor 13.14.15.20 peer-group suzanne
neighbor 13.14.15.20 shutdown
neighbor 123.34.55.123 peer-group suzanne
neighbor 123.34.55.123 shutdown
FTOS(conf-router_bgp)# 

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

show ip bgp

View the current BGP IPv4 routing table for the system.

Syntax

show ip bgp [ipv4 unicast] [network [network-mask] [longer-prefixes]]

Parameters

ipv4 unicast	(OPTIONAL) Enter thelpv4 unicastkeywords to view information only related to ipv4 unicast routes.
network	(OPTIONAL) Enter the network address (in dotted decimal format) of the BGP network to view information only on that network.
network-mask	(OPTIONAL) Enter the network mask (in slash prefix format) of the BGP network address.
longer-prefixes	(OPTIONAL) Enter the keywordlonger-prefixesto view all routes with a common prefix.

Command Modes

EXEC

EXEC Privilege

Usage When you enable bgp non-deterministic-med command, the show ip bgp command output for a BGP route does not list the INACTIVE reason.

Example Figure 8-7. show ip bgp Command Example (Partial)

FTOS>show ip bgp
BGP table version is 847562, local router ID is 63.114.8.131
Status codes: s suppressed, d damped, h history, * valid, > best
Path source: I - internal, a - aggregate, c - confed-external, r - redistributed, n - network
Origin codes: i - IGP, e - EGP, ? - incomplete
	Network	Next Hop	Metric	LocPrf	Weight	Path
*>	0.0.0.0/0	63.114.8.33			0	18508 i
*	3.0.0.0/8	63.114.8.33			0	18508 209 701 80 i
*>		63.114.8.33			0	18508 701 80 i
*>	3.3.0.0/16	0.0.0.0	22		32768 ?
		63.114.8.35			0	18508 ?
*>	4.0.0.0/8	63.114.8.33			0	18508 701 1 i
*>	4.2.49.12/30	63.114.8.33			0	18508 209 i
*	4.17.250.0/24	63.114.8.33			0	18508 209 1239 13716 i
*>		63.114.8.33			0	18508 701 1239 13716 i
*	4.21.132.0/23	63.114.8.33			0	18508 209 6461 16422 i
*>		63.114.8.33			0	18508 701 6461 16422 i
*>	4.24.118.16/30	63.114.8.33			0	18508 209 i
*>	4.24.145.0/30	63.114.8.33			0	18508 209 i
*>	4.24.187.12/30	63.114.8.33			0	18508 209 i
*>	4.24.202.0/30	63.114.8.33			0	18508 209 i
*>	4.25.88.0/30	63.114.8.33			0	18508 209 3561 3908 i
*>	5.0.0.0/9	63.114.8.33	0		0	18508 ?
*>	5.0.0.0/10	63.114.8.33	0		0	18508 ?
*>	5.0.0.0/11	63.114.8.33	0		0	18508 ?
--More--

Table 8-1 defines the information displayed in Figure 8-7

Table 8-1. show ip bgp Command Example Fields

Field Description
Network Displays the destination network prefix of each BGP route.
Next Hop Displays the next hop address of the BGP router.
Metric Displays the BGP route's metric, if assigned.
LocPrf Displays the BGP LOCAL_PREF attribute for the route.
Weight Displays the route's weight
Path Lists all the ASs the route passed through to reach the destination network.

Related Commands	show ip bgp community View BGP communities.
	neighbor maximum-prefix Control number of network prefixes received.
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.8.1.0 Introduced support on S-Series
	Version 7.7.1.0 Introduced support on C-Series

show ip bgp cluster-list

View BGP neighbors in a specific cluster.

Syntax

show ip bgp [ipv4 unicast] cluster-list [cluster-id]

Parameters

ipv4 unicast	(OPTIONAL) Enter the ipv4 unicast keywords to view information only related to ipv4 unicast routes.
cluster-id	(OPTIONAL) Enter the cluster id in dotted decimal format.

Command Modes

EXEC

EXEC Privilege

Example

Figure 8-8. Command Example: show ip bgp cluster-list (Partial)

FTOS#show ip bgp cluster-list
BGP table version is 64444683, local router ID is 120.1.1.1
Status codes: s suppressed, d damped, h history, * valid, > best
Path source: I - internal, a - aggregate, c - confed-external, r - redistributed, n - network
Origin codes: i - IGP, e - EGP, ? - incomplete
	Network	Next Hop	Metric	LocPrf Weight Path
* I 10.10.10.1/32		192.68.16.1	0	100	0 i
* I		192.68.16.1	0	100	0 i
*>I		192.68.16.1	0	100	0 i
* I		192.68.16.1	0	100	0 i
* I		192.68.16.1	0	100	0 i
* I		192.68.16.1	0	100	0 i
* I 10.19.75.5/32		192.68.16.1	0	100	0 ?
* I		192.68.16.1	0	100	0 ?
*>I		192.68.16.1	0	100	0 ?
* I		192.68.16.1	0	100	0 ?
* I		192.68.16.1	0	100	0 ?
* I 10.30.1.0/24		192.68.16.1	0	100	0 ?
* I		192.68.16.1	0	100	0 ?
*>I		192.68.16.1	0	100	0 ?
* I		192.68.16.1	0	100	0?
* I		192.68.16.1	0	100	0 ?

Table 8-2 defines the information displayed in Figure 8-8.

Table 8-2. show ip bgp cluster-list Command Fields

Field Description
Network Displays the destination network prefix of each BGP route.
Next Hop Displays the next hop address of the BGP router.If 0.0.0.0 is listed in this column, then local routes exist in the routing table.
Metric Displays the BGP route's metric, if assigned.
LocPrf Displays the BGP LOCAL_PREF attribute for the route.
Weight Displays the route's weight
Path Lists all the ASs the route passed through to reach the destination network.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

show ip bgp community

View information on all routes with Community attributes or view specific BGP community groups.

Syntax

show ip bgp [ipv4 unicast] community [community-number] [local-as] [no-export] [no-advertise]

Parameters

ipv4 unicast	(OPTIONAL) Enter the ipv4 unicast keywords to view information only related to ipv4 unicast routes.
community-number	Enter the community number in AA:NN format where AA is the AS number (2 bytes) and NN is a value specific to that autonomous system.You can specify up to eight community numbers to view information on those community groups.
local-AS	Enter the keywords local-AS to view all routes with the COMMUNITY attribute of NO_EXPORT_SUBCONFED.All routes with the NO_EXPORT_SUBCONFED (0xFFFFF03) community attribute must not be advertised to external BGP peers.
no-advertise	Enter the keywords no-advertise to view all routes containing the well-known community attribute of NO_ADVERTISE.All routes with the NO_ADVERTISE (0xFFFFF02) community attribute must not be advertised to other BGP peers.
no-export	Enter the keywords no-export to view all routes containing the well-known community attribute of NO_EXPORT.All routes with the NO_EXPORT (0xFFFFF01) community attribute must not be advertised outside a BGP confederation boundary.

Command Modes

EXEC

EXEC Privilege

Usage Information

To view the total number of COMMUNITY attributes found, use the show ip bgp summary command. The text line above the route table states the number of COMMUNITY attributes found.

Example Figure 8-9. show ip bgp community Command Example (Partial)

FTOS>show ip bgp community BGP table version is 3762622, local router ID is 63.114.8.48 Status codes: s suppressed, d damped, h history, * valid, > best Path source: I - internal, a - aggregate, c - confed-external, r - redistributed, n - network Origin codes: i - IGP, e - EGP, ? - incomplete
Network	Next Hop	Metric	LocPrf	Weight	Path
* i 3.0.0.0/8	205.171.0.16		100	0	209 701 80 i
*>i 4.2.49.12/30	205.171.0.16		100	0	209 i
* i 4.21.132.0/23	205.171.0.16		100	0	209 6461 16422 i
*>i 4.24.118.16/30	205.171.0.16		100	0	209 i
*>i 4.24.145.0/30	205.171.0.16		100	0	209 i
*>i 4.24.187.12/30	205.171.0.16		100	0	209 i
*>i 4.24.202.0/30	205.171.0.16		100	0	209 i
*>i 4.25.88.0/30	205.171.0.16		100	0	209 3561 3908 i
*>i 6.1.0.0/16	205.171.0.16		100	0	209 7170 1455 i
*>i 6.2.0.0/22	205.171.0.16		100	0	209 7170 1455 i
*>i 6.3.0.0/18	205.171.0.16		100	0	209 7170 1455 i
*>i 6.4.0.0/16	205.171.0.16		100	0	209 7170 1455 i
*>i 6.5.0.0/19	205.171.0.16		100	0	209 7170 1455 i
*>i 6.8.0.0/20	205.171.0.16		100	0	209 7170 1455 i
*>i 6.9.0.0/20	205.171.0.16		100	0	209 7170 1455 i
*>i 6.10.0.0/15	205.171.0.16		100	0	209 7170 1455 i
*>i 6.14.0.0/15	205.171.0.16		100	0	209 7170 1455 i
*>i 6.133.0.0/21	205.171.0.16		100	0	209 7170 1455 i
*>i 6.151.0.0/16	205.171.0.16		100	0	209 7170 1455 i

The show ip bgp community command without any parameters lists BGP routes with at least one BGP community attribute and the output is the same as for the show ip bgp command output.

Table 8-3. Command Example Fields: show ip bgp community

Field Description
Network Displays the destination network prefix of each BGP route.
Next Hop Displays the next hop address of the BGP router.If 0.0.0.0 is listed in this column, then local routes exist in the routing table.
Metric Displays the BGP route's metric, if assigned.
LocPrf Displays the BGP LOCAL_PREF attribute for the route.
Weight Displays the route's weight
Path Lists all the ASs the route passed through to reach the destination network.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

show ip bgp community-list

View routes that are affected by a specific community list.

Syntax show ip bgp [ipv4 unicast] community-list community-list-name [exact-match]

Parameters

ipv4 unicast	(OPTIONAL) Enter the ipv4 unicast keywords to view information only related to ipv4 unicast routes.
community-list-name	Enter the name of a configured IP community list. (max 16 chars)
exact-match	Enter the keyword for an exact match of the communities.

Command Modes

EXEC

EXEC Privilege

Example

Figure 8-10. Command Example: show ip bgp community-list

FTOS#show ip bgp community-list pass
BGP table version is 0, local router ID is 10.101.15.13
Status codes: s suppressed, d damped, h history, * valid, > best
Path source: I - internal, a - aggregate, c - confed-external, r - redistributed, n - network
Origin codes: i - IGP, e - EGP, ? - incomplete 

Network
FTOS#

Next Hop 

Metric 

LocPrf 

Weight Path 

The show ip bgp community-list command without any parameters lists BGP routes matching the Community List and the output is the same as for the show ip bgp command output.

Table 8-4. show ip bgp community-list Command Example Fields

Field Description
Network Displays the destination network prefix of each BGP route.
Next Hop Displays the next hop address of the BGP router.If 0.0.0.0 is listed in this column, then local routes exist in the routing table.
Metric Displays the BGP route's metric, if assigned.
LocPrf Displays the BGP LOCAL_PREF attribute for the route.
Weight Displays the route's weight
Path Lists all the ASs the route passed through to reach the destination network.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

show ip bgp dampened-paths

View BGP routes that are dampened (non-active).

Syntax

show ip bgp [ipv4 unicast] dampened-paths

Command Modes

EXEC

EXEC Privilege

Example Figure 8-11. Command Example: show ip bgp dampened-paths

FTOS>show ip bgp damp
BGP table version is 210708, local router ID is 63.114.8.2
Status codes: s suppressed, d damped, h history, * valid, > best
Path source: I - internal, a - aggregate, c - confed-external, r - redistributed, n - network
Origin codes: i - IGP, e - EGP, ? - incomplete
Network From Reuse Path
FTOS> 

Table 8-5 defines the information displayed in Figure 8-11.
Table 8-5. show ip bgp dampened-paths Command Example

Field Description
Network Displays the network ID to	which the route is dampened.
From Displays the IP address of the	neighbor advertising the dampened route.
Reuse Displays the hour:minutes:seconds until the dampened route is available.
Path Lists all the ASs the dampened route passed through to reach the destination network.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

show ip bgp detail

Display BGP internal information for IPv4 Unicast address family.

Syntax show ip bgp [ipv4 unicast] detail

Defaults none

Command Modes

EXEC

EXEC Privilege

Example

Figure 8-12. Command Example: show ip bgp detail

R2#show ip bgp detail
Detail information for BGP Node
bgpNdP 0x41a17000 : NdTmrP 0x41a17000 : NdKATmrP 0x41a17014 : NdTics 74857 :
NhLocAS 1 : NdState 2 : NdRPMPrim 1 : NdListSoc 13
NdAuto 1 : NdEqCost 1 : NdSync 0 : NdDefOrg 0
NdV6ListSoc 14 NDefDid 0 : NdConfedId 0 : NdMedConfed 0 : NdMedMissVal -1 :
NdIgnrIllId 0 : NdRRC2C 1 : NdClstId 33686273 : NdPaTblP 0x41a19088
NdASPTblP 0x41a19090 : NdCommTblP 0x41a19098 : NhOptTransTblP 0x41a190a0 :
NdRRClsTblP 0x41a190a8
NdPktPA 0 : NdLocCBP 0x41a6f000 : NdTmpPAP 0x419efc80 : NdTmpASPAP 0x41a25000 :
NdTmpCommP 0x41a25800
NdTmpRRC1P 0x41a4b000 : NdTmpOptP 0x41a4b800 : NdTmpNHP : NdOrigPAP 0
NdOrgNHP 0 : NdModPathP 0x419efcc0 : NdModASPAP 0x41a4c000 : NdModCommP 0x41a4c800
NdModOptP 0x41a4d000 : NdModNHP : NdComSortBufP 0x41a19110 : NdComSortHdP
0x41a19d04 : NdUpdAFMsk 0 : AFRstSet 0x41a1a298 : NHopDfrdHdP 0x41a1a3e0 :
NumNhDfrd 0 : CfgHdrAFMsk 1
AFChkNetTmrP 0x41ee705c : AFRtDamp 0 : AlwysCmpMed 0 : LocrHld 10 : LocrRem 10 :
softReconfig 0x41a1a58c
DefMet 0 : AutoSumm 1 : NhopsP 0x41a0d100 : Starts 0 : Stops 0 : Opens 0
Closes 0 : Fails 0 : Fatals 0 : ConnExps 0 : HldExps 0 : KeepExps 0
RxOpens 0 : RxKeeps 0 : RxUpds 0 : RxNotifs 0 : TxUpds 0 : TxNotifs 0
BadEvts 0 : SynFails 0 : RxeCodeP 0x41alab6b8 : RxHdrCodeP 0x41alab6d4 : RxOpCodeP
0x41alab6e4
RxUpdCodeP 0x41alb704 : TxEcodeP 0x41alb734 : TxDhrcodeP 0x41alb750 : TxOpCodeP
0x41alb760
TxUpdCodeP 0x41alb780 : TrEvt 0 : LocPref 100 : tmpPathP 0x41alb7b8 : LogNbrChgs 1
RecursiveNH 1 : PgCfgId 0 : KeepAlive 0 : HldTime 0 : DioHdl 0 : AggrValTmrP
0x41ee7024
UpdNetTmrP 0 : RedistTmrP 0x41ee7094 : PeerChgTmrP 0 : CleanRibTmrP 0x41ee7104
PeerUpdTmrP 0x41ee70cc : DfrdNHTmrP 0x41ee7174 : DfrdRtselTmrP 0x41ee713c :
FastExtFallover 1 : FastIntFallover 0 : EnforceIstAS 1
PeerIdBitsP 0x41967120 : softOutSz 16 : RibUpdCtxCBP 0
UpdPeerCtxCBP 0 : UpdPeerCtxAFI 0 : TcpioCtxCB 0 : RedistBlk 1
NextCBPurg 110119536 : NumPeerToPurge 0 : PeerIBGPCnt 0 : NonDet 0 : DfrdPathSel 0
BGPRst = NumGrCfg 1 : DfrdTmestmp 0 : SnmpTrps 0 : IgnrBestPthASP 0
RstOn 1 : RstMod 1 : RstRole 2 : AFFalgs 7 : RstInt 120 : MaxeorExtInt 361
FixedPartCrt 1 : VarParCrt 1
Packet Capture max allowed length 4096000: current length 0
Peer Grp List
Nbr List
Confed Peer List
Address Family specific Information
AFIndex 0
NdSpFlag 0x41a19bO: AFRttP 0x41aod2O: NdRTMMkrP 0x41a19d28: NdRTMAFTblVer 0:
NdRibCtxAddr 110111O688
NdRibCtxAddrLen 255: NdAFPrefix: NdAfNLRIP: NdAFNLRILen: NdAFWPtrP: NdAFWLen: NdAfNH: NdAFRedRttP: NdAflaOd4O: NdRecCtxAdd: 11O11IIO868
NdRedCtxAddrLen: Rd: NdAfRedMkrP: NdAflaI9e88: AfAggRttP: NdAflaOd6O: AfAggCtxAddr: 
AfNumAggrPfx: AfNumAggrASSet: AfNumSuppmap: AfNumAggrValidPfx: AfMPathRttP: MpathCtxAddr: MpathCtxAddrlen: MpathCtxAddrlen: MpathCtxAddrlen: MpathCtxAddrlen: MpathCtxAddrlen: MpathtexAddrlen: MpathtexAddrlen: MpathtexAddrlen: MpathtexAddrlen: MpathtexAddrlen: MpathtexAddrlen: MpathtexAddrlen: MpathtexAddrlen: MpathtexAddrlen: MpathtexAddrlen: MpathtexAddrlen: MpathtexAddrlen: MpathtexAddrlen: MpathtexAddrlen: MpathtexAddrlen: MpathtexAddrlen: MpathtexAddrlen: 

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

Version 7.5.1.0 Introduced

show ip bgp extcommunity-list

View information on all routes with Extended Community attributes.

Syntax
show ip bgp [ipv4 unicast] extcommunity-list [list name]

Parameters	ipv4 unicast	(OPTIONAL) Enter the ipv4 unicast keywords to view information only related to ipv4 unicast routes.
	list name	Enter the extended community list name you wish to view.
Command Modes	EXEC
	EXEC Privilege
Usage Information	To view the total number of COMMUNITY attributes found, use the show ip bgp summary command. The text line above the route table states the number of COMMUNITY attributes found.
	The show ip bgp community command without any parameters lists BGP routes with at least one BGP community attribute and the output is the same as for the show ip bgp command output.
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.8.1.0 Introduced support on S-Series
	Version 7.7.1.0 Introduced support on C-Series

show ip bgp filter-list

View the routes that match the filter lists.

Syntax
show ip bgp [ipv4 unicast] filter-list as-path-name

Parameters	ipv4 unicast	(OPTIONAL) Enter the ipv4 unicast keywords to view information only related to ipv4 unicast routes.
	as-path-name	Enter the name of an AS-PATH.

Command Modes

EXEC

EXEC Privilege

Example

Figure 8-13. Command Example: show ip bgp filter-list

FTOS#show ip bgp filter-list hello BGP table version is 80227, local router ID is 120.1.1.1 Status codes: s suppressed, d damped, h history, * valid, > best Path source: I - internal, a - aggregate, c - confed-external, r - redistributed, n - network Origin codes: i - IGP, e - EGP, ? - incomplete
	Network	Next Hop	Metric	LocPrf	Weight	Path
* I	6.1.5.0/24	192.100.11.2	20000	9999	0	?
* I		192.100.8.2	20000	9999	0	?
* I		192.100.9.2	20000	9999	0	?
* I		192.100.10.2	20000	9999	0	?
*>I		6.1.5.1	20000	9999	0	?
* I		6.1.6.1	20000	9999	0	?
* I		6.1.20.1	20000	9999	0	?
* I	6.1.6.0/24	192.100.11.2	20000	9999	0	?
* I		192.100.8.2	20000	9999	0	?
* I		192.100.9.2	20000	9999	0	?
** I		192.100.10.2	20000	9999	0	?
*>I		6.1.5.1	20000	9999	0	?
* I		6.1.6.1	20000	9999	0	?
* I		6.1.20.21	20000	9999	0	?
* I	6.1.20.0/24	192.100.11.2	20000	9999	0	?
* I		192.100.8.2	20000	9999	0	?
* I		192.100.9.2	20000	9999	0	?
* I		192.100.10.2	20000	9999	0	?

Table 8-6 defines the information displayed in Figure 8-13.

Table 8-6. Command Example fields: show ip bgp filter-list

Field Description
Path source codes Lists the path sources shown to the right of the last AS number in the Path column:i = internal route entrya = aggregate route entryc = external confederation route entryn = network route entryr = redistributed route entry
Next Hop Displays the next hop address of the BGP router.If 0.0.0.0 is listed in this column, then local routes exist in the routing table.
Metric Displays the BGP route's metric, if assigned.
LocPrf Displays the BGP LOCAL_PREF attribute for the route.
Weight Displays the route's weight
Path Lists all the ASs the route passed through to reach the destination network.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

show ip bgp flap-statistics

View flap statistics on BGP routes.

Syntax

show ip bgp [ipv4 unicast] flap-statistics [ip-address [mask]] [filter-list as-path-name] [regexp regular-expression]

Parameters

ipv4 unicast	(OPTIONAL) Enter the ipv4 unicast keywords to view information only related to ipv4 unicast routes.
ip-address	(OPTIONAL) Enter the IP address (in dotted decimal format) of the BGP network to view information only on that network.
mask	(OPTIONAL) Enter the network mask (in slash prefix (/x) format) of the BGP network address.
filter-list as-path-name	(OPTIONAL) Enter the keyword filter-list followed by the name of a configured AS-PATH ACL.
regexp regular-expression	Enter a regular expression then use one or a combination of the following characters to match:. = (period) any single character (including a white space)* = (asterisk) the sequences in a pattern (0 or more sequences)+ = (plus) the sequences in a pattern (1 or more sequences)? = (question mark) sequences in a pattern (either 0 or 1 sequences).You must enter an escape sequence (CTRL+v) prior to entering the ? regular expression.[ ] = (brackets) a range of single-character patterns.( ) = (parenthesis) groups a series of pattern elements to a single element{{ } = (braces) minimum and the maximum match count^ = (caret) the beginning of the input string. If the caret is used at the beginning of a sequence or range, it matches on everything BUT the characters specified.$ = (dollar sign) the end of the output string.

Command Modes

EXEC

EXEC Privilege

Example

Figure 8-14. Command Example: show ip bgp flap-statistics

FTOS>show ip bgp flap
BGP table version is 210851, local router ID is 63.114.8.2
Status codes: s suppressed, d damped, h history, * valid, > best
Path source: I - internal, a - aggregate, c - confed-external, r - redistributed, n - network
Origin codes: i - IGP, e - EGP, ? - incomplete
Network From Flaps Duration Reuse Path
FTOS> 

Table 8-7 defines the information displayed in Figure 8-14.
Table 8-7. show ip bgp flap-statistics Command Example Fields

Field Description
Network Displays the network ID to which the route is flapping.
From Displays the IP address of the neighbor advertising the flapping route.
Flaps Displays the number of times the route flapped.
Duration Displays the hours:minutes:seconds since the route first flapped.
Reuse Displays the hours:minutes:seconds until the flapped route is available.
Path Lists all the ASs the flapping route passed through to reach the destination network.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

show ip bgp inconsistent-as

View routes with inconsistent originating Autonomous System (AS) numbers, that is, prefixes that are announced from the same neighbor AS but with a different AS-Path.

Syntax

show ip bgp [ipv4 unicast] inconsistent-as

Command Modes

EXEC

EXEC Privilege

Example

Figure 8-15. Command Example: show ip bgp inconsistent-as (Partial)

*TOS>show ip bgp inconsistent-as
BGP table version is 280852, local router ID is 10.1.2.100
Status codes: s suppressed, d damped, h history, * valid, > best
Path source: I - internal, c - confed-external, r - redistributed, n - network
Origin codes: i - IGP, e - EGP, ? - incomplete
	Network	Next Hop	Metric	LocPrf Weight Path
*	3.0.0.0/8	63.114.8.33		0 18508 209 7018 8
*		63.114.8.34		0 18508 209 7018 80 i
*		63.114.8.60		0 18508 209 7018 80 i
*>		63.114.8.33		0 18508 701 80 i
*>	3.18.135.0/24	63.114.8.60		0 18508 209 7018 ?
*		63.114.8.34		0 18508 209 7018 ?
*		63.114.8.33		0 18508 701 7018 ?
*		63.114.8.33		0 18508 209 7018 ?
*>	4.0.0.0/8	63.114.8.60		0 18508 209 1 i
*		63.114.8.34		0 18508 209 1 i
*		63.114.8.33		0 18508 701 1 i
*		63.114.8.33		0 18508 209 1 i
*	6.0.0.0/20	63.114.8.60		0 18508 209 3549 i
*		63.114.8.34		0 18508 209 3549 i
*>		63.114.8.33	0	0 18508 ?
*		63.114.8.33		0 18508 209 3549 i
*	9.2.0.0/16	63.114.8.60		0 18508 209 701 i
*		63.114.8.34		0 18508 209 701 i
--More--

Table 8-8. show ip bgp inconsistent-as Command Example Fields

Fields Description
Network Displays the destination network prefix of each BGP route.
Next Hop Displays the next hop address of the BGP router.
Metric Displays the BGP route's metric, if assigned.
LocPrf Displays the BGP LOCAL_PREF attribute for the route.
Weight Displays the route's weight
Path Lists all the ASs the route passed through to reach the destination network.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

show ip bgp neighbors

Enables you to view the information exchanged by BGP neighbors.

Syntax

show ip bgp [ipv4 unicast] neighbors [ip-address [advertised-routes | dampened-routes | detail | flap-statistics | routes | {received-routes [network [network-mask]]} | {denied-routes [network [network-mask]]}]

Parameters

ipv4 unicast	(OPTIONAL) Enter the ipv4 unicast keywords to view information only related to ipv4 unicast routes.
ip-address	(OPTIONAL) Enter the IP address of the neighbor to view only BGP information exchanged with that neighbor.
advertised-routes	(OPTIONAL) Enter the keywords advertised-routes to view only the routes the neighbor sent.
dampened-routes	(OPTIONAL) Enter the keyword dampened-routes to view information on dampened routes from the BGP neighbor.
detail	(OPTIONAL) Enter the keyword detail to view neighbor-specific internal information for the IPv4 Unicast address family.
flap-statistics	(OPTIONAL) Enter the keyword flap-statistics to view flap statistics on the neighbor's routes.
routes	(OPTIONAL) Enter the keywords routes to view only the neighbor's feasible routes.

Command Modes

received-routes[network[network-mask]]	(OPTIONAL) Enter the keywords received-routes followed by either the network address (in dotted decimal format) or the network mask (in slash prefix format) to view all information received from neighbors.Note:neighbor soft-reconfiguration inbound must be configured prior to viewing all the information received from the neighbors.
denied-routes[network[network-mask]]	(OPTIONAL) Enter the keywords denied-routes followed by either the network address (in dotted decimal format) or the network mask (in slash prefix format) to view all information on routes denied via neighbor inbound filters.

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

Version 7.5.1.0 Added detail option and output now displays default MED value

Version 7.2.1.0 Added received and denied route options

Version 6.3.10 The output is changed to display the total number of advertised prefixes

Example 1

Figure 8-16. Command Example: show ip bgp neighbors (Partial)

FTOS#show ip bgp neighbors

BGP neighbor is 100.10.10.2, remote AS 200, external link
BGP version 4, remote router ID 192.168.2.101
BGP state ESTABLISHED, in this state for 00:16:12
Last read 00:00:12, last write 00:00:03
Hold time is 180, keepalive interval is 60 seconds
Received 1404 messages, 0 in queue
3 opens, 1 notifications, 1394 updates
6 keepalives, 0 route refresh requests
Sent 48 messages, 0 in queue
3 opens, 2 notifications, 0 updates
43 keepalives, 0 route refresh requests
Minimum time between advertisement runs is 30 seconds
Minimum time before advertisements start is 0 seconds

Capabilities received from neighbor for IPv4 Unicast :
MULTIPROTO_EXT(1)
ROUTE_REFRESH(2)
CISCO_ROUTE_REFRESH(128)

Capabilities advertised to neighbor for IPv4 Unicast :
MULTIPROTO_EXT(1)
ROUTE_REFRESH(2)
ROUTE_REFRESH(2)
GRACEFUL_RESTART(64)
CISCO_ROUTE_REFRESH(128)

Route map for incoming advertisements is test
Maximum prefix set to 4 with threshold 75

For address family: IPv4 Unicast
BGP table version 34, neighbor version 34
5 accepted prefixes consume 20 bytes
Prefix advertised 0, denied 4, withdrawn 0

Prefixes accepted 1 (consume 4 bytes), withdrawn 0 by peer
Prefixes advertised 0, rejected 0, withdrawn 0 from peer

Connections established 2; dropped 1
Last reset 00:18:21, due to Maximum prefix limit reached 

Example 2 Figure 8-17. Command Example: show ip bgp neighbors advertised-routes

Network	Next Hop	Metric	LocPrf	Weight	Path
*>r 1.10.1.0/24	0.0.0.0	5000		32768	?
*>r 1.11.0.0/16	0.0.0.0	5000		32768	?
......
......
*>I 223.94.249.0/24	223.100.4.249	0	100	0	?
*>I 223.94.250.0/24	223.100.4.250	0	100	0	?
*>I 223.100.0.0/16	223.100.255.254	0	100	0	?
Total number of prefixes: 74102

Example 3 Figure 8-18. Command Example: show ip bgp neighbors received-routes

FTOS#show ip bgp neighbors 100.10.10.2 received-routes BGP table version is 13, local router ID is 120.10.10.1 Status codes: s suppressed, S stale, d damped, h history, * valid, > best Path source: I - internal, a - aggregate, c - confed-external, r - redistributed n - network, D - denied, S - stale Origin codes: i - IGP, e - EGP, ? - incomplete
	Network	Next Hop	Metric	LocPrf	Weight	Path
D	70.70.21.0/24	100.10.10.2		0	0	100 200 ?
D	70.70.22.0/24	100.10.10.2		0	0	100 200 ?
D	70.70.23.0/24	100.10.10.2		0	0	100 200 ?
D	70.70.24.0/24	100.10.10.2		0	0	100 200 ?
*>	70.70.25.0/24	100.10.10.2		0	0	100 200 ?
*>	70.70.26.0/24	100.10.10.2	0	0	0	100 200 ?
*>	70.70.27.0/24	100.10.10.2	0	0	0	100 200 ?
*>	70.70.28.0/24	100.10.10.2	0	0	0	100 200 ?
*>	70.70.29.0/24	100.10.10.2	0	0	0	100 200 ?

Example 4 Figure 8-19. Command Example: show ip bgp neighbors denied-routes

FTOS#show ip bgp neighbors 100.10.10.2 denied-routes 4 denied paths using 205 bytes of memory BGP table version is 34, local router ID is 100.10.10.2 Status codes: s suppressed, S stale, d damped, h history, * valid, > best Path source: I - internal, a - aggregate, c - confed-external, r - redistributed n - network, D - denied, S - stale Origin codes: i - IGP, e - EGP, ? - incomplete
	Network	Next Hop	Metric	LocPrf	Weight	Path
D	70.70.21.0/24	100.10.10.2		0	0	100 200 ?
D	70.70.22.0/24	100.10.10.2		0	0	100 200 ?
D	70.70.23.0/24	100.10.10.2		0	0	100 200 ?
D	70.70.24.0/24	100.10.10.2		0	0	100 200 ?
FTOS#

Table 8-9. Command Example fields: show ip bgp neighbors

Lines beginning with Description
BGP neighbor Displays the BGP neighbor address and its AS number. The last phrase in the line indicates whether the link between the BGP router and its neighbor is an external or internal one. If they are located in the same AS, then the link is internal; otherwise the link is external.
BGP version Displays the BGP version (always version 4) and the remote router ID.

Table 8-9. Command Example fields: show ip bgp neighbors

Lines beginning with	Description
BGP state Displays the neighbor's BGP state and the amount of time in hours:minutes:seconds it has been in that state.
Last read This line displays the following information:last read is the time (hours:minutes:seconds) the router read a message from its neighborhold time is the number of seconds configured between messages from its neighborkeepalive interval is the number of seconds between keepalive messages to help ensure that the TCP session is still alive.
Received messages This line displays the number of BGP messages received, the number of notifications (error messages) and the number of messages waiting in a queue for processing.
Sent messages The line displays the number of BGP messages sent, the number of notifications (error messages) and the number of messages waiting in a queue for processing.
Received updates This line displays the number of BGP updates received and sent.
Soft reconfiguration This line indicates that soft reconfiguration inbound is configured.
Minimum time Displays the minimum time, in seconds, between advertisements.
(list of inbound and outbound policies)	Displays the policy commands configured and the names of the Route map, AS-PATH ACL or Prefix list configured for the policy.
For address family: Displays IPv4 Unicast as the address family.
BGP table version Displays the which version of the primary BGP routing table the router and the neighbor are using.
accepted prefixes Displays the number of network prefixes accepted by the router and the amount of memory used to process those prefixes.
Prefix advertised Displays the number of network prefixes advertised, the number rejected and the number withdrawn from the BGP routing table.
Connections established Displays the number of TCP connections established and dropped between the two peers to exchange BGP information.
Last reset	Displays the amount of time since the peering session was last reset. Also states if the peer resets the peering session.If the peering session was never reset, the word never is displayed.
Local host:	Displays the peering address of the local router and the TCP port number.
Foreign host:	Displays the peering address of the neighbor and the TCP port number.

Related Commands

show ip bgp

View the current BGP routing table.

show ip bgp next-hop

View all next hops (via learned routes only) with current reachability and flap status. This command only displays one path, even if the next hop is reachable by multiple paths.

Syntax show ip bgp next-hop

Command Modes

EXEC

EXEC Privilege

Example Figure 8-20. Command Example: show ip bgp next-hop

FTOS>show ip bgp next-hop
Next-hop	Via		RefCount	Cost	Flaps	Time Elapsed
63.114.8.33	63.114.8.33, Gi 12/22		240984	0	0	00:18:25
63.114.8.34	63.114.8.34, Gi 12/22		135152	0	0	00:18:13
63.114.8.35	63.114.8.35, Gi 12/22		1	0	0	00:18:07
63.114.8.60	63.114.8.60, Gi 12/22		135155	0	0	00:18:11
FTOS>

Table 8-10. Command Example fields: show ip bgp next-hop

Field Description
Next-hop Displays the next-hop IP address.
Via Displays the IP address and interface used to reach the next hop.
RefCount Displays the number of BGP routes using this next hop.
Cost Displays the cost associated with using this next hop.
Flaps Displays the number of times the next hop has flapped.
Time Elapsed Displays the time elapsed since the next hop was learned. If the route is down, then this field displays time elapsed since the route went down.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

show ip bgp paths

View all the BGP path attributes in the BGP database.

Syntax show ip bgp paths [regexp regular-expression]

Parameters

regexp regular-expression

Enter a regular expression then use one or a combination of the following characters to match:

• . = (period) any single character (including a white space)
- * = (asterisk) the sequences in a pattern (0 or more sequences)
• + = (plus) the sequences in a pattern (1 or more sequences)
- ? = (question mark) sequences in a pattern (either 0 or 1 sequences). You must enter an escape sequence (CTRL+v) prior to entering the ? regular expression.
- [ ] = (brackets) a range of single-character patterns.
- (·) = (parenthesis) groups a series of pattern elements to a single element
- = (braces) minimum and the maximum match count
- = (caret) the beginning of the input string. If the caret is used at the beginning of a sequence or range, it matches on everything BUT the characters specified.
- \$ = (dollar sign) the end of the output string.

Command Modes

EXEC

EXEC Privilege

Example

Figure 8-21. Command Example: show ip bgp paths (Partial)

FTOS#show ip bgp path Total 16 Paths
Address	Hash	Refcount	Metric	Path
0x1efe7e5c	15	10000		32 ?
0x1efe7e1c	71	10000		23 ?
0x1efe7ddc	127	10000		22 ?
0x1efe7d9c	183	10000		43 ?
0x1efe7d5c	239	10000		42 ?
0x1efe7c9c	283	6		{102 103} ?
0x1efe7b1c	287	336	20000	?
0x1efe7d1c	295	10000		13 ?
0x1efe7c5c	339	6		{92 93} ?
0x1efe7cdc	351	10000		12 ?
0x1efe7c1c	395	6		{82 83} ?
0x1efe7bdc	451	6		{72 73} ?
0x1efe7b5c	491	78	0	?
0x1efe7adc	883	2	120	i
0x1efe7e9c	983	10000		33 ?
0x1efe7b9c	1003	6	0	i

Table 8-11. Command Example fields: show ip bgp paths

Field Description
Total Displays the total number of BGP path attributes.
Address Displays the internal address	where the path attribute is stored.
Hash Displays the hash bucket where	the path attribute is stored.
Refcount Displays the number of BGP routes using this path attribute.
Metric Displays the MED attribute for this path attribute.
Path Displays the AS path for the route, with the origin code for the route listed last.Numbers listed between braces {} are AS_SET information.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

show ip bgp paths as-path

View all unique AS-PATHs in the BGP database

Syntax

show ip bgp paths as-path

Command Modes

EXEC

EXEC Privilege

Example

Figure 8-22. Command Example: show ip bgp paths as-path (Partial)

FTOS#show ip bgp paths as-path
Total 13 AS-Paths
Address Hash Refcount AS-Path
0x1ea3c1ec 251 1 42
0x1ea3c25c 251 1 22
0x1ea3c1b4 507 1 13
0x1ea3c304 507 1 33
0x1ea3c10c 763 1 {92 93}
0x1ea3c144 763 1 {102 103}
0x1ea3c17c 763 1 12
0x1ea3c2cc 763 1 32
0x1ea3c09c 764 1 {72 73}
0x1ea3c0d4 764 1 {82 83}
0x1ea3c224 1019 1 43
0x1ea3c294 1019 1 23
0x1ea3c02c 1021 4
FTOS# 

Table 8-12. Command Example fields: show ip bgp paths community

Field Description
Address Displays the internal address where the path attribute is stored.
Hash Displays the hash bucket where the path attribute is stored.
Refcount Displays the number of BGP routes using these AS-Paths.
AS-Path Displays the AS paths for this route, with the origin code for the route listed last.Numbers listed between braces {} are AS_SET information.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

show ip bgp paths community

View all unique COMMUNITY numbers in the BGP database.

Syntax

show ip bgp paths community

Command Modes

EXEC

EXEC Privilege

Example

Figure 8-23. Command Example: show ip bgp paths community (Partial)

E1200-BGP>show ip bgp paths community
Total 293 Communities
Address	Hash	Refcount	Community
0x1ec88a5c	3	4	209:209	209:6059	209:31272	3908:900 19092:300
0x1e0f10ec	15	4	209:209	209:3039	209:31272	3908:900 19092:300
0x1c902234	37	2	209:209	209:7193	209:21362	3908:900 19092:300
0x1f588cd4	41	24	209:209	209:6253	209:21362	3908:900 19092:300
0x1e805884	46	2	209:209	209:21226	286:777	286:3033 1899:3033
64675:21092
0x1e433f4c	46	8	209:209	209:5097	209:21362	3908:900 19092:300
0x1f173294	48	16	209:209	209:21226	286:40	286:777 286:3040 5606:40
12955:5606
0x1c9f8e24	50	6	209:209	209:4069	209:21362	3908:900 19092:300
0x1c9f88e4	53	4	209:209	209:3193	209:21362	3908:900 19092:300
0x1f58a944	57	6	209:209	209:2073	209:21362	3908:900 19092:300
0x1ce6be44	80	2	209:209	209:999	209:40832
0x1c6e2374	80	2	209:777	209:41528
0x1f58ad6c	82	46	209:209	209:41528
0x1c6e2064	83	2	209:777	209:40832
0x1f588ecc	85	570	209:209	209:40832
0x1f57ccoc	98	2	209:209	209:21226	286:3031 13646:1044 13646:1124
13646:1154 13646:1164 13646:1184 13646:1194 13646:1204 13646:1214 13646:1224
13646:1234 13646:1244 13646:1254 13646:1264 13646:3000
Oxld65b2ac 117 6 209:209 209:999 209:31272
Ox1f5854ac 119 18 209:209 209:21226 286:108 286:111 286:777 286:3033

Table 8-13. Command Example fields: show ip bgp paths community

Field Description
Address Displays the internal address where the path attribute is stored.
Hash Displays the hash bucket where the path attribute is stored.
Refcount Displays the number of BGP routes using these communities.
Community Displays the community attributes in this BGP path.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

show ip bgp peer-group

Enables you to view information on the BGP peers in a peer group.

Syntax

show ip bgp [ipv4 unicast] peer-group [peer-group-name [detail | summary]]

Parameters

ipv4 unicast	(OPTIONAL) Enter the ipv4 unicast keywords to view information only related to ipv4 unicast routes.
peer-group-name	(OPTIONAL) Enter the name of a peer group to view information about that peer group only.
detail	(OPTIONAL) Enter the keyword detail to view detailed status information of the peers in that peer group.
summary	(OPTIONAL) Enter the keyword summary to view status information of the peers in that peer group.The output is the same as that found in show ip bgp summary command

Command Modes

EXEC

EXEC Privilege

Example

Figure 8-24. Command Example: show ip bgp peer-group (Partial)

Table 8-14. Command Example fields: show ip bgp peer-group

Line beginning with Description

Peer-group Displays the peer group's name.

Administratively shut Displays the peer group's status if the peer group is not enabled.If the peer group is enabled, this line is not displayed.

BGP version Displays the BGP version supported.

Minimum time Displays the time interval between BGP advertisements.

For address family Displays Pv4 Unicast as the address family.

BGP neighbor Displays the name of the BGP neighbor.

Table 8-14. Command Example fields: show ip bgp peer-group

	Line beginning with Description
	Number of peers Displays the number of peers currently configured for this peer group.
	Peer-group members: Lists the IP addresses of the peers in the peer group.If the address is outbound optimized, a * is displayed next to the IP address.
Related Commands	neighbor peer-group (assigning peers) Assign peer to a peer-group.
	neighbor peer-group (creating group) Create a peer group.
	show ip bgp peer-group (multicast) View information on the BGP peers in a peer group.
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.8.1.0 Introduced support on S-Series
	Version 7.7.1.0 Introduced support on C-Series
	Version 7.8.1.0 Introduced support on S-Series

show ip bgp regexp

Display the subset of BGP routing table matching the regular expressions specified.

Syntax

show ip bgp regexp regular-expression [character]

Parameters

regular-expression [character]

Enter a regular expression then use one or a combination of the following characters to match:

• = (period) any single character (including a white space)
  * = (asterisk) the sequences in a pattern (0 or more sequences)
• + = (plus) the sequences in a pattern (1 or more sequences)
• ? = (question mark) sequences in a pattern (either 0 or 1 sequences). You must enter an escape sequence (CTRL+v) prior to entering the ? regular expression.
• [ ] = (brackets) a range of single-character patterns.
• (·) = (parenthesis) groups a series of pattern elements to a single element
  • { } = (braces) minimum and the maximum match count
• = (caret) the beginning of the input string. If the caret is used at the beginning of a sequence or range, it matches on everything BUT the characters specified.
  • \$ = (dollar sign) the end of the output string.

Command Modes

EXEC

EXEC Privilege

Example Figure 8-25. Command Example: show ip bgp regexp (Partial)

FTOS#show ip bgp regexp ^2914+
BGP table version is 3700481, local router ID is 63.114.8.35
Status codes: s suppressed, S stale, d damped, h history, * valid, > best
Path source: I - internal, a - aggregate, c - confed-external, r - redistributed, n - network
Origin codes: i - IGP, e - EGP, ? - incomplete
Network	Next Hop	Metric	LocPrf	Weight Path
*>I 3.0.0.0/8	1.1.1.2	0	100	0 2914 1239 80 i
*>I 4.0.0.0/8	1.1.1.2	0	100	0 2914 3356 i
*>I 4.17.225.0/24	1.1.1.2	0	100	0 2914 11853 11853 11853 11853 11853 11853 6496
*>I 4.17.226.0/23	1.1.1.2	0	100	0 2914 11853 11853 11853 11853 11853 6496
*>I 4.17.251.0/24	1.1.1.2	0	100	0 2914 11853 11853 11853 11853 11853 6496
*>I 4.17.252.0/23	1.1.1.2	0	100	0 2914 11853 11853 11853 11853 6496
*>I 4.19.2.0/23	1.1.1.2	0	100	0 2914 701 6167 6167 6167 i
*>I 4.19.16.0/23	1.1.1.2	0	100	0 2914 701 6167 6167 6167 i
*>I 4.21.80.0/22	1.1.1.2	0	100	0 2914 174 4200 16559 i
*>I 4.21.82.0/24	1.1.1.2	0	100	0 2914 174 4200 16559 i
*>I 4.21.252.0/23	1.1.1.2	0	100	0 2914 701 6389 8063 19198 i
*>I 4.23.180.0/24	1.1.1.2	0	100	0 2914 3561 6128 30576 i
*>I 4.36.200.0/21	1.1.1.2	0	100	0 2914 14742 11854 14135 i
*>I 4.67.64.0/22	1.1.1.2	0	100	0 2914 11608 19281 i
*>I 4.78.32.0/21	1.1.1.2	0	100	0 2914 3491 29748 i
*>I 6.1.0.0/16	1.1.1.2	0	100	0 2914 701 668 i
*>I 6.2.0.0/22	1.1.1.2	0	100	0 2914 701 668 i
*>I 6.3.0.0/18	1.1.1.2	0	100	0 2914 701 668 i

Table 8-15. Command Example fields: show ip bgp regexp

Field Description

Network Displays the destination network prefix of each BGP route.

Next Hop Displays the next hop address of the BGP router.If 0.0.0.0 is listed in this column, then non-BGP routes exist in the router’s routing table.

Metric Displays the BGP router’s metric, if assigned.

LocPrf Displays the BGP LOCAL_PREF attribute for the route.

Weight Displays the route’s weight

Path Lists all the AS paths the route passed through to reach the destination network.

Command History

Version 8.3.5.0	Introduced on the S55.
Version 7.8.1.0	Introduced support on S-Series
Version 7.7.1.0	Introduced support on C-Series

show ip bgp summary

Enables you to view the status of all BGP connections.

Syntax show ip bgp [ipv4 unicast] summary

Command Modes

EXEC

EXEC Privilege

Example

Figure 8-26. Command Example: show ip bgp summary

Neighor	AS	MsgRcvd	MsgSent	TblVer	InQ	OutQ	Up/Down	State/Pfx
100.10.10.2	200	46	41	34	0	0	00:14:33	5
120.10.10.2	300	40	47	34	0	0	00:37:10	0
FTOS#

Table 8-16. Command Example fields: show ip bgp summary

Field Description
BGP router identifier Displays the local router ID and the AS number.
BGP table version Displays the BGP table version and the main routing table version.
network entries Displays the number of network entries and route paths and the amount of memory used to process those entries.
paths Displays the number of paths and the amount of memory used.
denied paths Displays the number of denied paths and the amount of memory used.
BGP path attribute entries Displays the number of BGP path attributes and the amount of memory used to process them.
BGP AS-PATH entries Displays the number of BGP AS_PATH attributes processed and the amount of memory used to process them.
BGP community entries Displays the number of BGP COMMUNITY attributes processed and the amount of memory used to process them. The show ip bgp community command provides more details on the COMMUNITY attributes.
Dampening enabled Displayed only when dampening is enabled. Displays the number of paths designated as history, dampened, or penalized.
Neighbor Displays the BGP neighbor address.
AS Displays the AS number of the neighbor.
MsgRcvd	Displays the number of BGP messages that neighbor received.
MsgSent	Displays the number of BGP messages that neighbor sent.
TblVer	Displays the version of the BGP table that was sent to that neighbor.
InQ	Displays the number of messages from that neighbor waiting to be processed.
OutQ	Displays the number of messages waiting to be sent to that neighbor. If a number appears in parentheses, the number represents the number of messages waiting to be sent to the peer group.

Table 8-16. Command Example fields: show ip bgp summary

Field Description
Up/Down Displays the amount of time	that the neighbor is in the Established stage.If the neighbor has never moved into the Established stage, the word never is displayed.The output format is:Time Established----Display Example< 1 day ---- 00:12:23 (hours:minutes:seconds)< 1 week ---- 1d21h (DaysHours)> 1 week ---- 11w2d (WeeksDays)
State/Pfxrcd If the neighbor is in Established stage, the number of network prefixes received.If a maximum limit was configured with theneighbor maximum-prefix command, (prfxd) appears in this column.If the neighbor is not in Established stage, the current stage is displayed (Idle, Connect, Active, OpenSent, OpenConfirm) When the peer is transitioning between states and clearing the routes received, the phrase (Purging) may appear in this column.If the neighbor is disabled, the phrase (Admin shut) appears in this column.

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

show running-config bgp

Use this feature to display the current BGP configuration.

Syntax show running-config bgp

Defaults No default values or behavior

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced on S-Series

Version 7.7.1.0 Introduced on C-Series

Version 7.6.1.0 Introduced on E-Series

timers bgp

Adjust BGP Keep Alive and Hold Time timers.

Syntax timers bgp keepalive holdtime

To return to the default, enter no timers bgp.

Parameters

keepalive	Enter a number for the time interval, in seconds, between keepalive messages sent to the neighbor routers. Range: 1 to 65535 Default: 60 seconds
holdtime	Enter a number for the time interval, in seconds, between the last keepalive message and declaring the router dead. Range: 3 to 65535 Default: 180 seconds

Defaults
No default values or behavior

Command Modes
ROUTER BGP
Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced on S-Series

Version 7.7.1.0 Introduced on C-Series

Version 7.6.1.0 Introduced on E-Series

MBGP Commands

Multiprotocol BGP (MBGP) is an enhanced BGP that enables multicast routing policy throughout the Internet and connecting multicast topologies between BGP and autonomous systems (AS). FTOS MBGP is implemented as per IETF RFC 1858.

FTOS version 7.8.1.0 and later support MBGP for IPv6 on E T and C platforms.

FTOS version 7.8.1.0 and later support MBGP for IPv4 Multicast only on the S platform.

FTOS version 8.2.1.0 and later support MBGP on the E-Series ExaScale _X platform.

The MBGP commands are:

- address family ipv4 multicast (MBGP)

- aggregate-address

- bgp dampening

- clear ip bgp ipv4 multicast

- clear ip bgp dampening

- clear ip bgp flap-statistics

- debug ip bgp dampening

- debug ip bgp dampening

- debug ip bgp dampening

- debug ip bgp peer-group updates

- debug ip bgp updates

- distance bgp

- neighbor activate

• neighbor advertisement-interval

- neighbor default-originate

• neighbor distribute-list
• neighbor filter-list
• neighbor maximum-prefix
• neighbor next-hop-self
• neighbor remove-private-as
• neighbor route-map
• neighbor route-reflector-client
• network
• redistribute
• redistribute ospf
  • show ip bgp ipv4 multicast
  • show ip bgp cluster-list
  • show ip bgp community
  • show ip bgp community-list
  • show ip bgp dampened-paths
  • show ip bgp filter-list
  • show ip bgp flap-statistics
  • show ip bgp inconsistent-as
  • show ip bgp ipv4 multicast neighbors
  • show ip bgp peer-group
  • show ip bgp summary

address family ipv4 multicast (MBGP)

This command changes the context to SAFI (Subsequent Address Family Identifier).

Syntax address family ipv4 multicast

To remove SAFI context, use the no address family ipv4 multicast command.

Parameters

ipv4	Enter the keyword ipv4 to specify the address family as IPV4.
multicast	Enter the keyword multicast to specify multicast as SAFI.

Defaults IPv4 Unicast

Command Modes

ROUTER BGP (conf-router_bgp)

Usage Information

All subsequent commands will apply to this address family once this command is executed. You can exit from this AFI/SAFI to the IPv4 Unicast (the default) family by entering exit and returning to the Router BGP context.

Command History

Version 7.8.1.0 Introduced support on S-Series for MBGP IPv4 Multicast

Version 7.7.1.0 Introduced support on C-Series

aggregate-address

Summarize a range of prefixes to minimize the number of entries in the routing table.

Syntax
aggregate-address ip-address mask [advertise-map map-name] [as-set] [attribute-map map-name] [summary-only] [suppress-map map-name]

Parameters	ip-address mask	Enter the IP address and mask of the route to be the aggregate address.Enter the IP address in dotted decimal format (A.B.C.D) and mask in / prefix format (/x).
	advertise-map map-name	(OPTIONAL) Enter the keywordsadvertise-mapfollowed by the name of a configured route map to set filters for advertising an aggregate route.
	as-set	(OPTIONAL) Enter the keywordas-setto generate path attribute information and include it in the aggregate.AS_SET includes AS_PATHand community information from the routes included in the aggregated route.
	attribute-map map-name	(OPTIONAL) Enter the keywordsattribute-mapfollowed by the name of a configured route map to modify attributes of the aggregate, excluding AS_PATH and NEXT_HOP attributes.
	summary-only	(OPTIONAL) Enter the keywordsummary-onlyto advertise only the aggregate address. Specific routes will not be advertised.
	suppress-map map-name	(OPTIONAL) Enter the keywordssuppress-mapfollowed by the name of a configured route map to identify which more-specific routes in the aggregate are suppressed.

Defaults

Not configured.

Command Modes

ROUTER BGP Address Family (conf-router_bgp_af)

Usage Information

At least one of the routes included in the aggregate address must be in the BGP routing table for the configured aggregate to become active.

Do not add the as-set parameter to the aggregate. If routes within the aggregate are constantly changing, the aggregate will flap to keep track of the changes in the AS_PATH.

In route maps used in the suppress-map parameter, routes meeting the deny clause are not suppress; in other words, they are allowed. The opposite is true: routes meeting the permit clause are suppressed.

If the route is injected via the network command, that route will still appear in the routing table if the summary-only parameter is configured in the aggregate-address command.

The summary-only parameter suppresses all advertisements. If you want to suppress advertisements to only specific neighbors, use the neighbor distribute-list command.

Command History

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

bgp dampening

Enable MBGP route dampening.

Syntax bgp dampening [half-life time] [route-map map-name]
To disable route dampening, use the no bgp dampening [half-life time] [route-map map-name] command.

Parameters	half-life time	(OPTIONAL) Enter the number of minutes after which the Penalty is decreased. After the router assigns a Penalty of 1024 to a route, the Penalty is decreased by half, after the half-life period expires.Range: 1 to 45.Default: 15 minutes
	route-map map-name	(OPTIONAL) Enter the keyword route-map followed by the name of a configured route map.Only match commands in the configured route map are supported.

Defaults Disabled.

Command Modes ROUTER BGP Address Family (conf-router_bgp_af)

Command History	Version 7.8.1.0 Introduced support on S-Series
	Version 7.7.1.0 Introduced support on C-Series
	Version 7.6.1.0 Introduced IPv6 MGBP support for E-Series

clear ip bgp ipv4 multicast

Reset MBGP sessions.

Syntax clear ip bgp ipv4 multicast * ip-address [dampening | flap-statistics] peer-group]

Parameters	* Enter the character * to clear all peers.
	ip-address	Enter an IP address in dotted decimal format to clear the prefixes from that neighbor.
	dampening	(OPTIONAL) Enter the keyword dampening to clear route flap dampening information.
	flap-statistics	(OPTIONAL) Enter the keyword flap-statistics to reset the flap statistics on all prefixes from that neighbor.
	peer-group	(OPTIONAL) Enter the keyword peer-group to clear all members of a peer-group.

Command Modes EXEC Privilege

Command History	Version 7.8.1.0 Introduced support on S-Series
	Version 7.7.1.0 Introduced support on C-Series

clear ip bgp dampening

Clear information on route dampening.

Syntax
clear ip bgp dampening ipv4 multicast network network-mask

Parameters	dampening	Enter the keyword dampening to clear route flap dampening information.
	network	(OPTIONAL) Enter the network address in dotted decimal format (A.B.C.D).
	network-mask	(OPTIONAL) Enter the network mask in slash prefix format (/x).
Command Modes	EXEC Privilege
Command History	Version 7.8.1.0 Introduced support on S-Series
	Version 7.7.1.0 Introduced support on C-Series
	Version 7.6.1.0 Introduced IPv6 MGBP support for E-Series

clear ip bgp flap-statistics

Clear BGP flap statistics, which includes number of flaps and the time of the last flap.

Syntax
clear ip bgp ipv4 multicast flap-statistics network | filter-list list | regexp regexp

Parameters	Network	(OPTIONAL) Enter the network address to clear flap statistics in dotted decimal format (A.B.C.D).
	filter-list list	(OPTIONAL) Enter the keywordfilter-listfollowed by the name of a configured AS-PATH list (max 16 characters).
	regexp regexp	(OPTIONAL) Enter the keywordregexpfollowed by regular expressions. Use one or a combination of the following:• . = (period) any single character (including a white space)• * = (asterisk) the sequences in a pattern (0 or more sequences)• + = (plus) the sequences in a pattern (1 or more sequences)• ? = (question mark) sequences in a pattern (either 0 or 1 sequences). You must enter an escape sequence (CTRL+v) prior to entering the ? regular expression.• [ ] = (brackets) a range of single-character patterns.• () = (parenthesis) groups a series of pattern elements to a single element• { } = (braces) minimum and the maximum match count• ^ = (caret) the beginning of the input string. If the caret is used at the beginning of a sequence or range, it matches on everything BUT the characters specified.• $ = (dollar sign) the end of the output string.
Command Modes	EXEC Privilege
Command History	Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

Version 7.6.1.0 Introduced IPv6 MGBP support for E-Series

debug ip bgp dampening

View information on routes being dampened.

Syntax

debug ip bgp ipv4 multicast dampening

To disable debugging, enter no debug ip bgp ipv4 multicast dampening

Parameters

dampening	Enter the keyword dampening to clear route flap dampening information.
EXEC Privilege
Version 7.8.1.0 Introduced support on S-Series
Version 7.7.1.0 Introduced support on C-Series
Version 7.6.1.0 Introduced IPv6 MGBP support for E-Series

debug ip bgp peer-group updates

View information about BGP peer-group updates.

debug ip bgp peer-group peer-group-name updates [in | out]

To disable debugging, enter no debug ip bgp peer-group peer-group-name updates [in | out] command.

Parameters

peer-group peer-group-name	Enter the keyword peer-group followed by the name of the peer-group.
updates	Enter the keyword updates to view BGP update information.
in	(OPTIONAL) Enter the keyword in to view only BGP updates received from neighbors.
out	(OPTIONAL) Enter the keyword out to view only BGP updates sent to neighbors.

Command Modes

EXEC Privilege

Command History

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

Version 7.6.1.0 Introduced IPv6 MGBP support for E-Series

debug ip bgp updates

View information about BGP updates.

debug ip bgp updates [in | out]

To disable debugging, enter no debug ip bgp updates [in | out] command.

Parameters

updates	Enter the keyword updates to view BGP update information.
in	(OPTIONAL) Enter the keyword in to view only BGP updates received from neighbors.
out	(OPTIONAL) Enter the keyword out to view only BGP updates sent to neighbors.

Command Modes
EXEC Privilege
Defaults
Disabled.
Command History
Version 7.8.1.0 Introduced support on S-Series
Version 7.7.1.0 Introduced support on C-Series
Version 7.6.1.0 Introduced IPv6 MGBP support for E-Series

distance bgp

Define an administrative distance for routes.

Syntax
distance bgp external-distance internal-distance local-distance
To return to default values, enter no distance bgp.
Parameters

external-distance	Enter a number to assign to routes learned from a neighbor external to the AS. Range: 1 to 255. Default: 20
internal-distance	Enter a number to assign to routes learned from a router within the AS. Range: 1 to 255. Default: 200
local-distance	Enter a number to assign to routes learned from networks listed in the network command. Range: 1 to 255. Default: 200

Defaults
external-distance = 20; internal-distance = 200; local-distance = 200.
Command Modes

ROUTER BGP (conf-router_bgp_af)

Caution: Force10 Networks recommends that you do not change the administrative distance of internal routes. Changing the administrative distances may cause routing table inconsistencies.

Usage Information

The higher the administrative distance assigned to a route means that your confidence in that route is low. Routes assigned an administrative distance of 255 are not installed in the routing table. Routes from confederations are treated as internal BGP routes.

Command History

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

Version 7.6.1.0 Introduced IPv6 MGBP support for E-Series

neighbor activate

This command allows the specified neighbor/peer group to be enabled for the current AFI/SAFI.

Syntax

neighbor [ip-address | peer-group-name] activate

To disable, use the no neighbor [ip-address | peer-group-name] activate command.

Parameters

ip-address	(OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.
peer-group-name	(OPTIONAL) Enter the name of the peer group
activate	Enter the keyword activate to enable the neighbor/peer group in the new AFI/SAFI.

Defaults

Disabled

Command Modes

ROUTER BGP Address Family (conf-router_bgp_af)

Usage Information

By default, when a neighbor/peer group configuration is created in the Router BGP context, it is enabled for the IPv4/Unicast AFI/SAFI. By using activate in the new context, the neighbor/peer group is enabled for AFI/SAFI.

Related Commands

address family ipv4 multicast (MBGP) Changes the context to SAFI

Command History

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

Version 7.6.1.0 Introduced IPv6 MGBP support for E-Series

neighbor advertisement-interval

Set the advertisement interval between BGP neighbors or within a BGP peer group.

Syntax

neighbor {ip-address | peer-group-name} advertisement-interval seconds

To return to the default value, use the no neighbor {ip-address | peer-group-name} advertisement-interval command.

Parameters

ip-address	Enter the IP address of the neighbor in dotted decimal format.
peer-group-name	Enter the name of the peer group to set the advertisement interval for all routers in the peer group.
seconds	Enter a number as the time interval, in seconds, between BGP advertisements.Range: 0 to 600 seconds.Default: 5 seconds for internal BGP peers; 30 seconds for external BGP peers.

Defaults

seconds = 5 seconds (internal peers); seconds = 30 seconds (external peers)

Command Modes

ROUTER BGP Address Family (conf-router_bgp_af)

Command History

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

Version 7.6.1.0 Introduced IPv6 MGBP support for E-Series

neighbor default-originate

Inject the default route to a BGP peer or neighbor.

Syntax

neighbor {ip-address | peer-group-name} default-originate [route-map map-name]

To remove a default route, use the no neighbor {ip-address | peer-group-name} default-originate command.

Parameters

ip-address	Enter the IP address of the neighbor in dotted decimal format.
peer-group-name	Enter the name of the peer group to set the default route of all routers in that peer group.
route-map map-name	(OPTIONAL) Enter the keyword route-map followed by the name of a configured route map.

Defaults

Not configured.

Command Modes

ROUTER BGP Address Family (conf-router_bgp_af)

Command History

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

Version 7.6.1.0 Introduced IPv6 MGBP support for E-Series

neighbor distribute-list

Distribute BGP information via an established prefix list.

Syntax

neighbor [ip-address | peer-group-name] distribute-list prefix-list-name [in | out]

To delete a neighbor distribution list, use the no neighbor [ip-address | peer-group-name] distribute-list prefix-list-name [in | out] command.

Parameters

ip-address	Enter the IP address of the neighbor in dotted decimal format.
peer-group-name	Enter the name of the peer group to apply the distribute list filter to all routers in the peer group.
prefix-list-name	Enter the name of an established prefix list.If the prefix list is not configured, the default is permit (to allow all routes).
in Enter the keyword in to distribute only inbound traffic.
out Enter the keyword out to distribute only outbound traffic.

Defaults	Not configured.
Command Modes	ROUTER BGP Address Family (conf-router_bgp_af)
Usage Information	Other BGP filtering commands include:neighbor filter-list, ip as-path access-list, and neighbor route-map.
Related Commands	ip as-path access-list Configure IP AS-Path ACL.
	neighbor filter-list Assign a AS-PATH list to a neighbor or peer group.
	neighbor route-map Assign a route map to a neighbor or peer group.
Command History	Version 7.8.1.0 Introduced support on S-Series
	Version 7.7.1.0 Introduced support on C-Series
	Version 7.6.1.0 Introduced IPv6 MGBP support for E-Series

neighbor filter-list

Configure a BGP filter based on the AS-PATH attribute.

Syntax neighbor [ip-address | peer-group-name] filter-list aspath access-list-name [in | out]

To delete a BGP filter, use the no neighbor [ip-address | peer-group-name] filter-list aspath access-list-name [in | out] command.

Parameters	ip-address	Enter the IP address of the neighbor in dotted decimal format.
	peer-group-name	Enter the name of the peer group to apply the filter to all routers in the peer group.
	access-list-name	Enter the name of an established AS-PATH access list (up to 140 characters).If the AS-PATH access list is not configured, the default is permit (to allow routes).
	in Enter the keyword in to filter inbound BGP routes.
	out Enter the keyword out to filter outbound BGP routes.
Defaults	Not configured.
mand Modes	ROUTER BGP Address Family (conf-router_bgp_af)
Usage Information	Use the ip as-path access-list command syntax in the CONFIGURATION mode to enter the AS-PATH ACL mode and configure AS-PATH filters to deny or permit BGP routes based on information in their AS-PATH attribute.
Related Commands	ip as-path access-list Enter AS-PATH ACL mode and configure AS-PATH filters.
Command History	Version 7.8.1.0 Introduced support on S-Series
	Version 7.7.1.0 Introduced support on C-Series
	Version 7.6.1.0 Introduced IPv6 MGBP support for E-Series

neighbor maximum-prefix

Control the number of network prefixes received.

Syntax

neighbor ip-address | peer-group-name maximum-prefix maximum [threshold] [warning-only] To return to the default values, use the no neighbor ip-address | peer-group-name maximum-prefix maximum command.

Parameters

ip-address	(OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.
peer-group-name	(OPTIONAL) Enter the name of the peer group.
maximum	Enter a number as the maximum number of prefixes allowed for this BGP router.Range: 1 to 4294967295.
threshold	(OPTIONAL) Enter a number to be used as a percentage of themaximumvalue.When the number of prefixes reaches this percentage of themaximumvalue,FTOS sends a message.Range: 1 to 100 percent.Default: 75
warning-only	(OPTIONAL) Enter the keyword warning-onlyto set the router to send a log message when the maximum value is reached. If this parameter is not set, the router stops peering when the maximum number of prefixes is reached.

Defaults

threshold = 75

Command Modes

ROUTER BGP Address Family (conf-router_bgp_af)

Command History

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

Version 7.6.1.0 Introduced IPv6 MGBP support for E-Series

neighbor next-hop-self

Enables you to configure the router as the next hop for a BGP neighbor.

Syntax

neighbor ip-address | peer-group-name next-hop-self

To return to the default setting, use the no neighbor ip-address | peer-group-name next-hop-self command.

Parameters

ip-address (OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.

peer-group-name (OPTIONAL) Enter the name of the peer group.

Defaults

Disabled.

Command Modes

ROUTER BGP Address Family (conf-router_bgp_af)

Usage Information

If the set next-hop command in the ROUTE-MAP mode is configured, its configuration takes precedence over the neighbor next-hop-self command.

Command History

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

Version 7.6.1.0 Introduced IPv6 MGBP support for E-Series

neighbor remove-private-as

Remove private AS numbers from the AS-PATH of outgoing updates.

Syntax

neighbor ip-address | peer-group-name remove-private-as

To return to the default, use the no neighbor ip-address | peer-group-name remove-private-as command.

Parameters

ip-address (OPTIONAL) Enter the IP address of the neighbor to remove the private AS numbers.

peer-group-name (OPTIONAL) Enter the name of the peer group to remove the private AS numbers

Defaults

Disabled (that is, private AS number are not removed).

Command Modes

ROUTER BGP Address Family (conf-router_bgp_af)

Command History

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

Version 7.6.1.0 Introduced IPv6 MGBP support for E-Series

neighbor route-map

Apply an established route map to either incoming or outbound routes of a BGP neighbor or c peer group.

Syntax

neighbor [ip-address | peer-group-name] route-map map-name [in | out]

To remove the route map, use the no neighbor [ip-address | peer-group-name] route-map map-name [in | out] command.

Parameters

ip-address (OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.

peer-group-name (OPTIONAL) Enter the name of the peer group.

map-name Enter the name of an established route map.

If the Route map is not configured, the default is deny (to drop all routes).

in Enter the keyword in to filter inbound routes.

out Enter the keyword out to filter outbound routes.

Defaults

Not configured.

Command Modes

ROUTER BGP Address Family (conf-router_bgp_af)

Usage Information	When you apply a route map to outbound routes, only routes that match at least one section of the route map are permitted.
	If you identify a peer group by name, the peers in that peer group inherit the characteristics in the Route map used in this command. If you identify a peer by IP address, the Route map overwrites either the inbound or outbound policies on that peer.
Command History	Version 7.8.1.0 Introduced support on S-Series
	Version 7.7.1.0 Introduced support on C-Series
	Version 7.6.1.0 Introduced IPv6 MGBP support for E-Series

neighbor route-reflector-client

Configure a neighbor as a member of a route reflector cluster.

Syntax

neighbor ip-address | peer-group-name route-reflector-client

To indicate that the neighbor is not a route reflector client or to delete a route reflector configuration, use the no neighbor ip-address | peer-group-name route-reflector-client command.

Parameters

ip-address

(OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.

peer-group-name (OPTIONAL) Enter the name of the peer group.

All routers in the peer group receive routes from a route reflector.

Defaults

Not configured.

Command Modes

ROUTER BGP Address Family (conf-router_bgp_af)

Usage Information

The first time you enter this command it configures the neighbor as a route reflector and members of the route-reflector cluster. Internal BGP (IBGP) speakers do not need to be fully meshed if you configure a route reflector.

When all clients of a route reflector are disabled, the neighbor is no longer a route reflector.

Command History

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

Version 7.6.1.0 Introduced IPv6 MGBP support for E-Series

network

Specify the networks for the BGP process and enter them in the BGP routing table.

Syntax

network ip-address mask [route-map map-name]

To remove a network, use the no network ip-address mask [route-map map-name] command.

Parameters

ip-address	Enter an IP address in dotted decimal format of the network.
mask	Enter the mask of the IP address in the slash prefix length format (for example, /24).The mask appears in command outputs in dotted decimal format (A.B.C.D).
route-mapmap-name	(OPTIONAL) Enter the keywordroute-mapfollowed by the name of an established route map.Only the following ROUTE-MAP mode commands are supported:match ip addressset communityset local-preferenceset metricset next-hopset originset weightIf the route map is not configured, the default is deny (to drop all routes).

Defaults

Not configured.

Command Modes

ROUTER BGP Address Family (conf-router_bgp_af)

Usage Information

FTOS resolves the network address configured by the network command with the routes in the main routing table to ensure that the networks are reachable via non-BGP routes and non-default routes.

Related Commands

redistribute Redistribute routes into BGP.

Command History

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

Version 7.6.1.0 Introduced IPv6 MGBP support for E-Series

redistribute

Redistribute routes into BGP.

Syntax

redistribute [connected | static] [route-map map-name]

To disable redistribution, use the no redistribution [connected | static] [route-map map-name] command.

Parameters

connected Enter the keyword connected to redistribute routes from physically connected interfaces.

	static	Enter the keywordstaticto redistribute manually configured routes.These routes are treated as incomplete routes.
	route-mapmap-name	(OPTIONAL) Enter the keywordroute-mapfollowed by the name of an established route map.Only the following ROUTE-MAP mode commands are supported:match ip addressset communityset local-preferenceset metricset next-hopset originset weightIf the route map is not configured, the default is deny (to drop all routes).
Defaults	Not configured.
Command Modes	ROUTER BGP Address Family (conf-router_bgp_af)
Usage Information	If you do not configuredefault-metriccommand, in addition to theredistributecommand, or there is no route map to set the metric, the metric for redistributed static and connected is “0”.
	To redistribute the default route (0.0.0.0/0) configure theneighbor default-originatecommand.
Related Commands	neighbor default-originateInject the default route.
Command History	Version 7.8.1.0 Introduced support on S-Series
	Version 7.7.1.0 Introduced support on C-Series
	Version 7.6.1.0 Introduced IPv6 MGBP support for E-Series

redistribute ospf

Redistribute OSPF routes into BGP.

Syntax

redistribute ospf process-id [[match external {1 | 2}] [match internal]] [route-map map-name]

To stop redistribution of OSPF routes, use the no redistribute ospf process-id command.

Parameters

process-id	Enter the number of the OSPF process. Range: 1 to 65535
match external {1 | 2}	(OPTIONAL) Enter the keywords match external to redistribute OSPF external routes. You can specify 1 or 2 to redistribute those routes only.
match internal	(OPTIONAL) Enter the keywords match internal to redistribute OSPF internal routes only.
route-map map-name	(OPTIONAL) Enter the keywords route-map followed by the name of a configured Route map.

Defaults

Not configured.

Command Modes ROUTER BGP Address Family (conf-router_bgp_af)

Usage Information When you enter redistribute ospf process-id command without any other parameters, FTOS redistributes all OSPF internal routes, external type 1 routes, and external type 2 routes. This feature is not supported by an RFC.

Command History	Version 7.8.1.0 Introduced support on S-Series
	Version 7.7.1.0 Introduced support on C-Series
	Version 7.6.1.0 Introduced IPv6 MGBP support for E-Series

show ip bgp ipv4 multicast

View the current MBGP routing table for the system.

Syntax show ip bgp ipv4 multicast [detail | network [network-mask] [length]]

Parameters

detail	(OPTIONAL) Enter the keyword detail to display BGP internal information for the IPv4 Multicast address family.
network	(OPTIONAL) Enter the network address (in dotted decimal format) of the BGP network to view information only on that network.
network-mask	(OPTIONAL) Enter the network mask (in slash prefix format) of the BGP network address.
longer-prefixes	(OPTIONAL) Enter the keyword longer-prefixes to view all routes with a common prefix.

Command Modes EXEC

EXEC Privilege

Example Figure 8-27. show ip bgp Command Example

FTOS#show ip bgp ipv4 multicast
BGP table version is 14, local router ID is 100.10.10.1
Status codes: s suppressed, S stale, d damped, h history, * valid, > best
Path source: I - internal, a - aggregate, c - confed-external, r - redistributed, n - network
Origin codes: i - IGP, e - EGP, ? - incomplete
	Network	Next Hop	Metric	LocPrf	Weight Path
*>I	25.1.0.0/16	25.25.25.25	0	100	0 i
*>I	25.2.0.0/16	25.25.25.26	0	100	0 ?
*>I	25.3.0.0/16	211.1.1.165	0	100	0 ?
*>r	144.1.0.0/16	0.0.0.0	0		32768 ?
*>r	144.2.0.0/16	100.10.10.10	0		32768 ?
*>r	144.3.0.0/16	211.1.1.135	0		32768 ?
*>n	145.1.0.0/16	0.0.0.0	0		32768 i
FTOS#

Table 8-17. show ip bgp Command Example Fields

Field Description
Network Displays the destination network prefix of each BGP route.
Next Hop Displays the next hop address of the BGP router.
Metric Displays the BGP route's metric, if assigned.
LocPrf Displays the BGP LOCAL_PREF attribute for the route.
Weight Displays the route's weight
Path Lists all the ASs the route passed through to reach the destination network.

Related Commands

Command History

show ip bgp community View BGP communities.

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

Version 7.6.1.0 Introduced IPv6 MGBP support for E-Series

Version 7.8.1.0 Introduced support on S-Series

show ip bgp cluster-list

View BGP neighbors in a specific cluster.

Syntax

show ip bgp ipv4 multicast cluster-list [cluster-id]

Parameters

cluster-id (OPTIONAL) Enter the cluster id in dotted decimal format.

Command Modes

EXEC

EXEC Privilege

Command History

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

Version 7.6.1.0 Introduced IPv6 MGBP support for E-Series

show ip bgp community

View information on all routes with Community attributes or view specific BGP community groups.

Syntax

show ip bgp ipv4 multicast community [community-number] [local-as] [no-export] [no-advertise]

Parameters

community-number	Enter the community number in AA:NN format where AA is the AS number (2 bytes) and NN is a value specific to that autonomous system.You can specify up to eight community numbers to view information on those community groups.
local-AS	Enter the keywords local-AS to view all routes with the COMMUNITY attribute of NO_EXPORT_SUBCONFED.All routes with the NO_EXPORT_SUBCONFED (0xFFFFF03) community attribute must not be advertised to external BGP peers.
no-advertise	Enter the keywords no-advertise to view all routes containing the well-known community attribute of NO_ADVERTISE.All routes with the NO_ADVERTISE (0xFFFFF02) community attribute must not be advertised to other BGP peers.
no-export	Enter the keywords no-export to view all routes containing the well-known community attribute of NO_EXPORT.All routes with the NO_EXPORT (0xFFFFF01) community attribute must not be advertised outside a BGP confederation boundary.

Command Modes

EXEC

EXEC Privilege

Usage Information

To view the total number of COMMUNITY attributes found, use the show ip bgp summary command. The text line above the route table states the number of COMMUNITY attributes found.

The show ip bgp community command without any parameters lists BGP routes with at least one BGP community attribute and the output is the same as for the show ip bgp command output.

Command History

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

Version 7.6.1.0 Introduced IPv6 MGBP support for E-Series

show ip bgp community-list

View routes that are affected by a specific community list.

Syntax

show ip bgp ipv4 multicast community-list community-list-name

Parameters

community-list-name

Enter the name of a configured IP community list.

Command Modes

EXEC

EXEC Privilege

Command History

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

show ip bgp dampened-paths

View BGP routes that are dampened (non-active).

Syntax

show ip bgp ipv4 multicast dampened-paths

Command Modes

EXEC

EXEC Privilege

Command

History

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

Version 7.6.1.0 Introduced IPv6 MGBP support for E-Series

show ip bgp filter-list

View the routes that match the filter lists.

Syntax

show ip bgp ipv4 multicast filter-list as-path-name

Parameters

as-path-name

Enter the name of an AS-PATH.

Command Modes

EXEC

EXEC Privilege

Command

History

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

Version 7.6.1.0 Introduced IPv6 MGBP support for E-Series

show ip bgp flap-statistics

View flap statistics on BGP routes.

Syntax

show ip bgp ipv4 multicast flap-statistics [ip-address [mask]] [filter-list as-path-name] [regexp regular-expression]

Parameters

ip-address

(OPTIONAL) Enter the IP address (in dotted decimal format) of the BGP network to view information only on that network.

mask

(OPTIONAL) Enter the network mask (in slash prefix (/x) format) of the BGP network address.

	filter-list as-path-name	(OPTIONAL) Enter the keyword filter-list followed by the name of a configured AS-PATH ACL.
	regexp regular-expression	Enter a regular expression then use one or a combination of the following characters to match:• . = (period) any single character (including a white space)• *= (asterisk) the sequences in a pattern (0 or more sequences)• + = (plus) the sequences in a pattern (1 or more sequences)• ? = (question mark) sequences in a pattern (either 0 or 1 sequences). You must enter an escape sequence (CTRL+v) prior to entering the ? regular expression.• [ ] = (brackets) a range of single-character patterns.• () = (parenthesis) groups a series of pattern elements to a single element• { } = (braces) minimum and the maximum match count• ^ = (caret) the beginning of the input string. If the caret is used at the beginning of a sequence or range, it matches on everything BUT the characters specified.• $ = (dollar sign) the end of the output string.
Command Modes	EXEC
	EXEC Privilege
Command History	Version 7.8.1.0 Introduced support on S-Series
	Version 7.7.1.0 Introduced support on C-Series
	Version 7.6.1.0 Introduced IPv6 MGBP support for E-Series

show ip bgp inconsistent-as

View routes with inconsistent originating Autonomous System (AS) numbers, that is, prefixes that are announced from the same neighbor AS but with a different AS-Path.

Syntax

show ip bgp ipv4 multicast inconsistent-as

Command Modes

EXEC

EXEC Privilege

Command History

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

show ip bgp ipv4 multicast neighbors

Enables you to view the information exchanged by BGP neighbors.

Syntax

show ip bgp ipv4 multicast neighbors [ip-address [advertised-routes | dampened-routes | detail | flap-statistics | routes]]

Parameters

ip-address	(OPTIONAL) Enter the IP address, in either IPv4 or IPv6 format, of the neighbor to view only BGP information exchanged with that neighbor.
advertised-routes	(OPTIONAL) Enter the keywords advertised-routes to view only the routes the neighbor sent.
dampened-routes	(OPTIONAL) Enter the keyword dampened-routes to view information on dampened routes from the BGP neighbor.
detail	(OPTIONAL) Display detailed neighbor information.
flap-statistics	(OPTIONAL) Enter the keyword flap-statistics to view flap statistics on the neighbor's routes.
routes	(OPTIONAL) Enter the keywords routes to view only the neighbor's feasible routes.

Command Modes

EXEC

EXEC Privilege

Example

Figure 8-28. Command Example: show ip bgp ipv4 multicast neighbors

FTOS#show ip bgp ipv4 multicast neighbors
BGP neighbor is 25.25.25.25, remote AS 6400, internal link
    BGP version 4, remote router ID 25.25.25.25
    BGP state ESTABLISHED, in this state for 00:02:18
    Last read 00:00:16, hold time is 180, keepalive interval is 60 seconds
Received 1404 messages, 0 in queue
    3 opens, 1 notifications, 1394 updates
    6 keepalives, 0 route refresh requests
    Sent 48 messages, 0 in queue
    3 opens, 2 notifications, 0 updates
    43 keepalives, 0 route refresh requests
Minimum time between advertisement runs is 5 seconds
Minimum time before advertisements start is 0 seconds
Capabilities received from neighbor for IPv4 unicast :
    MULTIPROTO_EXT(1)
    ROUTE_REFRESH(2)
    CISCO_ROUTE_REFRESH(128)
Capabilities advertised to neighbor for IPv4 Multicast :
    MULTIPROTO_EXT(1)
    ROUTE_REFRESH(2)
    CISCO_ROUTE_REFRESH(128)
Update source set to Loopback 0
For address family: IPv4 Multicast
BGP table version 14, neighbor version 14
3 accepted prefixes consume 12 bytes
Prefixes accepted 1 (consume 4 bytes), withdrawn 0 by peer
Prefixes advertised 0, rejected 0, withdrawn 0 from peer
Connections established 2; dropped 1
Last reset 00:03:17, due to user reset

Notification History
'Connection Reset' Sent : 1 Recv: 0

Local host: 100.10.10.1, Local port: 179
Foreign host: 25.25.25.25, Foreign port: 2290

BGP neighbor is 211.1.1.129, remote AS 640, external link
BGP version 4, remote router ID 0.0.0.0
BGP state ACTIVE, in this state for 00:00:36
Last read 00:00:41, hold time is 180, keepalive interval is 60 seconds
Received 28 messages, 0 notifications, 0 in queue
Sent 6 messages, 3 notifications, 0 in queue
Received 18 updates, Sent 6 updates
Route refresh request: received 0, sent 0
Minimum time between advertisement runs is 30 seconds

For address family: IPv4 Multicast
BGP table version 14, neighbor version 0
0 accepted prefixes consume 0 bytes
Prefix advertised 0, rejected 0, withdrawn 0

Connections established 3; dropped 3
Last reset 00:00:37, due to user reset

Notification History
'Connection Reset' Sent : 3 Recv: 0 

Table 8-18. Command Example fields: show ip bgp ipv4 multicast neighbors

Lines beginning with Description
BGP neighbor Displays the BGP neighbor address and its AS number. The last phrase in the line indicates whether the link between the BGP router and its neighbor is an external or internal one. If they are located in the same AS, then the link is internal; otherwise the link is external.
BGP version Displays the BGP version (always version 4) and the remote router ID.
BGP state Displays the neighbor's BGP state and the amount of time in hours:minutes:seconds it has been in that state.

Table 8-18. Command Example fields: show ip bgp ipv4 multicast neighbors

Lines beginning with	Description
Last read This line displays the following information:last read is the time (hours:minutes:seconds) the router read a message from its neighborhold time is the number of seconds configured between messages from its neighborkeepalive interval is the number of seconds between keepalive messages to help ensure that the TCP session is still alive.
Received messages This line displays the number of BGP messages received, the number of notifications (error messages) and the number of messages waiting in a queue for processing.
Sent messages The line displays the number of BGP messages sent, the number of notifications (error messages) and the number of messages waiting in a queue for processing.
Received updates This line displays the number of BGP updates received and sent.
Minimum time Displays the minimum time, in seconds, between advertisements.
(list of inbound and outbound policies)	Displays the policy commands configured and the names of the Route map, AS-PATH ACL or Prefix list configured for the policy.
For address family: Displays IPv4 Unicast as the address family.
BGP table version Displays the which version of the primary BGP routing table the router and the neighbor are using.
accepted prefixes Displays the number of network prefixes accepted by the router and the amount of memory used to process those prefixes.
Prefix advertised Displays the number of network prefixes advertised, the number rejected and the number withdrawn from the BGP routing table.
Connections established Displays the number of TCP connections established and dropped between the two peers to exchange BGP information.
Last reset Displays the amount of time since the peering session was last reset. Also states if the peer resets the peering session.If the peering session was never reset, the word never is displayed.
Local host: Displays the peering address of the local router and the TCP port number.
Foreign host: Displays the peering address of the neighbor and the TCP port number.

Related Commands

Command History

show ip bgp	View the current BGP routing table.
Version 7.8.1.0	Introduced support on S-Series
Version 7.7.1.0	Introduced support on C-Series
Version 7.6.1.0	Introduced IPv6 MGBP support for E-Series

show ip bgp peer-group

C E T S

Enables you to view information on the BGP peers in a peer group.

Syntax

show ip bgp ipv4 multicast peer-group [peer-group-name [detail | summary]]

Parameters

peer-group-name	(OPTIONAL) Enter the name of a peer group to view information about that peer group only.
detail	(OPTIONAL) Enter the keyword detail to view detailed status information of the peers in that peer group.
summary	(OPTIONAL) Enter the keyword summary to view status information of the peers in that peer group.The output is the same as that found in show ip bgp summary command

Command Modes
EXEC

EXEC Privilege
Related Commands

neighbor peer-group (assigning peers) Assign peer to a peer-group.

neighbor peer-group (creating group) Create a peer group.

show ip bgp peer-group View information on the BGP peers in a peer group.

Command History

Version 7.8.1.0 Introduced support on S-Series

Version 7.7.1.0 Introduced support on C-Series

Version 7.6.1.0 Introduced IPv6 MGBP support for E-Series

Version 7.5.1.0 Modified: added detail option

show ip bgp summary

Enables you to view the status of all BGP connections.

Syntax

show ip bgp ipv4 multicast summary

Command Modes

EXEC

EXEC Privilege

Example

Figure 8-29. Command Example: show ip bgp ipv4 multicast summary

FTOS#show ip bgp ipv4 multicast summary
BGP router identifier 100.10.10.1, local AS number 6400
BGP table version is 14, main routing table version 14
7 network entrie(s) and 7 paths using 972 bytes of memory
2 BGP path attribute entrie(s) using 112 bytes of memory
1 BGP AS-PATH entrie(s) using 35 bytes of memory
Neighbor	AS	MsgRcvd	MsgSent	TblVer	InQ	OutQ	Up/Down	State/Pfx
25.25.25.25	6400	21	9	14	0	0	00:02:04	3
211.1.1.129	640	28	6	0	0	0	00:00:21	Active
FTOS#

Table 8-19. Command Example fields: show ip bgp ipv4 multicast summary

Field Description
BGP router identifier Displays the local router ID and the AS number.
BGP table version Displays the BGP table version and the main routing table version.

Table 8-19. Command Example fields: show ip bgp ipv4 multicast summary

Field	Description
network entries Displays the number of network entries and route paths and the amount of memory used to process those entries.
BGP path attribute entries Displays the number of BGP path attributes and the amount of memory used to process them.
BGP AS-PATH entries Displays the number of BGP AS_PATH attributes processed and the amount of memory used to process them.
BGP community entries Displays the number of BGP COMMUNITY attributes processed and the amount of memory used to process them. The show ip bgp community command provides more details on the COMMUNITY attributes.
Dampening enabled Displayed only when dampening is enabled. Displays the number of paths designated as history, dampened, or penalized.
Neighbor Displays the BGP neighbor address.
AS Displays the AS number of the neighbor.
MsgRcvd Displays the number of BGP messages that neighbor received.
MsgSent Displays the number of BGP messages that neighbor sent.
TblVer Displays the version of the BGP table that was sent to that neighbor.
InQ Displays the number of messages from that neighbor waiting to be processed.
OutQ	Displays the number of messages waiting to be sent to that neighbor.If a number appears in parentheses, the number represents the number of messages waiting to be sent to the peer group.
Up/Down	Displays the amount of time (in hours:minutes:seconds) that the neighbor is in the Established stage.If the neighbor has never moved into the Established stage, the word never is displayed.
State/Pfx	If the neighbor is in Established stage, the number of network prefixes received.If a maximum limit was configured with the neighbor maximum-prefix command, (prfxd) appears in this column.If the neighbor is not in Established stage, the current stage is displayed (Idle, Connect, Active, OpenSent, OpenConfirm) When the peer is transitioning between states and clearing the routes received, the phrase (Purging) may appear in this column.If the neighbor is disabled, the phrase (Admin shut) appears in this column.

Command History

Version 7.8.1.0	Introduced support on S-Series
Version 7.7.1.0	Introduced support on C-Series
Version 7.6.1.0	Introduced IPv6 MGBP support for E-Series

BGP Extended Communities (RFC 4360)

BGP Extended Communities, as defined in RFC 4360, is an optional transitive BGP attribute. It provides two major advantages over Standard Communities:

• The range is extended from 4-octet (AA:NN) to 8-octet (Type:Value) to provide enough number communities.
• Communities are structured using a new “Type” field (1 or 2-octets), allowing you to provide granular control/filter routing information based on the type of extended communities.

The BGP Extended Community commands are:

• deny
• deny regex
• description
• ip extcommunity-list
• match extcommunity
• permit
• permit regex
• set extcommunity rt
• set extcommunity soo
  • show ip bgp ipv4 extcommunity-list
  • show ip bgp paths extcommunity
  • show ip extcommunity-list
  • show running-config extcommunity-list

deny

Use this feature to reject (deny) from the two types of extended communities, Route Origin (rt) or Site-of-Origin (soo).

Syntax

deny {rt | soo} {as4 ASN4:NN | ASN:NNNN | IPADDR:NN}

To remove (delete) the rule, use the no deny {rt | soo} {as4 ASN4:NN | ASN:NNNN | IPADDR:NN} command.

Parameters

rt Enter the keyword rt to designate a Route Origin community
soo	Enter the keyword soo to designate a Site-of-Origin community (also known as Route Origin).
as4 ASN4:NN	Enter the keyword as4 followed by the 4-octet AS specific extended community number in the format ASN4:NN (4-byte AS number:2-byte community value).
ASN:NNNN	Enter the 2-octet AS specific extended community number in the format ASN:NNNN (2-byte AS number:4-byte community value).
IPADDR:NN	Enter the IP address specific extended community in the format IPADDR:NN (4-byte IPv4 Unicast Address:2-byte community value)

Defaults

Not configured

Command Modes

CONFIGURATION (conf-ext-community-list)

Related Commands	permit Configure to add (permit) rules
	show ip extcommunity-list Display the Extended Community list
Command History	Version 7.8.1.0 Introduced on S-Series
	Version 7.7.1.0 Introduced on C-Series
	Version 7.6.1.0 Introduced on E-Series
deny regexC E S	This features enables you to specify an extended communities to reject (deny) using a regular expressions (regex).
Syntax	deny regex {regex}To remove, use theno deny regex {regex} command.
Parameters	regex Enter a regular expression.
Defaults	Not configured
Command Modes	CONFIGURATION (conf-ext-community-list)
Usage Information	Duplicate commands are silently accepted.
Example	Figure 8-30. Commands Example: deny regexpFTOS (conf-ext-community-list)#deny regexp 123FTOS (conf-ext-community-list)#
Related Commands	permit regex Permit a community using a regular expression
Command History	Version 7.8.1.0 Introduced on S-Series
	Version 7.7.1.0 Introduced on C-Series
	Version 7.6.1.0 Introduced on E-Series
descriptionC E S	Use this feature to designate a meaningful description to the extended community.
Syntax	description {line}To remove the description, use theno description {line} command.
Parameters	line Enter a description (maximum 80 characters).
Defaults	Not configured

Command Modes CONFIGURATION (conf-ext-community-list)

Command History

Version 7.8.1.0 Introduced on S-Series

Version 7.7.1.0 Introduced on C-Series

Version 7.6.1.0 Introduced on E-Series

ip extcommunity-list

Use this feature to enter the Extended Community-list mode.

Syntax

ip extcommunity-list word

To exit from this mode, use the exit command.

Parameters

word

Enter a community list name (maximum 16 characters).

Defaults

No defaults values or behavior

Command Modes

CONFIGURATION (conf-ext-community-list)

Usage Information

This new mode will change the prompt. See the example below.

Example

Figure 8-31. Command Example: ip extcommunity-list

FTOS(conf)#ip extcommunity-list test FTOS(conf-ext-community-list)#

Command History

Version 7.8.1.0 Introduced on S-Series

Version 7.7.1.0 Introduced on C-Series

Version 7.6.1.0 Introduced on E-Series

match extcommunity

Use this feature to match an extended community in the Route Map mode.

Syntax

match extcommunity { extended community list name}

To change the match, use the no match extcommunity {extended community list name} command.

Parameters

extended community list name

Enter the name of the extended community list.

Defaults

No defaults values or behavior

Command Modes

ROUTE MAP (config-route-map)

Usage Information

Like standard communities, extended communities can be used in route-map to match the attribute.

Example	Figure 8-32. Command Example: match extcommunityFTOS (config-route-map) #match extcommunity FreedombirdFTOS (config-route-map)#
Command History	Version 7.8.1.0 Introduced on S-Series
	Version 7.7.1.0 Introduced on C-Series
	Version 7.6.1.0 Introduced on E-Series
permitC E S	Use this feature to add rules (permit) from the two types of extended communities, Route Origin (rt) or Site-of-Origin (soo).
Syntax	permit {rt | soo} {as4 ASN4:NN| ASN:NNNN| IPADDR:NN}To change the rules, use theno permit {rt | soo} {as4 ASN4:NN| ASN:NNNN| IPADDR:NN} command.
Parameters	rt Enter the keyword rt to designate a Route Origin community
	soo	Enter the keywordsooto designate a Site-of-Origin community (also known as Route Origin).
	as4 ASN4:NN	Enter the keywordas4followed by the 4-octet AS specific extended community number in the format ASN4:NN (4-byte AS number:2-byte community value).
	ASN:NNNN	Enter the 2-octet AS specific extended community number in the format ASN:NNNN (2-byte AS number:4-byte community value).
	IPADDR:NN	Enter the IP address specific extended community in the format IPADDR:NN (4-byte IPv4 Unicast Address:2-byte community value)
Defaults	Not Configured
Command Modes	CONFIGURATION (conf-ext-community-list)
Related Commands	deny Configure to delete (deny) rules
	show ip extcommunity-list Display the Extended Community list
Command History	Version 7.8.1.0 Introduced on S-Series
	Version 7.7.1.0 Introduced on C-Series
	Version 7.6.1.0 Introduced on E-Series

permit regex

This features enables you specify an extended communities to forward (permit) using a regular expressions (regex).

Syntax permit regex {regex}

To remove, use the no permit regex {regex} command.

Parameters	regex	Enter a regular expression.
Defaults	Not configured
mand Modes	CONFIGURATION (conf-ext-community-list)
Usage Information	Duplicate commands are silently accepted.
Example	Figure 8-33. Command Example: permit regexpFTOS (conf-ext-community-list) #permit regexp 123FTOS (conf-ext-community-list) #
Related Commands	deny regex Deny a community using a regular expression
Command History	Version 7.8.1.0 Introduced on S-Series
	Version 7.7.1.0 Introduced on C-Series
	Version 7.6.1.0 Introduced on E-Series

set extcommunity rt

Use this feature to set Route Origin community attributes in Route Map.

Syntax
set extcommunity rt {as4 ASN4:NN [non-trans] | ASN:NNNN [non-trans] | IPADDR:NN [non-trans]} [additive]
To delete the Route Origin community, use the no set extcommunity command.
Parameters

as4 ASN4:NN	Enter the keyword as4 followed by the 4-octet AS specific extended community number in the format ASN4:NN (4-byte AS number:2-byte community value).
ASN:NNNN	Enter the 2-octet AS specific extended community number in the format ASN:NNNN (2-byte AS number:4-byte community value).
IPADDR:NN	Enter the IP address specific extended community in the format IPADDR:NN (4-byte IPv4 Unicast Address:2-byte community value)
additive	(OPTIONAL) Enter the keyword additive to add to the existing extended community.
non-trans	(OPTIONAL) Enter the keyword non-trans to indicate a non-transitive BGP extended community.

Defaults

No default values or behavior

Command Modes

ROUTE MAP (config-route-map)

Usage Information

If the set community rt and soo are in the same route-map entry, we can define the behavior as:

- If rt option comes before soo, with or without additive option, then soo overrides the communities set by rt

• If rt options comes after soo, without the additive option, then rt overrides the communities set by soo
  • If rt with additive option comes after soo, then rt adds the communities set by soo

Related Commands	set extcommunity soo Set extended community site-of-origin in route-map.
Command History	Version 7.8.1.0 Introduced on S-Series
	Version 7.7.1.0 Introduced on C-Series
	Version 7.6.1.0 Introduced on E-Series

set extcommunity soo

Use this feature to set extended community site-of-origin in Route Map.

Syntax
set extcommunity soo {as4 ASN4:NN | ASN:NNNN | IPADDR:NN [non-trans]}
To delete the site-of-origin community, use the no set extcommunity command.

Parameters	as4 ASN4:NN	Enter the keyword as4 followed by the 4-octet AS specific extended community number in the format ASN4:NN (4-byte AS number:2-byte community value).
	ASN:NNNN	Enter the 2-octet AS specific extended community number in the format ASN:NNNN (2-byte AS number:4-byte community value).
	IPADDR:NN	Enter the IP address specific extended community in the format IPADDR:NN (4-byte IPv4 Unicast Address:2-byte community value)
	non-trans	(OPTIONAL) Enter the keyword non-trans to indicate a non-transitive BGP extended community.

Defaults
No default behavior or values

Command Modes	ROUTE MAP (config-route-map)
Usage Information	If the set community rt and soo are in the same route-map entry, we can define the behavior as:If rt option comes before soo, with or without additive option, then soo overrides the communities set by rtIf rt options comes after soo, without the additive option, then rt overrides the communities set by sooIf rt with additive option comes after soo, then rt adds the communities set by soo

Related Commands	set extcommunity rt Set extended community route origins via the route-map
Command History	Version 7.8.1.0 Introduced on S-Series
	Version 7.7.1.0 Introduced on C-Series
	Version 7.6.1.0 Introduced on E-Series

show ip bgp ipv4 extcommunity-list

Use this feature to display IPv4 routes matching the extended community list name.

Syntax
show ip bgp [ipv4 [multicast | unicast] | ipv6 unicast] extcommunity-list name

Parameters	multicast	Enter the keyword multicast to display the multicast route information.
	unicast	Enter the keyword unicast to display the unicast route information.
	ipv6 unicast	Enter the keywords ipv6 unicast to display the IPv6 unicast route information.
	name	(OPTIONALLY) Enter the name of the extcommunity-list.

Defaults
No default values or behavior
Command Modes
EXEC
EXEC Privilege
Usage Information
If there is a type or sub-type that is not well-known, it will be displayed as:
TTSS:XX:YYYY

Where TT is type, SS is sub-type displayed in hexadecimal format, XX:YYYY is the value divided into 2-byte and 4-byte values in decimal format. This format is consistent with other vendors.

For example, if the extended community has type 0x04, sub-type 0x05, value 0x20 00 00 00 10 00, it will be displayed as:

0x0405:8192:4096

Non-transitive extended communities are marked with an asterisk, as shown in the figure below.

Example
Figure 8-34. Command Example: show ip bgp ipv4 multicast extcommunity-list

FTOS#show ip bgp ipv4 multicast extcommunity-listBGP routing table entry for 192.168.1.0/24, version 2

Paths: (1 available, table Default-IP-Routing-Table.)Not advertised to any peerReceived from :100.100.1.2 (2.4.0.1) BestAS_PATH : 200Next-Hop : 100.100.1.2, Cost : 0Origin IGP, Metric 4294967295 (Default), LocalPref 100, Weight 0, externalCommunities :300:400 500:600Extended Communities :RT:1111:4278080 SoO:35:4 SoO:36:50529043 SoO:37:50529044SoO:38:50529045 SoO:0.0.0.2:33 SoO:506.62106:34 0x0303:254:11223*

FTOS#

Command History
Version 7.8.1.0 Introduced on S-Series
Version 7.7.1.0 Introduced on C-Series
Version 7.6.1.0 Introduced on E-Series

show ip bgp paths extcommunity

Use this feature to display all BGP paths having extended community attributes.

Syntax

show ip bgp paths extcommunity

Command Modes

EXEC

EXEC Privilege

Example

Figure 8-35. Command Example: show ip bgp paths community (Partial)

FTOS#show ip bgp paths extcommunityTotal 1 Extended Communities
Address	Hash	Refcount	Extended Community
0x41d57024	12272	1	RT:7:200 SoO:5:300 SoO:0.0.0.3:1285
FTOS#

Table 8-20. Command Example fields: show ip bgp paths community

Field Description
Address Displays the internal address where the path attribute is stored.
Hash Displays the hash bucket where the path attribute is stored.
Recount Displays the number of BGP routes using these extended communities.
Community Displays the extended community attributes in this BGP path.

Command History

Version 7.8.1.0 Introduced on S-Series

Version 7.7.1.0 Introduced on C-Series

Version 7.6.1.0 Introduced on E-Series

show ip extcommunity-list

Display the IP extended community list.

Syntax

show ip extcommunity-list [word]

Parameters

word

Enter the name of the extended community list you want to view.

Defaults

Defaults.

Command Modes

EXEC

EXEC Privilege

Example

Figure 8-36. Command Example: show ip extcommunity-list

FTOS#show ip extcommunity-list test
ip extcommunity-list test
deny RT:1234:12
permit regexp 123
deny regexp 234
deny regexp 123
FTOS# 

Command History

Version 7.8.1.0 Introduced on S-Series

Version 7.7.1.0 Introduced on C-Series

Version 7.6.1.0 Introduced on E-Series

show running-config extcommunity-list

Use this feature to display the current configuration of the extended community lists.

Syntax

show running-config extcommunity-list [word]

Parameters

word

Enter the name of the extended community list you want to view.

Defaults

No default values or behavior

Command Modes

EXEC Privilege

Example

Figure 8-37. Command Example: show running-config extcommunity-list

FTOS#show running-config extcommunity-list test

ip extcommunity-list test
    permit rt 65033:200
    deny soo 101.11.11.2:23
    permit rt as4 110212:340
    deny regex ^(65001_)$
FTOS# 

Command History

Version 7.8.1.0 Introduced on S-Series

Version 7.7.1.0 Introduced on C-Series

Version 7.6.1.0 Introduced on E-Series

Bare Metal Provisioning

Overview

Bare Metal Provisioning version 2.0 is supported on the following platforms: S55 S60 S4810 Z

In a data center network, Bare Metal Provisioning (BMP) automates the configuration and updating of switches, ensuring standard configurations across installed devices.

You can configure auto-configuration on a single switch or on multiple switches. BMP allows you to set up a group of switches with a minimum of effort, but is also useful for quick configuration of a single switch.

For additional information on BMP in an auto-configuration mode, refer to the Open Automation Guide.

Note: BMP 2.0 does not support stacking in this release.

BMP eases configuration by automating the following steps:

• Boot images and running configurations are specified in a DHCP server.
• Switch boots up in Layer 3 mode with interfaces already in no shutdown mode and only enabling some basic protocols to protect the switch and the network.
• The first port that receives the DHCP server response retains the IP address provided by the DHCP server during the BMP process. All other management and user ports are shut down.
• Files are automatically downloaded from a file server.
• After the BMP process is complete, the IP address is released and the configuration is applied by the switch.

Commands

• reload-type
  • show reload-type
• stop jump-start

reload-type

BMP 2.0 auto-configuration mode: Configure a switch to reload in normal mode or as a DHCP client with all ports configured for Layer 3 traffic.

Syntax

reload-type {normal-reload | jump-start [config-download {enable | disable}] [dhcp-timeout minutes] [vendor-class-identifier description]}

Parameters

normal-reload	The switch reloads in normal mode using the FTOS image and startup configuration file stored in the local flash.
jump-start	The switch reloads in JumpStart mode as a DHCP client.
config-download {enable | disable}	(Optional) Configure whether the switch boots up using the configuration file downloaded from the DHCP/file servers (enable) OR if the downloaded file will be discarded and the startup configuration file stored in the local flash will be used (disable). Default: None
dhcp-timeout minutes	(Optional) Configure the DHCP timeout (in minutes) after which the JumpStart reload stops. Range: 0 to 50. If you enter 0, the switch waits until it receives a response from a DHCP server. Default: DHCP timeout is set to 0. The switch tries to contact a DHCP server an infinite (no limit) number of times.
vendor-class-identifier description	(Optional) Include a brief description in the user defined field in DHCP option 60. You can enter a maximum of 64 characters.

Defaults

A switch running BMP 2.0 reloads in JumpStart mode as a DHCP client with all ports configured for Layer 3 traffic.

Command Modes

CONFIGURATION

Command History

Version 8.3.5.3 Introduced on S55

Version 8.3.3.8 Introduced on S60

Version 8.3.11.4 Introduced on Z9000

Version 8.3.10.1 Introduced on S4810.

Version 8.3.5.6 The reload-type command was moved from EXEC Privilege mode to CONFIGURATION mode. The vendor-class-identifier keyword and the description variable were introduced on S55 and S60 platforms.

Usage Information

For an initial setup, the config-download parameter of the reload-type command is enabled. After the configuration file is successfully downloaded, the config-download parameter is automatically disabled. You can enable it again using the reload-type command.

After you set the auto-configuration mode (Jumpstart or Normal reload) using the reload-type command, you must enter the reload command to reload the switch in the configured mode.

When a switch reloads in Jumpstart mode, all ports, including the management port, are automatically configured as Layer 3 physical ports. The switch acts as a DHCP client on the ports for a user-configured time (dhcp-timeout option). You can reconfigure the default startup configuration and DHCP timeout values.

If a switch enters a loop while reloading in Jumpstart mode because the switch continuously tries to contact a DHCP server and a DHCP server is not found, connect to the switch using the console terminal and enter the stop jump-start command to interrupt the reload and boot up in normal mode. The startup configuration is then loaded from the local flash on the switch and the auto-configuration mode is automatically changed to Normal reload.

Use the reload-type command in BMP 2.0 to toggle between Normal and Jumpstart auto-configuration modes. The reload settings for the auto-configuration mode that you configure are stored in memory and retained for future reboots and BMP software upgrades. You can enter the reload command at any time to reload the switch in the last configured mode: Normal reload or Jumpstart mode.

Related Commands

show reload-type Display the current reload mode (Normal or jump-start mode)

stop jump-start Stops the Jumpstart process to prevent a loop if the DHCP server is not found.

show reload-type

S55	S60
S4810	Z

Display the currently configured reload mode.

Syntax show reload-type

Defaults None

Command Modes EXEC Privilege

Command History

Version 8.3.5.3 Introduced on S55.

Version 8.3.3.8 Introduced on S60.

Version 8.3.11.4 Introduced on Z9000

Version 8.3.10.1 Introduced on S4810.

Usage Information Use the show reload-type command to check the currently configured auto-configuration mode (Jumpstart or Normal reload) on a switch running BMP 2.0.

You can also use the show bootvar command to display the current reload mode for BMP 2.0 with the path of the FTOS image file retrieved from a DHCP server.

Example FTOS#show reload type

Reload-Type : jump-start [Next boot :jump-start]
config-download : enable
dhcp-timeout : 10
vendor-class-identifier : test 

Related Commands

reload-type Configure the reload mode as normal or Jumpstart.

stop jump-start

S55	S60
S4810	Z

Stop the switch from reloading in Jumpstart mode to prevent an infinite loop.

Syntax stop jump-start

Defaults None

Command Modes EXEC Privilege

Command History	Version 8.3.5.3 Introduced on S55.
	Version 8.3.3.8 Introduced on S60.
	Version 8.3.11.4 Introduced on Z9000
	Version 8.3.10.1 Introduced on S4810.

Related Commands

reload-type Configure the reload mode as normal or Jumpstart.

Usage Information Use the stop jump-start command from the console of a switch running BMP 2.0 if the switch enters a loop while reloading in Jumpstart mode; loop occurs when the switch is continuously trying to contact a DHCP server and a DHCP server is not found. The stop jump-start command stops the switch from connecting to the DHCP server. After the stop jump-start command is used, the next default reload type will be a normal reload. This will be indicated in the show reload-type command.

If you apply the stop jump-start command when the device is in Normal reload mode, the following message appears:

% Warning: The stop jump-start CLI is not applicable in the normal mode.

Content Addressable Memory (CAM)

Overview

Content Addressable Memory (CAM) commands are supported C-Series, E-Series TeraScale and S-Series, as indicated by the symbols under each command heading: C E T S.

Note: Not all CAM commands are supported on all platforms. Be sure to note the platform symbol when looking for a command.

Warning: If you are using these features for the first time, contact Dell Networking Technical Assistance Center (TAC) for guidance. For information on contacting Dell Networking TAC, visit the Dell Networking website at http://support.dell.com/force10

This chapter includes the following sections:

• CAM Profile Commands

CAM Profile Commands

The CAM profiling feature enables you to partition the CAM to best suit your application. For example:

• Configure more Layer 2 FIB entries when the system is deployed as a switch.
• Configure more Layer 3 FIB entries when the system is deployed as a router.
• Configure more ACLs (when IPv6 is not employed).
• Hash MPLS packets based on source and destination IP addresses for LAGs.
• Hash based on bidirectional flow for LAGs.
• Optimize the VLAN ACL Group feature, which permits group VLANs for IP egress ACLs.

Important Points to Remember

• CAM Profiles are available on FTOS versions 6.3.1.1 and later for the E-Series TeraScale.
• FTOS versions 7.8.1.0 and later support CAM allocations on the C-Series and S-Series.
• All line cards within a single system must have the same CAM profile (including CAM sub-region configurations); this profile must match the system CAM profile (the profile on the primary RPM).

• FTOS automatically reconfigures the CAM profile on line cards and the secondary RPM to match the system CAM profile by saving the correct profile on the card and then rebooting it.

• The CAM configuration is applied to entire system when you use CONFIGURATION mode commands. You must save the running-configuration to affect the change.

• When budgeting your CAM allocations for ACLs and QoS configurations, remember that ACL and QoS rules might consume more than one CAM entry depending on complexity. For example, TCP and UDP rules with port range options might require more than one CAM entry.
• After you install a secondary RPM, copy the running-configuration to the startup-configuration so that the new RPM has the correct CAM profile.
• You MUST save your changes and reboot the system for CAM profiling or allocations to take effect.

The CAM Profiling commands are:

• cam-acl
• cam-acl-egress
• cam-optimization
• cam-profile
  • show cam-acl
  • show cam-profile
  • show cam-usage
• test cam-usage

cam-acl

Allocate CAM for IPv4 and IPv6 ACLs

Syntax

cam-acl {default | l2acl number ipv4acl number ipv6acl number, ipv4qos number l2qos number, l2pt number ipmacacl number ecfmacl number [vman-qos | vman-dual-qos number}

Parameters

default	Use the default CAM profile settings, and set the CAM as follows.L3 ACL (ipv4acl): 6L2 ACL(l2acl): 5IPv6 L3 ACL (ipv6acl): 0L3 QoS (ipv4qos): 1L2 QoS (l2qos): 1
l2acl number ipv4acl number	Allocate space to each CAM region.
ipv6acl number, ipv4qos number	Enter the CAM profile name followed by the amount to be allotted.
l2qos number, l2pt number	The total space allocated must equal 13.
ipmacacl number ecfmacl number[vman-qos | vman-dual-qosnumber	The ipv6acl range must be a factor of 2.

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on the S55.
Version 8.3.1.0	Added ecfmacl, vman-qos, and vman-dual-qos keywords.
Version 8.2.1.0 Introduced on the S-Series
Version 7.8.1.0 Introduced on the C-Series

Usage Information

You must save the new CAM settings to the startup-config (write-mem or copy run start) then reload the system for the new settings to take effect.

The total amount of space allowed is 16 FP Blocks. System flow requires 3 blocks and these cannot be reallocated.

When configuring space for IPv6 ACLs, the total number of Blocks must equal 13.

Ranges for the CAM profiles are 1-10, except for the ipv6acl profile which is 0-10. The ipv6acl allocation must be a factor of 2 (2, 4, 6, 8, 10).

cam-acl-egress

S60

Allocate CAM for egress ACLs

Syntax

cam-acl-egress default | l2acl

Parameters

default	Reset egress CAM ACL entries to default settings.
l2acl number	Allocate space for Layer 2 egress ACL.Range: 1-4 FP blocks

Command Modes

CONFIGURATION

Version 8.3.5.0 Introduced on the S55.

Command History

cam-optimization

C S

Optimize CAM utilization for QoS Entries by minimizing require policy-map CAM space.

Syntax

cam-optimization [qos]

Parameters

qos	Optimize CAM usage for Quality of Service (QoS)

Command Modes

CONFIGURATION

Disabled

Defaults

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.2.1.0 Introduced on the s-Series

Version 7.8.1.0 Introduced on the C-Series and S-Series

Usage Information

When this command is enabled, if a Policy Map containing classification rules (ACL and/or dscp/ip-precedence rules) is applied to more than one physical interface on the same port pipe, only a single copy of the policy will be written (only 1 FP entry will be used).

Note that an ACL itself may still require more that a single FP entry, regardless of the number of interfaces. Refer to IP Access Control Lists, Prefix Lists, and Route-map in the FTOS Configuration Guide for complete discussion.

cam-profile

Set the default CAM profile and the required microcode.

Syntax

cam-profile profile microcode microcode

Parameters

profile

Choose one of the following CAM profiles:Enter the keyworddefaultto specify the default CAM profile.Enter the keywordeg-defaultto specify the default CAM profile for EG (dual-CAM) line cards.Enter the keywordipv4-320kto specify the CAM profile that provides 320K entries for the IPv4 Forwarding Information Base (FIB).Enter the keywordipv4-egacl-16kto specify the CAM profile that provides 16K entries for egress ACLs.Enter the keywordipv6-extaclto specify the CAM profile that provides IPv6 functionality.Enter the keywordl2-ipv4-inaclto specify the CAM profile that provides 32K entries for ingress ACLs.Enter the keywordunified-defaultto specify the CAM profile that maintains the CAM allocations for the IPv6 and IPv4 FIB while allocating more CAM space for the Ingress and Egress Layer 2 ACL, and IPv4 ACL regions.Enter the keywordipv4-vrfto specify the CAM profile that maintains the CAM allocations for the IPv4 FIB while allocating CAM space for VRF.Enter the keywordipv4-v6-vrfto specify the CAM profile that maintains the CAM allocations for the IPv4 and IPv6FIB while allocating CAM space for VRF.Enter the keywordipv4-64k-ipv6to specify the CAM profile that provides an alternate to ipv6-extacl that redistributes CAM space from the IPv4FIB to IPv4Flow and IPv6FIB.

microcodemicrocode

Choose a microcode based on the CAM profile you chose. Not all microcodes are available to be paired with a CAM profile.Enter the keyworddefaultto select the microcode that distributes CAM space for a typical deployment.Enter the keywordlag-hash-alignto select the microcode for applications that require the same hashing for bi-directional traffic.Enter the keywordlag-hash-mplsto select the microcode for hashing based on MPLS labels (up to five labels deep).Enter the keywordipv6-extaclto select the microcode for IPv6.Enter the keywordacl-groupto select the microcode for applications that need 16k egress IPv4 ACLs.Enter the keywordipv4-vrfto select the microcode for IPv4 VRF applications.Enter the keywordipv4-v6-vrfto select the microcode forIPv4 and IPv6 VRF applications.

Defaults

cam-profile default microcode default

Command Modes

CONFIGURATION

Command History

Version 8.2.1.0

Added support for ipv4-64k-ipv6 profile

Version 7.9.1.0 Added support for VRF protocols.

Version 7.5.1.0 Added the 12-ipv4-inacI CAM profile

Usage Information

Version 7.4.2.0 Added the unified-default CAM profile and lag-hash-align microcode

Version 7.4.1.0 Added the lag-hash-mpls microcode

Version 6.5.1.0 Added the cg-default and ipv4-320k CAM profiles

Version 6.3.1.0 Introduced on E-Series

You must save the running configuration using the command copy running-config startup-config after changing the CAM profile from CONFIGURATION mode. CAM profile changes take effect after the next chassis reboot.

Note: Do not use the ipv4-egacl-16 CAM profile for Layer 2 egress ACLs.

Note: Do not make any changes to the CAM profile after you change the profile to ipv4-320K and save the configuration until after you reload the chassis; any changes lead to unexpected behavior. After you reload the chassis, you may make changes to the IPv4 Flow partition.

show cam-acl

Display the details of the CAM profiles on the chassis and all line cards.

Syntax

show cam-acl

Defaults

None

Command Modes

EXEC Privilege

Command History

Version 7.8.1.0 Introduced on C-Series

Usage Information

The display reflects the settings implemented with the cam-acl command.

Example

Figure 10-1. Command Output: show cam-acl (default)

FTOS#show cam-acl
-- Chassis Cam ACL --
Current Settings(in block sizes)
L2Acl : 5
Ipv4Acl : 6
Ipv6Acl : 0
Ipv4Qos : 1
L2Qos : 1
-- Line card 4 --
Current Settings(in block sizes)
L2Acl : 5
Ipv4Acl : 6
Ipv6Acl : 0
Ipv4Qos : 1
L2Qos : 1
FTOS# 

Figure 10-2. Command Output: show cam-acl (non-default)

show cam-profile

E Display the details of the CAM profiles on the chassis and all line cards.

Syntax show cam-profile [profile microcode microcode | summary]

Parameters

profile	(OPTIONAL) Choose a single CAM profile to display:Enter the keyworddefaultto specify the default CAM profile.Enter the keywordeg-defaultto specify the default CAM profile for EG (dual-CAM) line cards.Enter the keywordipv4-320kto specify the CAM profile that provides 320K entries for the IPv4 Forwarding Information Base (FIB).Enter the keyword ipv4-egacl-16kto specify the CAM profile that provides 16K entries for egress ACLs.Enter the keyword ipv6-extaclto specify the CAM profile that provides IPv6 functionality.Enter the keyword l2-ipv4-inaclto specify the CAM profile that provides 32K entries for ingress ACLs.Enter the keyword unified-defaultto specify the CAM profile that maintains the CAM allocations for the IPv6 and IPv4 FIB while allocating more CAM space for the Ingress and Egress Layer 2 ACL, and IPv4 ACL regions.Enter the keyword ipv4-vrfto specify the CAM profile that maintains the CAM allocations for the IPv4 FIB while allocating CAM space for VRF.Enter the keyword ipv4-v6-vrfto specify the CAM profile that maintains the CAM allocations for the IPv4 and IPv6FIB while allocating CAM space for VRF.
microcode microcode	Choose the microcode to display. Not all microcodes are available to be paired with a CAM profile.Enter the keyworddefaultto select the microcode that distributes CAM space for a typical deployment.Enter the keywordlag-hash-alignto select the microcode for applications that require the same hashing for bi-directional traffic.Enter the keyword lag-hash-mplsto select the microcode for hashing based on MPLS labels (up to five labels deep).Enter the keyword ipv6-extaclto select the microcode for IPv6.Enter the keyword acl-groupto select the microcode for applications that need 16k egress IPv4 ACLs.Enter the keyword ipv4-vrfto select the microcode for IPv4 VRF applications.Enter the keyword ipv4-v6-vrfto select the microcode forIPv4 and IPv6 VRF applications.Enter the keyword ipv4-64k-ipv6to specify the CAM profile that provides an alternate to ipv6-extacl that redistributes CAM space from the IPv4FIB to IPv4Flow and IPv6FIB.
summary	(OPTIONAL) Enter this keyword to view a summary listing of the CAM profile and microcode on the chassis and all line cards.

Defaults

None

Command Modes

EXEC Privilege

Command History

Version 8.2.1.0 Added support for ipv4-64k-ipv6 profile

Version 7.9.1.0 Added support for VRF protocols.

Version 6.3.1.0 Introduced on E-Series

Usage Information

If the CAM profile has been changed, this command displays the current CAM profile setting in one column and in the other column displays the CAM profile and the microcode that will be configured for the chassis and all online line cards after the next reboot.

Example 1 Figure 10-3. Command Output: show cam-profile summary

Example 2 Figure 10-4. Command Output: show cam-profile

FTOS#show cam-profile
-- Chassis Cam Profile --
CamSize	: 18-Meg
	: Current Settings : Next Boot
Profile Name	: DEFAULT	: DEFAULT
L2FIB	: 32K entries	: 32K entries
L2ACL	: 1K entries	: 1K entries
IPv4FIB	: 256K entries	: 256K entries
IPv4ACL	: 12K entries	: 12K entries
IPv4Flow	: 24K entries	: 24K entries
EgL2ACL	: 1K entries	: 1K entries
EgIPv4ACL	: 1K entries	: 1K entries
Reserved	: 8K entries	: 8K entries
IPv6FIB	: 0 entries	: 0 entries
IPv6ACL	: 0 entries	: 0 entries
IPv6Flow	: 0 entries	: 0 entries
EgIPv6ACL	: 0 entries	: 0 entries
MicroCode Name	: Default	: Default
-- Line card 0 --
CamSize	: 18-Meg
	: Current Settings : Next Boot
Profile Name	: DEFAULT	: DEFAULT
L2FIB	: 32K entries	: 32K entries
L2ACL	: 1K entries	: 1K entries
IPv4FIB	: 256K entries	: 256K entries
IPv4ACLIPv4Flow	: 12K entries: 24K entries: 1K entries: 1K entries: 8K entries: 8K entries: 8K entries: 8K entries: 8K entries: 8K entries: 8K entries: 8K entries: 8K entries: 8K entries: 8K entries: 8K entries: 8K entries: 8K entries: 8K entries: 8K entries: 8K entries: 8K entries: 8K entries: 8K entries: 7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7

show cam-usage

E Display Layer 2, Layer 3, ACL, or all CAM usage statistics.

Syntax show cam-usage [acl | router | switch]

Parameters

acl	(OPTIONAL) Enter this keyword to display Layer 2 and Layer 3 ACL CAM usage.
router	(OPTIONAL) Enter this keyword to display Layer 3 CAM usage.
switch	(OPTIONAL) Enter this keyword to display Layer 2 CAM usage.

Defaults

None

Command Modes

EXEC Privilege

Command History

Version 6.5.1.0 Introduced on E-Series

Example

Figure 10-5. Command Example: show cam-usage

FTOS#show cam-usage
Linecard	Portpipe	CAM Partition	Total CAM	Used CAM	Available CAM
1	0	IN-L2 ACL	1008	320	688
		IN-L2 FIB	32768	1132	31636
		IN-L3 ACL	12288	2	12286
		IN-L3 FIB	262141	14	262127
		IN-L3-SysFlow	2878	45	2833
		IN-L3-TrcList	1024	0	1024
		IN-L3-McastFib	9215	0	9215
		IN-L3-Qos	8192	0	8192
		IN-L3-PBR	1024	0	1024
		IN-V6 ACL	0	0	0
		IN-V6 FIB	0	0	0
		IN-V6-SysFlow	0	0	0
		IN-V6-McastFib	0	0	0
		OUT-L2 ACL	1024	0	1024
		OUT-L3 ACL	1024	0	1024
		OUT-V6 ACL	0	0	0
1	1	IN-L2 ACL	320	0	320
		IN-L2 FIB	32768	1136	31632
		IN-L3 ACL	12288	2	12286
		IN-L3 FIB	262141	14	262127
		IN-L3-SysFlow	2878	44	2834
--More--

Example

Figure 10-6. Command Example: show cam-usage acl

FTOS#show cam-usage acl
Linecard	Portpipe	CAM Partition	Total CAM	Used CAM	Available CAM
11	0	IN-L2 ACL	1008	0	1008
		IN-L3 ACL	12288	2	12286
		OUT-L2 ACL	1024	2	1022
		OUT-L3 ACL	1024	0	1024
FTOS#

Example

Figure 10-7. Command Example: show cam-usage router

Linecard	Portpipe	CAM Partition	Total CAM	Used CAM	Available CAM
11	0	IN-L3 ACL	8192	3	8189
		IN-L3 FIB	196607	1	196606
		IN-L3-SysFlow	2878	0	2878
		IN-L3-TrcList	1024	0	1024
		IN-L3-McastFib	9215	0	9215
		IN-L3-Qos	8192	0	8192
		IN-L3-PBR	1024	0	1024
		OUT-L3 ACL	16384	0	16384
11	1	IN-L3 ACL	8192	3	8189
		IN-L3 FIB	196607	1	196606
		IN-L3-SysFlow	2878	0	2878
		IN-L3-TrcList	1024	0	1024
		IN-L3-McastFib	9 215	0	9215
		IN-L3-Qos	8192	0	8192
		IN-L3-PBR	1024	0	1024
		OUT-L3 ACL	16384	0	16384

Example

Figure 10-8. Command Example: show cam-usage switch

Linecard	Portpipe	CAM Partition	Total CAM	Used CAM	Available CAM
11	0	IN-L2 ACL	7152	0	7152
		IN-L2 FIB	32768	1081	31687
		OUT-L2 ACL	0	0	0
11	1	IN-L2 ACL	7152	0	7152
		IN-L2 FIB	32768	1081	31687
		OUT-L2 ACL	0	0	0
FTOS#

test cam-usage

Verify that enough CAM space is available for the IPv6 ACLs you have created.

Syntax

test cam-usage service-policy input input policy name linecard {number / all}

Parameters

policy-map name	Enter the name of the policy-map to verify.
number	Enter all to get information for all the linecards/stack-units, or enter the linecard/ stack-unit number to get information for a specific card.Range: 0-6 for E-Series, 0-7 for C-Series, 0-11 for S55; 0-7 for all other S-Series
None
EXEC Privilege
Version 8.3.5.0 Introduced on the S55.
Version 7.8.1.0 Introduced
This command applies to both IPv4 and IPv6 CAM Profiles, but is best used when verifying QoS optimization for IPv6 ACLs.

QoS Optimization for IPv6 ACLs does not impact the CAM usage for applying a policy on a single (or the first of several) interfaces. It is most useful when a policy is applied across multiple interfaces; it can reduce the impact to CAM usage across subsequent interfaces.

Example The following examples show some sample output when using the test cam-usage command.

Figure 10-9. Command Example: test cam-usage (C-Series)

FTOS#test cam-usage service-policy input LauraMapTest linecard all
Linecard	Portpipe	CAM Partition	Available CAM	Estimated CAM per Port	Status
2	1	IPv4Flow	232	0	Allowed
2	1	IPv6Flow	0	0	Allowed
4	0	IPv4Flow	232	0	Allowed
4	0	IPv6Flow	0	0	Allowed
FTOS#
FTOS#test cam-usage service-policy input LauraMapTest linecard 4 port-set 0
Linecard	Portpipe	CAM Partition	Available CAM	Estimated CAM per Port	Status
4	0	IPv4Flow	232	0	Allowed
4	0	IPv6Flow	0	0	Allowed
FTOS#
FTOSO#test cam-usage service-policy input LauraMapTest linecard 2 port-set 1
Linecard	Portpipe	CAM Partition	Available CAM	Estimated CAM per Port	Status
2	1	IPv4Flow	232	0	Allowed
2	1	IPv6Flow	0	0	Allowed

Table 10-1. Output Explanations: test cam-usage (C-Series)

Term Explanation
Linecard	Lists the line card or linecards that are checked. Entering all shows the status for linecards in the chassis
Portpipe Lists the portpipe (port-set) or	port pipes (port-sets) that are checked. Entering all shows the status for linecards and port-pipes in the chassis.
CAM Partition Shows the CAM profile of the CAM
Available CAM Identifies the amount of CAM space remaining for that profile
Estimated CAM per Port Estimates the amount of CAM space the listed policy will require.
Status Indicates whether or not the policy will be allowed in the CAM

Figure 10-10. Command Example: test cam-usage (S-Series)

Table 10-2. Output Explanations: test cam-usage (S-Series)

Term Explanation
Stack-Unit	Lists the stack unit or units that are checked. Entering all shows the status for all stacks.
Portpipe Lists the portpipe (port-set) or	port pipes (port-sets) that are checked. Entering all shows the status for linecards and port-pipes in the chassis.
CAM Partition Shows the CAM profile	of the CAM
Available CAM Identifies the amount of CAM space remaining for that profile
Estimated CAM per Port Estimates the amount of CAM space the listed policy will require.
Status Indicates whether or not the policy will be allowed in the CAM

Dynamic Host Configuration Protocol (DHCP)

Overview

Dynamic Host Configuration Protocol (DHCP) is an application layer protocol that dynamically assigns IP addresses and other configuration parameters to network end-stations (hosts) based on configuration policies determined by network administrators.

• Commands to Configure the System to be a DHCP Server
• Commands to Configure Secure DHCP

Commands to Configure the System to be a DHCP Server

• clear ip dhcp
• debug ip dhcp server
• default-router
• disable
• dns-server
• domain-name
• excluded-address
• hardware-address
• host
• ip dhcp relay information-option remote-id
• disable
• lease
• netbios-name-server
• netbios-node-type
• network
• pool
  • show ip dhcp binding
  • show ip dhcp configuration
  • show ip dhcp conflict
  • show ip dhcp server

clear ip dhcp

Reset DHCP counters.

Syntax
clear ip dhcp [binding {address} | conflict | server statistics]

Parameters	binding	Enter this keyword to delete all entries in the binding table.
	address	Enter the IP address to clear the binding entry for a single IP address.
	conflict	Enter this keyword to delete all of the log entries created for IP address conflicts.
	server statistics	Enter this keyword to clear all the server counter information.
mand Mode	EXEC Privilege
Default	None
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.2.1.0 Introduced on C-Series and S-Series.
Usage Information	Enteringafterclear ip dhcp bindingclears all the IPs from the binding table.

debug ip dhcp server

Display FTOS debugging messages for DHCP.

Syntax
debug ip dhcp server [events | packets]

Parameters	events	Enter this keyword to display DHCP state changes.
	packet	Enter this keyword to display packet transmission/reception.
mand Mode	EXEC Privilege
Default	None
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.2.1.0 Introduced on C-Series and S-Series.

default-router

Assign a default gateway to clients based on address pool.

Syntax
default-router address [address2...address8]

Parameters

address

Enter the a list of routers that may be the default gateway for clients on the subnet. You may specify up to 8. List them in order of preference.

Command Mode	DHCP
Default	None
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.2.1.0 Introduced on C-Series and S-Series.

disable

C S	Disable DHCP Server.
	DHCP Server is disabled by default. Enable the system to be a DHCP server using the no form of the disable command.
Syntax	disable
d Mode	DHCP
Default	Disabled
mmand History	Version 8.3.5.0 Introduced on the S55.
	Version 8.2.1.0 Introduced on C-Series and S-Series.

dns-server

Syntax	dns-server address [address2...address8]
meters	address	Enter the a list of DNS servers that may service clients on the subnet. You may list up to 8 servers, in order of preference.
d Mode	DHCP
Default	None
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.2.1.0 Introduced on C-Series and S-Series.

domain-name

C S	Assign a domain to clients based on address pool.
Syntax	domain-name name
meters	name	Give a name to the group of addresses in a pool.

Command Mode DHCP

Default None

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.2.1.0 Introduced on C-Series and S-Series.

excluded-address

Prevent the server from leasing an address or range of addresses in the pool.

Syntax

excluded-address [address | low-address high-address]

Parameters

address	Enter a single address to be excluded from the pool.
low-address	Enter the lowest address in a range of addresses to be excluded from the pool.
high-address	Enter the highest address in a range of addresses to be excluded from the pool.

Command Mode DHCP

Default None

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.2.1.0 Introduced on C-Series and S-Series.

hardware-address

For manual configurations, specify the client hardware address.

Syntax

hardware-address address

Parameters

address Enter the hardware address of the client.

Command Mode

DHCP

Default

None

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.2.1.0 Introduced on C-Series and S-Series.

host

For manual (rather than automatic) configurations, assign a host to a single-address pool.

Syntax

host address

Parameters	address/mask	Enter the host IP address and subnet mask.
Command Mode	DHCP
Default	None
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.2.1.0 Introduced on C-Series and S-Series.

ip dhcp relay information-option remote-id

S60 S4810

Manually re-set the remote-id (MAC address) for Option 82.

Syntax ip dhcp relay information-option [remote-id {hostname | remote-id}]

Parameters	hostname	Set the hostname of the switch as the remote-id for Option 82.
	remote-id	Configure the system to enable the remote-id (MAC address) for Option 82.Enter the name of the remote-id, maximum 64 characters.

Command Mode CONFIGURATION

Default	Disabled
Command History	Version 9.0.0.0 Introduced on the Z9000.
	Version 8.3.7.0 Introduced on the S4810.
	Version 8.3.5.3 Introduced on the S55.
	Version 8.3.3.8 Introduced on the S60.
	Version 8.2.1.0 Introduced on C-Series and S-Series (S25/S50).

Usage Information Option 82 is comprised of two sub-options, circuit id and remote id. Remote id uses the MAC address of the relay information which adds Option 82 to identify the host sending the message. Use the ip dhcp relay information-option remote-id command to change the default remote-id value of the switch.

lease

C S

Specify a lease time for the addresses in a pool.

Syntax lease {days [hours] [minutes] | infinite}

Parameters	days	Enter the number of days of the lease. Range: 0-31
	hours	Enter the number of hours of the lease. Range: 0-23
	minutes	Enter the number of minutes of the lease. Range: 0-59
	infinite	Specify that the lease never expires.
Command Mode	DHCP
Default	24 hours
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.2.1.0 Introduced on C-Series and S-Series.

netbios-name-server

Specify the NetBIOS Windows Internet Naming Service (WINS) name servers, in order of preference, that are available to Microsoft Dynamic Host Configuration Protocol (DHCP) clients.

Syntax
netbios-name-server address [address2...address8]

Parameters	address	Enter the address of the NETBIOS name server. You may enter up to 8, in order of preference.
Command Mode	DHCP
Default	None
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.2.1.0 Introduced on C-Series and S-Series.

netbios-node-type

Specify the NetBIOS node type for a Microsoft DHCP client. Dell Networking recommends specifying clients as hybrid.

Syntax
netbios-node-type type

Parameters	type	Enter the NETBIOS node type. Broadcast: Enter the keyword b-node. Hybrid: Enter the keyword h-node. Mixed: Enter the keyword m-node. Peer-to-peer: Enter the keyword p-node.
Command Mode	DHCP
Default	Hybrid
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.2.1.0 Introduced on C-Series and S-Series.

network

Specify the range of addresses in an address pool.

Syntax

network network /prefix-length

Parameters

network/	Specify a range of addresses.
prefix-length	Prefix-length Range: 17-31

Command Mode

DHCP

Default

None

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.2.1.0 Introduced on C-Series and S-Series.

pool

Create an address pool

Syntax

pool name

Parameters

name	Enter the address pool's identifying name

Command Mode

DHCP

Default

None

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.2.1.0 Introduced on C-Series and S-Series.

show ip dhcp binding

Display the DHCP binding table.

Syntax

show ip dhcp binding

Command Mode

EXEC Privilege

Default

None

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.2.1.0 Introduced on C-Series and S-Series.

show ip dhcp configuration

Display the DHCP configuration.

Syntax
show ip dhcp configuration [global | pool name]

Parameters	pool name	Display the configuration for a DHCP pool.
	global	Display the DHCP configuration for the entire system.
Command Mode	EXEC Privilege
Default	None
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.2.1.0 Introduced on C-Series and S-Series.

show ip dhcp conflict

Display the address conflict log.

Syntax
show ip dhcp conflict address

Parameters	address	Display a particular conflict log entry.
Command Mode	EXEC Privilege
Default	None
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.2.1.0 Introduced on C-Series and S-Series.

show ip dhcp server

Display the DHCP server statistics.

Syntax
show ip dhcp server statistics

Command Mode	EXEC Privilege
Default	None
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.2.1.0 Introduced on C-Series and S-Series.

Commands to Configure Secure DHCP

DHCP as defined by RFC 2131 provides no authentication or security mechanisms. Secure DHCP is a suite of features that protects networks that use dynamic address allocation from spoofing and attacks.

• arp inspection
• arp inspection-trust
• clear ip dhcp snooping
• ip dhcp snooping
• ip dhcp snooping database
• ip dhcp snooping binding
• ip dhcp snooping database renew
• ip dhcp snooping trust
• ip dhcp source-address-validation
• ip dhcp snooping vlan
• ip dhcp relay
• ip dhcp snooping verify mac-address
  • show ip dhcp snooping

arp inspection
C E S Enable Dynamic Arp Inspection (DAI) on a VLAN.

Syntax	arp inspection
Command Modes	INTERFACE VLAN
Default	Disabled
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.3.1.0 Introduced on E-Series.
	Version 8.2.1.0 Introduced on C-Series and S-Series
Related Commands	arp inspection-trust	Specify a port as trusted so that ARP frames are not validated against the binding table.

arp inspection-trust

C E S Specify a port as trusted so that ARP frames are not validated against the binding table.

Syntax arp inspection-trust

Command Modes	INTERFACE
	INTERFACE PORT-CHANNEL
Default	Disabled

Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.3.1.0 Introduced on E-Series.
	Version 8.2.1.0 Introduced on C-Series and S-Series
Related Commands	arp inspection Enable Dynamic ARP Inspection on a VLAN.

clear ip dhcp snooping
C E S Clear the DHCP binding table.

Syntax	clear ip dhcp snooping binding
Command Modes	EXEC Privilege
Default	None
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.3.1.0 Introduced on E-Series.
	Version 7.8.1.0 Introduced on C-Series and S-Series
Related Commands	show ip dhcp snooping Display the contents of the DHCP binding table.

ip dhcp snooping

Syntax	[no] ip dhcp snooping
Command Modes	CONFIGURATION
Default	Disabled
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.3.1.0 Introduced on E-Series.
	Version 8.2.1.0 Introduced on C-Series and S-Series for Layer 2 interfaces.
	Version 7.8.1.0 Introduced on C-Series and S-Series on Layer 3 interfaces.
Usage Information	When enabled, no learning takes place until snooping is enabled on a VLAN. Upon disabling DHCP Snooping the binding table is deleted, and Option 82, IP Source Guard, and Dynamic ARP Inspection are disabled.
	Introduced in FTOS version 7.8.1.0, DHCP Snooping was available for Layer 3 only and dependent on DHCP Relay Agent (ip helper-address). FTOS version 8.2.1.0 extends DHCP Snooping to Layer 2, and you do not have to enable relay agent to snoop on Layer 2 interfaces.
Related Commands	ip dhcp snooping vlan Enable DHCP Snooping on one or more VLANs.

ip dhcp snooping database

Delay writing the binding table for a specified time.

Syntax
ip dhcp snooping database write-delay minutes

Parameters	minutes	Range: 5-21600
Command Modes	CONFIGURATION
Default	None
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.3.1.0 Introduced on E-Series.
	Version 7.8.1.0 Introduced on C-Series and S-Series

ip dhcp snooping binding

Create a static entry in the DHCP binding table.

Syntax
[no] ip dhcp snooping binding mac address vlan-id vlan-id ip ip-address interface type slot/port lease number

Parameters	mac address	Enter the keyword mac followed by the MAC address of the host to which the server is leasing the IP address.
	vlan-id vlan-id	Enter the keyword vlan-id followed by the VLAN to which the host belongs. Range: 2-4094
	ip ip-address	Enter the keyword ip followed by the IP address that the server is leasing.
	interface type	Enter the keyword interface followed by the type of interface to which the host is connected.For an 10/100 Ethernet interface, enter the keyword fastethernet.For a Gigabit Ethernet interface, enter the keyword gigabitethernet.For a SONET interface, enter the keyword sonet.For a Ten Gigabit Ethernet interface, enter the keyword tengigabitethernet.
	slot/port	Enter the slot and port number of the interface.
	lease number	Enter the keyword lease followed by the amount of time the IP address will be leased.Range: 1-4294967295
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.3.1.0 Introduced on E-Series.
	Version 7.8.1.0 Introduced on C-Series and S-Series
Related Commands	show ip dhcp snooping Display the contents of the DHCP binding table.

Command Modes
EXEC
EXEC Privilege
Default
None

ip dhcp snooping database renew

Renew the binding table.

Syntax

ip dhcp snooping database renew

Command Modes

EXEC

EXEC Privilege

Default

None

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.3.1.0 Introduced on E-Series.

Version 7.8.1.0 Introduced on C-Series and S-Series

ip dhcp snooping trust

Configure an interface as trusted.

Syntax

[no] ip dhcp snooping trust

Command Modes

INTERFACE

Default

Untrusted

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.3.1.0 Introduced on E-Series.

Version 7.8.1.0 Introduced on C-Series and S-Series

ip dhcp source-address-validation

Enable IP Source Guard.

Syntax

[no] ip dhcp source-address-validation [ipmac]

Parameters

ipmac

Enable IP+MAC Source Address Validation (Not available on E-Series).

Command Modes

INTERFACE

Default	Disabled
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.3.1.0 Introduced on E-Series.
	Version 8.2.1.0 Added keyword ipmac.
	Version 7.8.1.0 Introduced on C-Series and S-Series

Usage Information You must allocate at least one FP block to ipmacacl before you can enable IP+MAC Source Address Validation.

1 Use the command cam-acl I2acl from CONFIGURATION mode
2 Save the running-config to the startup-config
3 Reload the system.

ip dhcp snooping vlan

Enable DHCP Snooping on one or more VLANs.

Syntax [no] ip dhcp snooping vlan name

Parameters	name	Enter the name of a VLAN on which to enable DHCP Snooping.
Command Modes	CONFIGURATION
Default	Disabled
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.3.1.0 Introduced on E-Series.
	Version 7.8.1.0 Introduced on C-Series and S-Series
Usage Information	When enabled the system begins creating entries in the binding table for the specified VLAN(s). Note that learning only happens if there is a trusted port in the VLAN.
Related Commands	ip dhcp snooping trust	Configure an interface as trusted.

ip dhcp relay

Enable Option 82.

Syntax ip dhcp relay information-option [trust-downstream]

Parameters

trust-downstream

Configure the system to trust Option 82 when it is received from the previous-hop router.

CONFIGURATION

Default	Disabled
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.3.1.0 Introduced on E-Series.
	Version 7.8.1.0 Introduced on C-Series and S-Series
show ip dhcp snooping
C E S	Display the contents of the DHCP binding table or display the interfaces configured with IP Source Guard.
Syntax	show ip dhcp snooping [binding | source-address-validation]
Parameters	binding	Display the binding table.
	source-address-validation	Display the interfaces configured with IP Source Guard.
Command Modes	EXEC
	EXEC Privilege
Default	None
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.3.1.0 Introduced on E-Series.
	Version 7.8.1.0 Introduced on C-Series and S-Series
Related Commands	clear ip dhcp snooping Clear the contents of the DHCP binding table.

ip dhcp snooping verify mac-address

Validate a DHCP packet's source hardware address against the client hardware address field (CHADDR) in the payload.

[no] ip dhcp snooping verify mac-address

CONFIGURATION

Disabled

Version 8.3.5.0 Introduced on the S55.

Version 8.3.1.0 Introduced on E-Series.

Version 8.2.1.0 Introduced on C-Series and S-Series

Dell Force10 Resilient Ring Protocol (FRRP)

Overview

Dell Force10 Resilient Ring Protocol (FRRP) is supported on platforms C E S

FRRP is a proprietary protocol for that offers fast convergence in a Layer 2 network without having to run the Spanning Tree Protocol. The Resilient Ring Protocol is an efficient protocol that transmits a high-speed token across a ring to verify the link status. All the intelligence is contained in the master node with practically no intelligence required of the transit mode.

Commands

The FRRP commands are:

• clear frrp
• debug frrp
• description
• disable
• interface
• member-vlan
• mode
• protocol frrp
  • show frrp
• timer

Important Points to Remember

• FRRP is media- and speed-independent.
• FRRP is a Dell Force10 proprietary protocol that does not interoperate with any other vendor.
• Spanning Tree must be disabled on both primary and secondary interfaces before Resilient Ring protocol is enabled.
• A VLAN configured as control VLAN for a ring cannot be configured as control or member VLAN for any other ring.
• Member VLANs across multiple rings are not supported in Master nodes.
• If multiple rings share one or more member VLANs, they cannot share any links between them.
  • Each ring can have only one Master node; all others are Transit nodes.

clear frrp

Syntax

Parameters

Clear the FRRP statistics counters.

clear frrp [ring-id]

ring-id

(Optional) Enter the ring identification number.

Range: 1 to 255

Defaults

No default values or behavior

Command Modes

EXEC

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.2.1.0 Introduced for the C-Series

Version 7.5.1.0 Introduced

Example

Figure 12-1. clear frrp Command Examples

Forcel0#clear frrp

clears the frrp counters for all the available rings

Clear frrp statistics counter on all ring [confirm] yes ← confirmation required

Force10#clear frrp 4

clears the frrp counters on the specified ring

Clear frrp statistics counter for ring 4 [confirm] yes

← confirmation required

Force10#

Usage Information

Executing this command, without the optional ring-id, will clear statistics counters on all the available rings. FTOS requires a command line confirmation before the command is executed. This commands clears the following counters:

• hello Rx and Tx counters
  • Topology change Rx and Tx counters
  • The number of state change counters

Related Commands

show frp Display the Resilient Ring Protocol configuration

debug frrp

Enable FRRP debugging.

Syntax

debug frrp {event | packet | detail} [ring-id] [count number]

To disable debugging, use the no debug frrp {event | packet | detail} {ring-id} [count number] command.

Parameters	event	Enter the keyword event to display debug information related to ring protocol transitions.
	packet	Enter the keyword packet to display brief debug information related to control packets.
	detail	Enter the keyword detail to display detailed debug information related to the entire ring protocol packets.
	ring-id	(Optional) Enter the ring identification number.Range: 1 to 255
	count number	Enter the keyword count followed by the number of debug outputs.Range: 1 to 65534

Defaults Disabled

Command Modes CONFIGURATION (conf-frrp)

Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.2.1.0 Introduced for the C-Series
	Version 7.4.1.0 Introduced

Usage Information Since the Resilient Ring Protocol can potentially transmit 20 packets per interface, debug information must be restricted.

description

Enter an identifying description of the ring.

Syntax description Word

To remove the ring description, use the no description [Word] command.

Parameters

Word

Enter a description of the ring.Maximum: 255 characters

Defaults No default values or behavior

Command Modes CONFIGURATION (conf-frrp)

Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.2.1.0 Introduced for the C-Series
	Version 7.4.1.0 Introduced

disable

Disable the Resilient Ring Protocol.

Syntax disable

To enable the Resilient Ring Protocol, use the no disable command.

Defaults	Disabled
Command Modes	CONFIGURATION (conf-frrp)
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.2.1.0 Introduced for the C-Series
	Version 7.4.1.0 Introduced
interface
Syntax	Configure the primary, secondary, and control-vlan interfaces.
	interface {primary interface secondary interface control-vlan vlan-id}
	To return to the default, use the no interface {primary interface secondary interface control-vlan vlan-id} command.
Parameters	primary interface	Enter the keyword primary to configure the primary interface followed by one of the following interfaces and slot/port information:For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.For Port Channel interface types, enter the keyword port-channel followed by a number from 1 to 255.For a SONET interface, enter the keyword sonet followed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
	secondary interface	Enter the keyword secondary to configure the secondary interface followed by one of the following interfaces and slot/port information:For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.For Port Channel interface types, enter the keyword port-channel followed by a number from 1 to 255.For a SONET interface, enter the keyword sonet followed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
	control-vlan vlan-id	Enter the keyword control-vlan followed by the VLAN ID.Range: 1 to 4094
Defaults	No default values or behavior
Command Modes	CONFIGURATION (conf-frrp)
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.2.1.0 Introduced for the C-Series
	Version 7.4.1.0 Introduced
Usage Information	This command causes the Ring Manager to take ownership of these two ports after the configuration is validated by the IFM. Ownership is relinquished for a port only when the interface does not play a part in any control VLAN, that is, the interface does not belong to any ring.
Related Commands	show frrp Display the Resilient Ring Protocol configuration information

member-vlan

Specify the member VLAN identification numbers.

Syntax

member-vlan {vlan-range}

To return to the default, use the no member-vlan [vlan-range] command.

Parameters

vlan-range

Enter the member VLANs using comma separated VLAN IDs, a range of VLAN IDs, a single VLAN ID, or a combination. For example:Comma separated: 3, 4, 6Range: 5-10Combination: 3, 4, 5-10, 8

Defaults

No default values or behavior

Command Modes

CONFIGURATION (conf-frrp)

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.2.1.0 Introduced for the C-Series

Version 7.4.1.0 Introduced

mode

Set the Master or Transit mode of the ring.

Syntax

mode {master | transit}

To reset the mode, use the no mode {master | transit} command.

Parameters

master	Enter the keyword master to set the Ring node to Master mode.
transit	Enter the keyword transit to set the Ring node to Transit mode.

Defaults

Mode None

Command Modes

CONFIGURATION (conf-frrp)

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.2.1.0 Introduced for the C-Series

Version 7.4.1.0 Introduced

protocol frrp

Enter the Resilient Ring Protocol and designate a ring identification.

Syntax
protocol frrp {ring-id}
To exit the ring protocol, use the no protocol frrp {ring-id} command.
Parameters

ring-id

Enter the ring identification number. Range: 1 to 255

Defaults

No default values or behavior

Command Modes
CONFIGURATION
Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.2.1.0 Introduced for the C-Series

Version 7.4.1.0 Introduced

Usage Information

This command places you into the Resilient Ring Protocol. After executing this command, the command line prompt changes to conf-frrp.

show frrp

Display the Resilient Ring Protocol configuration.

Syntax
show frrp [ring-id [summary]] | [summary]
Parameters

ring-id	Enter the ring identification number. Range: 1 to 255
summary	(OPTIONAL) Enter the keyword summary to view just a summarized version of the Ring configuration.

Defaults

No default values or behavior

Command Modes
EXEC
Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.2.1.0 Introduced for the C-Series

Version 7.4.1.0 Introduced

Example 1

Figure 12-2. show frrp summary Command Example

Force10#show frrp summary
Ring-ID	State	Mode	Ctrl_Vlan	Member_Vlans
2	UP	Master	2	11-20, 25,27-30
31	UP	Transit	31	40-41
50	Down	Transit	50	32
Force10#

Example 2

Figure 12-3. show frrp ring-id Command Example

Example 3

Figure 12-4. show frrp ring-id summary Command Example

Force10#show frrp 2 summary
Ring-ID	State	Mode	Ctrl_Vlan	Member_Vlans
2	Up	Master	2	11-20, 25, 27-30
Force10#

Related Commands

protocol frrp Enter the Resilient Ring Protocol and designate a ring identification

timer

Set the hello or dead interval for the Ring control packets.

Syntax

timer {hello-interval milliseconds} | {dead-interval milliseconds}

To remove the timer, use the no timer {hello-interval [milliseconds]} | {dead-interval milliseconds} command.

Parameters	hello-interval milliseconds	Enter the keyword hello-interval followed by the time, in milliseconds, to set the hello interval of the control packets. The milliseconds must be enter in increments of 50 milliseconds, for example 50, 100, 150 and so on. If an invalid value is enter, an error message is generated. Range: 50 to 2000ms Default: 500 ms
	dead-interval milliseconds	Enter the keyword dead-interval followed by the time, in milliseconds, to set the dead interval of the control packets. Range: 50 to 6000ms Default: 1500ms Note: The configured dead interval should be at least three times the hello interval
Defaults	Default as shown
Command Modes	CONFIGURATION (conf-frrp)
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.2.1.0 Introduced for the C-Series
	Version 7.4.1.0 Introduced
Usage Information	The hello interval is the interval at which ring frames are generated from the primary interface of the master node. The dead interval is the time that elapses before a timeout occurs.

GARP VLAN Registration (GVRP)

Overview

GARP VLAN Registration (GVRP) is supported on platforms ☐, ☐, and ☐

Commands

The GVRP commands are:

• clear gvrp statistics
  • bpdu-destination-mac-address
• debug gvrp
• disable
• carp timers
• gvrp enable
• gvrp registration
• protocol gvrp
  • show config
  • show garp timers
  • show gvrp
  • show gvrp statistics on page 27

The GARP (Generic Attribute Registration Protocol) mechanism allows the configuration of a GARP participant to propagate through a network quickly. A GARP participant registers or de-registers its attributes with other participants by making or withdrawing declarations of attributes. At the same time, based on received declarations or withdrawals, GARP handles attributes of other participants.

GVRP enables a device to propagate local VLAN registration information to other participant devices and dynamically update the VLAN registration information from other devices. The registration information updates local databases regarding active VLAN members and through which port the VLANs can be reached.

GVRP ensures that all participants on a bridged LAN maintain the same VLAN registration information. The VLAN registration information propagated by GVRP include both manually configured local static entries and dynamic entries from other devices.

GVRP participants have the following components:

• The GVRP application
• GARP Information Propagation (GIP)
• GARP Information Declaration (GID)

Important Points to Remember

• GVRP is supported on Layer 2 ports only.
- All VLAN ports added by GVRP are tagged.
- GVRP is supported on untagged ports belonging to a default VLAN, and tagged ports.
- GVRP cannot be enabled on untagged ports belonging to a non-default VLAN unless native VLAN is turned on.
• GVRP requires end stations with dynamic access NICs.
- Based on updates from GVRP-enabled devices, GVRP allows the system to dynamically create a port-based VLAN (unspecified) with a specific VLAN ID and a specific port.
- On a port-by-port basis, GVRP allows the system to learn about GVRP updates to an existing port-based VLAN with that VLAN ID and IEEE 802.1Q tagging.
- GVRP allows the system to send dynamic GVRP updates about your existing port-based VLAN.
- GVRP updates are not sent to any blocked Spanning Tree Protocol (STP) ports. GVRP operates only on ports that are in the forwarding state.
- GVRP operates only on ports that are in the STP forwarding state. If GVRP is enabled, a port that changes to the STP forwarding state automatically begins to participate in GVRP. A port that changes to an STP state other than forwarding no longer participates in GVRP.
- VLANs created dynamically with GVRP exist only as long as a GVRP-enabled device is sending updates. If the devices no longer send updates, or GVRP is disabled, or the system is rebooted, all dynamic VLANs are removed.
- GVRP manages the active topology, not non-topological data such as VLAN protocols. If a local bridge needs to classify and analyze packets by VLAN protocols, you must manually configure protocol-based VLANs, and simply rely on GVRP for VLAN updates. But if the local bridge needs to know only how to reach a given VLAN, then GVRP provides all necessary information.
- The VLAN topologies that GVRP learns are treated differently from VLANs that are statically configured. The GVRP dynamic updates are not saved in NVRAM, while static updates are saved in NVRAM. When GVRP is disabled, the system deletes all VLAN interfaces that were learned through GVRP and leaves unchanged all VLANs that were manually configured.

clear gvrp statistics

Clear GVRP statistics on an interface.

Syntax

clear gvrp statistics interface interface

Parameters

interface interface

Enter the following keywords and slot/port or number information:For a Fast Ethernet interface, enter the keywordFastEthernetfollowed by the slot/port information.For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For a Port Channel interface, enter the keywordport-channelfollowed by the Port Channel number:C-Series and S-Series Range: 1-128E-Series Range: 1-255 for TeraScaleFor a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernetfollowed by the slot/port information.

Defaults

No default values or behavior

Command Modes EXEC

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Introduced on C, E, and S-Series

Related Commands

show gvrp statistics Display the GVRP statistics

debug gvrp

Enable debugging on GVRP.

Syntax

debug gvrp {config | events | pdu}

To disable debugging, use the no debug gvrp {config | events | pdu} command.

Parameters

config	Enter the keyword config to enable debugging on the GVRP configuration.
event	Enter the keyword event to enable debugging on the JOIN/LEAVE events.
pdu	Enter the keyword pdu followed one of the following Interface keywords and slot/port or number information:For a Fast Ethernet interface, enter the keyword fastEthernet followed by the slot/port information.For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.For a Port Channel interface, enter the keyword port-channel followed by the Port Channel number:C-Series and S-Series Range: 1-128E-Series Range: 1-255 for TeraScaleFor a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.

Defaults Disabled

Command Modes EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Introduced on C, E, and S-Series

TenGigabitEthernet

disable

Globally disable GVRP.

Syntax disable

To re-enable GVRP, use the no disable command.

Defaults Enabled

Command Modes CONFIGURATION-GVRP

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Introduced on C, E, and S-Series

Related Commands

gvrp enable Enable GVRP on physical interfaces and LAGs.

protocol gvrp Access GVRP protocol

garp timers

Set the intervals (in milliseconds) for sending GARP messages.

Syntax

garp timers {join | leave | leave-all}

To return to the previous setting, use the no garp timers {join | leave | leave-all} command.

Parameters

join	Enter the keyword join followed by the number of milliseconds to configure the join time. Range: 100-2147483647 milliseconds Default: 200 milliseconds Note: Designate the milliseconds in multiples of 100
leave	Enter the keyword leave followed by the number of milliseconds to configure the leave time. Range: 100-2147483647 milliseconds Default: 600 milliseconds Note: Designate the milliseconds in multiples of 100
leave-all	Enter the keyword leave-all followed by the number of milliseconds to configure the leave-all time. Range: 100-2147483647 milliseconds Default: 1000 milliseconds Note: Designate the milliseconds in multiples of 100

Defaults

Default as above

Command Modes

CONFIGURATION-GVRP

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Introduced on C, E, and S-Series

Usage Information

Join Timer—Join messages announce the willingness to register some attributes with other participants. Each GARP application entity sends a Join message twice, for reliability, and uses a join timer to set the sending interval.

Leave Timer—Leave announces the willingness to de-register with other participants. Together with the Join, Leave messages help GARP participants complete attribute reregistration and de-registration. Leave Timer starts upon receipt of a leave message sent for de-registering some attribute information. If a join message is not received before the leave time expires, the GARP application entity removes the attribute information as requested.

Leave All Timer—The Leave All Timer starts when a GARP application entity starts. When this timer expires, the entity sends a leave-all message so that other entities can re-register their attribute information. Then, the leave-all time begins again.

Related Commands

show carp timers Display the current GARP times

gvrp enable

Enable GVRP on physical interfaces and LAGs.

Syntax

gvrp enable

To disable GVRP on the interface, use the no gvrp enable command.

Defaults

Disabled

Command Modes

CONFIGURATION-INTERFACE

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Introduced on C, E, and S-Series

Related Commands

disable Globally disable GVRP.

gvrp registration

Configure the GVRP register type.

Syntax

gvrp registration {fixed | normal | forbidden}

To return to the default, use the gvrp register normal command.

Parameters

fixed	Enter the keyword fixed followed by the VLAN range in a comma separated VLAN ID set.
normal	Enter the keyword normal followed by the VLAN range in a comma separated VLAN ID set.This is the default
forbidden	Enter the keyword forbidden followed by the VLAN range in a comma separated VLAN ID set.

Defaults

Default registration is normal

Command Modes

CONFIGURATION-INTERFACE

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Introduced on C, E, and S-Series

Usage Information

The fixed registration prevents an interface, configured via the command line to belong to a VLAN (static configuration), from being un-configured when it receives a Leave message. Therefore, the registration mode on that interface is fixed.The normal registration is the default registration. The port’s membership in the VLANs depends on GVRP. The interface becomes a member of VLANs after learning about the VLAN through GVRP. If the VLAN is removed from the port that sends GVRP advertisements to this device, then the port will stop being a member of the VLAN.The forbidden is used when you do not want the interface to advertise or learn about VLANs through GVRP.

Related Commands

show gvrp Display the GVRP configuration including the registration

protocol gvrp

Access GVRP protocol — (config-gvrp)#.

Syntax

protocol gvrp

Defaults

Disabled

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Introduced on C, E, and S-Series

Related Commands

disable Globally disable GVRP.

show config

Display the global GVRP configuration.

Syntax

show config

Command Modes

CONFIGURATION-GVRP

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Introduced on C, E, and S-Series

Related Commands

gvrp enable Enable GVRP on physical interfaces and LAGs.

protocol gvrp Access GVRP protocol.

show garp timers

Display the GARP timer settings for sending GARP messages.

Syntax

show garp timers

Defaults

No default values or behavior

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Introduced on C, E, and S-Series

Example

Figure 13-1. show garp timers Command Example

FTOS#show garp timers
GARP Timers	Value (milliseconds)
Join Timer	200
Leave Timer	600
LeaveAll Timer	10000
FTOS#

Related Commands

garp timers Set the intervals (in milliseconds) for sending GARP messages.

show gvrp

Display the GVRP configuration.

Syntax

show gvrp [brief | interface]

Parameters

brief

(OPTIONAL) Enter the keyword brief to display a brief summary of the GVRP configuration.

interface

(OPTIONAL) Enter the following keywords and slot/port or number information:For a Fast Ethernet interface, enter the keyword fastEthernet followed by the slot/port information.For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.For a Port Channel interface, enter the keyword port-channel followed by the Port Channel number:C-Series and S-Series Range: 1-128E-Series Range: 1-255 for TeraScaleFor a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.

Defaults

No default values or behavior

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version7.6.1.0 Introduced on C, E, and S-Series

Example

Figure 13-2. show gvrp brief Command Example

R3#show gvrp briefGVRP Feature is currently enabled.
Port	GVRP Status	Edge-Port
Gi 3/0	Disabled	No
Gi 3/1	Disabled	No
Gi 3/2	Enabled	No
Gi 3/3	Disabled	No
Gi 3/4	Disabled	No
Gi 3/5	Disabled	No
Gi 3/6	Disabled	No
Gi 3/7	Disabled	No
Gi 3/8	Disabled	No
R3#show gvrp brief

Usage Information

If no ports are GVRP participants, the message output changes from:

GVRP Participants running on

to

GVRP Participants running on no ports

Related Commands

show gvrp statistics Display the GVRP statistics

show gvrp statistics

Display the GVRP configuration statistics.

Syntax

show gvrp statistics {interface interface | summary}

Parameters	interface interface	Enter the keywordinterfacefollowed by one of the interface keywords and slot/port or number information:For a Fast Ethernet interface, enter the keywordFastEthernetfollowed bythe slot/port information.For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For a Port Channel interface, enter the keywordport-channel followed bythe Port Channel number:C-Series and S-Series Range: 1-128E-Series Range: 1-255 for TeraScaleFor a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernetfollowed by the slot/port information.
	summary	Enter the keywordsummaryto display just a summary of the GVRP statistics.

Defaults

No default values or behavior

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Introduced on C, E, and S-Series

Example

Figure 13-3. show gvrp statistics Command Example

FTOS#show gvrp statistics int gi 1/0
Join Empty Received: 0
Join In Received: 0
Empty Received: 0
Leave In Received: 0
Leave Empty Received: 0
Leave All Received: 40
Join Empty Transmitted: 156
Join In Transmitted: 0
Empty Transmitted: 0
Leave In Transmitted: 0
Leave Empty Transmitted: 0
Leave All Transmitted: 41
Invalid Messages/Attributes skipped: 0
Failed Registrations: 0
FTOS# 

Usage Information

Invalid messages/attributes skipped can occur in the following cases:

• The incoming GVRP PDU has an incorrect length.
• “End of PDU” was reached before the complete attribute could be parsed.
• The Attribute Type of the attribute that was being parsed was not the GVRP VID Attribute Type (0x01).
• The attribute that was being parsed had an invalid attribute length.
• The attribute that was being parsed had an invalid GARP event.
• The attribute that was being parsed had an invalid VLAN ID. The valid range is 1 - 4095.

A failed registration can occur for the following reasons:

- Join requests were received on a port that was blocked from learning dynamic VLANs (GVRP Blocking state).

- An entry for a new GVRP VLAN could not be created in the GVRP database.

Related Commands

show gvrp Display the GVRP configuration

Internet Group Management Protocol (IGMP)

Overview

The platforms on which a command is supported is indicated by the character — E for the E-Series, C for the C-Series, and S for the S-Series — that appears below each command heading.

This chapter contains the following sections:

• IGMP Commands
  • IGMP Snooping Commands

IGMP Commands

FTOS supports IGMPv1/v2/v3 and is compliant with RFC-3376.

Important Points to Remember

• FTOS supports PIM-SM and PIM-SSM include and exclude modes.
• IGMPv2 is the default version of IGMP on interfaces. IGMPv3 can be configured on interfaces, and is backward compatible with IGMPv2.
• The maximum number of interfaces supported is 512 on the E-Series. On the C-Series and S-Series 31 interfaces are supported.

Note: The S55 supports up to 95 interfaces.

• Maximum number of groups supported – no hard limit
- IGMPv3 router interoperability with IGMPv2 and IGMPv1 routers on the same subnet is not supported.
- An administrative command (ip igmp version) is added to manually set the IGMP version.
- All commands, previously used for IGMPv2, are compatible with IGMPv3.

The commands include:

• clear ip igmp groups
• debug ip igmp
• ip igmp access-group
• ip igmp group-join-limit
• ip igmp immediate-leave

• ip igmp last-member-query-interval

• ip igmp querier-timeout

• ip igmp query-interval
• ip igmp query-max-resp-time
• ip igmp ssm-map
• ip igmp static-group
• ip igmp version
  • show ip igmp groups
  • show ip igmp interface
  • show ip igmp ssm-map

clear ip igmp groups

Clear entries from the group cache table.

Syntax
clear ip igmp groups [group-address | interface]

Parameters	group-address	(OPTIONAL) Enter the IP multicast group address in dotted decimal format.
	interface	(OPTIONAL) Enter the following keywords and slot/port or number information:For an 100/1000 Base-T Ethernet interface, enter the keyword gigabitethernet followed by the slot/port information.For a 1-Gigabit Ethernet interface, enter the keyword gigabitethernet followed by the slot/port information.For a SONET interface, enter the keyword sonet followed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keyword tengigabitethernet followed by the slot/port information.
hand Modes	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	E-Series legacy command
Usage Information	IGMP commands accept only non-VLAN interfaces—specifying VLAN will not yield a results.Note: The S55 supports up to 95 interfaces.

debug ip igmp

Enable debugging of IGMP packets.

Syntax

debug ip igmp [group address | interface]

To disable IGMP debugging, enter no debug ip igmp [group address | interface]. To disable all debugging, enter undebug all.

Parameters	group-address	(OPTIONAL) Enter the IP multicast group address in dotted decimal format.
	interface	(OPTIONAL) Enter the following keywords and slot/port or number information:Enter one of the following keywords and slot/port or number information:For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For a Port Channel interface, enter the keywordport-channelfollowed by a number:C-Series and S-Series Range: 1-128E-Series Range: 1 to 32 for EtherScale, 1 to 255 for TeraScaleFor SONET interfaces, enter the keywordsonetfollowed by the slot/port information. This keyword is only available on E-Series and C-Series.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernetfollowed by the slot/port information.Enter the keywordbackupto view the backup interface for this interface.
Defaults	Disabled
Command Modes	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	E-Series legacy command
Usage Information	IGMP commands acceptonlynon-VLAN interfaces—specifying VLAN will not yield a results. This command displays packets for IGMP and IGMP Snooping.

ip igmp access-group

Use this feature to specify access control for packets.

Syntax ip igmp access-group access-list

To remove the feature, use the no ip igmp access-group access-list command.

Parameters	access-list	Enter the name of the extended ACL (16 characters maximum).
Defaults	Not configured
mand Modes	INTERFACE (conf-if-interface-slot/port)
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.8.1.0 Introduced on C-Series and S-Series
	Version 7.6.1.0 Introduced on E-Series
Usage Information	The access list accepted is an extended ACL. This feature is used to block IGMP reports from hosts, on a per-interface basis; based on the group address and source address specified in the access list.

ip igmp group-join-limit

Use this feature to limit the number of IGMP groups that can be joined in a second.

Syntax
ip igmp group-join-limit number

Parameters	number	Enter the number of IGMP groups permitted to join in a second. Range: 1 to 10000
Defaults	No default values or behavior
Command Modes	CONFIGURATION (conf-if-interface-slot/port)
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.8.1.0 Introduced on C-Series and S-Series
	Version 7.6.1.0 Introduced on E-Series

ip igmp immediate-leave

Enable IGMP immediate leave.

Syntax
ip igmp immediate-leave [group-list prefix-list-name]
To disable ip igmp immediate leave, use the no ip igmp immediate-leave command.

Parameters	group-list prefix-list-name	Enter the keyword group-list followed by a string up to 16 characters long of the prefix-list-name.
Defaults	Not configured
Command Modes	INTERFACE
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.8.1.0 Introduced on S-Series
	Version 7.7.1.0 Introduced on C-Series
	E-Series legacy command
Usage Information	Querier normally send a certain number of group specific queries when a leave message is received, for a group, prior to deleting a group from the membership database. There may be situations in which immediate deletion of a group from the membership database is required. This command provides a way to achieve the immediate deletion. In addition, this command provides a way to enable immediate-leave processing for specified groups.

ip igmp last-member-query-interval

Change the last member query interval, which is the Max Response Time inserted into Group-Specific Queries sent in response to Leave Group messages. This interval is also the interval between Group-Specific Query messages.

Syntax
ip igmp last-member-query-interval milliseconds
To return to the default value, enter no ip igmp last-member-query-interval.

Parameters	milliseconds	Enter the number of milliseconds as the interval.Default: 1000 millisecondsRange: 100 to 65535
Defaults	1000 milliseconds
Command Modes	INTERFACE
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.8.1.0 Introduced on S-Series
	Version 7.7.1.0 Introduced on C-Series
	E-Series legacy command

ip igmp querier-timeout

Change the interval that must pass before a multicast router decides that there is no longer another multicast router that should be the querier.

Syntax
ip igmp querier-timeout seconds
To return to the default value, enter no ip igmp querier-timeout.

Parameters	seconds	Enter the number of seconds the router must wait to become the new querier.Default: 125 secondsRange: 60 to 300
Defaults	125 seconds
Command Modes	INTERFACE
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.8.1.0 Introduced on S-Series
	Version 7.7.1.0 Introduced on C-Series
	Version 7.6.1.0 Introduced on S-Series in Interface VLAN mode only to enable that system to act as an IGMP Proxy Querier.
	Version 7.5.1.0 Introduced on C-Series in Interface VLAN mode only to enable that system to act as an IGMP Proxy Querier.
	E-Series legacy command

ip igmp query-interval

Change the transmission frequency of IGMP general queries sent by the Querier.

Syntax

ip igmp query-interval seconds

To return to the default values, enter no ip igmp query-interval.

Parameters

seconds	Enter the number of seconds between queries sent out.Default: 60 secondsRange: 1 to 18000
60 seconds
INTERFACE
Version 8.3.5.0 Introduced on the S55.
Version 7.8.1.0 Introduced on S-Series
Version 7.7.1.0 Introduced on C-Series
Version 7.6.1.0 Introduced on S-Series in Interface VLAN mode only to enable that system to act as an IGMP Proxy Querier.
Version 7.5.1.0 Introduced on C-Series in Interface VLAN mode only to enable that system to act as an IGMP Proxy Querier.
E-Series legacy command

ip igmp query-max-resp-time

Set the maximum query response time advertised in general queries.

Syntax

ip igmp query-max-resp-time seconds

To return to the default values, enter no ip igmp query-max-resp-time.

Parameters

seconds	Enter the number of seconds for the maximum response time.Default: 10 secondsRange: 1 to 25
10 seconds
INTERFACE
Version 8.3.5.0 Introduced on the S55.
Version 7.8.1.0 Introduced on S-Series
Version 7.7.1.0 Introduced on C-Series
Version 7.6.1.0 Introduced on S-Series in Interface VLAN mode only to enable that system to act as an IGMP Proxy Querier.

Command Modes

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced on S-Series

Version 7.7.1.0 Introduced on C-Series

Version 7.6.1.0 Introduced on S-Series in Interface VLAN mode only to enable that system to act as an IGMP Proxy Querier.

Version 7.5.1.0 Introduced on C-Series in Interface VLAN mode only to enable that system to act as an IGMP Proxy Querier.

E-Series legacy command

ip igmp ssm-map

Use a statically configured list to translate (*,G) memberships to (S,G) memberships.

Syntax

ip igmp ssm-map std-access-list source-address

Undo this configuration, that is, remove SSM map (S,G) states and replace them with (*,G) states using the command ip igmp ssm-map std-access-list source-address command.

Parameters

std-access-list Specify the standard IP access list that contains the mapping rules for multicast groups.

source-address Specify the multicast source address to which the groups are mapped.

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced on C-Series and S-Series

Version 7.7.1.0 Introduced on E-Series

Usage Information

Mapping applies to both v1 and v2 IGMP joins; any updates to the ACL are reflected in the IGMP groups. You may not use extended access lists with this command. When a static SSM map is configured and the router cannot find any matching access lists, the router continues to accept (*,G) groups.

Related Commands

ip access-list standard Create a standard access list to filter based on IP address.

ip igmp static-group

Configure an IGMP static group.

Syntax

ip igmp static-group {group address [exclude [source address]] | [include {source address}]}

To delete a static address, use the no ip igmp static-group {group address [exclude [source address]] | [include {source address}]} command.

Parameters

group address	Enter the group address in dotted decimal format (A.B.C.D)
exclude source address	(OPTIONAL) Enter the keyword exclude followed by the source address, in dotted decimal format (A.B.C.D), for which a static entry needs to be added.
include source address	(OPTIONAL) Enter the keyword include followed by the source address, in dotted decimal format (A.B.C.D), for which a static entry needs to be added.Note: A group in include mode must have at least one source address defined.

Defaults	No default values or behavior
Command Modes	INTERFACE
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.8.1.0 Introduced on S-Series
	Version 7.7.1.0 Introduced on C-Series
	Version 7.5.1.0 Expanded to support the exclude and include options
	E-Series legacy command
Usage Information	A group in the include mode should have at least one source address defined. In exclude mode if no source address is specified, FTOS implicitly assumes all sources are included. If neither include or exclude is specified, FTOS implicitly assumes a IGMPv2 static join.
	Command LimitationsOnly one mode (include or exclude) is permitted per multicast group per interface. To configure another mode, all sources belonging to the original mode must be unconfigured.If a static configuration is present and a packet for the same group arrives on an interface, the dynamic entry will completely overwrite all the static configuration for the group.
Related Commands	show ip igmp groups Display IGMP group information

ip igmp version

Manually set the version of the router to IGMPv2 or IGMPv3.

Syntax

ip igmp version {2 | 3}

Parameters

2 Enter the number 2 to set the IGMP version number to IGMPv2.

3 Enter the number 3 to set the IGMP version number to IGMPv3.

Defaults

2 (that is IGMPv2)

Command Modes

INTERFACE

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced on S-Series

Version 7.7.1.0 Introduced on C-Series

Version 7.5.1.0 Introduced for E-Series

show ip igmp groups

View the IGMP groups.

Syntax

show ip igmp groups [group-address [detail] | detail | interface [group-address [detail]]]

Parameters

group-address	(OPTIONAL) Enter the group address in dotted decimal format to view information on that group only.
interface	(OPTIONAL) Enter the interface type and slot/port information:For a 100/1000 Ethernet interface, enter the keyword gigabitethernet followed by the slot/port information.For a 1-Gigabit Ethernet interface, enter the keyword gigabitethernet followed by the slot/port information.For a port-channel interface, enter the keyword port-channel followed by the port-channel number.For a Loopback interface, enter the keyword loopback followed by a number from 0 to 16383.For a SONET interface, enter the keyword sonet followed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keyword tengigabitethernet followed by the slot/port information.For a VLAN interface enter the keyword vlan followed by a number from 1 to 4094.
detail	(OPTIONAL) Enter the keyword detail to display the IGMPv3 source information.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Introduced on S-Series and on C-Series

Version 7.5.1.0 Expanded to support the detail option.

E-Series legacy command

Usage Information
This command displays the IGMP database including configured entries for either all groups on all interfaces, or all groups on specific interfaces, or specific groups on specific interfaces.

Note: The S55 supports up to 95 interfaces.

Example
Figure 14-1. show ip igmp groups Command Example

FTOS#show ip igmp groups
IGMP Connected Group Membership
Group Address	Interface	Uptime	Expires	Last Reporter
224.0.1.40	GigabitEthernet 13/6	09:45:23	00:02:08	10.87.7.5
FTOS#

Table 14-1. show ip igmp groups Command Example Fields

Field Description
Group Address Lists the multicast address for the IGMP group.
Interface Lists the interface type, slot and port number.
Uptime Displays the amount of time the group has been operational.
Expires Displays the amount of time until the entry expires.
Last Reporter Displays the IP address of the last host to be a member of the IGMP group.

show ip igmp interface

View information on the interfaces participating in IGMP.

Syntax

show ip igmp interface [interface]

Parameters

interface

(OPTIONAL) Enter the interface type and slot/port information:For a 100/1000 Ethernet interface, enter the keyword gigabitethernet followed by the slot/port information.For a 1-Gigabit Ethernet interface, enter the keyword gigabitethernet followed by the slot/port information.For a port-channel interface, enter the keyword port-channel followed by the port-channel number.For a Loopback interface, enter the keyword loopback followed by a number from 0 to 16383.For a SONET interface, enter the keyword sonet followed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keyword tengigabitethernet followed by the slot/port information.For a VLAN interface enter the keyword vlan followed by a number from 1 to 4094.

Command Modes

EXEC EXEC Privilege

Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	E-Series legacy command

Usage Information

IGMP commands accept only non-VLAN interfaces—specifying VLAN will not yield a results.

Note: The S55 supports up to 95 interfaces.

Example

Figure 14-2. show ip igmp interface Command Example

FTOS#show ip igmp interface
GigabitEthernet 0/0 is down, line protocol is down
Internet protocol processing disabled
GigabitEthernet 0/5 is down, line protocol is down
Internet protocol processing disabled
GigabitEthernet 0/6 is down, line protocol is down
Internet protocol processing disabled
GigabitEthernet 0/7 is up, line protocol is down
Internet protocol processing disabled
GigabitEthernet 7/9 is up, line protocol is up
Internet address is 10.87.5.250/24
IGMP is enabled on interface
IGMP query interval is 60 seconds
IGMP querier timeout is 120 seconds
IGMP max query response time is 10 seconds
IGMP last member query response interval is 1000 ms
IGMP activity: 0 joins, 0 leaves
IGMP querying router is 10.87.5.250 (this system)
IGMP version is 2 

show ip igmp ssm-map

Display is a list of groups that are currently in the IGMP group table and contain SSM mapped sources.

Syntax
show ip igmp ssm-map [group]

Parameters	group	(OPTIONAL) Enter the multicast group address in the form A.B.C.D to display the list of sources to which this group is mapped.
Command Modes	EXEC
	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.8.1.0 Introduced on C-Series and S-Series
	Version 7.7.1.0 Introduced on E-Series
Related Commands	ip igmp	Use a statically configured list to translate (*,G) memberships to (S,G) memberships.
	ssm-map

IGMP Snooping Commands

FTOS supports IGMP Snooping version 2 and 3 on all Dell Networking systems:

• ip igmp snooping enable
• ip igmp snooping fast-leave
• ip igmp snooping flood
• ip igmp snooping last-member-query-interval
• ip igmp snooping mrouter
• ip igmp snooping querier
  • show ip igmp snooping mrouter

Important Points to Remember for IGMP Snooping

• FTOS supports version 1, version 2, and version 3 hosts.
• FTOS IGMP snooping implementation is based on IP multicast address (not based on Layer 2 multicast mac-address) and the IGMP snooping entries are in Layer 3 flow table not in Layer 2 FIB.
• FTOS IGMP snooping implementation is based on draft-ietf-magma-snoop-10.
• FTOS supports IGMP snooping on JUMBO enabled cards.
• IGMP snooping is not enabled by default on the switch.
• A maximum of 1800 groups and 600 VLAN are supported.
• IGMP snooping is not supported on default VLAN interface.
• IGMP snooping is not supported over VLAN-Stack-enabled VLAN interfaces (you must disable IGMP snooping on a VLAN interface before configuring VLAN-Stack-related commands).
• IGMP snooping does not react to Layer 2 topology changes triggered by STP.
• IGMP snooping reacts to Layer 2 topology changes triggered by MSTP by sending a general query on the interface that comes in FWD state.

Important Points to Remember for IGMP Querier

• The IGMP snooping Querier supports version 2.
• You must configure an IP address to the VLAN interface for IGMP snooping Querier to begin. The IGMP snooping Querier disables itself when a VLAN IP address is cleared, and then it restarts itself when an IP address is re-assigned to the VLAN interface.
• When enabled, IGMP snooping Querier will not start if there is a statically configured multicast router interface in the VLAN.
• When enabled, IGMP snooping Querier starts after one query interval in case no IGMP general query (with IP SA lower than its VLAN IP address) is received on any of its VLAN members.
• When enabled, IGMP snooping Querier periodically sends general queries with an IP source address of the VLAN interface. If it receives a general query on any of its VLAN member, it will check the IP source address of the incoming frame.
  If the IP SA in the incoming IGMP general query frame is lower than the IP address of the VLAN interface, then the switch disables its IGMP snooping Querier functionality.
  If the IP SA of the incoming IGMP general query is higher than the VLAN IP address, the switch will continue to work as an IGMP snooping Querier.

ip igmp snooping enable

Enable IGMP snooping on all or a single VLAN. This is the master on/off switch to enable IGMP snooping.

Syntax ip igmp snooping enable

To disable IGMP snooping, enter no ip igmp snooping enable command.

Defaults Disabled

Command Modes

CONFIGURATION

INTERFACE VLAN

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series legacy command

Usage Information

You must enter this command to enable IGMP snooping. When enabled from CONFIGURATION mode, IGMP snooping is enabled on all VLAN interfaces (except default VLAN).

Note: You must execute the no shutdown command on the VLAN interface for IGMP Snooping to function.

Related Commands

no shutdown Activate an interface

ip igmp snooping fast-leave

Enable IGMP snooping fast leave for this VLAN.

Syntax ip igmp snooping fast-leave

To disable IGMP snooping fast leave, use the no igmp snooping fast-leave command.

Defaults Not configured

Command Modes

INTERFACE VLAN—(conf-if-vl-n)

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series legacy command

Usage Information

Queriers normally send a certain number of queries when a leave message is received prior to deleting a group from the membership database. There may be situations in which fast deletion of a group is required. When IGMP fast leave processing is enabled, the switch will remove an interface from the multicast group as soon as it detects an IGMP version 2 leave message on the interface.

ip igmp snooping flood

This command controls the flooding behavior of unregistered multicast data packets. On the E-Series, when flooding is enabled (the default), unregistered multicast data traffic is flooded to all ports in a VLAN. When flooding is disabled, unregistered multicast data traffic is forwarded to only multicast router ports, both static and dynamic, in a VLAN. If there is no multicast router port in a VLAN, then unregistered multicast data traffic is dropped. On the

C-Series and S-Series, unregistered multicast data traffic is dropped when flooding is disabled; they do not forward the packets to multicast router ports. On the C-Series and S-Series, Layer 3 multicast must be disabled (no ip multicast-routing) in order to disable Layer 2 multicast flooding.

Syntax ip igmp snooping flood

Defaults Enabled

Command Modes CONFIGURATION

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.2.1.0 Introduced on the C-Series and S-Series.

Version 7.7.1.1 Introduced on E-Series.

ip igmp snooping last-member-query-interval

The last member query interval is the “maximum response time” inserted into Group-Specific queries sent in response to Group-Leave messages. This interval is also the interval between successive Group-Specific Query messages. Use this command to change the last member query interval.

Syntax ip igmp snooping last-member-query-interval milliseconds

To return to the default value, enter no ip igmp snooping last-member-query-interval.

Parameters

milliseconds	Enter the interval in milliseconds.
	Default: 1000 milliseconds
	Range: 100 to 65535

Defaults 1000 milliseconds

Command Modes INTERFACE VLAN

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series legacy command

ip igmp snooping mrouter

Statically configure a VLAN member port as a multicast router interface.

Syntax

ip igmp snooping mrouter interface interface

To delete a specific multicast router interface, use the no igmp snooping mrouter interface interface command.

Parameters

interfaceinterface

Enter the following keywords and slot/port or number information:For an 100/1000 Ethernet interface, enter the keyword followed by the slot/port information.GigabitEthernetFor a 1-Gigabit Ethernet interface, enter the keyword followed by the slot/port information.GigabitEthernetFor a 10-Gigabit Ethernet interface, enter the keyword followed by the slot/port information.TenGigabitEthernetFor a Port Channel interface, enter the keyword number:port-channel followed by a C-Series Range: 1-128E-Series Range: 1 to 255 for TeraScale

Defaults

Not configured

Command Modes

INTERFACE VLAN—(conf-if-vl-n)

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series legacy command

Usage Information

FTOS provides the capability of statically configuring interface to which a multicast router is attached. To configure a static connection to the multicast router, enter the ip igmp snooping mrouter interface command in the VLAN context. The interface to the router must be a part of the VLAN where you are entering the command.

Note: The S55 supports up to 95 interfaces.

ip igmp snooping querier

Enable IGMP querier processing for the VLAN interface.

Syntax

ip igmp snooping querier

To disable IGMP querier processing for the VLAN interface, enter no ip igmp snooping querier command.

Defaults

Not configured

Command Modes

INTERFACE VLAN—(conf-if-vl-n)

Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	E-Series legacy command

Usage Information This command enables the IGMP switch to send General Queries periodically. This is useful when there is no multicast router present in the VLAN because the multicast traffic does not need to be routed. An IP address must be assigned to the VLAN interface for the switch to act as a querier for this VLAN.

show ip igmp snooping mrouter

Display multicast router interfaces.

Syntax

show ip igmp snooping mrouter [vlan number]

Parameters

vlan number Enter the keyword vlan followed by the vlan number. Range: 1-4094

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series legacy command

Example

Figure 14-3. show ip igmp snooping mrouter Command Example

FTOS#show ip igmp snooping mrouter Interface Router Ports Vlan 2 Gi 13/3, Po 1 FTOS#

Related Commands

show ip igmp groups Use this IGMP command to view groups

Interfaces

Overview

This chapter defines interface commands and is divided into the following sections:

• Basic Interface Commands
• Port Channel Commands

The symbols under command headings indicate which Dell Networking platforms — C-Series, E-Series, or S-Series, respectively — support the command.

Although all interfaces are supported on E-Series ExaScale, some interface functionality is supported on E-Series ExaScale ex with FTOS 8.2.1.0. and later. When this is the case that is noted in the command history.

Basic Interface Commands

The following commands are for physical, Loopback, and Null interfaces:

• auto-mdix
• clear counters
• clear dampening
• cx4-cable-length
• dampening
• description
• disable-on-sfm-failure
• duplex (Management)
• duplex (10/100 Interfaces)
• flowcontrol
• interface
• interface loopback
  • interface ManagementEthernet
• interface null
• interface range
  • interface range macro (define)
  • interface range macro name
• interface vlan
• ipg (10 Gigabit Ethernet interfaces)

• keepalive

• lfs enable

• link debounce-timer
• monitor
  • mtu
• negotiation auto
• portmode hybrid
• rate-interval
  • show config
  • show config (from INTERFACE RANGE mode)
  • show interfaces
  • show interfaces configured
  • show interfaces dampening
  • show interfaces description
  • show interfaces linecard
  • show interfaces phy
  • show interfaces stack-unit
  • show interfaces status
  • show interfaces switchport
  • show interfaces transceiver
  • show range
• shutdown
  • speed (for 10/100/1000 interfaces)
  • speed (Management interface)
• switchport
  • wanport

auto-mdix S55 J[S60]

Enable Auto-MDIX on copper ports.

Syntax

[no] auto-mdix

Defaults

Enabled

Command Modes

INTERFACE

Command History

Version 8.3.5.3 Introduced on the S55.

Version 8.3.3.3 Introduced on the S60.

Usage Information

With Auto-MDIX enabled, you can connect two network devices irrespective of the cable type (straight-through or crossover) and the MDI mode of the peer device. When Auto-MDIX is disabled at both ends, the copper ports behave as MDI. In this case, you need a crossover cable to connect the port to another MDI port, or a straight-through cable to connect the port to a MDIX port. The link will not come up when wrong cables are used.

When the interface speed is negotiated to be at 1000Mbps, Auto-MDIX cannot be disabled. Therefore, if Auto-MDIX is disabled at 1000Mbps, FTOS sets the interface speed to 100Mbps and disables Auto-MDIX. When the link comes up, be sure to have correct cabling and FTOS sets the speed back to 1000Mbps. If the cabling is not correct for Auto-MDIX disabled (it is straight through cable), the speed stays at 100Mbps and the link stays down until a correct (ie. crossover) cable is inserted.

clear counters

Clear the counters used in the show interfaces commands for all VRRP groups, VLANs, and physical interfaces, or selected ones.

Syntax
clear counters [interface] [vrrp [vrid] | learning-limit]

Parameters	interface	(OPTIONAL) Enter the following keywords and slot/port or number information:For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For a Loopback interface, enter the keywordloopbackfollowed by a number from 0 to 16383.For a port channel interface, enter the keywordport-channelfollowed by the number of the port channel:C-Series and S55 and S60 Range: 1-128For the management interface on the RPM, enter the keywordManagementEthernetfollowed by slot/port information. The slot range is 0-1, and the port range is 0.For a SONET interface, enter the keywordsonetfollowed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernet followed by the slot/port information.For a VLAN, enter the keywordvlanfollowed by a number from 1 to 4094.For an IPv6 interface, enter the keywordipv6.For a loopback interface, enter the keywordloopbackFor a MAC interface, enter the keywordmac.
	vrrp vrid	(OPTIONAL) Enter the keywordvrrpto clear statistics for all VRRP groups configured. Enter a number from 1 to 255 as thevrid.
	learning-limit	(OPTIONAL) Enter the keywordlearning-limitto clear unknown source address (SA) drop counters when MAC learning limit is configured on the interface.Note:This option is not supported on the S-Series, as the MAC learning limit is not supported

Defaults
Without an interface specified, the command clears all interface counters.

Command Modes
EXEC Privilege
Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.2.1.0 Support for 4093 VLANs on E-Series ExaScale. Prior to release supported 2094.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

Version 6.5.1.0 Updated definition of the learning-limit option for clarity.

Example	Figure 15-1. clear counters Command Example
	FTOS#clear countersClear counters on all interfaces [confirm]
Related Commands	mac learning-limit Allow aging of MACs even though a learning-limit is configured or disallow station move on learnt MACs.
	show interfaces Displays information on the interfaces.
clear dampening
C E S	Clear the dampening counters on all the interfaces or just the specified interface.
Syntax	clear dampening [interface]
Parameters	interface	(Optional) Enter one of the following keywords and slot/port or number information:For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernet followed by the slot/port information.For a port channel interface, enter the keyword port-channelfollowed by a number:C-Series Range: 1-128E-Series Range: 1 to 255 for TeraScale and ExaScaleFor a SONET interface, enter the keyword sonet followed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernet followed by the slot/port information.
Defaults	Without a specific interface specified, the command clears all interface dampening counters
Command Modes	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	Version 7.4.1.0 Introduced on E-Series
Example	FTOS#clear dampening gigabitethernet 1/2Clear dampening counters on Gi 1/2 [confirm] yFTOS#
Related Commands	show interfaces dampening	Display interface dampening information.
	dampening Configure dampening on an interface.

cx4-cable-length

5 Configure the length of the cable to be connected to the selected CX4 port.

Syntax [no] cx4-cable-length {long | medium | short}

Parameters	long | medium | short	Enter the keyword that matches the cable length to be used at the selected port:short = For 1-meter and 3-meter cable lengthsmedium = For 5-meter cable lengthlong = For 10-meter and 15-meter cable lengths
Defaults	medium
Mode	Interface
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.7.1.0 Introduced on S-Series
Usage Information	This command only works on ports that the system recognizes as CX4 ports. So, for example,Figure 15-2 shows an attempt to configure an XFP port in an S25P with the command after inserting a CX4 converter into the port:

Note: When using a long CX4 cable between the C-Series and the S-Series, configure the cable using the cx4-cable-length short command only to avoid any errors.

Example Figure 15-2. Example of Unsuccessful CX4 Cable Length Configuration

FTOS#show interfaces tengigabitethernet 0/26 | grep "XFP type"
Pluggable media present, XFP type is 10GBASE-CX4
FTOS(conf-if-te-0/26)#cx4-cable-length short
% Error: Unsupported command.
FTOS(conf-if-te-0/26)#cx4-cable-length medium
% Error: Unsupported command.
FTOS(conf-if-te-0/26)#cx4-cable-length long
% Error: Unsupported command.
FTOS(conf-if-te-0/26)# 

Figure 15-3 shows a successful CX4 cable length configuration.

Example Figure 15-3. Example of CX4 Cable Length Configuration

FTOS#config
FTOS(config)#interface tengigabitethernet 0/52
FTOS(conf-if-0/52)#cx4-cable-length long
FTOS(conf-if-0/52)#show config
!
interface TenGigabitEthernet 0/51
no ip address
cx4-cable-length long
shutdown
FTOS(conf-if-0/52)#exit
FTOS(config)#

For details on using XFP ports with CX4 cables, see your S-Series hardware guide.

Related Commands

show config Display the configuration of the selected interface.

dampening

Configure dampening on an interface.

Syntax

dampening [[[half-life] [reuse-threshold]] [suppress-threshold]] [max-suppress-time]]

To disable dampening, use the no dampening [[[half-life] [reuse-threshold]] [suppress-threshold]] [max-suppress-time]] command syntax.

Parameters

half-life	Enter the number of seconds after which the penalty is decreased. The penalty is decreased by half after the half-life period expires. Range: 1 to 30 seconds Default: 5 seconds
reuse-threshold	Enter a number as the reuse threshold, the penalty value below which the interface state is changed to “up”. Range: 1 to 20000 Default: 750
suppress-threshold	Enter a number as the suppress threshold, the penalty value above which the interface state is changed to “error disabled”. Range: 1 to 20000 Default: 2500
max-suppress-time	Enter the maximum number for which a route can be suppressed. The default is four times the half-life value. Range: 1 to 86400 Default: 20 seconds

Defaults

Disabled

Command Modes

INTERFACE (conf-if-)

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

Version 7.4.1.0 Introduced on E-Series

Example

FTOS (conf-if-gi-3/2) # dampening 20 800 4500 120 FTOS (conf-if-gi-3/2) #

Usage Information

With each flap, FTOS penalizes the interface by assigning a penalty (1024) that decays exponentially depending on the configured half-life. Once the accumulated penalty exceeds the suppress threshold value, the interface is moved to the error-disabled state. This interface state is deemed as “down” by all static/dynamic Layer 2 and Layer 3 protocols. The penalty is exponentially decayed based on the half-life timer. Once the penalty decays below the reuse threshold, the interface is enabled. The configured parameters should follow:

• suppress-threshold should be greater than reuse-threshold
- max-suppress-time should be at least 4 times half-life

Note: Dampening cannot be applied on an interface that is monitoring traffic for other interfaces.

Related Commands

clear dampening Clear the dampening counters on all the interfaces or just the specified interface.

show interfaces dampening Display interface dampening information.

description

Assign a descriptive text string to the interface.

Syntax

description desc_text

To delete a description, enter no description.

Parameters

desc_text Enter a text string up to 240 characters long.

Defaults

No description is defined.

Command Modes

INTERFACE

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

Version 7.4.1.0 Modified for E-Series: Revised from 78 to 240 characters.

Usage Information

Entering a text string after the description command overwrites any previous text string configured as the description. The shutdown and description commands are the only commands that you can configure on an interface that is a member of a port channel. Use the show interfaces description command to display descriptions configured for each interface.

Related Commands

show interfaces description Display description field of interfaces.

disable-on-sfm-failure

Disable select ports on E300 systems when a single SFM is available.

Syntax

disable-on-sfm-failure

To delete a description, enter no disable-on-sfm-failure.

Defaults

Port is not disabled

Command Modes

INTERFACE

Command History

Version 7.7.1.0 Introduced on E300 systems only

Usage Information

When an E300 system boots up and a single SFM is active this configuration, any ports configured with this feature will be shut down. If an SFM fails (or is removed) in an E300 system with two SFM, ports configured with this feature will be shut down. All other ports are treated normally.

When a second SFM is installed or replaced, all ports are booted up and treated as normally. This feature does not take affect until a single SFM is active in the E300 system.

duplex (Management)

Set the mode of the Management interface.

Syntax

duplex {half | full}

To return to the default setting, enter no duplex.

Parameters

half Enter the keyword half to set the Management interface to transmit only in one direction.

full Enter the keyword full to set the Management interface to transmit in both directions.

Defaults

Not configured

Command Modes

INTERFACE

Command History

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.5.1.0 Introduced on C-Series

Version 6.4.1.0 Documentation modified—added Management to distinguish from duplex (10/100 Interfaces)

Usage Information

This command applies only to the Management interface on the RPMs.

Related Commands

interface ManagementEthernet Configure the Management port on the system (either the Primary or Standby RPM).

duplex (Management) Set the mode of the Management interface.

management route Configure a static route that points to the Management interface or a forwarding router.

speed (Management interface) Set the speed on the Management interface.

duplex (10/100 Interfaces)

Configure duplex mode on any physical interfaces where the speed is set to 10/100. Syntax

duplex {half | full}

To return to the default setting, enter no duplex.

Parameters

half	Enter the keyword half to set the physical interface to transmit only in one direction.
full	Enter the keyword full to set the physical interface to transmit in both directions.

Defaults

Not configured

Command Modes

INTERFACE

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

Version 6.4.1.0 Introduced

This command applies to any physical interface with speed set to 10/100.

Usage Information

Note: Starting with FTOS 7.8.1.0, when a copper SFP2 module with catalog number GP-SFP2-1T is used in the S25P model of the S-Series, its speed can be manually set with the speed command. When the speed is set to 10 or 100 Mbps, the duplex command can also be executed.

Related Commands

speed (for 10/100/1000 interfaces) Set the speed on the Base-T Ethernet interface.

negotiation auto Enable or disable auto-negotiation on an interface.

flowcontrol

Control how the system responds to and generates 802.3x pause frames on 1Gig and 10Gig line cards.

Syntax

flowcontrol rx {off | on} tx {off | on} threshold {<1-2047><1-2013><1-2013>}

The threshold keyword is supported on C-Series and S-Series only.

To return to the default, use the no flowcontrol rx {off | on} tx {off | on} threshold command.

Parameters

rx on	Enter the keywords rx on to process the received flow control frames on this port. This is the default value for the receive side.
rx off	Enter the keywords rx off to ignore the received flow control frames on this port.
tx on	Enter the keywords tx on to send control frames from this port to the connected device when a higher rate of traffic is received. This is the default value on the send side.

	tx off	Enter the keywords tx off so that flow control frames are not sent from this port to the connected device when a higher rate of traffic is received.
	threshold(C-Series and S-Series only)	When tx on is configured, you can set the threshold values for:Number of flow-control packet pointers: 1-2047 (default = 75)Flow-control buffer threshold in KB: 1-2013 (default = 49KB)Flow-control discard threshold in KB: 1-2013 (default= 75KB)
Defaults	C-Series: rx off tx off
	E-Series: rx on tx on
	S-Series (S25/S50): rx off tx off
	S55: rx off tx off
Command Modes	INTERFACE
Command History	Version 8.3.5.5	Changed default setting torx off tx off
	Version 8.3.5.0	Introduced on the S55,rx only.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 6.5.1.9 and 7.4.1.0 Introduced on E-Series
	Version 7.8.1.0 Introduced on C-Series and S-Series with thresholds
Usage Information	The globally assigned 48-bit Multicast address 01-80-C2-00-00-01 is used to send and receive pause frames. To allow full duplex flow control, stations implementing the pause operation instruct the MAC to enable reception of frames with a destination address equal to this multicast address.
	The pause:Starts wheneitherthe packet pointer or the buffer threshold is met (whichever is met first). When the discard threshold is met, packets are dropped.Ends whenboththe packet pointer and the buffer threshold fall below 50% of the threshold settings.The discard threshold defines when the interface starts dropping the packet on the interface. This may be necessary when a connected device does not honor the flow control frame sent by the S-Series. The discard threshold should be larger than thebuffer thresholdso that the buffer holds at least hold at least 3 packets.
	Important Points to RememberDo not enabletxpause when buffer carving is enabled. Consult Dell Networking TAC for information and assistance.Asymmetric flow control (rx on tx off or rx off tx on) setting for the interface port less than 100 Mb/s speed is not permitted. The following error is returned:Can't configure Asymmetric flowcontrol when speed <1G, config ignored

- The only configuration applicable to half duplex ports is rx off tx off. The following error is returned:

Can't configure flowcontrol when half duplex is configure, config ignored

- Half duplex cannot be configured when the flow control configuration is on (default is rx on tx on). The following error is returned:

Can't configure half duplex when flowcontrol is on, config ignored

Note: The flow control must be off (rx off tx off) before configuring the half duplex.

- Speeds less than 1 Gig cannot be configured when the asymmetric flow control configuration is on. The following error is returned:

Can't configure speed <1G when Asymmetric flowcontrol is on, config ignored

• FTOS only supports rx on tx on and rx off tx off for speeds less than 1 Gig (Symmetric).

- On the C-Series and S-Series systems, the flow-control sender and receiver must be on the same port-pipe. Flow control is not supported across different port-pipes on the C-Series or S-Series system.

Example Figure 15-4. show running config (partial)

FTOS (conf-if-gi-0/1) #show config
!
interface GigabitEthernet 0/1
no ip address
switchport
no negotiation auto
flowcontrol rx off tx on
no shutdown
... 

The table below displays how FTOS negotiates the flow control values between two Dell Networking chassis connected back-to-back using 1G copper ports.

Table 15-1. Negotiated Flow Control Values

Configured Negotiated
LocRxConf Loc	TxConf Remote	RxConf Remote	Conf LocNegRx	LocNegTx Rem	NegRx RemNegTx
off off off			off	off	off	off	off
		off	on	off	off	off	off
		on	off	off	off	off	off
		on	on	off	off	off	off
off	on	off	off	off	off	off	off
		off	on	off	off	off	off
		on	off	off	on	on	off
		on	on	off	off	off	off

Table 15-1. Negotiated Flow Control Values

Configured Negotiated
LocRxConf LocTxConf Remote	eRxConf RemoteTx	xConf LocNegRx	LocNegTx Rem	NegRx RemNegTx
off off off		off	off	off	off	off	off
		on	off	off	off	off	off
		on	off	off	off	off	off
		on	on	off	off	off	off
on off off		off	off	off	off	off	off
		on	on	on	off	off	on
		on	off	on	on	on	on
		on	on	on	on	on	on
on on off		off	off	off	off	off	off
		on	off	off	off	off	off
		on	on	on	on	on	on
		on	on	on	on	on	on

Related Commands

show running-config	Display the flow configuration parameters (non-default values only).
show interfaces	Display the negotiated flow control parameters.

interface

Configure a physical interface on the switch.

Syntax

interface interface

Parameters

interface

Enter one of the following keywords and slot/port or number information:For 100/1000 Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For SONET interfaces, enter the keywordsonetfollowed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernetfollowed by the slot/port information.

Defaults

Not configured.

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0	Introduced on the S55.
Version 8.1.1.0	Introduced on E-Series ExaScale
Version 7.6.1.0	Introduced on S-Series
Version 7.5.1.0	Introduced on C-Series
Version 6.4.1.0	Introduced

Example

Figure 15-5. interface Command Example

FTOS (conf) #interface gig 0/0

FTOS (conf-if-gi-0/0) #exit#

Usage Information

You cannot delete a physical interface.

By default, physical interfaces are disabled (shutdown) and are in Layer 3 mode. To place an interface in mode, ensure that the interface's configuration does not contain an IP address and enter the switchport command.

Related Commands

interface loopback Configure a Loopback interface.

interface null Configure a Null interface.

interface port-channel Configure a port channel.

interface vlan Configure a VLAN.

show interfaces Display interface configuration.

interface loopback

Configure a Loopback interface.

Syntax

interface loopback number

To remove a loopback interface, use the no interface loopback number command.

Parameters

number

Enter a number as the interface number. Range: 0 to 16383.

Defaults

Not configured.

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

Version 6.4.1.0 Introduced

Example

Figure 15-6. interface loopback Command Example

FTOS (conf) #interface loopback 1655

FTOS (conf-if-lo-1655)#

Related Commands

interface Configure a physical interface.

interface null Configure a Null interface.

interface port-channel Configure a port channel.

interface vlan Configure a VLAN.

interface ManagementEthernet

Syntax	interface ManagementEthernet slot/port
Parameters	slot/port	Enter the keyword ManagementEthernet followed by slot number (0-1) and port number zero (0).
Defaults	Not configured.
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on S55
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.5.1.0 Introduced for C-Series
	Version 6.4.1.0 Introduced for E-Series
Example	Figure 15-7. interface ManagementEthernet Command ExampleFTOS (conf)#interface managementethernet 0/0FTOS (conf-if-ma-0/0)#
Usage Information	You cannot delete a Management port.The Management port is enabled by default (no shutdown). Use the ip address command to assign an IP address to the Management port.
Related Commands	management route Configure a static route that points to the Management interface or a forwarding router.
	duplex (Management) Clear FIB entries on a specified line card.
	speed (Management interface) Clear FIB entries on a specified line card.

interface null

C E S	Configure a Null interface on the switch.
Syntax	interface null number
Parameters	number	Enter zero (0) as the Null interface number.
Defaults	Not configured; number = 0
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	Version 6.4.1.0 Introduced
Example	Figure 15-8. interface null Command ExampleFTOS (conf) #interface null 0FTOS (conf-if-nu-0) #
Usage Information	You cannot delete the Null interface. The only configuration command possible in a Null interface is ip unreachable.
Related Commands	interface Configure a physical interface.
	interface loopback Configure a Loopback interface.
	interface port-channel Configure a port channel.
	interface vlan Configure a VLAN.
	ip unreachables Enable generation of ICMP unreachable messages.

interface range

This command permits configuration of a range of interfaces to which subsequent commands are applied (bulk configuration). Using the interface range command, identical commands can be entered for a range of interface.

Syntax

interface range interface, interface, ...

Parameters

interface, interface, ...

Enter the keyword interface range and one of the interfaces — slot/port, port-channel or VLAN number. Select the range of interfaces for bulk configuration. You can enter up to six comma separated ranges—spaces are not required between the commas. Comma-separated ranges can include VLANs, port-channels and physical interfaces. Slot/Port information must contain a space before and after the dash. For example, interface range gigabitethernet 0/1 - 5 is valid; interface range gigabitethernet 0/1-5 is not valid.

• For a 1-Gigabit Ethernet interface, enter the keyword by the slot/port information.
• For a port channel interface, enter the keyword number:
  C-Series and S55 and S60 Range: 1-128
  GigabitEthernet followed
  channel followed by a

- For a SONET interface, enter the keyword information.

- For a 10-Gigabit Ethernet interface, enter the keyword followed by the slot/port information.

- For a VLAN, enter the keyword vlan followed by a number from 1 to 2147483647.

TenGigabitEthernet

Defaults

This command has no default behavior or values.

Command Modes

CONFIGURATION

Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.2.1.0 Support for 4093 VLANs on E-Series ExaScale. Prior releases supported 2094.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.0 Introduced for E-Series

Usage Information When creating an interface range, interfaces appear in the order they are entered; they are not sorted. The command verifies that interfaces are present (physical) or configured (logical). Important things to remember:

• Bulk configuration is created if at least one interface is valid.
• Non-existing interfaces are excluded from the bulk configuration with a warning message (Figure 15-9).
• The interface range prompt includes interface types with slot/port information for valid interfaces. The prompt allows for a maximum of 32 characters. If the bulk configuration exceeds 32 characters, it is represented by an ellipsis (...).
• When the interface range prompt has multiple port ranges, the smaller port range is excluded from the prompt (Figure 15-10).
• If overlapping port ranges are specified, the port range is extended to the smallest start port and the biggest end port (Figure 15-11).

Example Figure 15-9. Bulk Configuration Warning Message

FTOS(conf)#interface range so 2/0 - 1, te 10/0, gi 3/0, fa 0/0 % Warning: Non-existing ports (not configured) are ignored by interface-range

Example Figure 15-10. Interface Range prompt with Multiple Ports

FTOS (conf) #interface range gi 2/0 - 23, gi 2/1 - 10 FTOS (conf-if-range-gi-2/0-23#

Example Figure 15-11. Interface Range prompt Overlapping Port Ranges

FTOS (conf) #interface range gi 2/1 - 11, gi 2/1 - 23 FTOS (conf-if-range-gi-2/1-23#

Only VLAN and port-channel interfaces created using the interface vlan and interface port-channel commands can be used in the interface range command.

Use the show running-config command to display the VLAN and port-channel interfaces. VLAN or port-channel interfaces that are not displayed in the show running-config command can not be used with the bulk configuration feature of the interface range command. You cannot create virtual interfaces (VLAN, Port-channel) using the interface range command.

Note: If a range has VLAN, physical, port-channel, and SONET interfaces, only commands related to physical interfaces can be bulk configured. To configure commands specific to VLAN, port-channel or SONET, only those respective interfaces should be configured in a particular range.

Figure 15-12 is an example of a single range bulk configuration.

Example

Figure 15-12. Single Range Bulk Configuration

FTOS(config)# interface range gigabitethernet 5/1 - 23
FTOS(config-if-range)# no shutdown
FTOS(config-if-range)#

Figure 15-13 shows how to use commas to add different interface types to the range enabling all Gigabit Ethernet interfaces in the range 5/1 to 5/23 and both Ten Gigabit Ethernet interfaces 1/1 and 1/2.

Example

Figure 15-13. Multiple Range Bulk Configuration Gigabit Ethernet and Ten Gigabit Ethernet

FTOS(config-if)# interface range gigabitethernet 5/1 - 23, tengigabitethernet 1/1 - 2
FTOS(config-if-range)# no shutdown
FTOS(config-if-range)#

Figure 15-14 shows how to use commas to add SONET, VLAN, and port-channel interfaces to the range.

Example

Figure 15-14. Multiple Range Bulk Configuration with SONET, VLAN, and port channel

FTOS(config-if)# interface range gigabitethernet 5/1 - 23, tengigabitethernet 1/1 - 2,
Vlan 2 - 100, Port 1 - 25
FTOS(config-if-range)# no shutdown
FTOS(config-if-range)#

Related Commands

interface port-channel Configure a port channel group.

interface vlan Configure a VLAN interface.

show config (from INTERFACE RANGE mode) Show the bulk configuration interfaces.

show range Show the bulk configuration ranges.

interface range macro (define) Define a macro for an interface-range.

interface range macro (define)

Defines a macro for an interface range and then saves the macro in the running configuration.

Syntax

define interface range macro name interface, interface, ...

Parameters

name

Enter up to 16 characters for the macro name.

interface,interface,...

Enter theinterfacekeyword (see below) and one of the interfaces slot/port, port-channel or VLAN numbers. Select the range of interfaces for bulk configuration. You can enter up to six comma separated ranges—spaces arenotrequired between the commas. Comma-separated ranges can include VLANs, port-channels and physical interfaces.Slot/Port information must contain a space before and after the dash. For example,interface range gigabitethernet0/1 - 5is valid;interface range gigabitethernet0/1-5is not valid.For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For a port channel interface, enter the keywordport-channelfollowed by a number:C-Seriesand S-SeriesRange: 1-128For a SONET interface, enter the keywordsonetfollowed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernetfollowed by the slot/port information.For a VLAN, enter the keywordvlanfollowed by a number from 1 to 2147483647.

Defaults Command Modes

This command has no default behavior or value

Command History

CONFIGURATION

Version 8.3.5.0 Introduced on the S55.

Version 8.2.1.0 Support for 4093 VLANs on E-Series ExaScale. Prior releases supported 2094.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

Version 6.2.1.1 Introduced

Example
Figure 15-15. define interface-range macro Command Example

FTOS(config)# define interface-range test tengigabitethernet 0/0 - 3 , gigabitethernet 5/0 - 47 , gigabitethernet 13/0 - 89

FTOS# show running-config | grep define

define interface-range test tengigabitethernet 0/0 - 3 , gigabitethernet 5/0 - 47 , gigabitethernet 13/0 - 89

FTOS(config)#interface range macro test

FTOS(config-if-range-te-0/0-3,gi-5/0-47,gi-13/0-89)#

Usage Information
Figure 15-15 is an example of how to define an interface range macro named test. Execute the show running-config command to display the macro definition. Applying the macro is shown in Figure 15-17.
Related Commands

interface range Configure a range of command (bulk configuration)

interface range macro name Run an interface range macro.

interface range macro name

Run the interface-range macro to automatically configure the pre-defined range of interfaces.

Syntax
interface range macro name

Parameters	name	Enter the name of an existing macro.
Defaults	This command has no default behavior or value
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	Version 6.2.1.1 Introduced

Usage Information
Figure 15-16 runs the macro named test that was defined in Figure 15-15.

Example
Figure 15-16. interface-range macro Command Example

FTOS(config)#interface range macro testFTOS(config-if-range-te-0/0-3,gi-5/0-47,gi-13/0-89)#FTOS

Related Commands

interface range Configure a range of command (bulk configuration)

interface range macro (define) Define a macro for an interface range (bulk configuration)

interface vlan

Configure a VLAN. You can configure up to 4094 VLANs.

Syntax
interface vlan vlan-id
To delete a VLAN, use the no interface vlan vlan-id command.

Parameters	vlan-id	Enter a number as the VLAN Identifier. Range: 1 to 4094.
Defaults	Not configured, except for the Default VLAN, which is configured as VLAN 1.
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.2.1.0 Support for 4093 VLANs on E-Series ExaScale. Prior releases supported 2094.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.2.1.0 Introduced for E-Series
Example	Figure 15-17. interface vlan Command ExampleFTOS (conf) #int vlan 3FTOS (conf-if-vl-3)#
Usage Information	For more information on VLANs and the commands to configure them, refer to Virtual LAN (VLAN) Commands.
	FTP, TFTP, and SNMP operations are not supported on a VLAN. MAC ACLs are not supported in VLANs. IP ACLs are supported. See Chapter 7, Access Control Lists (ACL).
Related Commands	interface Configure a physical interface.
	interface loopback Configure a loopback interface.
	interface null Configure a null interface.
	interface port-channel Configure a port channel group.
	show vlan Display the current VLAN configuration on the switch.
	shutdown Disable/Enable the VLAN.
	tagged Add a Layer 2 interface to a VLAN as a tagged interface.
	untagged Add a Layer 2 interface to a VLAN as an untagged interface.

ipg (10 Gigabit Ethernet interfaces)

E Set the Inter-packet Gap for traffic on 10 Gigabit Ethernet interface.

Syntax ipg {ieee-802.3ae | shrink}

To return to the default of averaging the IPG, enter no ipg {shrink | ieee-802.3ae}

Parameters	ieee-802.3ae	Enter the keyword ieee-802.3ae to set the IPG to 12 (12-15) bytes (packet size dependent)
	shrink	Enter the keyword shrink to set the IPG to 8 (8-11) bytes (packet size dependent).
Defaults	averaging the IPG
hand Modes	INTERFACE
Command History	pre-Version 6.1.1.0	Introduced for E-Series

Usage For 10 Gigabit Ethernet interfaces only. Information IPG equals 96 bits times from end of the previous packet to start of the pre-amble of the next packet.

keepalive

On SONET interfaces, send keepalive packets periodically to keep an interface alive when it is not transmitting data.

Syntax

keepalive [seconds]

To stop sending SONET keepalive packets, enter no keepalive.

Parameters

seconds

(OPTIONAL) For SONET interfaces with PPP encapsulation enabled, enter the number of seconds between keepalive packets. Range: 0 to 23767 Default: 10 seconds

Defaults

Enabled

Command Modes

INTERFACE

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.2 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.2.1.0 Introduced for E-Series

Usage Information

When you configure keepalive, the system sends a self-addressed packet out of the configured interface to verify that the far end of a WAN link is up. When you configure no keepalive, the system does not send keepalive packets and so the local end of a WAN link remains up even if the remote end is down.

Ifs enable

Enable Link Fault Signaling (LFS) on 10 Gigabit Ethernet interfaces only.

Syntax

Ifs enable

To disable LFS, enter no lfs enable.

Defaults

Enabled.

Command Modes

INTERFACE (10 Gigabit Ethernet interfaces only)

Command History

pre-Version 6.1.1.0 Introduced for E-Series

Usage Information

If there is a failure on the link, FTOS brings down the interface. The interface will stay down until the link failure signal stops.

Note: On TeraScale line cards, LFS is always enabled by default.

link debounce-timer

E	Assign the debounce time for link change notification on this interface.
Syntax	link debounce [milliseconds]
Parameters	milliseconds	Enter the time to delay link status change notification on this interface.Range: 100-5000 msDefault for copper is 3100 msDefault for fiber is 100 ms
Command Modes	INTERFACE
Command History	Version 8.2.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Introduced on E-Series
Usage Information	Changes do not affect any ongoing debounces. The timer changes take affect from the next debounce onward.
monitor
C E S	Monitor counters on a single interface or all interfaces on a line card. The screen is refreshed every 5 seconds and the CLI prompt disappears.
Syntax	monitor interface [interface]To disable monitoring and return to the CLI prompt, press the q key.
Parameters	interface	(OPTIONAL) Enter the following keywords and slot/port or number information:For an 100/1000 Ethernet interface, enter the keyword followed by the slot/port information.For a 1-Gigabit Ethernet interface, enter the keyword followed by the slot/port information.For the management port, enter the keyword by the slot (0-1) and the port (0).For SONET interface types, enter the keyword information.For a 10-Gigabit Ethernet interface, enter the keyword followed by the slot/port information.
Command Modes	EXEC
	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.2.1.0 Introduced for E-Series

Usage Information

The delta column displays changes since the last screen refresh.

Example

Figure 15-18. monitor Command Example of a Single Interface

systest-3 Monitor time: 00:00:06 Refresh Intvl.: 2s Time: 03:26:26
Interface: Gi 0/3, Enabled, Link is Up, Linespeed is 1000 Mbit
Traffic statistics:	Current	Rate	Delta
Input bytes:	9069828	43 Bps	86
Output bytes:	606915800	43 Bps	86
Input packets:	54001	0 pps	1
Output packets:	9401589	0 pps	1
64B packets:	67	0 pps	0
Over 64B packets:	49166	0 pps	1
Over 127B packets:	350	0 pps	0
Over 255B packets:	1351	0 pps	0
Over 511B packets:	286	0 pps	0
Over 1023B packets:	2781	0 pps	0
Error statistics:
Input underruns:	0	0 pps	0
Input giants:	0	0 pps	0
Input throttles:	0	0 pps	0
Input CRC:	0	0 pps	0
Input IP checksum:	0	0 pps	0
Input overrun:	0	0 pps	0
Output underruns:	0	0 pps	0
Output throttles:	0	0 pps	0
m - Change mode		c - Clear screen
l - Page up		a - Page down
T - Increase refresh interval		t - Decrease refresh interval
q - Quit

Figure 15-19. monitor Command Example of All Interfaces on a Line Card

systest-3	Monitor time: 00:01:31		Refresh Intvl.: 2s	Time: 03:54:14
Interface [delta]	Link	In Packets	[delta]	Out Packets
Gi 0/0	Down	0	0	0	0
Gi 0/1	Down	0	0	0	0
Gi 0/2	Up	61512	52	66160	42
Gi 0/3	Up	63086	20	9405888	24
Gi 0/4	Up	14697471418	2661481	13392989657
2661385
Gi 0/5	Up	3759	3	161959604	832816
Gi 0/6	Up	4070	3	8680346	5
Gi 0/7	Up	61934	34	138734357	72
Gi 0/8	Up	61427	1	59960	1
Gi 0/9	Up	62039	53	104239232	3
Gi 0/10	Up	17740044091	372	7373849244	79
Gi 0/11	Up	18182889225	44	7184747584	138
Gi 0/12	Up	18182682056	0	3682	1
Gi 0/13	Up	18182681434	43	6592378911	144
Gi 0/14	Up	61349	55	86281941	15
Gi 0/15	Up	59808	58	62060	27
Gi 0/16	Up	59889	1	61616	1
Gi 0/17	Up	0	0	14950126	81293
Gi 0/18	Up	0	0	0	0
Gi 0/19	Down	0	0	0	0
Gi 0/20	Up	62734	54	62766	18
Gi 0/21	Up	60198	9	200899	9
Gi 0/22	Up	17304741100	3157554	10102508511
1114221
Gi 0/23 523329

Table 15-2. monitor Command Menu Options

Key	Description
systest-3 Displays the host name assigned to the system.
monitor time Displays the amount of time since themonitorcommand was entered.
time Displays the amount of time the chassis is up (since last reboot).
m Change the view from a single interface to all interfaces on the line card or visa-versa.
c Refresh the view.
b Change the counters displayed from Packets on the interface to Bytes.
r Change the [delta] column from change in the number of packets/bytes in the last interval to rate per second.
l Change the view to next interface on the line card, or if in the line card mode, the next line card in the chassis.
a Change the view to the previous interface on the line card, or if the line card mode, the previous line card in the chassis.
T Increase the screen refresh rate.
t Decrease the screen refresh rate.
q Return to the CLI prompt.

mtu

Set the maximum Link MTU (frame size) for an Ethernet interface.

Syntax

mtu value

To return to the default MTU value, enter no mtu.

Parameters

value

Enter a maximum frame size in bytes.

Range: 594 to 9252

Default: 1554

Defaults

1554

Command Modes

INTERFACE

Command History

Version 8.3.3.4 Introduced on S-Series

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.2.1.0 Introduced for E-Series

Usage Information

If the packet includes a Layer 2 header, the difference between the link MTU and IP MTU (ip mtu command) must be enough bytes to include the Layer 2 header:

- On C-Series, the IP MTU will get adjusted automatically when the Layer 2 MTU is configured with the mtu command.

- On the E-Series, you must compensate for a Layer 2 header when configuring IP MTU and link MTU on an Ethernet interface. Use the ip mtu command.

When you enter the no mtu command, FTOS reduces the IP MTU value to 1536 bytes. On the E-Series, to return the IP MTU value to the default, enter no ip mtu.

Link MTU and IP MTU considerations for port channels and VLANs are as follows.

port channels:

- All members must have the same link MTU value and the same IP MTU value.

- The port channel link MTU and IP MTU must be less than or equal to the link MTU and IP MTU values configured on the channel members.

Example: if the members have a link MTU of 2100 and an IP MTU 2000, the port channel's MTU values cannot be higher than 2100 for link MTU or 2000 bytes for IP MTU.

VLANs:

• All members of a VLAN must have same IP MTU value.
• Members can have different Link MTU values. Tagged members must have a link MTU 4 bytes higher than untagged members to account for the packet tag.
• The VLAN link MTU and IP MTU must be less than or equal to the link MTU and IP MTU values configured on the VLAN members.

Example

The VLAN contains tagged members with Link MTU of 1522 and IP MTU of 1500 and untagged members with Link MTU of 1518 and IP MTU of 1500. The VLAN's Link MTU cannot be higher than 1518 bytes and its IP MTU cannot be higher than 1500 bytes.

Table 15-3. Difference between Link MTU and IP MTU

Layer 2 Overhead Link MTU and IP MTU Delta
Ethernet (untagged) 18 bytes
VLAN Tag 22 bytes
Untagged Packet with VLAN-Stack Header 22 bytes
Tagged Packet with VLAN-Stack Header 26 bytes

negotiation auto

Enable auto-negotiation on an interface.

Syntax

negotiation auto

To disable auto-negotiation, enter no negotiation auto.

Defaults

Enabled.

Command Modes

INTERFACE

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.2.1.0 Introduced for E-Series

Usage Information

This command is available on C-Series and S-Series 10/100/1000 Base-T Ethernet interfaces and on TeraScale 10/100/1000 Base-T Ethernet line cards.

The no negotiation auto command is only available if you first manually set the speed of a port to 10Mbits or 100Mbits.

The negotiation auto command provides a mode option for configuring an individual port to forced-master/forced slave once auto-negotiation is enabled

Note: The mode option is not available on non-10/100/1000 Base-T Ethernet line cards.

Figure 15-20. negotiation auto Master/Slave Example

FTOS (conf)# int gi 0/0
FTOS (conf-if)#neg auto
FTOS (conf-if-autoneg)# ?
end    Exit from configuration mode
exit    Exit from autoneg configuration mode
mode    Specify autoneg mode
no    Negate a command or set its defaults
show    Show autoneg configuration information
FTOS (conf-if-autoneg)#mode ?
forced-master    Force port to master mode
forced-slave    Force port to slave mode
FTOS (conf-if-autoneg)# 

If the mode option is not used, the default setting is slave. If you do not configure forced-master or forced slave on a port, the port negotiates to either a master or a slave state. Port status is one of the following:

• Forced-master
• Force-slave
• Master
• Slave
• Auto-neg Error—typically indicates that both ends of the node are configured with forced-master or forced-slave.

Caution: Ensure that one end of your node is configured as forced-master and one is configured as forced-slave. If both are configured the same (that is forced-master or forced-slave), the show interfaces command will flap between an auto-neg-error and forced-master/slave states.

You can display master/slave settings with the show interfaces command.

Figure 15-21. Display Auto-negotiation Master/Slave Setting (partial)

FTOS#show interfaces configured
GigabitEthernet 13/18 is up, line protocol is up
Hardware is Force10Eth, address is 00:01:e8:05:f7:fc
Current address is 00:01:e8:05:f7:fc
Interface index is 474791997
Internet address is 1.1.1.1/24
MTU 1554 bytes, IP MTU 1500 bytes
LineSpeed 1000 Mbit, Mode full duplex, Master
ARP type: ARPA, ARP Timeout 04:00:00
Last clearing of "show interfaces" counters 00:12:42
Queueing strategy: fifo
Input Statistics:
... 

Both sides of the link must have auto-negotiation enabled or disabled for the link to come up.

The following table details the possible speed and auto-negotiation combinations for a line between two 10/100/1000 Base-T Ethernet interfaces.

Table 15-4. Auto-negotiation and Link Speed Combinations

Port 0 Port 1		Link Status between Port 1 and Port 2
auto-negotiation enabled* speed 1000 or auto	auto-negotiation enabled* speed 1000 or auto	Up at 1000 Mb/s
auto-negotiation enabled speed 100	auto-negotiation enabled speed 100	Up at 100 Mb/s
auto-negotiation disabled speed 100	auto-negotiation disabled speed 100	Up at 100 Mb/s
auto-negotiation disabled speed 100	auto-negotiation enabled speed 100	Down
auto-negotiation enabled* speed 1000 or auto	auto-negotiation disabled speed 100	Down

* You cannot disable auto-negotiation when the speed is set to 1000 or auto.

Related Commands

speed (for 10/100/1000 interfaces) Set the link speed to 10, 100, 1000 or auto-negotiate the speed.

portmode hybrid

Set a physical port or port-channel to accept both tagged and untagged frames. A port configured this way is identified as a hybrid port in report displays.

Syntax portmode hybrid

To return a port to accept either tagged or untagged frames (non-hybrid), use the no portmode hybrid command.

Defaults non-hybrid

Command Modes INTERFACE (conf-if-interface-slot/port)

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on E-Series and S-Series

Version 7.5.1.0 Introduced on C-Series only

Example

Figure 15-22. portmode hybrid configuration example

FTOS(conf)#interface gi 7/0
FTOS(conf-if-gi-7/0)#portmode hybrid
FTOS(conf-if-gi-7/0)#interface vlan 10
FTOS(conf-if-vl-10)#untagged gi 7/0
FTOS(conf-if-vl-10)#interface vlan 20
FTOS(conf-if-vl-20)#tagged gi 7/0
FTOS(conf-if-vl-20)#

Usage Information

The figure above sets a port as hybrid, makes the port a tagged member of VLAN 20, and an untagged member of VLAN 10, which becomes the native VLAN of the port. The port will now accept:

• untagged frames and classify them as VLAN 10 frames
  • VLAN 20 tagged frames

The next figure is an example show output with “Hybrid” as the newly added value for 802.1QTagged. The options for this field are:

• True—port is tagged
• False—port is untagged
• Hybrid—port accepts both tagged and untagged frames

Example

Figure 15-23. Display the Tagged Hybrid Interface

FTOS(conf-if-vl-20)#do show interfaces switchport
Name: GigabitEthernet 7/0
802.1QTagged: Hybrid
Vlan membership:
Vlan 10, Vlan 20
Native VlanId: 10
FTOS(conf-if-vl-20)# 

The figure below is an example unconfiguration of the hybrid port using the no portmode hybrid command.

Note: You must remove all other configurations on the port before you can remove the hybrid configuration from the port.

Example

Figure 15-24. Unconfigure the hybrid port

FTOS(conf-if-vl-20)#interface vlan 10
FTOS(conf-if-vl-10)#no untagged gi 7/0
FTOS(conf-if-vl-10)#interface vlan 20
FTOS(conf-if-vl-20)#no tagged gi 7/0
FTOS(conf-if-vl-20)#interface gi 7/0
FTOS(conf-if-gi-7/0)#no portmode hybrid
FTOS(conf-if-vl-20)#

Related Commands

show interfaces switchport Display the configuration of switchport (Layer 2) interfaces on the switch.

switchport Place the interface in a Layer 2 mode.

vlan-stack trunk Specify an interface as a trunk port to the Stackable VLAN network.

rate-interval

Configure the traffic sampling interval on the selected interface.

Syntax
rate-interval seconds

Parameters

seconds

Enter the number of seconds for which to collect traffic data. Range: 30 to 299 seconds Note: Since polling occurs every 15 seconds, the number of seconds designated here will round to the multiple of 15 seconds lower than the entered value. For example, if 44 seconds is designated it will round to 30; 45 to 59 seconds will round to 45, and so forth.

Defaults 299 seconds

Command Modes INTERFACE

Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	Version 6.1.1.0 Introduced

Usage The configured rate interval is displayed, along with the collected traffic data, in the output of show Information interfaces commands.

Related Commands

show interfaces Display information on physical and virtual interfaces.

show config

Display the interface configuration.

Syntax
show config
Command Modes INTERFACE

Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.2.1.0 Introduced for E-Series

Example

Figure 15-25. show config Command Example for the INTERFACE Mode

FTOS(conf-if)#show conf
!
interface GigabitEthernet 1/7
no ip address
switchport
no shutdown
FTOS(conf-if)# 

show config (from INTERFACE RANGE mode)

Display the bulk configured interfaces (interface range).

Syntax

show config

Command Modes

CONFIGURATION INTERFACE (conf-if-range)

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

Version 6.1.1.0 Introduced on E-Series

Example

Figure 15-26. show config (Bulk Configuration) Command Example

FTOS(conf)#interface range gigabitethernet 1/1 - 2
FTOS(conf-if-range-gi-1/1-2)#show config
!
interface GigabitEthernet 1/1
no ip address
switchport
no shutdown
!
interface GigabitEthernet 1/2
no ip address
switchport
no shutdown
FTOS(conf-if-range-gi-1/1-2)#

show interfaces

Display information on a specific physical interface or virtual interface.

Syntax
show interfaces interface

Parameters

interface

Enter one of the following keywords and slot/port or number information:For a Fast Ethernet interface, enter the keywordFastEthernetfollowed by the slot/port information.For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For a Loopback interface, enter the keywordloopbackfollowed by a number from 0 to 16383.For the management interface on an RPM, enter the keywordManagementEthernetfollowed by the slot/port information. The slot range is 0-1 and the port range is 0.For a Null interface, enter the keywordsnull 0.For a port channel interface, enter the keywordport-channelfollowed by a number:C-Series and S-Series Range: 1-128E-Series Range: 1 to 255 for TeraScale and ExaScaleFor a SONET interface, enter the keywordsonetfollowed by the slot/port.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernetfollowed by the slot/port information.For a VLAN interface, enter the keywordvlanfollowed by a number from 1 to 4094.

Command Modes
EXEC

EXEC Privilege
Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.2.1.2 Include SFP and SFP+ optics power detail in E-Series and C-Series output.

Version 8.2.1.0 Support for 4093 VLANs on E-Series ExaScale. Prior releases supported 2094.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.8.1.0 Output expanded to include SFP+ media in C-Series

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

Version 6.4.1.0 Changed organization of display output

Version 6.3.1.0 Added Pluggable Media Type field in E-Series TeraScale output

Usage

Use this show interfaces command for details on a specific interface. Use the show interfaces linecard command for details on all interfaces on the designated line card.

Example

Figure 15-27. show interfaces Command Example for 10G Port (E-Series)

Table 15-5. Lines in show interfaces Command Example

Line Description
TenGigabitEthernet 2/0... Displays the interface's type, slot/port, and administrative and line protocol status.
Hardware is... Displays the interface's hardware information and its assigned MAC address.
Interface index... Displays the interface index number used by SNMP to identify the interface.
Internet address... States whether an IP address is assigned to the interface. If one is, that address is displayed.
MTU 1554... Displays link and IP MTU information.If the chassis is in Jumbo mode, this number can range from 576 to 9252.
LineSpeed Displays the interface's line speed.
ARP type:... Displays the ARP type and the ARP timeout value for the interface.
Last clearing...	Displays the time when the show interfaces counters where cleared.
Queuing strategy... States the packet queuing strategy. FIFO means first in first out.
Input Statistics: Displays all the	input statistics including:Number of packets and bytes into the interfaceNumber of packets with IP headers, VLAN tagged headers and MPLS headersNote:The sum of the number of packets may not be as expected since a VLAN tagged IP packet counts as both a VLAN packet and an IP packet.Packet size and the number of those packets inbound to the interfaceNumber of symbol errors, runts, giants, and throttles packets:runts = number of packets that are less than 64Bgiants = packets that are greater than the MTU sizethrottles = packets containing PAUSE framesNumber of CRC, IP Checksum, overrun, and discarded packets:CRC = packets with CRC/FCS errorsIP Checksum = packets with IP Checksum errorsoverrun = number of packets discarded due to FIFO overrun conditionsdiscarded = the sum of input symbol errors, runts, giants, CRC, IPChecksum, and overrun packets discarded without any processing
Output Statistics: Displays output statistics sent out of the interface including:Number of packets, bytes and underruns out of the interfacepackets = total number of packetsbytes = total number of bytesunderruns = number of packets with FIFO underrun conditionsNumber of Multicast, Broadcast and Unicast packets:Multicasts = number of MAC multicast packetsBroadcasts = number of MAC broadcast packetsUnicasts = number of MAC unicast packetsNumber of IP, VLAN and MPLs packets:IP Packets = number of IP packetsVlans = number of VLAN tagged packetsMPLS = number of MPLS packets (found on a LSR interface)Number of throttles and discards packets:throttles = packets containing PAUSE framesdiscarded = number of packets discarded without any processing
Rate information... Estimate of	the input and output traffic rate over a designated interval (30 to 299 seconds).Traffic rate is displayed in bits, packets per second, and percent of line rate.
Time since... Elapsed time since	the last interface status change (hh:mm:ss format).

Example

Figure 15-28. show interfaces Command Example for 10G (TeraScale)

Table 15-6. Fields in show interfaces Command Example (TeraScale)

Line Description
TenGigabitEthernet 0/0... Interface type, slot/port and administrative and line protocol status.
Hardware is... Interface hardware information, assigned MAC address, and current address.
Pluggable media present... Present pluggable media wavelength, type, and rate. The error scenarios are:Wavelength, Non-qualified — FTOS ID is not present, but wavelength information is available from XFP or SFP serial dataWavelength, F10 unknown—FTOS ID is present, but not able to determine the optics typeUnknown, Non-qualified— if wavelength is reading error, and FTOS ID is not presentDell Networking allows unsupported SFP and XFP transceivers to be used, but FTOS might not be able to retrieve some data about them. In that case, typically when the output of this field is “Pluggable media present, Media type is unknown”, the Medium and the XFP/SFP receive power reading data might not be present in the output.
Interface index... Displays the interface index number used by SNMP to identify the interface.
Internet address... States whether an IP address is assigned to the interface. If one is, that address is displayed.
MTU 1554... Displays link and IP MTU information.
LineSpeed Displays the interface’s line speed, duplex mode, and Slave
ARP type:... Displays the ARP type and the ARP timeout value for the interface.

Table 15-6. Fields in show interfaces Command Example (TeraScale)

Line Description
Last clearing...	Displays the time when theshow interfacescounters where cleared.
Queuing strategy... States the packet queuing strategy. FIFO means first in first out.
Input Statistics: Displays all the	input statistics including:Number of packets and bytes into the interfaceNumber of packets with VLAN tagged headersPacket size and the number of those packets inbound to the interfaceNumber of Multicast and Broadcast packets:Multicasts = number of MAC multicast packetsBroadcasts = number of MAC broadcast packetsNumber of runts, giants, and throttles packets:runts = number of packets that are less than 64Bgiants = packets that are greater than the MTU sizethrottles = packets containing PAUSE framesNumber of CRC, overrun, and discarded packets:CRC = packets with CRC/FCS errorsoverrun = number of packets discarded due to FIFO overrun conditionsdiscarded = the sum of runts, giants, CRC, and overrun packets discarded without any processing
Output Statistics: Displays output	statistics sent out the interface including:Number of packets, bytes and underruns out of the interfacePacket size and the number of those packets outbound to the interfaceNumber of Multicast, Broadcast and Unicast packets:Multicasts = number of MAC multicast packetsBroadcasts = number of MAC broadcast packetsUnicasts = number of MAC unicast packetsNumber of VLANs, throttles, discards, and collisions:Vlans = number of VLAN tagged packetsthrottles = packets containing PAUSE framesdiscarded = number of packets discarded without any processingcollisions = number of packet collisionswred=count both packets discarded in the MAC and in thehardware-based queues
Rate information... Estimate of	the input and output traffic rate over a designated interval (30 to 299 seconds)Traffic rate is displayed in bits, packets per second, and percent of line rate.
Time since... Elapsed time since	the last interface status change (hh:mm:ss format).

Example

Figure 15-29. show interfaces Command Example for 1G SFP Interface

FTOS#show interfaces gigabitethernet 2/0
GigabitEthernet 2/0 is up, line protocol is down
Hardware is Force10Eth, address is 00:01:e8:41:77:95
Current address is 00:01:e8:41:77:95
Pluggable media present, SFP type is 1000BASE-SX
Wavelength is 850nm
Interface index is 100974648
Port will not be disabled on partial SFM failure
Internet address is not set
MTU 1554 bytes, IP MTU 1500 bytes
LineSpeed 1000 Mbit
Flowcontrol rx on tx on
ARP type: ARPA, ARP Timeout 04:00:00
Last clearing of "show interface" counters 1w0d5h
Queueing strategy: fifo
Input Statistics:
    0 packets, 0 bytes
    0 Vlans
    0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts
    0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts
    0 Multicasts, 0 Broadcasts
    0 runts, 0 giants, 0 throttles
    0 CRC, 0 overrun, 0 discarded
Output Statistics:
    0 packets, 0 bytes, 0 underruns
    0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts
    0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts
    0 Multicasts, 0 Broadcasts, 0 Unicasts
    0 Vlans, 0 throttles, 0 discarded, 0 collisions, 0 wreddrops
Rate info (interval 299 seconds):
    Input 00.00 Mbits/sec,    0 packets/sec, 0.00% of line-rate
    Output 00.00 Mbits/sec,    0 packets/sec, 0.00% of line-rate
Time since last interface status change: 1w0d5h
FTOS# 

Example

Figure 15-30. show interfaces Command Example for 10G SFP+ Interface in C-Series

FTOS#show interfaces tengigabitethernet 0/44
TenGigabitEthernet 0/44 is down, line protocol is down
Hardware is Force10Eth, address is 00:01:e8:32:44:26
Current address is 00:01:e8:32:44:26
Pluggable media present, SFP+ type is 10GBASE-CU5M
Medium is MultiRate
Interface index is 45417732
FTOS# 

Usage Information

On the C-Series and S-Series, the interface counter “over 1023-byte pkts” does not increment for packets in the range 9216 > x < 1023.

Related Commands

show interfaces configured Display any interface with a non-default configuration.
show interfaces linecard Display information on all interfaces on a specific line card.
show interfaces phy
show interfaces rate	Display information of either rate limiting or rate policing on the interface.
show interfaces switchport Display Layer 2 information about the interfaces.
show inventory (C-Series and E-Series)	Display the chassis type, components (including media), FTOS version including hardware identification numbers and configured protocols.
show inventory (S-Series) Display the S-Series switch type, components (including media), FTOS version including hardware identification numbers and configured protocols.
show ip interface Display Layer 3 information about the interfaces.

show linecard Display the line card(s) status.

show range Display all interfaces configured using the interface range command.

show interfaces configured

Display any interface with a non-default configuration.

Syntax

show interfaces configured

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

Version 6.4.1.0 Changed organization of display output

Example

Figure 15-31. show interfaces configured Command Output

FTOS#show interfaces configured
GigabitEthernet 13/18 is up, line protocol is up
Hardware is Force10Eth, address is 00:01:e8:05:f7:fc
Current address is 00:01:e8:05:f7:fc
Interface index is 474791997
Internet address is 1.1.1.1/24
MTU 1554 bytes, IP MTU 1500 bytes
LineSpeed 1000 Mbit, Mode full duplex, Master
ARP type: ARPA, ARP Timeout 04:00:00
Last clearing of "show interfaces" counters 00:12:42
Queueing strategy: fifo
Input Statistics:
10 packets, 10000 bytes
0 Vlans
0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts
0 over 255-byte pkts, 10 over 511-byte pkts, 0 over 1023-byte pkts
0 Multicasts, 0 Broadcasts
0 runts, 0 giants, 0 throttles
0 CRC, 0 overrun, 0 discarded
Output Statistics:
1 packets, 64 bytes, 0 underruns
1 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts
0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts
0 Multicasts, 1 Broadcasts, 0 Unicasts
0 Vlans, 0 throttles, 0 discarded, 0 collisions
Rate info (interval 299 seconds):
Input 00.00 Mbits/sec,    0 packets/sec, 0.00% of line-rate
Output 00.00 Mbits/sec,    0 packets/sec, 0.00% of line-rate
Time since last interface status change: 00:04:59
FTOS# 

Related Commands

show interfaces Display information on a specific physical interface or virtual interface.

show interfaces dampening

Display interface dampening information.

Syntax
show interfaces dampening [[interface] [summary] [detail]]

Parameters	interface	(Optional) Enter one of the following keywords and slot/port or number information:For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For a port channel interface, enter the keywordport-channelfollowed by a number:C-Series and S-Series Range: 1-128E-Series Range: 1 to 255 for TeraScale and ExaScaleFor a SONET interface, enter the keywordsonetfollowed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernetfollowed by the slot/port information.
	summary	(OPTIONAL) Enter the keywordsummaryto display the current summary of dampening data, including the number of interfaces configured and the number of interfaces suppressed, if any.
	detail	(OPTIONAL) Enter the keyworddetailto display detailed interface dampening data.

Defaults
No default values or behavior
Command Modes
EXEC
Command History
Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale
Version 7.6.1.0 Introduced on S-Series
Version 7.5.1.0 Introduced on C-Series
Version 7.4.1.0 Introduced
Example
Figure 15-32. show interfaces dampening Command Example

FTOS#show interfaces dampening
Interface	Supp State	Flaps	Penalty	Half-Life	Reuse	Suppress	Max-Sup
Gi 3/2	Up	0	0	20	800	4500	120
Gi 3/10	Up	0	0	5	750	2500	20
FTOS#

Related Commands
dampening Configure dampening on an interface
show interfaces Display information on a specific physical interface or virtual interface.
show interfaces configured Display any interface with a non-default configuration.

show interfaces debounce

E Display information on interfaces with debounce timer configured.

Syntax show interfaces debounce interface

Parameters	interface	Enter one of the following keywords and slot/port or number information:
		For a 1-Gigabit Ethernet interface, enter the keyword followed by the slot/port information.	GigabitEthernet
		For a 10-Gigabit Ethernet interface, enter the keyword followed by the slot/port information.	TenGigabitEthernet
Command Modes	EXEC
	EXEC Privilege
Command History	Version 8.2.1.0 Introduced on E-Series ExaScale
	Version 7.7.1.0 Introduced on E-Series
Related Commands	show interfaces Display information on a specific physical interface or virtual interface.

show interfaces description

C E S Display the descriptions configured on the interface.

Syntax show interfaces [interface] description

Parameters

interface

Enter one of the following keywords and slot/port or number information:For a Fast Ethernet interface, enter the keywordFastEthernetfollowed by the slot/port information.For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For Loopback interfaces, enter the keywordloopbackfollowed by a number from 0 to 16383.For the management interface on the RPM, enter the keywordManagementEthernetfollowed by the slot/port information. The slot range is 0-1 and the port range is 0.For the Null interface, enter the keywordsnull 0.For a port channel interface, enter the keywordport-channelfollowed by a number:C-Seriesand S-SeriesRange: 1-128E-SeriesRange: 1 to 255 for TeraScale and ExaScaleFor SONET interfaces, enter the keywordsonetfollowed by the slot/port.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernetfollowed by the slot/port information.For VLAN interfaces, enter the keywordvlanfollowed by a number from 1 to 4094.

Command Modes EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55. Version 8.2.1.0 Support for 4093 VLANs on E-Series ExaScale. Prior releases supported 2094.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.2.1.1 Introduced on E-Series

Example

Figure 15-33. show interfaces description Command Example

FTOS>
Interface		OK?	Status	Protocol	Description
GigabitEthernet 4/17		NO	admin down	down	***connected-to-host***
GigabitEthernet 4/18		NO	admin down	down	***connected-to-Tom***
GigabitEthernet 4/19		NO	admin down	down	***connected-to-marketing***
GigabitEthernet 4/20		NO	admin down	down	***connected-to-Bill***
GigabitEthernet 4/21		NO	up	down	***connected-to-Radius-Server***
GigabitEthernet 4/22		NO	admin down	down	***connected-to-Web-Server***
GigabitEthernet 4/23		NO	admin down	down	***connected-to-PC-client***
TenGigabitEthernet 6/0		NO	admin down	down
GigabitEthernet 8/0		YES	up	up
GigabitEthernet 8/1		YES	up	up
GigabitEthernet 8/2		YES	up	up
GigabitEthernet 8/3		YES	up	up
GigabitEthernet 8/4		YES	up	up
GigabitEthernet 8/5		YES	up	up
GigabitEthernet 8/6		YES	up	up
GigabitEthernet 8/7		YES	up	up
GigabitEthernet 8/8		YES	up	up
GigabitEthernet 8/9		YES	up	up
GigabitEthernet 8/10		YES	up	up
GigabitEthernet 8/11		YES	up	up
FTOS>

Table 15-7. show interfaces description Command Example Fields

Field Description
Interface Displays type of interface and associated slot and port number.
OK? Indicates if the hardware is functioning properly.
Status States whether the interface is enabled (up) or disabled (administratively down).
Protocol States whether IP is enabled (up) or disabled (down) on the interface.
Description Displays the description (if any) manually configured for the interface.

Related Commands

show interfaces Display information on a specific physical interface or virtual interface.

show interfaces linecard

Display information on all interfaces on a specific line card.

Syntax

show interfaces linecard slot-number

Parameters

slot-number

Enter a number for the line card slot.

C-Series Range: 0-7 for C300; 0-3 for C150

E-Series Range: 0 to 13 on the E1200/1200i, 0 to 6 on the E600/600i, 0 to 5 on the E300

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.1.1.2 Introduced support on E-Series ExaScale E600i

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.2.1.1 Introduced on E-Series

Usage

Figure 15-34 shows a line card that has an XFP interface. The type, medium, wavelength, and receive power details are displayed. When a device that is not certified by Dell Networking is inserted, it might work, but its details might not be readable by FTOS and not displayed here.

Example

Figure 15-34. show interfaces linecard Command Example (in C150)

FTOS#show interfaces linecard 0
TenGigabitEthernet 0/0 is down, line protocol is down
Hardware is Force10Eth, address is 00:01:e8:51:b2:d4
Current address is 00:01:e8:51:b2:d4
Pluggable media present, XFP type is 10GBASE-SR
Medium is MultiRate, Wavelength is 850.00nm
XFP receive power reading is -2.3538
Interface index is 33883138
Internet address is not set
MTU 1554 bytes, IP MTU 1500 bytes
LineSpeed 10000 Mbit
ARP type: ARPA, ARP Timeout 04:00:00
Last clearing of "show interface" counters 20:16:29
Queueing strategy: fifo
Input Statistics:
0 packets, 0 bytes
0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts
0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts
0 Multicasts, 0 Broadcasts
0 runts, 0 giants, 0 throttles
0 CRC, 0 overrun, 0 discarded
Output Statistics:
0 packets, 0 bytes, 0 underruns
0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts
--More-- 

Related Commands

show interfaces Display information on a specific physical interface or virtual interface.

show interfaces phy

CES

Display auto-negotiation and link partner information.

Syntax

show interfaces gigabitethernet slot/port phy

Parameters

gigabitethernet

Enter the keyword gigabitethernet followed by the slot/port information.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on C-Series and S-Series

Version 6.5.4.0 Introduced on E-Series

Example

Figure 15-35. show interfaces gigabitethernet phy Command Example (Partial)

Table 15-8. Lines in show interfaces gigabitethernet Command Example

Line Description
Mode Control Indicates if auto negotiation is enabled. If so, indicates the selected speed and duplex.
Mode Status Displays auto negotiation fault information. When the interface completes auto negotiation successfully, the autoNegComplete field and the linkstatus field read “True.”
AutoNegotiation Advertise Displays the control words advertised by the local interface during negotiation. Duplex is either half or full. Asym- and Sym Pause is the types of flow control supported by the local interface.
AutoNegotiation Remote Partner’s Ability	Displays the control words advertised by the remote interface during negotiation. Duplex is either half or full. Asym- and Sym Pause is the types of flow control supported by the remote interface

Table 15-8. Lines in show interfaces gigabitethernet Command Example

Line Description
AutoNegotiation Expansion ParallelDetectionFault is the handshaking scheme in which the link partner continuously transmit an “idle” data packet using the Fast Ethernet MLT-3 waveform. Equipment that does not support auto-negotiation must be configured to exactly match the mode of operation as the link partner or else no link can be established.
1000Base-T Control 1000Base-T requires auto-negotiation. The IEEE Ethernet standard does not support setting a speed to 1000 Mbps with the speed command without auto-negotiation. E-Series line cards support both full-duplex and half-duplex 1000BaseT.
Phy Specific Control Values are:	0 - Manual MDI1 - Manual MDIX2 - N/A3 - Auto MDI/MDIX
Phy Specific Status Displays PHY-specific status information. Cable length represents a rough estimate in meters:0 - < 50 meters1 - 50 - 80 meters2 - 80 - 110 meters3 - 110 - 140 meters4 - 140 meters.Link Status:Up or DownSpeed:Auto1000MB100MB10MB

Related Commands

show interfaces Display information on a specific physical interface or virtual interface.

show interfaces stack-unit

S Display information on all interfaces on a specific S-Series stack member.

Syntax show interfaces stack-unit unit-number

Parameters

unit-number

Enter the stack member numberUnit ID range:S55: 0-11all other S-Series: 0-7

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Introduced for S-Series only

Example

Figure 15-36. show interfaces status Command Example

FTOS#show interfaces stack-unit 0
GigabitEthernet 0/1 is down, line protocol is down
Hardware is Force10Eth, address is 00:01:e8:4c:f2:82
Current address is 00:01:e8:4c:f2:82
Pluggable media not present
Interface index is 34129154
Internet address is not set
MTU 1554 bytes, IP MTU 1500 bytes
LineSpeed auto, Mode auto
ARP type: ARPA, ARP Timeout 04:00:00
Last clearing of "show interface" counters 3w0d17h
Queueing strategy: fifo
Input Statistics:
0 packets, 0 bytes
5144 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts
0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts
0 Multicasts, 0 Broadcasts
0 runts, 0 giants, 0 throttles
0 CRC, 0 overrun, 0 discarded
Output Statistics:
0 packets, 0 bytes, 0 underruns
0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts
0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts
0 Multicasts, 0 Broadcasts, 0 Unicasts
0 throttles, 0 discarded, 0 collisions
Rate info (interval 299 seconds):
Input 00.00 Mbits/sec,    0 packets/sec, 0.00% of line-rate
Output 00.00 Mbits/sec,    0 packets/sec, 0.00% of line-rate
Time since last interface status change: 3w0d17h

GigabitEthernet 0/2 is down, line protocol is down
Hardware is Force10Eth, address is 00:01:e8:4c:f2:83
Current address is 00:01:e8:4c:f2:83
!----output truncated ----! 

Related Commands

show hardware stack-unit Display data plane and management plane input/output statistics.

show interfaces Display information on a specific physical interface or virtual interface.

show interfaces status

Display a summary of interface information or specify a line card slot and interface to display status information on that specific interface only.

Syntax

show interfaces [interface | linecard slot-number] status

Parameters

interface	(OPTIONAL) Enter one of the following keywords and slot/port or number information:For a 1-Gigabit Ethernet interface, enter the keyword followed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
linecard slot-number	(OPTIONAL) Enter the keyword linecard followed by the slot number.C-Series Range: 0 to 7 for C300; 0–3 for C150E-Series Range: 0 to 13 on the E1200, 0 to 6 on the E600, 0 to 5 on the E300

Defaults

No default behavior or values

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

Version 7.5.1.0 Introduced on E-Series

Example

Figure 15-37. show interfaces status Command Example

FTOS#show interfaces status
Port	Description	Status	Speed		Duplex	Vlan
Gi 0/0		Up	1000	Mbit	Auto	--
Gi 0/1		Down	Auto		Auto	1
Gi 0/2		Down	Auto		Auto	1
Gi 0/3		Down	Auto		Auto	--
Gi 0/4	Force10Port	Up	1000	Mbit	Auto	30-130
Gi 0/5		Down	Auto		Auto	--
Gi 0/6		Down	Auto		Auto	--
Gi 0/7		Up	1000	Mbit	Auto	1502,1504,1506-1508,1602
Gi 0/8		Down	Auto		Auto	--
Gi 0/9		Down	Auto		Auto	--
Gi 0/10		Down	Auto		Auto	--
Gi 0/11		Down	Auto		Auto	--
Gi 0/12		Down	Auto		Auto	--
Gi 0/13		Down	Auto		Auto	--
Gi 0/14		Down	Auto		Auto	--
Gi 0/15		Down	Auto		Auto	--
FTOS#

Related Commands

show interfaces Display information on a specific physical interface or virtual interface.

show interfaces switchport

Display only virtual and physical interfaces in Layer 2 mode. This command displays the Layer 2 mode interfaces' IEEE 802.1Q tag status and VLAN membership.

Syntax

show interfaces switchport [interface [linecard slot-number] | stack-unit unit-id]

Parameters

interface	Enter one of the following keywords and slot/port or number information:For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For a port channel interface, enter the keywordport-channelfollowed by a number:C-Series and S-Series Range: 1-128E-Series Range: 1 to 255 for TeraScale and ExaScaleFor SONET interfaces, enter the keywordsonetfollowed by the slot/port information. This keyword is only available on E-Series and C-Series.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernet followed by the slot/port information.Enter the keywordbackupto view the backup interface for this interface.
linecard slot-number	(OPTIONAL) Enter the keywordlinecardfollowed by the slot number. This option is available only on E-Series and C-Series.C-Series Range: 0-7 for C300; 0-3 for C150E-Series Range: 0 to 13 on the E1200, 0 to 6 on the E600, 0 to 5 on the E300
stack-unit unit-id	(OPTIONAL) Enter the keywordstack-unitfollowed by the stack member number.This option is available only on S-Series.Unit ID range:S55: 0-11all other S-Series: 0-7

Command Modes
EXEC EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.2.1.0 Support for 4093 VLANs on E-Series ExaScale

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Support added for hybrid port/native VLAN, introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series legacy command

Example

Figure 15-38. show interfaces switchport Command Example

FTOS#show interfaces switchport
Name: GigabitEthernet 13/0
802.1QTagged: Hybrid
Vlan membership:
Vlan 2, Vlan 20
Native VlanId: 20

Name: GigabitEthernet 13/1
802.1QTagged: True
Vlan membership:
Vlan 2

Name: GigabitEthernet 13/2
802.1QTagged: True
Vlan membership:
Vlan 2

Name: GigabitEthernet 13/3
802.1QTagged: True
Vlan membership:
Vlan 2

--More-- 

Table 15-9. Items in show interfaces switchport Command Example

Items Description
Name Displays the interface's type, slot and port number.
802.1QTagged Displays whether if the VLAN tagged (“True”), untagged (“False”), or hybrid (“Hybrid”, which supports both untagged and tagged VLANs by port 13/0.
Vlan membership Lists the VL	ANs to which the interface is a member. Starting with FTOS 7.6.1, this field can display native VLAN membership by port 13/0.

Related Commands

interface Configure a physical interface on the switch.

show ip interface Displays Layer 3 information about the interfaces.

show interfaces Display information on a specific physical interface or virtual interface.

show interfaces transceiver Display the physical status and operational status of an installed transceiver. The output also displays the transceiver's serial number.

show interfaces transceiver

Display the physical status and operational status of an installed transceiver. The output also displays the transceiver's serial number.

Syntax

show interfaces [gigabitethernet | tengigabitethernet] slot/port transceiver

Parameters

gigabitethernet	For a 10/100/1000 interface, enter the keyword gigabitethernet followed by the slot/port information.
tengigabitethernet	For a 10G interface, enter the keyword tengigabitethernet followed by the slot/port information.

Command Modes	EXEC
	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.8.1.0 Output augmented with diagnostic data for pluggable media
	Version 7.7.1.0 Removed three fields in output: Vendor Name, Vendor OUI, Vendor PN
	Version 7.6.1.0 Introduced on C-Series and S-Series
	Version 6.5.4.0 Introduced on E-Series
Usage	See the figure below for an example screenshot, and see the following table or a description of the output fields.
	For related commands, see the Related Commands section, below, and see the Debugging and Diagnostics chapter for your platform at the end of this book.

Example

Figure 15-39. show interfaces gigabitethernet transceiver Command Example

FTOS#show interfaces gigabitethernet 1/0 transceiver SFP is present.

SFP 0 Serial Base ID fields

SFP 0 Id = 0x03

SFP 0 Ext Id = 0x04

SFP 0 Connector = 0x07

SFP 0 Transciever Code = 0x00 0x00 0x00 0x01 0x20 0x40 0x0c 0x05

SFP 0 Encoding = 0x01

SFP 0 BR Nominal = 0x15

SFP 0 Length(9um) Km = 0x00

SFP 0 Length(9um) 100m = 0x00

SFP 0 Length(50um) 10m = 0x1e

SFP 0 Length(62.5um) 10m = 0x0f

SFP 0 Length(Copper) 10m = 0x00

SFP 0 Vendor Rev = A

SFP 0 Laser Wavelength = 850 nm

SFP 0 CheckCodeBase = 0x66

SFP 0 Serial Extended ID fields

SFP 0 Options= 0x00 0x12

SFP 0 BR max= 0

SFP 0 BR min= 0

SFP 0 Vendor SN= P5N1ACE

SFP 0 Datecode = 040528

SFP 0 CheckCodeExt = 0x5b

SFP 1 Diagnostic Information

SFP 1 Rx Power measurement type = Average

SFP 1 Temp High Alarm threshold = 95.000C

SFP 1 Voltage High Alarm threshold = 3.900V

SFP 1 Bias High Alarm threshold = 17.000mA

SFP 1 TX Power High Alarm threshold = 0.631mW

SFP 1 RX Power High Alarm threshold = 1.259mW

SFP 1 Temp Low Alarm threshold = -25.000C

SFP 1 Voltage Low Alarm threshold = 2.700V

SFP 1 Bias Low Alarm threshold = 1.000mA

SFP 1 TX Power Low Alarm threshold = 0.067mW

SFP 1 RX Power Low Alarm threshold = 0.010mW

SFP 1 Temp High Warning threshold = 90.000C

SFP 1 Voltage High Warning threshold = 3.700V

SFP 1 Bias High Warning threshold = 14.000mA

SFP 1 TX Power High Warning threshold = 0.631mW

SFP 1 RX Power High Warning threshold = 0.794mW

SFP 1 Temp Low Warning threshold = -20.000C

SFP 1 Voltage Low Warning threshold = 2.900V

SFP 1 Bias Low Warning threshold = 2.000mA

SFP 1 TX Power Low Warning threshold = 0.079mW

SFP 1 RX Power Low Warning threshold = 0.016mW

SFP 1 Temperature = 39.930C

SFP 1 Voltage = -3.293V

SFP 1 Tx Bias Current = 6.894mA

SFP 1 Tx Power = -3.328mW

SFP 1 Rx Power = -3.328mW

SFP 1 Data Ready state Bar = False

SFP 1 Rx LOS state = True

SFP 1 Tx Fault state = False

SFP 1 Rate Select state = False

SFP 1 RS state = False

SFP 1 Tx Disable state = False

SFP 1 Temperature High Alarm Flag = False

SFP 1 Voltage High Alarm Flag = False

SFP 1 Tx Bias High Alarm Flag = False

SFP 1 Tx Power High Alarm Flag = False

SFP 1 Rx Power High Alarm Flag = False

SFP 1 Temperature Low Alarm Flag = False

SFP 1 Voltage Low Alarm Flag = False

SFP 1 Tx Bias Low Alarm Flag = False

SFP 1 Tx Power Low Alarm Flag = False

SFP 1 Rx Power Low Alarm Flag = True

Table 15-10. Diagnostic Data in show interfaces transceiver

Line Description
Rx Power measurement type Output depends on the vendor, typically either “Average” or “OMA” (Receiver optical modulation amplitude).
Temp High Alarm threshold Factory-defined setting, typically in Centigrade. Value differs between SFPs and SFP+.
Voltage High Alarm threshold Displays the interface index number used by SNMP to identify the interface.
Bias High Alarm threshold Factory-defined setting. Value can differ between SFP and SFP+.
TX Power High Alarm threshold Factory-defined setting. Value can differ between SFP and SFP+.
RX Power High Alarm threshold Factory-defined setting. Value can differ between SFP and SFP+.
Temp Low Alarm threshold Factory-defined setting. Value can differ between SFP and SFP+.
Voltage Low Alarm threshold Factory-defined setting. Value can differ between SFP and SFP+.
Bias Low Alarm threshold Factory-defined setting. Value can differ between SFP and SFP+.
TX Power Low Alarm threshold Factory-defined setting. Value can differ between SFP and SFP+.
RX Power Low Alarm threshold Factory-defined setting. Value can differ between SFP and SFP+.
Temp High Warning threshold Factory-defined setting. Value can differ between SFP and SFP+.
Voltage High Warning threshold Factory-defined setting. Value can differ between SFP and SFP+.
Bias High Warning threshold Factory-defined setting. Value can differ between SFP and SFP+.
TX Power High Warning threshold Factory-defined setting. Value can differ between SFP and SFP+.
RX Power High Warning threshold Factory-defined setting. Value can differ between SFP and SFP+.
Temp Low Warning threshold Factory-defined setting. Value can differ between SFP and SFP+.
Voltage Low Warning threshold Factory-defined setting. Value can differ between SFP and SFP+.
Bias Low Warning threshold Factory-defined setting. Value can differ between SFP and SFP+.
TX Power Low Warning threshold Factory-defined setting. Value can differ between SFP and SFP+.
Power Low Warning threshold Factory-defined setting. Value can differ between SFP and SFP+.
Temperature Current temperature of the sfps. If this temperature crosses Temp High alarm/warning thresholds, then the temperature high alarm/warning flag is set to true.
Voltage Current voltage of the sfps. If this voltage crosses voltage high alarm/warning thresholds, then the voltage high alarm/warning flag is set to true.
Tx Bias Current Present Tx bias current of the SFP. If this crosses bias high alarm/warning thresholds, then the tx bias high alarm/warning flag is set to true. If it falls below the low alarm/warning thresholds, then the tx bias low alarm/warning flag is set to true.
Line	Description
Tx Power Present Tx power of	the SFP. If this crosses Tx power alarm/warning thresholds, then the Tx power high alarm/warning flag is set to true. If it falls below the low alarm/warning thresholds, then the Tx power low alarm/warning flag is set to true.
Rx Power Present Rx power of	the SFP. This value is either average Rx power or OMA. This depends upon on the Rx Power measurement type displayed above. If this crosses Rx power alarm/warning thresholds, then the Rx power high alarm/warning flag is set to true. If it falls below the low alarm/warning thresholds, then the Rx power low alarm/warning flag is set to true.
Data Ready state Bar This field	indicates that the transceiver has achieved power up and data is ready. This is set to true if data is ready to be sent, false if data is being transmitted.
Rx LOS state This is the digital	state of the Rx_LOS output pin. This is set to true if the operating status is down.
Tx Fault state This is the digital	state of the Tx Fault output pin.
Rate Select state This is the digital	state of the SFP rate_select input pin.
RS state This is the reserved digital	state of the pin AS(1) per SFF-8079 and RS(1) per SFF-8431.
Tx Disable state If the admin status of the port is down then this flag will be set to true.
Temperature High Alarm Flag	This can be either true/False and it depends on the Current Temperature value displayed above.
Voltage High Alarm Flag	This can be either true or false, depending on the Current voltage value displayed above.
Tx Bias High Alarm Flag	This can be either true or false, depending on the present Tx bias current value displayed above.
Tx Power High Alarm Flag	This can be either true or false, depending on the Current Tx power value displayed above.
Rx Power High Alarm Flag	This can be either true or false, depending on the Current Rx power value displayed above.
Temperature Low Alarm Flag	This can be either true or false, depending on the Current Temperature value displayed above.
Voltage Low Alarm Flag	This can be either true or false, depending on the Current voltage value displayed above.
Tx Bias Low Alarm Flag	This can be either true or false, depending on the Tx bias current value displayed above.
Tx Power Low Alarm Flag	This can be either true or false, depending on the Current Tx power value displayed above.
Rx Power Low Alarm Flag	This can be either true or false, depending on the Current Rx power value displayed above.
Temperature High Warning Flag	This can be either true or false, depending on the Current Temperature value displayed above.
Voltage High Warning Flag	This can be either true or false, depending on the Current voltage value displayed above.
Tx Bias High Warning Flag	This can be either true or false, depending on the Tx bias current value displayed above.
Line Description
Tx Power High Warning Flag	This can be either true or false, depending on the Current Tx power value displayed above.
Rx Power High Warning Flag	This can be either true or false, depending on the Current Tx power value displayed above.
Temperature Low Warning Flag	This can be either true or false, depending on the Current Temperature value displayed above.
Voltage Low Warning Flag	This can be either true or false, depending on the Current voltage value displayed above.
Tx Bias Low Warning Flag	This can be either true or false, depending on the present Tx bias current value displayed above.
Tx Power Low Warning Flag	This can be either true or false, depending on the Current Tx power value displayed above.
Rx Power Low Warning Flag	This can be either true or false, depending on the Current Rx power value displayed above.

Related Commands

interface Configure a physical interface on the switch.
show ip interface Displays Layer 3 information about the interfaces.
show interfaces Display information on a specific physical interface or virtual interface.
show inventory (C-Series and E-Series)	Display the chassis type, components (including media), FTOS version including hardware identification numbers and configured protocols.
show inventory (S-Series)	Display the S-Series switch type, components (including media), FTOS version including hardware identification numbers and configured protocols.

show range

Display all interfaces configured using the interface range command.

Syntax

show range

Command Mode

INTERFACE RANGE (config-if-range)

Command History

Version 8.3.5.0	Introduced on the S55.
Version 8.2.1.0	Support for 4093 VLANs on E-Series ExaScale
Version 8.1.1.0	Introduced on E-Series ExaScale
Version 7.6.1.0	Introduced on S-Series
Version 7.5.1.0	Introduced on C-Series
Version 6.1.1.0	Introduced

Example

Figure 15-40. show range Command Example

FTOS (conf-if-range-so-2/0-1, fa-0/0) # show range interface sonet 2/0 - 1 interface fastethernet 0/0 FTOS (conf-if-range-so-2/0-1, fa-0/0) #

Related Commands

interface Configure a physical interface on the switch.

show ip interface Displays Layer 3 information about the interfaces.

show interfaces Display information on a specific physical interface or virtual interface.

shutdown

Disable an interface.

Syntax

shutdown

To activate an interface, enter no shutdown.

Defaults

The interface is disabled.

Command Modes

INTERFACE

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series legacy command

Usage Information

The shutdown command marks a physical interface as unavailable for traffic. To discover if an interface is disabled, use the show ip interface brief command. Disabled interfaces are listed as down.

Disabling a VLAN or a port channel causes different behavior. When a VLAN is disabled, the Layer 3 functions within that VLAN are disabled. Layer 2 traffic continues to flow. Entering the shutdown command on a port channel disables all traffic on the port channel and the individual interfaces within the port channel. To enable a port channel, you must enter no shutdown on the port channel interface and at least one interface within that port channel.

The shutdown and description commands are the only commands that you can configure on an interface that is a member of a port channel.

Related Commands

interface port-channel Create a port channel interface.

interface vlan Create a VLAN.

show ip interface

Displays the interface routing status. Add the keyword brief to display a table of interfaces and their status.

speed (for 10/100/1000 interfaces)

Set the speed for 10/100/1000 Base-T Ethernet interfaces. Both sides of a link must be set to the same speed (10/100/1000) or to auto or the link may not come upSyntax

speed {10 | 100 | 1000 | auto}

To return to the default setting, use the no speed {10 | 100 | 1000} command.

Parameters

10	Enter the keyword 10 to set the interface’s speed to 10 Mb/s.
100	Enter the keyword 100 to set the interface’s speed to 10/100 Mb/s.
1000	Enter the keyword 1000 to set the interface’s speed to 1000 Mb/s.(Auto-negotiation is enabled. See negotiation auto for more information).
auto	Enter the keyword auto to set the interface to auto-negotiate its speed.(Auto-negotiation is enabled. See negotiation auto for more information)

Defaults
auto

Command Modes
INTERFACE
Command History

Version 8.3.5.0 Introduced on the S55.
Version 8.3.1.0	Supported on LC-EH-GE-50P or the LC-EJ-GE-50P cards.
Version 8.1.1.0 Introduced on E-Series ExaScale
Version 7.6.1.0 Introduced on S-Series
Version 7.5.1.0 Introduced on C-Series
E-Series legacy command

Usage Information

This command is found on the 10/100/1000 Base-T Ethernet interfaces.

With speed 1000 configured on a copper interface, the speed is not auto-negotiated. The interface will operate only at 1000 Mbps.

With speed 100 configured on a copper interface, the speed is auto-negotiated. The interface will operate at 10 Mbps or at 100 Mbps.

When auto is enabled, the system performs and automatic discovery to determine the optics installed and configure the appropriate speed.

When you configure a speed for the 10/100/1000 interface, you should confirm the negotiation auto command setting. Both sides of the link should have auto-negotiation either enabled or disabled. For speed settings of 1000 or auto, the software sets the link to auto-negotiation, and you cannot change that setting.

Note: Starting with FTOS 7.8.1.0, when a copper SFP2 module with catalog number GP-SFP2-1T is used in the S25P model of the S-Series, its speed can be manually set with the speed command. When the speed is set to 10 or 100 Mbps, the duplex command can also be executed.

Related Commands

duplex (10/100 Interfaces)	Configure duplex mode on physical interfaces with the speed set to 10/100.
negotiation auto Enable or disable auto-negotiation on an interface.

speed (Management interface)

Set the speed for the Management interface.

Syntax

speed {10 | 100 | auto}

To return to the default setting, use the no speed 10 100 command.

Parameters

10	Enter the keyword 10 to set the interface's speed to 10 Mb/s.
100	Enter the keyword 100 to set the interface's speed to 100 Mb/s.
auto	Enter the keyword auto to set the interface to auto-negotiate its speed.

Defaults

auto

Command Modes

INTERFACE

Command History

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.2.1.0 Introduced for E-Series

Usage Information

This command is found on the Management interface only.

Related Commands

interface ManagementEthernet Configure the Management port on the system (either the Primary or Standby RPM).

duplex (Management) Set the mode of the Management interface.

management route Configure a static route that points to the Management interface or a forwarding router.

switchport

Place the interface in Layer 2 mode.

Syntax

switchport [backup interface {gigabit | tengigabit} slot/port]

To remove the interface from Layer 2 mode and place it in Layer 3 mode, enter no switchport. If a switchport backup relationship exists, remove that relationship first.

To remove a switchport backup relationship created on this port, enter no switchport backup interface {gigabit | tengigabit} slot/port].

Parameters

backup interface	Use this option to configure a redundant Layer 2 link without using Spanning Tree. This keyword configures a backup port so that if the primary port fails the backup port changes to the up state. If the primary later comes up, it becomes the backup.
gigabit	Enter this keyword if the backup port is a 1G port.
tengigabit	Enter this keyword if the backup port is a 10G port.
slot/port	Specify the line card and port number of the backup port.

Defaults

Disabled (The interface is in Layer 3 mode.)

Command Modes	INTERFACE
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.7.1.0 Added backup interface option.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.2.1.0 Introduced for E-Series
Usage Information	If an IP address or VRRP group is assigned to the interface, you cannot use the switchport command for that interface. To use the switchport command on an interface, only the no ip address and no shutdown statements must be listed in the show config for that command.When you enable the switchport command, the interface is automatically added to the Default VLAN.To use the switchport backup interface command on a port, first execute the switchport command on the port. For details, see the section Configuring Redundant Links in the Layer 2 chapter of the FTOS Configuration Guide.
Related Commands	interface port-channel Create a port channel interface.show interfaceswitchport Display information about switchport interfaces.

wanport

Enable the WAN mode on a TenGigabitEthernet interface.

Syntax wanport

To disable the WAN Port, enter no wanport.

Defaults Not configured.

Command Modes CONFIGURATION

Command History

Version 8.1.1.2 Introduced on E-Series ExaScale

pre-Version 6.2.1.0 Introduced for E-Series

Usage Information

The port must be in a shutdown state to change from LAN mode to WAN mode and vice-versa as shown in the figure below.

For E-Series ExaScale systems, you must configure all the ports in a port-pipe to either WANPHY or non-WANPHY. They cannot be mixed on the same port-pipe.

Example

Figure 15-41. wanport Command with shutdown Command Example

interface TenGigabitEthernet 13/0
no ip address
no shutdown
FTOS (conf-if-te-13/0)#
FTOS (conf-if-te-13/0) # wanport
% Error: Port should be in shutdown mode, config ignored Te 13/0.
FTOS (conf-if-te-13/0)#
FTOS (conf-if-te-13/0) # shutdown
FTOS (conf-if-te-13/0)#
FTOS (conf-if-te-13/0) # wanport
FTOS (conf-if-te-13/0) # 

Port Channel Commands

A Link Aggregation Group (LAG) is a group of links that appear to a MAC client as if they were a single link according to IEEE 802.3ad. In FTOS, a LAG is referred to as a Port Channel.

Table 15-11. Port Channel Limits

Platform	Maximum Port Channel IDs	Maximum Members per Port Channel
E-Series ExaScale 255 64
E-Series TeraScale 255 16
C-Series 128 8
S-Series 128 8

Because each port can be assigned to only one Port Channel, and each Port Channel must have at least one port, some of those nominally available Port Channels might have no function because they could have no members if there are not enough ports installed. In the S-Series, those ports could be provided by stack members.

The commands in this section are specific to Port Channel interfaces:

• channel-member
• group
• interface port-channel
• minimum-links
  • port-channel failover-group
  • show config
  • show interfaces port-channel
  • show port-channel-flow

Note: The FTOS implementation of LAG or Port Channel requires that you configure a LAG on both switches manually. For information on FTOS Link Aggregation Control Protocol (LACP) for dynamic LAGs, refer to Chapter 20, Link Aggregation Control Protocol (LACP).

For more information on configuring and using Port Channels, refer to the FTOS Configuration Guide.

channel-member

Add an interface to the Port Channel, while in the INTERFACE PORTCHANNEL mode.

Syntax

channel-member interface

To delete an interface from a Port Channel, use the no channel-member interface command.

Parameters

interface

Enter the following keywords and slot/port or number information:For a 100/1000 Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.For a SONET interface, enter the keyword sonet followed by the slot/port information.For a Ten Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.

Defaults

Not configured.

Command Modes

INTERFACE PORTCHANNEL

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.2.1.0 Introduced for E-Series

Usage Information

Use the interface port-channel command to access this command.

You cannot add an interface to a Port Channel if the interface contains an IP address in its configuration. Only the shutdown, description, mtu, and ip mtu commands can be configured on an interface if it is to be added to a Port Channel. The mtu and ip mtu commands are only available when the chassis is in Jumbo mode.

Link MTU and IP MTU considerations for Port Channels are:

• All members must have the same link MTU value and the same IP MTU value.
• The Port Channel link MTU and IP MTU must be less than or equal to the link MTU and IP MTU values configured on the channel members.
  Example: If the members have a link MTU of 2100 and an IP MTU 2000, the Port Channel's MTU values cannot be higher than 2100 for link MTU or 2000 bytes for IP MTU.

When an interface is removed from a Port Channel with the no channel-member command syntax, the interface reverts to its configuration prior to joining the Port Channel.

An interface can belong to only one Port Channel.

On the E-Series TeraScale, you can add up to 16 interfaces to a Port Channel; E-Series ExaScale can have up to 64. You can have eight interfaces per Port Channel on the C-Series and S-Series. The interfaces can be located on different line cards but must be the same physical type and speed (for example, all 1-Gigabit Ethernet interfaces). However, you can combine 100/1000 interfaces and GE interfaces in the same Port Channel.

If the Port Channel contains a mix of interfaces with 100 Mb/s speed and 1000 Mb/s speed, the software disables those interfaces whose speed does not match the speed of the first interface configured and enabled in the Port Channel. If that first interface goes down, the Port Channel does not change its designated speed; you must disable and re-enable the Port Channel or change the order of the channel members configuration to change the designated speed. Refer to the FTOS Configuration Guide for more information on Port Channels.

Related Commands

description Assign a descriptive text string to the interface.

interface port-channel Create a Port Channel interface.

shutdown Disable/Enable the port channel.

group

Group two LAGs in a supergroup (“fate-sharing group” or “failover group”).

Syntax

group group_number port-channel number port-channel number

To remove an existing LAG supergroup, use the no group group_number command.

Parameters

group_number	Enter an integer from 1 to 32 that will uniquely identify this LAG fate-sharing group.
port-channel number	Enter the keyword port-channel followed by an existing LAG number.Enter this keyword/variable combination twice, identifying the two LAGs to be paired.

Defaults

No default values or behavior

Command Modes

PORT-CHANNEL FAILOVER-GROUP (conf-po-failover-grp)

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced for C-Series, E-Series, and S-Series

Example

FTOS(conf)#port-channel failover-group FTOS(conf-po-failover-grp)#group 1 port-channel 1 port-channel 2 FTOS(conf-po-failover-grp)#

Related Commands

port-channel failover-group Access the PORT-CHANNEL FAILOVER-GROUP mode to configure a LAG failover group.

show interfaces port-channel Display information on configured Port Channel groups.

interface port-channel

Create a Port Channel interface, which is a link aggregation group containing up to 16 physical interfaces on E-Series, eight physical interfaces on C-Series and S-Series.

Syntax

interface port-channel channel-number

To delete a Port Channel, use the no interface port-channel channel-number command.

Parameters

channel-number

Enter a number as the interface number.

C-Series and S-Series Range: 1-128

E-Series Range: 1 to 255 for TeraScale and ExaScale

Defaults

Not configured.

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.2.1.0 Introduced for E-Series

Example

Figure 15-42. interface port-channel Command Example

FTOS (conf) #int port-channel 2

FTOS (conf-if-po-2) #

Usage Information

Port Channel interfaces are logical interfaces and can be either in Layer 2 mode (by using the switchport command) or Layer 3 mode (by configuring an IP address). You can add a Port Channel in Layer 2 mode to a VLAN.

The shutdown, description, and name commands are the only commands that you can configure on an interface while it is a member of a Port Channel. To add a physical interface to a Port Channel, the interface can only have the shutdown, description, and name commands configured. The Port Channel's configuration is applied to the interfaces within the Port Channel.

A Port Channel can contain both 100/1000 interfaces and GE interfaces. Based on the first interface configured in the Port Channel and enabled, FTOS determines if the Port Channel uses 100 Mb/s or 1000 Mb/s as the common speed. Refer to channel-member for more information.

If the line card is in a Jumbo mode chassis, then the mtu and ip mtu commands can also be configured. The Link MTU and IP MTU values configured on the channel members must be greater than the Link MTU and IP MTU values configured on the Port Channel interface.

Note: In a Jumbo-enabled system, all members of a Port Channel must be configured with the same link MTU values and the same IP MTU values.

Related Commands

channel-member Add a physical interface to the LAG.

interface Configure a physical interface.

interface loopback Configure a Loopback interface.

interface null Configure a null interface.

interface vlan Configure a VLAN.

shutdown Disable/Enable the port channel.

minimum-links

Configure the minimum number of links in a LAG (Port Channel) that must be in “oper up” status for the LAG to be also in “oper up” status.

Syntax minimum-links number

Parameters

number

Enter the number of links in a LAG that must be in “oper up” status. Range: 1 to 16 Default: 1

Defaults 1

Command Modes INTERFACE

Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.2.1.0 Introduced for E-Series

Usage Information If you use this command to configure the minimum number of links in a LAG that must be in “oper up” status, then the LAG must have at least that number of “oper up” links before it can be declared as up.

For example, if the required minimum is four, and only three are up, then the LAG will be considered down.

port-channel failover-group

Access the PORT-CHANNEL FAILOVER-GROUP mode to configure a LAG failover group.

Syntax port-channel failover-group

To remove all LAG failover groups, use the no port-channel failover-group command.

Defaults No default values or behavior

Command Modes CONFIGURATION

Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Introduced for C-Series, E-Series, and S-Series
Usage Information	This feature groups two LAGs to work in tandem as a supergroup, so that, for example, if one LAG goes down, the other LAG is taken down automatically, providing an alternate path to reroute traffic, avoiding oversubscription on the other LAG. You can use both static and dynamic (LACP) LAGs to configure failover groups. For details, see the Port Channel chapter in theFTOS Configuration Guide.
Related Commands	group Group two LAGs in a supergroup (“fate-sharing group”).
	show interfaces port-channel Display information on configured Port Channel groups.

show config

Display the current configuration of the selected LAG.

Syntax

show config

Command Modes

INTERFACE PORTCHANNEL

Example

Figure 15-43. show config Command Sample Output for a Selected LAG

FTOS (conf-if-po-1) #show config
!
interface Port-channel 1
no ip address
shutdown
FTOS (conf-if-po-1) # 

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.2.1.1 Introduced on E-Series

show interfaces port-channel

Display information on configured Port Channel groups.

Syntax

show interfaces port-channel [channel-number] [brief]

Parameters

channel-number	(OPTIONAL) Enter the number of the port channel to display information on that port channel:C-Series and S-Series Range: 1-128E-Series Range: 1 to 255 for TeraScale and ExaScale
brief	(OPTIONAL) Enter the keyword brief to display only the port channel number, the state of the port channel, and the number of interfaces in the port channel.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced for S-Series; Modified to display LAG failover group status

Version 7.5.1.0 Introduced for C-Series

E-Series legacy command

Example

Figure 15-44. show interfaces port-channel Command Example

FTOS#show interfaces port-channel 20
Port-channel 20 is up, line protocol is up (Failover-group 1 is down)
Hardware address is 00:01:e8:01:46:fa
Port-channel is part of failover-group 1
Internet address is 1.1.120.1/24
MTU 1554 bytes, IP MTU 1500 bytes
LineSpeed 2000 Mbit
Members in this channel: Gi 0/5 Gi 0/18
ARP type: ARPA, ARP timeout 04:00:00
Last clearing of "show interfaces" counters 00:00:00
Queueing strategy: fifo
44507301 packets input, 3563070343 bytes
Input 44506754 IP Packets, 0 Vlans 0 MPLS
41 64-byte pkts, 44502871 over 64-byte pkts, 249 over 127-byte pkts
407 over 255-byte pkts, 3127 over 511-byte pkts, 606 over 1023-byte pkts
Received 0 input symbol errors, 0 runts, 0 giants, 0 throttles
0 CRC, 0 IP Checksum, 0 overrun, 0 discarded
1218120 packets output, 100745130 bytes, 0 underruns
Output 5428 Multicasts, 4 Broadcasts, 1212688 Unicasts
1216142 IP Packets, 0 Vlans, 0 MPLS
0 throttles, 0 discarded
Rate info (interval 299 sec):
Input 01.50Mbits/sec, 2433 packets/sec
Output 00.02Mbits/sec, 4 packets/sec
Time since last interface status change: 00:22:34
FTOS# 

Table 15-12. show interfaces port-channel Command Example Fields

Field Description
Port-Channel 1... Displays the LAG's status. In the example, the status of the LAG's LAG fate-sharing group ("Failover-group") is listed.
Hardware is... Displays the interface's hardware information and its assigned MAC address.
Port-channel is part... Indicates whether the LAG is part of a LAG fate-sharing group ("Failover-group").
Internet address... States whether an IP address is assigned to the interface. If one is, that address is displayed.
MTU 1554... Displays link and IP MTU.
LineSpeed Displays the interface's line speed. For a port channel interface, it is the line speed of the interfaces in the port channel.
Members in this... Displays the interfaces belonging to this port channel.
ARP type:... Displays the ARP type and the ARP timeout value for the interface.
Last clearing...	Displays the time when the show interfaces counters were cleared.
Queuing strategy...	States the packet queuing strategy. FIFO means first in first out.
packets input...	Displays the number of packets and bytes into the interface.
Input 0 IP packets... Displays the number of packets with IP headers, VLAN tagged headers and MPLS headers.The number of packets may not add correctly because a VLAN tagged IP packet counts as both a VLAN packet and an IP packet.
0 64-byte... Displays the size of packets and the number of those packets entering that interface. This information is displayed over two lines.
Received 0... Displays the type and number of errors or other specific packets received.This information is displayed over three lines.
Output 0... Displays the type and number of packets sent out the interface. This information is displayed over three lines.
Rate information... Displays the traffic rate information into and out of the interface. Traffic rate is displayed in bits and packets per second.
Time since... Displays the time since the last change in the configuration of this interface.

Figure 15-45. show interfaces port-channel brief Command Example

FTOS#sh int por 1 br
LAG Mode Status Uptime Ports
1 L2 up 00:00:08 Gi 3/0 (Up) *
			Gi 3/1 (Down)
			Gi 3/2 (Up)
FTOS#

Table 15-13. show interfaces port-channel brief Command Example Fields

Field Description
LAG Lists the port channel number.
Mode Lists the mode:	• L3 - for Layer 3• L2 - for Layer 2
Status Displays the status of the port	channel.• down - if the port channel is disabled (shutdown)• up - if the port channel is enabled (no shutdown)
Uptime Displays the age of the port	channel in hours:minutes:seconds.
Ports Lists the interfaces assigned to	this port channel.
(untitled)	Displays the status of the physical interfaces (up or down).In Layer 2 port channels, an * (asterisk) indicates which interface is the primary port of the port channel. The primary port sends out interface PDU.In Layer 3 port channels, the primary port is not indicated.

Related Commands

show lacp

Display the LACP matrix.

show port-channel-flow

Display an egress port in a given port-channel flow.

Syntax

show port-channel-flow outgoing-port-channel number incoming-interface interface {source-ip address destination-ip address} | {protocol number | icmp | tcp | udp} | {source-port number destination-port number} | {source-mac address destination-mac address}

Parameters

outgoing-port-channel number	Enter the keyword outgoing-port-channel followed by the number of the port channel to display flow information.·For a port channel interface, enter the keyword port-channel followed by a number:C-Series Range: 1-128E-Series Range: 1 to 255 for TeraScale and ExaScale
incoming-interface interface	Enter the keyword incoming-interface followed by the interface type and slot/port or number information:·For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.·For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.·For a SONET interface, enter the keyword sonet followed by the slot/port information.·For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
source-ip address	Enter the keyword source-ip followed by the IP source address in IP address format.
destination-ip address	Enter the keyword destination-ip followed by the IP destination address in IP address format.
protocol number | icmp | tcp | udp	On the E-Series only, enter the keyword protocol followed by one of the protocol typekeywords: tcp, udp, icmp or protocol numberNote: The protocol number keyword applies to E-Series only.
source-port number	Enter the keyword source-port followed by the source port number.Range: 1-65536Default: None
destination-port number	Enter the keyword destination-port followed by the destination port number.Range: 1-65536Default: None
source-mac address	Enter the keyword source-mac followed by the MAC source address in the nn:nn:nn:nn:nn:nn format.
destination-mac address	Enter the keyword destination-mac followed by the MAC destination address in the nn:nn:nn:nn:nn:nn format.

Command Modes

EXEC

Usage Information

Since this command calculates based on a Layer 2 hash algorithm, use this command to display flows for switched Layer 2 packets, not for routed packets (use the show ip flow command to display routed packets).

The show port-channel-flow command returns the egress port identification in a given port-channel, if a valid flow is entered. A mismatched flow error occurs if MAC-based hashing is configured for a Layer 2 interface and the user is trying to display a Layer 3 flow.

The output will display three entries:

• Egress port for unfragmented packets.
• In the event of fragmented packets, egress port of the first fragment.
• In the event of fragmented packets, egress port of the subsequent fragments.

Example

show port-channel-flow outgoing-port-channel number incoming-interface interface source-mac address destination-mac address

• Load-balance is configured for MAC
• Load balance is configured for IP 4-tuple/2-tuple for the C-Series and S-Series
• A non-IP payload is going out of Layer 2 LAG interface that is a member of VLAN with an IP address.

Figure 15-46. show port-channel-flow Command for MAC Addresses

FTOS#show port-channel-flow outgoing-port-channel 1 incoming-interface gi 3/0 source-mac 00:00:50:00:00:00 destination-mac 00:00:a0:00:00:00

Egress Port for port-channel 1, for the given flow, is Te 13/01

Example

On the E-Series only:

show port-channel-flow outgoing-port-channel number incoming-interface interface source-ip address destination-ip address {protocol number [icmp/tcp/udp]} {source-port number destination-port number}

• Load balance is configured for IP 5-tuple/3-tuple.
• An IP payload is going out of a Layer 2 LAG interface that is a member of a VLAN with an IP address.

FTOS#show port-channel-flow outgoing-port-channel 2 incoming-interface gi 3/0 source-ip 2.2.2.0 destination-ip 3.2.3.1 protocol tcp source-port 5 destination-port 6

Egress Port for port-channel 2, for the given flow: Unfragmented packet: Gi 1/6

Fragmented packets (first fragment): Gi 1/12

Fragmented packets (remaining fragments): Gi 1/12

Related Commands

load-balance (E-Series) Balance traffic over E-Series port channel members.

IPv4 Routing

Overview

The characters that appear below command headings indicate support for the associated Dell Networking platform, as follows:

• C-Series: ©
• E-Series: E
• S-Series: 5

Commands

IPv4-related commands are described in this chapter. They are:

• arp
• arp learn-enable
• arp retries
• arp timeout
• clear arp-cache
• clear host
• clear ip fib stackunit
• clear ip route
• clear tcp statistics
• debug arp
• debug ip dhcp
• debug ip icmp
• debug ip packet
• ip address
• ip directed-broadcast
• ip domain-list
• ip domain-lookup
• ip domain-name
• ip fib download-igp-only
• ip helper-address
• ip host
• ip max-frag-count
• ip mtu

- ip helper-address hop-count disable

• ip name-server
• ip proxy-arp
• ip redirects
• ip route
• ip source-route
• ip unreachables
• ip vlan-flooding
• load-balance (C-Series and S-Series)
• load-balance (E-Series)
• management route
  • show arp
  • show arp retries
  • show hosts
  • show ip cam linecard
  • show ip cam stack-unit
  • show ip fib linecard
  • show ip fib stack-unit
  • show ip flow
  • show ip interface
  • show ip management-route
  • show ip protocols
  • show ip route
  • show ip route list
  • show ip route summary
  • show ip traffic
  • show protocol-termination-table
  • show tcp statistics

arp

Use Address Resolution Protocol (ARP) to associate an IP address with a MAC address in the switch.

Syntax

arp vrf {vrf name} ip-address mac-address interface

To remove an ARP address, use the no arp ip-address command.

Parameters

vrf name	E-Series Only: Enter the VRF process identifier to tie the static route to the VRF process.
ip-address	Enter an IP address in dotted decimal format.

	mac-address	Enter a MAC address in nnnn.nnnn.nnnn format.
	interface	Enter the following keywords and slot/port or number information:For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.For the Management interface, enter the keyword ManagementEthernet followed by the slot/port information. The slot range is 0-1 and the port range is 0.For a Port Channel interface, enter the keyword port-channel followed by a number:C-Series and S-Series Range: 1-128E-Series Range: 1 to 32 for EtherScale, 1 to 255 for TeraScale.For a SONET interface, enter the keyword sonet followed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
Defaults	Not configured.
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.2.1.1 Introduced on E-Series
Usage Information	You cannot use Class D or Class E IP addresses or zero IP address (0.0.0.0) when creating a static ARP.Zero MAC addresses (00:00:00:00:00:00) are also invalid.
Related Commands	clear arp-cache Clear dynamic ARP entries from the ARP table.
	show arp Display ARP table.

arp learn-enable

Enable ARP learning via Gratuitous ARP.

Syntax arp learn-enable

Defaults Disabled

Command Modes CONFIGURATION

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.3.1.0 Introduced

Usage Information In FTOS versions prior to 8.3.1.0, if a gratuitous ARP is received some time after an ARP request is sent, only RP2 installs the ARP information. For example:

1 At time t=0 FTOS sends an ARP request for IP A.B.C.D

2 At time t=1 FTOS receives an ARP request for IP A.B.C.D

3 At time t=2 FTOS installs an ARP entry for A.B.C.D only on RP2.

Beginning with version 8.3.1.0, when a Gratuitous ARP is received, FTOS installs an ARP entry on all 3 CPUs.

arp retries

C

E

S

Set the number of ARP retries in case the system does not receive an ARP reply in response to an ARP request.

Syntax

Parameters

arp retries number

number	Enter the number of retries.
	Range: 5 to 20.
	Default: 5

Defaults
5

Command Modes
CONFIGURATION

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.3.1.0 Introduced

Usage Information

Retries are 20 seconds apart.

Related Commands

show arp retries Display the configured number of ARP retries.

arp timeout

C

E

S

Set the time interval for an ARP entry to remain in the ARP cache.

Syntax
arp timeout minutes

To return to the default value, enter no arp timeout.

Parameters

seconds	Enter the number of minutes.
	Range: 0 to 35790.
	Default: 240 minutes.

Defaults

240 minutes (4 hours)

Command Modes
INTERFACE

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Related Commands

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.2.1.1 Introduced on E-Series

show interfaces Displays the ARP timeout value for all available interfaces.

clear arp-cache

Clear the dynamic ARP entries from a specific interface or optionally delete (no-refresh) ARP entries from CAM.

Syntax

clear arp-cache [vrf name | interface | ip ip-address] [no-refresh]

Parameters

vrf name	E-Series Only: Clear only the ARP cache entries tied to the VRF process.
interface	(OPTIONAL) Enter the following keywords and slot/port or number information:For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.For the Management interface, enter the keyword ManagementEthernet followed by the slot/port information. The slot range is 0-1 and the port range is 0.For a Port Channel interface, enter the keyword port-channel followed by a number:C-Series and S-Series Range: 1-128E-Series Range: 1 to 32 for EtherScale, 1 to 255 for TeraScale.For a SONET interface, enter the keyword sonet followed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.
ip ip-address	(OPTIONAL) Enter the keyword ip followed by the IP address of the ARP entry you wish to clear.
no-refresh	(OPTIONAL) Enter the keyword no-refresh to delete the ARP entry from CAM.Or use this option with interface or ip ip-address to specify which dynamic ARP entries you want to delete.Note: Transit traffic may not be forwarded during the period when deleted ARP entries are resolved again and re-installed in CAM. Use this option with extreme caution.

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.2.1.0 Support 4094 VLANs on E-Series ExaScale (prior limit was 2094)

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.9.1.0 Introduced VRF on the E-Series

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.2.1.1 Introduced on E-Series

clear host

Remove one or all dynamically learnt host table entries.

Syntax
clear host name

Parameters	name	Enter the name of the host to delete.Enter * to delete all host table entries.
Command Modes	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series

clear ip fib stackunit

Clear all Forwarding Information Base (fib) entries in the specified stack unit (use this command with caution, see Usage Information below)

Syntax
clear ip fib stackunit /D

Parameters	ID	Enter the stack unit ID.S55 Range: 0-11C-Series and S-Series Range: 0-7E-Series Range: 0 to 13 on E12001200i, 0 to 6 on E600/E600i; 0 to 5 on E300
Command Mode	EXEC
	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.2 Introduced support on E-Series ExaScale E600i
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.9.1.0 Introduced VRF on the E-Series
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.2.1.1 Introduced on E-Series
Usage Information	Use this command to clear Layer 3 CAM inconsistencies.△Caution: Executing this command will cause traffic disruption.
Related Commands	show ip fib linecard	Show FIB entries.

clear ip route

Clear one or all routes in the routing table.

Syntax
clear ip route {* | ip-address mask | vrf vrf instance}

Parameters	* Enter an asterisk (*) to clear all learned IP routes.
	ip-address mask	Enter a specific IP address and mask in dotted decimal format to clear that IP address from the routing table.
	vrf instance	(Optional) E-Series Only: Clear only the routes tied to the VRF instance.
Command Modes	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.9.1.0 Introduced VRF
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.2.1.1 Introduced on E-Series
Related Commands	ip route Assign an IP route to the switch.
	show ip route View the routing table.
	show ip route summary View a summary of the routing table.

clear tcp statistics

Clear TCP counters.

Syntax
clear tcp statistics [all | cp | rp1 | rp2]
Note: These options are supported only on the E-Series.

Parameters	all	Enter the keyword all to clear all TCP statistics maintained on all switch processors.
	cp	(OPTIONAL) Enter the cp to clear only statistics from the Control Processor.
	rp1	(OPTIONAL) Enter the keyword rp1 to clear only the statistics from Route Processor 1.
	rp2	(OPTIONAL) Enter the keyword rp2 to clear only the statistics from Route Processor 2.
Command Modes	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.2.1.1 Introduced on E-Series

debug arp

View information on ARP transactions.

Syntax

debug arp [interface] [count value]

To stop debugging ARP transactions, enter no debug arp.

Parameters

interface

(OPTIONAL) Enter the following keywords and slot/port or number information:For a 1-Gigabit Ethernet interface, enter the keyword gigabitethernet followed by the slot/port information.For the Management interface, enter the keyword managementethernet followed by the slot/port information. The slot range is 0-1 and the port range is 0.For a Port Channel interface, enter the keyword port-channel followed by a number:C-Series and S-Series Range: 1-128E-Series Range: 1 to 32 for EtherScale, 1 to 255 for TeraScale.For a SONET interface, enter the keyword sonet followed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keyword tengigabitethernet followed by the slot/port information.For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.

count value

(OPTIONAL) Enter the keyword count followed by the count value.Range: 1 to 65534

Command Modes
EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.2.1.0 Support 4094 VLANs on E-Series ExaScale (prior limit was 2094)

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

Version 6.3.1.0 Added the count option

Defaults

No default behavior or values

Usage Information

Use the count option to stop packets from flooding the user terminal when debugging is turned on.

debug ip dhcp

Enable debug information for DHCP relay transactions and display the information on the console.

Syntax

debug ip dhcp

To disable debug, use the no debug ip dhcp command.

Defaults

Debug disabled

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Added support for S-Series

Version 7.5.1.0 Introduced on C-Series

Version 6.4.10 Introduced on E-Series

Example Figure 16-1. debug ip dhcp Command Example

FTOS#debug ip dhcp
00:12:21 : %RELAY-I-PACKET: BOOTP REQUEST (Unicast) received at interface 113.3.3.17 BOOTP Request, hops = 0, XID = 0xbf05140f, secs = 0, hwaddr = 00:60:CF:20:7B:8C, giaddr = 0.0.0.0
00:12:21 : %RELAY-I-BOOTREQUEST: Forwarded BOOTREQUEST for 00:60:CF:20:7B:8C to 14.4.4.2
00:12:26 : %RELAY-I-PACKET: BOOTP REQUEST (Unicast) received at interface 113.3.3.17 BOOTP Request, hops = 0, XID = 0xbf05140f, secs = 5, hwaddr = 00:60:CF:20:7B:8C, giaddr = 0.0.0.0
00:12:26 : %RELAY-I-BOOTREQUEST: Forwarded BOOTREQUEST for 00:60:CF:20:7B:8C to 14.4.4.2
00:12:40 : %RELAY-I-PACKET: BOOTP REQUEST (Unicast) received at interface 113.3.3.17 BOOTP Request, hops = 0, XID = 0xda4f9503, secs = 0, hwaddr = 00:60:CF:20:7B:8C, giaddr = 0.0.0.0
00:12:40 : %RELAY-I-BOOTREQUEST: Forwarded BOOTREQUEST for 00:60:CF:20:7B:8C to 14.4.4.2
00:12:42 : %RELAY-I-PACKET: BOOTP REPLY (Unicast) received at interface 14.4.4.1 BOOTP Reply, hops = 0, XID = 0xda4f9503, secs = 0, hwaddr = 00:60:CF:20:7B:8C, giaddr = 113.3.3.17
00:12:42 : %RELAY-I-BOOTREPLY: Forwarded BOOTREPLY for 00:60:CF:20:7B:8C to 113.3.3.254
00:12:42 : %RELAY-I-PACKET: BOOTP REQUEST (Unicast) received at interface 113.3.3.17 BOOTP Request, hops = 0, XID = 0xda4f9503, secs = 0, hwaddr = 00:60:CF:20:7B:8C, giaddr = 0.0.0.0
00:12:42 : %RELAY-I-BOOTREQUEST: Forwarded BOOTREQUEST for 00:60:CF:20:7B:8C to 14.4.4.2
00:12:42 : %RELAY-I-PACKET: BOOTP REPLY (Unicast) received at interface 14.4.4.1 BOOTP Reply, hops = 0, XID = 0xda4f9503,
secs = 0, hwaddr = 00:60:CF:20:7B:8C, giaddr = 113.3.3.17
00:12:42 : %RELAY-I-BOOTREPLY: Forwarded BOOTREPLY for 00:60:CF:20:7B:8C to 113.3.3.254
FTOS# 

Related Commands

ip helper-address

Specify the destination broadcast or host address for DHCP server request.

ip helper-address hop-count disable Disable hop-count increment for DHCP relay agent.

debug ip icmp

View information on the Internal Control Message Protocol (ICMP).

Syntax debug ip icmp [interface] [count value]

To disable debugging, use the no debug ip icmp command.

Parameters

interface

(OPTIONAL) Enter the following keywords and slot/port or number information:For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.For the Management interface, enter the keyword ManagementEthernet followed by the slot/port information. The slot range is 0 and the port range is 0-1.For a Port Channel interface, enter the keyword port-channel followed by a number:C-Series and S-Series Range: 1-128E-Series Range: 1 to 32 for EtherScale, 1 to 255 for TeraScale.For a SONET interface, enter the keyword sonet followed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.For VLAN, enter the keyword vlan followed by a number from 1 to 4094.

count value

(OPTIONAL) Enter the keyword count followed by the count value.Range: 1 to 65534Default: Infinity

Command Modes
EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.2.1.0 Support 4094 VLANs on E-Series ExaScale (prior limit was 2094)

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

Version 6.3.1.0 Added the count option

Example

Figure 16-2. debug ip icmp Command Example (Partial)

ICMP: echo request rcvd from src 40.40.40.40

ICMP: src 40.40.40.40, dst 40.40.40.40, echo reply

ICMP: src 40.40.40.40, dst 40.40.40.40, echo reply

ICMP: echo request sent to dst 40.40.40.40

ICMP: echo request rcvd from src 40.40.40.40

ICMP: src 40.40.40.40, dst 40.40.40.40, echo reply

ICMP: src 40.40.40.40, dst 40.40.40.40, echo reply

ICMP; echo request sent to dst 40.40.40.40

Usage Information
Use the count option to stop packets from flooding the user terminal when debugging is turned on.

debug ip packet

View a log of IP packets sent and received.

Syntax

debug ip packet [access-group name] [count value] [interface]

To disable debugging, use the no debug ip packet [access-group name] [count value] [interface] command.

Parameters

access-group name	Enter the keyword access-group followed by the access list name (maximum 16 characters) to limit the debug output based on the defined rules in the ACL.
count value	(OPTIONAL) Enter the keyword count followed by the count value.Range: 1 to 65534Default: Infinity
interface	(OPTIONAL) Enter the following keywords and slot/port or number information:For a 1-Gigabit Ethernet interface, enter the keyword gigabitethernet followed by the slot/port information.For the management interface on the RPM, enter the keywordmanagementethernet followed by the slot/port information. The slot range is 0-1 and the port range is 0.For a Port Channel interface, enter the keyword port-channel followed by a number:C-Series and S-Series Range: 1-128E-Series Range: 1 to 32 for EtherScale, 1 to 255 for TeraScale.For a SONET interface, enter the keyword sonet followed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordtengigabitethernet followed by the slot/port information.For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.

Command Mode
EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.2.1.0 Support 4094 VLANs on E-Series ExaScale (prior limit was 2094)

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Added the access-group option

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

Version 6.3.1.0 Added the count option

Example

Figure 16-3. debug ip packet Command Example (Partial)

IP: s=10.1.2.62 (local), d=10.1.2.206 (Ma 0/0), len 54, sending TCP src=23, dst=40869, seq=2112994894, ack=606901739, win=8191 ACK PUSH
IP: s=10.1.2.206 (Ma 0/0), d=10.1.2.62, len 40, rcvd TCP src=0, dst=0, seq=0, ack=0, win=0
IP: s=10.1.2.62 (local), d=10.1.2.206 (Ma 0/0), len 226, sending TCP src=23, dst=40869, seq=2112994896, ack=606901739, win=8192 ACK PUSH
IP: s=10.1.2.216 (Ma 0/0), d=10.1.2.255, len 78, rcvd UDP src=0, dst=0
IP: s=10.1.2.62 (local), d=10.1.2.3 (Ma 0/0), len 1500, sending fragment IP Fragment, Ident = 4741, fragment offset = 0 ICMP type=0, code=0
IP: s=10.1.2.62 (local), d=10.1.2.3 (Ma 0/0), len 1500, sending fragment IP Fragment, Ident = 4741, fragment offset = 1480
IP: s=40.40.40.40 (local), d=224.0.0.5 (Gi 4/11), len 64, sending broad/multicast proto=89
IP: s=40.40.40.40 (local), d=224.0.0.6 (Gi 4/11), len 28, sending broad/multicast proto=2
IP: s=0.0.0.0, d=30.30.30.30, len 100, unroutable ICMP type=8, code=0
IP: s=0.0.0.0, d=30.30.30.30, len 100, unroutable ICMP type=8, code=0 

Table 16-1. debug ip packet Command Example Fields

Field Description
s= Lists the source address of the packet and the name of the interface (in parentheses) that received the packet.
d= Lists the destination address of the packet and the name of the interface (in parentheses) through which the packet is being sent out on the network.
len Displays the packet's length.
sending rcvd fragment sending broad/multicast proto unroutable	The last part of each line lists the status of the packet.
TCP src= Displays the source and destination ports, the sequence number, the acknowledgement number, and the window size of the packets in that TCP packets.
UDP src= Displays the source and destination ports for the UDP packets.
ICMP type= Displays the ICMP type and code.
IP Fragment States that it is a fragment and displays the unique number identifying the fragment (Ident) and the offset (in 8-byte units) of this fragment (fragment offset) from the beginning of original datagram.

Usage Information

Use the count option to stop packets from flooding the user terminal when debugging is turned on.

The access-group option supports only the equal to (eq) operator in TCP ACL rules. Port operators not equal to (neq), greater than (gt), less than (lt), or range are not supported in access-group option (see Figure 16-4). ARP packets (arp) and Ether-type (ether-type) are also not supported in access-group option. The entire rule is skipped to compose the filter.

The access-group option pertains to:

• IP Protocol Number 0 to 255
- Internet Control Message Protocol* icmp * but not the ICMP message type (0-2:
- Any Internet Protocol ip
- Transmission Control Protocol* tcp * but not on the rst, syn, or urg bit
- User Datagram Protocol udp

In the case of ambiguous access control list rules, the debug ip packet access-control command will be disabled. A message appears identifying the error (see Figure 16-4).

Example

Figure 16-4. debug ip packet access-group Command Errors

FTOS#debug ip packet access-group test
%Error: port operator GT not supported in access-list debug
%Error: port operator LT not supported in access-list debug
%Error: port operator RANGE not supported in access-list debug
%Error: port operator NEQ not supported in access-list debug 

FTOS#00:10:45: %RPM0-P:CP
%IPMGR-3-DEBUG_IP_PACKET_ACL_AMBIGUOUS_EXP: Ambiguous rules not supported in access-list debug, access-list debugging is turned off
FTOS# 

ip address

Assign a primary and secondary IP address to the interface.

Syntax

ip address ip-address mask [secondary]

To delete an IP address from an interface, use the no ip address [ip-address] command.

Parameters

ip-address	Enter an IP address in dotted decimal format.
mask	Enter the mask of the IP address in slash prefix format (for example, /24).
secondary	(OPTIONAL) Enter the keyword secondary to designate the IP address as the secondary address.

Defaults

Not configured.

Command Modes

INTERFACE

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

Usage Information You must be in the INTERFACE mode before you add an IP address to an interface. Assign an IP address to an interface prior to entering the ROUTER OSPF mode.

ip directed-broadcast

Enables the interface to receive directed broadcast packets.

Syntax ip directed-broadcast

To disable the interface from receiving directed broadcast packets, enter no ip directed-broadcast.

Defaults Disabled (that is, the interface does not receive directed broadcast packets)

Command Modes INTERFACE

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

ip domain-list

Configure names to complete unqualified host names.

Syntax ip domain-list name

To remove the name, use the no ip domain-list name command.

Parameters

name Enter a domain name to be used to complete unqualified names (that is, incomplete domain names that cannot be resolved).

Defaults Disabled.

Command Modes CONFIGURATION

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

Usage Configure the ip domain-list command up to 6 times to configure a list of possible domain names. Information

If both the ip domain-name and ip domain-list commands are configured, the software will try to resolve the name using the ip domain-name command. If the name is not resolved, the software goes through the list of names configured with the ip domain-list command to find a match.

Use the following steps to enable dynamic resolution of hosts:

- specify a domain name server with the ip name-server command.

- enable DNS with the ip domain-lookup command.

To view current bindings, use the show hosts command. To view DNS related configuration, use the show running-config resolve command.

Related Commands

ip domain-name Specify a DNS server.

ip domain-lookup

Enable dynamic host-name to address resolution (that is, DNS).

Syntax

ip domain-lookup

To disable DNS lookup, use the no ip domain-lookup.

Defaults

Disabled.

Command Mode

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

Usage Information

To fully enable DNS, also specify one or more domain name servers with the ip name-server command.

FTOS does not support sending DNS queries over a VLAN. DNS queries are sent out all other interfaces, including the Management port.

To view current bindings, use the show hosts command.

Related Commands

ip name-server Specify a DNS server.

show hosts View current bindings.

ip domain-name

Configure one domain name for the switch.

Syntax

ip domain-name name

To remove the domain name, enter no ip domain-name.

Parameters

name

Enter one domain name to be used to complete unqualified names (that is, incomplete domain names that cannot be resolved).

Defaults

Not configured.

Command Modes

CONFIGURATION

Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
Usage Information	You can only configure one domain name with the ip domain-name command. To configure more than one domain name, configure the ip domain-list command up to 6 times.Use the following steps to enable dynamic resolution of hosts:specify a domain name server with the ip name-server command.enable DNS with the ip domain-lookup command.To view current bindings, use the show hosts command.
Related Commands	ip domain-list Configure additional names.

ip fib download-igp-only

E

Configure the E-Series to download only IGP routes (for example, OSPF) on to line cards. When the command is configured or removed, it clears the routing table (similar to clear ip route command) and only IGP routes populate the table.

Syntax

ip fib download-igp-only [small-fib]

To return to default setting, use the no ip fib download-igp-only [small-fib] command.

Parameters

small-fib (OPTIONAL) Enter the keyword small-fib to download a smaller FIB table. This option is useful on line cards with a limited FIB size.

Defaults

Disabled

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Added support for S-Series

Version 7.5.1.0 Added support for C-Series

pre-Version 6.2.1.1 Introduced on E-Series

ip helper-address

C E S

Specify the address of a DHCP server so that DHCP broadcast messages can be forwarded when the DHCP server is not on the same subnet as the client.

Syntax

ip helper-address ip-address | default-vrf

To remove a DHCP server address, enter no ip helper-address.

Parameters	ip-address	Enter an IP address in dotted decimal format (A.B.C.D).
	default-vrf	(Optional) E-Series Only: Enter default-vrf for the DHCP server VRF is using.
Defaults	Not configured.
Command Modes	INTERFACE
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.9.1.0 Introduced VRF on the E-Series
	Version 7.6.1.0 Added support for S-Series
	Version 7.5.1.0 Added support for C-Series
	pre-Version 6.2.1.1 Introduced on E-Series
Usage Information	You can add multiple DHCP servers by entering the ip helper-address command multiple times. If multiple servers are defined, an incoming request is sent simultaneously to all configured servers and the reply is forwarded to the DHCP client.
	FTOS uses standard DHCP ports, that is UDP ports 67 (server) and 68 (client) for DHCP relay services. It listens on port 67 and if it receives a broadcast, the software converts it to unicast, and forwards to it to the DHCP-server with source port=68 and destination port=67.
	The server replies with source port=67, destination port=67 and FTOS forwards to the client with source port=67, destination port=68.

ip helper-address hop-count disable

Disable the hop-count increment for the DHCP relay agent.

Syntax

ip helper-address hop-count disable

To re-enable the hop-count increment, use the no ip helper-address hop-count disable command.

Defaults

Enabled; the hops field in the DHCP message header is incremented by default

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Added support for S-Series

Version 7.5.1.0 Added support for C-Series

Version 6.3.1.0 Introduced for E-Series

Usage Information

This command disables the incrementing of the hops field when boot requests are relayed to a DHCP server through FTOS. If the incoming boot request already has a non-zero hops field, the message will be relayed with the same value for hops. However, the message will be discarded if the hops field exceeds 16, to comply with the relay agent behavior specified in RFC 1542.

Related Commands	ip helper-address Specify the destination broadcast or host address for DHCP server requests.
	show running-config Display the current configuration and changes from default values.
ip host
C E S	Assign a name and IP address to be used by the host-to-IP address mapping table.
Syntax	ip host name ip-addressTo remove an IP host, use the no ip host name [ip-address] command.
Parameters	name Enter a text string to associate with one IP address.
	ip-address Enter an IP address, in dotted decimal format, to be mapped to the name.
Defaults	Not configured.
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Added support for S-Series
	Version 7.5.1.0 Added support for C-Series
	pre-Version 6.1.1.0 Introduced for E-Series

ip max-frag-count

Set the maximum number of fragments allowed in one packet for packet re-assembly.

Syntax

ip max-frag-count count

To place no limit on the number of fragments allowed, enter no ip max-frag-count.

Parameters

count

Enter a number for the number of fragments allowed for re-assembly. Range: 2 to 256

Defaults

No limit is set on number of fragments allowed.

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Added support for S-Series

Version 7.5.1.0 Added support for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Usage Information

To avoid Denial of Service (DOS) attacks, keep the number of fragments allowed for re-assembly low.

ip mtu

Set the IP MTU (frame size) of the packet transmitted by the RPM for the line card interface. If the packet must be fragmented, FTOS sets the size of the fragmented packets to the size specified in this command.

Syntax ip mtu value

To return to the default IP MTU value, enterno ip mtu.

Parameters

value	Enter the maximum MTU size if the IP packet is fragmented.
	Default: 1500 bytes
	Range: 576 to 9234

Defaults

1500 bytes

Command Modes

INTERFACE (Gigabit Ethernet and 10 Gigabit Ethernet interfaces)

Command History

Version 8.1.1.0 Introduced on E-Series ExaScale

pre-Version 6.1.1.0 Introduced for E-Series

Usage Information

When you enter no mtu command, FTOS reduces the ip mtu value to 1536 bytes. To return the IP MTU value to the default, enter no ip mtu.

You must compensate for Layer 2 header when configuring link MTU on an Ethernet interface or FTOS may not fragment packets. If the packet includes a Layer 2 header, the difference between the link MTU and IP MTU (ip mtu command) must be enough bytes to include for the Layer 2 header.

Link MTU and IP MTU considerations for Port Channels and VLANs are as follows.

Port Channels:

All members must have the same link MTU value and the same IP MTU value.

- The Port Channel link MTU and IP MTU must be less than or equal to the link MTU and IP MTU values configured on the channel members.

Example: if the members have a link MTU of 2100 and an IP MTU 2000, the Port Channel's MTU values cannot be higher than 2100 for link MTU or 2000 bytes for IP MTU.

VLANs:

• All members of a VLAN must have same IP MTU value.
• Members can have different Link MTU values. Tagged members must have a link MTU 4 bytes higher than untagged members to account for the packet tag.
• The VLAN link MTU and IP MTU must be less than or equal to the link MTU and IP MTU values configured on the VLAN members.

Example: The VLAN contains tagged members with Link MTU of 1522 and IP MTU of 1500 and untagged members with Link MTU of 1518 and IP MTU of 1500. The VLAN's Link MTU cannot be higher than 1518 bytes and its IP MTU cannot be higher than 1500 bytes.

Table 16-2. Difference between Link MTU and IP MTU

Layer 2 Overhead Difference between Link MTU and IP MTU
Ethernet (untagged) 18 bytes
VLAN Tag 22 bytes
Untagged Packet with VLAN-Stack Header 22 bytes
Tagged Packet with VLAN-Stack Header 26 bytes

Related Commands

mtu Set the link MTU for an Ethernet interface.

ip name-server

Enter up to 6 IP addresses of name servers. The order you enter the addresses determines the order of their use.

Syntax

ip name-server ip-address [ip-address2...ip-address6]

To remove a name server, use the no ip name-server ip-address command.

Parameters

ip-address	Enter the IP address, in dotted decimal format, of the name server to be used.
ip-address2 ...ip-address6	(OPTIONAL) Enter up five more IP addresses, in dotted decimal format, of name servers to be used.Separate the IP addresses with a space.

Defaults

No name servers are configured.

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Added support for S-Series

Version 7.5.1.0 Added support for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Usage Information

FTOS does not support sending DNS queries over a VLAN. DNS queries are sent out all other interfaces, including the Management port.

ip proxy-arp

Enable Proxy ARP on an interface.

Syntax

ip proxy-arp

To disable Proxy ARP, enter no ip proxy-arp.

Defaults

Enabled.

Command Modes	INTERFACE
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Added support for S-Series
	Version 7.5.1.0 Added support for C-Series
	pre-Version 6.1.1.0 Introduced for E-Series
Related Commands	show ip interface Displays the interface routing status and configuration.

ip redirects

Enable the interface to send ICMP redirect messages.

Syntax

ip redirects

To return to default, enter no ip redirects.

Defaults

Disabled

Command Modes	INTERFACE
Command History	Version 8.1.1.0 Introduced on E-Series ExaScale
	pre-Version 6.1.1.0 Introduced for E-Series
Usage Information	This command is available for physical interfaces and port-channel interfaces on the E-Series.
	Note: This command is not supported on default VLAN (default vlan-id command).

ip route

Assign a static route to the switch.

Syntax

ip route vrf {vrf instance} destination mask {ip-address | interface [ip-address]} [distance] [permanent] [tag tag-value]

To delete a specific static route, use the no ip route destination mask {address | interface [ip-address]} command.

To delete all routes matching a certain route, use the no ip route destination mask command.

Parameters

vrf name	(OPTIONAL) E-Series Only: Enter the keyword vrf followed by the VRF Instances name to tie the static route to the VRF instance.
destination	Enter the IP address in dotted decimal format of the destination device.
mask	Enter the mask in slash prefix formation (/x) of the destination device's IP address.
ip-address	Enter the IP address in dotted decimal format of the forwarding router.

interface	Enter the following keywords and slot/port or number information:For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For a loopback interface, enter the keywordloopbackfollowed by a number from zero (0) to 16383.For the null interface, enter the keywordnullfollowed by zero (0).For a Port Channel interface, enter the keywordport-channelfollowed by a number:C-Series and S-SeriesRange: 1-128E-SeriesRange: 1 to 32 for EtherScale, 1 to 255 for TeraScale.For a SONET interface, enter the keywordsonetfollowed by the sonet followed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernetfollowed by the slot/port information.For a VLAN, enter the keywordvlanfollowed by a number from 1 to 4094.
distance	(OPTIONAL) Enter a number as the distance metric assigned to the route.Range: 1 to 255
permanent	(OPTIONAL) Enter the keywordpermanentto specify the route is not removed, even if the interface assigned to that route goes down. The route must be up initially to install it in the routing table.If you disable the interface with an IP address associated with the keywordpermanent, the route disappears from the routing table.
tag tag-value	(OPTIONAL) Enter the keywordtagfollowed by a number to assign to the route.Range: 1 to 4294967295

Defaults Not configured. Command Modes CONFIGURATION

Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.2.1.0 Support 4094 VLANs on E-Series ExaScale (prior limit was 2094)
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.9.1.0 Introduced VRF on the E-Series
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.0 Introduced for E-Series

Usage Using the following example of a static route: Information ip route 33.33.33.0 /24 gigabitethernet 0/0 172.31.5.43

• The software installs a next hop that is not on the directly connected subnet but which recursively resolves to a next hop on the interface's configured subnet. In the example, if gig 0/0 has ip address on subnet 2.2.2.0 and if 172.31.5.43 recursively resolves to 2.2.2.0, FTOS installs the static route.
• When the interface goes down, FTOS withdraws the route.
• When the interface comes up, FTOS re-installs the route.
• When recursive resolution is “broken,” FTOS withdraws the route.
• When recursive resolution is satisfied, FTOS re-installs the route.

Related Commands

show ip route View the switch routing table.

ip source-route

Enable FTOS to forward IP packets with source route information in the header.

Syntax

ip source-route

To drop packets with source route information, enter no ip route-source.

Defaults

Enabled.

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Added support for S-Series

Version 7.5.1.0 Added support for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

ip unreachable

Enable the generation of Internet Control Message Protocol (ICMP) unreachable messages.

Syntax

ip unreachables

To disable the generation of ICMP messages, enter no ip unreachables.

Defaults

Disabled

Command Modes

INTERFACE

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.0 Introduced on E-Series

ip vlan-flooding

Enable unicast data traffic flooding on VLAN member ports.

Syntax

ip vlan-flooding

To disable, use the no ip vlan-flooding command.

Defaults

disabled

Command Modes

CONFIGURATION

Command History

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.4.1.0 Introduced on E-Series

Usage Information

By default this command is disabled. When enabled, all the Layer 3 unicast routed data traffic going through a VLAN member port is flooded across all the member ports of that VLAN. There might be some ARP table entries which are resolved through ARP packets which had Ethernet MAC SA different from MAC information inside the ARP packet. This unicast data traffic flooding occurs only for those packets which use these ARP entries.

load-balance (C-Series and S-Series)

By default for C-Series and S-Series, FTOS uses an IP 4-tuple (IP SA, IP DA, Source Port, and Destination Port) to distribute IP traffic over members of a Port Channel as well as equal-cost paths. To designate another method to balance traffic over Port Channel members, use the load-balance command.

Syntax

load-balance {ip-selection [dest-ip | source-ip]} | {mac [dest-mac | source-dest-mac | source-mac]} | {tcp-udp [enable]}

To return to the default setting (IP 4-tuple), use the no version of the command.

Parameters

ip-selection {dest-ip | source-ip}

Enter the keywords to distribute IP traffic based on the following criteria:

- dest-ip—Uses destination IP address and destination port fields to hash. The hashing mechanism returns a 3-bit index indicating which port the packet should be forwarded to.

- source-ip—Uses source IP address and source port fields to hash. The hashing mechanism returns a 3-bit index indicating which port the packet should be forwarded to.

	mac {dest-mac | source-dest-mac | source-mac}	Enter the keywords to distribute MAC traffic based on the following criteria:•dest-mac—Uses the destination MAC address, VLAN, Ethertype, source module ID and source port ID fields to hash. The hashing mechanism returns a 3-bit index indicating which port the packet should be forwarded to.•source-dest-mac—Uses the destination and source MAC address, VLAN, Ethertype, source module ID and source port ID fields to hash. The hashing mechanism returns a 3-bit index indicating which port the packet should be forwarded to.•source-mac—Uses the source MAC address, VLAN, Ethertype, source module ID and source port ID fields to hash. The hashing mechanism returns a 3-bit index indicating which port the packet should be forwarded to.
	tcp-udp enable	Enter the keywords to distribute traffic based on the following:•enable—Takes the TCP/UDP source and destination ports into consideration when doing hash computations. (By default, this is enabled)
Defaults	IP 4-tuple (IP SA, IP DA, Source Port, Destination Port)
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.6.1.0 Added support for S-Series
	Version 7.5.1.0 Introduced on C-Series
Usage Information	By default, FTOS distributes incoming traffic based on a hash algorithm using the following criteria:•IP source address•IP destination address•TCP/UDP source port•TCP/UDP destination port

load-balance (E-Series)

By default, for E-Series chassis, FTOS uses an IP 5-tuple to distribute IP traffic over members of a Port Channel as well as equal cost paths. To designate another method to balance traffic over Port Channel members, use the load-balance command.

load-balance [ip-selection 3-tuple | ip-selection packet-based] [mac]

To return to the default setting (IP 5-tuple), use one of the following commands:

• no load-balance ip-selection 3-tuple
• no load-balance ip-selection packet-based
• no load-balance mac

Parameters

ip-selection 3-tuple	Enter the keywords ip-selection 3-tuple to distribute IP traffic based on the following criteria:IP source addressIP destination addressIP Protocol typeNote: For IPV6, only the first 32 bits (LSB) of IP SA and IP DA are used for hash generation.
ip-selection packet-based	Enter the keywords ip-selection packet-based to distribute IPV4 traffic based on the IP Identification field in the IPV4 header.This option does not affect IPV6 traffic; that is, IPV6 traffic is not distributed when this command is executed.Note: Hash-based load-balancing on MPLS does not work when packet-based hashing (load-balance ip-selection packet-based) is enabled.
mac	Enter the keyword mac to distribute traffic based on the following:MAC source address, andMAC destination address.

Defaults

IP 5-tuple (IP SA, IP DA, IP Protocol Type, Source Port and Destination Port)

Command Modes

CONFIGURATION

Command History

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 6.1.1.0 Introduced for E-Series

Usage Information

By default, FTOS distributes incoming traffic based on a hash algorithm using the following criteria:

• IP source address
• IP destination address
- IP Protocol type
- TCP/UDP source port
• TCP/UDP destination port

Note: For IPV6, only the first 32 bits (LSB) of IP Source Address and IP Destination Address are used for hash generation.

The table below lists the load balance command options and how the command combinations effect the distribution of traffic.

Table 16-3. Configurations of the load-balance Command

Configuration Switched IP Traffic	Routed IP Traffic (IPV4 Only)	Switched Non-IP Traffic
Default (IP 5-tuple) IP 5-tuple IP 5-tuple MAC based
ip-selection 3-tuple	IP 3-tuple IP 3-tuple MAC based
mac	MAC based IP 5-tuple MAC based
ip-selection 3-tuple and mac	MAC based	IP 3-tuple MAC based

Table 16-3. Configurations of the load-balance Command

Configuration Switched IP Traffic		Routed IP Traffic (IPV4 Only)	Switched Non-IP Traffic
ip-selection packet-based	Packet based: IPV4No distribution: IPV6	Packet based: IPV4 MAC based
ip-selection packet-based and mac	MAC based Packet	based: IPV4 MAC based

Related Commands

ip address Change the algorithm used to distribute traffic on an E-Series chassis.

management route

S55

Configure a static route that points to the Management interface or a forwarding router.

Syntax

management route ip-address mask { forwarding-router-address | managementethernet }

To remove a static route, use the no management route ip-address mask {forwarding-router-address | managementethernet} command.

Parameters

ip-address mask	Enter an IP address (dotted decimal format) and mask (/prefix format) as the IP address for the Management interface.
forwarding-router-address	Enter an IP address (dotted decimal format) of a forwarding router.
managementethernet	Enter the keyword managementethernet for the Management interface on the Primary RPM.

Defaults

Not configured.

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on S55

Version 8.3.3.1 Introduced on S60.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.5.1.0 Support added for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Usage Information

When a static route (or a protocol route) overlaps with Management static route, the static route (or a protocol route) is preferred over the Management Static route. Also, Management static routes and the Management Connected prefix are not reflected in the hardware routing tables.

Related Commands

interface ManagementEthernet Configure the Management port on the system (either the Primary or Standby RPM).

duplex (Management) Set the mode of the Management interface.

speed (Management interface) Set the speed for the Management interface.

show arp

Syntax

Display the ARP table.

show arp [vrf vrf name][interface interface | ip ip-address [mask] | macaddress mac-address [mac-address mask]] [cpu {cp | rp1 | rp2}] [static | dynamic] [summary]

Parameters

vrf name	E-Series Only: Show only the ARP cache entries tied to the VRF process.
cpu	(OPTIONAL) Enter the keyword cpu with one of the following keywords to view ARP entries on that CPU:cp- view ARP entries on the control processor rp1- view ARP entries on Routing Processor 1.rp2- view ARP entries on Routing Processor 2.
interface interface	(OPTIONAL) Enter the following keywords and slot/port or number information:For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.For the Management interface, enter the keyword managementethernet followed by the slot/port information.For a Port Channel interface, enter the keyword port-channel followed by a number:C-Series and S-Series Range: 1-128E-Series Range: 1 to 32 for EtherScale, 1 to 255 for TeraScale.For a SONET interface, enter the keyword sonet followed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.
ip ip-address mask	(OPTIONAL) Enter the keyword ip followed by an IP address in the dotted decimal format. Enter the optional IP address mask in the slash prefix format (/x).
macaddress mac-address mask	(OPTIONAL) Enter the keyword macaddress followed by a MAC address in nn:nn:nn:nn:nn:nn format. Enter the optional MAC address mask in nn:nn:nn:nn:nn format also.
static	(OPTIONAL) Enter the keyword static to view entries entered manually.
dynamic	(OPTIONAL) Enter the keyword dynamic to view dynamic entries.
summary	(OPTIONAL) Enter the keyword summary to view a summary of ARP entries.

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.2.1.0 Support 4094 VLANs on E-Series ExaScale (prior limit was 2094)

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.9.1.0 Introduced VRF on the E-Series

Version 7.8.1.0 Augmented to display local ARP entries learned from private VLANs (PVLANs)

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Usage Information

The following figure shows two VLANs that are associated with a private VLAN (PVLAN) (see Chapter 30, Private VLAN (PVLAN)), a feature added for C-Series and S-Series in FTOS 7.8.1.0.

Example

Figure 16-5. show arp Command Example (Partial)

FTOS>show arp
Protocol	Address	Age (min)	Hardware Address	Interface	VLAN	CPU
Internet	192.2.1.254	1	00:00:c0:02:01:02	Gi 9/13	-	CP
Internet	192.2.1.253	1	00:00:c0:02:01:02	Gi 9/13	-	CP
Internet	192.2.1.252	1	00:00:c0:02:01:02	Gi 9/13	-	CP
Internet	192.2.1.251	1	00:00:c0:02:01:02	Gi 9/13	-	CP
Internet	192.2.1.250	1	00:00:c0:02:01:02	Gi 9/13	-	CP
Internet	192.2.1.251	1	00:00:c0:02:01:02	Gi 9/13	-	CP
Internet	192.2.1.250	1	00:0C:c0:02:01:02	Gi 9/13	-	CP
Internet	192.2.1.249	1	00:00:c0:02:01:02	Gi 9/13	-	CP
Internet	192.2.1.248	1	00:00:c0:02:01:02	Gi 9/13	-	CP
Internet	192.2.1.247	1	00:00:c0:02:01:02	Gi 9/13	-	CP
Internet	192.2.1.246	1	00:00:c0:02:01:02	Gi 9/13	-	CP
Internet	192.2.1.245	1	00:00:c0:02:01:02	Gi 9/13	-	CP

Figure 16-6. show arp Command Example with Private VLAN data

Protocol	Address	Age (min)	Hardware Address	Interface	VLAN	CPU
Internet	5.5.5.1	-	00:01:e8:43:96:5e	-	V1 10 pv 200
Internet	5.5.5.10	-	00:01:e8:44:99:55	-	V1 10
Internet	10.1.2.4	1	00:01:e8:d5:9e:e2	Ma 0/0
Internet	10.10.10.4	1	00:01:e8:d5:9e:e2	Ma 0/0
Internet	10.16.127.53	1	00:01:e8:d5:9e:e2	Ma 0/0
Internet	10.16.134.254	20	00:01:e8:d5:9e:e2	Ma 0/0
Internet	133.33.33.4	1	00:01:e8:d5:9e:e2	Ma 0/0

Figure 16-7. show arp cpu cp Command Example

FTOS#sho arp cpu cp
Protocol	Address	Age (min)	Hardware Address	Interface	VLAN	CPU
Internet	10.1.2.206	0	00:a0:80:00:15:b8	Ma 0/0	-	CP
Internet	182.16.1.20	0	00:30:19:24:2d:70	Gi 8/0	-	CP
Internet	100.10.10.10	0	00:30:19:4f:d3:80	Gi 8/12	-	CP
Internet	10.1.2.209	12	00:a0:80:00:12:6c	Ma 0/0	-	CP
FTOS#

Table 16-4. show arp Command Example Fields

Row Heading Description
Protocol Displays the protocol type.
Address Displays the IP address of the ARP entry.
Age(min) Displays the age in minutes of the ARP entry.
Hardware Address Displays the MAC address associated with the ARP entry.
Interface Displays the first two letters of the interfaces type and the slot/port associated with the ARP entry.
VLAN Displays the VLAN ID, if any, associated with the ARP entry.
CPU Lists which CPU the entries are stored on.

Figure 16-8. show arp summary Command Example

FTOS# show arp summary
Total Entries	Static Entries	Dynamic Entries	CPU
83	0	83	CP
FTOS

Table 16-5. show arp summary Command Example Fields

Row Heading Description
Total Entries Lists the total number of ARP entries in the ARP table.
Static Entries Lists the total number of configured or static ARP entries.
Dynamic Entries Lists the total number of learned or dynamic ARP entries.
CPU Lists which CPU the entries are stored on.

Related Commands

ip local-proxy-arp Enable/disable Layer 3 communication in secondary VLANs.

switchport mode private-vlan

show arp retries

Display the configured number of ARP retries.

Syntax

show arp retries

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.3.1.0 Introduced

Related Commands

arp retries Set the number of ARP retries in case the system does not receive an ARP reply in response to an ARP request.

show hosts

View the host table and DNS configuration.

Syntax show hosts

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Example

Figure 16-9. show hosts Command Example

FTOS#show hosts Default domain is not set Name/address lookup uses static mappings Name servers are not set
Host	Flags	TTL	Type	Address
ks	(perm, OK)	-	IP	2.2.2.2
4200-1	(perm, OK)	-	IP	192.68.69.2
1230-3	(perm, OK)	-	IP	192.68.99.2
ZZr	(perm, OK)	-	IP	192.71.18.2
Z10-3	(perm, OK)	-	IP	192.71.23.1
FTOS#

Table 16-6. show hosts Command Example Fields

Field Description
Default domain... Displays the domain name (if configured).
Name/address lookup... States if DNS is enabled on the system.If DNS is enabled, the Name/Address lookup is domain service.If DNS is not enabled, the Name/Address lookup is static mapping.
Name servers are... Lists the name servers, if configured.
Host Displays the host name assigned to the IP address.
Flags Classifies the entry as one of the following:• perm - the entry was manually configured and will not time out• temp - the entry was learned and will time out after 72 hours of inactivity.Also included in the flag is an indication of the validity of the route:• ok - the entry is valid.• ex - the entry expired.• ?? - the entry is suspect.
TTL Displays the amount of time until the entry ages out of the cache. For dynamically learnt entries only.
Type Displays IP as the type of entry.
Address	Displays the IP address(es) assigned to the host.

Related Commands

traceroute View DNS resolution

ip host Configure a host.

show ip cam linecard

View CAM entries for a port pipe on a line card.

Syntax

show ip cam linecard number port-set pipe-number [ip-address mask [longer-prefixes] | index index-number | summary | vrf vrf instance]

Parameters

number	Enter the number of the line card. Range: 0 to 13 on a E1200/1200i, 0 to 6 on a E600600i, and 0 to 5 on a E300.
pipe-number	Enter the number of the line card's port-pipe. Range: 0 to 1
ip-address mask [longer-prefix]	(OPTIONAL) Enter the IP address and mask of a route to CAM entries for that route only. Enter the keyword longer-prefixes to view routes with a common prefix.
index index-number	(OPTIONAL) Enter the keyword index followed by the CAM index number. Range: depends on CAM size
summary	(OPTIONAL) Enter the keyword summary to view a table listing route prefixes and the total number of routes that can be entered into the CAM.
vrf instance	(OPTIONAL) E-Series Only: Enter the keyword vrf followed by the VRF Instance name to show CAM information as it applies to that VRF instance.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.1.1.2 E-Series ExaScale E600i supported

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.9.1.0 Introduced VRF on the E-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Example

Figure 16-10. show ip cam Command Example on E-Series

FTOS#show ip cam linecard 13 port-set 0
Index	Destination	EC	CG	V	C	Next-Hop	VID	Mac-Addr	Port
3276	6.6.6.2	0	0	1	1	0.0.0.0	0	00:00:00:00:00:00:00	17c1 CP
3277	5.5.5.2	0	0	1	1	0.0.0.0	0	00:00:00:00:00:00:00	17c1 CP
3278	4.4.4.2	0	0	1	1	0.0.0.0	0	00:00:00:00:00:00:00	17c1 CP
3279	3.3.3.2	0	0	1	1	0.0.0.0	0	00:00:00:00:00:00:00	17c1 CP
3280	2.2.2.2	0	0	1	1	0.0.0.0	0	00:00:00:00:00:00:00	17c1 CP
11144	6.6.6.0	0	0	1	1	0.0.0.0	6	00:00:00:00:00:00:00	17c5 RP2
11145	5.5.5.0	0	0	1	1	0.0.0.0	5	00:00:00:00:00:00:00	17c5 RP2
11146	4.4.4.0	0	0	1	1	0.0.0.0	4	00:00:00:00:00:00:00	17c5 RP2
11147	3.3.3.0	0	0	1	1	0.0.0.0	3	00:00:00:00:00:00:00	17c5 RP2
11148	2.2.2.0	0	0	1	1	0.0.0.0	2	00:00:00:00:00:00:00	17c5 RP2
65535	0.0.0.0	0	0	1	1	0.0.0.0	0	00:00:00:00:00:00:00	17c5 RP2
FTOS#

Table 16-7. show ip cam Command Example Fields

Field Description
Index Displays the	CAM index number of the entry.
Destination Displays the destination route of the index.
EC Displays the number of equal cost multipaths (ECMP) available for the default route for non-Jumbo line cards.Displays 0,1 when ECMP is more than 8, for Jumbo line cards.
CG Displays 0.
V Displays a 1 if the entry is valid and a 0 if the entry is for a line card with Catalog number beginning with LC-EF.
C Displays the CPU bit.1 indicates that a packet hitting this entry is forwarded to the CP or RP2, depending on Egress port.
Next-Hop Displays the next hop IP address of the entry.
VId Displays the VLAN ID. If the entry is 0, the entry is not part of a VLAN.
Mac Addr Displays the next-hop router's MAC address.
Port Displays the egress interface. Use the second half of the entry to determine the interface.For example, in the entry 17cl CP, the CP is the pertinent portion.CP = control processorRP2 = route processor 2Gi = Gigabit Ethernet interfaceSo = SONET interfaceTe = 10 Gigabit Ethernet interface

Example

Figure 16-11. show ip cam summary Command Example

PTOS#show ip cam linecard 4 port-set 0 summary Total Number of Routes in the CAM is 13 Total Number of Routes which can be entered in CAM is 131072
Prefix Len Current Use Initial Sz
32	7	37994
31	0	1312
30	0	3932
29	0	1312
28	0	1312
27	0	1312
26	0	1312
25	0	1312
24	6	40610
23	0	3932
22	0	2622
21	0	2622
20	0	2622
19	0	2622
18	0	1312
17	0	1312
16	0	3932
15	0	1312
14	0	1312
13	0	1312
12	0	1312
11	0	1312
10	0	1312
9	0	1312
8	0	1312
7	0	1312
6	0	1312
5	0	1312
4	0	1312
3	0	1312
2	0	1312
1	0	1312
0	0	8

Table 16-8. show ip cam summary Command Example Fields

Field Description
Prefix Length Displays the prefix-length or mask for the IP address configured on the linecard 0 port pipe 0.
Current Use Displays the number of routes currently configured for the corresponding prefix or mask on the linecard 0 port pipe 0.
Initial Size Displays the CAM size allocated by FTOS for the corresponding mask. The CAM size is adjusted by FTOS if the number of routes for the mask exceeds the initial allocation.

show ip cam stack-unit

Display content-addressable memory (CAM) entries for an S-Series switch.

Syntax

show ip cam stack-unit id port-set pipe-number [ip-address mask [longer-prefixes] | summary]

Parameters

id	Enter the stack-unit ID.Unit ID range:S55: 0-11all other S-Series: 0-7
pipe-number	Enter the number of the Port-Pipe number.S50n, S50V range: 0 to 1; S25N, S25P, S25V range: 0 to 0
ip-address mask[longer-prefix]	(OPTIONAL) Enter the IP address and mask of a route to CAM entries for that route only.Enter the keyword longer-prefixes to view routes with a common prefix.
summary	(OPTIONAL) Enter the keyword summary to view a table listing route prefixes and the total number routes which can be entered in to CAM.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.7.1.0 Modified: Added support for up to seven stack members.

Version 7.6.1.0 Introduced on S-Series

Example

Figure 16-12. show ip cam stack-unit Command Example

FTOS#show ip cam stack-unit 0 port-set 0 10.10.10.10/32 longer-prefixes
Destination	EC	CG	V	C	VId	Mac-Addr	Port
10.10.10.10		0	0	1	1	0 00:00:00:00:00:00	3f01 CP
FTOS#

Table 16-9. show ip cam Command Example Fields

Field Description
Destination Displays the destination route of the index.
EC Displays the number of equal cost multipaths (ECMP) available for the default route for non-Jumbo line cards.Displays 0,1 when ECMP is more than 8, for Jumbo line cards.
CG Displays 0.
V Displays a 1 if the entry is valid and a 0 otherwise.
C Displays the CPU bit.1 indicates that a packet hitting this entry is forwarded to the control processor, depending on Egress port.
V Id Displays the VLAN ID. If the entry is 0, the entry is not part of a VLAN.
Mac Addr Displays the next-hop router's MAC address.
Port	Displays the egress interface. Use the second half of the entry to determine the interface.For example, in the entry 17cl CP, the CP is the pertinent portion.CP = control processorGi = Gigabit Ethernet interfaceTe = 10 Gigabit Ethernet interface

show ip fib linecard

View all Forwarding Information Base (FIB) entries.

Syntax
show ip fib linecard slot-number [vrf vrf instance | ip-address/prefix-list | summary]

Parameters	vrf instance	(OPTIONAL) E-Series Only: Enter the keyword vrf followed by the VRF INstance name to show the FIB cache entries tied to that VRF instance.
	slot-number	Enter the number of the line card slot.C-Series Range: 0-7E-Series Range: 0 to 13 on a E1200, 0 to 6 on a E600/E600i, 0 to 5 on a E300
	ip-address mask	(OPTIONAL) Enter the IP address of the network destination to view only information on that destination.You must enter the IP address is dotted decimal format (A.B.C.D). You must enter the mask in slash prefix format (/X).
	longer-prefixes	(OPTIONAL) Enter the keyword longer-prefixes to view all routes with a common prefix.
	summary	(OPTIONAL) Enter the keyword summary to view the total number of prefixes in the FIB.

Command Mode
EXEC

EXEC Privilege
Command History

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.9.1.0 Introduced VRF on the E-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Example
Figure 16-13. show ip fib linecard Command Example

FTOS>show ip fib linecard 12
Destination	Gateway	First-Hop	Mac-Addr	Port	VID	Index E
3.0.0.0/8	via 100.10.10.10, So 2/8	100.10.10.10	00:01:e8:00:03:ff So 2/8	0	60260
3.0.0.0/8	via 101.10.10.10, So 2/9
100.10.10.0/24	Direct, So 2/8	0.0.0.0	00:01:e8:00:03:ff So 2/8	0	11144
100.10.10.1/32	via 127.0.0.1	127.0.0.1	00:00:00:00:00:00 CP	0	3276
100.10.10.10/32	via 100.10.10.10, So 2/8	100.10.10.10	00:01:e8:00:03:ff So 2/8	0	0
101.10.10.0/24	Direct, So 2/9	0.0.0.0	00:00:00:00:00:00 RP2	0	11145
101.10.10.1/32	via 127.0.0.1	127.0.0.1	00:00:00:00:00:00 CP	0	3277
101.10.10.10/32	via 101.10.10.10, So 2/9	101.10.10.10	00:01:e8:01:62:32 So 2/9	0	1
FTOS>

Table 16-10. show ip fib linecard Command Example Fields

Field Description
Destination Lists the destination IP address.
Gateway	Displays either the word direct and an interface for a directly connected route or the remote IP address to be used to forward the traffic.
First-Hop Displays the first hop IP address.
Mac-Addr Displays the MAC address.

Table 16-10. show ip fib linecard Command Example Fields

Field Description
Port Displays the egress-port information.
VId Displays the VLAN ID. If no VLAN is assigned, zero (0) is listed.
Index Displays the internal interface number.
EC Displays the number of ECMP paths.

Related Commands

clear ip fib stackunit Clear FIB entries on a specified line card.

show ip fib stack-unit

S View all Forwarding Information Base (FIB) entries.

Syntax show ip fib stack-unit id [ip-address [mask] [longer-prefixes] | summary]

Parameters	id	Enter the S-Series stack unit ID.Unit ID range:S55: 0-11all other S-Series: 0-7
	ip-address mask	(OPTIONAL) Enter the IP address of the network destination to view only information on that destination.Enter the IP address in dotted decimal format (A.B.C.D). You must enter the mask in slash prefix format (/X).
	longer-prefixes	(OPTIONAL) Enter the keyword longer-prefixes to view all routes with a common prefix.
	summary	(OPTIONAL) Enter the keyword summary to view the total number of prefixes in the FIB.

Command Mode	EXEC
	EXEC Privilege

Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.7.1.0 Modified: Added support for up to seven stack members.
	Version 7.6.1.0 Introduced on S-Series

Example Figure 16-14. show ip fib linecard Command Example

FTOS#show ip fib stack-unit 0
Destination	Gateway	First-Hop	Mac-Addr	Port	VID	EC
10.10.10.10/32	Direct, Nu 0	0.0.0.0	00:00:00:00:00:00	BLK HOLE	0	0
FTOS>

Table 16-11. show ip fib linecard Command Example Fields

Field Description
Destination Lists	the destination IP address.
Gateway	Displays either the word Direct and an interface for a directly connected route or the remote IP address to be used to forward the traffic.
First-Hop Displays	the first hop IP address.
Mac-Addr Displays	the MAC address.
Port Displays the	egress-port information.
VId Displays the	VLAN ID. If no VLAN is assigned, zero (0) is listed.
EC Displays the	number of ECMP paths.

Related Commands

clear ip fib stackunit Clear FIB entries on a specified line card.

show ip flow

Show how a Layer 3 packet is forwarded when it arrives at a particular interface.

Syntax

show ip flow interface [vrf vrf instance] interface {source-ip address destination-ip address} {protocol number [tcp | udp] | icmp} {src-port number destination-port number}

Parameters

vrf instance	E-Series Only: Show only the L3 flow as they apply to that VRF process.
interface interface	Enter the keywordinterfacefollowed by of the following interface keywords.For a Fast Ethernet interface, enter the keywordFastEthernet followed by the slot/port information.For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For a SONET interface, enter the keywordsonetfollowed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernetfollowed by the slot/port information.(OPTIONAL) Enter an in or out parameter in conjunction with the optional interface:
source-ip address	Enter the keywordsource-ipfollowed by the IP source address in IP address format.
destination-ip address	Enter the keyworddestination-ipfollowed by the IP destination address in IP address format.
protocol number [tcp | udp] | icmp	E-Series only: Enter the keyword protocol followed by one of the protocol typekeywords: tcp, udp, icmp or protocol number
src-port number	Enter the keywordsrc-portfollowed by the source port number.
destination-port number	Enter the keyworddestination-portfollowed by the destination port number.

Command Modes EXEC

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.9.1.0 Introduced VRF on the E-Series

Version 7.6.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Usage Information

This command provides egress port information for a given IP flow. This is useful in identifying which interface the packet will follow in the case of Port-channel and Equal Cost Multi Paths. Use this command for routed packed only. For switched packets use the show port-channel-flow command

show ip flow does not compute the egress port information when load-balance mac hashing is also configured due to insufficient information (the egress MAC is not available).

S-Series produces the following error message:

%Error: Unable to read IP route table

C-Series produces the message:

%Error: FIB cannot compute the egress port with the current trunk hash setting.

Example Figure 16-15. Command Example show ip flow on E-Series

FTOS#show ip flow interface Gi 1/8 189.1.1.1 63.0.0.1 protocol tcp source-port 7898 destination-port 897

flow: 189.1.1.1 63.0.0.1 protocol 6 7868 8976

Ingress interface: Gi 1/20

Egress interface: Gi 1/14 to 1.7.1.2[CAM hit 103710] unfragmented packet

Gi 1/10 to 1.2.1.2[CAM hit 103710] fragmented packet

show ip interface

View IP-related information on all interfaces.

Syntax show ip interface [interface | brief | linecard slot-number] [configuration]

Parameter	interface	(OPTIONAL) Enter the following keywords and slot/port or number information:For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.For a Loopback interface, enter the keyword Loopback followed by a number from 0 to 16383.For the Management interface, enter the keyword ManagementEthernet followed by zero (0).For the Null interface, enter the keyword null followed by zero (0).For a Port Channel interface, enter the keyword port-channel followed by a number:C-Series and S-Series Range: 1-128E-Series Range: 1 to 32 for EtherScale, 1 to 255 for TeraScale.For a SONET interface, enter the keyword sonet followed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.
	brief	(OPTIONAL) Enter the keyword brief to view a brief summary of the interfaces and whether an IP address is assigned.
	linecard slot-number	(OPTIONAL) Enter the keyword linecard followed by the number of the line card slot.C-Series Range: 0-7E-Series Range: 0 to 13 on a E1200/1200i, 0 to 6 on a E600/E600i, and 0 to 5 on a E300Note: This keyword is not available on the S-Series.
	configuration	(OPTIONAL) Enter the keyword configuration to display the physical interfaces with non-default configurations only.
Command Modes	EXEC
	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.2 Supported on E-Series ExaScale E600i
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.0 Introduced for E-Series

Example Figure 16-16. show ip interface Command Example

FTOS#show ip int te 0/0

TenGigabitEthernet 0/0 is down, line protocol is down

Internet address is not set

IP MTU is 1500 bytes

Inbound access list is not set

Proxy ARP is enabled

Split Horizon is enabled

Poison Reverse is disabled

ICMP redirects are not sent

ICMP unreachable are not sent

FTOS#

Table 16-12. show ip interface Command Example Items

Lines Description
TenGigabitEthernet 0/0... Displays the interface's type, slot/port and physical and line protocol status.
Internet address... States whether an IP address is assigned to the interface. If one is, that address is displayed.
IP MTU is... Displays IP MTU value.
Inbound access... Displays the name of the any configured incoming access list. If none is configured, the phrase “not set” is displayed.
Proxy ARP... States whether proxy ARP is enabled on the interface.
Split horizon... States whether split horizon for RIP is enabled on the interface.
Poison Reverse... States whether poison for RIP is enabled on the interface
ICMP redirects... States if ICMP redirects are sent.
ICMP unreachable... States if ICMP unreachable messages are sent.

Figure 16-17. show ip interface brief Command Example (Partial)

FTOS#show ip int brief
Interface	IP-Address	OK? Method Status	Protocol
GigabitEthernet 1/0	unassigned	NO Manual administratively down	down
GigabitEthernet 1/1	unassigned	NO Manual administratively down	down
GigabitEthernet 1/2	unassigned	YES Manual up	up
GigabitEthernet 1/3	unassigned	YES Manual up	up
GigabitEthernet 1/4	unassigned	YES Manual up	up
GigabitEthernet 1/5	10.10.10.1	YES Manual up	up
GigabitEthernet 1/6	unassigned	NO Manual administratively down	down

Table 16-13. show ip interface brief Column Headings

Field Description
Interface Displays type of interface and the associated slot and port number.
IP-Address	Displays the IP address for the interface, if configured.
Ok? Indicates if the hardware is functioning properly.
Method	Displays Manual if the configuration is read from the saved configuration.
Status	States whether the interface is enabled (up) or disabled (administratively down).
Protocol	States whether IP is enabled (up) or disabled (down) on the interface.

show ip management-route

View the IP addresses assigned to the Management interface.

Syntax show ip management-route [all | connected | summary | static]

Parameters	all	(OPTIONAL) Enter the keyword all to view all IP addresses assigned to all Management interfaces on the switch.
	connected	(OPTIONAL) Enter the keyword connected to view only routes directly connected to the Management interface.
	summary	(OPTIONAL) Enter the keyword summary to view a table listing the number of active and non-active routes and their sources.
	static	(OPTIONAL) Enter the keyword static to view non-active routes also.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55.

Version 8.3.3.1 Introduced on S60.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Example

Figure 16-18. show ip management route Command Example

FTOS#show ip management-route
Destination	Gateway	State
10.1.2.0/24	ManagementEthernet 0/0	Connected
172.16.1.0/24	10.1.2.4	Active
FTOS#

show ip protocols

View information on all routing protocols enabled and active on the switch.

Syntax

show ip protocols

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Regular evaluation optimization enabled/disabled added to display output

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Example

Figure 16-19. show ip protocols Command Example

FTOS#show ip protocols
Routing Protocol is "bgp 1"
Cluster Id is set to 20.20.20.3
Router Id is set to 20.20.20.3
Fast-external-fallover enabled
Regular expression evaluation optimization enabled
Capable of ROUTE_REFRESH
For Address Family IPv4 Unicast
    BGP table version is 0, main routing table version 0
    Distance: external 20 internal 200 local 200
    Neighbor(s):
    Address : 20.20.20.2
    Filter-list in : foo
    Route-map in : foo
    Weight : 0
    Address : 5::6
    Weight : 0
FTOS# 

show ip route

View information, including how they were learned, about the IP routes on the switch.

Syntax

show ip route [vrf [vrf name] hostname | ip-address [mask] [longer-prefixes] | list prefix-list | protocol [process-id | routing-tag] | all | connected | static | summary]

Parameter

vrf name	E-Series Only: Clear only the route entries tied to the VRF process.
ip-address	(OPTIONAL) Specify a name of a device or the IP address of the device to view more detailed information about the route.
mask	(OPTIONAL) Specify the network mask of the route. Use this parameter with the IP address parameter.
longer-prefixes	(OPTIONAL) Enter the keyword longer-prefixes to view all routes with a common prefix.
list prefix-list	(OPTIONAL) Enter the keyword list and the name of a configured prefix list.See show ip route list.
protocol	(OPTIONAL) Enter the name of a routing protocol (bgp, isis, ospf, rip) or the keywords connected or static.bgp, isis, ospf, rip are E-Series-only options.If you enter bgp, you can include the BGP as-number. (E-Series only)If you enter isis, you can include the ISIS routing-tag. (E-Series only)If you enter ospf, you can include the OSPF process-id.
process-id	(OPTIONAL) Specify that only OSPF routes with a certain process ID must be displayed.
routing-tag	(OPTIONAL) Specify that only ISIS routes with a certain routing tag must be displayed.
connected	(OPTIONAL) Enter the keyword connected to view only the directly connected routes.
all	(OPTIONAL) Enter the keyword all to view both active and non-active routes.

Command Modes

static	(OPTIONAL) Enter the keyword static to view only routes configured by the ip route command.
summary	(OPTIONAL) Enter the keyword summary. See show ip route summary.

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.9.1.0 Introduced VRF on the E-Series

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Example

Figure 16-20. show ip route all Command Example

Codes: C - connected, S - static, R - RIP B - BGP, IN - internal BGP, EX - external BGP, LO - Locally Originated O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1 N2 - OSPF NSSA external type 2, E1 - OSPF external type 1 E2 - OSPF external type 2, i - IS-IS, L1 - IS-IS level-1 L2 - IS-IS level-2, IA - IS-IS inter area, * - candidate default >- non-active route + - summary route
Gateway of last resort is not set
	Destination	Gateway	Dist/Metric	Last Change
R	3.0.0.0/8	via 100.10.10.10, So 2/8 via 101.10.10.10, So 2/9	120/1	00:07:12
C	100.10.10.0/24	Direct, So 2/8	0/0	00:08:54
>R	100.10.10.0/24	Direct, So 2/8	120/0	00:08:54
C	101.10.10.0/24	Direct, So 2/9	0/0	00:09:15
>R	101.10.10.0/24	Direct, So 2/9	120/0	00:09:15
FTOS#

Example

Figure 16-21. show ip route summary and show ip route static Command Examples

Route Source	Active Routes	Non-active Routes
connected	2	0
static	1	0
Total	3	0
Total 3 active route(s) using 612 bytes
R1_E600i>show ip route static ?
| Pipe through a command
<cr>
R1_E600i>show ip route static
	Destination	Gateway	Dist/Metric Last Change
	_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
*S	0.0.0.0/0	via 10.10.91.9, Gi 1/2	1/0 3d2h
FTOS>

Table 16-14. show ip route all Command Example Fields

Field Description
(undefined) Identifies the type of route:
Destination Identifies the route's destination IP address.
Gateway Identifies	whether the route is directly connected and on which interface the route is configured.
Dist/Metric Identifies if the route has a specified distance or metric.
Last Change Identifies when the route was last changed or configured.

show ip route list

Display IP routes in an IP prefix list.

Syntax

show ip route list prefix-list

Parameters

prefix-list

Enter the name of a configured prefix list.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Related Commands

ip prefix-list Enter the CONFIGURATION-IP PREFIX-LIST mode and configure a prefix list.

show ip prefix-list summary Display a summary of the configured prefix lists.

Example

Figure 16-22. show ip route summary Command Example

FTOS#show ip route list test
Codes: C - connected, S - static, R - RIP,
B - BGP, IN - internal BGP, EX - external BGP, LO - Locally Originated,
O - OSPF, IA - OSPF inter area, N1 - OSPF NSSA external type 1,
N2 - OSPF NSSA external type 2, E1 - OSPF external type 1,
E2 - OSPF external type 2, i - IS-IS, L1 - IS-IS level-1,
L2 - IS-IS level-2, IA - IS-IS inter area, * - candidate default,
> - non-active route, + - summary route 

Gateway of last resort is not set

Destination Gateway Dist/Metric Last Change
R 2.1.0.0/24 via 2.1.4.1, Gi 4/43 120/2 3d0h
R 2.1.1.0/24 via 2.1.4.1, Gi 4/43 120/2 3d1h
R 2.1.2.0/24 via 2.1.4.1, Gi 4/43 120/1 3d0h
R 2.1.3.0/24 via 2.1.4.1, Gi 4/43 120/1 3d1h
C 2.1.4.0/24 Direct, Gi 4/43 0/0 3d1h 

show ip route summary

View a table summarizing the IP routes in the switch.

Syntax

show ip route summary

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale 

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series 

pre-Version 6.1.1.0 Introduced for E-Series

Example

Figure 16-23. show ip route summary Command Example

FTOS>show ip route summary
Route Source Active Routes Non-active Routes
connected 17 0
static 3 0
ospf 100 1368 2
Intra-area: 762 Inter-area: 1 External-1: 600 External-2: 5
Total 1388 2
Total 1388 active route(s) using 222440 bytes
Total 2 non-active route(s) using 128 bytes
FTOS> 

Table 16-15. show ip route summary Column Headings

Column Heading	Description
Route Source Identifies how the route is configured in FTOS.
Active Routes Identifies the best route if a route is learned from two protocol sources.
Non-active Routes Identifies the back-up routes when a route is learned by two different protocols. If the best route or active route goes down, the non-active route will become the best route.
ospf 100 If routing protocols (OSPF, RIP) are configured and routes are advertised, then information on those routes is displayed.
Total 1388 active... Displays the number of active and non-active routes and the memory usage of those routes.If there are no routes configured in the FTOS, this line does not appear.

Related Commands

show ip route Display information about the routes found in switch.

show ip traffic

View IP, ICMP, UDP, TCP and ARP traffic statistics.

Syntax

show ip traffic [all | cp | rp1 | rp2]

Note: These options are supported only on the E-Series.

Parameters

all	(OPTIONAL) Enter the keyword all to view statistics from all processors. If you do not enter a keyword, you also view all statistics from all processors.
cp	(OPTIONAL) Enter the cp to view only statistics from the Control Processor.
rp1	(OPTIONAL) Enter the keyword rp1 to view only the statistics from Route Processor 1.
rp2	(OPTIONAL) Enter the keyword rp2 to view only the statistics from Route Processor 2.

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

Version 6.5.1.0 F10 Monitoring MIB available for ip traffic statistics

pre-Version 6.1.1.0 Introduced for E-Series

Example

Figure 16-24. show ip traffic Command Example (partial)

FTOS#show ip traffic
Control Processor IP Traffic:
IP statistics:
Rcvd: 23857 total, 23829 local destination
0 format errors, 0 checksum errors, 0 bad hop count
0 unknown protocol, 0 not a gateway
0 security failures, 0 bad options
Frags: 0 reassembled, 0 timeouts, 0 too big
0 fragmented, 0 couldn't fragment
Bcast: 28 received, 0 sent; Mcast: 0 received, 0 sent
Sent: 16048 generated, 0 forwarded
21 encapsulation failed, 0 no route
ICMP statistics:
Rcvd: 0 format errors, 0 checksum errors, 0 redirects, 0 unreachable
0 echo, 0 echo reply, 0 mask requests, 0 mask replies, 0 quench
0 parameter, 0 timestamp, 0 info request, 0 other
Sent: 0 redirects, 0 unreachable, 0 echo, 0 echo reply
0 mask requests, 0 mask replies, 0 quench, 0 timestamp
0 info reply, 0 time exceeded, 0 parameter problem
UDP statistics:
Rcvd: 0 total, 0 checksum errors, 0 no port
0 short packets, 0 bad length, 0 no port broadcasts, 0 socket full
Sent: 0 total, 0 forwarded broadcasts
TCP statistics:
Rcvd: 23829 total, 0 checksum errors, 0 no port
Sent: 16048 total
ARP statistics:
Rcvd: 156 requests, 11 replies
Sent: 21 requests, 10 replies (0 proxy)
Routing Processor IP Traffic: 

Table 16-16. show ip traffic output definitions

Keyword Definition
unknown protocol... No receiver for these packets. Counts those packets whose protocol type field is not recognized by FTOS.
not a gateway... Packets can not be routed; host/network is unreachable.
security failures... Counts the number of received unicast/multicast packets that could not be forwarded due to:route not found for unicast/multicast; ingress interfaces do not belong to the destination multicast groupdestination IP address belongs to reserved prefixes; host/network unreachable
bad options... Unrecognized IP option on a received packet.
Frags: IP fragments received.
... reassembled Number of IP fragments that were reassembled.
... timeouts Number of times a timer expired on a reassembled queue.
... too big Number of invalid IP fragments received.
... couldn't fragment Number of packets that could not be fragmented and forwarded.
...encapsulation failed Counts those packets which could not be forwarded due to ARP resolution failure.FTOS sends an arp request prior to forwarding an IP packet. If a reply is not received, FTOS repeats the request three times. These packets are counted in encapsulation failed.
Revd:
...short packets	The number of bytes in the packet are too small.
...bad length	The length of the packet was not correct.

Table 16-16. show ip traffic output definitions

Keyword Definition
...no port broadcasts The incoming broadcast/multicast packet did not have any listener.
...socket full The applications buffer was full and the incoming packet had to be dropped.

Usage Information

The F10 Monitoring MIB provides access to the statistics described below.

Table 16-17. F10 Monitoring MIB

Command Display Object OIDs
IP statistics:
Bcast:
Received	f10BcastPktRecv	1.3.6.1.4.1.6027.3.3.5.1.1
Sent	f10BcastPktSent	1.3.6.1.4.1.6027.3.3.5.1.2
Mcast:
Received	f10McastPktRecv	1.3.6.1.4.1.6027.3.3.5.1.3
Sent	f10McastPktSent	1.3.6.1.4.1.6027.3.3.5.1.4
ARP statistics:
Rcvd:
Request	f10ArpReqRecv	1.3.6.1.4.1.6027.3.3.5.2.1
Replies	f10ArpReplyRecv	1.3.6.1.4.1.6027.3.3.5.2.3
Sent:
Request	f10ArpReqSent	1.3.6.1.4.1.6027.3.3.5.2.2
Replies	f10ArpReplySent	1.3.6.1.4.1.6027.3.3.5.2.4
Proxy	f10ArpProxySent	1.3.6.1.4.1.6027.3.3.5.2.5

show protocol-termination-table

E Display the IP Packet Termination Table (IPPTT).

Syntax show protocol-termination-table linecard number port-set port-pipe-number

Parameters

linecard number	Enter the keyword linecard followed by slot number of the line card.E-Series Range: 0 to 13 on a E1200/1200i, 0 to 6 on a E600/E600i,and 0 to 5 on a E300
port-set port-pipe-number	Enter the keyword port-set followed by the line card’s Port-Pipe number.Range: 0 to 1

Defaults No default behavior or values

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.1.1.2 Introduced support for E-Series ExaScale E600i

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 6.4.1.0 Introduced

Example

Figure 16-25. show protocol-termination-table Command Output

FTOS#show protocol-termination-table linecard 2 port-set 0
Index	Protocol	Src-Port	Dst-Port	Queue	DP	Blk-Hole	VlanCPU	EqPort
0	ICMP	any	any	Q0	0	No	-	CP
1	UDP	any	1812	Q7	6	No	-	CP
2	UDP	any	68	Q7	6	No	-	CP
3	UDP	any	67	Q7	6	No	-	CP
4	TCP	any	22	Q7	6	No	-	CP
5	TCP	22	any	Q7	6	No	-	CP
6	TCP	639	any	Q7	6	No	-	RP2
7	TCP	any	639	Q7	6	No	-	RP2
8	TCP	646	any	Q7	6	No	-	RP1
9	TCP	any	646	Q7	6	No	-	RP1
10	UDP	646	any	Q7	6	No	-	RP1
11	UDP	any	646	Q7	6	No	-	RP1
12	TCP	23	any	Q7	6	No	-	CP
13	TCP	any	23	Q7	6	No	-	CP
14	UDP	any	123	Q7	6	No	-	CP
15	TCP	any	21	Q7	6	No	-	CP
16	TCP	any	20	Q7	6	No	-	CP
17	UDP	any	21	Q7	6	No	-	CP
18	UDP	any	20	Q7	6	No	-	CP
19	TCP	21	any	Q7	6	No	-	CP
20	TCP	20	any	Q7	6	No	-	CP
21	UDP	21	any	Q7	6	No	-	CP
22	UDP	20	any	Q7	6	No	-	CP
23	UDP	any	69	Q7	6	No	-	CP
24	UDP	69	any	Q7	6	No	-	CP
25	TCP	any	161	Q7	6	No	-	CP
26	TCP	161	any	Q7	6	No	-	CP
27	TCP	162	any	Q7	6	No	-	CP
28	TCP	any	162	Q7	6	No	-	CP
29	UDP	any	161	Q7	6	No	-	CP
30	UDP	161	any	Q7	6	No	-	CP
31	UDP	any	162	Q7	6	No	-	CP
32	UDP	162	any	Q7	6	No	-	CP
33	PIM-SM	any	any	Q6	0	No	-	RP2
34	IGMP	any	any	Q7	6	No	-	RP2
35	OSPF	any	any	Q7	6	No	-	RP1
36	RSVP	any	any	Q7	6	No	-	RP1

Usage Information

The IPPTT table is used for looking up forwarding information for IP control traffic destined to the router. For the listed control traffic types, IPPTT contains the information for the following:

• Which CPU to send the traffic (CP, RP1, or RP2)
  • What QoS parameters to set

Related Commands

show ip cam stack-unit

Display the CAM table

show tcp statistics

View information on TCP traffic through the switch.

Syntax

show tcp statistics {all | cp | rp1 | rp2}

Parameters

all Enter the keyword all to view all TCP information.

cp

Enter the keyword cp to view only TCP information from the Control Processor.

	rp1	Enter the keyword rp1 to view only TCP statistics from Route Processor 1.
	rp2	Enter the keyword rp2 to view only TCP statistics from Route Processor 2.
Command Modes	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 6.4.1.0 Introduced

Example

Figure 16-26. show tcp statistics cp Command Example

Table 16-18. show tcp statistics cp Command Example Fields

Field Description
Rcvd: Displays the number and types of TCP packets received by the switch.· Total = total packets received· no port = number of packets received with no designated port.
0 checksum error... Displays the number of packets received with the following:· checksum errors· bad offset to data· too short
329 packets... Displays the number of packets and bytes received in sequence.
17 dup... Displays the number of duplicate packets and bytes received.
0 partially... Displays the number of partially duplicated packets and bytes received.
7 out-of-order... Displays the number of packets and bytes received out of order.
0 packets with data after window	Displays the number of packets and bytes received that exceed the switch's window size.
0 packets after close Displays the number of packet received after the TCP connection was closed.
0 window probe packets...	Displays the number of window probe and update packets received.
Field	Description
41 dup ack... Displays the number	ber of duplicate acknowledgement packets and acknowledgement packets with data received.
10184 ack... Displays the number	ber of acknowledgement packets and bytes received.
Sent: Displays the total number	of TCP packets sent and the number of urgent packets sent.
25 control packets... Displays the number	the number of control packets sent and the number retransmitted.
11603 data packets... Displays	the number of data packets sent.
24 data packets retransmitted	Displays the number of data packets resent.
355 ack... Displays the number	of acknowledgement packets sent and the number of packet delayed.
0 window probe... Displays the number of window probe and update packets sent.
7 Connections initiated... Displays the number of TCP connections initiated, accepted, and established.
14 Connections closed... Displays the number of TCP connections closed, dropped.
20 Total rxmt... Displays the number of times the switch tried to re-send data and the number of connections dropped during the TCP retransmit timeout period.
0 Keepalive .... Lists the number of keepalive packets in timeout, the number keepalive probes and the number of TCP connections dropped during keepalive.

IPv6 Access Control Lists (IPv6 ACLs)

Overview

IPv6 ACLs and IPv6 Route Map commands are supported on platforms C E S

• IPv6 ACL Commands
  • IPv6 Route Map Commands

Note: For IPv4 ACL commands, see Chapter 7, Access Control Lists (ACL).

Important Points to Remember

• S-Series systems support Ingress IPv6 ACLs.
• The S55 supports both Ingress and Egress IPv6 ACLs. E-Series platforms require IPv6-ExtACL CAM profile to support IPv6 ACLs.
• C-Series platforms require manual CAM usage space allotment. Refer to cam-acl later in this document.
• Egress IPv6 ACL and IPv6 ACL on Loopback interface is not supported.
• Reference to an empty ACL will permit any traffic.
• ACLs are not applied to self-originated traffic (e.g. Control Protocol traffic not affected by IPv6 ACL since the routed bit is not set for Control Protocol traffic and for egress ACLs the routed bit must be set).
• The same access list name can be used for both IPv4 and IPv6 ACLs.
• Both IPv4 and IPv6 ACLs can be applied on an interface at the same time.
• IPv6 ACLs can be applied on physical interfaces and a logical interfaces (Port-channel/VLAN).
• Non-contiguous masks are not supported in source or destination addresses in IPv6 ACL entries.
• Since prefix mask is specified in /x format in IPv6 ACLs, inverse mask is not supported.

IPv6 ACL Commands

The following commands configure IPv6 ACLs:

• cam-acl
  • clear counters ipv6 access-group
• deny
• deny icmp
• deny tcp

• deny udp

• ipv6 access-group

• ipv6 access-list
• permit
• permit icmp
• permit tcp
• permit udp
• remark
• resequence access-list
• resequence prefix-list ipv6
  • seq
  • show cam-acl
  • show config
  • show ipv6 accounting access-list
  • show running-config acl
• test cam-usage

cam-acl

Allocate space for IPv6 ACLs.

Syntax

cam-acl {default | l2acl 1-10 ipv4acl 1-10 ipv6acl 0-10 ipv4qos 1-10 l2qos 1-10}

Parameters

default	Use the default CAM profile settings, and set the CAM as follows.L3 ACL (ipv4acl): 6L2 ACL(l2acl) : 5IPv6 L3 ACL (ipv6acl): 0L3 QoS (ipv4qos): 1L2 QoS (l2qos): 1
l2acl 1-10 ipv4acl 1-10 ipv6acl 0-10 ipv4qos 1-10 l2qos 1-10	Allocate space to support IPv6 ACLs. You must enter all of the profiles and a range.Enter the CAM profile name followed by the amount to be allotted.The total space allocated must equal 13.The ipv6acl range must be a factor of 2.

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.2.1.0 Introduced on the S-Series

Version 7.8.1.0 Introduced on the C-Series

Usage Information

You must save the new CAM settings to the startup-config (write-mem or copy run start) then reload the system for the new settings to take effect.

The total amount of space allowed is 16 FP Blocks. System flow requires 3 blocks and these cannot be reallocated.

When configuring space for IPv6 ACLs, the total number of Blocks must equal 13.

Ranges for the CAM profiles are 1-10, except for the ipv6acl profile which is 0-10. The ipv6acl allocation must be a factor of 2 (2, 4, 6, 8, 10).

clear counters ipv6 access-group

Erase all counters maintained for the IPv6 access lists.

Syntax

clear counters ipv6 access-group [access-list-name]

Parameters

access-list-name (OPTIONAL) Enter the name of a configured access-list, up to 140 characters.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.2.1.0 Introduced support on the E-Series ExaScale

Version 7.8.1.0 Introduced support on the C-Series

Version 7.4.1.0 Introduced support on the E-Series Added monitor option

Usage Information

The S-Series supports Ingress IPv6 ACLs.

The S55 supports both Ingress and Egress IPv6 ACLs.

deny

Configure a filter that drops IPv6 packets that match the filter criteria.

Syntax

deny {ipv6-protocol-number | icmp | ipv6 | tcp | udp}

To remove this filter, you have two choices:

• Use the no seq sequence-number command syntax if you know the filter's sequence number or
  • Use the no deny {ipv6-protocol-number | icmp | ipv6 | tcp | udp} command.

Parameters

ip-protocol-number Enter an IPv6 protocol number.

Range: 0 to 255

icmp Enter the keyword icmp to deny Internet Control Message Protocol version 6.

ipv6 Enter the keyword ipv6 to deny any Internet Protocol version 6.

tcp Enter the keyword tcp to deny the Transmission Control protocol.

udp Enter the keyword udp to deny the User Datagram Protocol.

Defaults

Not configured.

Command Modes

ACCESS-LIST

Command History

Version 8.2.1.0 Introduced support on the E-Series ExaScale

Usage Information

Version 7.8.1.0 Introduced support on the C-Series

Version 7.4.1.0 Introduced support on the E-Series

The S-Series supports Ingress IPv6 ACLs.

The S55 supports both Ingress and Egress IPv6 ACLs.

deny icmp C E S

Syntax

Configure a filter to drop all or specific ICMP messages.

deny icmp { source address mask | any | host ipv6-address } { destination address | any | host ipv6-address } [message-type] [count [byte]] | [log] [monitor]

To remove this filter, you have two choices:

• Use the no seq sequence-number command syntax if you know the filter's sequence number or
• Use the no deny icmp {source address mask | any | host ipv6-address} {destination address | any | host ipv6-address} command.

Parameters

source address	Enter the IPv6 address of the network or host from which the packets were sent in the x:x:x:x::x format followed by the prefix length in the /x format. Range: /0 to /128 The :: notation specifies successive hexadecimal fields of zero.
mask	Enter a network mask in /prefix format (/x).
any	Enter the keyword any to specify that all routes are subject to the filter.
host ipv6-address	Enter the keyword host followed by the IPv6 address of the host in the x:x:x:x::x format. The :: notation specifies successive hexadecimal fields of zero
destination address	Enter the IPv6 address of the network or host to which the packets are sent in the x:x:x:x::x format followed by the prefix length in the /x format. Range: /0 to /128 The :: notation specifies successive hexadecimal fields of zero.
message-type	On the E-Series, enter an ICMP message type, either with the type (and code, if necessary) numbers or with the name of the message type. Range: 0 to 255 for ICMP type; 0 to 255 for ICMP code
count	(OPTIONAL) Enter the keyword count to count packets processed by the filter.
byte	(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
log	(OPTIONAL) Enter the keyword log to have the information kept in an ACL log file.
monitor	(OPTIONAL) Enter the keyword monitor to monitor traffic on the monitoring interface specified in the flow-based monitoring session along with the filter operation.

Defaults

Not configured

Command Modes

ACCESS-LIST

Command History

Version 8.2.1.0 Introduced support on the E-Series ExaScale

Version 7.8.1.0 Introduced support on the C-Series

Version 7.4.1.0 Introduced support on the E-SeriesAdded monitor option

Usage Information

The S-Series supports Ingress IPv6 ACLs.

The S55 supports both Ingress and Egress IPv6 ACLs.

The C-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented.

The following table lists the keywords displayed in the CLI help and their corresponding ICMP Message Type Name.

Table 17-1. ICMP Message Type Keywords

Keyword ICMP Message Type	Name
dest-unreachable Destination unreachable
echo Echo request (ping)
echo-reply	Echo reply
inverse-nd-na Inverse neighbor discovery	very advertisement
inverse-nd-ns Inverse neighbor discovery	very solicitation
log Log matches against this entry
mobile-advertisement Mobile prefix	advertisement
mobile-solicitation Mobile prefix solicitation
mrouter-advertisement Multicast router	advertisement
mrouter-solicitation	Multicast router solicitation
mrouter-termination	Multicast router termination
nd-na	Neighbor advertisement
nd-ns	Neighbor solicitation
packet-too-big	Packet is too big
parameter-problem	Parameter problems
redirect	Neighbor redirect
router-advertisement	Neighbor discovery router advertisement
router-renumbering	All routers renumbering
router-solicitation	Neighbor discovery router solicitation
time-exceeded	All time exceeded

To remove this filter, you have two choices:

• Use the no seq sequence-number command syntax if you know the filter's sequence number or
• Use the no deny tcp {source address mask | any | host ipv6-address} {destination address | any | host ipv6-address} command.

Parameters

source address	Enter the IPv6 address of the network or host from which the packets were sent in the x:x:x:x::x format followed by the prefix length in the /x format. Range: /0 to /128 The :: notation specifies successive hexadecimal fields of zero.
mask	Enter a network mask in /prefix format (/x).
any	Enter the keyword any to specify that all routes are subject to the filter.
host ipv6-address	Enter the keyword host followed by the IPv6 address of the host in the x:x:x:x::x format. The :: notation specifies successive hexadecimal fields of zero
operator	(OPTIONAL) Enter one of the following logical operand: • eq = equal to • neq = not equal to • gt = greater than • lt = less than • range = inclusive range of ports (you must specify two ports for the port command parameter.
port port	Enter the application layer port number. Enter two port numbers if using the range logical operand. Range: 0 to 65535. The following list includes some common TCP port numbers: • 23 = Telnet • 20 and 21 = FTP • 25 = SMTP • 169 = SNMP
destination address	Enter the IPv6 address of the network or host to which the packets are sent in the x:x:x:x::x format followed by the prefix length in the /x format. Range: /0 to /128 The :: notation specifies successive hexadecimal fields of zero.
bit	Enter a flag or combination of bits: ack: acknowledgement field fin: finish (no more data from the user) psh: push function rst: reset the connection syn: synchronize sequence numbers urg: urgent field
count	(OPTIONAL) Enter the keyword count to count packets processed by the filter.
byte	(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.

	log		(OPTIONAL) Enter the keyword log to enter ACL matches in the log. Supported on Jumbo-enabled line cards only.
	monitor		(OPTIONAL) Enter the keyword monitor to monitor traffic on the monitoring interface specified in the flow-based monitoring session along with the filter operation.
Defaults	Not configured.
Command Modes	ACCESS-LIST
Command History	Version 8.2.1.0 Introduced support on the E-Series ExaScale
	Version 7.8.1.0 Introduced support on the C-Series
	Version 7.4.1.0 Introduced support on the E-Series Added monitor option
Usage Information	The S-Series supports Ingress IPv6 ACLs.
	The S55 supports both Ingress and Egress IPv6 ACLs.
	The C-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented.
	Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators (gt, lt, range) may require more than one entry. The range of ports is configured in the CAM based on bitmask boundaries; the space required depends on exactly what ports are included in the range. For example, an ACL rule with TCP port range 4000 - 8000 uses 8 entries in the CAM:
	Rule#	Data	Mask	From	To	#Covered
	1	0000111110100000	1111111111100000	4000	4031	32
	2	0000111111000000	1111111111000000	4032	4095	64
	3	0001000000000000	1111100000000000	4096	6143	2048
	4	0001100000000000	1111110000000000	6144	7167	1024
	5	0001110000000000	1111111000000000	7168	7679	512
	6	0001111000000000	1111111100000000	7680	7935	256
	7	0001111100000000	1111111111000000	7936	7999	64
	8	0001111101000000	111111111111111	8000	8000	1
	Total Ports: 4001
	But an ACL rule with TCP port It 1023 takes only one entry in the CAM:
	Rule#	Data	Mask	From	To	#Covered
	1	0000000000000000	1111110000000000	0	1023	1024
	Total Ports: 1024
Related Commands	deny Assign a filter to deny IP traffic.
	deny udp Assign a filter to deny UDP traffic.

deny udp

Syntax

Configure a filter to drop UDP packets meeting the filter criteria.

deny udp {source address mask | any | host ipv6-address} [operator port [port]] {destination address | any | host ipv6-address} [operator port [port]] [count [byte]] | [log] [monitor]

To remove this filter, you have two choices:

• Use the no seq sequence-number command syntax if you know the filter's sequence number or
• Use the no deny udp {source address mask | any | host ipv6-address} {destination address | any | host ipv6-address} command.

Parameters

source address	Enter the IPv6 address of the network or host from which the packets were sent in the x:x:x:x::x format followed by the prefix length in the /x format. Range: /0 to /128 The :: notation specifies successive hexadecimal fields of zero.
mask	Enter a network mask in /prefix format (/x).
any	Enter the keyword any to specify that all routes are subject to the filter.
host ipv6-address	Enter the keyword host followed by the IPv6 address of the host in the x:x:x:x::x format. The :: notation specifies successive hexadecimal fields of zero
operator	(OPTIONAL) Enter one of the following logical operand: • eq = equal to • neq = not equal to • gt = greater than • lt = less than • range = inclusive range of ports
port port	(OPTIONAL) Enter the application layer port number. Enter two port numbers if using the range logical operand. Range: 0 to 65535
destination address	Enter the IPv6 address of the network or host to which the packets are sent in the x:x:x:x::x format followed by the prefix length in the /x format. Range: /0 to /128 The :: notation specifies successive hexadecimal fields of zero.
count	(OPTIONAL) Enter the keyword count to count packets processed by the filter.
byte	(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
log	(OPTIONAL) Enter the keyword log to enter ACL matches in the log. Supported on Jumbo-enabled line cards only.
monitor	(OPTIONAL) Enter the keyword monitor to monitor traffic on the monitoring interface specified in the flow-based monitoring session along with the filter operation.

Defaults

Not configured.

Command Modes

ACCESS-LIST

Command History

Version 8.2.1.0 Introduced support on the E-Series ExaScale

Version 7.8.1.0 Introduced support on the C-Series

Version 7.4.1.0 Introduced support on the E-Series

Added monitor option

Usage Information

The S-Series supports Ingress IPv6 ACLs.

The S55 supports both Ingress and Egress IPv6 ACLs.

The C-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented.

Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators (gt, lt, range) may require more than one entry. The range of ports is configured in the CAM based on bitmask boundaries; the space required depends on exactly what ports are included in the range.

For example, an ACL rule with TCP port range 4000 - 8000 will use 8 entries in the CAM:

Rule#	Data	Mask	From	To	#Covered
1	0000111110100000	1111111111100000	4000	4031	32
2	0000111111000000	1111111111000000	4032	4095	64
3	0001000000000000	1111100000000000	4096	6143	2048
4	0001100000000000	1111110000000000	6144	7167	1024
5	0001110000000000	1111111000000000	7168	7679	512
6	0001111000000000	1111111100000000	7680	7935	256
7	0001111100000000	1111111111000000	7936	7999	64
8	0001111101000000	1111111111111111	8000	8000	1

Total Ports: 4001

But an ACL rule with TCP port It 1023 takes only one entry in the CAM:

Rule#	Data	Mask	From	To	#Covered
1	0000000000000000	1111110000000000	0	1023	1024

Total Ports: 1024

Related Commands

deny Assign a deny filter for IP traffic.

deny tcp Assign a deny filter for TCP traffic.

ipv6 access-group

Assign an IPv6 access-group to an interface.

Syntax

ipv6 access-group access-list-name {in | out} [implicit-permit] [vlan range]

To delete an IPv6 access-group configuration, use the no ipv6 access-group access-list-name {in} [implicit-permit] [vlan range] command.

Parameters

access-list-name	Enter the name of a configured access list, up to 140 characters.
in | out	Enter either the keyword in or out to apply the IPv6 ACL to incoming traffic (ingress) or outgoing traffic (egress).

	implicit-permit	(OPTIONAL) Enter the keywordimplicit-permitto change the default action of the IPv6 ACL from implicit-deny to implicit-permit (that is, if the traffic does not match the filters in the IPv6 ACL, the traffic is permitted instead of dropped).
	vlan range	(OPTIONAL) Enter the keywordvlanfollowed by the VLAN range in a comma separated format.Range: 1 to 4094
Defaults	Disabled
Command Modes	INTERFACE
Command History	Version 7.8.1.0 Introduced support on the C-SeriesIncreased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
	Version 7.4.1.0 Introduced support on the E-Series
Usage Information	The S-Series supports Ingress IPv6 ACLs.The S55 supports both Ingress and Egress IPv6 ACLs.You can assign an IPv6 access group to a physical, LAG, or VLAN interface context.
Example	Figure 17-1. Command Example: ipv6 access-groupFTOS (conf-if-gi-9/0)#ipv6 access-group AclList1 in implicit-permit vlan 10-20FTOS (conf-if-gi-9/0)#show config!interface GigabitEthernet 9/0no ip addressipv6 access-group AclList1 in implicit-permit Vlan 10-20no shutdownFTOS (conf-if-gi-9/0)#

ipv6 access-list

Configure an access list based on IPv6 addresses or protocols.

Syntax

ipv6 access-list access-list-name

To delete an access list, use the no ipv6 access-list access-list-name command.

Parameters

access-list-name

Enter the as the access list name as a string, up to 140 characters.

Defaults

All access lists contain an implicit “deny any”; that is, if no match occurs, the packet is dropped.

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced support on the S55.

Version 8.2.1.0 Introduced support on the E-Series ExaScale

	Version 7.8.1.0 Introduced support on the C-SeriesIncreased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
	Version 7.4.1.0 Introduced support on the E-Series
Usage Information	The S-Series supports Ingress IPv6 ACLs.
	The S55 supports both Ingress and Egress IPv6 ACLs.
	The number of entries allowed per ACL is hardware-dependent. Refer to your line card documentation for detailed specification on entries allowed per ACL.
Related Commands	show config View the current configuration.
permit
C E S	Select an IPv6 protocol number, ICMP, IPv6, TCP, or UDP to configure a filter that match the filter criteria.
Syntax	permit { ipv6-protocol-number | icmp | ipv6 | tcp | udp}
	To remove this filter, you have two choices:Use the no seq sequence-number command syntax if you know the filter's sequence number orUse the no permit { ipv6-protocol-number | icmp | ipv6 | tcp | udp} command.
Parameters	ip-protocol-number Enter an IPv6 protocol number.Range: 0 to 255
	icmp Enter the keyword icmp to filter Internet Control Message Protocol version 6.
	ipv6 Enter the keyword ipv6 to filter any Internet Protocol version 6.
	tcp Enter the keyword tcp to filter the Transmission Control protocol.
	udp Enter the keyword udp to filter the User Datagram Protocol.
Defaults	Not configured.
Command Modes	ACCESS-LIST
Command History	Version 8.3.5.0 Introduced support on the S55.
	Version 8.2.1.0 Introduced support on the E-Series ExaScale
	Version 7.8.1.0 Introduced support on the C-SeriesIncreased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
	Version 7.4.1.0 Introduced support on the E-Series
Usage Information	The S-Series supports Ingress IPv6 ACLs.
	The S55 supports both ingress and Egress IPv6 ACLs.

permit icmp

Configure a filter to allow all or specific ICMP messages.

Syntax

permit icmp {source address mask|any|host ipv6-address}{destination address|any|host ipv6-address}[message-type][count [byte]]|[log][monitor]

To remove this filter, you have two choices:

• Use the no seq sequence-number command syntax if you know the filter's sequence number or
• Use the no permit icmp {source address mask | any | host ipv6-address} {destination address| any | host ipv6-address} command.

Parameters

source address	Enter the IPv6 address of the network or host from which the packets were sent in the x:x:x:x::x format followed by the prefix length in the /x format. Range: /0 to /128 The :: notation specifies successive hexadecimal fields of zero.
mask	Enter a network mask in /prefix format (/x).
any	Enter the keyword any to specify that all routes are subject to the filter.
host ipv6-address	Enter the keyword host followed by the IPv6 address of the host in the x:x:x:x::x format. The :: notation specifies successive hexadecimal fields of zero
destination address	Enter the IPv6 address of the network or host to which the packets are sent in the x:x:x:x::x format followed by the prefix length in the /x format. Range: /0 to /128 The :: notation specifies successive hexadecimal fields of zero.
message-type	(OPTIONAL) Enter an ICMP message type, either with the type (and code, if necessary) numbers or with the name of the message type. Range: 0 to 255 for ICMP type; 0 to 255 for ICMP code
count	(OPTIONAL) Enter the keyword count to count packets processed by the filter.
byte	(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
log	(OPTIONAL) Enter the keyword log to have the information kept in an ACL log file.
monitor	(OPTIONAL) Enter the keyword monitor to monitor traffic on the monitoring interface specified in the flow-based monitoring session along with the filter operation.

Defaults

Not configured

Command Modes

ACCESS-LIST

Command History

Version 8.2.1.0 Introduced support on the E-Series ExaScale

Version 7.8.1.0 Introduced support on the C-Series

Version 7.4.1.0 Introduced support on the E-Series

Added monitor option

Usage Information

The S-Series supports Ingress IPv6 ACLs.

The S55 supports both Ingress and Egress IPv6 ACLs.

The C-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented.

permit tcp

Syntax

Configure a filter to pass TCP packets that match the filter criteria.

permit tcp {source address mask | any | host ipv6-address} [operator port [port]] {destination address | any | host ipv6-address} [bit] [operator port [port]] [count [byte]] | [log] [monitor]

To remove this filter, you have two choices:

• Use the no seq sequence-number command syntax if you know the filter's sequence number or
• Use the no permit tcp {source address mask | any | host ipv6-address} {destination address | any | host ipv6-address} command.

Parameters

source address	Enter the IPv6 address of the network or host from which the packets were sent in the x:x:x:x::x format followed by the prefix length in the /x format. Range: /0 to /128 The :: notation specifies successive hexadecimal fields of zero.
mask	Enter a network mask in /prefix format (/x).
any	Enter the keyword any to specify that all routes are subject to the filter.
host ipv6-address	Enter the keyword host followed by the IPv6 address of the host in the x:x:x:x::x format. The :: notation specifies successive hexadecimal fields of zero
operator	(OPTIONAL) Enter one of the following logical operand: • eq = equal to • neq = not equal to • gt = greater than • lt = less than • range = inclusive range of ports (you must specify two port for the port parameter.)
port port	Enter the application layer port number. Enter two port numbers if using the range logical operand. Range: 0 to 65535. The following list includes some common TCP port numbers: 23 = Telnet 20 and 21 = FTP 25 = SMTP 169 = SNMP
destination address	Enter the IPv6 address of the network or host to which the packets are sent in the x:x:x:x::x format followed by the prefix length in the /x format. Range: /0 to /128 The :: notation specifies successive hexadecimal fields of zero.

	bit	Enter a flag or combination of bits:ack: acknowledgement fieldfin: finish (no more data from the user)psh: push functionrst: reset the connectionsyn: synchronize sequence numbersurg: urgent field
	count	(OPTIONAL) Enter the keyword count to count packets processed by the filter.
	byte	(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
	log	(OPTIONAL) Enter the keyword log to enter ACL matches in the log.
	monitor	(OPTIONAL) Enter the keyword monitor to monitor traffic on the monitoring interface specified in the flow-based monitoring session along with the filter operation.
Defaults	Not configured.
Command Modes	ACCESS-LIST
Command History	Version 8.2.1.0 Introduced support on the E-Series ExaScale
	Version 7.8.1.0 Introduced support on the C-Series
	Version 7.4.1.0 Introduced support on the E-SeriesAdded monitor option
Usage Information	The S-Series supports Ingress IPv6 ACLs.
	The S55 supports both Ingress and Egress IPv6 ACLs.
	The C-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented.
	Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators (gt, lt, range) may require more than one entry. The range of ports is configured in the CAM based on bitmask boundaries; the space required depends on exactly what ports are included in the range.

For example, an ACL rule with TCP port range 4000 - 8000 uses 8 entries in the CAM:

Rule#	Data	Mask	From	To	#Covered
1	0000111110100000	1111111111100000	4000	4031	32
2	0000111111000000	1111111111000000	4032	4095	64
3	0001000000000000	1111100000000000	4096	6143	2048
4	0001100000000000	1111110000000000	6144	7167	1024
5	0001110000000000	1111111000000000	7168	7679	512
6	0001111000000000	1111111100000000	7680	7935	256
7	0001111100000000	1111111111000000	7936	7999	64
8	0001111101000000	111111111111111	8000	8000	1

Total Ports: 4001

But an ACL rule with TCP port It 1023 takes only one entry in the CAM:

Rule#	Data	Mask	From	To	#Covered
1	0000000000000000	1111110000000000	0	1023	1024

Total Ports: 1024

Related Commands

permit Assign a permit filter for IPv6 packets.

permit udp Assign a permit filter for UDP packets.

permit udp

Configure a filter to pass UDP packets meeting the filter criteria.

Syntax

permit udp {source address mask | any | host ipv6-address} [operator port [port]] {destination address | any | host ipv6-address} [operator port [port]] [count [byte]] | [log] [monitor]

To remove this filter, you have two choices:

• Use the no seq sequence-number command syntax if you know the filter's sequence number or
• Use the no permit udp {source address mask | any | host ipv6-address} {destination address | any | host ipv6-address} command.

Parameters

source address	Enter the IPv6 address of the network or host from which the packets were sent in the x:x:x:x::x format followed by the prefix length in the /x format. Range: /0 to /128 The :: notation specifies successive hexadecimal fields of zero.
mask	Enter a network mask in /prefix format (/x).
any	Enter the keyword any to specify that all routes are subject to the filter.
host ipv6-address	Enter the keyword host followed by the IPv6 address of the host in the x:x:x:x::x format. The :: notation specifies successive hexadecimal fields of zero

operator	(OPTIONAL) Enter one of the following logical operand:•eq= equal to•neq= not equal to•gt= greater than•lt= less than•range= inclusive range of ports (you must specify two ports for the port parameter.)
port port	(OPTIONAL) Enter the application layer port number. Enter two port numbers if using the range logical operand.Range: 0 to 65535
destination address	Enter the IPv6 address of the network or host to which the packets are sent in the x:x:x:x::x format followed by the prefix length in the /x format.Range: /0 to /128The :: notation specifies successive hexadecimal fields of zero.
count	(OPTIONAL) Enter the keyword count to count packets processed by the filter.
byte	(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
log	(OPTIONAL) Enter the keyword log to enter ACL matches in the log.
monitor	(OPTIONAL) Enter the keyword monitor to monitor traffic on the monitoring interface specified in the flow-based monitoring session along with the filter operation.

Defaults	Not configured.
Command Modes	ACCESS-LIST

Command History	Version 8.2.1.0 Introduced support on the E-Series ExaScale
	Version 7.8.1.0 Introduced support on the C-Series
	Version 7.4.1.0 Introduced support on the E-SeriesAdded monitor option

Usage Information

The S-Series supports Ingress IPv6 ACLs.

The S55 supports both Ingress and Egress IPv6 ACLs.

The C-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented.

Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators (gt, lt, range) may require more than one entry. The range of ports is configured in the CAM based on bitmask boundaries; the space required depends on exactly what ports are included in the range.

For example, an ACL rule with TCP port range 4000 - 8000 uses 8 entries in the CAM:

Rule#	Data	Mask	From	To	#Covered
1	0000111110100000	1111111111100000	4000	4031	32
2	0000111111000000	1111111111000000	4032	4095	64
3	0001000000000000	1111100000000000	4096	6143	2048
4	0001100000000000	1111110000000000	6144	7167	1024
5	0001110000000000	1111111000000000	7168	7679	512
6	0001111000000000	1111111100000000	7680	7935	256
7	0001111100000000	1111111111000000	7936	7999	64
8	0001111101000000	111111111111111	8000	8000	1

Total Ports: 4001

But an ACL rule with TCP port It 1023 takes only one entry in the CAM:

Rule#	Data	Mask	From	To	#Covered
1	0000000000000000	1111110000000000	0	1023	1024

Total Ports: 1024

Related Commands

permit Assign a permit filter for IP packets.

permit tcp Assign a permit filter for TCP packets.

remark

Enter a description for an IPv6 ACL entry.

Syntax

remark remark number [description]

To delete the description, use the no remark remark number command (it is not necessary to include the remark description that you are deleting).

Parameters

remark number	Enter the remark number. Note that the same sequence number can be used for the remark and an ACL rule.Range: 0 to 4294967290
description	Enter a description of up to 80 characters.

Defaults

Not configured

Command Modes

ACCESS-LIST

Command History

Version 8.2.1.0 Introduced support on the E-Series ExaScale

Version 7.8.1.0 Introduced support on the C-Series

Version 7.4.1.0 Introduced support on the E-Series

Example

Figure 17-2. Command Example: remark

Usage Information

The S-Series supports Ingress IPv6 ACLs.

The S55 supports both Ingress and Egress IPv6 ACLs.

As shown in the example above, the same sequence number is used for the remark and an ACL rule. The remark will precede the rule in the running-configuration because it is assumed that the remark is for that rule or that group of rules that follow the remark. You can configure up to 4294967290 remarks in a given ACL.

Related Commands

show config Display the current ACL configuration.

resequence access-list

Re-assign sequence numbers to entries of an existing access-list.

Syntax

resequence access-list {ipv4 | ipv6 | mac} {access-list-name StartingSeqNum Step-to-Increment}

Parameters

ipv4 |ipv6 | mac	Enter the keyword ipv4, ipv6 or mac to identify the access list type to resequence.
access-list-name	Enter the name of a configured IP access list, up to 140 characters.Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
StartingSeqNum	Enter the starting sequence number to resequence.Range: 0 - 4294967290
Step-to-Increment	Enter the step to increment the sequence number.Range: 1 - 4294967290

Defaults

No default values or behavior

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.2.1.0 Introduced support on the E-Series ExaScale

Version 7.8.1.0 Introduced support on the C-Series

Version 7.4.1.0 Introduced support on the E-Series

Usage Information

The S-Series supports Ingress IPv6 ACLs.

The S55 supports both Ingress and Egress IPv6 ACLs.

When all sequence numbers have been exhausted, this feature permits re-assigning new sequence number to entries of an existing access-list.

Related Commands

resequence prefix-list ipv6 Resequence a prefix list

resequence prefix-list ipv6

Re-assign sequence numbers to entries of an existing prefix list.

Syntax

resequence prefix-list ipv6 {prefix-list-name StartingSeqNum Step-to-increment}

Parameters

prefix-list-name	Enter the name of configured prefix list, up to 140 characters.Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
StartingSeqNum	Enter the starting sequence number to resequence.Range: 0 – 65535
Step-to-Increment	Enter the step to increment the sequence number.Range: 1 – 65535

Defaults

No default values or behavior

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.2.1.0 Introduced support on the E-Series ExaScale

Version 7.8.1.0 Introduced support on the C-Series

Version 7.4.1.0 Introduced support on the E-Series

Usage Information

The S-Series supports Ingress IPv6 ACLs.

The S55 supports both Ingress and Egress IPv6 ACLs.

When all sequence numbers have been exhausted, this feature permits re-assigning new sequence number to entries of an existing prefix list.

Related Commands

resequence access-list Resequence an access-list

Syntax

Assign a sequence number to a deny or permit filter in an IPv6 access list while creating the filter.

seq sequence-number {deny | permit} {ipv6-protocol-number | icmp | ip | tcp | udp} {source address mask | any | host ipv6-address} {destination address | any | host ipv6-address} [operator port [port]] [count [byte]] | [log] [monitor]

To delete a filter, use the no seq sequence-number command.

Parameters

sequence-number	Enter a number from 0 to 4294967290.
deny	Enter the keyworddenyto configure a filter to drop packets meeting this condition.
permit	Enter the keywordpermitto configure a filter to forward packets meeting this criteria.
ipv6-protocol-number	Enter an IPv6 protocol number.Range: 0 to 255
icmp	Enter the keywordicmpto configure an Internet Control Message Protocol version 6 filter.
ipv6	Enter the keyword ipv6to configure any Internet Protocol version 6 filter.
tcp	Enter the keyword tcpto configure a Transmission Control protocol filter.
udp	Enter the keyword udpto configure a User Datagram Protocol filter.
source address	Enter the IPv6 address of the network or host from which the packets were sent in the x:x:x:x::x format followed by the prefix length in the /x format.Range: /0 to /128The :: notation specifies successive hexadecimal fields of zero.
mask	Enter a network mask in /prefix format (/x).
any	Enter the keywordanyto specify that all routes are subject to the filter.
host ipv6-address	Enter the keywordhostfollowed by the IPv6 address of the host in the x:x:x:x::x format.The :: notation specifies successive hexadecimal fields of zero
operator	(OPTIONAL) Enter one of the following logical operands:eq = equal toneq = not equal togt = greater thanIt = less thanrange = inclusive range of ports (you must specify two ports for the port parameter.)
port port	(OPTIONAL) Enter the application layer port number. Enter two port numbers if using therangelogical operand.Range: 0 to 65535The following list includes some common TCP port numbers:23 = Telnet20 and 21 = FTP25 = SMTP169 = SNMP

	destination address	Enter the IPv6 address of the network or host to which the packets are sent in the X:X:X:X::X format followed by the prefix length in the /X format. Range: /0 to /128 The :: notation specifies successive hexadecimal fields of zero.
	message-type	(OPTIONAL) Enter an ICMP message type, either with the type (and code, if necessary) numbers or with the name of the message type. Range: 0 to 255 for ICMP type; 0 to 255 for ICMP code
	count	(OPTIONAL) Enter the keyword count to count packets processed by the filter.
	byte	(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
	log	(OPTIONAL) Enter the keyword log to enter ACL matches in the log. Supported on Jumbo-enabled line cards only.
	monitor	(OPTIONAL) Enter the keyword monitor to monitor traffic on the monitoring interface specified in the flow-based monitoring session along with the filter operation.
Defaults	Not configured.
Command Modes	ACCESS-LIST
Command History	Version 8.2.1.0 Introduced support on the E-Series ExaScale
	Version 7.8.1.0 Introduced support on the C-Series
	Version 7.4.1.0 Added monitor option
Usage Information	The S-Series supports Ingress IPv6 ACLs.
	The S55 supports both Ingress and Egress IPv6 ACLs.
Related Commands	deny Configure a filter to drop packets.
	permit Configure a filter to forward packets.

show cam-acl

Show space allocated for IPv6 ACLs.

show cam-acl

EXEC

EXEC Privileged

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced on the C-Series

cam-acl Configure CAM profiles to support IPv6 ACLs

Examples

Figure 17-3. Command Example: show cam-acl (default profile)

Figure 17-4. Command Example: show cam-acl (manually set profiles)

FTOS#show cam-acl
-- Chassis Cam ACL --
	Current Settings(in block sizes)
L2Acl	:	2
Ipv4Acl	:	2
Ipv6Acl	:	4
Ipv4Qos	:	2
L2Qos	:	3
-- Line card 4 --
	Current Settings(in block sizes)
L2Acl	:	2
Ipv4Acl	:	2
Ipv6Acl	:	4
Ipv4Qos	:	2
L2Qos	:	3
FTOS#show cam-acl

show config

View the current IPv6 ACL configuration.

Syntax

show config

Command Modes

ACCESS-LIST

Command History

Version 8.2.1.0 Introduced support on the E-Series ExaScale

Version 7.8.1.0 Introduced support on the C-Series

Usage Information

The S-Series supports Ingress IPv6 ACLs.

The S55 supports both Ingress and Egress IPv6 ACLs.

Example

Figure 17-5. Command Example: show config

FTOS (conf-ipv6-acl) #show config
!
ipv6 access-list Acl1
    seq 5 permit ipv6 1111::2222/127 host 3333::1111 log count bytes
    seq 10 permit icmp host 3333:: any mobile-advertisement log
    seq 15 deny tcp any any rst
    seq 20 permit udp any any gt 100 count
FTOS (conf-ipv6-acl) # 

show ipv6 accounting access-list

View the IPv6 access-lists created on the E-Series and the sequence of filters.

Syntax

show ipv6 accounting {access-list access-list-name | cam_count} interface interface

Parameters

access-list-name	Enter the name of the ACL to be displayed, up to 140 characters.
cam_count	List the count of the CAM rules for this ACL.
interface interface	Enter the keywordinterfacefollowed by the interface type and slot/port or number information:For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernet followed by the slot/port information.For a Port Channel interface, enter the keywordport-channel followed by a number from 1 to 32 for EtherScale, 1 to 255 for TeraScale and ExaScale.For a SONET interface, enter the keywordsonetfollowed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernetfollowed by the slot/port information.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.2.1.0 Introduced support on the E-Series ExaScale

Version 7.8.1.0 Introduced support on the C-Series

Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.

Version 7.4.1.0 Introduced support on the E-Series

Usage Information

The S-Series supports Ingress IPv6 ACLs.

The S55 supports both Ingress and Egress IPv6 ACLs.

Example

Figure 17-6. Command Example: show ipv6 accounting access-lists

FTOS#show ipv6 accounting access-list
!
Ingress IPv6 access list AclList1 on GigabitEthernet 9/0
Total cam count 15
    seq 10 permit icmp host 3333:: any mobile-advertisement log
    seq 15 deny tcp any any rst
    seq 20 permit udp any any gt 101 count (0 packets)
!
FTOS# 

Table 17-2. show ip accounting access-lists Command Example Field

Field Description
“Ingress IPv6...” Displays the name of the IPv6 ACL, in this example “AclList1”.
“seq 10 ...” Displays the filter. If the keywords count or byte were configured in the filter, the number of packets or bytes processed by the filter is displayed at the end of the line.

show running-config acl

Display the ACL running configuration.

Syntax

show running-config acl

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.2.1.0 Introduced support on the E-Series ExaScale

Version 7.8.1.0 Introduced support on the C-Series

Version 7.4.1.0 Introduced support on the E-Series

Usage Information

The S-Series supports Ingress IPv6 ACLs.

The S55 supports both Ingress and Egress IPv6 ACLs.

Example

Figure 17-7. Command Example: show running-config acl

FTOS#show running-config acl
!
ip access-list extended ext-acl1
!
ip access-list standard std-acl1
!
ipv6 access-list Acl1
description IPV6 Access-list
seq 5 permit ipv6 1111::2222/127 host 3333::1111 log count bytes
remark 10 Remark for Entry # 10
seq 10 permit icmp host 3333:: any mobile-advertisement log
seq 15 deny tcp any any rst
seq 20 permit udp any any gt 100 count
!FTOS# 

test cam-usage

Verify that enough ACL CAM space is available for the IPv6 ACLs you have created.

Syntax

test cam-usage service-policy input input policy name linecard {number | all}

Parameters

policy-map name	Enter the name of the policy-map to verify.
number	Enterallto get information for all the line cards, or enter the line cardnumberto get information for a specific card.Range: 0-6 for E-Series, 0-7 for C-Series

Defaults
None
Command Modes
EXEC Privilege
Command
History
Version 8.2.1.0 Introduced support on the E-Series ExaScale
Version 7.8.1.0 Introduced on C-Series and E-Series
Usage
Information

This command applies to both IPv4 and IPv6 CAM Profiles, but is best used when verifying QoS optimization for IPv6 ACLs.

QoS Optimization for IPv6 ACLs does not impact the CAM usage for applying a policy on a single (or the first of several) interfaces. It is most useful when a policy is applied across multiple interfaces; it can reduce the impact to CAM usage across subsequent interfaces.

Example The following example shows the output shown when using the test cam-usage command.

Figure 17-8. Command Example: test cam-usage (C-Series)

FTOS#test cam-usage service-policy input LauraMapTest linecard all
Linecard	Portpipe	CAM Partition	Available CAM	Estimated CAM per Port	Status
2	1	IPv4Flow	232	0	Allowed
2	1	IPv6Flow	0	0	Allowed
4	0	IPv4Flow	232	0	Allowed
4	0	IPv6Flow	0	0	Allowed
FTOS#
FTOS#test cam-usage service-policy input LauraMapTest linecard 4 port-set 0
Linecard	Portpipe	CAM Partition	Available CAM	Estimated CAM per Port	Status
4	0	IPv4Flow	232	0	Allowed
4	0	IPv6Flow	0	0	Allowed
FTOS#
FTOS#test cam-usage service-policy input LauraMapTest linecard 2 port-set 1
Linecard	Portpipe	CAM Partition	Available CAM	Estimated CAM per Port	Status
2	1	IPv4Flow	232	0	Allowed
2	1	IPv6Flow	0	0	Allowed

Table 17-3. Output Explanations: test cam-usage

Term Explanation
Linecard	Lists the line card or line cards that are checked. Entering all shows the status for line cards in the chassis
Portpipe Lists the portpipe (port-set) or	port pipes (port-sets) that are checked. Entering all shows the status for line cards and port-pipes in the chassis.
CAM Partition Shows the CAM profile of the CAM
Available CAM Identifies the amount of CAM space remaining for that profile
Estimated CAM per Port Estimates the amount of CAM space the listed policy will require.
Status Indicates whether or not the policy will be allowed in the CAM

IPv6 Route Map Commands

The following commands allow you to configure route maps and their redistribution criteria.

• match ipv6 address
• match ipv6 next-hop
• match ipv6 route-source

• route-map

• set ipv6 next-hop
  • show config
  • show route-map

match ipv6 address

Configure a filter to match routes based on IPv6 addresses specified in an access list.

Syntax

match ipv6 address prefix-list-name

To delete a match, use the no match ipv6 address prefix-list-name command.

Parameters

prefix-list-name

Enter the name of IPv6 prefix list, up to 140 characters.

Defaults

Not configured.

Command Modes

ROUTE-MAP

Command History

Version 8.2.1.0 Introduced support on the E-Series ExaScale

Version 7.8.1.0 Introduced support on the C-Series Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.

Version 7.4.1.0 Introduced support on the E-Series

Related Commands

match ipv6 next-hop Redistribute routes that match the next-hop IP address.

match ipv6 route-source Redistribute routes that match routes advertised by other routers.

match ipv6 next-hop

Configure a filter which matches based on the next-hop IPv6 addresses specified in the IPv6 prefix list.

Syntax

match ipv6 next-hop prefix-list prefix-list-name

To delete a match, use the no match ipv6 next-hop prefix-list prefix-list-name command.

Parameters

prefix-list prefix-list-name

Enter the keywords prefix-list followed by the name of configured prefix list, up to 140 characters.

Defaults

Not configured.

Command Modes

ROUTE-MAP

Command History

Version 8.2.1.0 Introduced support on the E-Series ExaScale

Version 7.8.1.0 Introduced support on the C-Series Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.

Version 7.4.1.0 Introduced support on the E-Series

Related Commands	match ipv6 address Redistribute routes that match an IP address.
	match ipv6 route-source Redistribute routes that match routes advertised by other routers.
match ipv6 route-source
Syntax	configure a filter which matches based on the routes advertised in the IPv6 prefix lists.
	match ipv6 route-source prefix-list prefix-list-name
	To delete a match, use the no match ipv6 route-source prefix-list prefix-list-name command.
Parameters	prefix-list prefix-list-name	Enter the keywords prefix-list followed by the name of configured prefix list, up to 140 characters.
Defaults	Not configured.
Command Modes	ROUTE-MAP
Command History	Version 8.2.1.0 Introduced support on the E-Series ExaScale
	Version 7.8.1.0 Introduced support on the C-SeriesIncreased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
	Version 7.4.1.0 Introduced support on the E-Series
Related Commands	match ipv6 address Redistribute routes that match an IP address.
	match ipv6 next-hop Redistribute routes that match the next-hop IP address.
route-map
Syntax	designate a IPv6 route map name and enter the ROUTE-MAP mode.
	route-map map-name
	To delete a route map, use the no route-map map-name command.
Parameters	map-name	Enter a text string to name the route map, up to 140 characters.
Defaults	Not configured
Command Modes	ROUTE-MAP
Command History	Version 8.2.1.0 Introduced support on the E-Series ExaScale
	Version 7.8.1.0 Introduced support on the C-SeriesIncreased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
	Version 7.4,1.0 Introduced support on the E-Series

Example

Figure 17-9. Command Example: route-map

FTOS (conf) #route-map Rmap1
FTOS (config-route-map) #match ?
...
ip    IP specific information
ipv6    IPv6 specific information
... 

Related Commands

show config View the current configuration.

set ipv6 next-hop

Configure a filter that specifies IPv6 address as the next hop.

Syntax

set ipv6 next-hop ipv6-address

To delete the setting, use the no set ipv6 next-hop ipv6-address command.

Parameters

ipv6-address

Enter the IPv6 address in the x::x::x::x format.

Note: The :: notation specifies successive hexadecimal fields of zeros

Defaults

Not configured.

Command Modes

ROUTE-MAP

Command History

Version 8.2.1.0 Introduced support on the E-Series ExaScale

Version 7.8.1.0 Introduced support on the C-Series

Version 7.4.1.0 Introduced support on the E-Series

Usage Information

The set ipv6 next-hop command is the only way to set an IPv6 Next-Hop.

show config

View the current route map configuration.

Syntax

show config

Command Modes

ROUTE-MAP

Command History

Version 8.2.1.0 Introduced support on the E-Series ExaScale

Version 7.8.1.0 Introduced support on the C-Series

Version 7.4.1.0 Introduced support on the E-Series

Example

Figure 17-10. Command Example: show config

FTOS(config-route-map)#show config
!
route-map Rmap1 permit 10
match ip address v4plist
match ipv6 address plist1
match ipv6 next-hop prefix-list plist2
match ipv6 route-source prefix-list plist3
set next-hop 1.1.1.1
set ipv6 next-hop 3333:2222::
FTOS(config-route-map)# 

show route-map

View the current route map configurations.

Syntax

show route-map

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.2.1.0 Introduced support on the E-Series ExaScale

Version 7.8.1.0 Introduced support on the C-Series

Version 7.4.1.0 Introduced support on the E-Series

Example

Figure 17-11. Command Example: show route-map

FTOS#show route-map
!
route-map Rmap1, permit, sequence 10
Match clauses:
    ip address: v4plist
    ipv6 address: plist1
    ipv6 next-hop prefix-lists: plist2
    ipv6 route-source prefix-lists: plist3
Set clauses:
    next-hop 1.1.1.1
    ipv6 next-hop 3333:2222::
FTOS# 

Related Commands

route-map Configure a route map.

IPv6 Basics

Overview

IPv6 Basic Commands are supported on platforms ☐ E and ☐ S as designated by the symbols beneath the commands.

E-Series ExaScale supports IPv6 with FTOS 8.2.1.0 and later.

Note: The IPv6 basic commands are supported on all platforms. However, not all features are supported on all platforms.

Commands

The IPv6 commands in the chapter are:

• clear ipv6 fib
• clear ipv6 route
• ipv6 address
• ipv6 unicast-routing
  • show ipv6 cam linecard
  • show ipv6 cam stack-unit
  • show ipv6 fib linecard
  • show ipv6 fib stack-unit
  • show ipv6 interface
  • show ipv6 route
• trust ipv6-diffserv

clear ipv6 fib

Clear (refresh) all FIB entries on a line card.

Syntax

clear ipv6 fib linecard slot

Parameters

slot

Enter the slot number to clear the FITB for a line card.

Command Mode

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.2.1.0 Introduced on E-Series ExaScale

Version 7.8.1.0 Introduced on C-Series and S-Series

Version 7.4.1.0 Introduced

clear ipv6 route

Clear (refresh) all or a specific route from the IPv6 routing table.

Syntax

clear ipv6 route { * | ipv6-address prefix-length}
Parameters

*	Enter the * to clear (refresh) all routes from the IPv6 routing table.
ipv6-address prefix-length	Enter the IPv6 address in the X:X:X:X::X format followed by the prefix length in the /X format.Range: /0 to /128Note: The :: notation specifies successive hexadecimal fields of zeros

Command Mode

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.2.1.0 Introduced on E-Series ExaScale

Version 7.8.1.0 Introduced on C-Series and S-Series

Version 7.4.1.0 Introduced on E-Series

ipv6 address

Configure an IPv6 address to an interface.

Syntax

ipv6 address { ipv6-address prefix-length}
To remove the IPv6 address, use the no ipv6 address {ipv6-address prefix-length} command.
Parameters

ipv6-address prefix-length

Enter the IPv6 address in the X:X:X:X::X format followed by the prefix length in the /X format. Range: /0 to /128 Note: The :: notation specifies successive hexadecimal fields of zeros

Defaults

No default values or behavior

Command Modes

INTERFACE

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.2.1.0 Introduced on E-Series ExaScale

Version 7.8.1.0 Introduced on C-Series and S-Series

Version 7.4.1.0 Introduced

Example

Figure 18-1. Command Example: ipv6 address

FTOS(conf)#interface gigabitethernet 10/0
FTOS(conf-if-gi-10/0)#ipv6 address ?
X:X:X:X::X    IPv6 address
FTOS(conf-if-gi-10/0)#ipv6 address 2002:1:2::3 ?
<0-128>    Prefix length in bits
FTOS(conf-if-gi-10/0)#ipv6 address 2002:1:2::3 /96 ?
<cr>
FTOS(conf-if-gi-10/0)#ipv6 address 2002:1:2::3 /96
FTOS(conf-if-gi-10/0)#show config
!
interface GigabitEthernet 10/0
no ip address
ipv6 address 2002:1:2::3 /96
no shutdown
FTOS(conf-if-gi-10/0)#

Usage Information

FTOS allows multiple IPv6 addresses to be configured on an interface. When the no ipv6 address command is issued without specifying a particular IPv6 address, all IPv6 addresses on that interface are deleted.

ipv6 route C E S

Establish a static IPv6 route.

Syntax

ipv6 route ipv6-address prefix-length {ipv6-address | interface | interface ipv6-address} [distance] [tag value] [permanent]

To remove the IPv6 route, use the no ipv6 route ipv6-address prefix-length {ipv6-address | interface | interface ipv6-address} | distance | [tag value] [permanent] command.

Parameters

ipv6-address prefix-length	Enter the IPv6 address in the X:X:X:X::X format followed by the prefix length in the /X format. Range: /0 to /128 Note: The :: notation specifies successive hexadecimal fields of zeros
interface	(OPTIONAL) Enter the following keywords and slot/port or number information: For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. For a loopback interface, enter the keyword loopback followed by a number from zero (0) to 16383. For the null interface, enter the keyword null followed by zero (0). For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
ipv6-address	(OPTIONAL) Enter the forwarding router IPv6 address in the X:X:X:X::X format. Note: The :: notation specifies successive hexadecimal fields of zeros
distance	(OPTIONAL) Enter a number as the distance metric assigned to the route. Range: 1 to 255
tag value	(OPTIONAL) Enter the keyword tag followed by a tag value number. Range: 1 to 4294967295
permanent	(OPTIONAL) Enter the keyword permanent to specify that the route is not to be removed, even if the interface assigned to that route goes down. Note: If you disable the interface with an IPv6 address associated with the keyword permanent, the route disappears from the routing table.

Defaults

No default values or behavior

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.2.1.0 Introduced on E-Series ExaScale

Version 7.8.1.0 Introduced on C-Series and S-Series

Version 7.4.1.0 Introduced

Example

Figure 18-2. Command Example: ipv6 route

FTOS (conf) #ipv6 route 44::0 /64 33::1 ?
<1-255> Distance metric for this route
permanent Permanent route
tag Set tag for this route

FTOS (conf) #ipv6 route 55::0 /64 ?
X:X:X:X::X Forwarding router's address
gigabitethernet Gigabit Ethernet interface
loopback Loopback interface
null Null interface
port-channel Port channel interface
sonet Sonet interface
tenGigabitethernet TenGigabit Ethernet interface
vlan VLAN interface

FTOS (conf) #ipv6 route 55::0 /64 gigabitethernet 9/0 ?
<1-255> Distance metric for this route
X:X:X:X::X Forwarding router's address
permanent Permanent route
tag Set tag for this route

FTOS (conf) #ipv6 route 55::0 /64 gigabitethernet 9/0 66::1 ?
<1-255> Distance metric for this route
permanent Permanent route
tag Set tag for this route
FTOS# 

Usage Information

When the interface goes down, FTOS withdraws the route. The route is re-installed, by FTOS, when the interface comes back up. When a recursive resolution is “broken,” FTOS withdraws the route. The route is re-installed, by FTOS, when the recursive resolution is satisfied.

Related Commands

show ipv6 route View the IPv6 configured routes.

ipv6 unicast-routing

Enable IPv6 unicast routing.

Syntax

ipv6 unicast-routing

To disable unicast routing, use the no ipv6 unicast-routing command.

Defaults

Enabled

Command Modes CONFIGURATION

Command History	Version 8.2.1.0 Introduced on E-Series ExaScale
	Version 7.8.1.0 Introduced on C-Series
	Version 7.4.1.0 Introduced

Usage Information Since this command is enabled by default, it does not appear in the running configuration. When unicast routing is disabled, the no ipv6 unicast-routing command is included in the running configuration. Whenever unicast routing is disabled or re-enabled, FTOS generates a syslog message indicating the action.

Disabling unicast routing on an E-Series chassis causes the following behavior:

• static and protocol learnt routes are removed from RTM and from the CAM; packet forwarding to these routes is terminated.
• connected routes and resolved neighbors remain in the CAM and new IPv6 neighbors are still discoverable
  • additional protocol adjacencies (OSPFv3 and BGP4) are brought down and no new adjacencies are formed
• the IPv6 address family configuration (under router bgp) is deleted
• IPv6 Multicast traffic continues to flow unhindered

show ipv6 cam linecard

Displays the IPv6 CAM entries for the specified line card.

Syntax
show ipv6 cam linecard slot-number port-set {0-1} [summary | index | ipv6 address]

Parameters	slot-number	Enter the line card slot ID number.Range: 0 to 13 on the E1200; 0 on 6 for E600, and 0 to 5 on the E300.
	port-set	Enter the Port Set to
	summary	(OPTIONAL) Enter the keywordsummaryto display a table listing network prefixes and the total number prefixes which can be entered into the IPv6 CAM.
	index (OPTIONAL) Enter the index in the IPv6 CAM
	ipv6-address	Enter the IPv6 address in thex:x:x::x/nformat to display networks that have more specific prefixes.Range: /0 to /128Note:The::notation specifies successive hexadecimal fields of zeros.

Defaults

No default values or behavior

Command Modes	EXEC
	EXEC Privilege

Command History

Version 8.2.1.0 Introduced on E-Series ExaScale

Version 7.4.1.0 Introduced

Version 7.8.1.0 Introduced on C-Series

Usage Information	The forwarding table displays host route first, then displays route originated by routing protocol including static route.
	The egress port section displays the egress port of the forwarding entry which is designated as: C for the Control Processor1 for the Route Processor 12 for the Route Processor 2

Examples Figure 18-3. Command Example: show ipv6 cam linecard fib (C or E-Series)

Neighbor		Mac-Addr	Port	VId
[ 31] 2002:44:1:1::11		00:00:01:1a:1e:d5 Gi 13/2		0
Prefix	Next-Hop		Mac-Addr		Port	VId	EC
[ 3147] 100::/64	[ 0] 2002:44:1:1::11		-		Gi 0/0	0	1
	[ 0] 2002:44:1:24::11		-		Gi 0/0	0	1
	[ 0] 2002:44:1:23::11		-		Gi 0/0	0	1
	[ 0] 2002:44:1:21::11		-		Gi 0/0	0	1
	[ 0] 2002:44:1:20::11		-		Gi 0/0	0	1
	[ 0] 2002:44:1:19::11		-		Gi 0/0	0	1
FTOS#

Figure 18-4. Command Example: show ipv6 cam linecard (C or E-Series)

FTOS#show ipv6 cam linecard 1 port-set 0
Neighbor			Mac-Addr	Port	VId
[	0]	fe80::201:e8ff:fe17:5cae	00:01:e8:17:5c:ae	BLK	100
[	1]	fe80::201:e8ff:fe17:5bbe	00:01:e8:17:5b:be	BLK	0
[	2]	fe80::201:e8ff:fe17:5bbd	00:01:e8:17:5b:bd	BLK	0
[	3]	fe80::201:e8ff:fe17:5cb0	00:01:e8:17:5c:b0	BLK	0
[	4]	fe80::201:e8ff:fe17:5cae	00:01:e8:17:5c:ae	BLK	1000
[	5]	fe80::201:e8ff:fe17:5caf	00:01:e8:17:5c:af	BLK	0
Prefix		First-Hop		Mac-Addr	Port	VId	EC
--
[	80]	2222::2/128	[ 2] :	00:00:00:00:00:00 RP2		0	0
[	81]	3333::2/128	[ 2] ::1	00:00:00:00:00:00 RP2		0	0
FTOS#

show ipv6 cam stack-unit

S Displays the IPv6 CAM entries for the specified stack-unit.

Syntax show ipv6 cam stack-unit unit-number port-set {0-1} [summary | index | ipv6 address]

Parameters

unit-number	Enter the stack unit's ID number. Unit ID range: S55: 0-11 all other S-Series: 0-7
port-set	Enter the Port Set to
summary	(OPTIONAL) Enter the keyword summary to display a table listing network prefixes and the total number prefixes which can be entered into the IPv6 CAM.
index (OPTIONAL) Enter the index in the IPv6 CAM
ipv6-address	Enter the IPv6 address in the x:x:x:x::x/n format to display networks that have more specific prefixes. Range: /0 to /128 Note: The :: notation specifies successive hexadecimal fields of zeros.

Defaults

No default values or behavior

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Introduced

show ipv6 fib linecard

View all Forwarding Information Base entries.

Syntax

show ipv6 fib linecard slot-number {summary | ipv6-address}

Parameters

slot-number	Enter the number of the line card slot.E-Series Range: 0 to 13 on a E1200, 0 to 6 on a E600/E600i, and 0 to 5 on a E300
summary	(OPTIONAL) Enter the keyword summary to view a summary of entries in IPv6 cam.
ipv6-address	Enter the IPv6 address in the x:x:x:x::x/n format to display networks that have more specific prefixes.Range: /0 to /128Note: The :: notation specifies successive hexadecimal fields of zeros.

Command Mode

EXEC

EXEC Privilege

Command History

Version 8.2.1.0 Introduced on E-Series ExaScale

Version 7.8.1.0 Introduced on C-Series and S-Series

Version 7.4.1.0 Introduced

show ipv6 fib stack-unit

View all Forwarding Information Base entries.

Syntax
show ipv6 fib stack-unit unit-number [summary] ipv6-address

Parameters	slot-number	Enter the number of the stack unit. Unit ID range: S55: 0-11 all other S-Series: 0-7
	summary	(OPTIONAL) Enter the keyword summary to view a summary of entries in IPv6 cam.
	ipv6-address	Enter the IPv6 address in the x:x:x:x::x/n format to display networks that have more specific prefixes. Range: /0 to /128 Note: The :: notation specifies successive hexadecimal fields of zeros.
mand Mode	EXEC
	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.8.1.0 Introduced on C-Series
	Version 7.4.1.0 Introduced

show ipv6 interface

Display the status of interfaces configured for IPv6.

Syntax
show ipv6 interface interface [brief] [configured] [gigabitethernet slot | slot/port] [linecard slot-number] [loopback interface-number] [port-channel number] [tengigabitethernet slot | slot/port] [vlan vlan-id]

Parameters	interface	(OPTIONAL) Enter the following keywords and slot/port or number information:For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For a Loopback interface, enter the keywordLoopbackfollowed by a number from 0 to 16383.For the Null interface, enter the keywordnullfollowed by zero (0).For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernetfollowed by the slot/port information.
	brief	(OPTIONAL) View a summary of IPv6 interfaces.
	configured	(OPTIONAL) View information on all IPv6 configured interfaces
	gigabitethernet	(OPTIONAL) View information for an IPv6 gigabitethernet interface.
	linecard slot-number	(OPTIONAL) View information for a specific IPv6 line card or S-Series stack-unitRange: 0 to 13 on a E1200, 0 to 6 on a E600, and 0 to 5 on a E300.Range: 0-7 for C-SeriesRange 0-11 for S55, 0-7 for all other S-Series
	loopback	(OPTIONAL) View information for IPv6 loopback interfaces.
	port-channel	(OPTIONAL) View information for IPv6 port channels.
	tengigabitethernet	(OPTIONAL) View information for an IPv6 tengigabitethernet interface.
	vlan	(OPTIONAL) View information for IPv6 VLANs.
Defaults	No default values or behavior
Command Modes	EXEC
	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.2.1.0 Introduced on E-Series ExaScale
	Version 7.8.1.0 Introduced on C-Series
	Version 7.4.1.0 Introduced

Example

Figure 18-5. Command Example: show ipv6 interface

FTOS#show ipv6 interface gigabitethernet 1/1
GigabitEthernet 1/1 is up, line protocol is up
    IPV6 is enabled
    Link Local address: fe80::201:e8ff:fe04:62c4
    Global Unicast address(es):
    2001::1, subnet is 2001::/64
    2002::1, subnet is 2002::/120
    2003::1, subnet is 2003::/120
    2004::1, subnet is 2004::/32
    Global Anycast address(es):
    Joined Group address(es):
    ff02::1
    ff02::2
    ff02::1:ff00:1
    ff02::1:ff04:62c4
    MTU is 1500
    ICMP redirects are not sent
    DAD is enabled: number of DAD attempts: 1
    ND reachable time is 30 seconds
    ND advertised reachable time is 30 seconds
    ND advertised retransmit interval is 30 seconds 

show ipv6 route

Displays the IPv6 routes.

Syntax

show ipv6 route [ipv6-address prefix-length] [hostname] [all] [bgp as number] [connected] [isis tag] [list prefix-list name] [ospf process-id] [rip] [static] [summary]

Parameter

ipv6-address prefix-length	(OPTIONAL) Enter the IPv6 address in the X:X:X:X::X format followed by the prefix length in the /X format. Range: /0 to /128 The :: notation specifies successive hexadecimal fields of zeros.
hostname	(OPTIONAL) View information for this IPv6 routes with Host Name

Defaults	No default values or behavior
Command Modes	EXEC
	EXEC Privilege

Command History	Version 8.2.1.0 Introduced on E-Series ExaScale
	Version 7.8.1.0 Introduced on C-Series and S=-Series
	Version 7.4.1.0 Introduced

Example Figure 18-6. Command Example: show ipv6 route

FTOS#show ipv6 route
Codes: C - connected, L - local, S - static, R - RIP,
B - BGP, IN - internal BGP, EX - external BGP,LO - Locally Originated,
O - OSPF, IA - OSPF inter area, N1 - OSPF NSSA external type 1,
N2 - OSPF NSSA external type 2, E1 - OSPF external type 1,
E2 - OSPF external type 2, i - IS-IS, L1 - IS-IS level-1,
L2 - IS-IS level-2, IA - IS-IS inter area, * - candidate default,
Gateway of last resort is not set
Destination Dist/Metric, Gateway, Last Change
C 2001::/64 [0/0]
Direct, Gi 1/1, 00:28:49
C 2002::/120 [0/0]
Direct, Gi 1/1, 00:28:49
C 2003::/120 [0/0]
Direct, Gi 1/1, 00:28:49
C 2004::/32 [0/0]
Direct, Gi 1/1, 00:28:49
L fe80::/10 [0/0]
Direct, Nu 0, 00:29:09 

Example Figure 18-7. Command Example: show ipv6 route summary

FTOS#show ipv6 route summary
Route Source Active Routes Non-active Routes
connected 5 0
static 0 0
Total 5 0
Total 5 active route(s) using 952 bytes 

Table 18-1. show ipv6 route Command Example Fields

Field Description
(undefined) Identifies the type of route:• L = Local• C = connected• S = static• R = RIP• B = BGP• IN = internal BGP• EX = external BGP• LO = Locally Originated• O = OSPF• IA = OSPF inter area• N1 = OSPF NSSA external type 1• N2 = OSPF NSSA external type 2• E1 = OSPF external type 1• E2 = OSPF external type 2• i = IS-IS• L1 = IS-IS level-1• L2 = IS-IS level-2• IA = IS-IS inter-area• * = candidate default• > = non-active route• + = summary routes
Destination Identifies the route's destination IPv6 address.
Gateway Identifies	whether the route is directly connected and on which interface the route is configured.
Dist/Metric Identifies if the route has a specified distance or metric.
Last Change Identifies when the route was last changed or configured.

trust ipv6-diffserv

Allows the dynamic classification of IPv6 DSCP.

Syntax

trust ipv6-diffserv

To remove the definition, use the no trust ipv6-diffserv command.

Defaults

This command has no default behavior or values.

Command Modes

CONFIGURATION-POLICY-MAP-IN

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.2.1.0 Introduced on E-Series ExaScale

Version 7.8.1.0 Introduced on C-Series and S-Series

Version 7.4.1.0 Introduced

Usage Information

When trust IPv6 diffserv is configured, matched bytes/packets counters are not incremented in the show qos statistics command.

Trust differv (IPv4) can co-exist with trust ipv6-diffserv in an Input Policy Map. Dynamic classification happens based on the mapping detailed in the following table.

Table 18-2. IPv6 -Diffserv Mapping

IPv6 Service Class Field Queue ID

111XXXXX 7

110XXXXX 6

101XXXXX 5

100XXXXX 4

011XXXXX 3

010XXXXX 2

001XXXXX 1

000XXXXX 0

iSCSI Optimization

Overview

Internet Small Computer System Interface (iSCSI) optimization enables quality-of-service (QoS) treatment for iSCSI storage traffic on the following platforms as indicated: S55 S60 S4810

The following FTOS commands are used to configure and verify the iSCSI Optimization feature:

• iscsi aging time
• iscsi cos
• iscsi enable
• iscsi priority-bits
• iscsi profile-compellent
• iscsi target port
  • show iscsi
  • show iscsi session
  • show iscsi session detailed
  • show run iscsi

iscsi aging time

S4810

Set the aging time for iSCSI sessions.

Syntax iscsi aging time time

To remove the iSCSI session aging time, use the no iscsi aging time command.

Parameters

time

Enter the aging time for the iSCSI session.

Range: 5 to 43,200 minutes.

Defaults 10 minutes.

Command Mode CONFIGURATION

Command History

Version 8.3.12.0 Introduced on the S4810.

Version 8.3.16.0 Introduced on MXL 10/40GbE Switch IO Module

iscsi cos

S4810

Set the QoS policy that will be applied to the iSCSI flows.

Syntax

iscsi cos {enable | disable / dot1p vlan-priority-value [remark] / dscp dscp-value [remark]}

To disable the QoS policy, use the iscsi cos disable command.

Parameters

enable	Enter the keyword enable to allow the application of preferential QoS treatment to iSCSI traffic so that the iSCSI packets are scheduled in the switch with a dot1p priority 4 regardless of the VLAN priority tag in the packet.Default: iSCSI packets are handled with dotp1 priority 4 without remark.
disable	Enter the keyword disable to disable the application of preferential QoS treatment to iSCSI frames.
dot1pvlan-priority-value	Enter the dot1p value of the VLAN priority tag assigned to the incoming packets in an iSCSI session.Range: 0 to 7.Default: The dot1p value in ingress iSCSI frames is not changed and is used in iSCSI TLV advertisements if you did not enter theiscsi priority-bitscommand.
dscp dscp-value	Enter the DSCP value assigned to the incoming packets in an iSCSI session.The valid range is 0 to 63.Default: The DSCP value in ingress packets is not changed.
remark	Marks the incoming iSCSI packets with the configured dot1p or DSCP value when they egress to the switch.Default: The dot1and DSCP values in egress packets are not changed.

Defaults

See above.

Command Modes

CONFIGURATION

Command History

Version 8.3.12.0 Introduced on the S4810.

Version 8.3.16.0 Introduced on MXL 10/40GbE Switch IO Module

Usage Information

By default, iSCSI flows are assigned to dot1p priority 4. Dell Networking recommends changing the dot1p priority-queue setting to 0 (zero).

iscsi enable

S60

S4810

Globally enable iSCSI optimization.

Syntax

iscsi enable

To disable iSCSI optimization, use the no iscsi enable command.

Parameters

enable

Enter the keyword enable to enable the iSCSI optimization feature.

Defaults

Disabled.

Command Modes

CONFIGURATION

Command History	Version 8.3.3.8 Introduced on the S60
	Version 8.3.12.0 Introduced on the S4810.
	Version 8.3.16.0 Introduced on MXL 10/40GbE Switch IO Module

Usage • LLDP must be enabled before using this command.
Information • LLDP cannot be disabled if iSCSI is enabled.

iscsi priority-bits

S4810

Configure the priority bitmap to be advertised in iSCSI application TLVs.

Syntax iscsi priority-bits

To remove the configured priority bitmap, use the no iscsi priority-bits command.

Defaults 4 (0x10 in the bitmap)

Command Modes PROTOCOL LLDP (only on global, not on interface)

Command History

Version 8.3.12.0 Introduced on the S4810.

Version 8.3.16.0 Introduced on MXL 10/40GbE Switch IO Module

iscsi profile-compellent

S55 S60

Configure the auto-detection of Compellent arrays on a port.

S4810

Syntax iscsi profile-compellent

Defaults Compellent disk arrays are not detected.

Command Modes INTERFACE

Command History

Version 8.3.5.3 Introduced on the S55

Version 8.3.3.8 Introduced on the S60

Version 8.3.12.0 Introduced on the S4810.

Version 8.3.16.0 Introduced on MXL 10/40GbE Switch IO Module

iscsi target port

S4810	Configure the iSCSI target ports and optionally, the IP addresses on which iSCSI communication will be monitored.
Syntax	iscsi target port [tcp-port-2...tcp-port-16]ip-address [ip-address]
	To remove the configured iSCSI target ports or IP addresses, use the no iscsi target port command.
Parameters	tcp-port-2...tcp-port-16	Enter the tcp-port number of the iSCSI target ports.The tcp-port-n is the TCP port number or a list of TCP port numbers on which the iSCSI target listens to requests. Separate port numbers with a comma.Default: 860, 3260.
	ip-address	(Optional) Enter the ip-address that the iSCSI will monitor.The ip-address specifies the IP address of the iSCSI target.
Defaults	860, 3260.
Command Modes	CONFIGURATION
Command History	Version 8.3.12.0 Introduced on the S4810.
	Version 8.3.16.0 Introduced on MXL 10/40GbE Switch IO Module
Usage Information	You can configure up to 16 target TCP ports on the switch in one command or multiple commands.When you use the no iscsi target port command and the TCP port to be deleted is one bound to a specific IP address, the IP address value must be included in the command.
show iscsi	Display the currently configured iSCSI settings.
S4810
Syntax	show iscsi
Command Mode	EXEC
	EXEC Privilege
Command History	Version 8.3.12.0 Introduced on the S4810. Support added for cam modification.
	Version 8.3.16.0 Introduced on MXL 10/40GbE Switch IO Module
Example	FTOS#show iscsiiSCSI is enablediSCSI session monitoring is disablediSCSI COS : dotlp is 4 no-remarkSession aging time: 10Maximum number of connections is 256
	iSCSI Targets and TCP Ports:

Related Commands

TCP Port	Target IP Address
3260
860

show isesi session Display information on active iSCSI sessions on the switch.

show iscsi session detailed	Display detailed information on active iSCSI sessions on the switch.
show run iscsi show run iscsi

show iscsi session

S4810
Display information on active iSCSI sessions on the switch.

Syntax	show iscsi session
Command Mode	EXEC
	EXEC Privilege
Command History	Version 8.3.12.0 Introduced on the S4810.
	Version 8.3.16.0 Introduced on MXL 10/40GbE Switch IO Module
Usage Information	Only sessions observed by the switch will be learnt; sessions flowing through an adjacent switch will not be learnt. Session monitoring learns sessions that actually flow through the switch, it does not learn all sessions in the entire topology.
	After a switch is reloaded, any information exchanged during the initial handshake is not available. If the switch picks up the communication after reloading, it would detect a session was in progress but could not obtain complete information for it. Any incomplete information of this type would not be available in the “show” commands.
Example	FTOS# show isci sessionSession 0:
	Target: iqn.2001-05.com.equallogic:0-8a0906-0e70c2002-10a0018426a48c94-iom010Initiator: iqn.1991-05.com.microsoft:win-x918v27yajgISID: 400001370000
	Session 1:
	Target: iqn.2001-05.com.equallogic:0-8a0906-0f60c2002-0360018428d48c94-iom011Initiator: iqn.1991-05.com.microsoft:win-x918v27yajgISID: 400001370000.
Related Commands	show iscsi Display the currently configured iSCSI settings.
	show iscsi session detailed	Display detailed information on active iSCSI sessions on the switch.
	show run iscsi show run iscsi

show iscsi session detailed

S4810

Display detailed information on active iSCSI sessions on the switch.

Syntax show iscsi session detailed [session isid]

Parameters

isid

Enter the session's iSCSi ID to display detailed information on specified iSCSi session.

Command Mode

EXEC

EXEC Privilege

Command History

Version 8.3.12.0 Introduced on the S4810.

Version 8.3.16.0 Introduced on MXL 10/40GbE Switch IO Module

Example

FTOS# show isci session detailed Session 0 :

Target:iqn.2010-11.com.ixia:ixload:iscsi-TG1
Initiator:iqn.2010-11.com.ixia.ixload:initiator-iscsi-2c
Up Time:00:00:01:28(DD:HH:MM:SS)
Time for aging out:00:00:09:34(DD:HH:MM:SS)
ISID:806978696102
Initiator	Initiator	Target	Target	Connection
IP Address	TCP Port	IP Address	TCPPort	ID
10.10.0.44	33345	10.10.0.101	3260	0
Session 1 :

Target:iqn.2010-11.com.ixia:ixload:iscsi-TG1
Initiator:iqn.2010-11.com.ixia.ixload:initiator-iscsi-35
Up Time:00:00:01:22(DD:HH:MM:SS)
Time for aging out:00:00:09:31(DD:HH:MM:SS)
ISID:806978696102
Initiator	Initiator	Target	Target	Connection
IP Address	TCP Port	IP Address	TCPPort	ID
10.10.0.53	33432	10.10.0.101	3260	0

Related Commands

show iscsi Display the currently configured iSCSI settings.

show iscsi session Display information on active iSCSI sessions on the switch.

show run isesi show run isesi

show run iscsi

S60

54810

Display all globally-configured non-default iSCSI settings in the current FTOS session.

Syntax

show run iscsi

Command Mode

EXEC Privilege

Command History

Version 8.3.3.8 Introduced on the S60.

Version 8.3.12.0 Introduced on the S4810.

Version 8.3.16.0 Introduced on MXL 10/40GbE Switch IO Module

Example

FTOS(conf) # show run iscsi ! iscsi enable FTOS(conf) #

Link Aggregation Control Protocol (LACP)

Overview

This chapter contains commands for Dell Networking's implementation of Link Aggregation Control Protocol (LACP) for the creation of dynamic link aggregation groups (LAGs — called port-channels in FTOS parlance). For static LAG commands, see the section Port Channel Commands in the Interfaces chapter), based on the standards specified in the IEEE 802.3 Carrier sense multiple access with collision detection (CSMA/CD) access method and physical layer specifications.

Commands in this chapter generally are supported on all three Dell Networking platforms — C-Series, E-Series, and S-Series — as indicated by the following symbols under command headings: C E S

Commands

Use the following commands for LACP:

• clear lacp counters
• debug lacp
• lacp long-timeout
• lacp port-priority
• lacp system-priority
• port-channel mode
  • port-channel-protocol lacp
  • show lacp

In addition, an FTOS option provides hitless dynamic LACP states (no noticeable impact to dynamic LACP states after an RPM failover) on E-Series.

clear lacp counters

Clear Port Channel counters.

Syntax

clear lacp port-channel-number counters

Parameters

port-channel-number

Enter the Port Channel number to clear the counters.

C-Series and S-Series Range: 1-128

E-Series Range: 1-255 for TeraScale

Defaults

Without a Port Channel specified, the command clears all Port Channel counters.

Command Modes	EXEC
	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	Version 6.2.1.1 Introduced on E-Series
Related Commands	show lacp Display the lacp configuration

debug lacp

Debug LACP (configuration, events etc.)

Syntax

debug lacp [config | events | pdu [in | out | [interface [in | out] ] ] ]

To disable LACP debugging, use the no debug lacp [config | events | pdu [in | out | [interface [in | out] ] ] command.

Parameters

config	(OPTIONAL) Enter the keyword config to debug the LACP configuration.
events	(OPTIONAL) Enter the keyword events to debug LACP event information.
pdu in | out	(OPTIONAL) Enter the keyword pdu to debug LACP Protocol Data Unit information. Optionally, enter an in or out parameter to:Receive enter inTransmit enter out
interface in | out	(OPTIONAL) Enter the following keywords and slot/port or number information:For a 100/1000 Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.For a SONET interface, enter the keyword sonet followed by the slot/port information.For a Ten Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.Optionally, enter an in or out parameter:Receive enter inTransmit enter out

Defaults

This command has no default values or behavior

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

Version 6.2.1.1 Introduced on E-Series

lapc long-timeout

Syntax	Configure a long timeout period (30 seconds) for an LACP session.
	lacp long-timeout
	To reset the timeout period to a short timeout (1 second), use the no lacp long-timeout command.
Defaults	1 second
Command Modes	INTERFACE (conf-if-po-number)
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	Version 7.5.1.0 Introduced on E-Series
Usage Information	This command applies to dynamic port-channel interfaces only. When applied on a static port-channel, the command has no effect.
Related Commands	show lacp Display the lacp configuration

lapp port-priority

Syntax	Configure the port priority to influence which ports will be put in standby mode when there is a hardware limitation that prevents all compatible ports from aggregating.
	lacp port-priority priority-value
	To return to the default setting, use the no lacp port-priority priority-value command.
Parameters	priority-value	Enter the port-priority value. The higher the value number the lower the priority.Range: 1 to 65535Default: 32768
Defaults	32768
Command Modes	INTERFACE
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	Version 6.2.1.1 Introduced on E-Series

lapc system-priority

Syntax	Configure the LACP system priority.
	lacp system-priority priority-value
	To return to the default setting, use the no lacp system-priority priority-value command.
Parameters	priority-value	Enter the port-priority value. The higher the value, the lower the priority.Range: 1 to 65535Default: 32768
Defaults	32768
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	Version 6.2.1.1 Introduced on E-Series

lacp ungroup member-independent

S55	S60	Enable BMP boot for the device connected to the LACP LAG.
	S4810

Syntax lacp ungroup member-independent {port-channel port-channel-id}

Defaults	Not configured.
Command Modes	CONFIGURATION
Usage Information	During boot-up in a stacking configuration, the system must be able to reach the DHCP server with the image and configuration image. During bootup, only untagged DHCP requests are sent to the DHCP server to receive an offer on static LAGs between switches. The DHCP server must be configured to start in jumpstart mode. If switches are connected using LACP port-channel like ToR, use the port-channel parameter on the TOR side of the configuration to allow member ports of a completely un-grouped lacp port-channel to inherit vlan membership of that port channel to ensure untagged packets reach the DHCP server located on the TOR. To ungroup the port-channel configurations, use the no lacp ungroup member-independent command.
Command History	Version 8.3.5.3 Introduced on S55
	Version 8.3.3.8 Introduced on S60
	Version 8.3.12.0 Added port-channel parameter.
	Version 8.3.8.0 Introduced on S4810

port-channel mode

Configure the LACP port channel mode.

Syntax
port-channel number mode [active] [passive] [off]

Parameters	number	Enter the port-channel number.C-Series and S-Series Range: 1-128E-Series Range: 1-255 for TeraScale
	active	Enter the keyword to set the mode to the active state.*
	passive	Enter the keyword to set the mode to the passive state.*
	Enter the keyword to set the mode to the off state.*

* The LACP modes are defined in the table below.

Defaults off

Command Modes

INTERFACE

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

Version 6.2.1.1 Introduced

Usage Information

The LACP modes are defined in the following table.

Table 20-1. LACP Modes

Mode Function
active	An interface is in an active negotiating state in this mode. LACP runs on any link configured in the active state and also automatically initiates negotiation with other ports by initiating LACP packets.
passive	An interface is not in an active negotiating state in this mode. LACP runs on any link configured in the passive state. Ports in a passive state respond to negotiation requests from other ports that are in active states. Ports in a passive state respond to LACP packets.
off	An interface can not be part of a dynamic port channel in the off mode. LACP will not run on a port configured in the off mode.

port-channel-protocol lacp

Enable LACP on any LAN port.

Syntax

port-channel-protocol lacp

To disable LACP on a LAN port, use the no port-channel-protocol lacp command.

Command Modes

INTERFACE

Command History	Version 8.3.5.0 Introduced on the S55.
	Version 6.2.1.1 Introduced
Related Commands	show lacp Display the LACP information.
	show interfaces port-channel Display information on configured Port Channel groups.
show lacp C E S	Display the LACP matrix.
Syntax	show lacp port-channel-number [sys-id | counters]
Parameters	port-channel-number	Enter the port-channel number to display the LACP matrix.C-Series and S-Series Range: 1-128E-Series Range: 1-255 for TeraScale
	sys-id	(OPTIONAL) Enter the keyword sys-id and the value that identifies a system.
	counters	(OPTIONAL) Enter the keyword counters to display the LACP counters.
Command Modes	EXEC
	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	Version 6.2.1.1 Introduced

Example 1 Figure 20-1. show lacp port-channel-number command

FTOS#show lacp 1Port-channel 1 admin up, oper up, mode lacpActor System ID: Priority 32768, Address 0001.e800.a12bPartner System ID: Priority 32768, Address 0001.e801.45a5Actor Admin Key 1, Oper Key 1, Partner Oper Key 1LACP LAG 1 is an aggregatable link

A - Active LACP, B - Passive LACP, C - Short Timeout, D - Long TimeoutE - Aggregatable Link, F - Individual Link, G - IN_SYNC, H - OUT_OF_SYNCI - Collection enabled, J - Collection disabled, K - Distribution enabled L - Distribution disabled,M - Partner Defaulted, N - Partner Non-defaulted, O - Receiver is in expired state,P - Receiver is not in expired state

Port Gi 10/6 is enabled, LACP is enabled and mode is lacpActor Admin: State ACEHJLMP Key 1 Priority 128Oper: State ACEGIKNP Key 1 Priority 128Partner Admin: State BDFHJLMP Key 0 Priority 0Oper: State BCEGIKNP Key 1 Priority 128

FTOS#

Example 2

Figure 20-2. show lacp sys-id command Example

Example 3

Figure 20-3. show lacp counter command Example

FTOS#show lacp 1 counters
Port	Xmit	LACP PDU Recv	Marker Xmit	PDU Recv	Unknown Pkts Rx	Illegal Pkts Rx
Gi 10/6 FTOS#	200	200	0	0	0	0

Related Commands

clear lacp counters Clear the LACP counters.

show interfaces port-channel Display information on configured Port Channel groups.

Layer 2

Overview

This chapter describes commands to configure Layer 2 features. It contains the following sections:

• MAC Addressing Commands
• Virtual LAN (VLAN) Commands

Some MAC addressing commands are supported only on the E-Series, some on all three Dell Networking platforms, and some on two Dell Networking platforms. Support is indicated by these characters, where appropriate, under each command heading: C E S

The VLAN commands are supported on all three Dell Networking platforms — C E S

MAC Addressing Commands

The following commands are related to configuring, managing, and viewing MAC addresses:

• clear mac-address-table dynamic
  • mac accounting destination
  • mac-address-table aging-time
  • mac-address-table static
  • mac-address-table station-move threshold
  • mac-address-table station-move time-interval
  • mac-address-table station-move refresh-arp
  • mac cam fib-partition
• mac learning-limit
  • mac learning-limit learn-limit-violation
  • mac learning-limit station-move-violation
  • mac learning-limit reset
  • show cam mac linecard (count)
  • show cam maccheck linecard
  • show cam mac linecard (dynamic or static)
  • show cam mac stack-unit
  • show mac-address-table
  • show mac-address-table aging-time
  • show mac accounting destination
  • show mac cam
  • show mac learning-limit

clear mac-address-table dynamic

Clear the MAC address table of all MAC address learned dynamically.

Syntax
clear mac-address-table dynamic {address mac-address | all | interface interface | vlan vlan-id}
Parameters

address mac-address	Enter the keyword address followed by a MAC address in nn:nn:nn:nn:nn:nn format.
all	Enter the keyword all to delete all MAC address entries in the MAC address table.
interface interface	Enter the following keywords and slot/port or number information:For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernet followed by the slot/port information.For a Port Channel interface, enter the keyword port-channel followed by a number:C-Series and S-Series Range: 1-128E-Series Range: 1 to 255 for TeraScale.For a SONET interface, enter the keyword sonet followed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernet followed by the slot/port information.
vlan vlan-id	Enter the keyword vlan followed by a VLAN ID number from 1 to 4094.

Command Modes
EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series

mac accounting destination

Configure a destination counter for Layer 2 traffic.

Syntax
mac accounting destination { mac-address vlan vlan-id | vlan} [bytes | packets]
To delete a destination counter, enter no mac accounting destination.
Parameters

mac-address	Enter the MAC address in the nn:nn:nn:nn:nn:nn format to count Layer 2 packets or bytes sent to that MAC address.
vlan vlan-id	Enter the keywordvlan followed by the VLAN ID to count Layer 2 packets or bytes sent to the VLAN.Range: 1 to 4094.
bytes (OPTIONAL) Enter the keywordbytes to count only bytes
packets	(OPTIONAL) Enter the keywordpackets to count only packets.

Defaults	Not configured.
Command Modes	INTERFACE (available on physical interfaces only)
Command History	Version 7.4.1.0 Introduced on E-Series
Usage Information	You must place the interface in Layer 2 mode (using the switchport command) prior to configuring the mac accounting destination command.

mac-address-table aging-time

Specify an aging time for MAC addresses to be removed from the MAC Address Table.

Syntax
mac-address-table aging-time seconds

Parameters	seconds	Enter either zero (0) or a number as the number of seconds before MAC addresses are relearned. To disable aging of the MAC address table, enter 0.E-Series Range from CONFIGURATION mode: 10 - 1000000E-Series Range from INTERFACE VLAN mode: 1 - 1000000C-Series and S-Series Range: 10 - 1000000Default: 1800 seconds
Defaults	1800 seconds
Command Modes	CONFIGURATION
	INTERFACE VLAN (E-Series only)
Command History	Version 8.3.1.0 On the E-Series, available in INTERFACE VLAN context and reduced minimum aging time in INTERFACE VLAN context from 10 seconds to 1 second.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.2.1.1 Introduced on E-Series
Related Commands	mac learning-limit Set the MAC address learning limits for a selected interface.
	show mac-address-table aging-time Display the MAC aging time.

mac-address-table static

Associate specific MAC or hardware addresses to an interface and VLANs.

Syntax

mac-address-table static mac-address output interface vlan vlan-id

To remove a MAC address, use the no mac-address-table static mac-address output interface vlan vlan-id command.

Parameters	mac-address	Enter the 48-bit hexadecimal address in nn:nn:nn:nn:nn:nn format.
	output interface	Enter the keywordoutputfollowed by one of the following interfaces:For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For a Port Channel interface, enter the keyword port-channelfollowed by a number:C-Series Range: 1-128E-Series Range: 1 to 255 for TeraScale.For a SONET interface, enter the keywordsonetfollowed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernetfollowed by the slot/port information.
	vlan vlan-id	Enter the keywordvlanfollowed by a VLAN ID.Range:1 to 4094.
Defaults	Not configured.
hand Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.2.1.1 Introduced on E-Series
Related Commands	show mac-address-table Displays the MAC address table.

mac-address-table station-move threshold

Change the frequency with which the MAC address station-move trap is sent after a MAC address changes in a VLAN. A trap is sent if a station move is detected above a threshold number of times in a given interval.

[no] mac-address-table station-move threshold number interval count

threshold number	Enter the keyword threshold followed by the number of times MAC addresses in VLANs can change before an SNMP trap is sent. Range: 1 to 10
interval seconds	Enter the keyword interval followed by the number of seconds. Range: 5 to 60

Not configured.

CONFIGURATION

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.2.1.1 Introduced on E-Series

Usage Information

For information on the specific trap sent and the corresponding Syslog refer to Appendix, .

mac-address-table station-move time-interval

Reduce the amount of time FTOS takes to detect aged entries and station moves.

Syntax
[no] mac-address-table station-move time-interval number

Parameters	time-interval number	Select the interval of the successive scans of the MAC address table that are used to detect a aged entries and station moves. Range: 500 to 5000ms
Defaults	5000ms
Command Modes	CONFIGURATION
Command History	Version 7.8.1.0 Introduced on E-Series
Usage Information	FTOS takes 4 to 5 seconds to detect aged entries and station moves because the MAC address table scanning routine runs every 5000 ms by default. To achieve faster detection, reduce the scanning interval.

mac-address-table station-move refresh-arp

Ensure that ARP refreshes the egress interface when a station move occurs due to a topology change.

Syntax
[no] mac-address-table station-move refresh-arp

Defaults	No default values or behavior
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.7.1.0 Introduced on S-Series
	Version 7.6.1.0 Introduced on C-Series
	Version 7.4.1.0 Introduced on E-Series
Usage Information	See the “NIC Teaming” section of the Layer 2 chapter in the FTOS Configuration Guide for details on using this command.

mac cam fib-partition

Reapportion the amount of Content Addressable Memory (CAM) available for MAC address learning (FIB) versus the amount available for MAC ACLs on a line card.

Syntax

mac cam fib-partition {25 | 50 | 75 | 100} slot-number

To return to the default setting, enter no mac cam fib-partition.

Parameters	25	Enter the keyword 25 to set aside 25% of the CAM for MAC address learning.
	50	Enter the keyword 50 to set aside 50% of the CAM for MAC address learning.
	75	Enter the keyword 75 to set aside 75% of the CAM for MAC address learning.
	100	Enter the keyword 100 to set aside 100% of the MAC CAM for MAC address learning.With this configuration, no MAC ACLs are processed.
	slot-number	Enter the line card slot number.Range: 0 to 13 for the E12000 to 6 for the E6000 to 5 for the E300
Defaults	75 (75% of the MAC CAM for MAC address learning)
Command Modes	CONFIGURATION
Usage Information	After setting the CAM partition size, the line card resets.
Related Commands	show mac cam Display the current MAC CAM partition values.

mac learning-limit

Limit the maximum number of MAC addresses (static + dynamic) learned on a selected interface.

Syntax
mac learning-limit address_limit [vlan vlan-id] [station-move [dynamic]] [no-station-move [dynamic]] | [dynamic [no-station-move | station-move]]

Parameters	address_limit	Enter the maximum number of MAC addresses learned. Range: 1 to 1000000
	vlan vlan-id	On the E-Series only, enter the keyword followed by the VLAN ID. Range: 1-4094
	dynamic	(OPTIONAL) Enter the keyword dynamic to allow aging of MACs even though a learning limit is configured.
	no-station-move	(OPTIONAL) Enter the keyword no-station-move to disallow a station move (associate the learned MAC address with the most recently accessed port) on learned MAC addresses.
	station-move	(OPTIONAL) Enter the keyword station-move to allow a station move on learned MAC addresses.

Defaults

On C-Series, the default behavior is no-station-move + static.

On E-Series, the default behavior is station-move + static.

“Static” means manually entered addresses, which do not age.

Command Modes

INTERFACE

Command History

Version 8.3.5.0 Introduced on the S55.
Version 8.3.1.0	Addedvlanoption on E-Series.
Version 8.2.1.0 Introduced on S-Series
Version 7.7.1.0	Introduced on C-Series; addedstation-moveoption
Version 6.5.1.0 Added support for MAC Learning-Limit on LAG

Usage Information

This command and its options are supported on physical interfaces, static LAGs, LACP LAGs, and VLANs.

If the vlan option is not specified, then the MAC address counters is not VLAN-based. That is, the sum of the addresses learned on all VLANs (not having any learning limit configuration) is counted against the MAC learning limit.

MAC Learning Limit violation logs and actions are not available on a per-VLAN basis.

With the keyword no-station-move option, MAC addresses learned through this feature on the selected interface will persist on a per-VLAN basis, even if received on another interface. Enabling or disabling this option has no effect on already learned MAC addresses.

Once the MAC address learning limit is reached, the MAC addresses do not age out unless you add the dynamic option. To clear statistics on MAC address learning, use the clear counters command with the learning-limit parameter.

Note: If you configure this command on an interface in a routed VLAN, and once the MAC addresses learned reaches the limit set in the mac learning-limit command, IP protocols are affected. For example, VRRP sets multiple VRRP Masters, and OSPF may not come up.

When a channel member is added to a port-channel and there is not enough ACL CAM space, then the MAC limit functionality on that port-channel is undefined. When this occurs, un-configure the existing configuration first and then reapply the limit with a lower value.

Related Commands

clear counters	Clear counters used in the show interface command
clear mac-address-table dynamic	Clear the MAC address table of all MAC address learned dynamically.
show mac learning-limit Display MAC learning-limit configuration.

mac learning-limit learn-limit-violation

Configure an action for a MAC address learning-limit violation.

Syntax

mac learning-limit learn-limit-violation {log | shutdown}

To return to the default, use the no mac learning-limit learn-limit-violation {log | shutdown} command.

Parameters

log	Enter the keyword log to generate a syslog message on a learning-limit violation.
shutdown	Enter the keyword shutdown to shut down the port on a learning-limit violation.

Defaults	No default behavior or values
Command Modes	INTERFACE (conf-if-interface-slot/port)
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.2.1.0 Introduced on S-Series
	Version 7.8.1.0 Introduced on C-Series
	Version 7.5.1.0 Introduced on E-Series
Usage Information	This is supported on physical interfaces, static LAGs, and LACP LAGs.
Related Commands	show mac learning-limit Display details of the mac learning-limit

mac learning-limit station-move-violation

Specify the actions for a station move violation.

Syntax
mac learning-limit station-move-violation {log | shutdown-both | shutdown-offending | shutdown-original}
To disable a configuration, use the no mac learning-limit station-move-violation command, followed by the configured keyword.

Parameters	log	Enter the keyword log to generate a syslog message on a station move violation.
	shutdown-both	Enter the keyword shutdown to shut down both the original and offending interface and generate a syslog message.
	shutdown-offending	Enter the keyword shutdown-offending to shut down the offending interface and generate a syslog message.
	shutdown-original	Enter the keyword shutdown-original to shut down the original interface and generate a syslog message.
Defaults	No default behavior or values
mand Modes	INTERFACE (conf-if-interface-slot/port)
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.2.1.0 Introduced on S-Series
	Version 7.8.1.0 Introduced on C-Series
	Version 7.5.1.0 Introduced on E-Series
Usage Information	This is supported on physical interfaces, static LAGs, and LACP LAGs.
Related Commands	show mac learning-limit Display details of the mac learning-limit

mac learning-limit reset

Reset the MAC address learning-limit error-disabled state.

Syntax mac learning-limit reset

Defaults No default behavior or values

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.2.1.0 Introduced on S-Series

Version 7.7.1.0 Introduced on C-Series

Version 7.5.1.0 Introduced on E-Series

show cam mac linecard (count)

Display the CAM size and the portions allocated for MAC addresses and for MAC ACLs.

Syntax

show cam mac linecard slot port-set port-pipe count [vlan vlan-id] [interface interface]

Parameters

linecard slot	(REQUIRED) Enter the keyword linecard followed by a slot number to select the linecard for which to gather information.E-Series range: 0 to 6.
port-set port-pipe	(REQUIRED) Enter the keyword port-set followed by a Port-Pipe number to select the Port-Pipe for which to gather information.E-Series range: 0 or 1
count	(REQUIRED) Enter the keyword count to display CAM usage by interface type.
interface interface	(OPTIONAL) Enter the keyword interface followed by the interface type, slot and port information:For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernet followed by the slot/port information.For a Port Channel interface, enter the keyword port-channel followed by a number:C-Series Range: 1-128E-Series Range: 1 to 255 for TeraScale.For a SONET interface, enter the keyword sonet followed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernet followed by the slot/port information.
vlan vlan-id	(OPTIONAL) Enter the keyword vlan followed by the VLAN ID to display the MAC address assigned to the VLAN.Range: 1 to 4094.

Command Modes

EXEC

EXEC Privilege

Command History

pre-Version 6.2.1.1 Introduced on E-Series

show cam maccheck linecard

Display the results of the BCMI2 check command.

Note: This command has been deprecated in FTOS version 8.3.5.5.

Syntax

show cam maccheck linecard slot port-set port-pipe

Parameters

linecard slot	(REQUIRED) Enter the keyword linecard followed by a slot number to select the linecard for which to gather information.C300 range: 0 to 7; C150 range: 0 to 4
port-set port-pipe	(REQUIRED) Enter the keyword port-set followed by a Port-Pipe number to select the Port-Pipe for which to gather information.Range: 0 or 1

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.5 Deprecated command.

Version 7.6.1.0 Introduced on C-Series

Example

Figure 21-1. show cam maccheck linecard Command Output Example

FTOS#show cam maccheck linecard 2 port-set 0
Dumping entries. From 0 to 16383.
Progress . marks 100 memory table entries.
....Index 5576 (0x15c8) has valid entries (H: 2b9, E: 0)
<MAC_ADDR=0xffffffff, VLAN_ID=0xff, PRI=0, CPU=0, DST_DISCARD=0, SRC_DISCARD=0, SCP=0, TGID_LO=0, PORT_TGID=0, TGID_PORT=0, T=0, TGID_HI=0, L2MC_PTR=0, MODULE_ID=0, REMOTE_TRUNC=0, L3=0, MAC_BLOCK_INDEX=0, STATIC_BIT=1, RPE=0, MIRROR=0, VALID=1, EVEN_PARITY=0, HI TDA=0, HITSA=0>
....Index 6592 (0x19c0) has valid entries (H: 338, E: 0)
<MAC_ADDR=0xa0000000, VLAN_ID=0xffe, PRI=0, CPU=0, DST_DISCARD=0, SRC_DISCARD=0, SCP=0, TGID_LO=0, PORT_TGID=0, TGID_PORT=0, T=0, TGID_HI=0, L2MC_PTR=0, MODULE_ID=0x10, REMOTE_TRUNC=0, L3=0, MAC_BLOCK_INDEX=0, STATIC_BIT=0, RPE=0, MIRROR=0, VALID=1, EVEN_PARITY=1, HIT DA=1, HITSA=1>
!----output truncated----! 

Usage Information

Use this command to check various flags associated with each MAC address in the CAM.

Figure 21-1 shows information for two MAC addresses. The second entry is for MAC address 00:00:a0:00:00:00 (leading 0s are not shown), which is shown as learned on VLAN ID 4094 (0xfff), as shown below in Figure 21-2 and Figure 21-3. Above, “STATIC_BIT=0” means that the address is dynamically learned.

When an entry is listed as STATIC_BIT=1, its HIT_SA is 0, which signifies that this address is not getting continuously learned trough traffic. The HIT_DA is set when a new learn happens, and after the first age sweep, it gets reset.

Example

Figure 21-2. show mac-address-table Command Output Example

Example

Figure 21-3. show cam mac linecard Command Output Example

show cam mac linecard (dynamic or static)

Display the CAM size and the portions allocated for MAC addresses and for MAC ACLs.

Syntax

show cam mac linecard slot port-set port-pipe [address mac_addr | dynamic | interface interface | static | vlan vlan-id]

Parameters

linecard slot	(REQUIRED) Enter the keyword linecard followed by a slot number to select the linecard for which to gather information.C-Series Range: 0 to 4 (C150); 0 to 8 (C300)E-Series Range: 0 to 6
port-set port-pipe	(REQUIRED) Enter the keyword port-set followed by a Port-Pipe number to select the Port-Pipe for which to gather information.Range: 0 or 1
address mac-addr	(OPTIONAL) Enter the keyword address followed by a MAC address in the nn:nn:nn:nn:nn:nn format to display information on that MAC address.
dynamic	(OPTIONAL) Enter the keyword dynamic to display only those MAC addresses learned dynamically by the switch.
Interface interface	(OPTIONAL) Enter the keyword interface followed by the interface type, slot and port information:For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernet followed by the slot/port information.For a Port Channel interface, enter the keyword port-channel followed by a number:C-Series Range: 1-128E-Series Range: 1 to 255 for TeraScale.For a SONET interface, enter the keyword sonet followed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernet followed by the slot/port information.
static	(OPTIONAL) Enter the keyword static to display only those MAC address specifically configured on the switch.
vlan vlan-id	(OPTIONAL) Enter the keyword vlan followed by the VLAN ID to display the MAC address assigned to the VLAN.Range: 1 to 4094.

Command Modes

EXEC

EXEC Privilege

Command History

Version 7.5.1.0 Added support for C-Series

pre-Version 6.2.1.1 Introduced on E-Series

Example

Figure 21-4. show cam mac linecard Command Example

FTOS#show cam mac linecard 1 port-set 0
Port - (TableID) assignments:
00(01)	01(01)	02(01)	03(01)	04(01)	05(01)
12(01)	13(01)	14(01)	15(01)	16(01)	17(01)
Index	Table ID	VlanId	Mac Address	Region	Interface
0	1	0	00:01:e8:0d:b7:3b	LOCAL_DA	1e000
1	1	0	00:01:e8:0d:b7:3a	LOCAL_DA	1e000
101	0	0	00:01:e8:00:04:00	SYSTEM_STATIC	01c05
102	0	0	01:80:00:00:00:00	SYSTEM_STATIC	01c05
103	0	0	01:00:0c:cc:cc:cc	SYSTEM_STATIC	01c01
104	0	0	01:80:c2:00:00:02	SYSTEM_STATIC	01c02
105	0	0	01:80:c2:00:00:0e	SYSTEM_STATIC	01c01
106	0	0	00:01:e8:0d:b7:68	SYSTEM_STATIC	DROP
107	0	0	00:01:e8:0d:b7:67	SYSTEM_STATIC	DROP
108	0	0	00:01:e8:0d:b7:66	SYSTEM_STATIC	DROP
109	0	0	00:01:e8:0d:b7:65	SYSTEM_STATIC	DROP
110	0	0	00:01:e8:0d:b7:64	SYSTEM_STATIC	DROP
111	0	0	00:01:e8:0d:b7:63	SYSTEM_STATIC	DROP
112	0	0	00:01:e8:0d:b7:62	SYSTEM_STATIC	DROP
113	0	0	00:01:e8:0d:b7:61	SYSTEM_STATIC	DROP
114	0	0	00:01:e8:0d:b7:60	SYSTEM_STATIC	DROP
115	0	0	00:01:e8:0d:b7:5f	SYSTEM_STATIC	DROP
116	0	0	00:01:e8:0d:b7:5e	SYSTEM_STATIC	DROP
117	0	0	00:01:e8:0d:b7:5d	SYSTEM_STATIC	DROP
FTOS#

show cam mac stack-unit

⑤ Display the Content Addressable Memory (CAM) size and the portions allocated for MAC addresses and for MAC ACLs.

Syntax show cam mac stack-unit unit_number port-set port-pipe count [vlan vlan-id] [interface interface]

Parameters

stack-unit unit_number	(REQUIRED) Enter the keyword linecard followed by a stack member number to select the linecard for which to gather information.S-Series Range: 0 to 1
port-set port-pipe	(REQUIRED) Enter the keyword port-set followed by a Port-Pipe number to select the Port-Pipe for which to gather information.Unit ID range:S55: 0-11all other S-Series: 0-7
address mac-addr	(OPTIONAL) Enter the keyword address followed by a MAC address in the nn:nn:nn:nn:nn:nn format to display information on that MAC address.
dynamic	(OPTIONAL) Enter the keyword dynamic to display only those MAC addresses learned dynamically by the switch.
static	(OPTIONAL) Enter the keyword static to display only those MAC address specifically configured on the switch.

	interface interface	(OPTIONAL) Enter the keywordinterfacefollowed by the interface type, slot and port information:For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For a Port Channel interface, enter the keywordport-channelfollowed by a number:S-SeriesRange: 1-128For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernetfollowed by the slot/port information.
	vlan vlan-id	(OPTIONAL) Enter the keywordvlanfollowed by the VLAN ID to display the MAC address assigned to the VLAN.Range: 1 to 4094.
Command Modes	EXEC
	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.6.1.0 This version of the command introduced for S-Series

show mac-address-table

Display the MAC address table.

Syntax

show mac-address-table [dynamic | static] [address mac-address | interface interface | vlan vlan-id] [count [vlan vlan-id] [interface interface-type [slot [/port]]]]

Parameters

dynamic	(OPTIONAL) Enter the keyword dynamic to display only those MAC addresses learned dynamically by the switch. Optionally, you can also add one of these combinations: address/mac-address, interface/interface, or vlan vlan-id.
static	(OPTIONAL) Enter the keyword static to display only those MAC address specifically configured on the switch. Optionally, you can also add one of these combinations: address/mac-address, interface/interface, or vlan vlan-id.
address mac-address	(OPTIONAL) Enter the keyword address followed by a MAC address in the nn:nn:nn:nn:nn format to display information on that MAC address.
interface interface	(OPTIONAL) Enter the keyword interface followed by the interface type, slot and port information:For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernet followed by the slot/port information.For a Port Channel interface, enter the keyword port-channel followed by a number:C-Series and S-Series Range: 1-128E-Series Range: 1 to 255 for TcraScale.For a SONET interface, enter the keyword sonet followed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernet followed by the slot/port information.

Command Modes

interface interface-type	(OPTIONAL) Instead of entering the keywordinterfacefollowed by the interface type, slot and port information, as above, you can enter the interface type, followed by just a slot number.
vlan vlan-id	(OPTIONAL) Enter the keywordvlanfollowed by the VLAN ID to display the MAC address assigned to the VLAN.Range: 1 to 4094.
count	(OPTIONAL) Enter the keywordcount,followed optionally, by an interface or VLAN ID, to display total or interface-specific static addresses, dynamic addresses, and MAC addresses in use.

EXEC

EXEC Privilege

Command History

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.2.1.1 Introduced on E-Series

Example

Figure 21-5. show mac-address-table Command Example

FTOS#show mac-address-table
VlanId	Mac Address	Type Interface	State
999	00:00:00:00:00:19	Dynamic Gi 0/1	Active
999	00:00:00:00:00:29	Dynamic Gi 0/2	Active

FTOS#

Table 21-1. show mac-address-table Information

Column Heading Description
VlanId Displays the VLAN ID number.
Mac Address Displays	the MAC address in nn:nn:nn:nn:nn:nn format.
Type Lists whether the	MAC address was manually configured (Static) or learned (Dynamic).
Interface Displays the	interface type and slot/port information. The following abbreviations describe the interface types:gi—Gigabit Ethernet followed by a slot/port.po—Port Channel followed by a number. Range: 1 to 255 for TeraScaleso—Sonet followed by a slot/port.te—10-Gigabit Ethernet followed by a slot/port.
State	Lists if the MAC address is in use (Active) or not in use (Inactive).

Figure 21-6. show mac-address-table count Command Example

FTOS#show mac-address-table count
MAC Entries for all vlans :
Dynamic Address Count : 5
Static Address (User-defined) Count : 0
Total MAC Addresses in Use: 5
FTOS# 

Table 21-2. show mac-address-table count Information

Line Beginning with Description
MAC Entries... Displays the number of MAC entries learnt per VLAN.
Dynamic Address... Lists the number of dynamically learned MAC addresses.
Static Address... Lists the number of user-defined MAC addresses.
Total MAC... Lists the total number of MAC addresses used by the switch.

Related Commands

show mac-address-table aging-time Display MAC aging time.

show mac-address-table aging-time

Display the aging times assigned to the MAC addresses on the switch.

Syntax

show mac-address-table aging-time [vlan vlan-id]

Parameters

vlan vlan-id

On the E-Series, enter the keyword vlan followed by the VLAN ID to display the MAC address aging time for MAC addresses on the VLAN. Range: 1 to 4094.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 8.3.1.0 Added the vlan option on the E-Series.

Version 7.7.1.0 Introduced on C-Series and S-Series

pre-Version 6.2.1.1 Introduced on E-Series

Example

Figure 21-7. show mac-address-table aging-time Command Example

FTOS#show mac-address-table aging-time Mac-address-table aging time : 1800 FTOS#

Related Commands

show mac-address-table Display the current MAC address configuration.

show mac accounting destination

Display destination counters for Layer 2 traffic (available on physical interfaces only).

Syntax
show mac accounting destination [mac-address vlan vlan-id] [interface interface [mac-address vlan vlan-id] [vlan vlan-id] ] [vlan vlan-id]

Parameters	mac-address	(OPTIONAL) Enter the MAC address in the nn:nn:nn:nn:nn:nn format to display information on that MAC address.
	interface interface	(OPTIONAL) Enter the keywordinterfacefollowed by the interface type, slot and port information:For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernetfollowed by the slot/port information.
	vlan vlan-id	(OPTIONAL) Enter the keywordvlanfollowed by the VLAN ID to display the MAC address assigned to that VLAN.Range: 1 to 4094.

Command Modes
EXEC
EXEC Privilege
Command History

pre-Version 6.2.1.1 Introduced on E-Series
Usage Information
MAC Accounting information can be accessed using SNMP via the Dell Networking Monitor MIB. For more information on enabling SNMP, refer to Chapter 3 of the FTOS Configuration Guide.

Note: Currently, the Dell Networking MONITOR MIB does not return the MAC addresses in an increasing order via SNMP. As a workaround, you can use the -C c option in snmpwalk or snmpbulkwalk to access the Dell Networking MONITOR MIB. For example:

% snmpwalk -C c -v 2c -c public 133.33.33.131 enterprise.6027.3.3.3

Example
Figure 21-8. show mac accounting destination Command Example

FTOS#show mac accounting destination interface gigabitethernet 2/1
Destination	Out	Port	VLAN	Packets	Bytes
00:44:00:00:00:02	Te	11/0	1000	10000	5120000
00:44:00:00:00:01	Te	11/0	1000	10000	5120000
00:22:00:00:00:00	Te	11/0	1000	10000	5120000
00:44:00:00:00:02	Te	11/0	2000	10000	5120000
00:44:00:00:00:01	Te	11/0	2000	10000	5120000
FTOS#

Related Commands
show mac accounting access-list
Display MAC access list configurations and counters (if configured).

show mac cam

E Display the CAM size and the portions allocated for MAC addresses and for MAC ACLs.

Syntax show mac cam

Command Modes EXEC EXEC Privilege

Command History pre-Version 6.2.1.1 Introduced on E-Series

Example Figure 21-9. show mac cam Command Example

FTOS#show mac cam
Slot Type MAC CAM Size MAC FIB Entries MAC ACL Entries
0 E24PD 64K entries 48K (75%) 8K (25%)
2 E24PD2 128K entries 64K (50%) 32K (50%)
11 EX2YD 64K entries 16K (25%) 24K (75%)
Note: All CAM entries are per portpipe.
FTOS# 

Table 21-3. show mac cam Information

Field Description
Slot Lists the active line card slots.
Type Lists the type of line card present in the slot.
MAC CAM Size Displays the total CAM size available. Note: A portion of the MAC CAM is used for system operations, therefore adding the MAC FIB and MAC ACL will be less than the MAC CAM.
MAC FIB Entries Displays the amount and percentage of CAM available for MAC addresses.
MAC ACL Entries Displays the amount and percentage of CAM available for MAC ACLs.

show mac learning-limit

C E Display MAC address learning limits set for various interfaces.

Syntax show mac learning-limit [violate-action] [detail] [interface interface [vlan vlan-id]]

Parameters

violate-action	(OPTIONALY) Enter the keyword violate-action to display the MAC learning limit violation status.
detail	(OPTIONAL) Enter the keyword detail to display the MAC learning limit in detail.

Command Modes

interface interface

(OPTIONAL) Enter the keywordinterfacewith the following keywords and slot/port or number information:For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For SONET interfaces, enter the keywordsonetfollowed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernetfollowed by the slot/port information.For a Port Channel interface, enter the keywordport-channel followed by a Port Channel ID between 1 and 255.

vlan vlan-id

On the E-Series, enter the keywordvlanfollowed by the VLAN ID.Range: 1-4094

EXEC

EXEC Privilege

Command History

Version 8.3.1.0	Addedvlanoption on E-Series.
Version 7.7.1.0	Introduced on C-Series
Version 7.5.1.0	Added support forviolate-actionanddetailoptions
Version 6.5.1.0	Added support for Port Channel

Example

E-Series output:

FTOS#show mac learning-limit
Interface	Vlan	Learning	Dynamic	Static	Unknown SA
Slot/port	Id	Limit	MAC count	MAC count	Drops
Gi 5/84	2	2	0	0		0
Gi 5/84	*	5	0	0		0
Gi 5/85	3	3	0	0		0
Gi 5/85	*	10	0	0		0
FTOS#show mac learning-limit interface gig 5/84
Interface	Vlan	Learning	Dynamic	Static	Unknown SA
Slot/port	Id	Limit	MAC count	MAC count	Drops
Gi 5/84	2	2	0	0		0
Gi 5/84	*	5	0	0		0
FTOS#show mac learning-limit interface gig 5/84 vlan 2
Interface	Vlan	Learning	Dynamic	Static	Unknown SA
Slot/port	Id	Limit	MAC count	MAC count	Drops
Gi 5/84	2	2	0	0		0

Example

C-Series/S-Series output:

FTOS#show mac learning-limit
Interface	Learning	Dynamic	Static	Unknown SA
Slot/port	Limit	MAC count	MAC count	Drops
Gi 1/0	10	0	0		0
Gi 1/1	5	0	0		0
FTOS#show mac learning-limit interface gig 1/0
Interface	Learning	Dynamic	Static	Unknown SA
Slot/port	Limit	MAC count	MAC count	Drops
Gi 1/0	10	0	0		0

Virtual LAN (VLAN) Commands

The following commands configure and monitor Virtual LANs (VLANs). VLANs are a virtual interface and use many of the same commands as physical interfaces.

You can configure an IP address and Layer 3 protocols on a VLAN called Inter-VLAN routing. FTP, TFTP, ACLs and SNMP are not supported on a VLAN.

Occasionally, while sending broadcast traffic over multiple Layer 3 VLANs, the VRRP state of a VLAN interface may continually switch between Master and Backup.

• description
• default vlan-id
• default-vlan disable
• enable vlan-counters
• name
  • show config
  • show vlan
• tagged
• track ip
• untagged

See also VLAN Stacking and see VLAN-related commands, such as portmode hybrid, in Chapter 15, Interfaces.

description

Add a description about the selected VLAN.
Syntax description description

To remove the description from the VLAN, use the no description command.
Parameters

description

Enter a text string description to identify the VLAN (80 characters maximum).

Defaults No default behavior or values

Command Modes
INTERFACE VLAN
Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Introduced on C-Series and S-Series

Version 6.3.1.0 Introduced on E-Series

Related Commands

show vlan Display VLAN configuration.

default vlan-id

Syntax	Specify a VLAN as the Default VLAN.
	default vlan-id vlan-idTo remove the default VLAN status from a VLAN and VLAN 1 does not exist, use theno defaultvlan-id vlan-id syntax.
Parameters	vlan-id	Enter the VLAN ID number of the VLAN to become the new Default VLAN.Range: 1 to 4094.Default: 1
Defaults	The Default VLAN is VLAN 1.
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.2.1.1 Introduced on E-Series
Usage Information	To return VLAN 1 as the Default VLAN, use this command syntax (default-vlan-id 1).The Default VLAN contains only untagged interfaces.
Related Commands	interface vlan Configure a VLAN.

default-vlan disable

C E S	Disable the default VLAN so that all switchports are placed in the Null VLAN until they are explicitly configured as a member of another VLAN.
Defaults	The default VLAN is enabled.
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.3.1.0 Introduced
Usage Information	no default vlan disable is not listed in the running-configuration, but when the default VLAN is disabled, default-vlan disable is listed in the running-configuration.

enable vlan-counters

Display VLAN counters for ingress and/or egress hardware. You must be in restricted mode to use this command.

Syntax

enable vlan-output-counters [ingress | egress | all]

To return to the default (disabled), use the no enable vlan-output-counters command.

Defaults

Disabled—VLAN counters are disabled in hardware (all linecards/port-pipes) by default.

Command Modes

CONFIGURATION

Command History

Version 8.1.1.2 Introduced on E-Series ExaScale E600i

Version 8.1.1.0 Introduced on E-Series ExaScale E1200i

Example

FTOS(conf)#enable vlan-output-counters
FTOS(conf)#exit
FTOS#show interface vlan 101
Vlan 101 is down, line protocol is down
Address is 00:01:e8:26:e0:5b, Current address is 00:01:e8:26:e0:5b
Interface index is 1107787877
Internet address is not set
MTU 1554 bytes, IP MTU 1500 bytes
LineSpeed 1000 Mbit
ARP type: ARPA, ARP Timeout 04:00:00
Last clearing of "show interface" counters 01:12:44
Queueing strategy: fifo
Input Statistics:
    0 packets, 0 bytes
Output Statistics:
    0 packets, 0 bytes
Time since last interface status change: 01:12:44
FTOS#
FTOS#show interfaces vlan 1
Vlan 1 is down, line protocol is down
Address is 00:01:e8:13:a5:aa, Current address is 00:01:e8:13:a5:aa
Interface index is 1107787777
Internet address is not set
MTU 1554 bytes, IP MTU 1500 bytes
LineSpeed 1000 Mbit
ARP type: ARPA, ARP Timeout 04:00:00
Last clearing of "show interface" counters 01:36:01
Queueing strategy: fifo
Input Statistics:
    100000 packets, 10000000 bytes
Output Statistics:
    200000 packets, 20800000 bytes
Time since last interface status change: 01:36:01
FTOS# 

Usage Information

FTOS supports a command to enable viewing of the VLAN input/output counters. This command also applies to SNMP requests. If the command is not enabled, IFM returns zero values for VLAN output counters.

SNMP counters differ from show interface counters as SNMP counters must maintain history. At any point, the value of SNMP counters reflect the amount of traffic being carried on the VLAN.

VLAN output counters may show higher than expected values because source-suppression drops are counted.

During an RPM failover event, all SNMP counters remain intact. The counters will sync over to the secondary RPM.

name

C E S	Assign a name to the VLAN.
Syntax	name vlan-name
	To remove the name from the VLAN, enter no name.
Parameters	vlan-name	Enter up to 32 characters as the name of the VLAN.
Defaults	Not configured.
Command Modes	INTERFACE VLAN
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.2.1.1 Introduced on E-Series
Usage Information	To display information about a named VLAN, enter the show vlan command with the name parameter or the show interfaces description command.
Related Commands	description Assign a descriptive text string to the interface.
	interface vlan Configure a VLAN.
	show vlan Display the current VLAN configurations on the switch.

show config

Display the current configuration of the selected VLAN.

Syntax

show config

Command Modes

INTERFACE VLAN

Example

Figure 21-10. show config Command Sample Output for a Selected VLAN

FTOS (conf-if-vl-100) #show config

!

interface Vlan 100

no ip address

no shutdown

FTOS (conf-if-vl-100) #

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.2.1.1 Introduced on E-Series

show vlan

Display the current VLAN configurations on the switch.

Syntax

show vlan [brief | id vlan-id | name vlan-name]

Parameters

brief	(OPTIONAL) Enter the keywordbriefto display the following information:• VLAN ID• VLAN name (left blank if none is configured.)• Spanning Tree Group ID• MAC address aging time• IP address
idvlan-id	(OPTIONAL) Enter the keywordidfollowed by a number from 1 to 4094. Only information on the VLAN specified is displayed.
namevlan-name	(OPTIONAL) Enter the keywordnamefollowed by the name configured for the VLAN. Only information on the VLAN named is displayed.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.8.1.0 Augmented to display PVLAN data for C-Series and S-Series; revised output to include Description field to display user-entered VLAN description

Version 7.6.1.0 Introduced on S-Series; revised output to display Native VLAN

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.2.1.1 Introduced on E-Series

Example

Figure 21-11. show vlan Command Example

FTOS#show vlan
Codes: * - Default VLAN, G - GVRP VLANs, P - Primary, C - Community, I - Isolated
Q: U - Untagged, T - Tagged
x - Dot1x untagged, X - Dot1x tagged
G - GVRP tagged, M - Vlan-stack
NUM Status Description Q Ports
* 1 Inactive
2 Active U Po1(Gi 13/0)
T Po20(Gi 13/6), Gi 13/25
T Gi 13/7
3 Active T Po20(Gi 13/6)
T Gi 13/7
U Gi 13/1
4 Active U Po2(Gi 13/2)
T Po20(Gi 13/6)
T Gi 13/7
5 Active T Po20(Gi 13/6)
T Gi 13/7
U Gi 13/3
6 Active U Po3(Gi 13/4)
T Po20(Gi 13/6)
T Gi 13/7
7 Active T Po20(Gi 13/6)
T Gi 13/7
U Gi 13/5
P 100 Active T Pol(Gi 0/1)
C 101 Inactive T Gi 0/2 T Gi 0/3 T Gi 0/4 T Gi 0/4 T Gi 0/4 T Gi 0/4 T Gi 0/4 T Gi 0/4 T Gi 0/4 T Gi 0/4 T Gi 0/4 T Gi 0/4 T Gi 0/4 T Gi 0/4 T Gi 0/4 T Gi 0/4 T Gi 0/4 T Gi 0/4 T Gi 0/4 T Gi 13/7 T Gi 13/7 T Gi 13/7 T Gi 13/7 T Gi 13/7 T Gi 13/7 T Gi 13/7 T Gi 13/7 T Gi 13/7 T Gi 13/7 T Gi 13/7 T Gi 13/7 T Gi 13/7 T Gi 13/7 T Gi 13/7 T gi 13/7 T gi 13/7 T gi 13/7 T gi 13/7 T gi 13/7 T gi 13/7 T gi 13/7 T gi 13/7 T gi 13/7 T gi 13/7 T gi 13/7 T gi 13/7 T gi 13/7 T gi 13/7 T gi 0/2 T gi 0/2 T gi 0/2 T gi 0/2 T gi 0/2 T gi 0/2 T gi 0/2 T gi 0/2 T gi 0/2 T gi 0/2 T gi 0/2 T gi 0/2 T gi 0/2 T gi 0/2 T gi 0/2 T gi 0/2 T gi 0/2 T gi 13/7 T gi 13/7 T gi 13/7 T gi 13/7 T gi 13/7 T gi 13/7 T gi 13/7 T gi 13/7 T gi 13/7 T gi 13/7 T gi 13/7 T gi 13/7 T gi 13/7 T gi 13/7 T pi 13/7 T pi 13/7 T pi 13/7 T pi 13/7 T pi 13/7 T pi 13/7 T pi 13/7 T pi 13/7 T pi 13/7 T pi 13/7 T pi 13/7 T pi 13/7 T pi 13/7 T pi 13/7 T pi 0.5 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /2 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /4 /8 : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : A : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B : B :B FTOS#

Table 21-4. show vlan Information

Column Heading Description
(Column 1 — no heading) asterisk symbol (*) = Default VLANG = GVRP VLANP = primary VLANC = community VLANI = isolated VLAN
NUM Displays existing VLAN IDs.
Status	Displays the word Inactive for inactive VLANs and the word Active for active VLANs.
Q	Displays G for GVRP tagged, M for member of a VLAN-Stack VLAN, T for tagged interface, U (for untagged interface), X (uncapitalized x) for Dot1x untagged, or X (capitalized X) for Dot1x tagged.
Ports	Displays the type, slot, and port information. For the type, P0 = port channel, G1 = gigabit ethernet, and Te = ten gigabit ethernet.

Figure 21-12. Example of Output of show vlan id

FTOS# show vlan id 40
Codes: * - Default VLAN, G - GVRP VLANs
Q: U - Untagged, T - Tagged
x - Dot1x untagged, X - Dot1x tagged
G - GVRP tagged, M - Vlan-stack
NUM Status Description	Q Ports
40 Active	M Gi 13/47
FTOS#show vlan id 41
Codes: * - Default VLAN, G - GVRP VLANs
Q: U - Untagged, T - Tagged
x - Dot1x untagged, X - Dot1x tagged
G - GVRP tagged, M - Vlan-stack
NUM Status Description	Q Ports
41 Active	T Gi 13/47
FTOS#show vlan id 42
Codes: * - Default VLAN, G - GVRP VLANs
Q: U - Untagged, T - Tagged
x - Dot1x untagged, X - Dot1x tagged
G - GVRP tagged, M - Vlan-stack
NUM Status Description	Q Ports
42 Active	U Gi 13/47
FTOS#

Figure 21-13. Example of Output of show vlan brief

FTOS#show vlan br VLAN Name	STG	MAC Aging	IP Address
1	0	1800	unassigned
2	0	1800	2.2.2.2/24
3	0	1800	3.3.3.2/24
FTOS#

Figure 21-14. Using VLAN Name

Related Commands	vlan-stack compatible Enable the Stackable VLAN feature on the selected VLAN.
	interface vlan Configure a VLAN.
tagged
C E S	Add a Layer 2 interface to a VLAN as a tagged interface.
Syntax	tagged interfaceTo remove a tagged interface from a VLAN, use no tagged interface command.
Parameters	interface Enter the following keywords and slot/port or number information:For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.For a Port Channel interface, enter the keyword port-channel followed by a number:C-Series and S-Series Range: 1-128E-Series Range: 1 to 255 for TeraScale.For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
Defaults	All interfaces in Layer 2 mode are untagged.
Command Modes	INTERFACE VLAN
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.1 Introduced on E-Series
Usage Information	When you use the no tagged command, the interface is automatically placed in the Default VLAN as an untagged interface unless the interface is a member of another VLAN. If the interface belongs to several VLANs, you must remove it from all VLANs to change it to an untagged interface.
	Tagged interfaces can belong to multiple VLANs, while untagged interfaces can only belong to one VLAN at a time.
Related Commands	interface vlan Configure a VLAN.
	untagged Specify which interfaces in a VLAN are untagged.
track ip
C E S	Track the Layer 3 operational state of a Layer 3 VLAN, using a subset of the VLAN member interfaces.
Syntax	track ip interfaceTo remove the tracking feature from the VLAN, use the no track ip interface command.
Parameters	interface	Enter the following keywords and slot/port or number information:For a 1-Gigabit Ethernet interface, enter the keyword followed by the slot/port information.GigabitEthernetfor a Port Channel interface, enter the keyword number:C-Series Range: 1-128E-Series Range: 1 to 255 for TeraScale.For a SONET interface, enter the keyword information.sonet followed by the slot/portfor a 10-Gigabit Ethernet interface, enter the keyword followed by the slot/port information.TenGigabitEthernet
Defaults	Not configured
Command Modes	INTERFACE VLAN
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.2.1.1 Introduced on E-Series
Usage Information	When this command is configured, the VLAN is operationally UP if any of the interfaces specified in the track ip command are operationally UP, and the VLAN is operationally DOWN if none of the tracking interfaces are operationally UP.If the track ip command is not configured, the VLAN's Layer 3 operational state depends on all the members of the VLAN.The Layer 2 state of the VLAN, and hence the Layer 2 traffic is not affected by the track ip command configuration.
Related Commands	interface vlan Configure a VLAN.
	tagged Specify which interfaces in a VLAN are tagged.
untaggedCESSyntax	Add a Layer 2 interface to a VLAN as an untagged interface.
	untagged interfaceTo remove an untagged interface from a VLAN, use the no untagged interface command.
Parameters	interface	Enter the following keywords and slot/port or number information:For a 1-Gigabit Ethernet interface, enter the keyword the slot/port information.GigabitEthernet followed by port-channel followed by a TenGigabitEthernet

Defaults	All interfaces in Layer 2 mode are untagged.
Command Modes	INTERFACE VLAN
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.2.1.1 Introduced on E-Series
Usage Information	Untagged interfaces can only belong to one VLAN.
	In the Default VLAN, you cannot use the no untagged interface command. To remove an untagged interface from all VLANs, including the Default VLAN, enter the INTERFACE mode and use the no switchport command.
Related Commands	interface vlan Configure a VLAN.
	tagged Specify which interfaces in a VLAN are tagged.

Link Layer Detection Protocol (LLDP)

Overview

Link Layer Detection Protocol (LLDP) advertises connectivity and management from the local station to the adjacent stations on an IEEE 802 LAN. LLDP facilitates multi-vendor interoperability by using standard management tools to discover and make available a physical topology for network management. The FTOS implementation of LLDP is based on IEEE standard 801.1ab.

The basic LLDP commands are supported by FTOS on all Dell Networking systems, as indicated by the characters that appear below each command heading:

• C-Series: ©
• E-Series: E
• S-Series: 5

Commands

This chapter contains the following commands, in addition to the commands in the related section — LLDP-MED Commands.

• advertise dot1-tlv
• advertise dot3-tlv
• advertise management
• advertise management-tlv
• advertise management-tlv (Interface)
• clear lldp counters
• clear lldp neighbors
• debug lldp interface
• disable
• hello
  • mode
• multiplier
• protocol lldp (Configuration)
• protocol lldp (Interface)
  • show lldp neighbors
  • show lldp statistics
  • show running-config lldp

The starting point for using LLDP is invoking LLDP with the protocol lldp command in either the CONFIGURATION or INTERFACE mode.

The information distributed by LLDP is stored by its recipients in a standard Management Information Base (MIB). The information can be accessed by a network management system through a management protocol such as SNMP.

See the Link Layer Discovery Protocol chapter of the FTOS Configuration Guide for details on implementing LLDP/LLDP-MED.

advertise dot1-tlv

Advertise dot1 TLVs (Type, Length, Value).

Syntax

advertise dot1-tlv {port-protocol-vlan-id | port-vlan-id | vlan-name}

To remove advertised dot1-tlv, use the no advertise dot1-tlv {port-protocol-vlan-id | port-vlan-id | vlan-name} command.

Parameters

port-protocol-vlan-id	Enter the keyword port-protocol-vlan-id to advertise the port protocol VLAN identification TLV.
port-vlan-id	Enter the keyword port-vlan-id to advertise the port VLAN identification TLV.
vlan-name	Enter the keyword vlan-name to advertise the vlan-name TLV. This keyword is only supported on C-Series and S-Series.

Defaults

Disabled

Command Modes

CONFIGURATION (conf-lldp) and INTERFACE (conf-if-interface-lldp)

Command History

Version 8.3.5.0 Introduced on the S55.
Version 7.7.1.0	Introduced on S-Series, addedvlan-nameoption.
Version 7.6.1.0 Introduced on C-Series
Version 7.4.1.0 Introduced on E-Series

Related Commands

protocol lldp (Configuration) Enable LLDP globally.

debug lldp interface Debug LLDP

show lldp neighbors Display the LLDP neighbors

show running-config lldp Display the LLDP running configuration

advertise dot3-tlv

Advertise dot3 TLVs (Type, Length, Value).

Syntax

advertise dot3-tlv {max-frame-size}

To remove advertised dot3-tlv, use the no advertise dot3-tlv {max-frame-size} command.

Parameters	max-frame-size	Enter the keyword max-frame-size to advertise the dot3 maximum frame size.
Defaults	No default values or behavior
Command Modes	CONFIGURATION (conf-lldp) and INTERFACE (conf-if-interface-lldp)
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.7.1.0 Introduced on S-Series
	Version 7.6.1.0 Introduced on C-Series
	Version 7.4.1.0 Introduced on E-Series

advertise management

Advertise management TLVs (Type, Length, Value).

Syntax

advertise management -tlv {system-capabilities | system-description | system-name}

To remove advertised management TLVs, use the no advertise management -tlv {system-capabilities | system-description | system-name} command.

Parameters

system-capabilities	Enter the keyword system-capabilities to advertise the system capabilities TLVs.
system-description	Enter the keyword system-description to advertise the system description TLVs.
system-name	Enter the keyword system-description to advertise the system description TLVs.

Defaults

No default values or behavior

Command Modes

CONFIGURATION (conf-1ldp)

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.7.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

Version 7.4.1.0 Introduced on E-Series

Usage Information

All three command options — system-capabilities, system-description, and system-name } — -can be invoked individually or together, in any sequence.

advertise management-tlv

Advertise management TLVs (Type, Length, Value).

Syntax

advertise management-tlv {management-address | system-capabilities | system-description| system-name}

To remove advertised management TLVs, use the no advertise management-tlv {management-address | system-capabilities | system-description | system-name} command.

Parameters

management-address	Enter the keyword management-address to advertise the management IP address TLVs to the LLDP peer.
system-capabilities	Enter the keyword system-capabilities to advertise the system capabilities TLVs to the LLDP peer.
system-description	Enter the keyword system-description to advertise the system description TLVs to the LLDP peer.
system-name	Enter the keyword system-name to advertise the system name TLVs to the LLDP peer.

Defaults

No default values or behavior

Command Modes

CONFIGURATION (conf-lldp)

Command History

Version 8.3.3.9 Introduced on the S60

Version 8.3.5.5 Introduced on the S55

Version 9.1.(0.0) Modified to support management-address parameter

Version 8.3.11.1 Introduced on the Z9000

Version 8.3.7.0 Introduced on the S4810

Version 7.7.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

Version 7.4.1.0 Introduced on E-Series

Usage Information

The command options — management-address, system-capabilities, system-description, and system-name —-can be invoked individually or together, in any sequence.

advertise management-tlv (Interface)

Advertise management TLVs (Type, Length, Value) to the specified interface.

Syntax advertise management-tlv {management-address | system-capabilities | system-description| system-name}

To remove advertised management TLVs, use the no advertise management-tlv {management-address | system-capabilities | system-description | system-name} command.

Parameters

management-address	Enter the keyword management-address to advertise the management IP address TLVs to the specified interface.
system-capabilities	Enter the keyword system-capabilities to advertise the system capabilities TLVs to the specified interface.
system-description	Enter the keyword system-description to advertise the system description TLVs to the specified interface.
system-name	Enter the keyword system-name to advertise the system name TLVs to the specified interface.

Defaults

No default values or behavior

Command Modes

CONFIGURATION (conf-interface-lldp)

Command History

Version 8.3.3.9 Introduced on the S60

Version 8.3.5.5 Introduced on S55

Version 9.1.(0.0) Introduced on the Z9000 and S4810

Usage Information

All three command options — system-capabilities, system-description, and system-name — -can be invoked individually or together, in any sequence.

clear lldp counters

Clear LLDP transmitting and receiving counters for all physical interfaces or a specific physical interface.

Syntax

clear lldp counters interface

Parameters

interface

Enter the following keywords and slot/port or number information:For a Fast Ethernet interface, enter the keywordFastEthernetfollowed by the slot/port information.For a 1-Gigabit Ethernet interface, enter the keywordgigabitEthernetfollowed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordtenGigabitEthernetfollowed by the slot/port information.

Defaults	No default values or behavior
Command Modes	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.7.1.0 Introduced on S-Series
	Version 7.6.1.0 Introduced on C-Series
	Version 7.4.1.0 Introduced on E-Series

clear lldp neighbors

Clear LLDP neighbor information for all interfaces or a specific interfaces.

Syntax

clear lldp neighbors {interface}

Parameters

interface

Enter the following keywords and slot/port or number information:For a Fast Ethernet interface, enter the keyword fastEthernet followed by the slot/port information.For a 1-Gigabit Ethernet interface, enter the keyword gigabitEthernet followed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keyword tenGigabitEthernet followed by the slot/port information.

Defaults

No default values or behavior

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.7.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

Version 7.4.1.0 Introduced on E-Series

debug lldp interface

Enable LLDP debugging to display timer events, neighbor additions or deletions, and other information about incoming and outgoing packets.

Syntax

debug lldp interface {interface | all} {events| packet {brief | detail} {tx | rx | both}} To disable debugging, use the no debug lldp interface {interface | all} {events} {packet {brief | detail} {tx | rx | both}} command.

Parameters

interface	Enter the following keywords and slot/port or number information:For a Fast Ethernet interface, enter the keywordFastEthernetfollowed by the slot/port information.For a 1-Gigabit Ethernet interface, enter the keywordgigabitEthernet followed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordtenGigabitEthernet followed by the slot/port information.Note:The FastEthernetoption is not supported on S-Series.
all	(OPTIONAL) Enter the keyword all to display information on all interfaces.
events	(OPTIONAL) Enter the keyword events to display major events such as timer events.
packet	(OPTIONAL) Enter the keyword packet to display information regarding packets coming in or going out.
brief	(OPTIONAL) Enter the keyword brief to display brief packet information.
detail	(OPTIONAL) Enter the keyword detail to display detailed packet information.
tx	(OPTIONAL) Enter the keyword tx to display transmit only packet information.
rx	(OPTIONAL) Enter the keyword rx to display receive only packet information
both	(OPTIONAL) Enter the keyword both to display both receive and transmit packet information.

Defaults

No default values or behavior

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.7.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

Version 7.4.1.0 Introduced on E-Series

disable

Enable or disable LLDP.

Syntax

disable

To enable LLDP, use the no disable

Defaults

Enabled, that is no disable

Command Modes

CONFIGURATION (conf-lldp) and INTERFACE (conf-if-interface-lldp)

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.7.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

Version 7.4.1.0 Introduced on E-Series

Related Commands

protocol lldp (Configuration) Enable LLDP globally.

debug lldp interface Debug LLDP

show lldp neighbors Display the LLDP neighbors

show running-config lldp Display the LLDP running configuration

hello

Configure the rate at which the LLDP control packets are sent to its peer.

Syntax

hello seconds

To revert to the default, use the no hello seconds command.

Parameters

seconds

Enter the rate, in seconds, at which the control packets are sent to its peer.

Rate: 5 - 180 seconds

Default: 30 seconds

Defaults

30 seconds

Command Modes

CONFIGURATION (conf-lldp) and INTERFACE (conf-if-interface-lldp)

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.7.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

Version 7.4.1.0 Introduced on E-Series

mode

Set LLDP to receive or transmit.

Syntax

mode {tx | rx}

To return to the default, use the no mode {tx | rx} command.

Parameters

tx Enter the keyword tx to set the mode to transmit.

rx Enter the keyword rx to set the mode to receive.

Defaults

Both transmit and receive

Command Modes

CONFIGURATION (conf-lldp) and INTERFACE (conf-if-interface-lldp)

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.7.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

Version 7.4.1.0 Introduced on E-Series

Related Commands

protocol lldp (Configuration) Enable LLDP globally.

show lldp neighbors Display the LLDP neighbors

multiplier

Set the number of consecutive misses before LLDP declares the interface dead.

Syntax

multiplier integer

To return to the default, use the no multiplier integer command.

Parameters

integer Enter the number of consecutive misses before the LLDP declares the interface dead. Range: 2 - 10

Defaults

4 x hello

Command Modes

CONFIGURATION (conf-lldp) and INTERFACE (conf-if-interface-lldp)

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.7.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

Version 7.4.1.0 Introduced on E-Series

protocol lldp (Configuration)

Enable LLDP globally on the switch.

Syntax

protocol lldp

To disable LLDP globally on the chassis, use the no protocol lldp command.

Defaults

Disabled

Command Modes

CONFIGURATION (conf-lldp)

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.7.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

Version 7.4.1.0 Introduced on E-Series

protocol lldp (Interface)

Enter the LLDP protocol in the INTERFACE mode.

Syntax

[no] protocol lldp

To return to the global LLDP configuration mode, use the no protocol lldp command from the Interface mode.

Defaults	LLDP is not enabled on the interface.
Command Modes	INTERFACE (conf-if-interface-lldp)
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.7.1.0 Introduced on S-Series
	Version 7.6.1.0 Introduced on C-Series
	Version 7.4.1.0 Introduced on E-Series
Usage Information	When you enter the LLDP protocol in the Interface context, it overrides global configurations. When you execute the no protocol lldp from the INTERFACE mode, interfaces will begin to inherit the configuration from the global LLDP CONFIGURATION mode.

show lldp neighbors

Display LLDP neighbor information for all interfaces or a specified interface.

Syntax
show lldp neighbors [interface] [detail]

Parameters	interface	(OPTIONAL) Enter the following keywords and slot/port or number information:For a Fast Ethernet interface, enter the keywordFastEthernetfollowed by the slot/port information.For a 1-Gigabit Ethernet interface, enter the keywordgigabitEthernetfollowed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordtenGigabitEthernetfollowed by the slot/port information.
	detail	(OPTIONAL) Enter the keyworddetailto display all the TLV information, timers, and LLDP tx and rx counters.
Defaults	No default values or behavior
Command Modes	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.7.1.0 Introduced on S-Series
	Version 7.6.1.0 Introduced on C-Series
	Version 7.4.1.0 Introduced on E-Series

Defaults
Example

Figure 22-1. show lldp neighbors Command Output

R1(conf-if-gi-1/31)#do show lldp neighbors
Loc PortID	Rem Host Name	Rem Port Id	Rem Chassis Id
Gi 1/21	R2	GigabitEthernet 2/11	00:01:e8:06:95:3e
Gi 1/31	R3	GigabitEthernet 3/11	00:01:e8:09:c2:4a

Usage Information

Omitting the keyword detail displays only the remote chassis ID, Port ID, and Dead Interval.

show lldp statistics

Display the LLDP statistical information.

Syntax

show lldp statistics

Defaults

No default values or behavior

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.7.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

Version 7.4.1.0 Introduced on E-Series

Example

Figure 22-2. show lldp statistics Command Output

FTOS#show lldp statistics
Total number of neighbors:	300
Last table change time :	Mon Oct 02 16:00:52 2006
Number of Table Inserts :	1621
Number of Table Deletes :	200
Number of Table Drops :	0
Number of Table Age Outs :	400
FTOS#

show running-config lldp

Display the current global LLDP configuration.

Syntax

show running-config lldp

Defaults

No default values or behavior

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.7.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

Version 7.4.1.0 Introduced on E-Series

Example

FTOS#show running-config lldp

!

protocol lldp

advertise dot1-tlv port-protocol-vlan-id port-vlan-id

advertise dot3-tlv max-frame-size

advertise management-tlv system-capabilities system-description

hello 15

multiplier 3

no disable

FTOS#

LLDP-MED Commands

The LLDP-MED commands in this section are:

FTOS LLDP-MED (Media Endpoint Discovery) commands are an extension of the set of LLDP TLV advertisement commands. The C-Series and S-Series support all commands, as indicated by these symbols underneath the command headings: C S

The E-Series generally supports the commands, too, as indicated by the symbol under command headings. However, LLDP-MED commands are more useful on the C-Series and the S50V model of the S-Series, because they support Power over Ethernet (PoE) devices.

As defined by ANSI/TIA-1057, LLDP-MED provides organizationally specific TLVs (Type Length Value), so that endpoint devices and network connectivity devices can advertise their characteristics and configuration information. The Organizational Unique Identifier (OUI) for the Telecommunications Industry Association (TIA) is 00-12-BB.

• LLDP-MED Endpoint Device—any device that is on an IEEE 802 LAN network edge, can communicate using IP, and uses the LLDP-MED framework.
• LLDP-MED Network Connectivity Device—any device that provides access to an IEEE 802 LAN to an LLDP-MED endpoint device, and supports IEEE 802.1AB (LLDP) and TIA-1057 (LLDP-MED). The Dell Networking system is an LLDP-MED network connectivity device.

With regard to connected endpoint devices, LLDP-MED provides network connectivity devices with the ability to:

• manage inventory
• manage Power over Ethernet (POE)
• identify physical location
• identify network policy

Configure the system to advertise a separate limited voice service for a guest user with their own IP telephony handset or other appliances that support interactive voice services.

Syntax

advertise med guest-voice {vlan-id layer2_priority DSCP_value} | {priority-tagged number}

To return to the default, use the no advertise med guest-voice {vlan-id layer2_priority DSCP_value} | {priority-tagged number} command.

Parameters	vlan-id	Enter the VLAN ID. Range: 1 to 4094
	layer2_priority	Enter the Layer 2 priority. Range: 0 to 7
	DSCP_value	Enter the DSCP value. Range: 0 to 63
	priority-tagged number	Enter the keyword priority-tagged followed the Layer 2 priority. Range: 0 to 7

Defaults unconfigured

Command Modes CONFIGURATION (conf-lldp)

Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.7.1.0 Introduced on S-Series
	Version 7.6.1.0 Introduced on C-Series and E-Series

Related Commands	protocol lldp (Configuration) Enable LLDP globally.
	debug lldp interface Debug LLDP.
	show lldp neighbors Display the LLDP neighbors.
	show running-config lldp Display the LLDP running configuration.

Configure the system to advertise a separate limited voice service for a guest user when the guest voice control packets use a separate network policy than the voice data.

Syntax advertise med guest-voice-signaling {vlan-id layer2_priority DSCP_value} | {priority-tagged number}

To return to the default, use the no advertise med guest-voice-signaling {vlan-id layer2_priority DSCP_value} | {priority-tagged number} command.

Parameters	vlan-id	Enter the VLAN ID. Range: 1 to 4094
	layer2_priority	Enter the Layer 2 priority. Range: 0 to 7
	DSCP_value	Enter the DSCP value. Range: 0 to 63
	priority-tagged number	Enter the keyword priority-tagged followed the Layer 2 priority. Range: 0 to 7

Defaults unconfigured

Command Modes CONFIGURATION (conf-lldp)

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.7.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series and E-Series

Related Commands

debug lldp interface Debug LLDP

show lldp neighbors Display the LLDP neighbors

show running-config lldp Display the LLDP running configuration

advertise med location-identification

Configure the system to advertise a location identifier.

Syntax

advertise med location-identification {coordinate-based value | civic-based value | ecs-elin value}

To return to the default, use the no advertise med location-identification {coordinate-based value|civic-based value|ecs-elin value} command.

Parameters

coordinate-based value	Enter the keyword coordinate-based followed by the coordinated based location in hexadecimal value of 16 bytes.
civic-based value	Enter the keyword civic-based followed by the civic based location in hexadecimal format.Range: 6 to 255 bytes
ecs-elin value	Enter the keywordecs-elin followed by the Emergency Call Service (ecs) Emergency Location Identification Number (elin) numeric location string.Range: 10 to 25 characters

Defaults

unconfigured

Command Modes

CONFIGURATION (conf-lldp)

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.7.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series and E-Series

Usage Information

ECS—Emergency Call Service such as defined by TIA or National Emergency Numbering Association (NENA)

ELIN—Emergency Location Identification Number, a valid North America Numbering Plan format telephone number supplied for ECS purposes.

Related Commands

debug lldp interface Debug LLDP

show lldp neighbors Display the LLDP neighbors

show running-config lldp Display the LLDP running configuration

Configure the system to advertise the Extended Power via MDI TLV.

Syntax

Version 8.3.5.0 Introduced on the S55.

Version 7.7.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

Usage Information

Advertise the Extended Power via MDI on all ports that are connected to an 802.3af powered, LLDP-MED endpoint device.

Related Commands

debug lldp interface Debug LLDP

show lldp neighbors Display the LLDP neighbors

show running-config lldp Display the LLDP running configuration

Configure the system to advertise softphone to enable IP telephony on a computer so that the computer can be used as a phone.

Syntax

advertise med softphone-voice {vlan-id layer2_priority DSCP_value} | {priority-tagged number}

To return to the default, use the no advertise med softphone-voice {vlan-id layer2_priority DSCP_value} | {priority-tagged number} command.

Parameters

vlan-id

Enter the VLAN ID.

Range: 1 to 4094

layer2_priority

Enter the Layer 2 priority (C-Series and E-Series only).

Range: 0 to 7

DSCP_value

Enter the DSCP value (C-Series and E-Series only).

Range: 0 to 63

priority-tagged number

Enter the keyword priority-tagged followed the Layer 2 priority.

Range: 0 to 7

Defaults

unconfigured

Command Modes

CONFIGURATION (conf-lldp)

Command History

Version 8.3.5.0 Introduced on the S55.

Related Commands

Version 7.7.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series and E-Series

debug lldp interface Debug LLDP

show lldp neighbors Display the LLDP neighbors

show lldp neighbors Display the LLDP running configuration

Configure the system to advertise streaming video services for broadcast or multicast-based video. This does not include video applications that rely on TCP buffering.

Syntax

advertise med streaming-video {vlan-id layer2_priority DSCP_value} | {priority-tagged number}

To return to the default, use the no advertise med streaming-video {vlan-id layer2_priority DSCP_value} | {priority-tagged number} command.

Parameters

vlan-id	Enter the VLAN ID. Range: 1 to 4094
layer2_priority	Enter the Layer 2 priority (C-Series and E-Series only). Range: 0 to 7
DSCP_value	Enter the DSCP value (C-Series and E-Series only). Range: 0 to 63
priority-tagged number	Enter the keyword priority-tagged followed the Layer 2 priority. Range: 0 to 7

Defaults

unconfigured

Command Modes

CONFIGURATION (conf-lldp)

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.7.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series and E-Series

Related Commands

debug lldp interface Debug LLDP

show lldp neighbors Display the LLDP neighbors

show lldp neighbors Display the LLDP running configuration

advertise med video-conferencing

Configure the system to advertise dedicated video conferencing and other similar appliances that support real-time interactive video.

Syntax

advertise med video-conferencing {vlan-id layer2_priority DSCP_value} | {priority-tagged number}

To return to the default, use the no advertise med video-conferencing {vlan-id layer2_priority DSCP_value} | {priority-tagged number} command.

Parameters

vlan-id	Enter the VLAN ID. Range: 1 to 4094
layer2_priority	Enter the Layer 2 priority (C-Series and E-Series only). Range: 0 to 7
DSCP_value	Enter the DSCP value (C-Series and E-Series only). Range: 0 to 63
priority-tagged number	Enter the keyword priority-tagged followed the Layer 2 priority. Range: 0 to 7

Defaults

unconfigured

Command Modes

CONFIGURATION (conf-lldp)

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.7.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series and E-Series

Related Commands

debug lldp interface Debug LLDP

show lldp neighbors Display the LLDP neighbors

show running-config lldp Display the LLDP running configuration

Configure the system to advertise video control packets that use a separate network policy than video data.

Syntax

advertise med video-signaling { vlan-id layer2_priority DSCP_value} | {priority-tagged number}

To return to the default, use the no advertise med video-signaling {vlan-id layer2_priority DSCP_value} | {priority-tagged number} command.

Parameters

vlan-id	Enter the VLAN ID. Range: 1 to 4094
layer2_priority	Enter the Layer 2 priority (C-Series and E-Series only). Range: 0 to 7

	DSCP_value	Enter the DSCP value (C-Series and E-Series only).Range: 0 to 63
	priority-tagged number	Enter the keyword priority-tagged followed the Layer 2 priority.Range: 0 to 7
Defaults	unconfigured
Command Modes	CONFIGURATION (conf-lldp)
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.7.1.0 Introduced on S-Series
	Version 7.6.1.0 Introduced on C-Series and E-Series
Related Commands	debug lldp interface Debug LLDP
	show lldp neighbors Display the LLDP neighbors
	show lldp neighbors Display the LLDP running configuration

advertise med voice

Configure the system to advertise a dedicated IP telephony handset or other appliances supporting interactive voice services.

Syntax

advertise med voice { vlan-id layer2_priority DSCP_value} | {priority-tagged number}

To return to the default, use the no advertise med voice {vlan-id layer2_priority DSCP_value} | {priority-tagged number} command.

Parameters

vlan-id	Enter the VLAN ID. Range: 1 to 4094
layer2_priority	Enter the Layer 2 priority (C-Series and E-Series only). Range: 0 to 7
DSCP_value	Enter the DSCP value (C-Series and E-Series only). Range: 0 to 63
priority-tagged number	Enter the keyword priority-tagged followed the Layer 2 priority. Range: 0 to 7

Defaults

unconfigured

Command Modes

CONFIGURATION (conf-lldp)

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.7.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series and E-Series

Related Commands

debug lldp interface Debug LLDP

show lldp neighbors Display the LLDP neighbors

show running-config lldp Display the LLDP running configuration

Configure the system to advertise when voice control packets use a separate network policy than voice data.

Syntax

advertise med voice-signaling {vlan-id layer2_priority DSCP_value} | {priority-tagged number}

To return to the default, use the no advertise med voice-signaling {vlan-id layer2_priority DSCP_value} | {priority-tagged number} command.

Parameters

vlan-id	Enter the VLAN ID. Range: 1 to 4094
layer2_priority	Enter the Layer 2 priority (C-Series and E-Series only). Range: 0 to 7
DSCP_value	Enter the DSCP value (C-Series and E-Series only). Range: 0 to 63
priority-tagged number	Enter the keyword priority-tagged followed the Layer 2 priority. Range: 0 to 7

Defaults

unconfigured

Command Modes

CONFIGURATION (conf-lldp)

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.7.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series and E-Series

Related Commands

debug lldp interface Debug LLDP

show lldp neighbors Display the LLDP neighbors

show lldp neighbors Display the LLDP running configuration

Multiple Spanning Tree Protocol (MSTP)

Overview

Multiple Spanning Tree Protocol (MSTP), as implemented by FTOS, conforms to IEEE 802.1s. MSTP is supported by FTOS on all Dell Networking systems (C-Series, E-Series, and S-Series), as indicated by the characters that appear below each command heading:

• C-Series: ©
• E-Series: E
• S-Series: S

Commands

The following commands configure and monitor MSTP:

• debug spanning-tree mstp
• disable
• forward-delay
• hello-time
• max-age
• max-hops
  • msti
• name
• protocol spanning-tree mstp
• revision
  • show config
  • show spanning-tree mst configuration
  • show spanning-tree msti
• spanning-tree
• spanning-tree msti
  • spanning-tree mstp edge-port
• tc-flush-standard

debug spanning-tree mstp

Enable debugging of Multiple Spanning Tree Protocol and view information on the protocol.

Syntax

debug spanning-tree mstp [all | bpdu interface {in | out} | events]

To disable debugging, enter no debug spanning-tree mstp.

Parameters

all	(OPTIONAL) Enter the keyword all to debug all spanning tree operations.
bpdu interface (in | out)	(OPTIONAL) Enter the keyword bpdu to debug Bridge Protocol Data Units.(OPTIONAL) Enter the interface keyword along with the type slot/port of the interface you want displayed. Type slot/port options are the following:For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.For Port Channel groups, enter the keyword port-channel followed by a number:C-Series and S-Series Range: 1-128E-Series Range: 1-255 for TeraScaleFor a SONET interface, enter the keyword sonet followed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.Optionally, enter an in or out parameter in conjunction with the optional interface:For Receive, enter inFor Transmit, enter out
events	(OPTIONAL) Enter the keyword events to debug MSTP events.

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Added support for S-Series

Version 7.5.1.0 Added support for C-Series

pre-Version 6.2.1.1 Introduced on E-Series

Example

Figure 23-1. debug spanning-tree mstp bpdu Command Example

FTOS#debug spanning-tree mstp bpdu gigabitethernet 2/0 ? in Receive (in) out Transmit (out)

description

Enter a description of the Multiple Spanning Tree

Syntax

description { description }

To remove the description, use the no description {description} command.

Parameters	description Enter a description to identify the Multiple Spanning Tree (80 characters maximum).
Defaults	No default behavior or values
Command Modes	SPANNING TREE (The prompt is “config-mstp”.)
Command History	Version 8.3.5.0 Introduced on the S55.pre-7.7.1.0 Introduced
Related Commands	protocol spanning-tree mstp Enter Multiple SPANNING TREE mode on the switch.

disable

C E S	Globally disable Multiple Spanning Tree Protocol on the switch.
Syntax	disable
	To enable Multiple Spanning Tree Protocol, enter no disable.
Defaults	Multiple Spanning Tree Protocol is disabled
Command Modes	MULTIPLE SPANNING TREE
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.6.1.0 Added support for S-Series
	Version 7.5.1.0 Added support for C-Series
	Version 6.5.1.0 Introduced
Related Commands	protocol spanning-tree mstp Enter MULTIPLE SPANNING TREE mode.

forward-delay

C E S	The amount of time the interface waits in the Blocking State and the Learning State before transitioning to the Forwarding State.
Syntax	forward-delay seconds
	To return to the default setting, enter no forward-delay.
Parameters	seconds	Enter the number of seconds the interface waits in the Blocking State and the Learning State before transiting to the Forwarding State.Range: 4 to 30Default: 15 seconds.
Defaults	15 seconds
Command Modes	MULTIPLE SPANNING TREE
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.6.1.0 Added support for S-Series
	Version 7.5.1.0 Added support for C-Series
	Version 6.5.1.0 Introduced
Related Commands	max-age Change the wait time before MSTP refreshes protocol configuration information.
	hello-time Change the time interval between BPDUs.
hello-time
C E S	Set the time interval between generation of Multiple Spanning Tree Bridge Protocol Data Units (BPDUs).
Syntax	hello-time seconds
	To return to the default value, enter no hello-time.
Parameters	seconds	Enter a number as the time interval between transmission of BPDUs.Range: 1 to 10.Default: 2 seconds.
Defaults	2 seconds
Command Modes	MULTIPLE SPANNING TREE
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.6.1.0 Added support for S-Series
	Version 7.5.1.0 Added support for C-Series
	Version 6.5.1.0 Introduced
Related Commands	forward-delay	The amount of time the interface waits in the Blocking State and the Learning State before transitioning to the Forwarding State.
	max-age Change the wait time before MSTP refreshes protocol configuration information.
max-age
C E S	Set the time interval for the Multiple Spanning Tree bridge to maintain configuration information before refreshing that information.
Syntax	max-age seconds
	To return to the default values, enter no max-age.
Parameters	max-age	Enter a number of seconds the FTOS waits before refreshing configuration information.Range: 6 to 40Default: 20 seconds.
Defaults	20 seconds
Command Modes	MULTIPLE SPANNING TREE
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.6.1.0 Added support for S-Series
	Version 7.5.1.0 Added support for C-Series
	Version 6.5.1.0 Introduced
Related Commands	forward-delay	The amount of time the interface waits in the Blocking State and the Learning State before transitioning to the Forwarding State.
	hello-time Change the time interval between BPDUs.

max-hops C E S

Syntax

Configure the maximum hop count.

max-hops number

To return to the default values, enter no max-hops.

Parameters

range

Enter a number for the maximum hop count.

Range: 1 to 40

Default: 20

Defaults

20 hops

Command Modes

MULTIPLE SPANNING TREE

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Added support for S-Series

Version 7.5.1.0 Added support for C-Series

Version 6.5.1.0 Introduced

Usage Information

The max-hops is a configuration command that applies to both the IST and all MST instances in the MSTP region. The BPDUs sent out by the root switch set the remaining-hops parameter to the configured value of max-hops. When a switch receives the BPDU, it decrements the received value of the remaining hops and uses the resulting value as remaining-hops in the BPDUs. If the remaining-hops reaches zero, the switch discards the BPDU and ages out any information that it holds for the port.

msti

Configure Multiple Spanning Tree instance, bridge priority, and one or multiple VLANs mapped to the MST instance.

Syntax

msti instance {vlan range | bridge-priority priority}

To disable mapping or bridge priority no msti instance {vlan range | bridge-priority priority}

Parameters	msti instance	Enter the Multiple Spanning Tree Protocol InstanceRange: zero (0) to 63
	vlan range	Enter the keywordvlanfollowed by the identifier range value.Range: 1 to 4094
	bridge-priority priority	Enter the keywordbridge-priorityfollowed by a value in increments of 4096 as the bridge priority.Range: zero (0) to 61440Valid priority values are: 0, 4096, 8192, 12288, 16384, 20480, 24576, 28672, 32768, 36864, 40960, 45056, 49152, 53248, 57344, and 61440. All other values are rejected.
Defaults	default bridge-priority is 32768
Command Modes	INTERFACE
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.6.1.0 Added support for S-Series
	Version 7.5.1.0 Added support for C-Series
	pre-Version 6.2.1.1 Introduced on E-Series
Usage Information	By default, all VLANs are mapped to MST instance zero (0) unless you use the vlan range command to map it to a non-zero instance.

name

C E S	The name you assign to the Multiple Spanning Tree region.
Syntax	name region-name
	To remove the region name, enter no name
Parameters	region-name Enter the MST region name.Range: 32 character limit
Defaults	no default name
Command Modes	MULTIPLE SPANNING TREE
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.6.1.0 Added support for S-Series
	Version 7.5.1.0 Added support for C-Series
	Version 6.5.1.0 Introduced
Usage Information	For two MSTP switches to be within the same MSTP region, the switches must share the same region name (including matching case).

Related Commands

msti Map the VLAN(s) to an MST instance

revision Assign revision number to the MST configuration.

protocol spanning-tree mstp

Enter the MULTIPLE SPANNING TREE mode to enable and configure the Multiple Spanning Tree group.

Syntax protocol spanning-tree mstp

To disable the Multiple Spanning Tree group, enter no protocol spanning-tree mstp command.

Defaults Not configured.

Command Modes CONFIGURATION

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Added support for S-Series

Version 7.5.1.0 Added support for C-Series

pre-Version 6.2.1.1 Introduced on E-Series

Example Figure 23-2. protocol spanning-tree mstp Command Example

FTOS (conf) #protocol spanning-tree mstp FTOS (config-mstp) #no disable

Usage MSTP is not enabled when you enter the MULTIPLE SPANNING TREE mode. To enable MSTP globally on the switch, enter no disable while in MULTIPLE SPANNING TREE mode.

Refer to the FTOS Configuration Guide for more information on Multiple Spanning Tree Protocol.

Related Commands disable Disable Multiple Spanning Tree.

Defaults Disable.

Command Modes MULTIPLE SPANNING TREE

Usage Information Refer to the FTOS Configuration Guide for more information on Multiple Spanning Tree Protocol.

revision

The revision number for the Multiple Spanning Tree configuration

Syntax revision range

To return to the default values, enter no revision.

Parameters	range	Enter the revision number for the MST configuration. Range: 0 to 65535 Default: 0
Defaults	0
Command Modes	MULTIPLE SPANNING TREE
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 7.6.1.0 Added support for S-Series
	Version 7.5.1.0 Added support for C-Series
	Version 6.5.1.0 Introduced
Usage Information	For two MSTP switches to be within the same MST region, the switches must share the same revision number.
Related Commands	msti Map the VLAN(s) to an MST instance
	name Assign the region name to the MST region.

show config

View the current configuration for the mode. Only non-default values are shown.

Syntax show config

Command Modes MULTIPLE SPANNING TREE

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Added support for S-Series

Version 7.5.1.0 Added support for C-Series

Version 6.5.1.0 Introduced on E-Series

Example

Figure 23-3. show config Command for MULTIPLE SPANNING TREE Mode

FTOS (conf-mstp) #show config
!
protocol spanning-tree mstp
no disable
name CustomerSvc
revision 2
MSTI 10 VLAN 101-105
max-hops 5
FTOS (conf-mstp) # 

show spanning-tree mst configuration

View the Multiple Spanning Tree configuration.

Syntax

show spanning-tree mst configuration

Command Modes EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Added support for S-Series

Version 7.5.1.0 Added support for C-Series

pre-Version 6.2.1.1 Introduced on E-Series

Example

Figure 23-4. show spanning-tree mst configuration Command Example

Usage Information

You must enable Multiple Spanning Tree Protocol prior to using this command.

show spanning-tree msti

View the Multiple Spanning Tree instance.

Syntax

show spanning-tree msti [instance-number [brief]]

Parameters

instance-number [Optional] Enter the Multiple Spanning Tree Instance number Range: 0 to 63

brief [Optional] Enter the keyword brief to view a synopsis of the MST instance.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Added support for S-Series

Version 7.5.1.0 Added support for C-Series

Version 6.4.1.0 Expanded to display port error disable state (EDS) caused by loopback BPDU inconsistency (see Figure 23-6)

Example

Figure 23-5. show spanning-tree msti [instance-number] Command Example

FTOS#show spanning-tree msti 10 MSTI 10 VLANs mapped 101-105

Bridge Identifier has priority 32768, Address 0001.e802.3506 Configured hello time 2, max age 20, forward delay 15, max hops 5 Current root has priority 16384, Address 0001.e800.0a5c Number of topology changes 0, last change occurred 3058087

Port 82 (GigabitEthernet 2/0) is designated Forwarding Port path cost 0, Port priority 128, Port Identifier 128.82 Designated root has priority 16384, address 0001.e800.0a:5c Designated bridge has priority 32768, address 0001.e802.35:06 Designated port id is 128.82, designated path cost Number of transitions to forwarding state 1 BPDU (Mrecords): sent 1109, received 0 The port is not in the portfast mode

Port 88 (GigabitEthernet 2/6) is root Forwarding Port path cost 0, Port priority 128, Port Identifier 128.88 Designated root has priority 16384, address 0001.e800.0a:5c Designated bridge has priority 16384, address 0001.e800.0a:5c Designated port id is 128.88, designated path cost Number of transitions to forwarding state 4 BPDU (Mrecords): sent 19, received 1103 The port is not in the portfast mode

Port 89 (GigabitEthernet 2/7) is alternate Discarding Port path cost 0, Port priority 128, Port Identifier 128.89 Designated root has priority 16384, address 0001.e800.0a:5c Designated bridge has priority 16384, address 0001.e800.0a:5c Designated port id is 128.89, designated path cost Number of transitions to forwarding state 3 BPDU (Mrecords): sent 7, received 1103 The port is not in the portfast mode

FTOS#

Example 2

Figure 23-6. show spanning-tree msti with EDS and LBK

FTOS#show spanning-tree msti 0 brief MSTI 0 VLANs mapped 1-4094
Executing IEEE compatible Spanning Tree Protocol Root ID Priority 32768, Address 0001.e801.6aa8 Root Bridge hello time 2, max age 20, forward delay 15, max hops 20 Bridge ID Priority 32768, Address 0001.e801.6aa8 We are the root of MSTI 0 (CIST) Configured hello time 2, max age 20, forward delay 15, max hops 20 CIST regional root ID Priority 32768, Address 0001.e801.6aa8 CIST external path cost 0
Interface Name	PortID	Prio Cost		Sts Cost	Designated Bridge ID		PortID
Gi 0/0	128.257	128	20000	EDS 0	32768	0001.e801.6aa8	128.257
Interface Name	Role	PortID	Prio Cost		Sts Cost	Link-type	Edge	Boundary
Gi 0/0	ErrDis	128.257	128	20000	EDS 0	P2P	No	No
FTOS#show spanning-tree msti 0 MSTI 0 VLANs mapped 1-4094
Root Identifier has priority 32768, Address 0001.e801.6aa8 Root Bridge hello time 2, max age 20, forward delay 15, max hops 20 Bridge Identifier has priority 32768, Address 0001.e801.6aa8 Configured hello time 2, max age 20, forward delay 15, max hops 20 We are the root of MSTI 0 (CIST) Current root has priority 32768, Address 0001.e801.6aa8 CIST regional root ID Priority 32768, Address 0001.e801.6aa8 CIST external path cost 0 Number of topology changes 1, last change occurred 00:00:15 ago on Gi 0/0
Port 257 (GigabitEthernet 0/0) is LBK_INC Discarding Port path cost 20000, Port priority 128, Port Identifier 128.257 Designated root has priority 32768, address 0001.e801.6aa8 Designated bridge has priority 32768, address 0001.e801.6aa8 Designated port id is 128.257, designated path cost 0 Number of transitions to forwarding state 1 BPDU (MRecords): sent 21, received 9 The port is not in the Edge port mode

Usage Information

You must enable Multiple Spanning Tree Protocol prior to using this command.

spanning-tree

Enable Multiple Spanning Tree Protocol on the interface.

Syntax

spanning-tree

To disable the Multiple Spanning Tree Protocol on the interface, use no spanning-tree

Parameters

spanning-tree

Enter the keyword spanning-tree to enable the MSTP on the interface. Default: Enable

Defaults

Enable

Command Modes

INTERFACE

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Added support for S-Series

Version 7.5.1.0 Added support for C-Series

pre-Version 6.2.1.0 Introduced on E-Series

spanning-tree msti

Configure Multiple Spanning Tree instance cost and priority for an interface.

Syntax

spanning-tree msti instance {cost cost | priority priority}

To remove the cost or priority for the MST instance, use no spanning-tree msti instance {cost cost | priority priority}

Parameters

msti instance	Enter the keyword msti and the MST Instance number. Range: zero (0) to 63
cost cost	(OPTIONAL) Enter the keyword cost followed by the port cost value. Range: 1 to 200000 Defaults: 100 Mb/s Ethernet interface = 200000 1-Gigabit Ethernet interface = 20000 10-Gigabit Ethernet interface = 2000 Port Channel interface with one 100 Mb/s Ethernet = 200000 Port Channel interface with one 1-Gigabit Ethernet = 20000 Port Channel interface with one 10-Gigabit Ethernet = 2000 Port Channel with two 1-Gigabit Ethernet = 18000 Port Channel with two 10-Gigabit Ethernet = 1800 Port Channel with two 100-Mbps Ethernet = 180000
priority priority	Enter keyword priority followed by a value in increments of 16 as the priority. Range: 0 to 240. Default: 128

Defaults

cost = depends on the interface type; priority = 128

Command Modes

INTERFACE

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Added support for S-Series

Version 7.5.1.0 Added support for C-Series

Version 6.5.1.0 Introduced on E-Series

spanning-tree mstp edge-port

Configures the interface as an Multiple Spanning Tree edge port and optionally a Bridge Protocol Data Unit (BPDU) guard.

Syntax

spanning-tree mstp edge-port [bpduguard [shutdown-on-violation]]

Parameters	mstpedge-port	Enter the keywords mstp followed by the keyword edge-port to configure the interface as a Multiple Spanning Tree edge port.
	bpduguard	(OPTIONAL) Enter the keyword portfast to enable Portfast to move the interface into forwarding mode immediately after the root fails.Enter the keyword bpduguard to disable the port when it receives a BPDU.
	shutdown-on-violation	(OPTIONAL) Enter the keyword shutdown-on-violation to hardware disable an interface when a BPDU is received and the port is disabled.
Command Modes	INTERFACE
Command History	Version 8.3.5.0 Introduced on the S55.
	Version 8.2.1.0 Introduced hardware shutdown-on-violation option
	Version 7.6.1.0 Added support for S-Series
	Version 7.5.1.0 Added support for C-Series
	Version 6.1.1.0 Support for BPDU guard added
Usage Information	On an MSTP switch, a port configured as an edge port will immediately transition to the forwarding state. Only ports connected to end-hosts should be configured as an edge port. Consider an edge port similar to a port with spanning-tree portfast enabled.
	If shutdown-on-violation is not enabled, BPDUs will still be sent to the RPM CPU.

tc-flush-standard

Enable the MAC address flushing upon receiving every topology change notification.

Syntax

tc-flush-standard

To disable, use the no tc-flush-standard command.

Defaults

Disabled

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on the S55.

Version 7.6.1.0 Added support for S-Series

Version 7.5.1.0 Added support for C-Series

Version 6.5.1.0 Introduced

Usage Information

By default FTOS implements an optimized flush mechanism for MSTP. This helps in flushing the MAC addresses only when necessary (and less often) allowing for faster convergence during topology changes. However, if a standards-based flush mechanism is needed, this knob command can be turned on to enable flushing MAC addresses upon receiving every topology change notification.

Multicast

Overview

The platforms on which a command is supported is indicated by the character — E for the E-Series, C for the C-Series, and S for the S-Series — that appears below each command heading.

This chapter contains the following sections:

• IPv4 Multicast Commands
• IPv6 Multicast Commands

IPv4 Multicast Commands

The IPv4 Multicast commands are:

• clear ip mroute
• ip mroute
• ip multicast-lag-hashing
• ipv6 multicast-routing
• ip multicast-limit
• mac-flood-list
• mtrace
• queue backplane multicast
• restrict-flooding
  • show ip mroute
  • show ip rpf
  • show queue backplane multicast

clear ip mroute

Clear learned multicast routes on the multicast forwarding table. To clear the PIM tree information base, use clear ip pim tib command.

Syntax

clear ip mroute {group-address [source-address] | *}

Parameters
Command Modes
Command History
Related Commands

group-address [source-address]	Enter multicast group address and source address (if desired), in dotted decimal format, to clear information on a specific group.
* Enter * to clear all multicast routes.

EXEC Privilege

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced on C-Series

E-Series legacy command

show ip pim tib Show the PIM Tree Information Base.

ip mroute

Syntax

Assign a static mroute.

ip mroute destination mask {ip-address | null 0| {{bgp| ospf} process-id | isis | rip | static} {ip-address | tag | null 0}} [distance]

To delete a specific static mroute, use the command ip mroute destination mask {ip-address | null 0| {{bgp| ospf} process-id | isis | rip | static} {ip-address | tag | null 0}} [distance].

To delete all mroutes matching a certain mroute, use the no ip mroute destination mask command.

Parameters

destination	Enter the IP address in dotted decimal format of the destination device.
mask	Enter the mask in slash prefix formation (/x) or in dotted decimal format.
null 0	(OPTIONAL) Enter the null followed by zero (0).
[protocol [process-id | tag]ip-address]	(OPTIONAL) Enter one of the routing protocols:Enter the BGP as-number followed by the IP address in dotted decimal format of the reverse path forwarding (RPF) neighbor.Range:1-65535Enter the OSPF process identification number followed by the IP address in dotted decimal format of the reverse path forwarding (RPF) neighbor.Range: 1-65535Enter the IS-IS alphanumeric tag string followed by the IP address in dotted decimal format of the reverse path forwarding (RPF) neighbor.Enter the RIP IP address in dotted decimal format of the reverse path forwarding (RPF) neighbor.
static ip-address	(OPTIONAL) Enter the Static IP address in dotted decimal format of the reverse path forwarding (RPF) neighbor.
ip-address	(OPTIONAL) Enter the IP address in dotted decimal format of the reverse path forwarding (RPF) neighbor.
distance	(OPTIONAL) Enter a number as the distance metric assigned to the mroute.Range: 0 to 255

Defaults	Not configured.
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on S55
	E-Series legacy command
Related Commands	show ip mroute View the E-Series routing table.

ip multicast-lag-hashing

E

Distribute multicast traffic among Port Channel members in a round-robin fashion.

Syntax

ip multicast-lag-hashing

To revert to the default, enter no ip multicast-lag-hashing.

Defaults

Disabled

Command Modes

CONFIGURATION

Command History

Version 6.3.1.0 Introduced for E-Series

Usage Information

By default, one Port Channel member is chosen to forward multicast traffic. With this feature turned on, multicast traffic will be distributed among the Port Channel members in a round-robin fashion. This feature applies to the routed multicast traffic. If IGMP Snooping is turned on, this feature also applies to switched multicast traffic.

Related Commands

ipv6 multicast-routing

Enable IP multicast forwarding.

ip multicast-routing

C E S

Enable IP multicast forwarding.

Syntax

ip multicast-routing

To disable multicast forwarding, enter no ip multicast-routing.

Defaults

Disabled

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on S55

E-Series legacy command

Usage Information

You must enter this command to enable multicast on the E-Series.

After you enable multicast, you can enable IGMP and PIM on an interface. In the INTERFACE mode, enter the ip pim sparse-mode command to enable IGMP and PIM on the interface.

Related Commands

ip pim sparse-mode Enable IGMP and PIM on an interface.

ip multicast-limit

Use this feature to limit the number of multicast entries on the system.

Syntax
ip multicast-limit limit
Parameters

limit	Enter the desired maximum number of multicast entries on the system.
	E-Series Range: 1 to 50000
	E-Series Default: 15000
	C-Series Range: 1 to 10000
	C-Series Default: 4000
	S-Series Range: 1 to 2000
	S-Series Default: 400

Defaults
As above

Command Modes
CONFIGURATION
Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced on C-Series

Version 7.6.1.0 Introduced on E-Series

Usage Information

This features allows the user to limit the number of multicast entries on the system. This number is the sum total of all the multicast entries on all line cards in the system. On each line card, the multicast module will only install the maximum possible number of entries, depending on the configured CAM profile.

The IN-L3-McastFib CAM partition is used to store multicast routes and is a separate hardware limit that is exists per port-pipe. Any software-configured limit might be superseded by this hardware space limitation. The opposite is also true, the CAM partition might not be exhausted at the time the system-wide route limit set by the ip multicast-limit is reached.

Related Commands
show ip igmp groups
mac-flood-list

Provide an exception to the restrict-flood configuration so that multicast frames within a specified MAC address range to be flooded on all ports in a VLAN.

Syntax
mac-flood-list mac-address mask vlan vlan-list [min-speed speed]
Parameters

mac-address	Enter a multicast MAC address in hexadecimal format.
mac-mask	Enter the MAC Address mask.

	vlan vlan-list	Enter the VLAN(s) in which flooding will be restricted. Separate values by commas—no spaces (1,2,3) or indicate a list of values separated by a hyphen (1-3).Range: 1 to 4094
	min-speed min-speed	(OPTIONAL) Enter the minimum link speed that ports must have to receive the specified flooded multicast traffic.
Defaults	None
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.7.1.0 Introduced on E-Series
Usage Information	When the mac-flood-list with the min-speed option is used in combination with the restrict-flood command, mac-flood-list command has higher priority than the restrict-flood command.
	Therefore, all multicast frames matching the mac-address range specified using the mac-flood-list command are flooded according to the mac-flood-list command. Only the multicast frames not matching the mac-address range specified using the mac-flood-list command are flooded according to the restrict-flood command.
Related Commands	restrict-flooding	Prevent Layer 2 multicast traffic from being forwarded on ports below a specified speed.

mtrace

Trace a multicast route from the source to the receiver.

Syntax
mtrace { source-address/hostname} { destination-address/hostname} { group-address}

Parameters
source-address/hostname	Enter the source IP address in dotted decimal format (A.B.C.D).
destination-address/hostname	Enter the destination (receiver) IP address in dotted decimal format (A.B.C.D).
group-address	Enter the multicast group address in dotted decimal format (A.B.C.D).

Command Modes
EXEC Privilege

Command History	Version 7.5.1.0 Expanded to support originator
	Version 7.4.1.0 Expanded to support intermediate (transit) router
	E-Series legacy command

Usage Information

Mtrace is an IGMP protocol based on the Multicast trace route facility and implemented according to the IETF draft “A trace route facility for IP Multicast” (draft-fenner-traceroute-ipm-01.txt). FTOS supports the Mtrace client and transmit functionality.

As an Mtrace client, FTOS transmits Mtrace queries, receives, parses and prints out the details in the response packet received.

As an Mtrace transit or intermediate router, FTOS returns the response to Mtrace queries. Upon receiving the Mtrace request, FTOS computes the RPF neighbor for the source, fills in the request and the forwards the request to the RPF neighbor. While computing the RPF neighbor, the static mroute and mBGP route is preferred over the unicast route.

queue backplane multicast

E Reallocate the amount of bandwidth dedicated to multicast traffic.

Syntax queue backplane multicast bandwidth-percentage percentage

Parameters	percentage	Enter the percentage of backplane bandwidth to be dedicated to multicast traffic.Range: 5-95
Defaults	80% of the scheduler weight is for unicast traffic and 20% is for multicast traffic by default.
Command Modes	CONFIGURATION
Command History	Version 7.7.1.0 Introduced on E-Series

Example Figure 24-1. queue backplane multicast Command Example

	FTOS(conf)#queue backplane multicast bandwidth-percent 30FTOS(conf)#exitFTOS#00:14:04: %RPM0-P:CP %SYS-5-CONFIG_I: Configured from console byconsoleshow run | grep bandwidthqueue backplane multicast bandwidth-percent 30FTOS#
Related Commands	show queue backplanemulticast	Display the backplane bandwidth configuration about how much bandwidth isdedicated to multicast versus unicast.

restrict-flooding

E Prevent Layer 2 multicast traffic from being flooded on ports below a specified link speed.

Syntax restrict-flooding multicast min-speed speed

Parameters	min-speed min-speed	Enter the minimum link speed that a port must have to receive flooded multicast traffic. Range: 1000
Defaults	None
Command Modes	INTERFACE VLAN
Command History	Version 7.7.1.0 Introduced on E-Series

Usage Information

This command restricts flooding for all unknown multicast traffic on ports below a certain speed. If you want some multicast traffic to be flooded on slower ports, use the command mac-flood-list without the min-speed option, in combination with restrict-flooding. With mac-flood-list you specify the traffic you want to be flooded using a MAC address range.

You may not use unicast MAC addresses when specifying MAC address ranges, and do not overlap MAC addresses ranges, when creating multiple mac-flood-list entries for the same VLAN. Restricted Layer 2 Flooding is not compatible with MAC accounting or VMANs.

Related Commands

mac-flood-list Flood multicast frames with specified MAC addresses to all ports in a VLAN.

show ip mroute

View the Multicast Routing Table.

Syntax

show ip mroute [static | group-address [source-address] | active [rate] | count | summary]

Parameters

static	(OPTIONAL) Enter the keyword static to view static multicast routes.
group-address [source-address]	(OPTIONAL) Enter the multicast group-address to view only routes associated with that group.Enter the source-address to view routes with that group-address and source-address.
active [rate]	(OPTIONAL) Enter the keyword active to view only active multicast routes.Enter a rate to view active routes over the specified rate.Range: 0 to 10000000
count	(OPTIONAL) Enter the keyword count to view the number of multicast routes and packets on the E-Series.
summary	(OPTIONAL) Enter the keyword summary to view routes in a tabular format.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

E-Series legacy command

Example 1

Figure 24-2. show ip mroute static Command Example

FTOS#show ip mroute static Mroute: 23.23.23.0/24, interface: Lo 2 Protocol: static, distance: 0, route-map: none, last change: 00:00:23 FTOS#

Example 2

Figure 24-3. show ip mroute Command Example

FTOS#show ip mroute
IP Multicast Routing Table
(*, 224.10.10.1), uptime 00:05:12
Incoming interface: GigabitEthernet 3/12
Outgoing interface list:
GigabitEthernet 3/13
(1.13.1.100, 224.10.10.1), uptime 00:04:03
Incoming interface: GigabitEthernet 3/4
Outgoing interface list:
GigabitEthernet 3/12
GigabitEthernet 3/13
(*, 224.20.20.1), uptime 00:05:12
Incoming interface: GigabitEthernet 3/12
Outgoing interface list:
GigabitEthernet 3/4
FTOS# 

Table 24-1. show ip mroute Command Example Fields

Field Description
(S,G) Displays the forwarding entry in the multicast route table.
uptime Displays the amount of time the entry has been in the multicast forwarding table.
Incoming interface Displays the reverse path forwarding (RPF) information towards the source for (S,G) entries and the RP for (*,G) entries.
Outgoing interface list: Lists the interfaces that meet one of the following:• a directly connected member of the Group• statically configured member of the Group• received a (*,G) or (S,G) Join message

show ip rpf

View reverse path forwarding.

Syntax

show ip rpf

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

E-Series legacy command

Usage Information

Static mroutes are used by network administrators to control the reachability of the multicast sources. If a PIM registered multicast source is reachable via static mroute as well as unicast route, the distance of each route is examined and the route with shorter distance is the one the PIM selects for reachability.

Note: The default distance of mroutes is zero (0) and is CLI configurable on a per route basis.

Example

Figure 24-4. show ip rpf Command Example

FTOS#show ip rpf
RPF information for 10.10.10.9
RPF interface: Gi 3/4
RPF neighbor: 165.87.31.4
RPF route/mask: 10.10.10.9/255.255.255.255
RPF type: unicast 

show queue backplane multicast

E Display the backplane bandwidth configuration about how much bandwidth is dedicated to multicast versus unicast.

Syntax show queue backplane multicast bandwidth-percentage

Defaults None

Command Modes EXEC EXEC Privilege

Command History Version 7.7.1.0 Introduced on E-Series

Example Figure 24-5. show queue backplane multicast Command Example

FTOS#show queue backplane multicast bandwidth-percent
Configured multicast bandwidth percentage is 80 

Related Commands queue backplane multicast Reallocate the amount of bandwidth dedicated to multicast traffic.

IPv6 Multicast Commands

IPv6 Multicast commands are:

• clear ipv6 mroute
• ipv6 multicast-limit
• ipv6 multicast-routing
  • show ipv6 mroute
  • show ipv6 mroute mld
  • show ipv6 mroute summary

clear ipv6 mroute

Syntax	clear ipv6 mroute {group-address [source-address] | *}
Parameters	group-address [source-address]	Enter multicast group address and source address (if desired) to clear information on a specific group. Enter the addresses in the x:x:x:x::x format.The :: notation specifies successive hexadecimal fields of zero.
	* Enter * to clear all multicast routes.
Defaults	No default behavior or values
Command Modes	EXEC Privilege
Command History	Version 7.4.1.0 Introduced

ipv6 multicast-limit

Limit the number of multicast entries on the system.
Syntax	ipv6 multicast-limit limit
Parameters	limit Enter the desired maximum number of multicast entries on the system.Range: 1 to 50000Default: 15000
Defaults	15000 routes
Command Modes	CONFIGURATION
Command History	Version 8.3.1.0 Introduced
Usage Information	The maximum number of multicast entries allowed on each line card is determined by the CAM profile. Multicast routes are stored in the IN-V6-McastFib CAM region, which has a fixed number of entries. Any limit configured via the CLI is superseded by this hardware limit. The opposite is also true; the CAM might not be exhausted at the time the CLI-configured route limit is reached.

ipv6 multicast-routing

E Enable IPv6 multicast forwarding.

Syntax ipv6 multicast-routing

To disable multicast forwarding, enter no ipv6 multicast-routing.

Defaults Disabled

Command Modes CONFIGURATION

Command History

E-Series legacy command

show ipv6 mroute

View IPv6 multicast routes.

Syntax

show ipv6 mroute [group-address [source-address]] [active rate] [count group-address [source source-address]]

Parameters

group-address [source-address]	(OPTIONAL) Enter the IPv6 multicast group-address to view only routes associated with that group. Optionally, enter the IPv6 source-address to view routes with that group-address and source-address.
active [rate]	(OPTIONAL) Enter the keyword active to view active multicast sources. Enter a rate to view active routes over the specified rate. Range: 0 to 10000000 packets/second
count group-address [source source-address]}	(OPTIONAL) Enter the keyword count to view the number of IPv6 multicast routes and packets on the E-Series. Optionally, enter the IPv6 source-address count information.

Command Modes

EXEC

EXEC Privilege

Command History

Version 7.4.1.0 Introduced

Example

Figure 24-6. show ipv6 mroute command Example

YFTOS#show ipv6 mroute
IP Multicast Routing Table
(165:87:32::30, ff05:100::1), uptime 00:01:11
Incoming interface: Vlan 200
Outgoing interface list:
GigabitEthernet 2/14

(165:87:37::30, ff05:200::1), uptime 00:01:04
Incoming interface: Port-channel 200
Outgoing interface list:
Vlan 200

(165:87:31::30, ff05:300::1), uptime 00:01:19
Incoming interface: GigabitEthernet 2/14
Outgoing interface list:
Port-channel 200

(165:87:32::30, ff05:1100::1), uptime 00:01:04
Incoming interface: Vlan 200
Outgoing interface list:
GigabitEthernet 2/14

(165:87:37::30, ff05:2200::1), uptime 00:01:04
Incoming interface: Port-channel 200
Outgoing interface list:
Vlan 200

FTOS# 

Example

Figure 24-7. show ipv6 mroute active Command Example

FTOS#show ipv6 mroute active 10
Active Multicast Sources - sending >= 10 pps
Group: ff05:300::1
Source: 165:87:31::30
Rate: 100 pps
Group: ff05:3300::1
Source: 165:87:31::30
Rate: 100 pps
Group: ff3e:300::4000:1
Source: 165:87:31::20
Rate: 100 pps
Group: ff3e:3300::4000:1
Source: 165:87:31::20
Rate: 100 pps
FTOS# 

Example

Figure 24-8. show ipv6 mroute count group Command Examples

FTOS#show ipv6 mroute count group ff05:3300::1
IP Multicast Statistics
1 routes using 648 bytes of memory
1 groups, 1.00 average sources per group
Forwarding Counts: Pkt Count/Pkts per second
Group: ff05:3300::1, Source count: 1
Source: 165:87:31::30, Forwarding: 3997/0
FTOS# 

Example

Figure 24-9. show ipv6 mroute count source command Examples

FTOS#show ipv6 mroute count source 165:87:31::30
IP Multicast Statistics
2 routes using 1296 bytes of memory
2 groups, 1.00 average sources per group
Forwarding Counts: Pkt Count/Pkts per second
Group: ff05:300::1, Source count: 1
Source: 165:87:31::30, Forwarding: 3993/0
Group: ff05:3300::1, Source count: 1
Source: 165:87:31::30, Forwarding: 3997/0
FTOS# 

show ipv6 mroute mld

E

Display the Multicast MLD information.

Syntax

show ipv6 mroute [mld [group-address | all | vlan vlan-id]]

Parameters

mld (OPTIONAL) Enter the keyword mld to display Multicast MLD information.
group-address	(OPTIONAL) Enter the multicast group address in the X:X:X:X::X format.The :: notation specifies successive hexadecimal fields of zero.
all (OPTIONAL) Enter the keyword all to view all the MLD information.
vlan vlan-id	(OPTIONAL) Enter the keyword vlan followed by the VLAN ID to view MLD VLAN information.

Defaults

No default values or behavior

Command Modes

EXEC

EXEC Privilege

Command History

Version 7.4.1.0 Introduced

Example

Figure 24-10. show ipv6 mroute mld all Command Example

FTOS#show ipv6 mroute mld all
MLD SNOOPING MRTM Table
(*, ff05:100::1), uptime 00:04:21
Incoming vlan: Vlan 200
Outgoing interface list:
GigabitEthernet 2/15
GigabitEthernet 2/16
(*, ff05:200::1), uptime 00:04:15
Incoming vlan: Vlan 200
Outgoing interface list:
GigabitEthernet 2/15
GigabitEthernet 2/16
(*, ff05:1100::1), uptime 00:04:18
Incoming vlan: Vlan 200
Outgoing interface list:
GigabitEthernet 2/15
GigabitEthernet 2/16
FTOS# 

show ipv6 mroute summary

E

Display a summary of the Multicast routing table.

Syntax

show ipv6 mroute summary

Defaults

No default values or behavior

Command Modes

EXEC

EXEC Privilege

Command History

Version 7.4.1.0 Introduced

Example

Figure 24-11. show ipv6 mroute summary Command Example

FTOS#show ipv6 mroute summary
IP Multicast Routing Table
12 groups, 12 routes
(165:87:32::30, ff05:100::1), 00:00:24
(165:87:37::30, ff05:200::1), 00:00:24
(165:87:31::30, ff05:300::1), 00:00:24
(165:87:32::30, ff05:1100::1), 00:00:21
(165:87:37::30, ff05:2200::1), 00:00:21
(165:87:31::30, ff05:3300::1), 00:00:21
(165:87:32::20, ff3e:100::4000:1), 00:00:41
FTOS# 

Neighbor Discovery Protocol (NDP)

Overview

Neighbor Discovery Protocol for IPv6 is defined in RFC 2461 as part of the Stateless Address Autoconfiguration protocol. It replaces the Address Resolution Protocol used with IPv4. It defines mechanisms for solving the following problems:

• Router discovery: Hosts can locate routers residing on a link.
• Prefix discovery: Hosts can discover address prefixes for the link.
• Parameter discovery
• Address autoconfiguration — configuration of addresses for an interface
• Address resolution — mapping from IP address to link-layer address
• Next-hop determination
• Neighbor Unreachability Detection (NUD): Determine that a neighbor is no longer reachable on the link.
• Duplicate Address Detection (DAD): Allow a node to check whether a proposed address is already in use.
• Redirect: The router can inform a node about a better first-hop.

NDP makes use of the following five ICMPv6 packet types in its implementation:

• Router Solicitation
• Router Advertisement
• Neighbor Solicitation
• Neighbor Advertisement
• Redirect

Commands

The Neighbor Discovery Protocol (NDP) commands in this chapter are:

• clear ipv6 neighbors
• ipv6 nd managed-config-flag
• ipv6 nd max-ra-interval
• ipv6 nd mtu
• ipv6 nd other-config-flag
• ipv6 nd prefix
• ipv6 nd ra-lifetime
• ipv6 nd reachable-time

• ipv6 nd suppress-ra

• ipv6 neighbor
  • show ipv6 neighbors

clear ipv6 neighbors

Delete all entries in the IPv6 neighbor discovery cache, or neighbors of a specific interface. Static entries will not be removed using this command.

Syntax clear ipv6 neighbors [ipv6-address] [interface]

Parameters	ipv6-address	Enter the IPv6 address of the neighbor in the X:X:X:X::X format to remove a specific IPv6 neighbor.The :: notation specifies successive hexadecimal fields of zero.
	interface interface	To remove all neighbor entries learned on a specific interface, enter the keywordinterface followed by the interface type and slot/port or number information of the interface:For a Fast Ethernet interface, enter the keyword fastEthernet followed by the slot/port information.For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernet followed by the slot/port information.For a Port Channel interface, enter the keyword port-channel followed by a number from 1 to 255.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernet followed by the slot/port information.For a VLAN, enter the keyword vlan followed by the VLAN ID. The range is from 1 to 4094.

Command Modes EXEC

EXEC Privilege

ipv6 nd managed-config-flag

Set the managed address configuration flag in the IPv6 router advertisement. The description of this flag from RFC 2461 (http://tools.ietf.org/html/rfc2461) is:

M: 1-bit “Managed address configuration” flag. When set, hosts use the administered (stateful) protocol for address autoconfiguration in addition to any addresses autoconfigured using stateless address autoconfiguration. The use of this flag is described in:

Thomson, S. and T. Narten, "IPv6 Address Autoconfiguration", RFC 2462, December 1998.

Syntax ipv6 nd managed-config-flag

To clear the flag from the IPv6 router advertisements, use the no ipv6 nd managed-config-flag command.

Defaults The default flag is 0.

Command Modes INTERFACE

ipv6 nd max-ra-interval

E Configure the interval between the IPv6 router advertisement (RA) transmissions on an interface.

Syntax ipv6 nd max-ra-interval {interval} min-ra-interval {interval}

To restore the default interval, use the no ipv6 nd max-ra-interval command.

Parameters	max-ra-interval {interval}	Enter the keyword max-ra-interval followed by the interval in seconds. Range: 4 to 1800 seconds
	min-ra-interval {interval}	Enter the keyword min-ra-interval followed by the interval in seconds. Range: 3 to 1350 seconds

Defaults Max RA interval: 600 seconds, Min RA interval: 200 seconds

Command Modes INTERFACE

ipv6 nd mtu

C E S Configure an IPv6 neighbor discovery.

Syntax ipv6 nd mtu number

Parameters

mtu number Set the MTU advertisement value in Routing PrefixAdvertisement packets. Range: 1280 to 9234

Defaults No default values or behavior

Command Modes INTERFACE

Command History Version 8.3.5.0 Introduced on S55

Version 8.3.1.0 Introduced

Usage The ip nd mtu command sets the value advertised to routers. It does not set the actual MTU rate. For example, if ip nd mtu is set to 1280, the interface will still pass 1500-byte packets.

The mtu command sets the actual frame size passed, and can be larger than the advertised MTU. If the mtu setting is larger than the ip nd mtu, an error message is sent, but the configuration is accepted.

% Error: nd ra mtu is greater than link mtu, link mtu will be used.

Related Commands

mtu

Set the maximum link MTU (frame size) for an Ethernet interface.

ipv6 nd other-config-flag

Set the other stateful configuration flag in the IPv6 router advertisement. The description of this flag from RFC 2461 (http://tools.ietf.org/html/rfc2461) is:

O: 1-bit “Other stateful configuration” flag. When set, hosts use the administered (stateful) protocol for autoconfiguration of other (non-address) information. The use of this flag is described in:

Thomson, S. and T. Narten, "IPv6 Address Autoconfiguration", RFC 2462, December 1998.

Syntax ipv6 nd other-config-flag

To clear the flag from the IPv6 router advertisements, use the no ipv6 nd other-config-flag command.

Defaults The default flag is 0.

Command Modes INTERFACE

ipv6 nd prefix

Configure how IPv6 prefixes are advertised in the IPv6 router advertisements. The description of an IPv6 prefix from RFC 2461(http://tools.ietf.org/html/rfc2461) is a bit string that consists of some number of initial bits of an address.

Syntax ipv6 nd prefix { ipv6-address prefix-length | default} [no-advertise] | [no-autoconfig | no-rtr-address | off-link]

To prevent a prefix (or prefixes) from being advertised, use the no ipv6 nd prefix {ipv6-address prefix-length | default} [no-advertise {valid-lifetime seconds | preferred-lifetime seconds}] | [no-autoconfig | no-rtr-address | off-link] command.

Parameters	ipv6-address prefix-length	Enter the IPv6 address in the x:x:x::x format followed by the prefix length in the /x format. Range: /0 to /128 The :: notation specifies successive hexadecimal fields of zeros
	default	(OPTIONAL) Enter the keyword default to specify the prefix default parameters.
	no-advertise	(OPTIONAL) Enter the keyword no-advertise to not advertise prefixes.
	no-autoconfig	(OPTIONAL) Enter the keyword no-autoconfig to not use prefixes for auto-configuration.
	no-rtr-address	(OPTIONAL) Enter the keyword no-rtr-address to not send full router addresses in prefix advertisement.
	off-link	(OPTIONAL) Enter the keyword off-link to not use prefixes for on-link determination.

Defaults Not configured

Command Modes INTERFACE

ipv6 nd ra-lifetime

Configure the router lifetime value in the IPv6 router advertisements on an interface. The description of router lifetime from RFC 2461(http://tools.ietf.org/html/rfc2461) is:

Router Lifetime: 16-bit unsigned integer. The lifetime associated with the default router in units of seconds. The maximum value corresponds to 18.2 hours. A Lifetime of 0 indicates that the router is not a default router and SHOULD NOT appear on the default router list. The Router Lifetime applies only to the router's usefulness as a default router; it does not apply to information contained in other message fields or options. Options that need time limits for their information include their own lifetime fields.

Syntax ipv6 nd ra-lifetime seconds

To restore the default values, use the no ipv6 nd ra-lifetime command.

Parameters

seconds

Enter the lifetime value in seconds. Range: 0 to 9000

Defaults 9000 seconds

Command Modes INTERFACE

ipv6 nd reachable-time

Configure the amount of time that a remote IPv6 node is considered available after a reachability confirmation event has occurred. The description of reachable time from RFC 2461(http://tools.ietf.org/html/rfc2461) is:

Reachable Time: 32-bit unsigned integer. The time, in milliseconds, that a node assumes a neighbor is reachable after having received a reachability confirmation. Used by the Neighbor Unreachability Detection algorithm. A value of zero means unspecified (by this router).

Syntax ipv6 nd reachable-time { milliseconds}

To restore the default time, use the no ipv6 nd reachable-time command.

Parameters

milliseconds

Enter the leachability time in milliseconds. Range: 0 to 3600000

Defaults 3600000 milliseconds

Command Modes INTERFACE

ipv6 nd suppress-ra

E Suppress the IPv6 router advertisement transmissions on an interface.

Syntax ipv6 nd suppress-ra

To enable the sending of IPv6 router advertisement transmissions on an interface, use the no ipv6 nd suppress-ra command.

Defaults Enabled

Command Modes INTERFACE

ipv6 neighbor

E Configure a static entry in the IPv6 neighbor discovery.

Syntax ipv6 neighbor {ipv6-address} {interface interface} {hardware_address}

To remove a static IPv6 entry from the IPv6 neighbor discovery, use the no ipv6 neighbor {ipv6-address} {interface interface} command.

Parameters	ipv6-address	Enter the IPv6 address of the neighbor in the x::x::x::x format.The :: notation specifies successive hexadecimal fields of zero
	interface interface	Enter the keywordinterface followed by the interface type and slot/port or number information:For a Fast Ethernet interface, enter the keyword fastEthernet followed by the slot/port information.For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernet followed by the slot/port information.For a Port Channel interface, enter the keyword port-channel followed by a number from 1 to 255.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernet followed by the slot/port information.
	hardware_address	Enter a 48-bit hardware MAC address in nn:nn:nn:nn:nn:nn format.

Defaults No default behavior or values

Command Modes CONFIGURATION

show ipv6 neighbors

E Display IPv6 discovery information. Entering the command without options shows all IPv6 neighbor addresses stored on the CP (control processor).

Syntax show ipv6 neighbors [ipv6-address] [cpu {rp1 [ipv6-address] | rp2 [ipv6-address]}] [interface interface]

Parameters

ipv6-address

Enter the IPv6 address of the neighbor in the X:X:X:X::X format.The :: notation specifies successive hexadecimal fields of zero

cpu

Enter the keyword cpu followed by either rp1 or rp2 (Route Processor 1 or 2), optionally followed by an IPv6 address to display the IPv6 neighbor entries stored on the designated RP.

interface interface

For a Fast Ethernet interface, enter the keyword fastEthernet followed by the slot/port information.For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernet followed by the slot/port information.For a Port Channel interface, enter the keyword port-channel followed by a number from 1 to 255.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernet followed by the slot/port information.For a VLAN, enter the keyword vlan followed by the VLAN ID. The range is from 1 to 4094.

Defaults No default behavior or values

Command Modes EXEC

EXEC Privilege

Example Figure 25-1. show ipv6 neighbors Command Example

FTOS#show ipv6 neighbors
IPv6 Address	Expires (min)	Hardware Address	State	Interface	VLAN	CPU
fe80::201:e8ff:fe17:5bc6
1439		00:01:e8:17:5b:c6	STALE	Gi 1/9	-	CP
fe80::201:e8ff:fe17:5bc7
1439		00:01:e8:17:5b:c7	STALE	Gi 1/10	-	CP
fe80::201:e8ff:fe17:5bc8
1439		00:01:e8:17:5b:c8	STALE	Gi 1/11	-	CP
fe80::201:e8ff:fe17:5caf
0.3		00:01:e8:17:5c:af	REACH	Po 1	-	CP
fe80::201:e8ff:fe17:5cb0
1439		00:01:e8:17:5c:b0	STALE	Po 32	-	CP
fe80::201:e8ff:fe17:5cb1
1439		00:01:e8:17:5c:b1	STALE	Po 255	-	CP
fe80::201:e8ff:fe17:5cae
1439		00:01:e8:17:5c:ae	STALE	Gi 1/3	V1 100	CP
fe80::201:e8ff:fe17:5cae
1439		00:01:e8:17:5c:ae	STALE	Gi 1/5	V1 1000	CP
fe80::201:e8ff:fe17:5cae
1439		00:01:e8:17:5c:ae	STALE	Gi 1/7	V1 2000	CP
FTOS#

Open Shortest Path First (OSPFv2 and OSPFv3)

Overview

Open Shortest Path First version 2 for IPv4 is supported on platforms C E S

Open Shortest Path First version 3 (OSPFv3) for IPv6 is supported on platforms C E

Note: The C-Series supports OSPFv3 with FTOS version 7.8.1.0 and later.

OSPF is an Interior Gateway Protocol (IGP), which means that it distributes routing information between routers in a single Autonomous System (AS). OSPF is also a link-state protocol in which all routers contain forwarding tables derived from information about their links to their neighbors.

The fundamental mechanisms of OSPF (flooding, DR election, area support, SPF calculations, etc.) are the same for OSPFv2 and OSPFv3. OSPFv3 runs on a per-link basis instead of on a per-IP-subnet basis.

This chapter is divided into 2 sections. There is no overlap between the two sets of commands. You cannot use an OSPFv2 command in the IPv6 OSPFv3 mode.

- OSPFv2 Commands

Note: FTOS version 7.8.1.0 introduces Multi-Process OSPF on IPv4 (OSPFv2) only. It is not supported on OSPFv3 (IPv6).

Note that the CLI now requires that the Process ID be included when entering the ROUTER-OSPF mode. Each command entered applies to the specified OSPFv2 process only.

OSPFv2 Commands

The Dell Networking implementation of OSPFv2 is based on IETF RFC 2328. The following commands enable you to configure and enable OSPFv2.

• area default-cost
• area nssa
• area range
• area stub
• area virtual-link

• auto-cost

• clear ip ospf

• clear ip ospf statistics
• debug ip ospf
• default-information originate
• default-metric
• description
• distance
• distance ospf
• distribute-list in
• distribute-list out
• enable inverse mask
• fast-convergence
• flood-2328
  • graceful-restart grace-period
  • graceful-restart helper-reject
• graceful-restart mode
• graceful-restart role
• ip ospf auth-change-wait-time
• ip ospf authentication-key
• ip ospf cost
• ip ospf dead-interval
• ip ospf hello-interval
• ip ospf message-digest-key
• ip ospf mtu-ignore
• ip ospf network
• ip ospf priority
• ip ospf retransmit-interval
• ip ospf transmit-delay
• log-adjacency-changes
• maximum-paths
• mib-binding
• network area
• passive-interface
• redistribute
• redistribute bgp
• redistribute isis
• router-id
• router ospf
  • show config
  • show ip ospf
  • show ip ospf asbr
  • show ip ospf database
  • show ip ospf database asbr-summary
  • show ip ospf database external
  • show ip ospf database network
  • show ip ospf database nssa-external

• show ip ospf database opaque-area
• show ip ospf database opaque-as
• show ip ospf database opaque-link
• show ip ospf database router
• show ip ospf database summary
• show ip ospf interface
• show ip ospf neighbor
• show ip ospf routes
• show ip ospf statistics
• show ip ospf topology
• show ip ospf virtual-links
- summary-address
- timers spf

area default-cost

Set the metric for the summary default route generated by the area border router (ABR) into the stub area. Use this command on the border routers at the edge of a stub area.

Syntax
area area-id default-cost cost
To return default values, use the no area area-id default-cost command.

Parameters	area-id	Specify the OSPF area in dotted decimal format (A.B.C.D.) or enter a number from zero (0) to 65535.
	cost	Specifies the stub area's advertised external route metric.Range: zero (0) to 65535.
Defaults	cost = 1; no areas are configured.
Command Modes	ROUTER OSPF
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced support for Multi-Process OSPF.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.1 Introduced on E-Series
Usage Information	In FTOS, cost is defined as reference bandwidth/bandwidth.
Related Commands	area stub Create a stub area.

area nssa

Specify an area as a Not So Stubby Area (NSSA).

Syntax

area area-id nssa [default-information-originate] [no-redistribution] [no-summary]

To delete an NSSA, enter no area area-id nssa.

Parameters

area-id	Specify the OSPF area in dotted decimal format (A.B.C.D) or enter a number from 0 and 65535.
no-redistribution	(OPTIONAL) Specify that the redistribute command should not distribute routes into the NSSA. You should only use this command in a NSSA Area Border Router (ABR).
default-information-originate	(OPTIONAL) Allows external routing information to be imported into the NSSA by using Type 7 default.
no-summary	(OPTIONAL) Specify that no summary LSAs should be sent into the NSSA.

Defaults

Not configured

Command Mode

ROUTER OSPF

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced support for Multi-Process OSPF.

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series

area range

Summarize routes matching an address/mask at an area border router (ABR).

Syntax

area area-id range ip-address mask [not-advertise]

To disable route summarization, use the no area area-id range ip-address mask command.

Parameters

area-id	Specify the OSPF area in dotted decimal format (A.B.C.D.) or enter a number from zero (0) to 65535.
ip-address	Specify an IP address in dotted decimal format.
mask	Specify a mask for the destination prefix. Enter the full mask (for example, 255.255.255.0).
not-advertise	(OPTIONAL) Enter the keyword not-advertise to set the status to DoNotAdvertise (that is, the Type 3 summary-LSA is suppressed and the component networks remain hidden from other areas.)

Defaults

No range is configured.

Command Modes

ROUTER OSPF

Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced support for Multi-Process OSPF.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.1 Introduced on E-Series
Usage Information	Only the routes within an area are summarized, and that summary is advertised to other areas by the ABR. External routes are not summarized.
Related Commands	area stub Create a stub area.
	router ospf Enter the ROUTER OSPF mode to configure an OSPF instance.
area stub
C E S	Configure a stub area, which is an area not connected to other areas.
Syntax	area area-id stub [no-summary]To delete a stub area, enter no area area-id stub.
Parameters	area-id	Specify the stub area in dotted decimal format (A.B.C.D.) or enter a number from zero (0) to 65535.
	no-summary	(OPTIONAL) Enter the keyword no-summary to prevent the ABR from sending summary Link State Advertisements (LSAs) into the stub area.
Defaults	Disabled
Command Modes	ROUTER OSPF
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced support for Multi-Process OSPF.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.1 Introduced on E-Series
	Use this command to configure all routers and access servers within a stub.
Usage Information	Use this command to configure all routers and access servers within a stub.
Related Commands	router ospf Enter the ROUTER OSPF mode to configure an OSPF instance.

area virtual-link

Set a virtual link and its parameters.

Syntax

area area-id virtual-link router-id [[authentication-key [encryption-type] key] | [message-digest-key keyid md5 [encryption-type] key]] [dead-interval seconds] [hello-interval seconds] [retransmit-interval seconds] [transmit-delay seconds]

To delete a virtual link, use the no area area-id virtual-link router-id command.

To delete a parameter of a virtual link, use the no area area-id virtual-link router-id [[authentication-key [encryption-type] key] | [message-digest-key keyid md5 [encryption-type] key]] [dead-interval seconds] [hello-interval seconds] [retransmit-interval seconds] [transmit-delay seconds] command syntax.

Parameters

area-id	Specify the transit area for the virtual link in dotted decimal format (A.B.C.D.) or enter a number from zero (0) to 65535.
router-id	Specify an ID (IP address in dotted decimal format) associated with a virtual link neighbor.
authentication-key[encryption-type] key|message-digest-keykeyidmd5 [encryption-type] key	(OPTIONAL) Choose between two authentication methods:• Enter the keyword authentication-keyto enable simple authentication followed by an alphanumeric string up to 8 characters long. Optionally, for the encryption-type variable, enter the number 7 before entering the keystring to indicate that an encrypted password will follow.• Enter the keyword message-digest-keyfollowed by a number from 1 to 255 as the keyid. After the keyid, enter the keyword md5 followed by the key. The keyis an alphanumeric string up to 16 characters long. Optionally, for the encryption-type variable, enter the number 7 before entering the keystring to indicate that an encrypted password will follow.
dead-interval seconds	(OPTIONAL) Enter the keyword dead-intervalfollowed by a number as the number of secondsfor the interval.Range: 1 to 8192.Default: 40 seconds.
hello-interval seconds	(OPTIONAL) Enter the keyword hello-intervalfollowed by the number of secondsfor the interval.Range: 1 to 8192.Default: 10 seconds.
retransmit-interval seconds	(OPTIONAL) Enter the keyword retransmit-intervalfollowed by the number of secondsfor the interval.Range: 1 to 8192.Default: 5 seconds.
transmit-delay seconds	(OPTIONAL) Enter the keyword transmit-delayfollowed by the number of secondsfor the interval.Range: 1 to 8192.Default: 1 second.

Defaults

dead-interval seconds = 40 seconds; hello-interval seconds = 10 seconds; retransmit-interval seconds = 5 seconds; transmit-delay seconds = 1 second

Command Modes

ROUTER OSPF

Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced support for Multi-Process OSPF.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.1 Introduced on E-Series

Usage Information All OSPF areas must be connected to a backbone area (usually Area 0). Virtual links connect broken or discontinuous areas.

You cannot enable both authentication options. Choose either the authentication-key or message-digest-key option.

auto-cost

Specify how the OSPF interface cost is calculated based on the reference bandwidth method.

Syntax

auto-cost [reference-bandwidth ref-bw]

To return to the default bandwidth or to assign cost based on the interface type, use the no auto-cost [reference-bandwidth] command.

Parameters

ref-bw

(OPTIONAL) Specify a reference bandwidth in megabits per second. Range: 1 to 4294967 Default: 100 megabits per second.

Defaults

Clear all OSPF routing tables.

Syntax

clear ip ospf process-id [process]

Parameters	process-id	Enter the OSPF Process ID to clear a specific process.If no Process ID is entered, all OSPF processes are cleared.
	process	(OPTIONAL) Enter the keywordprocessto reset the OSPF process.

Command Modes EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced support for Multi-Process OSPF.

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series

clear ip ospf statistics

Clear the packet statistics in interfaces and neighbors.

Syntax

clear ip ospf process-id statistics [interface name {neighbor router-id}]

Parameters

process-id	Enter the OSPF Process ID to clear statistics for a specific process. If no Process ID is entered, all OSPF processes are cleared.
interface name	(OPTIONAL) Enter the keywordinterfacefollowed by one of the following interface keywords and slot/port or number information: For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernet followed by the slot/port information. For Port Channel groups, enter the keywordport-channelfollowed by a number: C-Series and S-Series Range: 1-128 E-Series Range: 1-255 for TeraScale For a SONET interface, enter the keywordsonetfollowed by the slot/port information. For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernetfollowed by the slot/port information. For a VLAN, enter the keywordvlanfollowed by a number from 1 to 4094.
neighbor router-id	(OPTIONAL) Enter the keywordneighborfollowed by the neighbor's router-id in dotted decimal format (A.B.C.D.).

Defaults

No defaults values or behavior

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced support for Multi-Process OSPF.

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

Version 7.4.1.0 Introduced on E-Series

Related Commands

show ip ospf statistics Display the OSPF statistics

debug ip ospf

Display debug information on OSPF. Entering debug ip ospf enables OSPF debugging for the first OSPF process,.

Syntax

debug ip ospf process-id [bfd | event | packet | spf]

To cancel the debug command, enter no debug ip ospf.

Parameters

process-id	Enter the OSPF Process ID to debug a specific process.If no Process ID is entered, command applies only to the first OSPF process.
bfd	(OPTIONAL) Enter the keyword bfd to debug only OSPF BFD information.
event	(OPTIONAL) Enter the keyword event to debug only OSPF event information.
packet	(OPTIONAL) Enter the keyword packet to debug only OSPF packet information.
spf	(OPTIONAL) Enter the keyword spf to display the Shortest Path First information.

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced support for Multi-Process OSPF.

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series

Example

Figure 26-1. Command example: debug ip ospf process-id packet

FTOS#debug ip ospf 1 packet
OSPF process 90, packet debugging is on

FTOS#
08:14:24 : OSPF(100:00):
Xmt. v:2 t:1(HELLO) 1:44 rid:192.1.1.1
    aid:0.0.0.1 chk:0xa098 aut:0 auk: keyid:0 to:Gi 4/3 dst:224.0.0.5
    netmask:255.255.255.0 pri:1 N-, MC-, E+, T-,
    hi:10 di:40 dr:90.1.1.1 bdr:0.0.0.0 

Table 26-1. Output Descriptions for debug ip ospf process-id packet

Field Description
8:14 Displays the time stamp.
OSPF Displays the	OSPF process ID: instance ID.
v: Displays the OSPF version. FTOS supports version 2 only.
t: Displays the type	of packet sent:• 1 - Hello packet• 2 - database description• 3 - link state request• 4 - link state update• 5 - link state acknowledgement
l: Displays the packet length.

Table 26-1. Output Descriptions for debug ip ospf process-id packet

Field Description
rid: Displays the OSPF router ID.
aid: Displays the Autonomous System ID.
chk: Displays the OSPF checksum.
aut: States if OSPF	authentication is configured. One of the following is listed:0 - no authentication configured1 - simple authentication configured using the ip ospf authentication-key command)2 - MD5 authentication configured using the ip ospf message-digest-key command.
auk:	If the ip ospf authentication-key command is configured, this field displays the key used.
keyid:	If the ip ospf message-digest-key command is configured, this field displays the MD5 key
to: Displays the interface to which the packet is intended.
dst: Displays the destination IP address.
netmask: Displays the destination IP address mask.
pri: Displays the OSPF priority
N, MC, E, T Displays information available in the Options field of the HELLO packet:N + (N-bit is set)N - (N-bit is not set)MC+ (bit used by MOSPF is set and router is able to forward IP multicast packets)MC- (bit used by MOSPF is not set and router cannot forward IP multicast packets)E + (router is able to accept AS External LSAs)E - (router cannot accept AS External LSAs)T + (router can support TOS)T - (router cannot support TOS)
hi: Displays the amount of time configured for the HELLO interval.
di: Displays the amount of time configured for the DEAD interval.
dr: Displays the IP address of the designated router.
bdr: Displays the IP address of the Border Area Router.

default-information originate

Configure the FTOS to generate a default external route into an OSPF routing domain.

Syntax

default-information originate [always] [metric metric-value] [metric-type type-value] [route-map map-name]

To return to the default values, enter no default-information originate.

Parameters

always	(OPTIONAL) Enter the keyword always to specify that default route information must always be advertised.
metric metric-value	(OPTIONAL) Enter the keyword metric followed by a number to configure a metric value for the route.Range: 1 to 16777214

	metric-type type-value	(OPTIONAL) Enter the keyword metric-type followed by an OSPF link state type of 1 or 2 for default routes. The values are:• 1 = Type 1 external route• 2 = Type 2 external route.
	route-map map-name	(OPTIONAL) Enter the keyword route-map followed by the name of an established route map.
Defaults	Disabled.
Command Modes	ROUTER OSPF
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced support for Multi-Process OSPF.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.1 Introduced on E-Series
Related Commands	redistribute Redistribute routes from other routing protocols into OSPF.

default-metric

Change the metrics of redistributed routes to a value useful to OSPF. Use this command with the redistribute command.

Syntax
default-metric number
To return to the default values, enter no default-metric [number].
Parameters

number

Enter a number as the metric. Range: 1 to 16777214.

Defaults

Disabled.

Command Modes
ROUTER OSPF
Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced support for Multi-Process OSPF.

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series

Related Commands

redistribute Redistribute routes from other routing protocols into OSPF.

description

Add a description about the selected OSPF configuration.

Syntax	description description
	To remove the OSPF description, use the no description command.
Parameters	description Enter a text string description to identify the OSPF configuration (80 characters maximum).
Defaults	No default behavior or values
Command Modes	ROUTER OSPF
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced support for Multi-Process OSPF.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.1 Introduced on E-Series
Related Commands	show ip ospf asbr Display VLAN configuration.
distance
C E S	Define an administrative distance for particular routes to a specific IP address.
Syntax	distance weight [ip-address mask access-list-name]
	To delete the settings, use the no distance weight [ip-address mask access-list-name] command.
Parameters	weight Specify an administrative distance.Range: 1 to 255.Default: 110
	ip-address (OPTIONAL) Enter a router ID in the dotted decimal format.If you enter a router ID, you must include the mask for that router address.
	mask (OPTIONAL) Enter a mask in dotted decimal format or /n format.
	access-list-name (OPTIONAL) Enter the name of an IP standard access list, up to 140 characters.
Defaults	110
Command Modes	ROUTER OSPF
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced support for Multi-Process OSPF.Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.1 Introduced on E-Series

distance ospf

Configure an OSPF distance metric for different types of routes.

Syntax

distance ospf [external dist3] [inter-area dist2] [intra-area dist1]

To delete these settings, enter no distance ospf.

Parameters

external dist3	(OPTIONAL) Enter the keyword external followed by a number to specify a distance for external type 5 and 7 routes. Range: 1 to 255 Default: 110.
inter-area dist2	(OPTIONAL) Enter the keyword inter-area followed by a number to specify a distance metric for routes between areas. Range: 1 to 255 Default: 110.
intra-area dist1	(OPTIONAL) Enter the keyword intra-area followed by a number to specify a distance metric for all routes within an area. Range: 1 to 255 Default: 110.

Defaults

external dist3 = 110; inter-area dist2 = 110; intra-area dist1 = 110.

Command Modes

ROUTER OSPF

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced support for Multi-Process OSPF.

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series

Usage Information

To specify a distance for routes learned from other routing domains, use the redistribute command.

distribute-list in

Apply a filter to incoming routing updates from OSPF to the routing table.

Syntax

distribute-list prefix-list-name in [interface]

To delete a filter, use the no distribute-list prefix-list-name in [interface] command.

Parameters

prefix-list-name

Enter the name of a configured prefix list.

interface

(OPTIONAL) Enter one of the following keywords and slot/port or number information:For a 1-Gigabit Ethernet interface, enter the keyword followed by the slot/port information.For Port Channel groups, enter the keyword port-channel followed by a number:C-Series and S-Series Range: 1-128E-Series Range: 1-255 for TeraScaleFor a SONET interface, enter the keyword sonet followed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.

Defaults

Not configured.

Command Modes

ROUTER OSPF

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced support for Multi-Process OSPF.

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series

distribute-list out

C E S

Apply a filter to restrict certain routes destined for the local routing table after the SPF calculation.

Syntax

distribute-list prefix-list-name out [bgp | connected | isis | rip | static]

To remove a filter, use the no distribute-list prefix-list-name out [bgp | connected | isis | rip | static] command.

Parameters

prefix-list-name	Enter the name of a configured prefix list.
bgp	(OPTIONAL) Enter the keyword bgp to specify that BGP routes are distributed.*
connected	(OPTIONAL) Enter the keyword connected to specify that connected routes are distributed.
isis	(OPTIONAL) Enter the keyword isis to specify that IS-IS routes are distributed.*
rip	(OPTIONAL) Enter the keyword rip to specify that RIP routes are distributed.*
static	(OPTIONAL) Enter the keyword static to specify that only manually configured routes are distributed.

* BGP and ISIS routes are not available on the C-Series.
BGP, ISIS, and RIP routes are not available on the S-Series.

Defaults

Not configured.

Command Modes

ROUTER OSPF

Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced support for Multi-Process OSPF.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.1 Introduced on E-Series

Usage Information The distribute-list out command applies to routes being redistributed by autonomous system boundary routers (ASBRs) into OSPF. It can be applied to external type 2 and external type 1 routes, but not to intra-area and inter-area routes.

enable inverse mask

C E FTOS, by default, permits the user to input OSPF network command with a net-mask. This command provides a choice between inverse-mask or net-mask (the default).

Syntax enable inverse mask

To return to the default net-mask, enter no enable inverse mask.

Defaults net-mask

Command Modes CONFIGURATION

Command History	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.1 Introduced on E-Series

fast-convergence

This command sets the minimum LSA origination and arrival times to zero (0), allowing more rapid route computation so that convergence takes less time.

Syntax fast-convergence {number}

To cancel fast-convergence, enter no fast convergence.

Parameters

number

Enter the convergence level desired. The higher this parameter is set, the faster OSPF converge takes place. Range: 1-4

Defaults None.

Command Modes ROUTER OSPF

Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced on all platforms.

Usage Information The higher this parameter is set, the faster OSPF converge takes place. Note that the faster the convergence, the more frequent the route calculations and updates. This will impact CPU utilization and may impact adjacency stability in larger topologies.

Generally, convergence level 1 meets most convergence requirements. Higher convergence levels should only be selected following consultation with Dell Networking technical support.

flood-2328

Enable RFC-2328 flooding behavior.

Syntax

flood-2328

To disable, use the no flood-2328 command.

Defaults

Disabled

Command Modes

ROUTER OSPF

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced support for Multi-Process OSPF.

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series and E-Series

Usage Information

In OSPF, flooding is the most resource-consuming task. The flooding algorithm, described in RFC-2328, requires that OSPF flood LSAs (Link State Advertisements) on all interfaces, as governed by LSA's flooding scope (see Section 13 of the RFC). When multiple direct links connect two routers, the RFC-2328 flooding algorithm generates significant redundant information across all links.

By default, FTOS implements an enhanced flooding procedure that dynamically and intelligently determines when to optimize flooding. Whenever possible, the OSPF task attempts to reduce flooding overhead by selectively flooding on a subset of the interfaces between two routers.

When flood-2328 is enabled, this command configures FTOS to flood LSAs on all interfaces.

graceful-restart grace-period

Specifies the time duration, in seconds, that the router's neighbors will continue to advertise the router as fully adjacent regardless of the synchronization state during a graceful restart.

Syntax

graceful-restart grace-period seconds

To disable the grace period, enter no graceful-restart grace-period.

Parameters

seconds

Time duration, in seconds, that specifies the duration of the restart process before OSPF terminates the process.

Range: 40 to 3000 seconds

Defaults	Not Configured
Command Modes	ROUTER OSPF
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced for S-SeriesIntroduced support for Multi-Process OSPF.
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.1 Introduced on E-Series
Usage Information	OSPF Graceful Restart is not supported on the S55 system.

graceful-restart helper-reject

Specify the OSPF router to not act as a helper during graceful restart.

Syntax

graceful-restart helper-reject ip-address

To return to default value, enter no graceful-restart helper-reject.

Parameters	ip-address	Enter the OSPF router-id, in IP address format, of the restart router that will not act as a helper during graceful restart.
Defaults	Not Configured
mand Modes	ROUTER OSPF
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced support for Multi-Process OSPF.Restart role enabled on S-Series (Both Helper and Restart roles now supported on S-Series.
	Version 7.7.1.0 Helper-Role supported on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.1 Introduced on E-Series

graceful-restart mode

Enable the graceful restart mode.

Syntax

graceful-restart mode [planned-only | unplanned-only]

To disable graceful restart mode, enter no graceful-restart mode.

Parameters

planned-only	(OPTIONAL) Enter the keywordsplanned-onlyto indicate graceful restart is supported in a planned restart condition only.
unplanned-only	(OPTIONAL) Enter the keywordsunplanned-onlyto indicate graceful restart is supported in an unplanned restart condition only.

Defaults

Support for both planned and unplanned failures.

Command Modes

ROUTER OSPF

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series

graceful-restart role

Specify the role for your OSPF router during graceful restart.

Syntax

graceful-restart role [helper-only | restart-only]

To disable graceful restart role, enter no graceful-restart role.

Parameters

role helper-only	(OPTIONAL) Enter the keywords helper-only to specify the OSPF router is a helper only during graceful restart.
role restart-only	(OPTIONAL) Enter the keywords restart-only to specify the OSPF router is a restart only during graceful-restart.

Defaults

OSPF routers are, by default, both helper and restart routers during a graceful restart.

Command Modes

ROUTER OSPF

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced support for Multi-Process OSPF. Restart and helper roles supported on S-Series

Version 7.7.1 Helper-Role supported on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series

ip ospf auth-change-wait-time

OSPF provides a grace period while OSPF changes its interface authentication type. During the grace period, OSPF sends out packets with new and old authentication scheme till the grace period expires.

Syntax

ip ospf auth-change-wait-time seconds

To return to the default, enter no ip ospf auth-change-wait-time.

Parameters

seconds

Enter seconds

Range: 0 to 300

Defaults

zero (0) seconds

Command Modes

INTERFACE

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series

ip ospf authentication-key

Enable authentication and set an authentication key on OSPF traffic on an interface.

Syntax

ip ospf authentication-key [encryption-type] key

To delete an authentication key, enter no ip ospf authentication-key.

Parameters

encryption-type

(OPTIONAL) Enter 7 to encrypt the key.

key

Enter an 8 character string. Strings longer than 8 characters are truncated.

Defaults

Not configured.

Command Modes

INTERFACE

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series

Usage Information

All neighboring routers in the same network must use the same password to exchange OSPF information.

ip ospf cost

Change the cost associated with the OSPF traffic on an interface.

Syntax

ip ospf cost cost

To return to default value, enter no ip ospf cost.

Parameters

cost

Enter a number as the cost.

Range: 1 to 65535.

Defaults

The default cost is based on the reference bandwidth.

Command Modes

INTERFACE

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series

Usage Information	If this command is not configured, cost is based on the auto-cost command.
	When you configure OSPF over multiple vendors, use the ip ospf cost command to ensure that all routers use the same cost. Otherwise, OSPF routes improperly.
Related Commands	auto-cost Control how the OSPF interface cost is calculated.

ip ospf dead-interval

Set the time interval since the last hello-packet was received from a router. After the interval elapses, the neighboring routers declare the router dead.

Syntax ip ospf dead-interval seconds

To return to the default values, enter no ip ospf dead-interval.

Parameters

Parameters	seconds	Enter the number of seconds for the interval.Range: 1 to 65535. Default: 40 seconds.
Defaults	40 seconds
Command Modes	INTERFACE
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.1 Introduced on E-Series
Usage Information	By default, the dead interval is four times the default hello-interval.
Related Commands	ip ospf hello-interval Set the time interval between hello packets.

ip ospf hello-interval

Specify the time interval between the hello packets sent on the interface.

Syntax ip ospf hello-interval seconds

To return to the default value, enter no ip ospf hello-interval.

Parameters

parameters

seconds

Enter a the number of second as the delay between hello packets. Range: 1 to 65535. Default: 10 seconds.

Defaults 10 seconds

Command Modes INTERFACE

Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.1 Introduced on E-Series

Usage Information

The time interval between hello packets must be the same for routers in a network.

Related Commands

ip ospf dead-interval Set the time interval before a router is declared dead.

ip ospf message-digest-key

Enable OSPF MD5 authentication and send an OSPF message digest key on the interface.

Syntax

ip ospf message-digest-key keyid md5 key

To delete a key, use the no ip ospf message-digest-key keyid command.

Parameters

keyid	Enter a number as the key ID. Range: 1 to 255.
key	Enter a continuous character string as the password.

Defaults

No MD5 authentication is configured.

Command Modes INTERFACE

Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.1 Introduced on E-Series

Usage Information To change to a different key on the interface, enable the new key while the old key is still enabled. The FTOS will send two packets: the first packet authenticated with the old key, and the second packet authenticated with the new key. This process ensures that the neighbors learn the new key and communication is not disrupted by keeping the old key enabled.

After the reply is received and the new key is authenticated, you must delete the old key. Dell Networking recommends keeping only one key per interface.

Note: The MD5 secret is stored as plain text in the configuration file with service password encryption.

ip ospf mtu-ignore

Disable OSPF MTU mismatch detection upon receipt of database description (DBD) packets.

Syntax

ip ospf mtu-ignore

To return to the default, enter no ip ospf mtu-ignore.

Defaults

Enabled

Command Modes

INTERFACE

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series

ip ospf network

Set the network type for the interface.

Syntax

ip ospf network {broadcast | point-to-point}

To return to the default, enter no ip ospf network.

Parameters

broadcast	Enter the keyword broadcast to designate the interface as part of a broadcast network.
point-to-point	Enter the keyword point-to-point to designate the interface as part of a point-to-point network.

Defaults

Not configured.

Command Modes

ROUTER OSPF

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced support for Multi-Process OSPF.

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series

ip ospf priority

Set the priority of the interface to determine the Designated Router for the OSPF network.

Syntax

ip ospf priority number

To return to the default setting, enter no ip ospf priority.

Parameters	number	Enter a number as the priority. Range: 0 to 255. The default is 1.
Defaults	1
Command Modes	INTERFACE
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.1 Introduced on E-Series
Usage Information	Setting a priority of 0 makes the router ineligible for election as a Designated Router or Backup Designated Router. Use this command for interfaces connected to multi-access networks, not point-to-point networks.

ip ospf retransmit-interval

Set the retransmission time between lost link state advertisements (LSAs) for adjacencies belonging to the interface.

Syntax

ip ospf retransmit-interval seconds

To return to the default values, enter no ip ospf retransmit-interval.

Parameters

seconds

Enter the number of seconds as the interval between retransmission. Range: 1 to 3600. Default: 5 seconds. This interval must be greater than the expected round-trip time for a packet to travel between two routers.

Defaults

5 seconds

Command Modes

INTERFACE

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series

Usage Information

Set the time interval to a number large enough to prevent unnecessary retransmissions. For example, the interval should be larger for interfaces connected to virtual links.

ip ospf transmit-delay

C E S Set the estimated time elapsed to send a link state update packet on the interface.

Syntax ip ospf transmit-delay seconds
To return to the default value, enter no ip ospf transmit-delay.

Parameters

seconds

Enter the number of seconds as the transmission time. This value should be greater than the transmission and propagation delays for the interface.Range: 1 to 3600.Default: 1 second.

Defaults 1 second

Command Modes INTERFACE

Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.1 Introduced on E-Series

log-adjacency-changes

C E S Set FTOS to send a Syslog message about changes in the OSPF adjacency state.

Syntax log-adjacency-changes

To disable the Syslog messages, enter no log-adjacency-changes.

Defaults Disabled.

Command Mode ROUTER OSPF

Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced support for Multi-Process OSPF.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.1 Introduced on E-Series

maximum-paths

C E S Enable the software to forward packets over multiple paths.

Syntax maximum-paths number

To disable packet forwarding over multiple paths, enter no maximum-paths.

Parameters	number	Specify the number of paths. Range: 1 to 16. Default: 4 paths.
Defaults	4
Command Modes	ROUTER OSPF
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced support for Multi-Process OSPF.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.1 Introduced on E-Series

mib-binding

Enable this OSPF process ID to manage the SNMP traps and process SNMP queries.

Syntax mib-binding

To mib-binding on this OSPF process, enter no mib-binding.

Defaults None.

Command Modes ROUTER OSPF

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced to all platforms.

Usage Information This command is either enabled or disabled. If no OSPF process is identified as the MIB manager, the first OSPF process will be used.

If an OSPF process has been selected, it must be disabled prior to assigning new process ID the MIB responsibility.

network area

Define which interfaces run OSPF and the OSPF area for those interfaces.

Syntax network ip-address mask area area-id

To disable an OSPF area, use the no network ip-address mask area area-id command.

Parameters

ip-address

Specify a primary or secondary address in dotted decimal format. The primary address is required before adding the secondary address.

	mask	Enter a network mask in /prefix format. (/x)
	area-id	Enter the OSPF area ID as either a decimal value or in a valid IP address. Decimal value range: 0 to 65535IP address format: dotted decimal format A.B.C.D.Note: If the area ID is smaller than 65535, it will be converted to a decimal value. For example, if you use an area ID of 0.0.0.1, it will be converted to 1.
Command Modes	ROUTER OSPF
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced support for Multi-Process OSPF.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.1 Introduced on E-Series
Usage Information	To enable OSPF on an interface, thenetwork areacommand must include, in its range of addresses, the primary IP address of an interface.

Note: An interface can be attached only to a single OSPF area.

If you delete all the network area commands for Area 0, the show ip ospf command output will not list Area 0.

passive-interface

Suppress both receiving and sending routing updates on an interface.

Syntax

passive-interface {default | interface}

To enable both the receiving and sending routing, enter the no passive-interface interface command.

To return all OSPF interfaces (current and future) to active, enter the no passive-interface default command.

Parameters

default

Enter the keyworddefaultto make all OSPF interfaces (current and future) passive.

interface

Enter the following keywords and slot/port or number information:For a Gigabit Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For Port Channel groups, enter the keywordport-channelfollowed by a number:C-Seriesand S-SeriesRange: 1-128E-SeriesRange: 1-255 for TeraScaleFor a SONET interface, enter the keywordsonetfollowed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernetfollowed by the slot/port information.For a VLAN, enter the keywordvlanfollowed by a number from 1 to 4094.

Command Modes

ROUTER OSPF

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced support for Multi-Process OSPF.

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

Version 7.4.1.0

Modified to include the default keyword.

pre-Version 6.1.1.1 Introduced on E-Series

Usage Information

Although the passive interface will neither send nor receive routing updates, the network on that interface will still be included in OSPF updates sent via other interfaces.

The default keyword sets all interfaces as passive. You can then configure individual interfaces, where adjacencies are desired, using the no passive-interface interface command. The no form of this command is inserted into the configuration for individual interfaces when the no passive-interface interface command is issued while passive-interface default is configured.

This command behavior has changed as follows:

passive-interface interface

• The previous no passive-interface interface is removed from the running configuration.
• The ABR status for the router is updated.
• Save passive-interface interface into the running configuration.

passive-interface default

• All present and future OSPF interface are marked as passive.
• Any adjacency are explicitly terminated from all OSPF interfaces.
• All previous passive-interface interface commands are removed from the running configuration.
• All previous no passive-interface interface commands are removed from the running configuration.

no passive-interface interface

• Remove the interface from the passive list.
• The ABR status for the router is updated.
• If passive-interface default is specified, then save no passive-interface interface into the running configuration.

No passive-interface default

• Clear everything and revert to the default behavior.
• All previously marked passive interfaces are removed.
• May update ABR status.

redistribute

C E S

Redistribute information from another routing protocol throughout the OSPF process.

Syntax

redistribute {connected | rip | static} [metric metric-value | metric-type type-value] [route-map map-name] [tag tag-value]

To disable redistribution, use the no redistribute {connected | isis | rip | static} command.

Parameters

connected	Enter the keyword connected to specify that information from active routes on interfaces is redistributed.
rip	Enter the keyword rip to specify that RIP routing information is redistributed.
static	Enter the keyword static to specify that information from static routes is redistributed.
metric metric-value	(OPTIONAL) Enter the keyword metric followed by a number.Range: 0 (zero) to 16777214.
metric-type type-value	(OPTIONAL) Enter the keyword metric-type followed by one of the following:• 1 = OSPF External type 1• 2 = OSPF External type 2
route-map map-name	(OPTIONAL) Enter the keyword route-map followed by the name of the route map.
tag tag-value	(OPTIONAL) Enter the keyword tag followed by a number.Range: 0 to 4294967295

Defaults

Not configured.

Command Modes

ROUTER OSPF

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced support for Multi-Process OSPF.

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series

Usage Information

To redistribute the default route (0.0.0.0/0), configure the default-information originate command.

Related Commands

default-information originate Generate a default route into the OSPF routing domain.

redistribute bgp

Redistribute BGP routing information throughout the OSPF instance.

Syntax

redistribute bgp as number [metric metric-value] | [metric-type type-value] | [tag tag-value]

To disable redistribution, use the no redistribute bgp as number [metric metric-value] | [metric-type type-value] [route-map map-name] [tag tag-value] command.

Parameters

as number	Enter the autonomous system number. Range: 1 to 65535
metric metric-value	(OPTIONAL) Enter the keyword metric followed by the metric-value number. Range: 0 to 16777214

	metric-type type-value	(OPTIONAL) Enter the keyword metric-type followed by one of the following:1 = for OSPF External type 12 = for OSPF External type 2
	route-map map-name	(OPTIONAL) Enter the keyword route-map followed by the name of the route map.
	tag tag-value	(OPTIONAL) Enter the keyword tag to set the tag for routes redistributed into OSPF.Range: 0 to 4294967295
Defaults	No default behavior or values
Command Modes	ROUTER OSPF
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.3	Introduced Route Map for BGP Redistribution to OSPF
	Version 7.8.1.0 Introduced support for Multi-Process OSPF.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	Version 7.4.1.0	Modified to include the default keyword.
	pre-Version 6.1.1.1 Introduced on E-Series

redistribute isis

Redistribute IS-IS routing information throughout the OSPF instance.

Syntax

redistribute isis [tag] [level-1 | level-1-2 | level-2] [metric metric-value | metric-type type-value] [route-map map-name] [tag tag-value]

To disable redistribution, use the no redistribute isis [tag] [level-1 | level-1-2 | level-2] [metric metric-value | metric-type type-value] [route-map map-name] [tag tag-value] command.

Parameters

tag	(OPTIONAL) Enter the name of the IS-IS routing process.
level-1	(OPTIONAL) Enter the keyword level-1 to redistribute only IS-IS Level-1 routes.
level-1-2	(OPTIONAL) Enter the keyword level-1-2 to redistribute both IS-IS Level-1 and Level-2 routes.
level-2	(OPTIONAL) Enter the keyword level-2 to redistribute only IS-IS Level-2 routes.
metric metric-value	(OPTIONAL) Enter the keyword metric followed by a number.Range: 0 (zero) to 4294967295.
metric-type type-value	(OPTIONAL) Enter the keyword metric-type followed by one of the following:• 1 = for OSPF External type 1• 2 = for OSPF External type 2

	route-map map-name	(OPTIONAL) Enter the keyword route-map followed by the name of the route map.
	tag tag-value	(OPTIONAL) Enter the keyword tag followed by a number. Range: 0 to 4294967295
Defaults	Not configured.
Command Modes	ROUTER OSPF
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced support for Multi-Process OSPF.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.1 Introduced on E-Series
Usage Information	IS-IS is not supported on S-Series platforms.
router-id
C E S	Use this command to configure a fixed router ID.
Syntax	router-id ip-address
	To remove the fixed router ID, use the no router-id ip-address command.
Parameters	ip-address	Enter the router ID in the IP address format
Defaults	This command has no default behavior or values.
Command Modes	ROUTER OSPF
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced support for Multi-Process OSPF.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version6.1.1.1 Introduced on E-Series
Example	Figure 26-2. Command Example: router-id
	FTOS (conf)#router ospf 100FTOS (conf-router_ospf)#router-id 1.1.1.1Changing router-id will bring down existing OSPF adjacency [y/n]:FTOS (conf-router_ospf)#show config!router ospf 100router-id 1.1.1.1FTOS (conf-router_ospf)#no router-idChanging router-id will bring down existing OSPF adjacency [y/n]:FTOS#

Usage Information

You can configure an arbitrary value in the IP address format for each router. However, each router ID must be unique. If this command is used on an OSPF router process, which is already active (that is, has neighbors), a prompt reminding you that changing router-id will bring down the existing OSPF adjacency. The new router ID is effective at the next reload

router ospf

Enter the ROUTER OSPF mode to configure an OSPF instance.

Syntax

router ospf process-id [vrf {vrf name}]

To clear an OSPF instance, enter no router ospf process-id.

Parameters

process-id	Enter a number for the OSPF instance. Range: 1 to 65535.
vrf name	(Optional) E-Series Only: Enter the VRF process identifier to tie the OSPF instance to the VRF. All network commands under this OSPF instance are subsequently tied to the VRF instance.

Defaults

Not configured.

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on S55

Version 7.9.1.0 Introduced VRF

Version 7.8.1.0 Introduced support of Multi-Process OSPF.

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series

Example

Figure 26-3. Command Example: router ospf

FTOS (conf) #router ospf 2 FTOS (conf-router_ospf) #

Usage Information

You must have an IP address assigned to an interface to enter the ROUTER OSPF mode and configure OSPF.

Once the OSPF process and the VRF are tied together, the OSPF Process ID cannot be used again in the system.

show config

Display the non-default values in the current OSPF configuration.

Syntax

show config

Command Modes

ROUTER OSPF

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series

Example

Figure 26-4. Command Example: show config

FTOS (conf-router_ospf) #show config
!
router ospf 3
passive-interface FastEthernet 0/1
FTOS (conf-router_ospf) # 

show ip ospf

Display information on the OSPF process configured on the switch.

Syntax

show ip ospf process-id [vrf vrf name]

Parameters

process-id	Enter the OSPF Process ID to show a specific process.If no Process ID is entered, command applies only to the first OSPF process.
vrf name	E-Series Only: Show only the OSPF information tied to the VRF process.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55
Version 7.9.1.0 Introduced VRF
Version 7.9.1.0 Introduced VRF
Version 7.8.1.0 Introduced support of Multi-Process OSPF.
Version 7.8.1.0	Introducedprocess-idoption, in support of Multi-Process OSPF.
Version 7.6.1.0 Introduced on S-Series
Version 7.5.1.0 Introduced on C-Series
pre-Version 6.1.1.1 Introduced on E-Series

Usage Information

If you delete all the network area commands for Area 0, the show ip ospf command output will not list Area 0.

Example

Figure 26-5. Command Example: show ip ospf process-id

FTOS>show ip ospf 1
Routing Process ospf 1 with ID 11.1.2.1
Supports only single TOS (TOS0) routes
It is an autonomous system boundaryrouter
SPF schedule delay 0 secs, Hold time between two SPFs 5 secs
Number of area in this router is 1, normal 1 stub 0 nssa 0
Area BACKBONE (0.0.0.0)
Number of interface in this area is 2
SPF algorithm executed 4 times
Area ranges are
FTOS> 

Table 26-2. Command Output Descriptions: show ip ospf process-id

Related Commands	Line Beginning with Description
	“Routing Process...” Displays the OSPF process ID and the IP address associated with the process ID.
	“Supports only...” Displays the number of Type of Service (TOS) rouse supported.
	“SPF schedule...” Displays the delay and hold time configured for this process ID.
	“Number of...” Displays the number and type of areas configured for this process ID.
	show ip ospf database Displays information about the OSPF routes configured.
	show ip ospf interface Displays the OSPF interfaces configured.
	show ip ospf neighbor Displays the OSPF neighbors configured.
	show ip ospf virtual-links Displays the OSPF virtual links configured.

show ip ospf asbr

Display all ASBR routers visible to OSPF.

Syntax

Parameters	process-id	Enter the OSPF Process ID to show a specific process.If no Process ID is entered, command applies only to the first OSPF process.
Defaults	No default values or behavior
Command Modes	EXEC
	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced support of Multi-Process OSPF.
	Version 7.8.1.0	Introduced process-id option, in support of Multi-Process OSPF.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series and E-Series
Usage Information	Use this command to isolate problems with external routes. In OSPF, external routes are calculated by adding the LSA cost to the cost of reaching the ASBR router. If an external route does not have the correct cost, use this command to determine if the path to the originating router is correct. The display output is not sorted in any order.

Note: ASBRs that are not in directly connected areas are also displayed.

Example

Figure 26-6. Command Example: show ip ospf process-id asbr

FTOS#show ip ospf lasbr
RouterID	Flags	Cost	Nexthop	Interface	Area
3.3.3.3	-/-/-/-	2	10.0.0.2	Gi 0/1	1
1.1.1.1	E/-/-/-	0	0.0.0.0	-	0 FTOS#

You can determine if an ASBR is in a directly connected area (or not) by the flags. For ASBRs in a directly connected area, E flags are set. In the figure above, router 1.1.1.1 is in a directly connected area since the Flag is E/-/-/. For remote ASBRs, the E flag is clear (-/-/-/)

show ip ospf database

Display all LSA information. If OSPF is not enabled on the switch, no output is generated.

Syntax

show ip ospf process-id database [database-summary]

Parameters	process-id	Enter the OSPF Process ID to show a specific process.If no Process ID is entered, command applies only to the first OSPF process.
	database-summary	(OPTIONAL) Enter the keywordsdatabase-summaryto the display the number of LSA types in each area and the total number of LSAs.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced support of Multi-Process OSPF.

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series

Example

Figure 26-7. Command Example: show ip ospf process-id database

OSPF Router with ID (11.1.2.1) (Process ID 1)
	Router (Area 0.0.0.0)
Link ID	ADV Router	Age	Seq#	Checksum	Link count
11.1.2.1	11.1.2.1	673	0x80000005	0x707e	2
13.1.1.1	13.1.1.1	676	0x80000097	0x1035	2
192.68.135.2	192.68.135.2	1419	0x80000294	0x9cbd	1
	Network (Area 0.0.0.0)
Link ID	ADV Router	Age	Seq#	Checksum
10.2.3.2	13.1.1.1	676	0x80000003	0x6592
10.2.4.2	192.68.135.2	908	0x80000055	0x683e
	Type-5 AS External
Link ID	ADV Router	Age	Seq#	Checksum	Tag
0.0.0.0	192.68.135.2	908	0x80000052	0xeb83	100
1.1.1.1	192.68.135.2	908	0x8000002a	0xbd27	0
10.1.1.0	11.1.2.1	718	0x80000002	0x9012	0
10.1.2.0	11.1.2.1	718	0x80000002	0x851c	0
10.2.2.0	11.1.2.1	718	0x80000002	0x7927	0
10.2.3.0	11.1.2.1	718	0x80000002	0x6e31	0
10.2.4.0	13.1.1.1	1184	0x80000068	0x45db	0
11.1.1.0	11.1.2.1	718	0x80000002	0x831e	0
11.1.2.0	11.1.2.1	718	0x80000002	0x7828	0
12.1.2.0	192.68.135.2	1663	0x80000054	Oxd8d6	0
13.1.1.0	13.1.1.1	1192	Ox800006b	Ox2718	O
13.1.2.0	13.1.1.1	1184	Ox800006b	Oxlc22	O
172.16.1.0 FTOS>	13.1.1.1	148	Ox800006d	Ox533b	O

Table 26-3. Command Output Description: show ip ospf process-id database

Field Description
Link ID Identifies the router ID.
ADV Router Identifies the advertising router's ID.
Age Displays the link state age.
Seq# Identifies the link state sequence number. This number enables you to identify old or duplicate link state advertisements.
Checksum Displays the Fletcher checksum of an LSA's complete contents.
Link count Displays the number of interfaces for that router.

Related Commands

show ip ospf database asbr-summary Displays only ASBR summary LSA information.

show ip ospf database asbr-summary

Display information about AS Boundary LSAs.

Syntax

show ip ospf process-id database asbr-summary [link-state-id] [adv-router ip-address]

Parameters

process-id	Enter the OSPF Process ID to show a specific process.If no Process ID is entered, command applies only to the first OSPF process.
link-state-id	(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value depends on the LSA type, and it can be one of the following:the network’s IP address for Type 3 LSAs or Type 5 LSAsthe router’s OSPF router ID for Type 1 LSAs or Type 4 LSAsthe default destination (0.0.0.0) for Type 5 LSAs
adv-routerip-address	(OPTIONAL) Enter the keywords adv-router ip-address to display only the LSA information about that router.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced support of Multi-Process OSPF.

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series

Example

Figure 26-8. Command Example: show ip ospf database asbr-summary (Partial)

FTOS#show ip ospf 100 database asbr-summary
OSPF Router with ID (1.1.1.10) (Process ID 100)
Summary Asbr (Area 0.0.0.0)

LS age: 1437
Options: (No TOS-capability, No DC, E)
LS type: Summary Asbr
Link State ID: 103.1.50.1
Advertising Router: 1.1.1.10
LS Seq Number: 0x8000000f
Checksum: 0x8221
Length: 28
Network Mask: /0
TOS: 0 Metric: 2

LS age: 473
Options: (No TOS-capability, No DC, E)
LS type: Summary Asbr
Link State ID: 104.1.50.1
Advertising Router: 1.1.1.10
LS Seq Number: 0x80000010
Checksum: 0x4198
Length: 28
--More-- 

Table 26-4. Command Output Descriptions: show ip ospf database asbr-summary

Item Description
LS Age Displays the LSA's age.
Options Displays the optional capabilities available on router. The following options can be found in this item:• TOS-capability or No TOS-capability is displayed depending on whether the router can support Type of Service.• DC or No DC is displayed depending on whether the originating router can support OSPF over demand circuits.• E or No E is displayed on whether the originating router can accept AS External LSAs.
LS Type Displays the LSA's type.
Link State ID Displays the Link State ID.
Advertising Router Identifies the advertising router's ID.
Checksum Displays the Fletcher checksum of the an LSA's complete contents.
Length Displays the length in bytes of the LSA.
Network Mask Displays the network mask implemented on the area.
TOS	Displays the Type of Service (TOS) options. Option 0 is the only option.
Metric	Displays the LSA metric.

Related Commands

show ip ospf database

Displays OSPF database information.

show ip ospf database external

Display information on the AS external (type 5) LSAs.

Syntax

show ip ospf process-id database external [link-state-id] [adv-router ip-address]

Parameters

process-id	Enter the OSPF Process ID to show a specific process.If no Process ID is entered, command applies only to the first OSPF process.
link-state-id	(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value depends on the LSA type, and it can be one of the following:the network’s IP address for Type 3 LSAs or Type 5 LSAsthe router’s OSPF router ID for Type 1 LSAs or Type 4 LSAsthe default destination (0.0.0.0) for Type 5 LSAs
adv-routerip-address	(OPTIONAL) Enter the keywords adv-router ip-address to display only the LSA information about that router.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced support of Multi-Process OSPF.

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series

Example

Figure 26-9. Command Example: show ip ospf database external

FTOS#show ip ospf 1 database external
OSPF Router with ID (20.20.20.5) (Process ID 1)
Type-5 AS External
LS age: 612
Options: (No TOS-capability, No DC, E)
LS type: Type-5 AS External
Link State ID: 12.12.12.2
Advertising Router: 20.31.3.1
LS Seq Number: 0x80000007
Checksum: 0x4code
Length: 36
Network Mask: /32
Metrics Type: 2
TOS: 0
Metrics: 25
Forward Address: 0.0.0.0
External Route Tag: 43
LS age: 1868
Options: (No TOS-capability, DC)
LS type: Type-5 AS External
Link State ID: 24.216.12.0
Advertising Router: 20.20.20.8
LS Seq Number: 0x80000005
Checksum: 0xa00e
Length: 36
Network Mask: /24
Metrics Type: 2
TOS: 0
Metrics: 1
Forward Address: 0.0.0.0
External Route Tag: 701
FTOS# 

Table 26-5. Command Example Descriptions: show ip ospf process-id database external

Item Description
LS Age Displays the LSA age.
Options Displays the optional capabilities available on router. The following options can be found in this item:• TOS-capability or No TOS-capability is displayed depending on whether the router can support Type of Service.• DC or No DC is displayed depending on whether the originating router can support OSPF over demand circuits.• E or No E is displayed on whether the originating router can accept AS External LSAs.
LS Type Displays the LSA’s type.
Link State ID Displays the Link State ID.

Table 26-5. Command Example Descriptions: show ip ospf process-id database external

Item Description
Advertising Router Identifies the router ID of the LSA’s originating router.
LS Seq Number Identifies the link state sequence number. This number enables you to identify old or duplicate LSAs.
Checksum Displays the Fletcher checksum of an LSA’s complete contents.
Length Displays the length in bytes of the LSA.
Network Mask Displays the network mask implemented on the area.
Metrics Type Displays the external type.
TOS Displays the TOS options. Option 0 is the only option.
Metrics Displays the LSA metric.
Forward Address Identifies the address of the forwarding router. Data traffic is forwarded to this router. If the forwarding address is 0.0.0.0, data traffic is forwarded to the originating router.
External Route Tag Displays the 32-bit field attached to each external route. This field is not used by the OSPF protocol, but can be used for external route management.

Related Commands

show ip ospf database Displays OSPF database information.

show ip ospf database network

Display the network (type 2) LSA information.

Syntax

show ip ospf process-id database network [link-state-id] [adv-router ip-address]

Parameters

process-id	Enter the OSPF Process ID to show a specific process.If no Process ID is entered, command applies only to the first OSPF process.
link-state-id	(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value depends on the LSA type, and it can be one of the following:the network’s IP address for Type 3 LSAs or Type 5 LSAsthe router’s OSPF router ID for Type 1 LSAs or Type 4 LSAsthe default destination (0.0.0.0) for Type 5 LSAs
adv-routerip-address	(OPTIONAL) Enter the keywords adv-router ip-address to display only the LSA information about that router.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0	Introduced on S55
Version 7.8.1.0	Introduced support of Multi-Process OSPF.
Version 7.6.1.0	Introduced on S-Series
Version 7.5.1.0	Introduced on C-Series
pre-Version 6.1.1.1	Introduced on E-Series

Example

Figure 26-10. Command Example: show ip ospf process-id database network

Table 26-6. Command Example Descriptions: show ip ospf process-id database network

Item Description
LS Age Displays the LSA age.
Options Displays the optional capabilities available on router. The following options can be found in this item:• TOS-capability or No TOS-capability is displayed depending on whether the router can support Type of Service.• DC or No DC is displayed depending on whether the originating router can support OSPF over demand circuits.• E or No E is displayed on whether the originating router can accept AS External LSAs.
LS Type Displays the LSA's type.
Link State ID Displays the Link State ID.
Advertising Router Identifies the router ID of the LSA's originating router.
Checksum Identifies the link state sequence number. This number enables you to identify old or duplicate LSAs.
Length Displays the Fletcher checksum of an LSA's complete contents.
Network Mask Displays the length in bytes of the LSA.
Attached Router Identifies the IP address of routers attached to the network.

show ip ospf database nssa-external

Display NSSA-External (type 7) LSA information.

Syntax
show ip ospf database nssa-external [link-state-id] [adv-router ip-address]

Parameters	link-state-id	(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value depends on the LSA type, and it can be one of the following:the network’s IP address for Type 3 LSAs or Type 5 LSAsthe router’s OSPF router ID for Type 1 LSAs or Type 4 LSAsthe default destination (0.0.0.0) for Type 5 LSAs
	adv-routerip-address	(OPTIONAL) Enter the keywords adv-routerip-address to display only the LSA information about that router.
Command Modes	EXEC
	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced support of Multi-Process OSPF.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.1 Introduced on E-Series
Related Commands	show ip ospf database Displays OSPF database information.

show ip ospf database opaque-area

Display the opaque-area (type 10) LSA information.

Syntax
show ip ospf process-id database opaque-area [link-state-id] [adv-router ip-address]

Parameters	process-id	Enter the OSPF Process ID to show a specific process.If no Process ID is entered, command applies only to the first OSPF process.
	link-state-id	(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value depends on the LSA type, and it can be one of the following:the network’s IP address for Type 3 LSAs or Type 5 LSAsthe router’s OSPF router ID for Type 1 LSAs or Type 4 LSAsthe default destination (0.0.0.0) for Type 5 LSAs
	adv-routerip-address	(OPTIONAL) Enter the keywords adv-router ip-address to display only the LSA information about that router.

Command Modes

EXEC

EXEC Privilege

Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced support of Multi-Process OSPF.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.1 Introduced on E-Series

Example

Figure 26-11. Command Example: show ip ospf process-id database opaque-area (Partial)

FTOS>show ip ospf 1 database opaque-area
OSPF Router with ID (3.3.3.3) (Process ID 1)
Type-10 Opaque Link Area (Area 0)
LS age: 1133
Options: (No TOS-capability, No DC, E)
LS type: Type-10 Opaque Link Area
Link State ID: 1.0.0.1
Advertising Router: 10.16.1.160
LS Seq Number: 0x80000416
Checksum: 0x376
Length: 28
Opaque Type: 1
Opaque ID: 1
Unable to display opaque data
LS age: 833
Options: (No TOS-capability, No DC, E)
LS type: Type-10 Opaque Link Area
Link State ID: 1.0.0.2
Advertising Router: 10.16.1.160
LS Seq Number: 0x80000002
Checksum: 0x19c2
--More-- 

Table 26-7. Command Example Descriptions: show ip ospf process-id database opaque-area

Item	Description
LS Age Displays the LSA’s age.
Options Displays the optional capabilities available on router. The following options can be found in this item:• TOS-capability or No TOS-capability is displayed depending on whether the router can support Type of Service.• DC or No DC is displayed depending on whether the originating router can support OSPF over demand circuits.• E or No E is displayed on whether the originating router can accept AS External LSAs.
LS Type Displays the LSA’s type.
Link State ID Displays the Link State ID.
Advertising Router Identifies the advertising router’s ID.
Checksum Displays the Fletcher checksum of the an LSA’s complete contents.
Length Displays the length in bytes of the LSA.

Table 26-7. Command Example Descriptions: show ip ospf process-id database opaque-area

Item	Description
Opaque Type Displays the Opaque type field (the first 8 bits of the Link State ID).
Opaque ID Displays the Opaque type-specific ID (the remaining 24 bits of the Link State ID).

Related Commands

show ip ospf database Displays OSPF database information.

process-id	Enter the OSPF Process ID to show a specific process.If no Process ID is entered, command applies only to the first OSPF process.
link-state-id	(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value depends on the LSA type, and it can be one of the following:the network’s IP address for Type 3 LSAs or Type 5 LSAsthe router’s OSPF router ID for Type 1 LSAs or Type 4 LSAsthe default destination (0.0.0.0) for Type 5 LSAs
adv-routerip-address	(OPTIONAL) Enter the keywords adv-router ip-address to display only the LSA information about that router.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced support of Multi-Process OSPF.

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series

Related Commands

show ip ospf database Displays OSPF database information.

show ip ospf database opaque-link

Display the opaque-link (type 9) LSA information.

Syntax

show ip ospf process-id database opaque-link [link-state-id] [adv-router ip-address]

Parameters	process-id	Enter the OSPF Process ID to show a specific process.If no Process ID is entered, command applies only to the first OSPF process.
	link-state-id	(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value depends on the LSA type, and it can be one of the following:the network's IP address for Type 3 LSAs or Type 5 LSAsthe router's OSPF router ID for Type 1 LSAs or Type 4 LSAsthe default destination (0.0.0.0) for Type 5 LSAs
	adv-routerip-address	(OPTIONAL) Enter the keyword adv-router followed by the IP address of an Advertising Router to display only the LSA information about that router.
Command Modes	EXEC
	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced support of Multi-Process OSPF.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.1 Introduced on E-Series
Related Commands	show ip ospf database Displays OSPF database information.

show ip ospf database router

Display the router (type 1) LSA information.

Syntax
show ip ospf process-id database router [link-state-id] [adv-router ip-address]

Parameters	process-id	Enter the OSPF Process ID to show a specific process.If no Process ID is entered, command applies only to the first OSPF process.
	link-state-id	(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value depends on the LSA type, and it can be one of the following:the network’s IP address for Type 3 LSAs or Type 5 LSAsthe router’s OSPF router ID for Type 1 LSAs or Type 4 LSAsthe default destination (0.0.0.0) for Type 5 LSAs
	adv-routerip-address	(OPTIONAL) Enter the keywords adv-router ip-address to display only the LSA information about that router.
Command Modes	EXEC
	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced support of Multi-Process OSPF.
	Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series

Example

Figure 26-12. Command Example: show ip ospf process-id database router (Partial)

FTOS#show ip ospf 100 database router
OSPF Router with ID (1.1.1.10) (Process ID 100)
Router (Area 0)

LS age: 967
Options: (No TOS-capability, No DC, E)
LS type: Router
Link State ID: 1.1.1.10
Advertising Router: 1.1.1.10
LS Seq Number: 0x8000012f
Checksum: 0x3357
Length: 144
AS Boundary Router
Area Border Router
Number of Links: 10

Link connected to: a Transit Network
(Link ID) Designated Router address: 192.68.129.1
(Link Data) Router Interface address: 192.68.129.1
Number of TOS metric: 0
TOS 0 Metric: 1

Link connected to: a Transit Network
(Link ID) Designated Router address: 192.68.130.1
(Link Data) Router Interface address: 192.68.130.1
Number of TOS metric: 0
TOS 0 Metric: 1

Link connected to: a Transit Network
(Link ID) Designated Router address: 192.68.142.2
(Link Data) Router Interface address: 192.68.142.2
Number of TOS metric: 0
TOS 0 Metric: 1

Link connected to: a Transit Network
(Link ID) Designated Router address: 192.68.141.2
(Link Data) Router Interface address: 192.68.141.2
Number of TOS metric: 0
TOS 0 Metric: 1

Link connected to: a Transit Network
(Link ID) Designated Router address: 192.68.140.2
(Link Data) Router Interface address: 192.68.140.2
Number of TOS metric: 0
TOS 0 Metric: 1

Link connected to: a Stub Network
(Link ID) Network/subnet number: 11.1.5.0
--More-- 

Table 26-8. Command Example Descriptions: show ip ospf process-id database router

Item Description
LS Age Displays the LSA age.
Options Displays the optional capabilities available on router. The following options can be found in this item:• TOS-capability or No TOS-capability is displayed depending on whether the router can support Type of Service.• DC or No DC is displayed depending on whether the originating router can support OSPF over demand circuits.• E or No E is displayed on whether the originating router can accept AS External LSAs.
LS Type Displays the LSA type.
Link State ID Displays the Link State ID.
Advertising Router Identifies the router ID of the LSA's originating router.
LS Seq Number Displays the link state sequence number. This number detects duplicate or old LSAs.
Checksum Displays the Fletcher checksum of an LSA's complete contents.
Length Displays the length in bytes of the LSA.
Number of Links Displays the number of active links to the type of router (Area Border Router or AS Boundary Router) listed in the previous line.
Link connected to: Identifies the type of network to which the router is connected.
(Link ID)	Identifies the link type and address.
(Link Data)	Identifies the router interface address.
Number of TOS Metric	Lists the number of TOS metrics.
TOS 0 Metric	Lists the number of TOS 0 metrics.

Related Commands

show ip ospf database

Displays OSPF database information.

show ip ospf database summary

Display the network summary (type 3) LSA routing information.

Syntax

show ip ospf process-id database summary [link-state-id] [adv-router ip-address]

Parameters

process-id

Enter the OSPF Process ID to show a specific process.

If no Process ID is entered, command applies only to the first OSPF process.

link-state-id	(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value depends on the LSA type, and it can be one of the following:the network’s IP address for Type 3 LSAs or Type 5 LSAsthe router’s OSPF router ID for Type 1 LSAs or Type 4 LSAsthe default destination (0.0.0.0) for Type 5 LSAs
adv-routerip-address	(OPTIONAL) Enter the keywords adv-router ip-address to display only the LSA information about that router.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced support of Multi-Process OSPF.

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series

Example

Figure 26-13. Command Example: show ip ospf process-id database summary

FTOS#show ip ospf 100 database summary
OSPF Router with ID (1.1.1.10) (Process ID 100)
Summary Network (Area 0.0.0.0)

LS age: 1551
Options: (No TOS-capability, DC, E)
LS type: Summary Network
Link State ID: 192.68.16.0
Advertising Router: 192.168.17.1
LS Seq Number: 0x80000054
Checksum: 0xb5a2
Length: 28
Network Mask: /24
TOS: 0 Metric: 1

LS age: 9
Options: (No TOS-capability, No DC, E)
LS type: Summary Network
Link State ID: 192.68.32.0
Advertising Router: 1.1.1.10
LS Seq Number: 0x80000016
Checksum: 0x987c
Length: 28
Network Mask: /24
TOS: 0 Metric: 1

LS age: 7
Options: (No TOS-capability, No DC, E)
LS type: Summary Network
Link State ID: 192.68.33.0
Advertising Router: 1.1.1.10
LS Seq Number: 0x80000016
Checksum: 0x1241
Length: 28
Network Mask: /26
TOS: 0 Metric: 1

FTOS# 

Table 26-9. Command Example Descriptions: show ip ospf process-id database summary

Items Description
LS Age Displays the LSA	A age.
Options Displays the optional capabilities available on router. The following options can be found in this item:• TOS-capability or No TOS-capability is displayed depending on whether the router can support Type of Service.• DC or No DC is displayed depending on whether the originating router can support OSPF over demand circuits.• E or No E is displayed on whether the originating router can accept AS External LSAs.
LS Type Displays the LSA's type.
Link State ID Displays the Link State ID.
Advertising Router Identifies the router ID of the LSA's originating router.
LS Seq Number Identifies the link state sequence number. This number enables you to identify old or duplicate LSAs.
Checksum Displays the Fletcher checksum of an LSA's complete contents.
Length Displays the length in bytes of the LSA.
Network Mask Displays the network mask implemented on the area.
TOS	Displays the TOS options. Option 0 is the only option.
Metric Displays the LSA metrics.

Related Commands

show ip ospf database

Displays OSPF database information.

show ip ospf interface

Display the OSPF interfaces configured. If OSPF is not enabled on the switch, no output is generated.

Syntax

show ip ospf process-id interface [interface]

Parameters

process-id

Enter the OSPF Process ID to show a specific process.If no Process ID is entered, command applies only to the first OSPF process.

interface

(OPTIONAL) Enter the following keywords and slot/port or number information:For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.For the null interface, enter the keywordnull followed by zero (0).For loopback interfaces, enter the keywordloopback followed by a number from 0 to 16383.For Port Channel groups, enter the keywordport-channel followed by a number:C-Series and S-Series Range: 1-128E-Series Range: 1-255 for TeraScaleFor a SONET interface, enter the keywordsonet followed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernet followed by the slot/port information.For a VLAN, enter the keywordvlan followed by the VLAN ID. The range is from 1 to 4094.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55
Version 7.8.1.0	Introducedprocess-idoption, in support of Multi-Process OSPF.
Version 7.6.1.0 Introduced on S-Series
Version 7.5.1.0 Introduced on C-Series
pre-Version 6.1.1.1 Introduced on E-Series

Example

Figure 26-14. Command Example: show ip ospf process-id interface

FTOS>show ip ospf int

GigabitEthernet 13/17 is up, line protocol is up
    Internet Address 192.168.1.2/30, Area 0.0.0.1
    Process ID 1, Router ID 192.168.253.2, Network Type BROADCAST, Cost: 1
    Transmit Delay is 1 sec, State DR, Priority 1
    Designated Router (ID) 192.168.253.2, Interface address 192.168.1.2
    Backup Designated Router (ID) 192.168.253.1, Interface address 192.168.1.1
    Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
    Hello due in 00:00:02
    Neighbor Count is 1, Adjacent neighbor count is 1
    Adjacent with neighbor 192.168.253.1 (Backup Designated Router)

GigabitEthernet 13/23 is up, line protocol is up
    Internet Address 192.168.0.1/24, Area 0.0.0.1
    Process ID 1, Router ID 192.168.253.2, Network Type BROADCAST, Cost: 1
    Transmit Delay is 1 sec, State DROTHER, Priority 1
    Designated Router (ID) 192.168.253.5, Interface address 192.168.0.4
    Backup Designated Router (ID) 192.168.253.3, Interface address 192.168.0.2
    Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
    Hello due in 00:00:08
    Neighbor Count is 3, Adjacent neighbor count is 2
    Adjacent with neighbor 192.168.253.5 (Designated Router)
    Adjacent with neighbor 192.168.253.3 (Backup Designated Router)

Loopback 0 is up, line protocol is up
    Internet Address 192.168.253.2/32, Area 0.0.0.1
    Process ID 1, Router ID 192.168.253.2, Network Type LOOPBACK, Cost: 1
Loopback interface is treated as a stub Host.
FTOS> 

Table 26-10. Command Example Descriptions: show ip ospf process-id interface

Line beginning with Description
GigabitEthernet... This line id	identifies the interface type slot/port and the status of the OSPF protocol on that interface.
Internet Address... This line	displays the IP address, network mask and area assigned to this interface.
Process ID... This line displays	the OSPF Process ID, Router ID, Network type and cost metric for this interface.
Transmit Delay... This line d	displays the interface's settings for Transmit Delay, State, and Priority.In the State setting, BDR is Backup Designated Router.
Designated Router... This line	displays the ID of the Designated Router and its interface address.
Backup Designated... This line	displays the ID of the Backup Designated Router and its interface address.
Timer intervals... This line	displays the interface's timer settings for Hello interval, Dead interval, Transmit Delay (Wait), and Retransmit Interval.
Hello due... This line displays	the amount time till the next Hello packet is sent out this interface.
Neighbor Count... This line	displays the number of neighbors and adjacent neighbors. Listed below this line are the details about each adjacent neighbor.

show ip ospf neighbor

Display the OSPF neighbors connected to the local router.

Syntax show ip ospf process-id neighbor

Parameters	process-id	Enter the OSPF Process ID to show a specific process.If no Process ID is entered, command applies only to the first OSPF process.
Command Modes	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced support of Multi-Process OSPF.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.1 Introduced on E-Series

Example

Figure 26-15. Command Example: show ip ospf process-id neighbor

FTOS#show ip ospf 34 neighbor
Neighbor ID	Pri	State	Dead Time	Address	Interface Area
20.20.20.7	1	FULL/DR	00:00:32	182.10.10.3	Gi 0/0	0.0.0.2
192.10.10.2	1	FULL/DR	00:00:37	192.10.10.2	Gi 0/1	0.0.0.1
20.20.20.1	1	FULL/DROTHER	00:00:36	192.10.10.4	Gi 0/1	0.0.0.1
FTOS#

Table 26-11. Command Example Descriptions: show ip ospf process-id neighbor

Row Heading Description
Neighbor ID Displays the neighbor router ID.
Pri Displays the priority assigned neighbor.
State Displays the OSPF state of the neighbor.
Dead Time Displays the expected time until FTOS declares the neighbor dead.
Address Displays the IP address of the neighbor.
Interface Displays the interface type slot/port information.
Area Displays the neighbor's area (process ID).

show ip ospf routes

Display routes as calculated by OSPF and stored in OSPF RIB.

Syntax show ip ospf process-id routes

Parameters

process-id

Enter the OSPF Process ID to show a specific process.If no Process ID is entered, command applies only to the first OSPF process.

Defaults No default values or behavior

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced support of Multi-Process OSPF.

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series and E-Series

Usage Information

This command is useful in isolating routing problems between OSPF and RTM. For example, if a route is missing from the RTM/FIB but is visible from the display output of this command, then likely the problem is with downloading the route to the RTM.

This command has the following limitations:

• The display output is sorted by prefixes; intra-area ECMP routes are not displayed together.
• For Type 2 external routes, type1 cost is not displayed.

Example

Figure 26-16. Command Example: show ip ospf process-id routes

FTOS#show ip ospf 100 route
Prefix	Cost	Nexthop	Interface	Area	Type
1.1.1.1	1	0.0.0.0	Lo 0	0	Intra-Area
3.3.3.3	2	13.0.0.3	Gi 0/47	1	Intra-Area
13.0.0.0	1	0.0.0.0	Gi 0/47	0	Intra-Area
150.150.150.0	2	13.0.0.3	Gi 0/47	-	External
172.30.1.0	2	13.0.0.3	Gi 0/47	1	Intra-Area
FTOS#

show ip ospf statistics

Display OSPF statistics.

Syntax

show ip ospf process-id statistics global | [interface name {neighbor router-id}]

Parameters

process-id	Enter the OSPF Process ID to show a specific process.If no Process ID is entered, command applies only to the first OSPF process.
global	Enter the keyword global to display the packet counts received on all running OSPF interfaces and packet counts received and transmitted by all OSPF neighbors.

interface name

(OPTIONAL) Enter the keywordinterfacefollowed by one of the following interface keywords and slot/port or number information:For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernet followed by the slot/port information.For Port Channel groups, enter the keywordport-channelfollowed by a number:C-Series and S-Series Range: 1-128E-Series Range: 1-255 for TeraScaleFor a SONET interface, enter the keywordsonetfollowed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernetfollowed by the slot/port information.For a VLAN, enter the keywordvlanfollowed by a number from 1 to 4094.

neighbor router-id

(OPTIONAL) Enter the keywordneighborfollowed by the neighbor's router-id in dotted decimal format (A.B.C.D.).

Defaults

No default behavior or values

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced support of Multi-Process OSPF.

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

Version 7.4.1.0 Introduced on E-Series

Example

Figure 26-17. Command Example: show ip ospf process-id statistics global

OSPF Packet Count
	Total	Error	Hello	DDiscr	LSReq	LSUpd LSAck
RX	10	0	8	2	0	0 0
TX	10	0	10	0	0	0 0
OSPF Global Queue Length
		TxQ-Len	RxQ-Len		Tx-Mark	Rx-Mark
Hello-Q		0	0		0	2
LSR-Q		0	0		0	0
Other-Q		0	0		0	0
Error packets (Only for RX)
Intf-Down		0 Non-Dr			0 Self-Org
Wrong-Len		0 Invld-Nbr			0 Nbr-State
Auth-Err		0 MD5-Err			0 Chksum
Version		0 AreaMis			0 Conf-Issues
No-Buffer		0 Seq-No			0 Socket
Q-OverFlow		0 Unkown-Pkt			0
Error packets (Only for TX)
Socket Errors FTOS# 0

Table 26-12. Command Example Descriptions: show ip ospf statistics process-id global

Row Heading Description
Total Displays the	total number of packets received/transmitted by the OSPF process
Error Displays the	error count while receiving and transmitting packets by the OSPF process
Hello Number of	OSPF Hello packets
DDiscr Number of	database description packets
LSReq Number of	link state request packets
LSUpd Number of	link state update packets
LSAck Number of	link state acknowledgement packets
TxQ-Len The transmission queue length
RxQ-Len The reception queue length
Tx-Mark The highest number mark in the transmission queue
Rx-Mark The highest number mark in the reception queue
Hello-Q The queue, for transmission or reception, for the hello packets
LSR-Q The queue, for transmission or reception, for the link state request packets.
Other-Q The queue, for transmission or reception, for the link state acknowledgement, database description, and update packets.

Table 26-13. Error Definitions: show ip ospf statistics process-id global

Error Type	Description
Intf_Down	Received packets on an interface that is either down or OSPF is not enabled.
Non-Dr	Received packets with a destination address of ALL_DRS even though SELF is not a designated router
Self-Org	Receive the self originated packet
Wrong_Len	The received packet length is different to what was indicated in the OSPF header
Invld-Nbr	LSA, LSR, LSU, and DDB are received from a peer which is not a neighbor peer
Nbr-State	LSA, LSR, and LSU are received from a neighbor with stats less than the loading state
Auth-Error	Simple authentication error
MD5-Error	MD5 error
Cksum-Err	Checksum Error
Version	Version mismatch
AreaMismatch	Area mismatch
Conf-Issue	The received hello packet has a different hello or dead interval than the configuration
No-Buffer	Buffer allocation failure
Seq-no A sequence	no errors occurred during the database exchange process
Socket	Socket Read/Write operation error

Table 26-13. Error Definitions: show ip ospf statistics process-id global

Error Type Description

Q-overflow Packet(s) dropped due to queue overflow

Unknown-Pkt Received packet is not an OSPF packet

The show ip ospf process-id statistics command displays the error packet count received on each interface as:

• The hello-timer remaining value for each interface
• The wait-timer remaining value for each interface
• The grace-timer remaining value for each interface
• The packet count received and transmitted for each neighbor
• Dead timer remaining value for each neighbor
• Transmit timer remaining value for each neighbor
  • The LSU Q length and its highest mark for each neighbor
• The LSR Q length and its highest mark for each neighbor

Example

Figure 26-18. Command Example: show ip ospf process-id statistics

FTOS#show ip ospf 100 statistics
Interface GigabitEthernet 0/8
Hello-Timer 9, Wait-Timer 0, Grace-Timer 0 Error packets (Only for RX)
Intf-Down	0	Non-Dr	0	Self-Org	0
Wrong-Len	0	Invld-Nbr	0	Nbr-State	0
Auth-Error	0	MD5-Error	0	Cksum-Err	0
Version	0	AreaMisMatch	0	Conf-Issue	0
SeqNo-Err	0	Unkown-Pkt	0
Neighbor ID 9.1.1.2
	Hello	DDiscr	LSReq	LSUpd	LSAck
RX	59	3	1	1	1
TX	62	2	1	0	0
Dead-Timer		37, Transmit-Timer		0
LSU-Q-Len		0, LSU-Q-Wmark		0
LSR-Q-Len		0, LSR-Q-Wmark		1

Related Commands

clear ip ospf statistics Clear the packet statistics in all interfaces and neighbors

show ip ospf topology

Display routers in directly connected areas.

Syntax

show ip ospf process-id topology

Parameters

process-id	Enter the OSPF Process ID to show a specific process.
	If no Process ID is entered, command applies only to the first OSPF process.

Defaults

No default values or behavior

Command Modes	EXEC
	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced support of Multi-Process OSPF.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series and E-Series
Usage Information	This command can be used to isolate problems with inter-area and external routes. In OSPF inter-area and external routes are calculated by adding LSA cost to the cost of reaching the router. If an inter-area or external route is not of correct cost, the display can determine if the path to the originating router is correct or not.

Example

Figure 26-19. Command Example: show ip ospf process-id topology

FTOS#show ip ospf 1 topology
Router ID	Flags	Cost	Nexthop	Interface	Area
3.3.3.3	E/B/-/	1	20.0.0.3	Gi 13/1	0
1.1.1.1	E/-/-/	1	10.0.0.1	Gi 7/1	1
FTOS#

show ip ospf virtual-links

Display the OSPF virtual links configured and is useful for debugging OSPF routing operations. If no OSPF virtual-links are enabled on the switch, no output is generated.

Syntax show ip ospf process-id virtual-links

Parameters	process-id	Enter the OSPF Process ID to show a specific process.If no Process ID is entered, command applies only to the first OSPF process.
Command Modes	EXEC
	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced support of Multi-Process OSPF.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.1 Introduced on E-Series

Example

Figure 26-20. Command Example: show ip ospf process-id virtual-links

FTOS#show ip ospf 1 virt
Virtual Link to router 192.168.253.5 is up
Run as demand circuit
Transit area 0.0.0.1, via interface GigabitEthernet 13/16, Cost of using 2
Transmit Delay is 1 sec, State POINT_TO_POINT,
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
Hello due in 00:00:02
FTOS# 

Table 26-14. Command Example Descriptions: show ip ospf process-id virtual-links

Items Description
“Virtual Link...” This line specifies the	OSPF neighbor to which the virtual link was created and the link’s status.
“Run as...” This line states the nature	of the virtual link.
“Transit area...” This line identifies the	area through which the virtual link was created, the interface used, and the cost assigned to that link.
“Transmit Delay...” This line displays	the transmit delay assigned to the link and the State of the OSPF neighbor.
“Timer intervals...” This line displays	the timer values assigned to the virtual link. The timers are Hello is hello-interval, Dead is dead-interval, Wait is transmit-delay, and Retransmit is retransmit-interval.
“Hello due...” This line displays the	amount of time until the next Hello packet is expected from the neighbor router.
“Adjacency State...” This line displays	the adjacency state between neighbors.

summary-address

Set the OSPF ASBR to advertise one external route.

Syntax

summary-address ip-address mask [not-advertise] [tag tag-value]

To disable summary address, use the no summary-address ip-address mask command.

Parameters

ip-address	Specify the IP address in dotted decimal format of the address to be summarized.
mask	Specify the mask in dotted decimal format of the address to be summarized.
not-advertise	(OPTIONAL) Enter the keyword not-advertise to suppress that match the network prefix/mask pair.
tag tag-value	(OPTIONAL) Enter the keyword tag followed by a value to match on routes redistributed through a route map.Range: 0 to 4294967295

Defaults

Not configured.

Command Modes

ROUTER OSPF

Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced support of Multi-Process OSPF.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.1 Introduced on E-Series
Usage Information	The command area range summarizes routes for the different areas.
	With "not-advertise" parameter configured, this command can be used to filter out some external routes. For example, you want to redistribute static routes to OSPF, but you don't want OSPF to advertise routes with prefix 1.1.0.0. Then you can configure summary-address 1.1.0.0 255.255.0.0 not-advertise to filter out all the routes fall in range 1.1.0.0/16.
Related Commands	area range Summarizes routes within an area.
timers spf
C E S	Set the time interval between when the switch receives a topology change and starts a shortest path first (SPF) calculation.
Syntax	timers spf delay holdtime
	To return to the default, enter no timers spf.
Parameters	delay	Enter a number as the delay.Range: 0 to 4294967295.Default: 5 seconds
	holdtime	Enter a number as the hold time.Range: 0 to 4294967295.Default: 10 seconds.
Defaults	delay = 5 seconds; holdtime = 10 seconds
Command Modes	ROUTER OSPF
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced support of Multi-Process OSPF.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.1 Introduced on E-Series
	Setting the delay and holdtime parameters to a low number enables the switch to switch to an alternate path quickly but requires more CPU usage.

PIM-Sparse Mode (PIM-SM)

Overview

The platforms on which a command is supported is indicated by the character — E for the E-Series, C for the C-Series, and S for the S-Series — that appears below each command heading.

This chapter contains the following sections:

• IPv4 PIM-Sparse Mode Commands

IPv4 PIM-Sparse Mode Commands

The IPv4 PIM-Sparse Mode (PIM-SM) commands are:

• clear ip pim rp-mapping
• clear ip pim tib
• debug ip pim
• ip pim bsr-border
• ip pim bsr-candidate
• ip pim dr-priority
• ip pim graceful-restart
• ip pim join-filter
• ip pim neighbor-filter
• ip pim query-interval
• ip pim register-filter
• ip pim rp-address
• ip pim rp-candidate
• ip pim sparse-mode
• ip pim sparse-mode sg-expiry-timer
• ip pim spt-threshold
  • show ip pim bsr-router
  • show ip pim interface
  • show ip pim neighbor
  • show ip pim rp
  • show ip pim tib

clear ip pim rp-mapping

Used by the bootstrap router (BSR) to remove all or particular Rendezvous Point (RP) Advertisement.

Syntax
clear ip pim rp-mapping rp-address

Parameters	rp-address (OPTIONAL) Enter the RP address in dotted decimal format (A.B.C.D)
Command Modes	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on S55
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.8.1.0 Introduced on S-Series

clear ip pim tib

Clear PIM tree information from the PIM database.

Syntax
clear ip pim tib [group]

Parameters	group (OPTIONAL) Enter the multicast group address in dotted decimal format (A.B.C.D)
Command Modes	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on S55
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.8.1.0 Introduced on S-Series

debug ip pim

View IP PIM debugging messages.

Syntax
debug ip pim [bsr | events | group | packet [in | out] | register | state | timer [assert | hello | joinprune | register]]
To disable PIM debugging, enter no debug ip pim, or enter undebug all to disable all debugging.
Parameters

bsr	(OPTIONAL) Enter the keywordbsrto view PIM Candidate RP/BSR activities.
events(OPTIONAL) Enter the keywordeventsto view PIM events.
group	(OPTIONAL) Enter the keywordgroupto view PIM messages for a specific group.
packet[in|out]	(OPTIONAL) Enter the keywordpacketto view PIM packets. Enter one of the optional parametersin: to view incoming packetsout: to view outgoing packets.

	register	(OPTIONAL) Enter the keywordregisterto view PIM register address in dotted decimal format (A.B.C.D).
	state	(OPTIONAL) Enter the keywordstateto view PIM state changes.
	timer [assert | hello | joinprune | register]	(OPTIONAL) Enter the keywordtimerto view PIM timers. Enter one of the optional parameters:assert: to view the assertion timer.hello: to view the PIM neighbor keepalive timer.joinprune: to view the expiry timer (join/prune timer)register: to view the register suppression timer.
Defaults	Disabled
Command Modes	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on S55
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.8.1.0 Introduced on S-Series

ip pim bsr-border

Define the border of PIM domain by filtering inbound and outbound PIM-BSR messages per interface.

Syntax

ip pim bsr-border

To return to the default value, enter no ip pim bsr-border.

Defaults

Disabled

Command Modes

INTERFACE

Command History

Version 8.3.5.0 Introduced on S55

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.8.1.0 Introduced on C-Series on port-channels and S-Series.

Usage Information

This command is applied to the subsequent PIM-BSR. Existing BSR advertisements are cleaned up by time out. Candidate RP advertisements can be cleaned using the clear ip pim rp-mapping command.

ip pim bsr-candidate

Configure the PIM router to join the Bootstrap election process.

Syntax

ip pim bsr-candidate interface [hash-mask-length] [priority]

To return to the default value, enter no ip pim bsr-candidate.

Parameters	interface	Enter the following keywords and slot/port or number information:For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For a Loopback interface, enter the keywordloopbackfollowed by a number from 0 to 16383.For Port Channel interface types, enter the keywordport-channelfollowed by a number from 1 to 255.For a SONET interface, enter the keywordsonetfollowed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernetfollowed by the slot/port information.For a VLAN, enter the keywordvlanfollowed by a number from 1 to 4094.
	hash-mask-length	(OPTIONAL) Enter the hash mask length.Range: zero (0) to 32Default: 30
	priority	(OPTIONAL) Enter the priority used in Bootstrap election process.Range: zero (0) to 255Default: zero (0)
Defaults	Not configured.
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced on S-Series
	Version 6.1.1.0 Added support for VLAN interface

ip pim dr-priority

Change the Designated Router (DR) priority for the interface.

Syntax

ip pim dr-priority priority-value

To remove the DR priority value assigned, use the no ip pim dr-priority command.

Parameters

priority-value

Enter a number. Preference is given to larger/higher number.

Range: 0 to 4294967294

Default: 1

Defaults

1

Command Modes

INTERFACE

Command History

Version 8.3.5.0 Introduced on S55

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.8.1.0 Introduced on C-Series on port-channels and S-Series

Usage Information

The router with the largest value assigned to an interface becomes the Designated Router. If two interfaces contain the same DR priority value, the interface with the largest interface IP address becomes the Designated Router.

ip pim graceful-restart

This feature permits configuration of Non-stop Forwarding (NFS or graceful restart) capability of a PIM router to its neighbors.

Syntax [ipv6] ip pim graceful-restart {helper-only | nsf [restart-time | stale-entry-time]}

Parameters	ipv6	Enter this keyword to enable graceful-restart for IPv6 Multicast Routes.
	helper-only	Enter the keyword helper-only to configure as a receiver (helper) only by preserving the PIM status of a graceful restart PIM neighboring router.
	nsf	Enter the keyword nfs to configure the Non-stop Forwarding capability.
	restart-time	(OPTIONAL) Enter the keyword restart-time followed by the number of seconds estimated for the PIM speaker to restart.Range: 30 to 300 secondsDefault: 180 seconds
	stale-entry-time	(OPTIONAL) Enter the keyword stale-entry-time followed by the number of seconds for which entries are kept alive after restart.Range: 30 to 300 secondsDefault: 60 seconds

Defaults as above

Command Modes CONFIGURATION

Command History	Version 8.2.1.0	Introduced on E-Series ExaScale. Added the ipv6 option for E-Series.
	Version 7.6.1.0 Introduced on E-Series

Usage Information When an NSF-capable router comes up, it announces the graceful restart capability and restart duration as a Hello option. The receiving router notes the Hello option. Routers not NSF capable will discard the unknown Hello option and adjacency is not affected.

When an NSF-capable router goes down, neighboring PIM speaker preserves the states and continues the forwarding of multicast traffic while the neighbor router restarts.

ip pim join-filter

Permit or deny PIM Join/Prune messages on an interface using an extended IP access list. This command prevents the PIM SM router from creating state based on multicast source and/or group.

Syntax ip pim join-filter ext-access-list {in | out}

Remove the access list using the command no ip pim join-filter ext-access-list {in | out}

Parameters	ext-access-list	Enter the name of an extended access list.
	in	Enter this keyword to apply the access list to inbound traffic.
	out	Enter this keyword to apply the access list to outbound traffic.
Defaults	None
Command Modes	INTERFACE
Command History	Version 8.3.5.0 Introduced on S55
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.8.1.0 Introduced on C-Series on port-channels and S-Series
	Version 7.7.1.0 Introduced on E-Series.
Example	Figure 27-1. ip pim join-filter Command ExampleFTOS (conf)# ip access-list extended iptv-channelsFTOS (config-ext-nacl)# permit ip 10.1.2.3/24 225.1.1.0/24FTOS (config-ext-nacl)# permit ip any 232.1.1.0/24FTOS (config-ext-nacl)# permit ip 100.1.1.0/16 anyFTOS (config-if-gi-1/1)# ip pim join-filter iptv-channels inFTOS (config-if-gi-1/1)# ip pim join-filter iptv-channels out
Related Commands	ip access-list Extended	Configure an access list based on IP addresses or protocols.

ip pim neighbor-filter

Configure this feature to prevent a router from participating in protocol independent Multicast (PIM).

Syntax

ip pim neighbor-filter {access-list}

To remove the restriction, use the no ip pim neighbor-filter {access-list} command.

Parameters

access-list

Enter the name of a standard access list. Maximum 16 characters.

Defaults

Defaults.

Command Modes

CONFIGURATION.

Command History

Version 8.3.5.0 Introduced on S55

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.8.1.0 Introduced on C-Series and S-Series

Version 7.6.1.0 Introduced on the E-Series

Usage Information

Do not enter this command before creating the access-list.

ip pim query-interval

Change the frequency of PIM Router-Query messages.

Syntax

ip pim query-interval seconds

To return to the default value, enter no ip pim query-interval seconds command.

Parameters	seconds	Enter a number as the number of seconds between router query messages.Default: 30 secondsRange: 0 to 65535
Defaults	30 seconds
hand Modes	INTERFACE
Command History	Version 8.3.5.0 Introduced on S55
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.8.1.0 Introduced on C-Series on port-channels and S-Series

ip pim register-filter

Use this feature to prevent a PIM source DR from sending register packets to an RP for the specified multicast source and group.

Syntax

ip pim register-filter access-list

To return to the default, use the no ip pim register-filter access-list command.

Parameters	access-list	Enter the name of an extended access list. Maximum 16 characters.
Defaults	Not configured
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced on C-Series and S-Series
	Version 7.6.1.0 Introduced
Usage Information	The access name is an extended IP access list that denies PIM register packets to RP at the source DR based on the multicast and group addresses. Do not enter this command before creating the access-list.

ip pim rp-address

Configure a static PIM Rendezvous Point (RP) address for a group or access-list.

Syntax

ip pim rp-address address {group-address group-address mask} override

To remove an RP address, use the no ip pim rp-address address {group-address group-address mask} override command.

Parameters	address	Enter the RP address in dotted decimal format (A.B.C.D).
	group-address group-address mask	Enter the keyword group-address followed by a group-address mask, in dotted decimal format (/xx), to assign that group address to the RP.
	override	Enter the keyword override to override the BSR updates with static RP. The override will take effect immediately during enable/disable. Note: This option is applicable to multicast group range.
Defaults	Not configured
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on S55
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.8.1.0 Introduced on S-Series
	pre-Version 6.1.1.1 Introduced on E-Series
Usage Information	This address is used by first-hop routers to send Register packets on behalf of source multicast hosts. The RP addresses are stored in the order in which they are entered. RP addresses learned via BSR take priority over static RP addresses. Without the override option, RPs advertised by the BSR updates take precedence over the statically configured RPs.

ip pim rp-candidate

Configure a PIM router to send out a Candidate-RP-Advertisement message to the Bootstrap (BS) router or define group prefixes that are defined with the RP address to PIM BSR.

Syntax

ip pim rp-candidate { interface [priority]

To return to the default value, enter no ip pim rp-candidate {interface [priority] command.

Parameters

interface

Enter the following keywords and slot/port or number information:For a Gigabit Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For a Loopback interface, enter the keywordloopbackfollowed by a number from 0 to 16383.For Port Channel interface types, enter the keywordport-channelfollowed by a number from 1 to 255.For a SONET interface, enter the keywordsonetfollowed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernetfollowed by the slot/port information.For a VLAN, enter the keywordvlanfollowed by a number from 1 to 4094.

priority

(OPTIONAL) Enter the priority used in Bootstrap election process.Range: zero (0) to 255Default: 192

Defaults

Not configured.

Command Modes

CONFIGURATION

Command History	Version 8.3.5.0 Introduced on S55
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.8.1.0 Introduced on S-Series
	pre-Version 6.1.1.1 Introduced on E-Series

Usage Priority is stored at BSR router when receiving a Candidate-RP-Advertisement. Information

ip pim sparse-mode

Enable PIM sparse mode and IGMP on the interface.

Syntax

ip pim sparse-mode

To disable PIM sparse mode and IGMP, enter no ip pim sparse-mode.

Defaults

Disabled.

Command Modes

INTERFACE

Command History

Version 8.3.5.0 Introduced on S55

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.8.1.0 Introduced on C-Series on port-channels and S-Series

Usage Information

C-Series supports a maximum of 31 PIM interfaces.

The interface must be enabled (no shutdown command) and not have the switchport command configured. Multicast must also be enabled globally (using the ip multicast-lag-hashing command). PIM is supported on the port-channel interface.

Related Commands

ip multicast-lag-hashing Enable multicast globally.

ip pim sparse-mode sg-expiry-timer

Enable expiry timers globally for all sources, or for a specific set of (S,G) pairs defined by an access list.

Syntax

ip pim sparse-mode sg-expiry-timer seconds [access-list name]

To disable configured timers and return to default mode, enter no ip pim sparse-mode sg-expiry-timer.

Parameters

seconds	Enter the number of seconds the S, G entries will be retained. Range 211-86400
access-list name	(OPTIONAL) Enter the name of a previously configured Extended ACL to enable the expiry time to specified S,G entries

Defaults

Disabled. The default expiry timer (with no times configured) is 210 sec.

Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on S55
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.8.1.0 Introduced
	Version 7.7.1.1 Introduced
Usage Information	This command configures an expiration timer for all S.G entries, unless they are assigned to an Extended ACL.

ip pim spt-threshold

Configure PIM router to switch to shortest path tree when the traffic reaches the specified threshold value.

Syntax

ip pim spt-threshold value | infinity

To return to the default value, enter no ip pim spt-threshold.

Parameters	value	(OPTIONAL) Enter the traffic value in kilobits per second.Default: 10 packets per second. A value of zero (0) will cause a switchover on the first packet.
	infinity	(OPTIONAL) To never switch to the source-tree, enter the keyword infinity.

Defaults

Not configured.

Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on S55
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.8.1.0 Introduced on C-Series on port-channels and S-Series
Usage Information	This is applicable to last hop routers on the shared tree towards the Rendezvous Point (RP).

show ip pim bsr-router

View information on the Bootstrap router.

Syntax

show ip pim bsr-router

Command Modes	EXEC
	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on S55
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.8.1.0 Introduced on S-Series

Example

Figure 27-2. show ip pim bsr-router Command Example

E600-7-rpm0#show ip pim bsr-router
PIMv2 Bootstrap information
This system is the Bootstrap Router (v2)
    BSR address: 7.7.7.7 (?)
    Uptime: 16:59:06, BSR Priority: 0, Hash mask length: 30
    Next bootstrap message in 00:00:08

This system is a candidate BSR
    Candidate BSR address: 7.7.7.7, priority: 0, hash mask length: 30 

show ip pim interface

View information on the interfaces with IP PIM enabled.

Syntax show ip pim interface

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.8.1.0 Introduced on S-Series

Example

Figure 27-3. show ip pim interface Command Example

E600-7-RPM0#show ip pim interface
Address Interface Ver/ Nbr Query DR DR Mode Count Intvl Prio
172.21.200.254 Gi 7/9 v2/S 0 30 1 172.21.200.254
172.60.1.2 Gi 7/11 v2/S 0 30 1 172.60.1.2
192.3.1.1 Gi 7/16 v2/S 1 30 1 192.3.1.1
192.4.1.1 Gi 13/5 v2/S 0 30 1 192.4.1.1
172.21.110.1 Gi 13/6 v2/S 0 30 1 172.21.110.1
172.21.203.1 Gi 13/7 v2/S 0 30 1 172.21.203.1 

Table 27-1. show ip pim interface Command Example Fields

Field Description
Address Lists the IP addresses of the	interfaces participating in PIM.
Interface List the interface type, with	either slot/port information or ID (VLAN or Port Channel), of the interfaces participating in PIM.
Ver/Mode Displays the PIM version	number and mode for each interface participating in PIM.v2 = PIM version 2S = PIM Sparse mode
Nbr Count Displays the number of PIM neighbors discovered over this interface.
Query Intvl Displays the query interval for Router Query messages on that interface (configured with ip pim query-interval command).

Table 27-1. show ip pim interface Command Example Fields

Field Description
DR Prio Displays the Designated Router priority value configured on the interface (ip pim dr-priority command).
DR Displays the IP address of the Designated Router for that interface.

show ip pim neighbor

View PIM neighbors.

Syntax

show ip pim neighbor

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.8.1.0 Introduced on S-Series

Example

Figure 27-4. show ip pim neighbor Command Example

FTOS#show ip pim neighbor
Neighbor Address	Interface	Uptime/Expires	Ver	DR Prio/Mode
127.87.3.4	Gi 7/16	09:44:58/00:01:24	v2	1 / S
FTOS#

Table 27-2. show ip pim neighbor Command Example Fields

Field Description
Neighbor address Displays the IP address of the PIM neighbor.
Interface List the interface type, with either slot/port information or ID (VLAN or Port Channel), on which the PIM neighbor was found.
Uptime/expires Displays the amount of time the neighbor has been up followed by the amount of time until the neighbor is removed from the multicast routing table (that is, until the neighbor hold time expires).
Ver Displays the PIM version number.v2 = PIM version 2
DR prio/Mode Displays the Designated Router priority and the mode.1 = default Designated Router priority (use ip pim dr-priority)DR = Designated RouterS = source

show ip pim rp

View all multicast groups-to-RP mappings.

Syntax
show ip pim rp [mapping | group-address]

Parameters	mapping	(OPTIONAL) Enter the keyword mapping to display the multicast groups-to-RP mapping and information on how RP is learnt.
	group-address	(OPTIONAL) Enter the multicast group address mask in dotted decimal format to view RP for a specific group.
mand Modes	EXEC
	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on S55
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.8.1.0 Introduced on S-Series

Example 1 Figure 27-5. show ip pim rp mapping Command Example 1

FTOS#sh ip pim rp
Group	RP
224.2.197.115	165.87.20.4
224.2.217.146	165.87.20.4
224.3.3.3	165.87.20.4
225.1.2.1	165.87.20.4
225.1.2.2	165.87.20.4
229.1.2.1	165.87.20.4
229.1.2.2	165.87.20.4
FTOS#

Example 2 Figure 27-6. show ip pim rp mapping Command Example 2

FTOS#sh ip pim rp mapping

Group(s): 224.0.0.0/4

RP: 165.87.20.4, v2

Info source: 165.87.20.5, via bootstrap, priority 0

Uptime: 00:03:11, expires: 00:02:46

RP: 165.87.20.3, v2

Info source: 165.87.20.5, via bootstrap, priority 0

Uptime: 00:03:11, expires: 00:03:03

FTOS#

Example 3 Figure 27-7. show ip pim rp group-address Command Example 3

FTOS#sh ip pim rp 229.1.2.1
Group	RP
229.1.2.1	165.87.20.4
FTOS#

show ip pim tib

View the PIM tree information base (TIB).

Syntax

show ip pim tib [group-address [source-address]]

Parameters

group-address	(OPTIONAL) Enter the group address in dotted decimal format (A.B.C.D)
source-address	(OPTIONAL) Enter the source address in dotted decimal format (A.B.C.D).

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.8.1.0 Introduced on S-Series

Example

Figure 27-8. show ip pim tib Command Example

FTOS#show ip pim tib

PIM Multicast Routing Table
Flags: D - Dense, S - Sparse, C - Connected, L - Local, P - Pruned,
    R - RP-bit set, F - Register flag, T - SPT-bit set, J - Join SPT,
    M - MSDP created entry, A - Candidate for MSDP Advertisement,
    K - Ack-Pending State

Timers: Uptime/Expires
Interface state: Interface, next-Hop, State/Mode

(*, 226.1.1.1), uptime 01:29:19, expires 00:00:52, RP 10.211.2.1, flags: SCJ
Incoming interface: GigabitEthernet 4/23, RPF neighbor 10.211.1.2
Outgoing interface list:
GigabitEthernet 8/0

(*, 226.1.1.2), uptime 00:18:08, expires 00:00:52, RP 10.211.2.1, flags: SCJ
Incoming interface: GigabitEthernet 4/23, RPF neighbor 10.211.1.2
Outgoing interface list:
GigabitEthernet 8/0

(*, 226.1.1.3), uptime 00:18:08, expires 00:00:52, RP 10.211.2.1, flags: SCJ
Incoming interface: GigabitEthernet 4/23, RPF neighbor 10.211.1.2
Outgoing interface list:
GigabitEthernet 8/0

(*, 226.1.1.4), uptime 00:18:08, expires 00:00:52, RP 10.211.2.1, flags: SCJ
Incoming interface: GigabitEthernet 4/23, RPF neighbor 10.211.1.2
Outgoing interface list:
GigabitEthernet 8/0 

FTOS#

Table 27-3. show ip pim tib Command Example Fields

Field Description
(S, G) Displays the entry in the multicast PIM database.
uptime Displays the amount of time the entry has been in the PIM route table.
expires Displays the amount of time until the entry expires and is removed from the database.
RP Displays the IP address of the RP/source for this entry.
flags List the flags to define the entries:	D = PIM Dense ModeS = PIM Sparse ModeC = directly connectedL = local to the multicast groupP = route was prunedR = the forwarding entry is pointing toward the RPF = FTOS is registering this entry for a multicast sourceT = packets were received via Shortest Tree PathJ = first packet from the last hop router is received and the entry is ready to switch to SPTK = acknowledge pending state
Incoming interface Displays the reverse path forwarding (RPF) interface towards the RP/source.
RPF neighbor Displays the next hop	from this interface towards the RP/source.
Outgoing interface list: Lists the interfaces that meet one of the following criteria:a directly connect member of the Group.statically configured member of the Group.received a (*,G) Join message.

PIM-Source Specific Mode (PIM-SSM)

Overview

The platforms on which a command is supported is indicated by the character — for the E-Series, for the C-Series, and for the S-Series — that appears below each command heading.

This chapter contains the following sections:

• IPv4 PIM Commands
• IPv4 PIM-Source Specific Mode COMmands

IPv4 PIM Commands

The following commands apply to IPv4 PIM-SM, PIM-SSM, and PIM-DM:

• clear ip pim tib
• debug ip pim
• ip pim dr-priority
• ip pim graceful-restart
• ip pim neighbor-filter
• ip pim query-interval

IPv4 PIM-Source Specific Mode CCommands

The IPv4 PIM-Source Specific Mode (PIM-SSM) commands are:

• ip pim ssm-range
• ip pim join-filter
  • show ip pim ssm-range

ip pim ssm-range

C E S Specify the SSM group range using an access-list.

Syntax	ip pim ssm-range {access_list_name}
Parameters	access_list_name	Enter the name of the access list.
Defaults	Default SSM range is 232/8 and ff3x/32
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on S55
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.8.1.0 Introduced on S-Series
	Version 7.7.1.0 Introduced on C-Series.
	Version 7.5.1.0 Introduced on E-Series.
Usage Information	FTOS supports standard access list for the SSM range. Extended ACL cannot be used for configuring SSM range. If an Extended ACL is configured and then used in the ip pim ssm-range {access list name} configuration, an error is reported.
	However, if ip pim ssm-range {access list name} is configured first and then the ACL is configured as an Extended ACL, an error is not reported and the ACL is not applied to the SSM range.
	FTOS recommended best-practices are to configure the standard ACL, and then apply the ACL to the SSM range. Once the SSM range is applied, the changes are applied internally without requiring clearing of the TIB.
	When ACL rules change, the ACL and PIM modules apply the new rules automatically.
	When SSM range is configured, FTOS supports SSM for configured group range as well as default SSM range.
	When the SSM ACL is removed, PIM SSM is supported for default SSM range only

show ip pim ssm-range

Display the non-default groups added using the SSM range feature.

Syntax

show ip pim ssm-range

Defaults

No default behavior or values

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.8.1.0 Introduced on S-Series

Version 7.7.1.0 Introduced on C-Series.

Version 7.5.1.0 Introduced on E-Series.

Port Monitoring

Overview

The Port Monitoring feature enables you to monitor network traffic by forwarding a copy of each incoming or outgoing packet from one port to another port.

The commands in this chapter are generally supported on the C-Series, E-Series, and S-Series, with one exception, as noted in the Command History fields and by these symbols under the command headings: C E S

Commands

• description
• flow-based enable
• monitor session
  • show config
  • show monitor session
  • show running-config monitor session
• source

Important Points to Remember

• On the E-Series, Port Monitoring is supported on TeraScale and ExaScale platforms.
• Port Monitoring is supported on physical ports only. Logical interfaces, such as Port Channels and VLANs, are not supported.
• FTOS supports as many monitor sessions on a system as the number of port-pipes.
• A SONET port can only be configured as a monitored port.
• The monitoring (destination, “MG”) and monitored (source, “MD”) ports must be on the same switch.
• A monitoring port can monitor any physical port in the chassis.
• Only one MG and one MD may be in a single port-pipe.
• A monitoring port can monitor more than one port.
• More than one monitored port can have the same destination monitoring port.
• FTOS on the S-Series supports multiple source ports to be monitored by a single destination port in one monitor session.

- On the S-Series, one monitor session can have only one MG port. There is no restriction on the number of source ports, or destination ports on the chassis.

Note: The monitoring port should not be a part of any other configuration.

description

Syntax	Enter a description of this monitoring sessiondescription {description}To remove the description, use theno description {description} command.
Parameters	description Enter a description regarding this session(80 characters maximum).
Defaults	No default behavior or values
Command Modes	MONITOR SESSION (conf-mon-sess-session-ID)
Command History	Version 8.3.5.0 Introduced on S55Version 8.1.1.0 Introduced on E-Series ExaScaleVersion 7.7.1.0 Introduced on S-SeriesVersion 7.5.1.0 Introduced on C-Seriespre-7.7.1.0 Introduced on E-Series
Related Commands	monitor session Enable a monitoring session.

flow-based enable

E	Enable flow-based monitoring.
Syntax	flow-based enableTo disable flow-based monitoring, use theno flow-based enablecommand.
Defaults	Disabled, that is flow-based monitoring is not applied
Command Modes	MONITOR SESSION (conf-mon-sess-session-ID)
Command History	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.4.1.0 Introduced on E-Series
Usage Information	To monitoring traffic with particular flows ingressing/egressing the interface, appropriate ACLs can be applied in both ingress and egress direction.
Related Commands	monitor sessionCreate a monitoring session.

monitor session

Create a session for monitoring traffic.

Syntax

monitor session session-ID
To delete a session, use the no monitor session session-ID command.
To delete all monitor sessions, use the no monitor session command.
Parameters

session-ID

Enter a session identification number. Range: 0 to 65535

Defaults

No default values or behaviors

Command Modes

MONITOR SESSION (conf-mon-sess-session-ID)

Command History

Version 8.3.5.0 Introduced on S55

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.7.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

Version 7.4.1.0 Introduced on E-Series

Example

Figure 29-1. Command Example: monitor session

FTOS(conf)# monitor session 60

FTOS(conf-mon-sess-60)

Usage Information

All monitor sessions contain an implicit “mode interface,” that is, if no mode is designated, the mode is set to interface as shown in the example above.

The monitor command is saved in the running configuration at the Monitor Session mode level and can be restored after a chassis reload.

Related Commands

show monitor session Display the monitor session

show running-config monitor session Display the running configuration of a monitor session

show config

Display the current monitor session configuration.

Syntax

show config

Defaults

No default values or behavior

Command Modes

MONITOR SESSION (conf-mon-sess-session-ID)

Command History

Version 8.3.5.0 Introduced on S55

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.7.1.0 Introduced on S-Series

	Version 7.5.1.0 Introduced on C-Series
	Version 7.4.1.0 Introduced on E-Series
Example	FTOS (conf-mon-sess-11) #show config!monitor session 11source GigabitEthernet 10/0 destination GigabitEthernet 10/47 direction rxFTOS#
show monitor session
C E S	Display the monitor information of a particular session or all sessions.
Syntax	show monitor session {session-ID}To display the monitor information for all sessions, use the show monitor session command.
Parameters	session-ID	(OPTIONAL) Enter a session identification number.Range: 0 to 65535
Defaults	No default values or behavior
Command Modes	EXEC
	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on S55
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.7.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	Version 7.4.1.0 Introduced on E-Series
Example	Figure 29-2. Commands Example: show monitor session
	FTOS#show monitor session 11
	SessionID	Source	Destination	Direction	Mode
	11	Gi 10/0	Gi 10/47	rx	interface
	FTOS#
Related Commands	monitor session Create a session for monitoring.

show running-config monitor session

Display the running configuration of all monitor sessions or a specific session.

Syntax

show running-config monitor session {session-ID}

To display the running configuration for all monitor sessions, use just the show running-config monitor session command.

Parameters

session-ID

(OPTIONAL) Enter a session identification number.

Range: 0 to 65535

Defaults

No default values or behavior

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.7.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

Version 7.4.1.0 Introduced on E-Series

Example

FTOS#show running-config monitor session
!
monitor session 8
source GigabitEthernet 10/46 destination GigabitEthernet 10/1 direction rx
!
monitor session 11
source GigabitEthernet 10/0 destination GigabitEthernet 10/47 direction rx
FTOS#show running-config monitor session 11
!
monitor session 11
source GigabitEthernet 10/0 destination GigabitEthernet 10/47 direction rx 

Usage Information

The monitoring command is saved in the running configuration at the Monitor Session mode level and can be restored after a chassis reload.

Related Commands

monitor session Create a session for monitoring.

show monitor session Display a monitor session.

source

Configure a port monitor source.

Syntax

source interface destination interface direction {rx | tx | both}

To disable a monitor source, use the no source interface destination interface direction {rx | tx | both} command.

Parameters	interface	Enter the one of the following keywords and slot/port information:For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernetfollowed by the slot/port information.For a SONET interface, enter the keywordsonetfollowed by the slot/port information.
	destination	Enter the keyworddestinationto indicate the interface destination.
	direction {rx | tx | both}	Enter the keyworddirectionfollowed by one of the packet directional indicators.rx: to monitor receiving packets onlytx: to monitor transmitting packets onlyboth: to monitor both transmitting and receiving packets

Defaults	No default behavior or values
Command Modes	MONITOR SESSION (conf-mon-sess-session-ID)

Command History	Version 8.3.5.0 Introduced on S55
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.7.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	Version 7.4.1.0 Introduced on E-Series

Example Figure 29-3. Command Example: Configuring a Port Monitor Source

FTOS (conf-mon-sess-11) #source gi 10/0 destination gi 10/47 direction rx

FTOS (conf-mon-sess-11) #

Usage Information

Note: A SONET port can only be configured as a monitored port.

Private VLAN (PVLAN)

Overview

Starting with FTOS 7.8.1.0, the Private VLAN (PVLAN) feature of FTOS is available for the C-Series and S-Series: C S

Commands

• ip local-proxy-arp
• private-vlan mode
• private-vlan mapping secondary-vlan
  • show interfaces private-vlan
  • show vlan private-vlan
  • show vlan private-vlan mapping
• switchport mode private-vlan

See also the following commands. The command output is augmented in FTOS 7.8.1.0 to provide PVLAN data:

• show arp in Chapter 16, IPv4 Routing
• show vlan in Chapter 21, Layer 2

Private VLANs extend the FTOS security suite by providing Layer 2 isolation between ports within the same private VLAN. A private VLAN partitions a traditional VLAN into subdomains identified by a primary and secondary VLAN pair.

The FTOS private VLAN implementation is based on RFC 3069.

Private VLAN Concepts

Primary VLAN:

The primary VLAN is the base VLAN and can have multiple secondary VLANs. There are two types of secondary VLAN — community VLAN and isolated VLAN:

• A primary VLAN can have any number of community VLANs and isolated VLANs.
• Private VLANs block all traffic to isolated ports except traffic from promiscuous ports. Traffic received from an isolated port is forwarded only to promiscuous ports or trunk ports.

Community VLAN:

A community VLAN is a secondary VLAN of the primary VLAN:

• Ports in a community VLAN can talk to each other. Also, all ports in a community VLAN can talk to all promiscuous ports in the primary VLAN and vice-versa.
• Devices on a community VLAN can communicate with each other via member ports, while devices in an isolated VLAN cannot.

Isolated VLAN:

An isolated VLAN is a secondary VLAN of the primary VLAN:

• Ports in an isolated VLAN cannot talk to each other. Servers would be mostly connected to isolated VLAN ports.
• Isolated ports can talk to promiscuous ports in the primary VLAN, and vice-versa.

Port types:

• Community port: A community port is, by definition, a port that belongs to a community VLAN and is allowed to communicate with other ports in the same community VLAN and with promiscuous ports.
• Isolated port: An isolated port is, by definition, a port that, in Layer 2, can only communicate with promiscuous ports that are in the same PVLAN.
• Promiscuous port: A promiscuous port is, by definition, a port that is allowed to communicate with any other port type.
• Trunk port: A trunk port, by definition, carries VLAN traffic across switches:
• A trunk port in a PVLAN is always tagged.
• Primary or secondary VLAN traffic is carried by the trunk port in tagged mode. The tag on the packet helps identify the VLAN to which the packet belongs.
• A trunk port can also belong to a regular VLAN (non-private VLAN).

ip local-proxy-arp

C S

Enable/disable Layer 3 communication between secondary VLANs in a private VLAN.

Syntax

[no] ip local-proxy-arp

To disable Layer 3 communication between secondary VLANs in a private VLAN, use the no ip local-proxy-arp command in the INTERFACE VLAN mode for the primary VLAN.

To disable Layer 3 communication in a particular secondary VLAN, use the no ip local-proxy-arp command in the INTERFACE VLAN mode for the selected secondary VLAN.

Note: Even after ip-local-proxy-arp is disabled (no ip-local-proxy-arp) in a secondary VLAN, Layer 3 communication may happen between some secondary VLAN hosts, until the ARP timeout happens on those secondary VLAN hosts.

Defaults

Layer 3 communication is disabled between secondary VLANs in a private VLAN.

Command Modes

INTERFACE VLAN

Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced on C-Series and S-Series
Related Commands	private-vlan mode Set the mode of the selected VLAN to community, isolated, or primary.
	private-vlan mapping secondary-vlan	Map secondary VLANs to the selected primary VLAN.
	show arp Display the ARP table.
	show interfaces private-vlan Display type and status of PVLAN interfaces.
	show vlan private-vlan Display PVLANs and/or interfaces that are part of a PVLAN.
	switchport mode private-vlan Set the PVLAN mode of the selected port.

private-vlan mode

Set the PVLAN mode of the selected VLAN to community, isolated, or primary.

Syntax

[no] private-vlan mode {community | isolated | primary}

To remove the PVLAN configuration, use the no private-vlan mode {community | isolated | primary} command syntax.

Parameters	community	Enter community to set the VLAN as a community VLAN, as described above.
	isolated	Enter isolated to configure the VLAN as an isolated VLAN, as described above.
	primary	Enter primary to configure the VLAN as a primary VLAN, as described above.

Defaults

none

Command Modes	INTERFACE VLAN
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced on C-Series and S-Series

Usage Information	The VLAN:
	• Can be in only one mode, either community, isolated, or primary.
	• Mode can be set to community or isolated even before associating it to a primary VLAN. This secondary VLAN will continue to work normally as a normal VLAN even though it is not associated to a primary VLAN. (A syslog message indicates this.)
	• Must not have a port in it when the VLAN mode is being set.
	Only ports (and port channels) configured as promiscuous, host, or PVLAN trunk ports (as described above) can be added to the PVLAN. No other regular ports can be added to the PVLAN.

After using this command to configure a VLAN as a primary VLAN, use the private-vlan mapping secondary-vlan command to map secondary VLANs to this VLAN.

Related Commands	private-vlan mappingsecondary-vlan	Set the mode of the selected VLAN to primary and then associate secondary VLANs to it.
	show interfaces private-vlan Display type and status of PVLAN interfaces.

show vlan private-vlan Display PVLANs and/or interfaces that are part of a PVLAN.

show vlan private-vlan mapping Display primary-secondary VLAN mapping.

switchport mode private-vlan Set the PVLAN mode of the selected port.

private-vlan mapping secondary-vlan

Map secondary VLANs to the selected primary VLAN.

Syntax

[no] private-vlan mapping secondary-vlan vlan-list

To remove specific secondary VLANs from the configuration, use the no private-vlan mapping secondary-vlan vlan-list command syntax.

Parameters

vlan-list

Enter the list of secondary VLANs to associate with the selected primary VLAN, as described above. The list can be in comma-delimited or hyphenated-range format, following the convention for range input.

Defaults

none

Command Modes

INTERFACE VLAN

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced on C-Series and S-Series

Usage Information

The list of secondary VLANs can be:

• Specified in comma-delimited or hyphenated-range format.
• Specified with this command even before they have been created.
• Amended by specifying the new secondary VLAN to be added to the list.

Related Commands

private-vlan mode Set the mode of the selected VLAN to community, isolated, or primary.

show interfaces private-vlan Display type and status of PVLAN interfaces.

show vlan private-vlan Display PVLANs and/or interfaces that are part of a PVLAN.

show vlan private-vlan mapping Display primary-secondary VLAN mapping.

switchport mode private-vlan Set the PVLAN mode of the selected port.

show interfaces private-vlan

Display type and status of PVLAN interfaces.

Syntax

show interfaces private-vlan [interface interface]

Parameters

interface interface

(OPTIONAL) Enter the keyword interface, followed by the ID of the specific interface for which to display PVLAN status.

Defaults

none

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced on C-Series and S-Series

Usage Information

This command has two types of display — a list of all PVLAN interfaces or for a specific interface. Examples of both types of output are shown below.

Examples

Figure 30-1. show interfaces private-vlan Command Output

FTOS# show interfaces private-vlan
Interface	Vlan	PVLAN-Type	Interface Type	Status
Gi 2/1	10	Primary	Promiscuous	Up
Gi 2/2	100	Isolated	Host	Down
Gi 2/3	10	Primary	Trunk	Up
Gi 2/4	101	Community	Host	Up

The table, below, defines the fields in the output, above.

Table 30-1. show interfaces description Command Example Fields

Field Description
Interface Displays type of interface and associated slot and port number
Vlan Displays the VLAN ID of the designated interface
PVLAN-Type Displays the type of VLAN in which the designated interface resides
Interface Type Displays the PVLAN port type of the designated interface.
Status States whether the interface is operationally up or down.

Related Commands

private-vlan mode Set the mode of the selected VLAN to community, isolated, or primary.

show vlan private-vlan Display PVLANs and/or interfaces that are part of a PVLAN.

show vlan private-vlan mapping Display primary-secondary VLAN mapping.

switchport mode private-vlan Set the PVLAN mode of the selected port.

Syntax

show vlan private-vlan [community | interface | isolated | primary | primary_vlan | interface interface]

Parameters

community	(OPTIONAL) Enter the keyword community to display VLANs configured as community VLANs, along with their interfaces.
interface	(OPTIONAL) Enter the keyword community to display VLANs configured as community VLANs, along with their interfaces.
isolated	(OPTIONAL) Enter the keyword isolated to display VLANs configured as isolated VLANs, along with their interfaces.
primary	(OPTIONAL) Enter the keyword primary to display VLANs configured as primary VLANs, along with their interfaces.
primary_vlan	(OPTIONAL) Enter a private VLAN ID or secondary VLAN ID to display interface details about the designated PVLAN.
interface interface	(OPTIONAL) Enter the keyword interface and an interface ID to display the PVLAN configuration of the designated interface.

Defaults

none

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced on C-Series and S-Series

Usage Information

Examples of all types of command output are shown below. The first type of output is the result of not entering an optional keyword. It displays a detailed list of all PVLANs and their member VLANs and interfaces. The other types of output show details about PVLAN subsets.

Examples

Figure 30-2. show vlan private-vlan Command Output

FTOS# show vlan private-vlan
Primary	Secondary	Type	Active	Ports
10		primary	Yes	Gi 2/1,3
	100	isolated	Yes	Gi 2/2
	101	community	Yes	Gi 2/10
20		primary	Yes	Po 10, 12-13
				Gi 3/1
	200	isolated	Yes	Gi 3/2,4-6
	201	community	No
	202	community	Yes	Gi 3/11-12

FTOS# show vlan private-vlan primary
Primary	Secondary	Type	Active	Ports
10		primary	Yes	Gi 2/1,3
20		primary	Yes	Gi 3/1,3

FTOS# show vlan private-vlan isolated
Primary	Secondary	Type	Active	Ports
10		primary	Yes	Gi 2/1,3
	100	isolated	Yes	Gi 2/2,4-6
	200	isolated	Yes	Gi 3/2,4-6

FTOS# show vlan private-vlan community
Primary	Secondary	Type	Active	Ports
10		primary	Yes	Gi 2/1,3
	101	community	Yes	Gi 2/7-10
20		primary	Yes	Po 10, 12-13
				Gi 3/1
	201	community	No
	202	community	Yes	Gi 3/11-12

FTOS# show vlan private-vlan interface Gi 2/1
Primary	Secondary	Type	Active	Ports
10		primary	Yes	Gi 2/1

If the VLAN ID is that of a primary VLAN, then the entire private VLAN output will be displayed, as shown in Figure 30-3. If the VLAN ID is a secondary VLAN, only its primary VLAN and its particular secondary VLAN properties will be displayed, as shown in Figure 30-4.

Figure 30-3. Output of show vlan private-vlan (primary)

FTOS# show vlan private-vlan 10
Primary	Secondary Type	Active Ports
10	primary	Yes Gi 2/1,3
	102 isolated Yes	Gi 0/4
	101 community Yes	Gi 2/7-10

Figure 30-4. Output of show vlan private-vlan (secondary)

FTOS#show vlan private-vlan 102
Primary	Secondary Type		Active Ports
10	Primary		Yes	Po 1 Gi 0/2
	102	Isolated Yes	Gi	0/4

The table, below, defines the fields in the output, above.

Table 30-2. show interfaces description Command Example Fields

Field Description
Primary Displays the VLAN ID of the designated or associated primary VLAN(s)
Secondary Displays the VLAN ID of the designated or associated secondary VLAN(s)
Type Displays the type of VLAN in which the listed interfaces reside

Table 30-2. show interfaces description Command Example Fields

Field Description
Active States whether the interface is operationally up or down
Ports Displays the interface IDs in the listed VLAN.

Related Commands

private-vlan mode Set the mode of the selected VLAN to either community or isolated.

show interfaces private-vlan Display type and status of PVLAN interfaces.

show vlan private-vlan mapping Display primary-secondary VLAN mapping.

switchport mode private-vlan Set the PVLAN mode of the selected port.

show vlan private-vlan mapping

Display primary-secondary VLAN mapping.

Syntax

show vlan private-vlan mapping

Defaults

none

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced on C-Series and S-Series

Usage Information

The output of this command, shown below, displays the community and isolated VLAN IDs that are associated with each primary VLAN.

Figure 30-5. show vlan private-vlan mapping Command Output

FTOS# show vlan private-vlan mapping

Private Vlan:

Primary : 100

Isolated : 102

Community : 101

Unknown : 200

Related Commands

private-vlan mode Set the mode of the selected VLAN to either community or isolated.

show interfaces private-vlan Display type and status of PVLAN interfaces.

show vlan private-vlan mapping Display primary-secondary VLAN mapping.

switchport mode private-vlan Set the PVLAN mode of the selected port.

switchport mode private-vlan

Set the PVLAN mode of the selected port.

Syntax

[no] switchport mode private-vlan {host | promiscuous | trunk}

To remove the PVLAN mode from the selected port, use the no switchport mode private-vlan command.

Parameters

host	Enter host to configure the selected port or port channel as an isolated interface in a PVLAN, as described above.
promiscuous	Enter promiscuous to configure the selected port or port channel as an promiscuous interface, as described above.
trunk	Enter trunk to configure the selected port or port channel as a trunk port in a PVLAN, as described above.

Defaults

disabled

Command Modes

INTERFACE

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced on C-Series and S-Series

Usage Information

The assignment of the various PVLAN port types to port and port channel (LAG) interfaces is demonstrated below.

Example

Figure 30-6. Examples of switchport mode private-vlan Command

FTOS#conf
FTOS(conf)#interface GigabitEthernet 2/1
FTOS(conf-if-gi-2/1)#switchport mode private-vlan promiscuous
FTOS(conf)#interface GigabitEthernet 2/2
FTOS(conf-if-gi-2/2)#switchport mode private-vlan host
FTOS(conf)#interface GigabitEthernet 2/3
FTOS(conf-if-gi-2/3)#switchport mode private-vlan trunk
FTOS(conf)#interface port-channel 10
FTOS(conf-if-gi-2/3)#switchport mode private-vlan promiscuous

Related Commands

private-vlan mode Set the mode of the selected VLAN to either community or isolated.

private-vlan mapping Set the mode of the selected VLAN to primary and then associate secondary-vlan secondary VLANs to it.

show interfaces private-vlan Display type and status of PVLAN interfaces.

show vlan private-vlan mapping Display primary-secondary VLAN mapping.

Per-VLAN Spanning Tree plus (PVST+)

Overview

The FTOS implementation of PVST+ (Per-VLAN Spanning Tree plus) is based on the IEEE 802.1d standard Spanning Tree Protocol, but it creates a separate spanning tree for each VLAN configured.

PVST+ (Per-VLAN Spanning Tree plus) is supported by FTOS on all Dell Networking systems, as indicated by the characters that appear below each command heading:

• C-Series: ©
• E-Series: E
• S-Series: S

Commands

The FTOS PVST+ commands are:

• disable
• description
• extend system-id
• protocol spanning-tree pvst
  • show spanning-tree pvst
• spanning-tree pvst
  • spanning-tree pvst err-disable
• tc-flush-standard
• vlan bridge-priority
• vlan forward-delay
• vlan hello-time
• vlan max-age

Note: For easier command line entry, the plus (+) sign is not used at the command line.

disable

Disable PVST+ globally.

Syntax

disable

To enable PVST+, enter no disable.

Defaults	PVST+ is disabled
Command Modes	CONFIGURATION (conf-pvst)
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	pre-Version 6.2.1.1 Introduced on E-Series
Related Commands	protocol spanning-tree pvst Enter PVST+ mode.

description

Syntax	Enter a description of the PVST+description {description}
	To remove the description, use theno description {description} command.
Parameters	description Enter a description to identify the Spanning Tree (80 characters maximum).
Defaults	No default behavior or values
Command Modes	SPANNING TREE PVST+ (The prompt is “config-pvst”.)
Command History	Version 8.3.5.0 Introduced on S55pre-7.7.1.0 Introduced
Related Commands	protocol spanning-tree pvst Enter SPANNING TREE mode on the switch.

extend system-id

C E S	Use Extend System ID to augment the Bridge ID with a VLAN ID so that PVST+ differentiate between BPDUs for each VLAN. If for some reason on VLAN receives a BPDU meant for another VLAN, PVST+ will then not detect a loop, and both ports can remain in forwarding state.
Syntax	extend system-id
Defaults	Disabled
Command Modes	PROTOCOL PVST
Command History	Version 8.3.5.0 Introduced on S55
	Version 8.3.1.0 Introduced

Example

FTOS (conf-pvst) #do show spanning-tree pvst vlan 5 brief

VLAN 5

Executing IEEE compatible Spanning Tree Protocol

Root ID Priority 32773, Address 0001.e832.73f7

Root Bridge hello time 2, max age 20, forward delay 15

Bridge ID Priority 32773 (priority 32768 sys-id-ext 5), Address 0001.e832.73f7

We are the root of Vlan 5

Configured hello time 2, max age 20, forward delay 15

Interface Name	PortID	Prio	Cost	Sts	Cost	Designated Bridge ID	PortID
Gi 0/10	128.140	128	200000	FWD	0	32773 0001.e832.73f7	128.140
Gi 0/12	128.142	128	200000	DIS	0	32773 0001.e832.73f7	128.142

Interface

Name	Role	PortID	Prio Cost	Sts Cost	Link-type	Edge
Gi 0/10	Desg	128.140	128 200000	FWD 0	P2P	No
Gi 0/12	Dis	128.142	128 200000	DIS 0	P2P	No

Related Commands

protocol spanning-tree pvst Enter SPANNING TREE mode on the switch.

protocol spanning-tree pvst

Enter the PVST+ mode to enable PVST+ on a device.

Syntax

protocol spanning-tree pvst

To disable PVST+, use the disable command.

Defaults

This command has no default value or behavior.

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

Version 6.2.1.1 Introduced

Example

Figure 31-1. Configuring with protocol spanning-tree pvst Command

FTOS#conf
FTOS(conf)#protocol spanning-tree pvst
FTOS(conf-pvst)#no disable
FTOS(conf-pvst)#vlan 2 bridge-priority 4096
FTOS(conf-pvst)#vlan 3 bridge-priority 16384
FTOS(conf-pvst)#
FTOS(conf-pvst)#show config
!
protocol spanning-tree pvst
no disable
vlan 2 bridge-priority 4096
vlan 3 bridge-priority 16384
FTOS#

Usage Information

Once PVST+ is enabled, the device runs an STP instance for each VLAN it supports.

Related Commands

disable Disable PVST+.

show spanning-tree pvst Display the PVST+ configuration.

show spanning-tree pvst

View the Per-VLAN Spanning Tree configuration.

Syntax

show spanning-tree pvst [vlan vlan-id] [brief] [Interface]

Parameters

vlan vlan-id	(OPTIONAL) Enter the keywordvlanfollowed by the VLAN ID.Range: 1 to 4094
brief	(OPTIONAL) Enter the keywordbriefto view a synopsis of the PVST+ configuration information.
Interface	(OPTIONAL) Enter one of the interface keywords along with the slot/port information:For a Fast Ethernet interface, enter the keywordFastEthernetfollowed by the slot/port information.For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For Port Channel groups, enter the keywordport-channelfollowed by a number:C-Series and S-Series Range: 1-128E-Series Range: 1-255 for TeraScaleFor a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernetfollowed by the slot/port information.

Defaults

No default behavior or values

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

Version 6.4.1.0 Expanded to display port error disable state (EDS) caused by loopback BPDU inconsistency and Port VLAN ID inconsistency.

Version 6.2.1.1 Introduced

Example 1

Figure 31-2. show spanning-tree pvst brief Command

FTOS#show spanning-tree pvst vlan 3 brief VLAN 3 Executing IEEE compatible Spanning Tree Protocol Root ID Priority 4096, Address 0001.e801.6aa8 Root Bridge hello time 2, max age 20, forward delay 15 Bridge ID Priority 16384, Address 0001.e805.e306 Configured hello time 2, max age 20, forward delay 15
Interface Name	PortID	Prio Cost	Sts Cost	Designated Bridge ID		PortID
Gi 1/0	128.130	128 20000	FWD 20000	4096	0001.e801.6aa8	128.426
Gi 1/1	128.131	128 20000	BLK 20000	4096	0001.e801.6aa8	128.427
Gi 1/16	128.146	128 20000	FWD 20000	16384	0001.e805.e306	128.146
Gi 1/17	128.147	128 20000	FWD 20000	16384	0001.e805.e306	128.147
Interface Name	Role	PortID	Prio Cost	Sts Cost	Link-type Edge
Gi 1/0	Root	128.130	128 20000	FWD 20000	P2P	No
Gi 1/1	Altr	128.131	128 20000	BLK 20000	P2P	No
Gi 1/16	Desg	128.146	128 20000	FWD 20000	P2P	Yes
Gi 1/17	Desg	128.147	128 20000	FWD 20000	P2P	Yes

Example 2

Figure 31-3. show spanning-tree pvst vlan Command

FTOS#show spanning-tree pvst vlan 2 VLAN 2 Root Identifier has priority 4096, Address 0001.e805.e306 Root Bridge hello time 2, max age 20, forward delay 15 Bridge Identifier has priority 4096, Address 0001.e805.e306 Configured hello time 2, max age 20, forward delay 15 We are the root of VLAN 2 Current root has priority 4096, Address 0001.e805.e306 Number of topology changes 3, last change occurred 00:57:00

Port 130 (GigabitEthernet 1/0) is designated Forwarding Port path cost 20000, Port priority 128, Port Identifier 128.130 Designated root has priority 4096, address 0001.e805.e3:06 Designated bridge has priority 4096, address 0001.e805.e3:06 Designated port id is 128.130, designated path cost 0 Number of transitions to forwarding state 1 BPDU sent 1567, received 3 The port is not in the Edge port mode

Port 131 (GigabitEthernet 1/1) is designated Forwarding Port path cost 20000, Port priority 128, Port Identifier 128.131 Designated root has priority 4096, address 0001.e805.e3:06 Designated bridge has priority 4096, address 0001.e805.e3:06 Designated port id is 128.131, designated path cost 0 Number of transitions to forwarding state 1 BPDU sent 1567, received 0 The port is not in the Edge port mode

Port 146 (GigabitEthernet 1/16) is designated Forwarding Port path cost 20000, Port priority 128, Port Identifier 128.146 Designated root has priority 4096, address 0001.e805.e3:06 Designated bridge has priority 4096, address 0001.e805.e3:06 Designated port id is 128.146, designated path cost 0 Number of transitions to forwarding state 1 BPDU sent 1578, received 0 The port is in the Edge port mode

Port 147 (GigabitEthernet 1/17) is designated Forwarding Port path cost 20000, Port priority 128, Port Identifier 128.147 Designated root has priority 4096, address 0001.e805.e3:06 Designated bridge has priority 4096, address 0001.e805.e3:06 Designated port id is 128.147, designated path cost 0 Number of transitions to forwarding state 1 BPDU sent 1579, received 0 The port is in the Edge port mode

Example 3 Figure 31-4. show spanning-tree pvst command with EDS and LBK

Example 4 Figure 31-5. show spanning-tree pvst with EDS and PVID

Related Commands

spanning-tree pvst Configure PVST+ on an interface.

spanning-tree pvst

Configure PVST+ edge port with optional Bridge Port Data Unit (BPDU) guard, VLAN, port priority, and port cost on an interface.

Syntax spanning-tree pvst [edge-port [bpduguard [shutdown-on-violation]] | vlan vlan-range {cost number | priority value}]

To disable PVST+ on an interface, use the no spanning-tree pvst [edge-port [bpduguard] [shutdown-on-violation]] | vlan vlan-range {cost number | priority value} command.

Parameters

edge-port	(OPTIONAL) Enter the keyword edge-port to configure the interface as a PVST+ edge port.
bpduguard	(OPTIONAL) Enter the keyword portfast to enable Portfast to move the interface into forwarding mode immediately after the root fails.Enter the keyword bpduguard to disable the port when it receives a BPDU.
shutdown-on-violation	(OPTIONAL) Enter the keyword shutdown-on-violation to hardware disable an interface when a BPDU is received and the port is disabled.
vlan vlan-range	(OPTIONAL) Enter the keyword vlan followed by the VLAN number(s).Range: 1 to 4094

cost number

(OPTIONAL) Enter the keyword cost followed by the port cost value. Range: 1 to 200000 Defaults: 100 Mb/s Ethernet interface = 200000 1-Gigabit Ethernet interface = 20000 10-Gigabit Ethernet interface = 2000 Port Channel interface with one 100 Mb/s Ethernet = 200000 Port Channel interface with one 1-Gigabit Ethernet = 20000 Port Channel interface with one 10-Gigabit Ethernet = 2000 Port Channel with two 1-Gigabit Ethernet = 18000 Port Channel with two 10-Gigabit Ethernet = 1800 Port Channel with two 100-Mbps Ethernet = 180000

priority value

(OPTIONAL) Enter the keyword priority followed the Port priority value in increments of 16. Range: 0 to 240 Default: 128

Defaults Not Configured

Command Modes INTERFACE

Command History

Usage Information

Version 8.3.5.0 Introduced on S55

Version 8.2.1.0 Introduced hardware shutdown-on-violation option

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

Version 7.4.1.0 Added the optional Bridge Port Data Unit (BPDU) guard

Version 6.2.1.1 Introduced

The BPDU guard option prevents the port from participating in an active STP topology in case a BPDU appears on a port unintentionally, or is mis-configured, or is subject to a DOS attack. This option places the port into an error disable state if a BPDU appears, and a message is logged so that the administrator can take corrective action.

Note: A port configured as an edge port, on a PVST switch, will immediately transition to the forwarding state. Only ports connected to end-hosts should be configured as an edge port. Consider an edge port similar to a port with a spanning-tree portfast enabled.

If shutdown-on-violation is not enabled, BPDUs will still be sent to the RPM CPU.

Example

Figure 31-6. spanning-tree pvst vlan Command Example

FTOS(conf-if-gi-1/1)#spanning-tree pvst vlan 3 cost 18000
FTOS(conf-if-gi-1/1)#end
FTOS(conf-if-gi-1/1)#show config
!
interface GigabitEthernet 1/1
no ip address
switchport
spanning-tree pvst vlan 3 cost 18000
no shutdown
FTOS(conf-if-gi-1/1)#end
FTOS# 

Related Commands

show spanning-tree pvst View PVST+ configuration

spanning-tree pvst err-disable

C E S	Place ports in an err-disabled state if they receive a PVST+ BPDU when they are members an untagged VLAN.
Syntax	spanning-tree pvst err-disable cause invalid-pvst-bpdu
Defaults	Enabled; ports are placed in err-disabled state if they receive a PVST+ BPDU when they are members of an untagged VLAN.
and Modes	INTERFACE
Command History	Version 8.3.5.0 Introduced on S55
	Version 8.2.1.0 Introduced
Usage information	Some non-Dell Networking systems which have hybrid ports participating in PVST+ transmit two kinds of BPDUs: an 802.1D BPDU and an untagged PVST+ BPDU.Dell Networking systems do not expect PVST+ BPDU on an untagged port. If this happens, FTOS places the port in error-disable state. This behavior might result in the network not converging. To prevent FTOS from executing this action, use the command no spanning-tree pvst err-disable cause invalid-pvst-bpdu.
Related Commands	show spanning-tree pvst View the PVST+ configuration.

tc-flush-standard

C E S	Enable the MAC address flushing upon receiving every topology change notification.
Syntax	tc-flush-standardTo disable, use the no tc-flush-standard command.
Defaults	Disabled
and Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on S55Version 7.6.1.0 Support added for S-SeriesVersion 7.5.1.0 Support added for C-SeriesVersion 6.5.1.0 Introduced
Usage information	By default FTOS implements an optimized flush mechanism for PVST+. This helps in MAC addresses only when necessary (and less often) allowing for faster convergence changes. However, if a standards-based flush mechanism is needed, this knob command on to enable flushing MAC addresses upon receiving every topology change notification.

vlan bridge-priority

Set the PVST+ bridge-priority for a VLAN or a set of VLANs.

Syntax vlan vlan-range bridge-priority value

To return to the default value, enter no vlan bridge-priority command.

Parameters	vlan vlan-range	Enter the keywordvlanfollowed by the VLAN number(s).Range: 1 to 4094
	bridge-priority value	Enter the keywordbridge-priorityfollowed by the bridgpriority value in increments of 4096.Range: 0 to 61440Default: 32768

Defaults 32768

Command Modes CONFIGURATION (conf-pvst)

Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	Version 6.2.1.1 Introduced

Related Commands	vlan forward-delay Change the time interval before FTOS transitions to the forwarding state
	vlan hello-time Change the time interval between BPDUs
	vlan max-age Change the time interval before PVST+ refreshes
	show spanning-tree pvst Display the PVST+ configuration

vlan forward-delay

Set the amount of time the interface waits in the Listening State and the Learning State before transitioning to the Forwarding State.

Syntax vlan vlan-range forward-delay seconds

To return to the default setting, enter no vlan forward-delay command.

Parameters	vlan vlan-range	Enter the keywordvlanfollowed by the VLAN number(s).Range: 1 to 4094
	forward-delay seconds	Enter the keywordforward-delayfollowed by the time interval, in seconds, that FTOS waits before transitioning PVST+ to the forwarding state.Range: 4 to 30 secondsDefault: 15 seconds

Defaults 15 seconds

Command Modes	CONFIGURATION (conf-pvst)
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	Version 6.2.1.1 Introduced
Related Commands	vlan bridge-priority Set the bridge-priority value
	vlan hello-time Change the time interval between BPDUs
	vlan max-age Change the time interval before PVST+ refreshes
	show spanning-tree pvst Display the PVST+ configuration

vlan hello-time

Set the time interval between generation of PVST+ Bridge Protocol Data Units (BPDUs).

Syntax

vlan vlan-range hello-time seconds

To return to the default value, enter no vlan hello-time command.

Parameters	vlan vlan-range	Enter the keywordvlan followed by the VLAN number(s).Range: 1 to 4094
	hello-time seconds	Enter the keywordhello-timefollowed by the time interval, in seconds, between transmission of BPDUs.Range: 1 to 10 secondsDefault: 2 seconds
Defaults	2 seconds
hand Modes	CONFIGURATION (conf-pvst)
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	Version 6.2.1.1 Introduced
Related Commands	vlan bridge-prioritySet the bridge-priority value
	vlan forward-delayChange the time interval before FTOS transitions to the forwarding state
	vlan max-age Change the time interval before PVST+ refreshes
	show spanning-tree pvstDisplay the PVST+ configuration

vlan max-age

Set the time interval for the PVST+ bridge to maintain configuration information before refreshing that information.

Syntax vlan vlan-range max-age seconds

To return to the default, use the no vlan max-age command.

Parameters

vlan vlan-range	Enter the keywordvlanfollowed by the VLAN number(s).Range: 1 to 4094
max-age seconds	Enter the keywordmax-agefollowed by the time interval, in seconds, that FTOS waits before refreshing configuration information.Range: 6 to 40 secondsDefault: 20 seconds

Defaults 20 seconds

Command Modes CONFIGURATION (conf-pvst)

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

Version 6.2.1.1 Introduced

Related Commands

vlan bridge-priority Set the bridge-priority value

vlan forward-delay Change the time interval before FTOS transitions to the forwarding state

vlan hello-time Change the time interval between BPDUs

show spanning-tree pvst Display the PVST+ configuration

Quality of Service (QoS)

Overview

FTOS commands for Quality of Service (QoS) include traffic conditioning and congestion control. QoS commands are not universally supported on all Dell Networking platforms. Support is indicated by the C, E and S characters under command headings.

This chapter contains the following sections:

• Global Configuration Commands
• Per-Port QoS Commands
• Policy-Based QoS Commands
- Queue-Level Debugging (E-Series Only)

Global Configuration Commands

- qos-rate-adjust

qos-rate-adjust

By default, while rate limiting, policing, and shaping, FTOS does not include the Preamble, SFD, or the IFG fields. These fields are overhead; only the fields from MAC Destination Address to the CRC are used for forwarding and are included in these rate metering calculations. You can optionally include overhead fields in rate metering calculations by enabling QoS Rate Adjustment.

Syntax
qos-rate-adjustment overhead-bytes

Parameters	overhead-bytes	Include a specified number of bytes of packet overhead to include in rate limiting, policing, and shaping calculations.C-Series and S-Series Range: 1-31E-Series Range: 1-144
Defaults	QoS Rate Adjustment is disabled by default, and no qos-rate-adjust is listed in the running-configuration
hand Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on S55
	Version 8.3.1.0 Introduced

Per-Port QoS Commands

Per-port QoS (“port-based QoS”) allows users to defined QoS configuration on a per-physical-port basis. The commands include:

• dot1p-priority
• rate limit
• rate police
• rate shape
  • service-class bandwidth-percentage
  • service-class dynamic dot1p
  • show interfaces rate
• strict-priority queue

dot1 p-priority

Assign a value to the IEEE 802.1p bits on the traffic received by this interface.

Syntax

dot1p-priority priority-value

To delete the IEEE 802.1p configuration on the interface, enter no dot1p-priority.

Parameters

priority-value	Enter a value from 0 to 7.
	dot1p	Queue Number
	0	2
	1	0
	2	1
	3	3
	4	4
	5	5
	6	6
	7	7
	For the C-Series and S-Series, enter a value 0, 2, 4, or 6
	dot1p	Queue Number
	0	1
	1	0
	2	0
	3	1
	4	2
	5	2
	6	3
	7	3

Defaults

No default behavior or values

Command Modes

INTERFACE

Command

History

Version 8.3.5.0 Introduced on S55

Usage Information

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series

The dot1p-priority command changes the priority of incoming traffic on the interface. The system places traffic marked with a priority in the correct queue and processes that traffic according to its queue.

When you set the priority for a Port Channel, the physical interfaces assigned to the Port Channel are configured with the same value. You cannot assign dot1p-priority command to individual interfaces in a Port Channel.

rate limit

E

Limit the outgoing traffic rate on the selected interface.

Syntax

rate limit [kbps] committed-rate [burst-KB] [peak [kbps] peak-rate [burst-KB]] [vlan vlan-id]

Parameters

kbps	Enter this keyword to specify the rate limit in Kilobits per second (Kbps). On the E-Series, Dell Networking recommends using a value greater than or equal to 512 as lower values does not yield accurate results. The default granularity is Megabits per second (Mbps).Range: 0-10000000
committed-rate	Enter the bandwidth in MbpsRange: 0 to 10000
burst-KB	(OPTIONAL) Enter the burst size in KB.Range: 16 to 200000Default: 50
peak peak-rate	(OPTIONAL) Enter the keyword peak followed by a number to specify the peak rate in Mbps.Range: 0 to 10000
vlan vlan-id	(OPTIONAL) Enter the keyword vlan followed by a VLAN ID to limit traffic to those specific VLANs.Range: 1 to 4094

Defaults

Granularity for committed-rate and peak-rate is Mbps unless the kbps option is used.

Command Modes

INTERFACE

Command History

Version 8.2.1.0 Addedkbpsoption on E-Series.

Version 7.7.1.0 Removed from C-Series

Version 7.5.1.0Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series

Usage Information

Note: Per Port rate limit and rate police is supported for Layer 2 tagged and untagged switched traffic and for Layer 3 traffic. Per VLAN rate limit and rate police is supported on only tagged ports with Layer 2 switched traffic.

On one interface, you can configure the rate limit or rate police command for a VLAN or you can configure the rate limit or the rate police command for the interface. For each physical interface, you can configure six rate limit commands specifying different VLANS.

If you receive the error message:

%Error: Specified VLANs overlap with existing config.

after configuring VLANs in the rate police command, check to see if the same VLANs are used in rate limit command on other interfaces. To clear the problem, remove the rate limit configuration(s), and re-configure the rate police command. After the rate police command is configured, return to the other interfaces and re-apply the rate limit configuration.

rate police

Police the incoming traffic rate on the selected interface.

Syntax

Parameters

rate police [kbps] committed-rate [burst-KB] [peak [kbps] peak-rate [burst-KB]] [vlan vlan-id]

kbps	Enter this keyword to specify the rate limit in Kilobits per second (Kbps). On C-Series and S-Series make the following value a multiple of 64. On the E-Series, Dell Networking recommends using a value greater than or equal to 512 as lower values does not yield accurate results. The default granularity is Megabits per second (Mbps).Range: 0-10000000
committed-rate	Enter a number as the bandwidth in Mbps.Range: 0 to 10000
burst-KB	(OPTIONAL) Enter a number as the burst size in KB.Range: 16 to 200000Default: 50
peak peak-rate	(OPTIONAL) Enter the keyword peak followed by a number to specify the peak rate in Mbps.Range: 0 to 10000
vlan vlan-id	(OPTIONAL) Enter the keyword vlan followed by a VLAN ID to police traffic to those specific VLANs.Range: 1 to 4094

Defaults

Granularity for committed-rate and peak-rate is Mbps unless the kbps option is used.

Command Mode

INTERFACE

Command History

Version 8.3.5.0 Introduced on S55

Version 8.2.1.0 Added kbps option on C-Series, E-Series, and Series.

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series

Usage Information

Note: Per Port rate limit and rate police is supported for Layer 2 tagged and untagged switched traffic and for Layer 3 traffic. Per VLAN rate limit and rate police is supported on only tagged ports with Layer 2 switched traffic.

C-Series and S-Series

On one interface, you can configure the rate police command for a VLAN or you can configure the rate police command for an interface. For each physical interface, you can configure three rate police commands specifying different VLANS.

E-Series

On one interface, you can configure the rate limit or rate police command for a VLAN or you can configure the rate limit or the rate police command for the interface.

For each physical interface, you can configure six rate police commands specifying different VLANS.

After configuring VLANs in the rate police command, if this error message appears:

%Error: Specified VLANs overlap with existing config.

Check to see if the same VLANs are used with the rate limit command on other interfaces. To clear the problem, remove the rate limit configuration(s), and re-configure the rate police command. After the rate police command is configured, return to the other interfaces and re-apply the rate limit configuration.

Related Commands

rate-police Police traffic output as part of the designated policy.

rate shape

Shape the traffic output on the selected interface.

Syntax

rate shape [kbps] rate [burst-KB]

Parameters

kbps	Enter this keyword to specify the rate limit in Kilobits per second (Kbps). On C-Series and S-Series make the following value a multiple of 64. The default granularity is Megabits per second (Mbps).Range: 0-10000000
rate	Enter the outgoing rate in multiples of 10 Mbps.Range: 0 to 10000
burst-KB	(OPTIONAL) Enter a number as the burst size in KB.Range: 0 to 10000Default: 10

Defaults

Granularity for rate is Mbps unless the kbps option is used.

Command Modes

INTERFACE

Command History

Version 8.3.5.0 Introduced on S55

Version 8.2.1.0 Added kbps option on C-Series, E-Series, and Series.

	Version 7.6.1.0 Introduced on S-Series and on C-Series
	pre-Version 6.1.1.1 Introduced on E-Series
Related Commands	rate-shape Shape traffic output as part of the designated policy.
service-class bandwidth-percentage
C S	Specify a minimum bandwidth for queues
Syntax	service-class bandwidth-percentage queue0 number queue1 number queue2 number queue3 number
Parameters	number	Enter the bandwidth-weight, as a percentage. The value must be a power of 2. Range 1-1024.
Defaults	None
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on S55
	Version 8.2.1.0 Introduced on C-Series and S-Series.
Usage Information	Guarantee a minimum bandwidth to different queues globally using the command service-class bandwidth-weight from CONFIGURATION mode. The command is applied in the same way as the bandwidth-weight command in an output QoS policy. The bandwidth-weight command in QOS-POLICY-OUT mode supersedes the service-class bandwidth-weight command.

service-class dynamic dot1p

Honor all 802.1p markings on incoming switched traffic on an interface (from INTERFACE mode) or on all interfaces (from CONFIGURATION mode). A CONFIGURATION mode entry supersedes INTERFACE mode entries.

Syntax service-class dynamic dot1p

To return to the default setting, enter no service-class dynamic dot1p.

Defaults All dot1p traffic is mapped to Queue 0 unless service-class dynamic dot1p is enabled. Then the default mapping is as follows:

Table 32-1. Default dot1p to Queue Mapping

dot1p	E-Series Queue ID	C-Series Queue ID	S-Series Queue ID
0	2	1	1
1	0	0	0
2	1	0	0
3	3	1	1
4	4	2	2
5	5	2	2
6	6	3	3
7	7	3	3

Command Modes

INTERFACE

CONFIGURATION (C-Series and S-Series only)

Command History

Version 8.3.5.0 Introduced on S55

Version 8.2.1.0 Available globally on the C-Series and S-Series so that the configuration applies to all ports.

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

Version 6.5.1.0 Expanded command to permit configuration on port channels

pre-Version 6.1.1.1 Introduced on E-Series

Usage Information

Enter this command to honor all incoming 802.1p markings, on incoming switched traffic, on the interface. By default, this facility is not enabled (that is, the 802.1p markings on incoming traffic are not honored).

This command can be applied on both physical interfaces and port channels. When you set the service-class dynamic for a port channel, the physical interfaces assigned to the port channel are automatically configured; you cannot assign the service-class dynamic command to individual interfaces in a port channel.

On the C-Series and S-Series all traffic is by default mapped to the same queue, Queue 0. If you honor dot1p on ingress, then you can create service classes based the queueing strategy using the command service-class dynamic dot1p from INTERFACE mode. You may apply this queuing strategy to all interfaces by entering this command from CONFIGURATION mode.

• All dot1p traffic is mapped to Queue 0 unless service-class dynamic dot1p is enabled on an interface or globally.
• Layer 2 or Layer 3 service policies supercede dot1p service classes.

show interfaces rate

Display information of either rate limiting or rate policing on the interface.

Syntax

show interfaces [interface] rate [limit | police]

Parameters

interface	(OPTIONAL) Enter the following keywords and slot/port or number information:For a 100/1000 Ethernet interface, enter the keyword followed by the slot/port information.GigabitEthernetFor a 1-Gigabit Ethernet interface, enter the keyword followed by the slot/port information.GigabitEthernetFor a SONET interface, enter the keyword sonet followed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keyword followed by the slot/port information.TenGigabitEthernet
limit	(OPTIONAL) Enter the keyword limit to view the outgoing traffic rate.
police	(OPTIONAL) Enter the keyword police to view the incoming traffic rate.

Command Mode
EXEC EXEC Privilege

Command History
pre-Version 6.1.1.1 Introduced on E-Series
Example
Figure 32-1. show interfaces rate limit Command Example

FTOS#show interfaces gigabitEthernet 1/1 rate limit

Rate limit 300 (50) peak 800 (50)

Traffic Monitor 0: normal 300 (50) peak 800 (50)

Out of profile yellow 23386960 red 320605113

Traffic Monitor 1: normal NA peak NA

Out of profile yellow 0 red 0

Traffic Monitor 2: normal NA peak NA

Out of profile yellow 0 red 0

Traffic Monitor 3: normal NA peak NA

Out of profile yellow 0 red 0

Traffic Monitor 4: normal NA peak NA

Out of profile yellow 0 red 0

Traffic Monitor 5: normal NA peak NA

Out of profile yellow 0 red 0

Traffic Monitor 6: normal NA peak NA

Out of profile yellow 0 red 0

Traffic Monitor 7: normal NA peak NA

Out of profile yellow 0 red 0

Total: yellow 23386960 red 320605113

Table 32-2. show interfaces Command Example Fields

Field Description
Rate limit Committed rate	(Mbs) and burst size (KB) of the committed rate
peak Peak rate (Mbs) and burst size (KB) of the peak rate
Traffic monitor 0 Traffic coming to class 0
Normal Committed rate (Mbs) and burst size (KB) of the committed rate
peak Peak rate (Mbs) and burst size (KB) of the peak rate
Out of profile Yellow Number of packets that have exceeded the configured committed rate
Out of profile Red Number of packets that have exceeded the configured peak rate
Field	Description
Traffic monitor 1 Traffic coming to class 1
Traffic monitor 2 Traffic coming to class 2
Traffic monitor 3 Traffic coming to class 3
Traffic monitor 4 Traffic coming to class 4
Traffic monitor 5 Traffic coming to class 5
Traffic monitor 6 Traffic coming to class 6
Traffic monitor 7 Traffic coming to class 7
Total: yellow Total number of packets that have exceeded the configured committed rate
Total: red Total number of packets that have exceeded the configured peak rate

Figure 32-2. show interfaces rate police Command Example

Table 32-3. show interfaces police Command Example Fields

Field Description
Rate police Committed rate (Mbs) and burst size (KB) of the committed rate
peak Peak rate (Mbs) and burst size (KB) of the peak rate
Traffic monitor 0 Traffic coming to class 0
Normal Committed rate (Mbs) and burst size (KB) of the committed rate
peak Peak rate (Mbs) and burst size (KB) of the peak rate
Out of profile Yellow Number of packets that have exceeded the configured committed rate
Out of profile Red Number of packets that have exceeded the configured peak rate
Traffic monitor 1 Traffic coming to class 1
Traffic monitor 2 Traffic coming to class 2
Traffic monitor 3 Traffic coming to class 3
Traffic monitor 4 Traffic coming to class 4
Traffic monitor 5 Traffic coming to class 5
Traffic monitor 6 Traffic coming to class 6
Traffic monitor 7 Traffic coming to class 7
Total: yellow Total number of packets that have exceeded the configured committed rate
Total: red Total number of packets that have exceeded the configured peak rate

strict-priority queue

Configure a unicast queue as a strict-priority (SP) queue.

Syntax

strict-priority unicast queue number

Parameters

unicast queue number

Enter the keywords unicast queue followed by the queue number.

C-Series and S-Series Range: 1 to 3

E-Series Range: 1 to 7

Defaults

No default behavior or value

Command Modes

CONFIGURATION

Command

History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series

Usage

Information

Once a unicast queue is configured as strict-priority, that particular queue, on the entire chassis, is treated as strict-priority queue. Traffic for a strict priority is scheduled before any other queues are serviced. For example, if you send 100% line rate traffic over the SP queue, it will starve all other queues on the ports on which this traffic is flowing.

Policy-Based QoS Commands

Policy-based traffic classification is handled with class maps. These maps classify unicast traffic into one of eight classes in E-Series and one of four classes in C-Series and S-Series. FTOS enables you to match multiple class maps and specify multiple match criteria. Policy-based QoS is not supported on logical interfaces, such as port-channels, VLANS, or loopbacks. The commands are:

• bandwidth-percentage
- bandwidth-weight
- class-map
- clear qos statistics
- description
- match ip access-group

• match ip dscp
• match ip precedence
• match mac access-group
• match mac dot1p
• match mac vlan
• policy-aggregate
• policy-map-input
• policy-map-output
• qos-policy-input
• qos-policy-output
• queue backplane ignore-backpressure
• queue egress
• queue ingress
• rate-limit
• rate-police
• rate-shape
  • service-policy input
  • service-policy output
• service-queue
• set
  • show cam layer2-qos
  • show cam layer3-qos
  • show qos class-map
  • show qos policy-map
  • show qos policy-map-input
  • show qos policy-map-output
  • show qos qos-policy-input
  • show qos qos-policy-output
  • show qos statistics
  • show qos wred-profile
• test cam-usage
• threshold
• trust
• wred
• wred-profile

bandwidth-percentage

S55

S60

Assign a percentage of weight to class/queue.

Syntax

bandwidth-percentage percentage

To remove the bandwidth percentage, use the no bandwidth-percentage command.

Parameters

percentage

Enter the percentage assignment of weight to class/queue. Range: 0 to 100% (granularity 1%)

Defaults	No default behavior or values
Command Modes	CONFIGURATION (conf-qos-policy-out)
Command History	Version 8.3.5.0 Introduced on S55
	Version 6.2.1.1 Introduced on E-Series
Usage Information	The unit of bandwidth percentage is 1%. A bandwidth percentage of 0 is allowed and will disable the scheduling of that class. If the sum of the bandwidth percentages given to all eight classes exceeds 100%, the bandwidth percentage will automatically scale down to 100%.
Related Commands	qos-policy-output Create a QoS output policy.

bandwidth-weight

Syntax	bandwidth-weight weightTo remove the bandwidth weight, use the no bandwidth-weight command.
Parameters	weight	Enter the weight assignment to queue.Range: 1 to 1024 (in increments of powers of 2: 2, 4, 8, 16, 32, 64, 128, 256, 512, or 1024)
Defaults	No default behavior or values
Command Modes	CONFIGURATION (conf-qos-policy-out)
Command History	Version 7.7.1.0 Introduced on S-Series
	Version 7.6.1.0 Introduced on C-Series
Usage Information	This command is not supported on the S55.This command provides a minimum bandwidth guarantee to traffic flows in a particular queue. The minimum bandwidth is provided by scheduling packets from that queue a certain number of times relative to scheduling packets from the other queues using the Deficit Round Robin method.
Related Commands	qos-policy-output Create a QoS output policy.

class-map

Create/access a class map. Class maps differentiate traffic so that you can apply separate quality of service policies to each class.

Syntax
class-map {match-all | match-any} class-map-name [layer2]
Parameters

match-all	Determines how packets are evaluated when multiple match criteria exist.Enter the keyword match-all to determine that the packets must meet all the match criteria in order to be considered a member of the class.
match-any	Determines how packets are evaluated when multiple match criteria exist.Enter the keyword match-any to determine that the packets must meet at least one of the match criteria in order to be considered a member of the class.
class-map-name	Enter a name of the class for the class map in a character format (32 character maximum).
layer2	Enter the keyword layer2 to specify a Layer 2 Class Map.Default: Layer 3

Defaults
Layer 3

Command Modes
CONFIGURATION
Command History

Version 8.3.5.0 Introduced on S55
Version 8.2.1.0	Class-map names can be 32 characters. layer2 available on C-Series and S-Series.
Version 7.6.1.0 Introduced on S-Series
Version 7.5.1.0 Introduced on C-Series
Version 7.4.1.0 E-Series Only: Expanded to add support for Layer 2

Usage Information
Packets arriving at the input interface are checked against the match criteria, configured using this command, to determine if the packet belongs to that class. This command accesses the CLASS-MAP mode, where the configuration commands include match ip and match mac options.

Related Commands

ip access-list extended Configure an extended IP ACL.
ip access-list standard Configure a standard IP ACL.
match ip access-group Configure the match criteria based on the access control list (ACL)
match ip precedence Identify IP precedence values as match criteria
match ip dscp Configure the match criteria based on the DSCP value
match mac access-group	Configure a match criterion for a class map, based on the contents of the designated MAC ACL.
match mac dot1p Configure a match criterion for a class map, based on a dot1p value.
match mac vlan Configure a match criterion for a class map based on VLAN ID.
service-queue Assign a class map and QoS policy to different queues.
show qos class-map View the current class map information.

clear qos statistics

Syntax	Clears Matched Packets, Matched Bytes, and Dropped Packets. For TeraScale, clears Matched Packets, Matched Bytes, Queued Packets, Queued Bytes, and Dropped Packets.
	clear qos statistics interface-name.
Parameters	interface-name	Enter one of the following keywords:For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernet followed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernet followed by the slot/port information.
Defaults	No default behavior or values
Command Modes	EXEC
	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.1 Introduced on E-Series
Usage Information	E-Series Only Behavior
	If a Policy QoS is applied on an interface when clear qos statistics is issued, it will clear the egress counters in show queue statistics and vice versa. This behavior is due to the values being read from the same hardware registers.The clear qos statistics command clears both the queued and matched byte and packet counters if the queued counters incremented based on classification of packets to the queues because of policy-based QoS. If the queued counters were incremented because of some other reason and do not reflect a matching QoS entry in CAM, then this command clears the matched byte and packet counters only.
Related Commands	show qos statistics Display qos statistics.

match ip access-group

Configure match criteria for a class map, based on the access control list (ACL).

Syntax

match ip access-group access-group-name [set-ip-dscp value]

To remove ACL match criteria from a class map, enter no match ip access-group access-group-name [set-ip-dscp value] command.

Parameters	access-group-name	Enter the ACL name whose contents are used as the match criteria in determining if packets belong to the class specified byclass-map.
	set-ip-dscp value	(OPTIONAL) Enter the keywordset-ip-dscpfollowed by the IP DSCP value. The matched traffic will be marked with the DSCP value.Range: 0 to 63
Defaults	No default behavior or values
Command Modes	CLASS-MAP CONFIGURATION (config-class-map)
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.7.1.0 Added DSCP Marking option support on S-Series
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	Version 7.5.1.0 Added support for DSCP Marking option
	pre-Version 6.1.1.1 Introduced on E-Series
Usage Information	You must enter theclass-mapcommand in order to access this command. Once the class map is identified, you can configure the match criteria. Forclass-map match-any, a maximum of five ACL match criteria are allowed. Forclass-map match-all, only one ACL match criteria is allowed.
Related Commands	class-mapIdentify the class map.

description

Add a description to the selected policy map or QOS policy.

Syntax description {description}

To remove the description, use the no description {description} command.

Parameters

description Enter a description to identify the policies (80 characters maximum).

Defaults No default behavior or values

Command Modes

CONFIGURATION (policy-map-input and policy-map-output; conf-qos-policy-in and conf-qos-policy-out; wred)

Command

Version 8.3.5.0 Introduced on S55

History

pre-Version 7.7.1.0 Introduced

Related

Commands

policy-map-input Create an input policy map.

policy-map-output Create an output policy map.

qos-policy-input Create an input QOS-policy on the router.

qos-policy-output Create an output QOS-policy on the router.

wred-profile Create a WRED profile.

match ip dscp

Use a DSCP (Differentiated Services Code Point) value as a match criteria.

Syntax
match ip dscp dscp-list [[multicast] set-ip-dscp value]
To remove a DSCP value as a match criteria, enter no match ip dscp dscp-list [[multicast] set-ip-dscp value] command.
Parameters

dscp-list	Enter the IP DSCP value(s) that is to be the match criteria. Separate values by commas—no spaces (1,2,3) or indicate a list of values separated by a hyphen (1-3). Range: 0 to 63
multicast	(OPTIONAL) Enter the keyword multicast to match against multicast traffic. Note: This option is not supported on C-Series or S-Series.
set-ip-dscp value	(OPTIONAL) Enter the keyword set-ip-dscp followed by the IP DSCP value. The matched traffic will be marked with the DSCP value. Range: 0 to 63 Note: This option is not supported on S-Series.

Defaults

No default behavior or values

Command Modes
CLASS-MAP CONFIGURATION (config-class-map)
Command History

Version 8.3.5.0 Introduced on S55
Version 7.7.1.0	Added keyword multicast.Added DSCP Marking option support on S-Series
Version 7.6.1.0 Introduced on S-Series
Version 7.5.1.0 Introduced on C-Series	Added support for DSCP Marking option
Version 6.2.1.1 Introduced on E-Series

Usage Information

You must enter the class-map command in order to access this command. Once the class map is identified, you can configure the match criteria.

The match ip dscp and match ip precedence commands are mutually exclusive.

Up to 64 IP DSCP values can be matched in one match statement. For example, to indicate IP DCSP values 0 1 2 3 4 5 6 7, enter either the command match ip dscp 0,1,2,3,4,5,6,7 or match ip dscp 0-7.

Note: Only one of the IP DSCP values must be a successful match criterion, not all of the specified IP DSCP values need to match.

Related Commands

class-map Identify the class map.

match ip precedence

Use IP precedence values as a match criteria.

Syntax

match ip precedence ip-precedence-list [[multicast] set-ip-dscp value]

To remove IP precedence as a match criteria, enter no match ip precedence ip-precedence-list [[multicast] set-ip-dscp value] command.

Parameters

ip-precedence-list	Enter the IP precedence value(s) as the match criteria. Separate values by commas—no spaces (1,2,3) or indicate a list of values separated by a hyphen (1-3).Range: 0 to 7
multicast	(OPTIONAL) Enter the keyword multicast to match against multicast traffic.Note: This option is not supported on C-Series or S-Series.
set-ip-dscp value	(OPTIONAL) Enter the keyword set-ip-dscp followed by the IP DSCP value. The matched traffic will be marked with the DSCP value.Range: 0 to 63Note: This option is not supported on S-Series.

Defaults

No default behavior or values

Command Modes

CLASS-MAP CONFIGURATION (conf-class-map)

Command History

Version 8.3.5.0 Introduced on S55
Version 7.7.1.0	Added keyword multicast.Added DSCP marking option support for S-Series
Version 7.6.1.0 Introduced on S-Series
Version 7.5.1.0 Introduced on C-Series	Added support for DSCP Marking option
Version 6.2.1.1 Introduced on E-Series

Usage Information

You must enter the class-map command in order to access this command. Once the class map is identified, you can configure the match criteria.

The match ip precedence command and the match ip dscp command are mutually exclusive.

Up to eight precedence values can be matched in one match statement. For example, to indicate the IP precedence values 0 1 2 3 enter either the command match ip precedence 0-3 or match ip precedence 0,1,2,3.

Note: Only one of the IP precedence values must be a successful match criterion, not all of the specified IP precedence values need to match.

Related Commands

class-map Identify the class map.

match mac access-group

Syntax	Configure a match criterion for a class map, based on the contents of the designated MAC ACL.
	match mac access-group {mac-acl-name}
Parameters	mac-acl-name	Enter a MAC ACL name. Its contents will be used as the match criteria in the class map.
Defaults	No default values or behavior
Command Modes	CLASS-MAP
Command History	Version 8.3.5.0 Introduced on S55
	Version 8.2.1.0 Available on the C-Series and S-Series.
	Version 7.5.1.0 Added support for DSCP Marking option
	Version 7.4.1.0 Introduced
Usage Information	You must enter theclass-mapcommand in order to access this command. Once the class map is identified, you can configure the match criteria.
Related Commands	class-mapIdentify the class map.

match mac dot1p

C E S	Configure a match criterion for a class map, based on a dot1p value.
Syntax	match mac dot1p {dot1p-list}
Parameters	dot1p-list	Enter a dot1p value.Range: 0-7
Defaults	No default values or behavior
Command Modes	CLASS-MAP
Command History	Version 8.3.5.0 Introduced on S55
	Version 8.2.1.0 Available on the C-Series and S-Series.
	Version 7.5.1.0 Added support for DSCP Marking option
	Version 7.4.1.0 Introduced
Usage Information	You must enter the class-map command in order to access this command. Once the class map is identified, you can configure the match criteria.
Related Commands	class-map Identify the class map.

match mac vlan

C E S	Configure a match criterion for a class map based on VLAN ID.
Syntax	match mac vlan number
Parameters	number	Enter the VLAN ID.Range: 1–4094
Defaults	None
Command Modes	CLASS-MAP
Command History	Version 8.3.5.0 Introduced on S55
	Version 8.2.0.1 Introduced
Usage Information	You must first enter theclass-mapcommand in order to access this command. You can match against only one VLAN ID.
Related Commands	class-map Create/access a class map.

policy-aggregate

C E S	Allow an aggregate method of configuring per-port QoS via policy maps. An aggregate QoS policy is part of the policy map (input/output) applied on an interface.
Syntax	policy-aggregate qos-policy-nameTo remove a policy aggregate configuration, use no policy-aggregate qos-policy-name command.
Parameters	qos-policy-name Enter the name of the policy map in character format (32 characters maximum)
Defaults	No default behavior or values
Command Modes	CONFIGURATION (policy-map-input and policy-map-output)This command is supported on C-Series, S-Series, and the S55 under policy-map-output only.
Command History	Version 8.3.5.0 Introduced on S55
	Version 8.2.1.0 Policy name character limit increased from 16 to 32.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.1 Introduced on E-Series
Usage Information	C-Series and S-SeriesAggregate input/output QoS policy applies to all the port ingoing/outgoing traffic. Aggregate input/output QoS policy can co-exist with per queue input/output QoS policies.
	1. If only aggregate input QoS policy exists, input traffic conditioning configurations (rate-police) will apply. Any marking configurations in aggregate input QoS policy will be ignored.

1. If aggregate input QoS policy and per class input QoS policy co-exist, then aggregate input QoS policy will preempt per class input QoS policy on input traffic conditioning (rate-police). In other words, if rate police configuration exists in aggregate QoS policy, the rate police configurations in per class QoS are ignored. Marking configurations in per class input QoS policy still apply to each queue.

E-Series

Aggregate input/output QoS policy applies to all the port ingoing/outgoing traffic. Aggregate input/output QoS policy can co-exist with per queue input/output QoS policies.

1. If only an aggregate input QoS policy exists, input traffic conditioning configurations (rate-police) will apply. Any marking configurations in the aggregate input QoS policy will be ignored.
2. If an aggregate input QoS policy and a per-class input QoS policy co-exist, then the aggregate input QoS policy will preempt the per-class input QoS policy on input traffic conditioning (rate-police). In other words, if a rate police configuration exists in the aggregate QoS policy, the rate police configurations in the per-class QoS are ignored. Marking configurations in the per-class input QoS policy still apply to each queue.
3. If only an aggregate output QoS policy exists, egress traffic conditioning configurations (rate-limit and rate-shape) in the aggregate output QoS policy will apply. Scheduling and queuing configurations in the aggregate output QoS policy (if existing) are ignored. Each queue will use default scheduling and queuing configuration (Weighted Random Early Detection (WRED) and Bandwidth).
4. If the aggregate output QoS policy and per-queue output QoS policy co-exist, the aggregate output QoS policy will preempt a per-queue output QoS policy on egress traffic conditioning (rate-limit). In other words, if a rate limit configuration exists in the aggregate output QoS policy, the rate limit configurations in per-queue output QoS policies are ignored. Scheduling and queuing configurations (WRED and Bandwidth) in the per-queue output QoS policy still apply to each queue.

Related Commands

policy-map-input Create an input policy map

policy-map-output Create an output policy map (E-Series Only)

policy-map-input

Create an input policy map.

Syntax

policy-map-input policy-map-name [layer2]

To remove an input policy map, use the no policy-map-input policy-map-name [layer2] command.

Parameters

policy-map-name	Enter the name for the policy map in character format (32 characters maximum).
layer2	(OPTIONAL) Enter the keyword layer2 to specify a Layer 2 Class Map.Default: Layer 3

Defaults

Layer 3

Command Modes

CONFIGURATION

Command History	Version 8.3.5.0 Introduced on S55
	Version 8.2.1.0 Policy name character limit increased from 16 to 32.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	Version 7.4.1.0 Expanded to add support for Layer 2
	pre-Version 6.1.1.1 Introduced on E-Series
Usage information	Input policy map is used to classify incoming traffic to different flows using class-map, QoS policy, or simply using incoming packets DSCP. This command enables policy-map-input configuration mode (conf-policy-map-in).
Related Commands	service-queue Assign a class map and QoS policy to different queues.
	policy-aggregate Allow an aggregate method of configuring per-port QoS via policy maps.
	service-policy input Apply an input policy map to the selected interface.

policy-map-output

Create an output policy map.

Syntax
policy-map-output policy-map-name
To remove a policy map, use the no policy-map-output policy-map-name command.

Parameters	policy-map-name	Enter the name for the policy map in character format (16 characters maximum).
Defaults	No default behavior or values
mand Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on S55
	Version 8.2.1.0 Policy name character limit increased from 16 to 32.
	Version 7.6.1.0 Introduced on C-Series and S-Series
	pre-Version 6.1.1.1 Introduced on E-Series
Usage Information	Output policy map is used to assign traffic to different flows using QoS policy. This command enables the policy-map-output configuration mode (conf-policy-map-out).
Related Commands	service-queue Assign a class map and QoS policy to different queues.
	policy-aggregate Allow an aggregate method of configuring per-port QoS via policy maps.
	service-policy output Apply an output policy map to the selected interface.

qos-policy-input

Syntax	Create a QoS input policy on the router.
	qos-policy-input qos-policy-name [layer2]
	To remove an existing input QoS policy from the router, use no qos-policy-input qos-policy-name [layer2] command.
Parameters	qos-policy-name	Enter your input QoS policy name in character format (32 character maximum).
	layer2	(OPTIONAL) Enter the keyword layer2 to specify a Layer 2 Class Map. Default: Layer 3
Defaults	Layer 3
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on S55
	Version 8.2.1.0 Policy name character limit increased from 16 to 32.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	Version 7.4.1.0 E-Series Only: Expanded to add support for Layer 2
Usage Information	Use this command to specify the name of the input QoS policy. Once input policy is specified, rate-police can be defined. This command enables the qos-policy-input configuration mode—(conf-qos-policy-in).
	When changing a “service-queue” configuration in a QoS policy map, all QoS rules are deleted and re-added automatically to ensure that the order of the rules is maintained. As a result, the Matched Packets value shown in the “show qos statistics” command is reset.
Related Commands	Note: On ExaScale, FTOS cannot classify IGMP packets on a Layer 2 interface using Layer 3 policy map. The packets always take the default queue, Queue 0, and cannot be rate-policed.
	rate-police Incoming traffic policing function

qos-policy-output

Create a QoS output policy.

Syntax

qos-policy-output qos-policy-name

To remove an existing output QoS policy, use no qos-policy-output qos-policy-name command.

Parameters

qos-policy-name

Enter your output QoS policy name in character format (32 character maximum).

Defaults

No default behavior or values

Command Modes CONFIGURATION

Command History	Version 8.3.5.0 Introduced on S55
	Version 8.2.1.0 Policy name character limit increased from 16 to 32.
	Version 7.6.1.0 Introduced on C-Series and S-Series
	pre-Version 6.1.1.1 Introduced on E-Series
Usage Information	Use this command to specify the name of the output QoS policy. Once output policy is specified, rate-limit, bandwidth-percentage, and WRED can be defined. This command enables the qos-policy-output configuration mode—(conf-qos-policy-out).When changing a “service-queue” configuration in a QoS policy map, all QoS rules are deleted and re-added automatically to ensure that the order of the rules is maintained. As a result, the Matched Packets value shown in the “show qos statistics” command is reset.
Related Commands	rate-limit	Outgoing traffic rate-limit functionality
	bandwidth-percentage	Assign weight to class/queue percentage
	bandwidth-weight	Assign a priority weight to a queue.
	wred	Assign yellow or green drop precedence

queue backplane ignore-backpressure

E Reduce egress pressure by ignoring the ingress backpressure

Syntax queue backplane ignore-backpressure

To return to the default, use the no queue backplane ignore-backpressure command.

Defaults No default behavior or values

Command Modes CONFIGURATION

Command History Version 7.7.1.0 Introduced on E-Series

queue egress

Assign a WRED Curve to all eight egress Multicast queues or designate the percentage for the Multicast bandwidth queue.

Syntax queue egress multicast linecard { slot number port-set number | all } [wred-profile name | multicast-bandwidth percentage]

To return to the default, use the no queue egress multicast linecard { slot number port-set number | all } [wred-profile name | multicast-bandwidth percentage] command.

Parameters

linecard number	Enter the keyword linecard followed by the line card slot number.E-Series Range: 0 to 13 on a E1200, 0 to 6 on a E600/E600i, and 0 to 5 on a E300.
port-set number	Enter the keyword port-set followed by the line card's port pipe.Range: 0 or 1
all Enter the keyword all to apply to all line cards.
wred-profile name	(OPTIONAL) Enter the keyword wred-profile followed by your WRED profile name in character format (16 character maximum). Or use one of the pre-defined WRED profile names.Pre-defined Profiles:wred_drop, wred-ge_y, wred_ge_g, wred_teng_y, wred_teng_g
multicast-bandwidth percentage	(OPTIONAL) Enter the keyword multicast-bandwidth followed by the bandwidth percentage.Range: 0 to 100%

Defaults

No default behavior or values

Command Modes

CONFIGURATION

Command History

Version 7.5.1.0 Added support for multicast-bandwidth

Version 7.4.1.0 and 6.5.3.0 Introduced on E-Series

Usage Information

This command does not uniquely identify a queue, but rather identifies only a set of queues. The WRED curve is applied to all eight egress Multicast queues.

Important Points to Remember—multicast-bandwidth option

• A unique Multicast Weighted Fair Queuing (WFQ) setting can be applied only on a per port-pipe basis. The minimum percentage of the multicast bandwidth assigned to any of the ports in the port-pipe will take effect for the entire port-pipe.
• If the percentage of multicast bandwidth is 0, control traffic going through multicast queues are dropped.
• The no form of the command without multicast-bandwidth and wired-profile, will remove both the wired-profile and multicast-bandwidth configuration.
• On 10 Gigabit ports only, the multicast bandwidth option will work only if the total unicast bandwidth is more than the multicast bandwidth.
• If strict priority is applied along with multicast-bandwidth, the effect of strict priority is on all ports where unicast and multicast bandwidth are applied.
• When multicast bandwidth is assigned along with unicast bandwidth, first multicast bandwidth will be reserved for that port, then the remaining unicast bandwidth configured is adjusted according to the bandwidth available after reserving for multicast bandwidth.

Related Commands

show queue statistics egress

Display the egress queue statistics

queue ingress

Assign a WRED Curve to all eight ingress Multicast queues or designate the percentage for the Multicast bandwidth queue.

Syntax

queue ingress multicast {linecard slot number port-set number | all} [wred-profile name]

To return to the default, use the no queue ingress multicast {linecard slot number port-set number | all} [wred-profile name] command.

Parameters

linecard number	Enter the keyword linecard followed by the line card slot number.E-Series Range: 0 to 13 on a E1200, 0 to 6 on a E600/E600i, and 0 to 5 on a E300.
port-set number	Enter the keyword port-set followed by the line card’s port pipe.Range: 0 or 1
all Enter the keyword all to apply to all line cards.
wred-profile name	(OPTIONAL) Enter the keyword wred-profile followed by your WRED profile name in character format (16 character maximum). Or use one of the pre-defined WRED profile names.Pre-defined Profiles:wred_drop, wred-ge_y, wred_ge_g, wred_teng_y, wred_teng_g

Defaults

No default behavior or values

Command Modes

CONFIGURATION

Command History

Version 7.4.1.0 and 6.5.3.0 Introduced on E-Series

Usage Information

This command does not uniquely identify a queue, but rather identifies only a set of queues. The WRED Curve is applied to all eight ingress Multicast queues.

Note: The multicast-bandwidth option is not supported on queue ingress. If you attempt to use the multicast-bandwidth option, the following reject error message is generated:

% Error: Bandwidth-percent is not allowed for ingress multicast

Related Commands

show queue statistics ingress

Display the ingress queue statistics

rate-limit

Specify the rate-limit functionality on outgoing traffic as part of the selected policy.

Syntax

rate-limit [kbps] committed-rate [burst-KB] [peak [kbps] peak-rate [burst-KB]]

Parameters

kbps	Enter this keyword to specify the rate limit in Kilobits per second (Kbps). On the E-Series, Dell Networking recommends using a value greater than or equal to 512 as lower values does not yield accurate results. The default granularity is Megabits per second (Mbps).Range: 0-10000000
committed-rate	Enter the committed rate in Mbps.Range: 0 to 10000 Mbps
burst-KB	(OPTIONAL) Enter the burst size in KB.Range: 16 to 200000 KBDefault: 50 KB
peak peak-rate	(OPTIONAL) Enter the keyword peak followed by the peak rate in Mbps.Range: 0 to 10000 MbpsDefault: Same as designated for committed-rate

Defaults

Burst size is 50 KB. peak-rate is by default the same as committed-rate. Granularity for committed-rate and peak-rate is Mbps unless the kbps option is used.

Command Modes

QOS-POLICY-OUT

Command History

Version 8.2.1.0 Added kbps option on E-Series.

Version 7.7.1.0 Removed from C-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series

Related Commands

rate limit Specify rate-limit functionality on the selected interface.

qos-policy-output Create a QoS output policy.

rate-police

Specify the policing functionality on incoming traffic.

Syntax

rate-police [kbps] committed-rate [burst-KB] [peak [kbps] peak-rate [burst-KB]]

Parameters

kbps	Enter this keyword to specify the rate limit in Kilobits per second (Kbps). On C-Series and S-Series make the following value a multiple of 64. On the E-Series, Dell Networking recommends using a value greater than or equal to 512 as lower values does not yield accurate results. The default granularity is Megabits per second (Mbps).Range: 0-10000000
committed-rate	Enter the committed rate in Mbps.Range: 0 to 10000 Mbps

	burst-KB	(OPTIONAL) Enter the burst size in KB. Range: 16 to 200000 KB Default: 50 KB
	peak peak-rate	(OPTIONAL) Enter the keyword peak followed by the peak rate in Mbps. Range: 0 to 10000 Mbps Default: Same as designated for committed-rate
Defaults	Burst size is 50 KB. peak-rate is by default the same as committed-rate. Granularity for committed-rate and peak-rate is Mbps unless the kbps option is used.
Command Modes	QOS-POLICY-IN
Command History	Version 8.3.5.0 Introduced on S55
	Version 8.2.1.0 Added kbps option on C-Series, E-Series, and Series.
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.1 Introduced on E-Series
Related Commands	rate police Specify traffic policing on the selected interface.
	qos-policy-input Create a QoS output policy.

rate-shape

Shape traffic output as part of the designated policy.

Syntax
Parameters
rate-shape [kbps] rate [burst-KB]

kbps	Enter this keyword to specify the rate limit in Kilobits per second (Kbps). On C-Series and S-Series make the following value a multiple of 64. The default granularity is Megabits per second (Mbps).Range: 0-10000000
rate	Enter the outgoing rate in multiples of 10 Mbps.Range: 0 to 10000
burst-KB	(OPTIONAL) Enter a number as the burst size in KB.Range: 0 to 10000Default: 10

Defaults

Burst size is 10 KB. Granularity for rate is Mbps unless the kbps option is used.

Command Modes
QOS-POLICY-OUT
Command History

Version 8.3.5.0 Introduced on S55
Version 8.2.1.0	Addedkbpsoption on C-Series, E-Series, and Series.
Version 7.6.1.0 Introduced on S-Series
Version 7.5.1.0 Introduced on C-Series
pre-Version 6.1.1.1 Introduced on E-Series

Usage rate-shape can be applied only as an aggregate policy. If it is applied as a class-based policy, then rate-shape will not take effect.

Related Commands	rate shape Shape the traffic output of the selected interface.
	qos-policy-output Create a QoS output policy.

service-policy input

Apply an input policy map to the selected interface.

Syntax

service-policy input policy-map-name [layer2]

To remove the input policy map from the interface, use the no service-policy input policy-map-name [layer2] command.

Parameters	policy-map-name	Enter the name for the policy map in character format (16 characters maximum). You can identify an existing policy map or name one that does not yet exist.
	layer2	(OPTIONAL) Enter the keyword layer2 to specify a Layer 2 Class Map. Default: Layer 3

Defaults

Layer 3

Command Modes	INTERFACE
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	Version 7.4.1.0 E-Series Only: Expanded to add support for Layer 2
	pre-Version 6.1.1.1 Introduced on E-Series

Usage Information A single policy-map can be attached to one or more interfaces to specify the service-policy for those interfaces. A policy map attached to an interface can be modified.

Note: The service-policy commands are not allowed on a port channel. The service-policy input policy-map-name command and the service-class dynamic dot1p command are not allowed simultaneously on an interface. However, the service-policy input command (without the policy-map-name option) and the service-class dynamic dot1p command are allowed on an interface.

Related Commands

policy-map-input Create an input policy map.

service-policy output

Apply an output policy map to the selected interface.

Syntax

service-policy output policy-map-name

To remove the output policy map from the interface, use the no service-policy output policy-map-name command.

Parameters

policy-map-name

Enter the name for the policy map in character format (16 characters maximum). You can identify an existing policy map or name one that does not yet exist.

Defaults

No default behavior or values

Command Modes

INTERFACE

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced on C-Series and S-Series

pre-Version 6.1.1.1 Introduced on E-Series

Usage Information

A single policy-map can be attached to one or more interfaces to specify the service-policy for those interfaces. A policy map attached to an interface can be modified.

Related Commands

policy-map-output Create an output policy map.

service-queue

Assign a class map and QoS policy to different queues.

Syntax

service-queue queue-id [class-map class-map-name] [qos-policy qos-policy-name]

To remove the queue assignment, use the no service-queue queue-id [class-map class-map-name] [qos-policy qos-policy-name] command.

Parameters

queue-id	Enter the value used to identify a queue. Range: 0 to 7 on E-Series (eight queues per interface), 0-3 on C-Series and S-Series (four queues per interface; four queues are reserved for control traffic.)
class-map class-map-name	(OPTIONAL) Enter the keyword class-map followed by the class map name assigned to the queue in character format (16 character maximum). Note: This option is available under policy-map-input only.
qos-policy qos-policy-name	(OPTIONAL) Enter the keyword qos-policy followed by the QoS policy name assigned to the queue in text format (16 characters maximum). This specifies the input QoS policy assigned to the queue under policy-map-input and output QoS policy under policy-map-output context.

Defaults

No default behavior or values

Command Modes

CONFIGURATION (conf-policy-map-in and conf-policy-map-out)

Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	pre-Version 6.1.1.1 Introduced on E-Series
Usage Information	There are eight (8) queues per interface on the E-Series and four (4) queues per interface on the C-Series and S-Series. This command assigns a class map or QoS policy to different queues.
Related Commands	class-map Identify the class map.
	service-policy input Apply an input policy map to the selected interface.
	service-policy output Apply an output policy map to the selected interface.
set
C E S	Mark outgoing traffic with a Differentiated Service Code Point (DSCP) or dot1p value.
Syntax	set {ip-dscp value | mac-dot1p value}
Parameters	ip-dscp value	(OPTIONAL) Enter the keyword Ip-dscp followed by the IP DSCP value. Range: 0 to 63
	mac-dot1p value	Enter the keyword mac-dot1p followed by the dot1p value. Range: 0 to 7 On the C-Series and S-Series allowed values are:0,2,4,6
Defaults	No default behavior or values
Command Modes	CONFIGURATION (conf-qos-policy-in)
Command History	Version 8.3.5.0 Introduced on S55
	Version 8.2.1.0 mac-dot1p available on the C-Series and S-Series
	Version 7.6.1.0 Introduced on S-Series
	Version 7.5.1.0 Introduced on C-Series
	Version 7.4.1.0 E-Series Only: Expanded to add support for mac-dot1p
	pre-Version 6.1.1.1 Introduced on E-Series
Usage Information	C-Series and S-Series
	Once the IP DSCP bit is set, other QoS services can then operate on the bit settings.
	E-Series
	Once the IP DSCP bit is set, other QoS services can then operate on the bit settings. WRED (Weighted Random Early Detection) ensures that high-precedence traffic has lower loss rates than other traffic during times of congestion.

show cam layer2-qos

Display the Layer 2 QoS CAM entries.

Syntax
show cam layer2-qos { [linecard number port-set number] | [interface interface]} [summary]

Parameters	linecard number	Enter the keyword linecard followed by the line card slot number.E-Series Range: 0 to 13 on a E1200, 0 to 6 on a E600/E600i, and 0 to 5 on a E300.
	port-set number	Enter the keyword port-set followed by the line card's port pipe.Range: 0 or 1
	interface interface	Enter the keyword interface followed by one of the keywords below and slot/port or number information:For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.For a SONET interface, enter the keyword sonet followed by the slot/port information.For a Ten Gigabit Ethernet interface, enter the keywordTenGigabitEthernet followed by the slot/port information.
	summary	(OPTIONAL) Enter the keyword summary to display only the total number of CAM entries.

Defaults

No default behavior or values

Command Modes

EXEC

Command History

Version 7.4.1.0 Introduced on E-Series

Example
Figure 32-3. show cam layer2-qos interface Command Output

FTOS#show cam layer2-qos interface gigabitethernet 2/0
Cam Index	Port	Dot1p	Proto	SrcMac	SrcMask	DstMac	DstMask	Dot1p Marking	DSCP	Queue Marking
01817 0	-	0		00:00:00:00:cc:cc	00:00:00:00:ff:ff	00:00:00:00:dd:dd	00:00:00:00:ff:ff	-	-	7
01818 0	-	0		00:00:00:00:00:c0	00:00:00:00:00:f0	00:00:00:00:00:d0	00:00:00:00:00:f0	-	45	5
01819 0	4	0		00:00:00:a0:00:00	00:00:00:ff:00:00	00:00:00:b0:00:00	00:00:00:ff:00:00	4	-	4
01820 0	-	0x2000		00:00:00:00:00:00	00:00:00:00:00:00	00:00:00:00:00:00	ff:ff:ff:ff:ff	-	-	1
02047 0	-	0		00:00:00:00:00:00	00:00:00:00:00:00	00:00:00:00:00:00	00:00:00:00:00:00	-	-	0
FTOS#

Example
Figure 32-4. show cam layer2-qos linecard Command Output

FTOS#show cam layer2-qos linecard 2 port-set 0
Cam Index	Port	Dotlp	Proto	SrcMac	SrcMask	DstMac	DstMask	Dotlp Marking	DSCP	Queue Marking
01817	0	-	0	00:00:00:00:cc:cc	00:00:00:00:ff:ff	00:00:00:00:dd:dd	00:00:00:00:ff:ff	-	-	7
01818	0	-	0	00:00:00:00:00:c0	00:00:00:00:00:f0	00:00:00:00:00:d0	00:00:00:00:00:f0	-	45	5
01819	0	4	0	00:00:00:a0:00:00	00:00:00:ff:00:00	00:00:00:b0:00:00	00:00:00:ff:00:00	4	-	4
01820	0	-	0x2000	00:00:00:00:00:00	00:00:00:00:00:00	00:00:00:00:00:b0	ff:ff:ff:ff:ff	-	-	1
02047	0	-	0	00:00:00:00:00:00	00:00:00:00:00:00	00:00:00:00:00:00	00:00:00:00:00:00	-	-	0
FTOS#

show cam layer3-qos

Display the Layer 3 QoS CAM entries.

Syntax
show cam layer3-qos { [linecard number port-set number] | [interface interface]} [summary]

Parameters	linecard number	Enter the keyword linecard followed by the line card slot number.E-Series Range: 0 to 13 on a E1200, 0 to 6 on a E600/E600i, and 0 to 5 on a E300.
	port-set number	Enter the keyword port-set followed by the line card's port pipe.Range: 0 or 1
	interface interface	Enter the keyword interface followed by one of the keywords below and slot/port or number information:For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.For a SONET interface, enter the keyword sonet followed by the slot/port information.For a Ten Gigabit Ethernet interface, enter the keywordTenGigabitEthernet followed by the slot/port information.
	summary	(OPTIONAL) Enter the keyword summary to display only the total number of CAM entries.
Defaults	No default behavior or values
hand Modes	EXEC
Command History	Version 6.5.1.0 Introduced on E-Series

Example
Figure 32-5. show cam layer3-qos linecard interface Command Output

FTOS#sh cam layer3-qos interface gigabitethernet 2/1
Cam Index	Port	Dscp	Proto	Tcp Flag	Src Port	Dst Port	SrcIp	DstIp	DSCP Marking	Queue
----
23488	1	0	0	0x0	0	0	0.0.0.0/0	0.0.0.0/0	-	TRUST-DSCP
FTOS#

In these figures outputs, note that:

• The entry TRUST-DSCP in the Queue column indicates that the trust diffserv is configured on the policy-map.
  • A hyphen (-) entry in the DSCP Marking column indicates that there is no DSCP marking.
• In the Proto column (Protocol), IP, ICMP, UDP, and TCP strings are displayed. For other protocols, the corresponding protocol number is displayed.

Example

Figure 32-6. show cam layer3-qos linecard port-set Command Output

FTOS#show cam layer3-qos linecard 13 port-set 0
Cam Index	Port	Dscp	Proto	Tcp Flag	Src Port	Dst Port	SrcIp	DstIp	DSCP Marking	Queue
24511	1	0	TCP	0x5	2	5	1.0.0.1/24	2.0.0.2/24	-	TRUST-DSCP
24512	1	0	UDP	0x2	2	5	8.0.0.8/24	8.0.0.8/24	23	3
FTOS#

Example

Figure 32-7. show cam layer3-qos linecard interface Command without Trust Output

FTOS#sh cam layer3-qos interface gigabitethernet 2/1
Cam Index	Port	Dscp	Proto	Tcp Flag	Src Port	Dst Port	SrcIp	DstIp	DSCP Marking	Queue
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
23488	1	56	0	0x0	0	0	0.0.0.0/0	0.0.0.0/0	-	7
23489	1	48	0	0x0	0	0	0.0.0.0/0	0.0.0.0/0	-	6
23490	1	40	0	0x0	0	0	0.0.0.0/0	0.0.0.0/0	-	5
23491	1	0	IP	0x0	0	0	10.1.1.1/32	20.1.1.1/32	-	0
23492	1	0	IP	0x0	0	0	10.1.1.1/32	20.1.1.2/32	-	0
24511	1	0	0	0x0	0	0	0.0.0.0/0	0.0.0.0/0	-	0
FTOS#

Example

Figure 32-8. show cam layer3-qos summary Command Output

FTOS#show cam layer3-qos linecard 13 port-set 0 summary
Total number of CAM entries for Port-Set 0 is 100
FTOS# 

show qos class-map

View the current class map information.

Syntax

show qos class-map [class-name]

Parameters

class-name

(Optional) Enter the name of a configured class map.

Defaults

No default behavior or values

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series

Example

Figure 32-9. show qos class-map Command Output

FTOS#show qos class-map

Class-map match-any CMMatch ip access-group ACL

Related Commands

class-map Identify the class map

show qos policy-map

View the QoS policy map information.

Syntax

show qos policy-map {summary [interface] | detail [interface]}
Parameters

summary interface

To view a policy map interface summary, enter the keyword summary and optionally one of the following keywords and slot/port or number information:For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.For a SONET interface, enter the keyword sonet followed by the slot/port information.For a Ten Gigabit Ethernet interface, enter the keywordTenGigabitEthernet followed by the slot/port information.

detail interface

To view a policy map interface in detail, enter the keyword detail and optionally one of the following keywords and slot/port or number information:For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.For a SONET interface, enter the keyword sonet followed by the slot/port information.For a Ten Gigabit Ethernet interface, enter the keywordTenGigabitEthernet followed by the slot/port information.

Defaults

No default behavior or values

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

Version 7.4.1.0 E-Series only: Added Trust IPv6 diffserv

Version 6.2.1.1 Introduced on E-Series

Example 1 Figure 32-10. show qos policy-map detail (IPv4) Command Output

FTOS#show qos policy-map detail gigabitethernet 0/0
Interface GigabitEthernet 4/1
Policy-map-input policy
Trust diffserv
Queue# Class-map-name Qos-policy-name
0 - q0
1 CM1 q1
2 CM2 q2
3 CM3 q3
4 CM4 q4
5 CM5 q5
6 CM6 q6
7 CM7 q7
FTOS#

Example 2 Figure 32-11. show qos policy-map detail (IPv6) Command Output (E-Series only)

FTOS# show qos policy-map detail gigabitethernet 0/0
Interface GigabitEthernet 8/29
Policy-map-input pmap1
Trust ipv6-diffserv
Queue# Class-map-name Qos-policy-name
0 c0 q0
1 c1 q1
2 c2 q2
3 c3 q3
4 c4 q4
5 c5 -q6
6 c6 q6
7 c7 q7
FTOS#

Example 3 Figure 32-12. show qos policy-map summary (IPv4) Command Output

FTOS#sho qos policy-map summary
Interface policy-map-input policy-map-output
Gi 4/1 PM1 -
Gi 4/2 PM2 PMOut
FTOS# 

show qos policy-map-input

View the input QoS policy map details.

Syntax show qos policy-map-input [policy-map-name] [class class-map-name] [qos-policy-input qos-policy-name]

Parameters

policy-map-name	Enter the policy map name.
class class-map-name	Enter the keyword class followed by the class map name.
qos-policy-input qos-policy-name	Enter the keyword qos-policy-input followed by the QoS policy name.

Defaults No default behavior or values

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

Version 7.4.1.0 E-Series Only: Added Trust IPv6 diffserv

Version 6.2.1.1 Introduced on E-Series

Example 1

Figure 32-13. show qos policy-map-input (IPv4) Command Output

FTOS#show qos policy-map-input
Policy-map-input PolicyMapInput
Aggregate Qos-policy-name AggPolicyIn
Queue# Class-map-name Qos-policy-name
0 ClassMap1 qosPolicyInput
FTOS# 

Example 2

Figure 32-14. show qos policy-map-input (IPv6) Command Output

FTOS# show qos policy-map-input
Policy-map-input pmap1
Trust ipv6-diffserv
Queue# Class-map-name Qos-policy-name
0 c0 q0
1 c1 q1
2 c2 q2
3 c3 q3
4 c4 q4
5 c5 -
6 c6 q6
7 c7 q7
FTOS#

show qos policy-map-output

View the output QoS policy map details.

Syntax

show qos policy-map-output [policy-map-name] [qos-policy-output qos-policy-name]

Parameters

policy-map-name	Enter the policy map name.
qos-policy-output qos-policy-name	Enter the keyword qos-policy-output followed by the QoS policy name.

Defaults

No default behavior or values

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced on C-Series and S-Series

pre-Version 6.1.1.1 Introduced on E-Series

Example

Figure 32-15. show qos policy-map-output Command Output

FTOS#show qos policy-map-output
Policy-map-output PolicyMapOutput
Aggregate Qos-policy-name AggPolicyOut
Queue# Qos-policy-name
0 qosPolicyOutput
FTOS# 

show qos qos-policy-input

View the input QoS policy details.

Syntax

show qos qos-policy-input [qos-policy-name]

Parameters

qos-policy-name

Enter the QoS policy name.

Defaults

No default behavior or values

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series

Example

Figure 32-16. show qos qos-policy-input Command Output

FTOS#show qos qos-policy-input
Qos-policy-input QosInput
Rate-police 100 50 peak 100 50
Dscp 32
FTOS# 

show qos qos-policy-output

View the output QoS policy details.

Syntax

show qos qos-policy-output [qos-policy-name]

Parameters

qos-policy-name

Enter the QoS policy name.

Defaults

No default behavior or values

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced on C-Series and S-Series

pre-Version 6.1.1.1 Introduced on E-Series

Example

Figure 32-17. show qos qos-policy-output Command Output

show qos statistics

View QoS statistics.

Syntax

show qos statistics {wred-profile [interface]} | [interface]

Parameters

wred-profile interface

Platform—E-Series Only: Enter the keyword wred-profile and optionally one of the following keywords and slot/port or number information:For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.For a SONET interface, enter the keyword sonet followed by the slot/port information.For a Ten Gigabit Ethernet interface, enter the keywordTenGigabitEthernet followed by the slot/port information.

interface

Enter one of the following keywords and slot/port or number information:On the C-Series and E-Series, For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.For a SONET interface, enter the keyword sonet followed by the slot/port information.For a Ten Gigabit Ethernet interface, enter the keywordTenGigabitEthernet followed by the slot/port information.

Defaults Command Modes

No default behavior or values

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 7.7.1.1 Introduced on S-Series

Version 7.5.1.0 Introduced on C-Series

pre-Version 6.1.1.1 Introduced on E-Series

Usage Information

The show qos statistics command can be used on the C-Series, but the wred-profile keyword must be omitted in the syntax. The show qos statistics output differs from the ED and EE series line cards and the EF series line cards. The QoS statistics for the EF series generates two extra columns, Queued Pkts and Dropped Pkts, see Example 2.

Note: The show qos statistics command displays Matched Packets and Matched Bytes. The show queue statistics egress command (E-Series only) displays Queued Packets and Queued Bytes. The following example explains how these two displays relate to each other.

• 9000 byte size packets are sent from Interface A to Interface B.
• The Matched Packets on Interface A are equal to the Queued Packets on Interface B.
• Matched bytes on Interface A = matched packets *9000
• Queued bytes on Interface B = queued packets *(9020)—Each packet has an additional header of 20 bytes.

Example 1

Figure 32-18. show qos statistics Command Output (ED and EE Series of E-Series)

FTOS#show qos statistics
Interface Gi 0/0
Queue#	Queued Bytes	Matched Pkts	Matched Bytes
0	0	0	0
1	0	0	0
2	0	0	0
3	0	0	0
4	0	0	0
5	0	0	0
6	0	0	0
7	0	0	0
Interface Gi 0/1
Queue#	Queued Bytes	Matched Pkts	Matched Bytes
0	0	0	0
1	0	0	0
2	0	0	0
3	0	0	0
4	0	0	0
5	0	0	0
6	0	0	0
7	0	0	0

Table 32-4. show qos statistics Command Example Fields (ED and EE Series)

Field Description
Queue # Queue Number
Queued Bytes Snapshot of the byte count in that queue.
Matched Pkts The number of packets that matched the class-map criteria.Note: When trust is configured, matched packet counters are not incremented in this field.
Matched Bytes The number of bytes that matched the class-map criteria.Note: When trust is configured, matched byte counters are not incremented in this field.

Example 2

Figure 32-19. show qos statistics Command Output (EFSeries of E-Series)

FTOS#show qos statistics gig 0/1
Queue#	Queued Bytes (Cumulative)	Queued Pkts (Cumulative)	Matched Pkts	Matched Bytes	Dropped Pkts
0	0	0	1883725	1883725000	0
1	0	0	1883725	1883725000	0
2	0	0	1883725	1883725000	0
3	0	0	1883725	1883725000	0
4	0	0	1883725	1883725000	0
5	0	0	1883724	1883724000	0
6	0	0	1883720	1883720000	0
7	0	0	1883720	1883720000	0
FTOS#

Table 32-5. show qos statistics Command Example Fields (EF Series)

Field Description
Queue # Queue Number
Queued Bytes Cumulative byte count in that queue
Queued Pkts Cumulative packet count in that queue.
Matched Pkts The number of packets that matched the class-map criteria.Note: When trust is configured, matched packet counters are not incremented in this field.
Matched Bytes The number of bytes that matched the class-map criteria.Note: When trust is configured, matched byte counters are not incremented in this field.
Dropped Pkts The total of the number of packets dropped for green, yellow and out-of-profile.

Example 3

Figure 32-20. show qos statistics wired-profile Command Output (ED, EE, and EF Series)

FTOS#show qos statistics wred-profileInterface Gi 5/11
Queue#	Drop-statistic	WRED-name	Dropped Pkts
0	Green	WRED1	51623
	Yellow	WRED2	51300
	Out of Profile		0
1	Green	WRED1	52082
	Yellow	WRED2	51004
	Out of Profile		0
2	Green	WRED1	50567
	Yellow	WRED2	49965
	Out of Profile		0
3	Green	WRED1	50477
	Yellow	WRED2	49815
	Out of Profile		0
4	Green	WRED1	50695
	Yellow	WRED2	49476
	Out of Profile		0
5	Green	WRED1	50245
	Yellow	WRED2	49535
	Out of Profile		0
6	Green	WRED1	50033
	Yellow	WRED2	49595
	Out of Profile		0
7	Green	WRED1	50474
	Yellow	WRED2	49522
	Out of Profile		0
FTOS#

Table 32-6. show qos statistics wired-profile Command Example Fields (ED, EE, and EF Series)

Field Description
Queue # Queue Number
Drop-statistic Drop statistics for green, yellow and out-of-profile packets
WRED-name WRED profile name
Dropped Pkts The number of packets dropped for green, yellow and out-of-profile

Related Commands

clear qos statistics Clears counters as shown in show qos statistics

show qos wred-profile

View the WRED profile details.

Syntax

show qos wired-profile wired-profile-name

Parameters

wred-profile-name

Enter the WRED profile name to view the profile details.

Defaults

No default behavior or values

Command Modes

EXEC

EXEC Privilege

Command History

pre-Version 6.1.1.1 Introduced on E-Series

Example

Figure 32-21. show qos wred-profile Command Output

FTOS#show qos wred-profile
Wred-profile-name	min-threshold	max-threshold
wred_drop	0	0
wred_ge_y	1024	2048
wred_ge_g	2048	4096
wred_teng_y	4096	8192
wred_teng_g	8192	16384
WRED1	2000	7000

test cam-usage

Check the Input Policy Map configuration for the CAM usage.

Syntax

test cam-usage service-policy input policy-map linecard { [number port-set portpipe number] | [all]}

Parameters

policy-map	Enter the policy map name.
linecard number	(OPTIONAL) Enter the keyword linecard followed by the line card slot number.

	port-set portpipe number	Enter the keyword port-set followed by the line card's port pipe number. Range: 0 or 1
	linecard all	(OPTIONAL) Enter the keywords linecard all to indicate all line cards.
Defaults	No default values or behavior
Command Modes	EXEC
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Introduced on C-Series and S-Series
	Version 7.4.1.0 Introduced on E-Series

Example

Figure 32-22. test cam-usage service-policy input policy-map linecard all Example Command

FTOS# test cam-usage service-policy input pmap_12 linecard allFor a L2 Input Policy Map pmap_12, the output must be as follows,
Linecard	Portpipe	CAM Partition	Available CAM	Estimated CAM per Port	Status(Allowed ports)
0	0	L2ACL	500	200	Allowed (2)
0	1	L2ACL	100	200	Exception
1	0	L2ACL	1000	200	Allowed (5)
1	1	L2ACL	0	200	Exception
		...
		...
		...
13	1	L2ACL	400	200	Allowed (2)
FTOS#

Note: In a Layer 2 Policy Map, IPv4/IPv6 rules are not allowed and hence the output contains only L2ACL CAM partition entries.

Table 32-7. test cam-usage Command Example Fields

Field Description
Linecard Indicates the line card slot number.
Portpipe Indicates the portpipe number.
CAM Partition The CAM space where the rules are added.
Available CAM	Indicates the free CAM space, in the partition, for the classification rules.Note:The CAM entries reserved for the default rules are not included in the Available CAM column; free entries, from the default rules space, can not be used as a policy map for the classification rules.

Table 32-7. test cam-usage Command Example Fields

Field Description
Estimated CAM per Port Indicates the number of free CAM entries required (for the classification rules) to apply the input policy map on a single interface. Note: The CAM entries for the default rule are not included in this column; a CAM entry for the default rule is always dedicated to a port and is always available for that interface.
Status (Allowed ports) Indicates if the input policy map configuration on an interface belonging to a linecard/port-pipe is successful—Allowed (n)—or not successful—Exception.The allowed number (n) indicates the number of ports in that port-pipe on which the Policy Map can be applied successfully.

Usage Information

This features allows you to determine if the CAM has enough space available before applying the configuration on an interface.

An input policy map with both Trust and Class-map configuration, the Class-map rules are ignored and only the Trust rule is programmed in the CAM. In such an instance, the Estimated CAM output column will contain the size of the CAM space required for the Trust rule and not the Class-map rule.

threshold

E

Specify the minimum and maximum threshold values for the configured WRED profiles.

Syntax

threshold min number max number

To remove the threshold values, use the no threshold min number max number command.

Parameters

min number	Enter the keyword min followed by the minimum threshold number for the WRED profile. Range: 1024 to 77824 KB
max number	Enter the keyword max followed by the maximum threshold number for the WRED profile. Range: 1024 to 77824 KB

Defaults

No default behavior or values

Command Modes

CONFIGURATION (config-wred)

Command History

pre-Version 6.1.1.1 Introduced on E-Series

Usage Information

Use this command to configure minimum and maximum threshold values for user defined profiles. Additionally, use this command to modify the minimum and maximum threshold values for the pre-defined WRED profiles. If you delete threshold values of the pre-defined WRED profiles, the profiles will revert to their original default values.

Related Commands

Table 32-8. Pre-defined WRED Profile Threshold Values

Pre-defined WRED Profile Name Minimum Threshold Maximum Threshold

wred_drop 0 0

wred_ge_y 1024 2048

wred_ge_g 2048 4096

wred_teng_y 4096 8192

wred_teng_g 8192 16384

wred-profile Create a WRED profile.

trust

Specify dynamic classification (DSCP) or dot1p to trust.

Syntax

trust {diffserv [fallback] | dot1p [fallback] | ipv6-diffserv}
Parameters

diffserv	Enter the keyword diffserv to specify trust of DSCP markings.
dot1p	Enter the keyword dot1p to specify trust dot1p configuration.
fallback	Enter this keyword to classify packets according to their DSCP value as a secondary option in case no match occurs against the configured class maps.
ipv6-diffserv	On E-Series only, enter the keyword ipv6-diffserv to specify trust configuration of IPv6 DSCP.

Defaults

No default behavior or values

Command Modes

CONFIGURATION (conf-policy-map-in)
Command History

Version 8.3.5.0 Introduced on S55
Version 8.3.1.0	fallback available on the E-Series.
Version 8.2.1.0	dot1p available on the C-Series and S-Series.
Version 7.6.1.0 Introduced on S-Series
Version 7.5.1.0 Introduced on C-Series
Version 7.4.1.0 Expanded to add support for dot1p and IPv6 DSCP
pre-Version 6.1.1.1	Introduced on E-Series

Usage Information

When trust is configured, matched bytes/packets counters are not incremented in the show qos statistics command.

The trust diffserv feature is not supported on E-Series ExaScale when an IPv6 microcode is enabled.

Dynamic mapping honors packets marked according to the standard definitions of DSCP. The default mapping table is detailed in the following table.

Table 32-9. Standard Default DSCP Mapping Table

DSCP/CPhex range(XXX)	DSCP Definition Traditional IP Precedence E-SeriesInternal QueueID	C-Series andS-Series InternalQueue ID	DSCP/PCdecimal
111XXX Network Control 7 3			48–63
110XXX Internetwork Control 6 3
101XXX EF (ExpeditedForwarding)	CRITIC/ECP 5 2		32–47
100XXX AF4 (AssuredForwarding)	Flash Override	4 2
011XXX	AF3	Flash	3 1
010XXX	AF2	Immediate	2 1
001XXX	AF1	Priority	1 0
000XXX	BE (Best Effort)	Best Effort	0 0

wred

E

Designate the WRED profile to yellow or green traffic.

Syntax

wred {yellow | green} profile-name

To remove the WRED drop precedence, use the no wred {yellow | green} [profile-name] command.

Parameters

yellow | green	Enter the keyword yellow for yellow traffic. DSCP value of xxx110 and xxx100 maps to yellow.Enter the keyword green for green traffic. DSCP value of xxx010 maps to green.
profile-name	Enter your WRED profile name in character format (16 character maximum). Or use one of the 5 pre-defined WRED profile names.Pre-defined Profiles:wred_drop, wred-ge_y, wred_ge_g, wred_teng_y, wred_teng_

Defaults

No default behavior or values

Command Modes

CONFIGURATION (conf-qos-policy-out)

Command History

Version 8.2.1.0	Profile name character limit increased from 16 to 32.
pre-Version 6.1.1.1	Introduced on E-Series

Usage Information

Use this command to assign drop precedence to green or yellow traffic. If there is no honoring enabled on the input, all the traffic defaults to green drop precedence.

Related Commands

wred-profile	Create a WRED profile and name that profile
trust	Define the dynamic classification to trust DSCP

wred-profile

Create a WRED profile and name that profile.

Syntax

wred-profile wred-profile-name

To remove an existing WRED profile, use the no wred-profile command.

Parameters

wred-profile-name

Enter your WRED profile name in character format (16 character maximum). Or use one of the pre-defined WRED profile names. You can configure up to 26 WRED profiles plus the 5 pre-defined profiles, for a total of 31 WRED profiles. Pre-defined Profiles: wred_drop, wred_ge_y, wred_ge_g, wred_teng_y, wred_teng_g

Defaults

The five pre-defined WRED profiles. When a new profile is configured, the minimum and maximum threshold defaults to predefined wred_ge_g values

Command Modes

CONFIGURATION

Command History

pre-Version 6.1.1.1 Introduced on E-Series

Usage Information

Use the default pre-defined profiles or configure your own profile. You can not delete the pre-defined profiles or their default values. This command enables the WRED configuration mode—(conf-wred).

Related Commands

threshold Specify the minimum and maximum threshold values of the WRED profile

Queue-Level Debugging

Queue-Level Debugging is an E-Series-only feature, as indicated by the character that appears below each command heading.

The following queuing statistics are available on TeraScale versions of E-Series systems.

• clear queue statistics egress
• clear queue statistics ingress
• show queue statistics egress
• show queue statistics ingress

clear queue statistics egress

Clear egress queue statistics.

Syntax
clear queue statistics egress [unicast | multicast] [Interface]

Parameters	unicast | multicast	(OPTIONAL) Enter the keyword multicast to clear only Multicast queue statistics. Enter the keyword unicast to clear only Unicast queue statistics. Default: Both Unicast and Multicast queue statistics are cleared.
	Interface	(OPTIONAL) Enter one of the following interfaces to display the interface specific queue statistics.For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.For a SONET interface, enter the keyword sonet followed by the slot/port information.Fast Ethernet is not supported
Defaults	No default behavior or values
hand Modes	EXEC
	EXEC Privilege
Command History	Version 6.2.1.1 Introduced
Usage Information	If a Policy QoS is applied on an interface whenclear queue statistics egressis issued, it will clear the egress counters in show queue statistics and vice-versa. This behavior is due to the values being read from the same hardware registers.
Related Commands	clear queue statistics egress	Clear ingress queue statistics
	show queue statistics egress	Display egress queue statistics
	show queue statistics ingress	Display ingress queue statistics

clear queue statistics ingress

Clear ingress queue statistics.

Syntax

clear queue statistics ingress [unicast [src-card ID [dst-card ID]] | [multicast] [src-card ID]]

Parameters	unicast [src-card /D[dst-card /D]]	(OPTIONAL) Enter the keyword unicast to clear Unicast queue statistics. Optionally, enter the source card identification (src-card /D) and the destination card identification (dst-card /D) to clear the unicast statistics from the source card to the destination card.
	multicast [src-card /D]	(OPTIONAL) Enter the keyword multicast to clear only Multicast queue statistics. Optionally, enter the source card identification (src-card /D) to clear the multicast statistics from the source card. Default: Both Unicast and Multicast queue statistics are cleared.
Defaults	No default behavior or values
mand Modes	EXEC
	EXEC Privilege
Command History	Version 6.2.1.1 Introduced
Related Commands	clear queue statistics egress	Clear egress queue statistics
	show queue statistics egress	Display egress queue statistics
	show queue statistics ingress	Display ingress queue statistics

show queue statistics egress

E Display the egress queue statistics.

Syntax show queue statistics egress [unicast | multicast] [Interface] [brief]

Parameters	unicast | multicast	(OPTIONAL) Enter the keyword multicast to display only Multicast queue statistics. Enter the keyword unicast to display only Unicast queue statistics.Default: Both Unicast and Multicast queue statistics are displayed.
	Interface	(OPTIONAL) Enter one of the following interfaces to display the interface specific queue statistics.For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernet followed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernet followed by the slot/port information.For a SONET interface, enter the keyword sonet followed by the slot/port information.Fast Ethernet is not supported.
	brief	(OPTIONAL) Enter the keyword brief to display only ingress per link buffering and egress per port buffering statistics.

Defaults No default behavior or values

Command Modes EXEC EXEC Privilege

Command History

Version 6.2.1.1 Introduced for E-Series

Usage Information

TeraScale systems display cumulative queued bytes (in KB), cumulative queued packets (in KB), and cumulative dropped packets (in KB).

The display area is limited to 80 spaces to accommodate the screen and for optimal readability. Numbers, that is values, are limited to 12 characters. The numbering conventions are detailed in the table below.

Table 32-10. Numbering Conventions for show queue egress statistics Output

Value Divide the number by	Quotient Display Examples
(10^11) - (10^14)	1024 K 12345678901K
(10^14) - (10^17)	1024*1024 M 12345678901M
> (10^17)	1024*1024*1024 T 12345678901T

Note: The show queue statistics command displays Queued Packets and Queued Bytes. The show qos statistics command displays Matched Packets and Matched Bytes. The following example explains how these two outputs relate to each other.

• 9000 byte size packets are sent from Interface A to Interface B.
• The Matched Packets on Interface A are equal to the Queued Packets on Interface B.
- Matched bytes on Interface A = matched packets *9000
- Queued bytes on Interface B = queued packets *(9020)—Each packet has an additional header of 20 bytes.

Example 1

Figure 32-23. show queue statistics egress Command (TeraScale)

FTOS#show queue statistics egress unicast gigabitethernet 9/1
Interface Gi 9/1
Egress Port Queue#	Queued bytes	Queued packets	Packet Type	Min KB	Max KB	Dropped packets
0	281513847K	31959000	Green	2048	4096	0
			Yellow	1024	2048	0
			Out of Profile			30385770
1	99281660K	11271000	Green	2048	4096	0
			Yellow	1024	2048	0
			Out of Profile			9886100
2	99281660K	11271000	Green	2048	4096	0
			Yellow	1024	2048	0
			Out of Profile			9784600
3	38984440000	4322000	Green	2048	4096	0
			Yellow	1024	2048	0
			Out of Profile			3053753
4	99281660K	11271000	Green	2048	4096	0
			Yellow	1024	2048	0
			Out of Profile			9581600
5	39760160000	4408000	Green	2048	4096	0
			Yellow	1024	2048	0
			Out of Profile			3070671
6	39642900000	4395000	Green	2048	4096	0
			Yellow	1024	2048	0
			Out of Profile			3026100
7	99274410K	11270177	Green	2048	4096	0
			Yellow	1024	2048	0
			Out of Profile			9273402
FTOS#

Table 32-11. show queue statistics egress Command Fields

Field Description
Egress Port Queue# Egress Port	Queue Number
Queued bytes Cumulative byte count in that queue
Queued packets Cumulative packet count in that queue.
Packet type Green, yellow, and out-of-profile packets
Min KB Minimum threshold for WRED queue
Max KB Maximum threshold for WRED queue
Dropped Pkts The number of packets dropped for green, yellow and out-of-profile

Example 2

Figure 32-24. show queue statistics egress multicast Command Output

FTOS#sho queue statistics egress multicast
Linecard 3 port pipe 0, multicast
Packet Type	Min	Max	Dropped
	KB	KB	packets
Green	8192	16384	0
Yellow	4096	8192	0
Out of Profile			0
Linecard 3 port pipe 1, multicast
Packet Type	Min	Max	Dropped
	KB	KB	packets
Green	8192	16384	0
Yellow	4096	8192	0
Out of Profile			0
Linecard 7 port pipe 0, multicast
Packet Type	Min	Max	Dropped
	KB	KB	packets
Green	2048	4096	0
Yellow	1024	2048	0
Out of Profile			0
Linecard 7 port pipe 1, multicast
Packet Type	Min	Max	Dropped
	KB	KB	packets
Green	2048	4096	0
Yellow	1024	2048	0
Out of Profile			0
FTOS#

Table 32-12. show queue statistics egress multicast Command Fields

Field Description
Packet type Green, yellow, and out-of-profile packets
Min KB Minimum threshold for	WRED queue
Max KB Maximum threshold for	WRED queue
Dropped Pkts The number of packets dropped for green, yellow and out-of-profile

Example 3

Figure 32-25. show queue statistics egress brief Command Output

LC	Portpipe PortPipe	Port	Dropped packets
0	0	0	0
0	0	1	0
0	0	2	0
0	0	3	0
0	0	4	0
0	0	5	0
0	0	6	0
0	0	7	0
0	0	8	0
0	0	9	0
0	0	10	0
0	0	11	0
0	0	M	0
0	1	0	0
0	1	1	0
0	1	2	0
0	1	3	0
0	1	4	0
0	1	5	0
0	1	6	0
0	1	7	0
0	1	8	0
0	1	9	0
0	1	10	0
0	1	11	0
0	1	M	0
1	0	0	0

Table 32-13. show queue statistics egress brief Command Fields

Field Description
LC Line Card
Portpipe Portpipe number
Port Port Queue. Where M is Multicast queue
Dropped Pkts The number of packets dropped for green, yellow and out-of-profile

Related Commands

clear queue statistics egress Clear egress queue statistics.

clear queue statistics ingress Clear ingress queue statistics.

show queue statistics ingress Display ingress queue statistics

show queue statistics ingress

Display the ingress queue statistics.

Syntax

show queue statistics ingress [unicast [src-card ID [dst-card ID]] | [multicast] [src-card ID]] [brief]

Parameters	unicast [src-card ID[dst-card ID]]	(OPTIONAL) Enter the keyword unicast to display Unicast queue statistics. Optionally, enter the source card identification (src-card ID) and the destination card identification (dst-card ID) to display the unicast statistics from the source card to the destination card.Destination card Identification: Range 0 to 13 or RPM
	multicast [src-card ID]	(OPTIONAL) Enter the keyword multicast to display only Multicast queue statistics. Optionally, enter the source card identification (src-card ID) to display the multicast statistics from the source card.Default: Both Unicast and Multicast queue statistics are displayed.
	brief	(OPTIONAL) Enter the keyword brief to display only ingress per link buffering and egress per port buffering statistics.
Defaults	No default behavior or values
Command Modes	EXEC
	EXEC Privilege
Command History	Version 6.2.1.1 Introduced

Usage Information TeraScale systems display cumulative queued bytes (in KB), cumulative queued packets (in KB), and cumulative dropped packets (in KB). The display area is limited to 80 spaces to accommodate the screen and for optimal readability. Numbers, that is values, are limited to 12 characters. The conventions are detailed in the following table.

Table 32-14. Numbering Conventions for show queue statistics ingress Output

Value Divide the number by	Quotient Display Examples
(10^11) - (10^14)	1024 K 12345678901K
(10^14) - (10^17)	1024*1024 M 12345678901M
> (10^17)	1024*1024*1024 T 12345678901T

Note: The show queue statistics command displays Queued Packets and Queued Bytes. The show qos statistics command displays Matched Packets and Matched Bytes. The following example explains how these two displays relate to each other.

• 9000 byte size packets are sent from Interface A to Interface B.
• The Matched Packets on Interface A are equal to the Queued Packets on Interface B.
• Matched bytes on Interface A = matched packets *9000
• Queued bytes on Interface B = queued packets *(9020)—Each packet has an additional header of 20 bytes.

Figure 32-26. show queue statistics ingress Command Partial

SF Ingress Queue#	Packet Type	Min KB	Max KB	Dropped packets
0	Green	4096	4096	0
	Yellow	3276	3276	0
	Out of Profile			0
1	Green	4096	4096	0
	Yellow	3276	3276	0
	Out of Profile			0
2	Green	4096	4096	0
	Yellow	3276	3276	0
	Out of Profile			0
3	Green	4096	4096	0
	Yellow	3276	3276	0
	Out of Profile			0
4	Green	4096	4096	0
	Yellow	3276	3276	0
	Out of Profile			0
5	Green	4096	4096	0
	Yellow	3276	3276	0
	Out of Profile			0
6	Green	4096	4096	0
	Yellow	3276	3276	0
	Out of Profile			0
7	Green	4096	4096	0
	Yellow	3276	3276	0
	Out of Profile			0
Linecard 7 SF Ingress Queue#	Port pipe 0, to linecard 3 port pipe 1, unicast Packet Type Min Max Dropped KB KB packets

Table 32-15. show queue statistics Command Fields

Field Description
SF Ingress Queue # Switch Fabric	Queue Number
Packet type Green, yellow, and out-of-profile packets
Min KB Minimum threshold for	WRED queue
Max KB Maximum threshold for	WRED queue
Dropped Pkts The number of packets dropped for green, yellow and out-of-profile

Example 2

Figure 32-27. show queue statistics ingress Multicast Command Output

FTOS#show queue statistics ingress multicast src-card 7
Linecard 7 port pipe 0, multicast
SFIngressQueue#	Packet Type	MinKB	MaxKB	Droppedpackets
0	Green	4096	4096	0
	Yellow	3276	3276	0
	Out of Profile			0
1	Green	4096	4096	0
	Yellow	3276	3276	0
	Out of Profile			0
2	Green	4096	4096	0
	Yellow	3276	3276	0
	Out of Profile			0
3	Green	4096	4096	0
	Yellow	3276	3276	0
	Out of Profile			0
4	Green	4096	4096	0
	Yellow	3276	3276	0
	Out of Profile			0
5	Green	4096	4096	0
	Yellow	3276	3276	0
	Out of Profile			0
6	Green	4096	4096	0
	Yellow	3276	3276	0
	Out of Profile			0
7	Green	4096	4096	0
	Yellow	3276	3276	0
	Out of Profile			0
Linecard 7 port pipe 1, multicast
SFIngressQueue#	Packet Type	MinKB	MaxKB	Droppedpackets
0	Green	4096	4096	0
	Yellow	3276	3276	0
	Out of Profile			0
1	Green	4096	4096	0
	Yellow	3.276	3276	0
	Out of Profile			0
2	Green	4096	4096	0
	Yellow	3276	3276	0
	Out of Profile			0
3	Green	4096	4096	0
	Yellow	3276	3278	0
	Out of Profile			0
4	Green	4096	4096	0
	Yellow	3276	3276	0
	Out of Profile			0
5	Green	4096	4096	0
	Yellow	3276	3276	0
	Outof Profile			0
6	Green	4096	4096	0
	Yellow	3276	3276	0
	Out of Profile			0
7	Green	4096	4096	0
	Yellow	3276	3276	0
	Out of Profile			0

Table 32-16. show queue statistics ingress Multicast Command Fields

Field Description
SF Ingress Queue # Switch Fabric	Queue Number
Packet type Green, yellow, and out-of-profile packets
Min KB Minimum threshold for	WRED queue

Table 32-16. show queue statistics ingress Multicast Command Fields

Field Description
Max KB Maximum threshold for	WRED queue
Dropped Pkts The number of packets	kets dropped for green, yellow and out-of-profile

Example 3

Figure 32-28. show queue statistics ingress brief Command Output

FTOS#show queue statistics ingress src-card 0 briefSource Linecard 0
Dest LC	SrcPort set	DestPort set	Droppedpackets
0	0	0	0
0	0	1	100
0	1	0	0
0	1	1	100
1	0	0	0
1	0	1	100
1	1	0	0
1	1	1	100
2	0	0	0
2	0	1	100
2	1	0	0
2	1	1	100
3	0	0	0
3	0	1	100
3	1	0	0
3	1	1	100
4	0	0	0
4	0	1	100
4	1	0	0
4	1	1	100
5	0	0	0
5	0	1	100
5	1	0	0
5	1	1	100
6	0	0	0
6	0	1	100
6	1	0	0
6	1	1	100
RPM	0		0
RPM	1		100
Multicast	0		0
Multicast	1		0
FTOS#

Table 32-17. show queue statistics ingress brief Command Fields

Field Description
Dest LC Destination Line Card
Src Port Set Source PortPipe Number
Dest Port Set Destination PortPipe Number
Dropped Pkts The number of packets dropped

Related Commands

clear queue statistics egress Clear egress queue statistics.

clear queue statistics ingress Clear ingress queue statistics.

show queue statistics ingress Display egress queue statistics

Router Information Protocol (RIP)

Overview

Router Information Protocol (RIP) is a Distance Vector routing protocol. FTOS supports both RIP version 1 (RIPv1) and RIP version 2 (RIPv2) on C-Series and E-Series and S-Series systems, as indicated by the characters that appear below each command heading:

• C-Series:
• E-Series: E
• S-Series: S

Note: The C-Series platform supports RIP with FTOS version 7.6.1.0 and later. The S-Series platform supports RIP with FTOS version 7.8.1.0 and later. Prior to 7.6.1.0, only the E-Series platform supported RIP.

The FTOS implementation of RIP is based on IETF RFCs 2453 and RFC 1058. For more information on configuring RIP, refer to FTOS Configuration Guide.

Commands

The following commands enable you to configure RIP:

• auto-summary
• clear ip rip
• debug ip rip
• default-information originate
• default-metric
• description
• distance
• distribute-list in
• distribute-list out
• ip poison-reverse
• ip rip receive version
• ip rip send version
• ip split-horizon
• maximum-paths
• neighbor
• network

• offset-list

• output-delay
  • passive-interface

• redistribute
• redistribute isis
• redistribute ospf
• router rip
  • show config
  • show ip rip database
  • show running-config rip
• timers basic
• version

auto-summary

Restore the default behavior of automatic summarization of subnet routes into network routes. This command applies only to RIP version 2.

Syntax

auto-summary

To send sub-prefix routing information, enter no auto-summary.

Default

Enabled.

Command Modes

ROUTER RIP

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

pre-Version 6.2.1.1 Introduced on E-Series

clear ip rip

Update all the RIP routes in the FTOS routing table.

Syntax

clear ip rip

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

pre-Version 6.2.1.1 Introduced on E-Series

Usage Information

This command triggers updates of the main RIP routing tables.

debug ip rip

Examine RIP routing information for troubleshooting.

Syntax

debug ip rip [interface | database | events [interface] | packet [interface] | trigger]

To turn off debugging output, use the no debug ip rip command.

Parameters

interface	(OPTIONAL) Enter the interface type and ID as one of the following:For a Gigabit Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For a Port Channel, enter the keywordport-channelfollowed by a number from 1 to 32 for EtherScale, 1 to 255 for TeraScale, 1-128 on C-Series and S-Series.For a SONET interface, enter the keywordsonetfollowed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernet followed by the slot/port information.For a VLAN, enter the keywordvlanfollowed by a number from 1 to 4094.Note:This option is available only on E-Series when entered as a standalone option. It is available on both C-Series and E-Series as a sub-option.
database	(OPTIONAL) Enter the keyworddatabaseto display messages when there is a change to the RIP database.
events	(OPTIONAL) Enter the keywordeventsto debug only RIP protocol changes.
packet	(OPTIONAL) Enter the keywordeventsto debug only RIP protocol packets.Note:This option is available only on C-Series.
trigger	(OPTIONAL) Enter the keywordtriggerto debug only RIP trigger extensions.

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

pre-Version 6.2.1.1 Introduced on E-Series

default-information originate

Generate a default route for the RIP traffic.

Syntax

default-information originate [always] [metric metric-value] [route-map map-name]

To return to the default values, enter no default-information originate.

Parameters

always

(OPTIONAL) Enter the keyword always to enable the switch software to always advertise the default route.

	metric metric-value	(OPTIONAL) Enter the keyword metric followed by a number as the metric value. Range: 1 to 16 Default: 1
	route-map map-name	(OPTIONAL) Enter the keyword route-map followed by the name of a configured route-map.
Defaults	Disabled.
	metric: 1
Command Modes	ROUTER RIP
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced on S-Series
	Version 7.6.1.0 Introduced on C-Series
	pre-Version 6.2.1.1 Introduced on E-Series
Usage Information	The default route must be present in the switch routing table for the default-information originate command to take effect.

default-metric

Change the default metric for routes. Use this command with the redistribute command to ensure that all redistributed routes use the same metric value.

Syntax default-metric number

To return the default metric to the original values, enter no default-metric.

Parameters

number

Specify a number. Range: 1 to 16. The default is 1.

Default 1

Command Modes ROUTER RIP

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

pre-Version 6.2.1.1 Introduced on E-Series

Usage Information This command ensures that route information being redistributed is converted to the same metric value.

Related Commands

redistribute Allows you to redistribute routes learned by other methods.

description

Enter a description of the RIP routing protocol

Syntax

description {description}
To remove the description, use the no description {description} command.
Parameters

description

Enter a description to identify the RIP protocol (80 characters maximum).

Defaults

No default behavior or values

Command Modes

ROUTER RIP

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

pre-7.7.1.0 Introduced on E-Series

Related Commands

router rip Enter ROUTER mode on the switch.

distance

Assign a weight (for prioritization) to all routes in the RIP routing table or to a specific route. Lower weights (“administrative distance”) are preferred.

Syntax

distance weight [ip-address mask [prefix-name]]

To return to the default values, use the no distance weight [ip-address mask] command.

Parameters

weight	Enter a number from 1 to 255 for the weight (for prioritization).The default is 120.
ip-address	(OPTIONAL) Enter the IP address, in dotted decimal format (A.B.C.D), of the host or network to receive the new distance metric.
mask	If you enter an IP address, you must also enter a mask for that IP address, in either dotted decimal format or /prefix format (/x)
prefix-name	(OPTIONAL) Enter a configured prefix list name.

Defaults

weight = 120

Command Modes

ROUTER RIP

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

pre-Version 6.2.1.1 Introduced on E-Se

Related Commands

default-metric Assign one distance metric to all routes learned using the redistribute command.

distribute-list in

Configure a filter for incoming routing updates.

Syntax

distribute-list prefix-list-name in [interface]

To delete the filter, use the no distribute-list prefix-list-name in command.

Parameters

prefix-list-name

Enter the name of a configured prefix list.

interface

(OPTIONAL) Identifies the interface type slot/port as one of the following:For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For a Port Channel, enter the keywordport-channelfollowed by a number from 1 to 32 for EtherScale, 1 to 255 for TeraScale, 1-128 on C-Series and S-Series.For a SONET interface, enter the keywordsonetfollowed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernetfollowed by the slot/port information.For a VLAN, enter the keywordvlanfollowed by a number from 1 to 4094.

Defaults

Not configured.

Command Modes

ROUTER RIP

Command

History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

pre-Version 6.2.1.1 Introduced on E-Series

Related

Commands

ip prefix-list Enter the PREFIX-LIST mode and configure a prefix list.

distribute-list out

Configure a filter for outgoing routing updates.

Syntax

distribute-list prefix-list-name out [interface | bgp | connected | isis | ospf | static]

To delete the filter, use the no distribute-list prefix-list-name out command.

parameters	prefix-list-name	Enter the name of a configured prefix list.
	interface	(OPTIONAL) Identifies the interface type slot/port as one of the following:For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For a Port Channel, enter the keywordport-channelfollowed by a number from 1 to 32 for EtherScale, 1 to 255 for TeraScale, 1-128 on C-Series and S-Series.For a SONET interface, enter the keywordsonetfollowed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernetfollowed by the slot/port information.For a VLAN, enter the keywordvlanfollowed by a number from 1 to 4094.
	connected	(OPTIONAL) Enter the keywordconnectedto filter only directly connected routes.
	isis	(OPTIONAL) Enter the keywordisisto filter only IS-IS routes.Note:This option is only available on E-Series.
	ospf	(OPTIONAL) Enter the keywordospfto filter all OSPF routes.
	static	(OPTIONAL) Enter the keywordstaticto filter manually configured routes.

Defaults Not configured.

Command Modes ROUTER RIP

Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced on S-Series
	Version 7.6.1.0 Introduced on C-Series
	pre-Version 6.2.1.1 Introduced on E-Series
Related Commands	ip prefix-list Enter the PREFIX-LIST mode and configure a prefix list.

ip poison-reverse

Set the prefix of the RIP routing updates to the RIP infinity value.

Syntax ip poison-reverse

To disable poison reverse, enter no ip poison-reverse.

Defaults Disabled.

Command Modes INTERFACE

Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced on S-Series
	Version 7.6.1.0 Introduced on C-Series
	pre-Version 6.2.1.1 Introduced on E-Series
Related Commands	ip split-horizon Set RIP routing updates to exclude routing prefixes.
ip rip receive version
C E S	Set the interface to receive specific versions of RIP. The RIP version you set on the interface overrides the version command in the ROUTER RIP mode.
Syntax	ip rip receive version [1] [2]
	To return to the default, enter no ip rip receive version.
Parameters	1 (OPTIONAL) Enter the number 1 for RIP version 1.
	2 (OPTIONAL) Enter the number 2 for RIP version 2.
Defaults	RIPv1 and RIPv2.
Command Modes	INTERFACE
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced on S-Series
	Version 7.6.1.0 Introduced on C-Series
	pre-Version 6.2.1.1 Introduced on E-Series
Usage Information	If you want the interface to receive both versions of RIP, enter ip rip receive version 1 2.
Related Commands	ip rip send version Sets the RIP version to be used for sending RIP traffic on an interface.
	version Sets the RIP version to be used for the switch software.

ip rip send version

Set the interface to send a specific version of RIP. The version you set on the interface overrides the version command in the ROUTER RIP mode.

Syntax

ip rip send version [1] [2]

To return to the default value, enter no ip rip send version.

Parameters

1 (OPTIONAL) Enter the number 1 for RIP version 1. The default is RIPv1.
2 (OPTIONAL) Enter the number 2 for RIP version 2.

Defaults

RIPv1.

Command Modes

INTERFACE

Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced on S-Series
	Version 7.6.1.0 Introduced on C-Series
	pre-Version 6.2.1.1 Introduced on E-Series

Usage Information

To enable the interface to send both version of RIP packets, enter ip rip send version 1 2.

Related Commands	ip rip receive version Sets the RIP version for the interface to receive traffic.
	version Sets the RIP version to be used for the switch software.

ip split-horizon

Enable split-horizon for RIP data on the interface. As described in RFC 2453, the split-horizon scheme prevents any routes learned over a specific interface to be sent back out that interface.

Syntax ip split-horizon

To disable split-horizon, enter no ip split-horizon.

Defaults Enabled

Command Modes INTERFACE

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

pre-Version 6.2.1.1 Introduced on E-Series

Related Commands

ip poison-reverse Set the prefix for RIP routing updates.

maximum-paths

Set RIP to forward packets over multiple paths.

Syntax maximum-paths number

To return to the default values, enter no maximum-paths.

Parameters

number

Enter the number of paths.

Range: 1 to 16.

The default is 4 paths.

Defaults 4

Command Modes ROUTER RIP

Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced on S-Series
	Version 7.6.1.0 Introduced on C-Series
	pre-Version 6.2.1.1 Introduced on E-Series
Usage Information	RIP supports a maximum of 16 ECMP paths.
neighbor
C E S	Define a neighbor router with which to exchange RIP information.
Syntax	neighbor ip-address
	To delete a neighbor setting, use the no neighbor ip-address command.
Parameters	ip-address	Enter the IP address, in dotted decimal format, of a router with which to exchange information.
Defaults	Not configured.
Command Modes	ROUTER RIP
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced on S-Series
	Version 7.6.1.0 Introduced on C-Series
	pre-Version 6.2.1.1 Introduced on E-Series
Usage Information	When a neighbor router is identified, unicast data exchanges occur. Multiple neighbor routers are possible.
	Use the passive-interface command in conjunction with the neighbor command to ensure that only specific interfaces are receiving and sending data.
Related Commands	passive-interface Sets the interface to only listen to RIP broadcasts.
network
C E S	Enable RIP for a specified network. Use this command to enable RIP on all networks connected to the switch.
Syntax	network ip-address
	To disable RIP for a network, use the no network ip-address command.
Parameter	ip-address	Specify an IP network address in dotted decimal format. You cannot specify a subnet.
Defaults	No RIP network is configured.

Command Modes ROUTER RIP

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

pre-Version 6.2.1.1 Introduced on E-Series

Usage Information

You can enable an unlimited number of RIP networks.

RIP operates over interfaces configured with any address specified by the network command.

offset-list

Specify a number to add to the incoming or outgoing route metrics learned via RIP.

Syntax

offset-list prefix-list-name {in | out} offset [interface]

To delete an offset list, use the no offset-list prefix-list-name {in | out} offset [interface] command.

Parameters

prefix-list-name	Enter the name of an established Prefix list to determine which incoming routes will be modified.
offset	Enter a number from zero (0) to 16 to be applied to the incoming route metric matching the access list specified.If you set an offset value to zero (0), no action is taken.
interface	(OPTIONAL) Enter the following keywords and slot/port or number information:For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.For a Port Channel interface, enter the keyword port-channel followed by a number from 1 to 32 for EtherScale, 1 to 255 for TeraScale.For a SONET interface, enter the keyword sonet followed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.

Defaults

Not configured.

Command Modes

ROUTER RIP

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

pre-Version 6.2.1.1 Introduced on E-Series

Usage Information

When the offset metric is applied to an interface, that value takes precedence over an offset value that is not extended to an interface.

Related Commands

ip prefix-list Enter the PREFIX-LIST mode and configure a prefix list.

output-delay

Set the interpacket delay of successive packets to the same neighbor.

Syntax
output-delay delay
To return to the switch software defaults for interpacket delay, enter no output-delay.
Parameters

delay

Specify a number of milliseconds as the delay interval. Range: 8 to 50.

Default
Not configured.

Command Modes
ROUTER RIP
Command History
Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

pre-Version 6.2.1.1 Introduced on E-Series

Usage Information

This command is intended for low-speed interfaces.

passive-interface

Suppress routing updates on a specified interface.

Syntax
passive-interface interface
To delete a passive interface, use the no passive-interface interface command.
Parameters

interface

Enter the following information:For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.For a Port Channel, enter the keyword port-channel followed by a number from 1 to 32 for EtherScale, 1 to 255 for TeraScale, 1-128 on C-Series and S-Series.For a SONET interface, enter the keyword sonet followed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.

Defaults
Not configured.

Command Modes
ROUTER RIP
Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced on S-Series

	Version 7.6.1.0 Introduced on C-Series
	pre-Version 6.2.1.1 Introduced on E-Series
Usage Information	Although the passive interface will neither send nor receive routing updates, the network on that interface will still be included in RIP updates sent via other interfaces.
Related Commands	neighbor Enable RIP for a specified network.
	network Define a neighbor.

redistribute

Redistribute information from other routing instances.

Syntax

redistribute {connected | static}

To disable redistribution, use the no redistribute {connected | static} command.

Parameters

connected	Enter the keyword connected to specify that information from active routes on interfaces is redistributed.
static	Enter the keyword static to specify that information from static routes is redistributed.

Defaults

Not configured.

Command Modes

ROUTER RIP

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

pre-Version 6.2.1.1 Introduced on E-Series

Usage Information

To redistribute the default route (0.0.0.0/0), configure the default-information originate command.

Related Commands

default-information originate

Generate a default route for RIP traffic.

redistribute isis

Redistribute routing information from an IS-IS instance.

Syntax

redistribute isis [tag] [level-1 | level-1-2 | level-2] [metric metric-value] [route-map map-name]

To disable redistribution, use the no redistribute isis [tag] [level-1 | level-1-2 | level-2] [metric metric-value] [route-map map-name] command.

Parameters

tag	(OPTIONAL) Enter the name of the IS-IS routing process.
level-1	(OPTIONAL) Enter the keyword level-1 to redistribute only IS-IS Level-1 routes.
level-1-2	(OPTIONAL) Enter the keyword level-1-2 to redistribute both IS-IS Level-1 and Level-2 routes.
level-2	(OPTIONAL) Enter the keyword level-2 to redistribute only IS-IS Level-2 routes.
metric metric-value	(OPTIONAL) Enter the keyword metric followed by a number as the metric value.Range: 0 to16
route-map map-name	(OPTIONAL) Enter the keyword route-map followed by the name of a configured route map.

Defaults

Not configured.

Command Modes

ROUTER RIP

Command History

pre-Version 6.2.1.1 Introduced on E-Series

Usage Information

IS-IS is not supported on S-Series systems.

redistribute ospf

C E S

Redistribute routing information from an OSPF process.

Syntax

redistribute ospf process-id [match external {1 | 2} | match internal | metric metric-value] [route-map map-name]

To disable redistribution, enter no redistribute ospf process-id [match external {1 | 2} | match internal | metric metric-value] [route-map map-name] command.

Parameters

process-id	Enter a number that corresponds to the OSPF process ID to be redistributed. Range: 1 to 65355.
match external {1 | 2}	(OPTIONAL) Enter the keywords match external followed by the numbers 1 or 2 to indicated that external 1 routes or external 2 routes should be redistributed.
match internal	(OPTIONAL) Enter the keywords match internal to indicate that internal routes should be redistributed.
metric metric-value	(OPTIONAL) Enter the keyword metric followed by a number as the metric value. Range: 0 to16
route-map map-name	(OPTIONAL) Enter the keyword route-map followed by the name of a configured route map.

Defaults

Not configured.

Command Modes

ROUTER RIP

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

pre-Version 6.2.1.1 Introduced on E-Series

router rip

Enter the ROUTER RIP mode to configure and enable RIP.

Syntax

router rip

To disable RIP, enter no router rip.

Defaults

Disabled.

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

pre-Version 6.2.1.1 Introduced on E-Series

Usage Information

To enable RIP, you must assign a network address using the network command.

Example

Figure 33-1. router rip Command Example

FTOS (conf) #router rip
FTOS (conf-router_rip) # 

Related Commands

network Enable RIP.

exit Return to the CONFIGURATION mode.

show config

Display the changes you made to the RIP configuration. Default values are not shown.

Syntax

show config

Command Modes

ROUTER RIP

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

pre-Version 6.2.1.1 Introduced on E-Series

Example

Figure 33-2. show config Command Example in ROUTER RIP Mode

FTOS (conf-router_rip) #show config
!
router rip
network 172.31.0.0
passive-interface GigabitEthernet 0/1
FTOS (conf-router_rip) # 

show ip rip database

Display the routes learned by RIP. If the switch learned no RIP routes, no output is generated.

Syntax

show ip rip database [ip-address mask]

Parameters

ip-address	(OPTIONAL) Specify an IP address in dotted decimal format to view RIP information on that network only.If you enter an IP address, you must also enter a mask for that IP address.
mask	(OPTIONAL) Specify a mask, in /network format, for the IP address.

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

pre-Version 6.2.1.1 Introduced on E-Series

Example

Figure 33-3. show ip rip database Command Example (partial)

FTOS#show ip rip database
Total number of routes in RIP database: 1624
204.250.54.0/24
[50/1] via 192.14.1.3, 00:00:12, GigabitEthernet 9/15
204.250.54.0/24 auto-summary
203.250.49.0/24
[50/1] via 192.13.1.3, 00:00:12, GigabitEthernet 9/14
203.250.49.0/24 auto-summary
210.250.40.0/24
[50/2] via 1.1.18.2, 00:00:14, Vlan 18
[50/2] via 1.1.130.2, 00:00:12, Port-channel 30
210.250.40.0/24 auto-summary
207.250.53.0/24
[50/2] via 1.1.120.2, 00:00:55, Port-channel 20
[50/2] via 1.1.130.2, 00:00:12, Port-channel 30
[50/2] via 1.1.10.2, 00:00:18, Vlan 10
207.250.53.0/24 auto-summary
208.250.42.0/24
[50/2] via 1.1.120.2, 00:00:55, Port-channel 20
[50/2] via 1.1.130.2, 00:00:12, Port-channel 30
[50/2] via 1.1.10.2, 00:00:16, Vlan 10
208.250.42.0/24 auto-summary 

Table 33-1. Fields in show ip rip database Command Output

Field Description
Total number of routes in RIP database	Displays the number of RIP routes stored in the RIP database.
100.10.10.0/24 directly connected	Lists the route(s) directly connected.
150.100.0.0 redistributed Lists	the routes learned through redistribution.
209.9.16.0/24... Lists the routes	and the sources advertising those routes.

show running-config rip

Use this feature to display the current RIP configuration.

Syntax

show running-config rip

Defaults

No default values or behavior

Command Modes

EXEC Privilege

Example

Figure 33-4. show running-config rip Command Example

show running-config rip
!
router rip
distribute-list Test1 in
distribute-list Test21 out
network 10.0.0.0
passive-interface GigabitEthernet 2/0
neighbor 20.20.20.20
redistribute ospf 999
version 2 

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced on S-Series

Version 7.7.1.0 Introduced on C-Series

Version 7.6.1.0 Introduced on E-Series

timers basic

Manipulate the RIP timers for routing updates, invalid, holddown times and flush time.

Syntax

timers basic update invalid holddown flush

To return to the default settings, enter no timers basic.

Parameters

update	Enter the number of seconds to specify the rate at which RIP routing updates are sent. Range: zero (0) to 4294967295. Default: 30 seconds.
invalid	Enter the number of seconds to specify the time interval before routing updates are declared invalid or expired. The invalid value should be at least three times the update timer value. Range: zero (0) to 4294967295. Default: 180 seconds.
holddown	Enter the number of seconds to specify a time interval during which the route is marked as unreachable but still sending RIP packets. The holddown value should be at least three times the update timer value. Range: zero (0) to 4294967295. Default: 180 seconds.
flush	Enter the number of seconds to specify the time interval during which the route is advertised as unreachable. When this interval expires, the route is flushed from the routing table. The flush value should be greater than the update value. Range: zero (0) to 4294967295. Default is 240 seconds.

Defaults
update = 30 seconds; invalid = 180 seconds; holddown = 180 seconds; flush = 240 seconds.
If the timers on one router are changed, the timers on all routers in the RIP domain must also be synchronized.

Command Modes

ROUTER RIP

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

pre-Version 6.2.1.1 Introduced on E-Series

Usage Information

version

Specify either RIP version 1 or RIP version 2.

Syntax

version {1 | 2}

To return to the default version setting, enter no version.

Parameters

1 Enter the keyword 1 to specify RIP version 1.

2 Enter the keyword 2 to specify RIP version 2.

Default

The FTOS sends RIPv1 and receives RIPv1 and RIPv2.

Command Modes

ROUTER RIP

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced on S-Series

Related Commands

Version 7.6.1.0 Introduced on C-Series

pre-Version 6.2.1.1 Introduced on E-Series

ip rip receive version Set the RIP version to be received on the interface.

ip rip send version Set the RIP version to be sent out the interface.

Remote Monitoring (RMON)

Overview

FTOS RMON is implemented on all Dell Networking switching platforms (C-Series, E-Series, and S-Series), as indicated by the characters that appear below each command heading:

• C-Series: ©
• E-Series: E
• S-Series: 5

FTOS RMON is based on IEEE standards, providing both 32-bit and 64-bit monitoring, and long-term statistics collection. FTOS RMON supports the following RMON groups, as defined in RFC-2819, RFC-3273, and RFC-3434:

• Ethernet Statistics Table RFC-2819
- Ethernet Statistics High-Capacity Table RFC-3273, 64bits
- Ethernet History Control Table RFC-2819
• Ethernet History Table RFC-2819
- Ethernet History High-Capacity Table RFC-3273, 64bits
• Alarm Table RFC-2819
• High-Capacity Alarm Table (64bits) RFC-3434, 64bits
• Event Table RFC-2819
- Log Table RFC-2819

FTOS RMON does not support the following statistics:

• etherStatsCollisions
• etherHistoryCollisions
• etherHistoryUtilization

Note: Only SNMP GET/GETNEXT access is supported. Configure RMON using the RMON commands. Collected data is lost during a chassis reboot.

Commands

The FTOS Remote Network Monitoring RMON commands are:

• rmon alarm
• rmon collection history
  • rmon collection statistics

• rmon event

• rmon hc-alarm
  • show rmon
  • show rmon alarms
  • show rmon events
  • show rmon hc-alarm
  • show rmon history
  • show rmon log
  • show rmon statistics

rmon alarm

Set an alarm on any MIB object.

Syntax

rmon alarm number variable interval {delta | absolute} rising-threshold value event-number falling-threshold value event-number [owner string]

To disable the alarm, use the no rmon alarm number command.

Parameters

number	Enter the alarm integer number from 1 to 65535. The value must be unique in the RMON Alarm Table.
variable	The MIB object to monitor. The variable must be in the SNMP OID format, for example, 1.3.6.1.2.1.1.3 The object type must be a 32 bit integer.
interval	Time, in seconds, the alarm monitors the MIB variables; this is the alarmSampleType in the RMON Alarm table.Range: 5 to 3600 seconds
delta	Enter the keyword delta to test the change between MIB variables. This is the alarmSampleType in the RMON Alarm table.
absolute	Enter the keyword absolute to test each MIB variable directly. This is the alarmSampleType in the RMON Alarm table.
rising-threshold value event-number	Enter the keyword rising-threshold followed by the value (32bit) the rising-threshold alarm is either triggered or reset. Then enter the event-number to trigger when the rising threshold exceeds its limit. This value is the same as the alarmRisingEventIndex or alarmTable of the RMON MIB. If there is no corresponding rising-threshold event, the value is zero.
falling-threshold value event-number	Enter the keyword falling-threshold followed by the value (32bit) the falling-threshold alarm is either triggered or reset. Then enter the event-number to trigger when the falling threshold exceeds its limit.This value is the same as the alarmFallingEventIndex or the alarmTable of the RMON MIB. If there is no corresponding falling-threshold event, the value is zero.
owner string	(OPTIONAL) Enter the keyword owner followed by the owner name to specify an owner for the alarm. This is the alarmOwner object in the alarmTable of the RMON MIB.

Default

owner

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

Version 6.1.1.0 Introduced for E-Series

rmon collection history

Enable the RMON MIB history group of statistics collection on an interface.

Syntax

rmon collection history {controlEntry integer} [owner name] [buckets number] [interval seconds]

To remove a specified RMON history group of statistics collection, use the no rmon collection history {controlEntry integer} command.

Parameters

controlEntry integer	Enter the keyword controlEntry to specify the RMON group of statistics using a value. Then enter an integer value from 1 to 65535 that identifies the RMON group of statistics. The integer value must be a unique index in the RMON History Table.
owner name	(OPTIONAL) Enter the keyword owner followed by the owner name to record the owner of the RMON group of statistics.
buckets number	(OPTIONAL) Enter the keyword buckets followed the number of buckets for the RMON collection history group of statistics.Bucket Range: 1 to 1000Default: 50
interval seconds	(OPTIONAL) Enter the keyword interval followed the number of seconds in each polling cycle.Range: 5 to 3600 secondsDefault: 1800 seconds

Defaults

No default behavior

Command Modes

CONFIGURATION INTERFACE (config-if)

Command
History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

Version 6.1.1.0 Introduced for E-Series

rmon collection statistics

Enable RMON MIB statistics collection on an interface.

Syntax

rmon collection statistics {controlEntry integer} [owner name]

To remove RMON MIB statistics collection on an interface, use the no rmon collection statistics {controlEntry integer} command.

Parameters

controlEntry integer	Enter the keyword controlEntry to specify the RMON group of statistics using a value. Then enter an integer value from 1 to 65535 that identifies the RMON Statistic Table. The integer value must be a unique in the RMON Statistic Table.
owner name	(OPTIONAL) Enter the keyword owner followed by the owner name to record the owner of the RMON group of statistics.

Defaults
No default behavior

Command Modes
CONFIGURATION INTERFACE (config-if)
Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

Version 6.1.1.0 Introduced for E-Series

rmon event

Add an event in the RMON event table.

Syntax
rmon event number [log] [trap community] [description string] [ownername]
To disable RMON on an interface, use the no rmon event number [log] [trap community] [description string] command.
Parameters

number	Assign an event number in integer format from 1 to 65535. The number value must be unique in the RMON Event Table.
log	(OPTIONAL) Enter the keyword log to generate an RMON log entry. The log entry is triggered and sets the eventType in the RMON MIB to log or log-and-trap.Default: No log
trap community	(OPTIONAL) Enter the keyword trap followed by an SNMP community string to configure the eventType setting in the RMON MIB. This sets either snmp-trap or log-and-trap.Default: public
description string	(OPTIONAL) Enter the keyword description followed by a string describing the event.
owner name	(OPTIONAL) Enter the keyword owner followed by the name of the owner of this event.

Defaults
as described above

Command Modes
CONFIGURATION
Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

Version 6.1.1.0 Introduced for E-Series

rmon hc-alarm

Set an alarm on any MIB object.

Syntax

rmon hc-alarm number variable interval {delta | absolute} rising-threshold value event-number falling-threshold value event-number [owner string]

To disable the alarm, use the no rmon hc-alarm number command.

Parameters

number	Enter the alarm integer number from 1 to 65535. The value must be unique in the RMON Alarm Table.
variable	The MIB object to monitor. The variable must be in the SNMP OID format, for example, 1.3.6.1.2.1.1.3 The object type must be a 64 bit integer.
interval	Time, in seconds, the alarm monitors the MIB variables; this is the alarmSampleType in the RMON Alarm table.Range: 5 to 3600 seconds
delta	Enter the keyword delta to test the change between MIB variables. This is the alarmSampleType in the RMON Alarm table.
absolute	Enter the keyword absolute to test each MIB variable directly. This is the alarmSampleType in the RMON Alarm table.
rising-threshold value event-number	Enter the keyword rising-threshold followed by the value (64 bit) the rising-threshold alarm is either triggered or reset. Then enter the event-number to trigger when the rising threshold exceeds its limit. This value is the same as the alarmRisingEventIndex or alarmTable of the RMON MIB. If there is no corresponding rising-threshold event, the value is zero.
falling-threshold value event-number	Enter the keyword falling-threshold followed by the value (64 bit) the falling-threshold alarm is either triggered or reset. Then enter the event-number to trigger when the falling threshold exceeds its limit. This value is the same as the alarmFallingEventIndex or the alarmTable of the RMON MIB. If there is no corresponding falling-threshold event, the value is zero.
owner string	(OPTIONAL) Enter the keyword owner followed the owner name to specify an owner for the alarm. This is the alarmOwner object in the alarmTable of the RMON MIB.

Defaults

owner

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

Version 6.1.1.0 Introduced for E-Series

show rmon

Display the RMON running status including the memory usage.

Syntax

show rmon

Defaults

No default behavior

Command Modes

EXEC

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

Version 6.1.1.0 Introduced for E-Series

Example

Figure 34-1. show rmon Command Example

FTOS# show rmon
RMON status
    total memory used 218840 bytes.
    ether statistics table: 8 entries, 4608 bytes
    ether history table: 8 entries, 6000 bytes
    alarm table: 390 entries, 102960 bytes
    high-capacity alarm table: 5 entries, 1680 bytes
    event table: 500 entries, 206000 bytes
    log table: 2 entries, 552 bytes
FTOS# 

show rmon alarms

Display the contents of the RMON Alarm Table.

Syntax

show rmon alarms [index] [brief]

Parameters

index	(OPTIONAL) Enter the table index number to display just that entry.
brief	(OPTIONAL) Enter the keyword brief to display the RMON Alarm Table in an easy-to-read format.

Defaults

No default behavior

Command Modes

EXEC

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

Version 6.1.1.0 Introduced for E-Series

Example 1

Figure 34-2. show rmon alarms index Command Example

FTOS#show rmon alarm 1
RMON alarm entry 1
    sample Interval: 5
    object: 1.3.6.1.2.1.1.3
    sample type: absolute value.
    value: 255161
    alarm type: rising or falling alarm.
    rising threshold: 1, RMON event index: 1
    falling threshold: 501, RMON event index: 501
    alarm owner: 1
    alarm status: OK
FTOS# 

Example 2
Figure 34-3. show rmon alarms brief Command Example

Display the contents of RMON Event Table.

Syntax

show rmon events [index] [brief]

Parameters

index	(OPTIONAL) Enter the table index number to display just that entry.
brief	(OPTIONAL) Enter the keyword brief to display the RMON Event Table in an easy-to-read format.

Defaults

No default behavior

Command Modes

EXEC

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

Version 6.1.1.0 Introduced for E-Series

Example 1

Figure 34-4. show rmon event index Command Example

Example 2

Figure 34-5. show rmon event brief Command Example

FTOS#show rmon event br
index	description
1	1
2	2
3	3
4	4
5	5
6	6
7	7
8	8
9	9
10	10
11	11
12	12
13	13
14	14
15	15
16	16
17	17
18	18
19	19
20	20
21	21
22	22
FTOS#

show rmon hc-alarm

Display the contents of RMON High-Capacity Alarm Table.

Syntax

show rmon hc-alarm [index] [brief]

Parameters

index	(OPTIONAL) Enter the table index number to display just that entry.
brief (OPTIONAL) Enter the keyword brief to display the RMONHigh-Capacity Alarm Table in an easy-to-read format.

Defaults

No default behavior

Command Modes

EXEC

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

Version 6.1.1.0 Introduced for E-Series

Example 1

Figure 34-6. show rmon hc-alarm brief Command Example

FTOS#show rmon hc-alarm 1
RMON high-capacity alarm entry 1
object: 1.3.6.1.2.1.1.3
sample interval: 5
sample type: absolute value.
value: 185638
alarm type: rising or falling alarm.
alarm rising threshold value: positive.
rising threshold: 1001, RMON event index: 1
alarm falling threshold value: positive.
falling threshold: 999, RMON event index: 6
alarm sampling failed 0 times.
alarm owner: 1
alarm storage type: non-volatile.
alarm status: OK
FTOS# 

show rmon history

Display the contents of the RMON Ethernet History table.

Syntax

show rmon history [index] [brief]

Parameters

index	(OPTIONAL) Enter the table index number to display just that entry.
brief	(OPTIONAL) Enter the keyword brief to display the RMON Ethernet History table in an easy-to-read format.

Defaults

No default behavior

Command Modes

EXEC

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Support added for S-Series

Version 6.1.1.0 Introduced for E-Series

Example 1

Figure 34-8. show rmon history index Command Example

FTOS#show rmon history 6001
RMON history control entry 6001
interface: ifIndex.100974631 GigabitEthernet 2/0
bucket requested: 1
bucket granted: 1
sampling interval: 5 sec
owner: 1
status: OK
FTOS# 

Example 2

Figure 34-9. show rmon history brief Command Example

FTOS#show rmon history brief index	ifIndex	interface
-
6001	100974631	GigabitEthernet 2/0
6002	100974631	GigabitEthernet 2/0
6003	101236775	GigabitEthernet 2/1
6004	101236775	GigabitEthernet 2/1
9001	134529054	GigabitEthernet 3/0
9002	134529054	GigabitEthernet 3/0
9003	134791198	GigabitEthernet 3/1
9004	134791198	GigabitEthernet 3/1
FTOS#

show rmon log

Display the contents of RMON Log Table.

Syntax

show rmon log [index] [brief]

Parameters	index	(OPTIONAL) Enter the log index number to display just that entry.
	brief	(OPTIONAL) Enter the keyword brief to display the RMON Log Table in an easy-to-read format.
Defaults	No default behavior
hand Modes	EXEC
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	Version 6.1.1.0 Introduced for E-Series

Example 1

Figure 34-10. show rmon log index Command Example

FTOS#show rmon log 2

RMON log entry, alarm table index 2, log index 1

log time: 14638 (THU AUG 12 22:10:40 2004)

description: 2

FTOS#

Example 2

Figure 34-11. show rmon log brief Command Example

FTOS#show rmon log br
eventIndex	description
-
2	2
4	4
FTOS#

Usage Information

The log table has a maximum of 500 entries. If the log exceeds that maximum, the oldest log entry is purged to allow room for the new entry.

show rmon statistics

Display the contents of RMON Ethernet Statistics table.

Syntax show rmon statistics [index] [brief]

Parameters	index	(OPTIONAL) Enter the index number to display just that entry.
	brief	(OPTIONAL) Enter the keyword brief to display the RMON Ethernet Statistics table in an easy-to-read format.
Defaults	No default behavior
mand Modes	EXEC
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	Version 6.1.1.0 Introduced for E-Series

Example 1 Figure 34-12. show rmon statistics index Command Example

FTOS#show rmon statistics 6001 RMON statistics entry 6001 interface: ifIndex.100974631 GigabitEthernet 2/0 packets dropped: 0 bytes received: 0 packets received: 0 broadcast packets: 0 multicast packets: 0 CRC error: 0 under-size packets: 0 over-size packets: 0 fragment errors: 0 jabber errors: 0 collision: 0 64bytes packets: 0 65-127 bytes packets: 0 128-255 bytes packets: 0 256-511 bytes packets: 0 512-1023 bytes packets: 0 1024-1518 bytes packets: 0 owner: 1 status: OK <high-capacity data> HC packets received overflow: 0 HC packets received: 0 HC bytes received overflow: 0 HC bytes received: 0 HC 64bytes packets overflow: 0 HC 64bytes packets: 0 HC 65-127 bytes packets overflow: 0 HC 65-127 bytes packets: 0 HC 128-255 bytes packets overflow: 0 HC 128-255 bytes packets: 0 HC 256-511 bytes packets overflow: 0 HC 256-511 bytes packets: 0 HC 512-1023 bytes packets overflow: 0 HC 512-1023 bytes packets: 0 HC 1024-1518 bytes packets overflow: 0 HC 1024-1518 bytes packets: 0

Example 2
Figure 34-13. show rmon statistics brief Command Example

FTOS#show rmon statistics br index	ifIndex	interface
6001	100974631	GigabitEthernet 2/0
6002	100974631	GigabitEthernet 2/0
6003	101236775	GigabitEthernet 2/1
6004	101236775	GigabitEthernet 2/1
9001	134529054	GigabitEthernet 3/0
9002	134529054	GigabitEthernet 3/0
9003	134791198	GigabitEthernet 3/1
9004	134791198	GigabitEthernet 3/1
FTOS#

Rapid Spanning Tree Protocol (RSTP)

Overview

The FTOS implementation of RSTP (Rapid Spanning Tree Protocol) is based on the IEEE 802.1w standard spanning-tree protocol. The RSTP algorithm configures connectivity throughout a bridged LAN that is comprised of LANs interconnected by bridges.

RSTP is supported by FTOS on all Dell Networking systems, as indicated by the characters that appear below each command heading:

• C-Series: ©
• E-Series: E
• S-Series: ☐

Commands

The FTOS RSTP commands are:

• bridge-priority
• debug spanning-tree rstp
• description
• description
• forward-delay
• hello-time
• max-age
• protocol spanning-tree rstp
  • show config
  • show spanning-tree rstp
• spanning-tree rstp
• tc-flush-standard

bridge-priority

Set the bridge priority for RSTP.

Syntax

bridge-priority priority-value

To return to the default value, enter no bridge-priority.

Parameters	priority-value	Enter a number as the bridge priority value in increments of 4096. Range: 0 to 61440. Default: 32768
Defaults	32768
Command Modes	CONFIGURATION RSTP (conf-rstp)
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	Version 6.2.1.1 Introduced for E-Series
Related Commands	protocol spanning-tree rstp Enter the Rapid Spanning Tree mode

debug spanning-tree rstp

Enable debugging of RSTP and view information on the protocol.

Syntax

debug spanning-tree rstp [all | bpdu interface {in | out} | events]

To disable debugging, enter no debug spanning-tree rstp.

Parameters

all	(OPTIONAL) Enter the keyword all to debug all spanning tree operations.
bpdu interface{in | out}	(OPTIONAL) Enter the keyword bpdu to debug Bridge Protocol Data Units.(OPTIONAL) Enter the interface keyword along with the type slot/port of the interface you want displayed. Type slot/port options are the following:For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.For Port Channel groups, enter the keyword port-channel followed by a number:C-Series and S-Series Range: 1-128E-Series Range: 1-255 for TeraScaleFor a SONET interface, enter the keyword sonet followed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.Optionally, enter an in or out parameter in conjunction with the optional interface:For Receive, enter inFor Transmit, enter out
events	(OPTIONAL) Enter the keyword events to debug RSTP events.
EXEC Privilege
Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

Version 6.2.1.1 Introduced for E-Series

Example

Figure 35-1. debug spanning-tree rstp bpdu Command Example

FTOS#debug spanning-tree rstp bpdu gigabitethernet 2/0 ? in Receive (in) out Transmit (out)

description

Enter a description of the Rapid Spanning Tree

Syntax

description {description}

To remove the description, use the no description {description} command.

Parameters

description Enter a description to identify the Rapid Spanning Tree (80 characters maximum).

Defaults

No default behavior or values

Command Modes

SPANNING TREE (The prompt is "config-rstp".)

Command History

Version 8.3.5.0 Introduced on S55

pre-7.7.1.0 Introduced

Related Commands

protocol spanning-tree rstp Enter SPANNING TREE mode on the switch.

disable

Disable RSTP globally on the system.

Syntax

disable

To enable Rapid Spanning Tree Protocol, enter no disable.

Defaults

RSTP is disabled

Command Modes

CONFIGURATION RSTP (conf-rstp)

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

Version 6.2.1.1 Introduced for E-Series

Related Commands

protocol spanning-tree rstp Enter the Rapid Spanning Tree mode

forward-delay

☐ E S	Configure the amount of time the interface waits in the Listening State and the Learning State before transitioning to the Forwarding State.
Syntax	forward-delay seconds
Parameters	To return to the default setting, enter no forward-delay.
	seconds	Enter the number of seconds that FTOS waits before transitioning RSTP to the forwarding state.Range: 4 to 30Default: 15 seconds
Defaults	15 seconds
Command Modes	CONFIGURATION RSTP (conf-rstp)
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	Version 6.2.1.1 Introduced for E-Series
Related Commands	hello-time Change the time interval between BPDUs.
	max-age Change the wait time before RSTP refreshes protocol configuration information.
hello-time	Set the time interval between generation of RSTP Data Units (BPDUs).
Syntax	hello-time [milli-second] seconds
Parameters	To return to the default value, enter no hello-time.
	seconds	Enter a number as the time interval between transmission of BPDUs.Range: 1 to 10 secondsDefault: 2 seconds.
	milli-second	Enter this keyword to configure a hello time on the order of milliseconds.Range: 50 - 950 milliseconds
Defaults	2 seconds
Command Modes	CONFIGURATION RSTP (conf-rstp)
Command History	Version 8.3.5.0 Introduced on S55
	Version 8.3.1.0 Added milli-second to S-Series.
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	Version 6.2.1.1 Introduced for E-Series
Usage Information	The hello time is encoded in BPDUs in increments of 1/256ths of a second. The standard minimum hello time in seconds is 1 second, which is encoded as 256. Millisecond hello times are encoded using values less than 256; the millisecond hello time equals (x/1000)*256.
	When millisecond hellos are configured, the default hello interval of 2 seconds is still used for edge ports; the millisecond hello interval is not used.
Related Commands	forward-delay Change the wait time before RSTP transitions to the Forwarding state.
	max-age Change the wait time before RSTP refreshes protocol configuration information.
max-ageC E S	Set the time interval for the RSTP bridge to maintain configuration information before refreshing that information.
Syntax	max-age seconds
	To return to the default values, enter no max-age.
Parameters	max-age Enter a number of seconds the FTOS waits before refreshing configuration information. Range: 6 to 40 seconds Default: 20 seconds
Defaults	20 seconds
Command Modes	CONFIGURATION RSTP (conf-rstp)
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	Version 6.2.1.1 Introduced for E-Series
Related Commands	max-age Change the wait time before RSTP transitions to the Forwarding state.
	hello-time Change the time interval between BPDUs.

protocol spanning-tree rstp

Enter the RSTP mode to configure RSTP.

Syntax

protocol spanning-tree rstp

To exit the RSTP mode, enter exit

Defaults

Not configured

Command Modes	CONFIGURATION RSTP (conf-rstp)
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	Version 6.2.1.1 Introduced for E-Series
Example	Figure 35-2. protocol spanning-tree rstp CommandFTOS (conf) #protocol spanning-tree rstpFTOS (config-rstp) ##no disable
Usage Information	RSTP is not enabled when you enter the RSTP mode. To enable RSTP globally on the system, enter no description from the RSTP mode.
Related Commands	description	Disable RSTP globally on the system.

show config

View the current configuration for the mode. Only non-default values are displayed.

Syntax show config

Command Modes CONFIGURATION RSTP (conf-rstp)

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

Version 6.2.1.1 Introduced for E-Series

Example

Figure 35-3. show config Command for the RSTP Mode

FTOS (conf-rstp) #show config
!
protocol spanning-tree rstp
no disable
bridge-priority 16384
FTOS (conf-rstp) # 

show spanning-tree rstp

Display the RSTP configuration.

Syntax show spanning-tree rstp [brief]

Parameters

brief

(OPTIONAL) Enter the keyword brief to view a synopsis of the RSTP configuration information.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

Version 6.4.1.0 Expanded to display port error disable state (EDS) caused by loopback BPDU inconsistency

Version 6.2.1.1 Introduced for E-Series

Example 1
Figure 35-4. show spanning-tree rstp brief Command

FTOS#show spanning-tree rstp briefExecuting IEEE compatible Spanning Tree ProtocolRoot ID Priority 8192, Address 0001.e805.e306Root Bridge hello time 4, max age 20, forward delay 15Bridge ID Priority 16384, Address 0001.e801.6aa8Configured hello time 2, max age 20, forward delay 15
Interface Name	PortID	Prio Cost		Sts Cost		Designated Bridge ID	PortID
Gi 4/0	128.418	128	20000	FWD	20000	16384 0001.e801.6aa8	128.418
Gi 4/1	128.419	128	20000	FWD	20000	16384 0001.e801.6aa8	128.419
Gi 4/8	128.426	128	20000	FWD	20000	8192 0001.e805.e306	128.130
Gi 4/9	128.427	128	20000	BLK	20000	8192 0001.e805.e306	128.131
Interface Name	Role	PortID	Prio Cost		Sts Cost	Link-type	Edge
Gi 4/0	Desg	128.418	128	20000	FWD	20000 P2P	Yes
Gi 4/1	Desg	128.419	128	20000	FWD	20000 P2P	Yes
Gi 4/8	Root	128.426	128	20000	FWD	20000 P2P	No
Gi 4/9	Altr	128.427	128	20000	BLK	20000 P2P	No
FTOS#

Example 2

Figure 35-5. show spanning-tree rstp with EDS and LBK

FTOS#show spanning-tree rstp br
Executing IEEE compatible Spanning Tree Protocol
Root ID Priority 32768, Address 0001.e801.6aa8
Root Bridge hello time 2, max age 20, forward delay 15
Bridge ID Priority 32768, Address 0001.e801.6aa8
We are the root
Configured hello time 2, max age 20, forward delay 15
Interface Name	PortID	Prio	Cost	Sts	Cost	Designated Bridge ID	PortID
Gi 0/0	128.257	128	20000	EDS	0	32768 0001.e801.6aa8	128.257
Interface Name	Role	PortID	Prio	Cost	Sts	Cost	Link-type Edge
Gi 0/0	ErrDis	128.257	128	20000	EDS	0	P2P No
FTOS#show spanning-tree rstp
Root Identifier has priority 32768, Address 0001.e801.6aa8
Root Bridge hello time 2, max age 20, forward delay 15, max hops 0
Bridge Identifier has priority 32768, Address 0001.e801.6aa8
Configured hello time 2, max age 20, forward delay 15, max hops 0
We are the root
Current root has priority 32768, Address 0001.e801.6aa8
Number of topology changes 1, last change occurred 00:00:31 ago on Gi 0/0
Port 257 (GigabitEthernet 0/0) is LBK_INC Discarding
Port path cost 20000, Port priority 128, Port Identifier 128.257
Designated root has priority 32768, address 0001.e801.6aa8
Designated bridge has priority 32768, address 0001.e801.6aa8
Designated port id is 128.257, designated path cost 0
Number of transitions to forwarding state 1
BPDU : sent 27, received 9
The port is not in the Edge port mode
FTOS#

spanning-tree rstp

Configure Port cost, Edge port with optional Bridge Port Data Unit (BPDU) guard, or Port priority on the RSTP.

Syntax

spanning-tree rstp {cost Port cost | edge-port [bpduguard [shutdown-on-violation]] | priority priority}

To remove the port cost, edge port with optional BPDU, or port priority, use the no spanning-tree rstp {cost Port cost | edge-port [bpduguard] | priority priority} command.

Parameters

cost Port cost	(OPTIONAL) Enter the keyword cost followed by the port cost value. Range: 1 to 200000 Defaults: 100 Mb/s Ethernet interface = 200000 1-Gigabit Ethernet interface = 20000 10-Gigabit Ethernet interface = 2000 Port Channel interface with one 100 Mb/s Ethernet = 200000 Port Channel interface with one 1-Gigabit Ethernet = 20000 Port Channel interface with one 10-Gigabit Ethernet = 2000 Port Channel with two 1-Gigabit Ethernet = 18000 Port Channel with two 10-Gigabit Ethernet = 1800 Port Channel with two 100-Mbps Ethernet = 180000
edge-port	Enter the keyword edge-port to configure the interface as a Rapid Spanning Tree edge port.
bpduguard	(OPTIONAL) Enter the keyword portfast to enable Portfast to move the interface into forwarding mode immediately after the root fails.Enter the keyword bpduguard to disable the port when it receives a BPDU.
shutdown-on-violation	(OPTIONAL) Enter the keyword shutdown-on-violation to hardware disable an interface when a BPDU is received and the port is disabled.
priority priority	(OPTIONAL) Enter keyword priority followed by a value in increments of 16 as the priority.Range: 0 to 240.Default: 128

Defaults Not configured Command Modes INTERFACE

Command History	Version 8.3.5.0 Introduced on S55
	Version 8.2.1.0 Introduced hardware shutdown-on-violation options
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	Version 7.4.1.0 Added the optional Bridge Port Data Unit (BPDU) guard.
	Version 6.2.1.1 Introduced for E-Series

Usage Information
The BPDU guard option prevents the port from participating in an active STP topology in case a BPDU appears on a port unintentionally, or is misconfigured, or is subject to a DOS attack. This option places the port into an error disable state if a BPDU appears, and a message is logged so that the administrator can take corrective action.

Note: A port configured as an edge port, on an RSTP switch, will immediately transition to the forwarding state. Only ports connected to end-hosts should be configured as edge ports. Consider an edge port similar to a port with a spanning-tree portfast enabled.

If shutdown-on-violation is not enabled, BPDUs will still be sent to the RPM CPU.

Example

Figure 35-6. spanning-tree rstp edge-port Command

FTOS (conf) #interface gigabitethernet 4/0
FTOS (conf-if-gi-4/0) #spanning-tree rstp edge-port
FTOS (conf-if-gi-4/0) #show config
!
interface GigabitEthernet 4/0
no ip address
switchport
spanning-tree rstp edge-port
no shutdown
FTOS# 

tc-flush-standard

Enable the MAC address flushing upon receiving every topology change notification.

Syntax

tc-flush-standard

To disable, use the no tc-flush-standard command.

Defaults

Disabled

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

Version 6.5.1.0 Introduced for E-Series

Usage Information

By default FTOS implements an optimized flush mechanism for RSTP. This helps in flushing MAC addresses only when necessary (and less often), allowing for faster convergence during topology changes. However, if a standards-based flush mechanism is needed, this knob command can be turned on to enable flushing MAC addresses upon receiving every topology change notification.

Security

Overview

Except for the Trace List feature (E-Series only), most of the commands in this chapter are available on all three Dell Networking platforms — C-Series, E-Series, and S-Series (the S-Series models that run FTOS), as noted by the following icons that appear under each command icon: C E S

Commands

This chapter contains various types of security commands in FTOS, in the following sections:

• AAA Accounting Commands
• Authorization and Privilege Commands
- Authentication and Password Commands
• RADIUS Commands
• TACACS+ Commands
- Port Authentication (802.1X) Commands
- SSH Server and SCP Commands
- Secure DHCP Commands

For configuration details, see the Security chapter in the FTOS Configuration Guide.

Note: Starting with FTOS v7.2.1.0, LEAP with MSCHAP v2 supplicant is implemented.

AAA Accounting Commands

AAA Accounting enables tracking of services that users are accessing and the amount of network resources being consumed by those services. When AAA Accounting is enabled, the network server reports user activity to the TACACS+ security server in the form of accounting records. Each accounting record is comprised of accounting AV pairs and is stored on the access control server.

As with authentication and authorization, you must configure AAA Accounting by defining named list of accounting methods, and then apply that list to various interfaces. The commands are:

• aaa accounting
• aaa accounting suppress
• accounting
  • show accounting

aaa accounting

Enable AAA Accounting and create a record for monitoring the accounting function.

Syntax

aaa accounting {system | exec | commands level} {name | default} {start-stop | wait-start | stop-only} {tacacs+}

To disable AAA Accounting, use the no aaa accounting {system | exec | command level} {name | default} {start-stop | wait-start | stop-only} {tacacs+} command.

Parameters

system	Enter the keyword system to send accounting information of any other AAA configuration.
exec	Enter the keyword exec to send accounting information when a user has logged in to the EXEC mode.
commands level	Enter the keyword command followed by a privilege level for accounting of commands executed at that privilege level.
name | default	Enter one of the following:For name, a user-defined name of a list of accounting methodsdefault for the default accounting methods
start-stop	Enter the keyword start-stop to send a “start accounting” notice at the beginning of the requested event and a “stop accounting” notice at the end of the event.
wait-start	Enter the keyword wait-start to ensure that the TACACS+ security server acknowledges the start notice before granting the user’s process request.
stop-only	Enter the keyword stop-only to instruct the TACACS+ security server to send a “stop record accounting” notice at the end of the requested user process.
tacacs+	Enter the keyword tacacs+ to use TACACS+ data for accounting. FTOS currently only supports TACACS+ accounting.

Defaults

No default configuration or behavior

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced for S-Series

Version 7.5.1.0 Introduced for C-Series

Version 6.3.1.0 Introduced for E-Series

Example

Figure 36-1. aaa accounting Command Examples

FTOS (conf)# aaa accounting exec default start-stop tacacs+ FTOS (conf)# aaa accounting command 15 default start-stop tacacs+ FTOS (config)#

Usage Information

In the example above, TACACS+ accounting is used to track all usage of EXEC command and commands on privilege level 15.

Privilege level 15 is the default. If you want to track usage at privilege level 1, for example, use aaa accounting command 1.

Related Commands

enable password Change the password for the enable command.

login authentication Enable AAA login authentication on terminal lines.

password Create a password.

tacacs-server host Specify a TACACS+ server host.

aaa accounting suppress

Prevent the generation of accounting records of users with user name value of NULL.

Syntax

aaa accounting suppress null-username

To permit accounting records to users with user name value of NULL, use the no aaa accounting suppress null-username command

Defaults

Accounting records are recorded for all users.

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced for S-Series

Version 7.5.1.0 Introduced for C-Series

Version 6.3.1.0 Introduced

Usage Information

FTOS issues accounting records for all users on the system, including users whose username string, due to protocol translation, is NULL. For example, a user who comes on line with the aaa authentication login method-list none command is applied. Use aaa accounting suppress command to prevent accounting records from being generated for sessions that do not have user names associated to them.

accounting

Apply an accounting method list to terminal lines.

Syntax

accounting { exec | commands level} method-list

Parameters

exec	Enter this keyword to apply an EXEC level accounting method list.
commands level	Enter this keyword to apply an EXEC and CONFIGURATION level accounting method list.
method-list	Enter a method list that you defined using the command aaa accounting exec or aaa accounting commands.

Defaults

None

Command Modes

LINE

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced for S-Series

Usage Information	Version 7.5.1.0 Introduced for C-Series
	Version 6.3.1.0 Introduced on E-Series
	aaa accounting	Enable AAA Accounting and create a record for monitoring the accounting function.
show accounting
C E S	Display the active accounting sessions for each online user.
Syntax	show accounting
Defaults	No default configuration or behavior
Command Modes	EXEC
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Introduced for S-Series
	Version 7.5.1.0 Introduced for C-Series
	Version 6.3.1.0 Introduced
Example	Figure 36-2. show accounting Command Example
	FTOS#show accountingActive accounted actions on tty2, User admin Priv 1Task ID 1, EXEC Accounting record, 00:00:39 Elapsed, service=shellActive accounted actions on tty3, User admin Priv 1Task ID 2, EXEC Accounting record, 00:00:26 Elapsed, service=shellFTOS#
Usage Information	This command steps through all active sessions and then displays the accounting records for the active account functions.

Authorization and Privilege Commands

Set command line authorization and privilege levels with the following commands:

• authorization
• aaa authorization commands
• aaa authorization config-commands
• aaa authorization exec
• privilege level (CONFIGURATION mode)
  • privilege level (LINE mode)

authorization

Apply an authorization method list to terminal lines.

Syntax

authorization { exec | commands level} method-list

Parameters	exec	Enter this keyword to apply an EXEC level authorization method list.
	commands level	Enter this keyword to apply an EXEC and CONFIGURATION level authorization method list.
	method-list	Enter a method list that you defined using the command aaa authorization exec or aaa authorization commands.

Defaults None

Command Modes LINE

Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Introduced for S-Series
	Version 7.5.1.0 Introduced for C-Series
	Version 6.3.1.0 Introduced on E-Series

Usage Information	aaa authorization commands	Set parameters that restrict (or permit) a user’s access to EXEC and CONFIGURATION level commands
	aaa authorization exec Set parameters that restrict (or permit) a user’s access to EXEC level commands.

aaa authorization commands

Set parameters that restrict (or permit) a user's access to EXEC and CONFIGURATION level commands

Syntax

aaa authorization commands level {name | default} {local || tacacs+ || none}

Undo a configuration with the no aaa authorization commands level {name | default} {local || tacacs+ || none} command syntax.

Parameters

commands level	Enter the keyword commands followed by the command privilege level for command level authorization.
name	Define a name for the list of authorization methods.
default	Define the default list of authorization methods.
local	Use the authorization parameters on the system to perform authorization.
tacacs+	Use the TACACS+ protocol to perform authorization.
none	Enter this keyword to apply no authorization.

Defaults

None

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced for S-Series

Version 7.5.1.0 Introduced for C-Series

Version 6.1.1.0 Added support for RADIUS

aaa authorization config-commands

E	Set parameters that restrict (or permit) a user's access to EXEC level commands.
Syntax	aaa authorization config-commandsDisable authorization checking for CONFIGURATION level commands using the command no aaa authorization config-commands.
Defaults	Enabled when you configure aaa authorization commands
Command Modes	CONFIGURATION
Command History	Version 7.5.1.0 Introduced for E-Series
Usage Information	By default, the command aaa authorization commands configures the system to check both EXEC level and CONFIGURATION level commands. Use the command no aaa authorization config-commands to enable only EXEC-level command checking.

aaa authorization exec

C E S	Set parameters that restrict (or permit) a user's access to EXEC-level commands.
Syntax	aaa authorization exec {name | default} {local || tacacs+ || if-authenticated || none}
	Disable authorization checking for EXEC level commands using the command no aaa authorization exec.
Parameters	name	Define a name for the list of authorization methods.
	default	Define the default list of authorization methods.
	local	Use the authorization parameters on the system to perform authorization.
	tacacs+	Use the TACACS+ protocol to perform authorization.
	none	Enter this keyword to apply no authorization.
Defaults	None
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Introduced for S-Series
	Version 7.5.1.0 Introduced for C-Series
	Version 6.1.1.0 Added support for RADIUS

privilege level (CONFIGURATION mode)

Change the access or privilege level of one or more commands.

Syntax

privilege mode {level level command | reset command}

To delete access to a level and command, use the no privilege mode level level command command.

Parameters

mode	Enter one of the following keywords as the mode for which you are controlling access:configurefor the CONFIGURATION modeexecfor the EXEC modeinterfacefor the INTERFACE modeslinefor the LINE moderoute-mapfor the ROUTE-MAProuterfor the ROUTER OSPF, ROUTER RIP, ROUTER ISIS and ROUTER BGP modes.
level level	Enter the keyword levelfollowed by a number for the access level.Range: 0 to 15.Level 1 is the EXEC mode and Level 15 allows access to all CLI modes and commands.
reset	Enter the keyword resetto return the security level to the default setting.
command	Enter the command’s keywords to assign the command to a certain access level. You can enter one or all of the keywords

Defaults

Not configured.

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced for S-Series

Version 7.5.1.0 Introduced for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Usage Information

Use the enable password command to define a password for the level to which you are assigning privilege or access.

privilege level (LINE mode)

Change the access level for users on the terminal lines.

Syntax

privilege level level

To delete access to a terminal line, use the no privilege level /level command.

Parameters

level level

Enter the keyword level followed by a number for the access level. Range: 0 to 15.Level 1 is the EXEC mode and Level 15 allows access to all CLI modes.

Defaults

level = 15

Command Modes

LINE

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced for S-Series

Version 7.5.1.0 Introduced for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Authentication and Password Commands

This section contains the following commands controlling management access to the system:

• aaa authentication enable
• aaa authentication login
• access-class
• enable password
• enable restricted
• enable secret
• login authentication
• password
• password-attributes
• privilege level (CONFIGURATION mode)
  • privilege level (LINE mode)
  • service password-encryption
  • show privilege
  • show users
• timeout login response
• username

aaa authentication enable

Configure AAA Authentication method lists for user access to the EXEC Privilege mode (the “Enable” access).

Syntax

aaa authentication enable {default | method-list-name} method [... method2]

To return to the default setting, use the no aaa authentication enable {default | method-list-name} method [... method2] command.

Parameters

default	Enter the keyworddefaultfollowed by the authentication methods to use as the default sequence of methods to be used for the Enable log-in.Default:default enable
method-list-name	Enter a text string (up to 16 characters long) to name the list of enabled authentication methods activated at log in.

	method	Enter one of the following methods:enable- use the password defined by the enable password command in the CONFIGURATION mode.line- use the password defined by the password command in the LINE mode. none- no authentication. radius- use the RADIUS server(s) configured with the radius-server host command.tacacs+- use the TACACS+ server(s) configured with the tacacs-server host command.
	... method2	(OPTIONAL) In the event of a “no response” from the first method, FTOS applies the next configured method.
Defaults	Use the enable password.
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Introduced for S-Series
	Version 7.5.1.0 Introduced for C-Series
	Version 6.2.1.1 Introduced
Usage Information	By default, the Enable password is used. If aaa authentication enable default is configured, FTOS will use the methods defined for Enable access instead.Methods configured with the aaa authentication enable command are evaluated in the order they are configured. If authentication fails using the primary method, FTOS employs the second method (or third method, if necessary) automatically. For example, if the TACACS+ server is reachable, but the server key is invalid, FTOS proceeds to the next authentication method. The TACACS+ is incorrect, but the user is still authenticated by the secondary method.
Related Commands	enable password Change the password for the enable command.
	login authentication Enable AAA login authentication on terminal lines.
	password Create a password.
	radius-server host Specify a RADIUS server host.
	tacacs-server host Specify a TACACS+ server host.

aaa authentication login

Configure AAA Authentication method lists for user access to the EXEC mode (Enable log-in).

Syntax

aaa authentication login { method-list-name | default } method [... method4]

To return to the default setting, use the no aaa authentication login { method-list-name | default } command.

Parameters

method-list-name	Enter a text string (up to 16 characters long) as the name of a user-configured method list that can be applied to different lines.
default	Enter the keyworddefaultto specify that the method list specified is the default method for all terminal lines.
method	Enter one of the following methods:enable- use the password defined by the enable password command in the CONFIGURATION mode.line- use the password defined by thepasswordcommand in the LINE mode.local- use the user name/password defined by the in the local configuration none- no authentication.radius- use the RADIUS server(s) configured with theradius-server host command.tacacs+- use the TACACS+ server(s) configured with thetacacs-server host command.
... method4	(OPTIONAL) Enter up to four additional methods. In the event of a “no response” from the first method, FTOS applies the next configured method (up to four configured methods).

Default

Not configured (that is, no authentication is performed)

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced for S-Series

Version 7.5.1.0 Introduced for C-Series

pre-Version 6.2.1.0 Introduced on E-Series

Usage Information

By default, the locally configured username password will be used. If aaa authentication login default is configured, FTOS will use the methods defined by this command for login instead.

Methods configured with the aaa authentication login command are evaluated in the order they are configured. If users encounter an error with the first method listed, FTOS applies the next method configured. If users fail the first method listed, no other methods are applied. The only exception is the local method. If the user's name is not listed in the local database, the next method is applied. If the correct user name/password combination are not entered, the user is not allowed access to the switch.

Note: If authentication fails using the primary method, FTOS employs the second method (or third method, if necessary) automatically. For example, if the TACACS+ server is reachable, but the server key is invalid, FTOS proceeds to the next authentication method. The TACACS+ is incorrect, but the user is still authenticated by the secondary method.

After configuring the aaa authentication login command, configure the login authentication command to enable the authentication scheme on terminal lines.

Connections to the SSH server will work with the following login mechanisms: local, radius and tacacs.

Related Commands	login authentication Apply an authentication method list to designated terminal lines.
	password Create a password.
	radius-server host Specify a RADIUS server host.
	tacacs-server host Specify a TACACS+ server host.

access-class

C E S	Restrict incoming connections to a particular IP address in a defined IP access control list (ACL).
Syntax	access-class access-list-nameTo delete a setting, use theno access-class command.
Parameters	access-list-name	Enter the name of an established IP Standard ACL.
Defaults	Not configured.
Command Modes	LINE
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Introduced for S-Series
	Version 7.5.1.0 Introduced for C-Series
	pre-Version 6.2.1.1 Introduced on E-Series
Related Commands	line Apply an authentication method list to designated terminal lines.
	ip access-list standard Name (or select) a standard access list to filter based on IP address.
	ip access-list extended	Name (or select) an extended access list based on IP addresses or protocols.

enable password

C E S	Change the password for the enable command.
Syntax	enable password [level level] [encryption-type] passwordTo delete a password, use the no enable password [encryption-type] password [level level] command.

Parameters	level level	(OPTIONAL) Enter the keyword level followed by a number as the level of access. Range: 1 to 15
	encryption-type	(OPTIONAL) Enter the number 7 or 0 as the encryption type.Enter a 7 followed by a text string as the hidden password. The text string must be a password that was already encrypted by a Force10 Networks router.Use this parameter only with a password that you copied from theshowrunning-configfile of another Force10 Networks router.
	password	Enter a text string, up to 32 characters long, as the clear text password.
Defaults	No password is configured. level = 15
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Introduced for S-Series
	Version 7.5.1.0 Introduced for C-Series
	pre-Version 6.1.1.0 Introduced for E-Series
Usage Information	Use this command to define a password for a level and use theprivilege level (CONFIGURATION mode) command to control access to command modes.
	Passwords must meet the following criteria:Start with a letter, not a number.Passwords can have a regular expression as the password. To create a password with a regular expression in it, you must use CNTL + v prior to entering regular expression. For example, to create the password abcd] e, you type “abcd CNTL v] e”. When the password is created, you do not use the CNTL + v key combination and enter “abcd] e”.
	Note: The question mark (?) and the tilde (~) are not supported characters.
Related Commands	show running-config View the current configuration.
	privilege level (CONFIGURATION mode) Control access to command modes within the switch.

enable restricted

Allows Force10 Networks technical support to access restricted commands.

Syntax

enable restricted [encryption-type] password

To disallow access to restricted commands, enter no enable restricted.

Parameters

encryption-type	(OPTIONAL) Enter the number 7 as the encryption type.Enter 7 followed a text string as the hidden password. The text string must be a password that was already encrypted by a Force10 Networks router.Use this parameter only with a password that you copied from theshow running-configfile of another Force10 Networks router.
password	Enter a text string, up to 32 characters long, as the clear text password.

Command Modes Not configured.

Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Introduced for S-Series
	Version 7.5.1.0 Introduced for C-Series
	pre-Version 6.1.1.0 Introduced for E-Series

Usage Only Force10 Networks Technical Support staff use this command. Information

enable secret

Change the password for the enable command.
Syntax enable secret [level level] [encryption-type] password

To delete a password, use the no enable secret [encryption-type] password [level level] command.
Parameters

level level	(OPTIONAL) Enter the keyword level followed by a number as the level of access.Range: 1 to 15
encryption-type	(OPTIONAL) Enter the number 5 or 0 as the encryption type.Enter a 5 followed a text string as the hidden password. The text string must be a password that was already encrypted by a Force10 Networks router.Use this parameter only with a password that you copied from theshow running-configfile of another Force10 Networks router.
password	Enter a text string, up to 32 characters long, as the clear text password.

Defaults No password is configured. level = 15

Command Modes CONFIGURATION

Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Introduced for S-Series
	Version 7.5.1.0 Introduced for C-Series
	pre-Version 6.1.1.0 Introduced for E-Series

Usage Use this command to define a password for a level and use the privilege level (CONFIGURATION Information mode) command to control access to command modes.

Passwords must meet the following criteria:

• Start with a letter, not a number.
• Passwords can have a regular expression as the password. To create a password with a regular expression in it, you must use CNTL + v prior to entering regular expression. For example, to create the password abcd] e, you type abcd CNTL v] e and when the password is created, you do not use the CNTL + v key combination and enter abcd] e.

Note: The question mark (?) and the tilde (\~) are not supported characters.

Related Commands	show running-config View the current configuration.
	privilege level (CONFIGURATION mode) Control access to command modes within the E-Series.

login authentication

Syntax	Apply an authentication method list to designated terminal lines. login authentication {method-list-name | default} To use the local user/password database for login authentication, enter no login authentication.
Parameters	method-list-name	Enter the method-list-name to specify that method list, created in the aaa authentication login command, to be applied to the designated terminal line.
	default	Enter the keyword default to specify that the default method list, created in the aaa authentication login command, is applied to the terminal line.
Defaults	No authentication is performed on the console lines, and local authentication is performed on the virtual terminal and auxiliary lines.
Command Modes	LINE
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Introduced for S-Series
	Version 7.5.1.0 Introduced for C-Series
	pre-Version 6.2.1.0 Introduced on E-Series
Usage Information	If you configure the aaa authentication login default command, then the login authentication default command automatically is applied to all terminal lines.
Related Commands	aaa authentication login Select login authentication methods.

password

Specify a password for users on terminal lines.

Syntax

password [encryption-type] password

To delete a password, use the no password password command.

Parameters

encryption-type	(OPTIONAL) Enter either zero (0) or 7 as the encryption type for thepasswordentered. The options are:0 is the default and means the password is not encrypted and stored as clear text.7 means that the password is encrypted and hidden.
password	Enter a text string up to 32 characters long. The first character of thepasswordmust be a letter.You cannot use spaces in the password.

Defaults

No password is configured.

Command Modes

LINE

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced for S-Series

Version 7.5.1.0 Introduced for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Usage Information

FTOS prompts users for these passwords when the method for authentication or authorization used is "line".

Related Commands

enable password	Set the password for the enable command.
login authentication	Configure an authentication method to log in to the switch.
service	Encrypt all passwords configured in FTOS.
password-encryption
radius-server key	Configure a key for all RADIUS communications between the switch and the RADIUS host server.
tacacs-server key	Configure a key for communication between a TACACS+ server and client.
username	Establish an authentication system based on user names.

password-attributes

Configure the password attributes (strong password).

Syntax

password-attributes [min-length number] [max-retry number] [character-restriction [upper number] [lower number] [numeric number] [special-char number]]

To return to the default, use the no password-attributes [min-length number] [max-retry number] [character-restriction [upper number] [lower number] [numeric number] [special-char number]] command.

Parameters

min-length number	(OPTIONAL) Enter the keyword min-length followed by the number of characters. Range: 0 - 32 characters
max-retry number	(OPTIONAL) Enter the keyword max-retry followed by the number of maximum password retries. Range: 0 - 16
character-restriction	(OPTIONAL) Enter the keyword character-restriction to indicate a character restriction for the password.
upper number	(OPTIONAL) Enter the keyword upper followed the upper number. Range: 0 - 31
lower number	(OPTIONAL) Enter the keyword lower followed the lower number. Range: 0 - 31

	numeric number	(OPTIONAL) Enter the keyword numeric followed the numeric number. Range: 0 - 31
	special-char number	(OPTIONAL) Enter the keyword special-char followed the number of special characters permitted. Range: 0 - 31
Defaults	No default values or behavior
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Introduced for S-Series
	Version 7.5.1.0 Introduced for C-Series
	Version 7.4.1.0 Introduced
Related Commands	password Specify a password for users on terminal lines.

service password-encryption

Encrypt all passwords configured in FTOS.

Syntax

service password-encryption

To store new passwords as clear text, enter no service password-encryption.

Defaults

Enabled.

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced for S-Series

Version 7.5.1.0 Introduced for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Caution: Encrypting passwords with this command does not provide a high level of security. When the passwords are encrypted, you cannot return them to plain text unless you re-configure them. To remove an encrypted password, use the no password password command.

Usage Information

To keep unauthorized people from viewing passwords in the switch configuration file, use the service password-encryption command. This command encrypts the clear-text passwords created for user name passwords, authentication key passwords, the privileged command password, and console and virtual terminal line access passwords.

To view passwords, use the show running-config command.

show privilege

View your access level.

Syntax

show privilege

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced for S-Series

Version 7.5.1.0 Introduced for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Example

Figure 36-3. show privilege Command Output

FTOS#show privilege Current privilege level is 15 FTOS#

Related Commands

privilege level (CONFIGURATION mode) Assign access control to different command modes.

show users

View information on all users logged into the switch.

Syntax

show users [all]

Parameters

all (OPTIONAL) Enter the keyword all to view all terminal lines in the switch.

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced for S-Series

Version 7.5.1.0 Introduced for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Example

Figure 36-4. show users Command Example

FTOS#show user Line User Host(s) Location 0 console 0 admin idle * 3 vty 1 admin idle 172.31.1.4 FTOS#

Table 1 describes the information in the show users command example.
Table 1 show users Command Example Fields

Field Description
(untitled) Indicates with a * which terminal line you are using.
Line Displays the terminal lines currently in use.
User Displays the user name of all users logged in.
Host(s) Displays the terminal line status.
Location Displays the IP address of the user.

Related Commands

username Enable a user.

timeout login response

Specify how long the software will wait for login input (for example, user name and password) before timing out.

Syntax

timeout login response seconds

To return to the default values, enter no timeout login response.

Parameters

seconds

Enter a number of seconds the software will wait before logging you out.

Range: 1 to 300.

Default: 300 seconds.

Defaults

seconds = 300 seconds

Command Modes

LINE

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced for S-Series

Version 7.5.1.0 Introduced for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Usage Information

The software measures the period of inactivity defined in this command as the period between consecutive keystrokes. For example, if your password is “password” you can enter “p” and wait 29 seconds to enter the next letter.

username

Establish an authentication system based on user names.

Syntax

username name [access-class access-list-name] [nopassword | {password | secret} [encryption-type] password] [privilege level]

If you do not want a specific user to enter a password, use the nopassword option.

To delete authentication for a user, use the no username name command.

Parameters

name	Enter a text string for the name of the user up to 63 characters.
access-class access-list-name	Enter the keywordaccess-classfollowed by the name of a configured access control list (either a IP access control list or MAC access control list).
nopassword	Enter the keywordnopasswordto specify that the user should not enter a password.
password	Enter the keywordpasswordfollowed by theencryption-typeor the password.
secret	Enter the keywordsecretfollowed by theencryption-typeor the password.
encryption-type	Enter an encryption type for thepasswordthat you will enter.0 directs FTOS to store the password as clear text. It is the default encryption type when using thepasswordoption.7 to indicate that a password encrypted using a DES hashing algorithm will follow. This encryption type is available with thepasswordoption only.5 to indicate that a password encrypted using an MD5 hashing algorithm will follow. This encryption type is available with thesecretoption only, and is the default encryption type for this option.
password	Enter a string up to 32 characters long.
privilege level	Enter the keywordprivilegefollowed by a number from zero (0) to 15.
secret	Enter the keywordsecretfollowed by the encryption type.

Defaults

The default encryption type for the password option is 0. The default encryption type for the secret option is 5.

Command Modes

CONFIGURATION
Command History

Version 8.3.5.0 Introduced on S55Added BSD encryption to MD5 passwords
Version 7.7.1.0	Added support forsecretoption and MD5 password encryption. Extendednamefrom 25 characters to 63.
Version 7.6.1.0 Introduced for S-Series
Version 7.5.1.0 Introduced for C-Series
E-Series original Command

Usage Information

To view the defined user names, use the show running-config user command.

The MD5 encryption method includes an additional password to support SmartScripts. This addition is included even if SmartScripts is not installed. The password appears as:

username robert secret 5 d7397df437351f9c3e48e5e4fde9f9ed bsd-password \1\T0duaorE\$v013A5GFxIZz4LHOxz2IM.

Related Commands

password Specify a password for users on terminal lines.

show running-config View the current configuration.

RADIUS Commands

The RADIUS commands supported by FTOS. are:

• debug radius
• ip radius source-interface
• radius-server deadtime
• radius-server host
• radius-server key
• radius-server retransmit
• radius-server timeout

debug radius

View RADIUS transactions to assist with troubleshooting.

Syntax

debug radius

To disable debugging of RADIUS, enter no debug radius.

Defaults

Disabled.

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

pre-Version 6.2.1.1 Introduced on E-Series

ip radius source-interface

Specify an interface's IP address as the source IP address for RADIUS connections.

Syntax

ip radius source-interface interface

To delete a source interface, enter no ip radius source-interface.

Parameters

interface

Enter the following keywords and slot/port or number information:For an 100/1000 Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For a Gigabit Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For Loopback interfaces, enter the keywordloopbackfollowed by a number from zero (0) to 16838.For the Null interface, enter the keywordsnull 0.For the Port Channel interface, enter the keywordport-channelfollowed by a number:C-Series and S-Series Range: 1-128E-Series Range: 1 to 255 for TeraScaleFor a SONET interface, enter the keywordsonetfollowed by the slot/port information.For a Ten Gigabit Ethernet interface, enter the keywordTenGigabitEthernetfollowed by the slot/port information.For VLAN interface, enter the keywordvlanfollowed by a number from 1 to 4094.

Defaults

Not configured.

Command Mode

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

pre-Version 6.2.1.1 Introduced on E-Series

radius-server deadtime

Configure a time interval during which non-responsive RADIUS servers to authentication requests are skipped.

Syntax

radius-server deadtime seconds

To disable this function or return to the default value, enter no radius-server deadtime.

Parameters

seconds

Enter a number of seconds during which non-responsive RADIUS servers are skipped.

Range: 0 to 2147483647 seconds.

Default: 0 seconds.

Defaults

0 seconds

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced for S-Series

Version 7.5.1.0 Introduced for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

radius-server host

Configure a RADIUS server host.

Syntax

radius-server host {hostname | ip-address} [auth-port port-number] [retransmit retries] [timeout seconds] [key [encryption-type] key]

To delete a RADIUS server host or return to the default values, use the no radius-server host {hostname | ip-address} [auth-port] [retransmit] [timeout] command.

Parameters

hostname	Enter the name of the RADIUS server host.
ip-address	Enter the IP address, in dotted decimal format, of the RADIUS server host.
auth-port port-number	(OPTIONAL) Enter the keyword auth-port followed by a number as the port number.Range: zero (0) to 65535The default port-number is 1812.
retransmit retries	(OPTIONAL) Enter the keyword retransmit followed by a number as the number of attempts. This parameter overwrites the radius-server retransmit command.Range: zero (0) to 100Default: 3 attempts
timeout seconds	(OPTIONAL) Enter the keyword timeout followed by the seconds the time interval the switch waits for a reply from the RADIUS server. This parameter overwrites the radius-server timeout command.Range: 0 to 1000Default: 5 seconds
key [encryption-type] key	(OPTIONAL) Enter the keyword key followed by an optional encryption-type and a string up to 42 characters long as the authentication key. This authentication key is used by the RADIUS host server and the RADIUS daemon operating on this switch.For the encryption-type, enter either zero (0) or 7 as the encryption type for the key entered. The options are:0 is the default and means the password is not encrypted and stored as clear text.7 means that the password is encrypted and hidden.Configure this parameter last because leading spaces are ignored.

Defaults

Not configured.

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on S55

Version 7.7.1.0 Authentication key length increased to 42 characters

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

pre-Version 6.2.1.1 Introduced on E-Series

Usage Information

Configure up to six RADIUS server hosts by using this command for each server host configured. FTOS searches for the RADIUS hosts in the order they are configured in the software.

The global default values for timeout, retransmit, and key optional parameters are applied, unless those values are specified in the radius-server host or other commands. If you configure timeout, retransmit, or key values, you must include those keywords when entering the no radius-server host command syntax to return to the global default values.

Related Commands	login authentication Set the database to be checked when a user logs in.
	radius-server key Set a authentication key for RADIUS communications.
	radius-server retransmit Set the number of times the RADIUS server will attempt to send information.
	radius-server timeout Set the time interval before the RADIUS server times out.

radius-server key

Configure a key for all RADIUS communications between the switch and the RADIUS host server.

Syntax

radius-server key [encryption-type] key

To delete a password, enter no radius-server key.

Parameters	encryption-type	(OPTIONAL) Enter either zero (0) or 7 as the encryption type for the key entered. The options are:0 is the default and means the key is not encrypted and stored as clear text.7 means that the key is encrypted and hidden.
	key	Enter a string that is the key to be exchanged between the switch and RADIUS servers. It can be up to 42 characters long.

Defaults

Not configured.

Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.7.1.0 Authentication key length increased to 42 characters
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	pre-Version 6.2.1.1 Introduced on E-Series
Usage Information	The key configured on the switch must match the key configured on the RADIUS server daemon.
	If the key parameter in theradius-server hostcommand is configured, the key configured with theradius-server keycommand is the default key for all RADIUS communications.
Related Commands	radius-server hostConfigure a RADIUS host.

radius-server retransmit

Syntax	configure the number of times the switch attempts to connect with the configured RADIUS host server before declaring the RADIUS host server unreachable.
	radius-server retransmit retries
	To configure zero retransmit attempts, enter no radius-server retransmit. To return to the default setting, enter radius-server retransmit 3.
Parameters	retries	Enter a number of attempts that FTOS tries to locate a RADIUS server. Range: zero (0) to 100. Default: 3 retries.
Defaults	3 retries
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	pre-Version 6.2.1.1 Introduced on E-Series
Related Commands	radius-server host Configure a RADIUS host.

radius-server timeout

C E S	Configure the amount of time the RADIUS client (the switch) waits for a RADIUS host server to reply to a request.
Syntax	radius-server timeout seconds
	To return to the default value, enter no radius-server timeout.
Parameters	seconds	Enter the number of seconds between an unsuccessful attempt and the FTOS times out.Range: zero (0) to 1000 seconds.Default: 5 seconds.
Defaults	5 seconds
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Support added for S-Series
	Version 7.5.1.0 Support added for C-Series
	pre-Version 6.2.1.1 Introduced on E-Series

TACACS+ Commands

FTOS supports TACACS+ as an alternate method for login authentication.

• debug tacacs+
• ip tacacs source-interface
• tacacs-server host
• tacacs-server key

debug tacacs+

View TACACS+ transactions to assist with troubleshooting.

Syntax

debug tacacs+

To disable debugging of TACACS+, enter no debug tacacs+.

Defaults

Disabled.

Command Modes

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced for S-Series

Version 7.5.1.0 Introduced for C-Series

pre-Version 6.2.1.1 Introduced on E-Series

ip tacacs source-interface

Specify an interface's IP address as the source IP address for TACACS+ connections.

Syntax

ip tacacs source-interface interface

To delete a source interface, enter no ip tacacs source-interface.

Parameters	interface	Enter the following keywords and slot/port or number information:For an 100/1000 Ethernet interface, enter the keyword followed by the slot/port information.For a Gigabit Ethernet interface, enter the keyword by the slot/port information.For Loopback interfaces, enter the keyword from zero (0) to 16838.For the Null interface, enter the keywords null 0.For the Port Channel interface, enter the keyword port-channel followed by a number:C-Series and S-Series Range: 1-128E-Series Range: 1 to 255 for TeraScaleFor a SONET interface, enter the keyword sonet followed by the slot/port information.For a Ten Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.For VLAN interface, enter the keyword vlan followed by a number from 1 to 4094.
Defaults	Not configured.
Command Mode	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Introduced for S-Series
	Version 7.5.1.0 Introduced for C-Series
	pre-Version 6.2.1.1 Introduced on E-Series

tacacs-server host

Specify a TACACS+ host.

Syntax

tacacs-server host {hostname | ip-address} [port number] [timeout seconds] [key key]

To remove a TACACS+ server host, use the no tacacs-server host {hostname | ip-address} command.

Parameters

hostname	Enter the name of the TACACS+ server host.
ip-address	Enter the IP address, in dotted decimal format, of the TACACS+ server host.
port number	(OPTIONAL) Enter the keyword port followed by a number as the port to be used by the TACACS+ server.Range: zero (0) to 65535Default: 49

	timeout seconds	(OPTIONAL) Enter the keyword timeout followed by the number of seconds the switch waits for a reply from the TACACS+ server. Range: 0 to 1000 Default: 10 seconds
	key key	(OPTIONAL) Enter the keyword key followed by a string up to 42 characters long as the authentication key. This authentication key must match the key specified in the tacacs-server key for the TACACS+ daemon. Configure this parameter last because leading spaces are ignored.
Defaults	Not configured.
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.7.1.0 Authentication key length increased to 42 characters
	Version 7.6.1.0 Introduced for S-Series
	Version 7.5.1.0 Introduced for C-Series
	pre-Version 6.2.1.1 Introduced on E-Series
Usage Information	To list multiple TACACS+ servers to be used by the aaa authentication login command, configure this command multiple times.
	If you are not configuring the switch as a TACACS+ server, you do not need to configure the port, timeout and key optional parameters. If you do not configure a key, the key assigned in the tacacs-server key command is used.
Related Commands	aaa authentication login Specify the login authentication method.
	tacacs-server key Configure a TACACS+ key for the TACACS server.

tacacs-server key

Configure a key for communication between a TACACS+ server and client.

Syntax

tacacs-server key [encryption-type] key

To delete a key, use the no tacacs-server key key

Parameters

encryption-type	(OPTIONAL) Enter either zero (0) or 7 as the encryption type for the key entered. The options are:• 0 is the default and means the key is not encrypted and stored as clear text.• 7 means that the key is encrypted and hidden.
key	Enter a text string, up to 42 characters long, as the clear text password. Leading spaces are ignored.

Defaults

Not configured.

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on S55

Version 7.7.1.0 Authentication key length increased to 42 characters

Version 7.6.1.0 Introduced for S-Series

Version 7.5.1.0 Introduced for C-Series

pre-Version 6.2.1.1 Introduced on E-Series

Usage Information

The key configured with this command must match the key configured on the TACACS+ daemon.

Port Authentication (802.1X) Commands

The 802.1X Port Authentication commands are:

• dot1x authentication (Configuration)
• dot1x authentication (Interface)
• dot1x auth-fail-vlan
• dot1x auth-server
• dot1x guest-vlan
• dot1x max-eap-req
• dot1x port-control
• dot1x quiet-period
• dot1x reauthentication
• dot1x reauth-max
• dot1x server-timeout
• dot1x supplicant-timeout
• dot1x tx-period
  • show dot1x interface

An authentication server must authenticate a client connected to an 802.1X switch port. Until the authentication, only EAPOL (Extensible Authentication Protocol over LAN) traffic is allowed through the port to which a client is connected. Once authentication is successful, normal traffic passes through the port.

FTOS supports RADIUS and Active Directory environments using 802.1X Port Authentication.

Important Points to Remember

FTOS limits network access for certain users by using VLAN assignments. 802.1X with VLAN assignment has these characteristics when configured on the switch and the RADIUS server.

• 802.1X is supported on C-Series, E-Series, and S-Series.
• 802.1X is not supported on the LAG or the channel members of a LAG.
• If no VLAN is supplied by the RADIUS server or if 802.1X authorization is disabled, the port is configured in its access VLAN after successful authentication.

• If 802.1X authorization is enabled but the VLAN information from the RADIUS server is not valid, the port returns to the unauthorized state and remains in the configured access VLAN. This prevents ports from appearing unexpectedly in an inappropriate VLAN due to a configuration error. Configuration errors create an entry in Syslog.

• If 802.1X authorization is enabled and all information from the RADIUS server is valid, the port is placed in the specified VLAN after authentication.

• If port security is enabled on an 802.1X port with VLAN assignment, the port is placed in the RADIUS server assigned VLAN.
• If 802.1X is disabled on the port, it is returned to the configured access VLAN.
• When the port is in the force authorized, force unauthorized, or shutdown state, it is placed in the configured access VLAN.
• If an 802.1X port is authenticated and put in the RADIUS server assigned VLAN, any change to the port access VLAN configuration will not take effect.
• The 802.1X with VLAN assignment feature is not supported on trunk ports, dynamic ports, or with dynamic-access port assignment through a VLAN membership.

dot1x authentication (Configuration)

Enable dot1x globally; dot1x must be enabled both globally and at the interface level.

Syntax dot1x authentication

To disable dot1x on an globally, use the no dot1x authentication command.

Defaults Disabled

Command Modes CONFIGURATION

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced on C-Series and S-Series

Version 7.4.1.0 Introduced on E-Series

Related Commands

dot1x authentication (Interface) Enable dot1x on an interface

dot1x authentication (Interface)

Enable dot1x on an interface; dot1x must be enabled both globally and at the interface level.

Syntax dot1x authentication

To disable dot1x on an interface, use the no dot1x authentication command.

Defaults Disabled

Command Modes INTERFACE

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced on C-Series and S-Series

Version 7.4.1.0 Introduced on E-Series

Related Commands

dot1x authentication (Configuration) Enable dot1x globally

dot1x auth-fail-vlan

Configure a authentication failure VLAN for users and devices that fail 802.1X authentication.
Syntax
dot1x auth-fail-vlan vlan-id [max-attempts number]

To delete the authentication failure VLAN, use the no dot1x auth-fail-vlan vlan-id [max-attempts number] command.
Parameters

vlan-id	Enter the VLAN Identifier. Range: 1 to 4094
max-attempts number	(OPTIONAL) Enter the keyword max-attempts followed number of attempts desired before authentication fails. Range: 1 to 5 Default: 3

Defaults

3 attempts

Command Modes

CONFIGURATION (conf-if-interface-slot/port)

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced on C-Series, E-Series and S-Series

Usage Information

If the host responds to 802.1X with an incorrect login/password, the login fails. The switch will attempt to authenticate again until the maximum attempts configured is reached. If the authentication fails after all allowed attempts, the interface is moved to the authentication failed VLAN.

Once the authentication VLAN is assigned, the port-state must be toggled to restart authentication. Authentication will occur at the next re-authentication interval (dot1x reauthentication).

Related Commands

dot1x port-control Enable port-control on an interface

dot1x guest-vlan Configure a guest VLAN for non-dot1x devices

show dot1x interface Display the 802.1X information on an interface

dot1x auth-server

Configure the authentication server to RADIUS.

Syntax

dot1x auth-server radius

Defaults

No default behavior or values

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced on C-Series and S-Series

Version 7.4.1.0 Introduced on E-Series

dot1x guest-vlan

Configure a guest VLAN for limited access users or for devices that are not 802.1X capable.

Syntax

dot1x guest-vlan vlan-id

To disable the guest VLAN, use the no dot1x guest-vlan vlan-id command.

Parameters

vlan-id

Enter the VLAN Identifier.

Range: 1 to 4094

Defaults

Not configured

Command Modes

CONFIGURATION (conf-if-interface-slot/port)

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced on C-Series, E-Series, and S-Series

Usage Information

802.1X authentication is enabled when an interface is connected to the switch. If the host fails to respond within a designated amount of time, the authenticator places the port in the guest VLAN.

If a device does not respond within 30 seconds, it is assumed that the device is not 802.1X capable. Therefore, a guest VLAN is allocated to the interface and authentication, for the device, will occur at the next re-authentication interval (dot1x reauthentication).

If the host fails authentication for the designated amount of times, the authenticator places the port in authentication failed VLAN (dot1x auth-fail-vlan).

Related Commands

Note: Layer 3 portion of guest VLAN and authentication fail VLANs can be created regardless if the VLAN is assigned to an interface or not. Once an interface is assigned a guest VLAN (which has an IP address), then routing through the guest VLAN is the same as any other traffic. However, interface may join/leave a VLAN dynamically.

dot1x auth-fail-vlan

Configure a VLAN for authentication failures

dot1x reauthentication Enable periodic re-authentication

show dot1x interface Display the 802.1X information on an interface

dot1x max-eap-req

Configure the maximum number of times an EAP (Extensive Authentication Protocol) request is transmitted before the session times out.

Syntax

dot1x max-eap-req number

To return to the default, use the no dot1x max-eap-req command.

Parameters	number	Enter the number of times an EAP request is transmitted before a session time-out. Range: 1 to 10 Default: 2
Defaults	2
Command Modes	INTERFACE
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Introduced on C-Series and S-Series
	Version 7.4.1.0 Introduced on E-Series
Related Commands	interface range Configure a range of interfaces

dot1x port-control

Enable port control on an interface.

Syntax

dot1x port-control {force-authorized | auto | force-unauthorized}

Parameters

force-authorized	Enter the keyword force-authorized to forcibly authorize a port.
auto	Enter the keyword auto to authorize a port based on the 802.1X operation result.
force-unauthorized	Enter the keyword force-unauthorized to forcibly de-authorize a port.

Defaults

No default behavior or values

Command Modes

INTERFACE

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced on C-Series and S-Series

Version 7.4.1.0 Introduced on E-Series

Usage Information

The authenticator performs authentication only when port-control is set to auto.

dot1x quiet-period

Set the number of seconds that the authenticator remains quiet after a failed authentication with a client.

Syntax

dot1x quiet-period seconds

To disable quiet time, use the no dot1x quiet-time command.

Parameters	seconds	Enter the number of seconds. Range: 1 to 65535 Default: 30
Defaults	30 seconds
Command Modes	INTERFACE
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Introduced on C-Series and S-Series
	Version 7.4.1.0 Introduced on E-Series

dot1x reauthentication

Enable periodic re-authentication of the client.

Syntax

dot1x reauthentication [interval seconds]

To disable periodic re-authentication, use the no dot1x reauthentication command.

Parameters

interval seconds

(Optional) Enter the keyword interval followed by the interval time, in seconds, after which re-authentication will be initiated. Range: 1 to 31536000 (1 year) Default: 3600 (1 hour)

Defaults

3600 seconds (1 hour)

Command Modes

INTERFACE

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced on C-Series and S-Series

Version 7.4.1.0 Introduced on E-Series

Related Commands

interface range Configure a range of interfaces

dot1x reauth-max

Configure the maximum number of times a port can re-authenticate before the port becomes unauthorized.

Syntax

dot1x reauth-max number

To return to the default, use the no dot1x reauth-max command.

Parameters

number	Enter the permitted number of re-authentications.
	Range: 1 - 10
	Default: 2

Defaults 2

Command Modes INTERFACE

Command History	Version 7.6.1.0 Introduced on C-Series and S-Series
	Version 7.4.1.0 Introduced on E-Series

dot1x server-timeout

C E S Configure the amount of time after which exchanges with the server time out.

Syntax dot1x server-timeout seconds

To return to the default, use the no dot1x server-timeout command.

Parameters

seconds

Enter a time-out value in seconds. Range: 1 to 300, where 300 is implementation dependant. Default: 30

Defaults 30 seconds

Command Modes INTERFACE

Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Introduced on C-Series and S-Series
	Version 7.4.1.0 Introduced on E-Series

dot1x supplicant-timeout

C E S Configure the amount of time after which exchanges with the supplicant time out.

Syntax dot1x supplicant-timeout seconds

To return to the default, use the no dot1x supplicant-timeout command.

Parameters

seconds

Enter a time-out value in seconds. Range: 1 to 300, where 300 is implementation dependant. Default: 30

Defaults 30 seconds

Command Modes INTERFACE

Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Introduced on C-Series and S-Series
	Version 7.4.1.0 Introduced on E-Series

dot1x tx-period
C E S Configure the intervals at which EAPOL PDUs are transmitted by the Authenticator PAE.
Syntax dot1x tx-period seconds
To return to the default, use the no dot1x tx-period command.

Parameters

seconds

Enter the interval time, in seconds, that EAPOL PDUs are transmitted. Range: 1 to 31536000 (1 year) Default: 30

Defaults 30 seconds

Command Modes INTERFACE

Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Introduced on C-Series and S-Series
	Version 7.4.1.0 Introduced on E-Series

show dot1x interface

C E S Display the 802.1X information on an interface.
Syntax show dot1x interface interface

Parameters

interface

Enter one of the following keywords and slot/port or number information:For a Gigabit Ethernet interface, enter the keywordGigabitEthernetfollowed by the slot/port information.For a Fast Ethernet interface, enter the keywordFastEthernetfollowed by the slot/port information.For a Ten Gigabit Ethernet interface, enter the keywordTenGigabitEthernetfollowed by the slot/port information.

Defaults No default values or behavior

Command Modes EXEC EXEC Privilege

Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Introduced on C-Series, E-Series, and S-Series

Example

Figure 36-5. show dot1x interface command Example

FTOS#show dot1x int Gi 2/32
802.1x information on Gi 2/32:
Dot1x Status: Enable
Port Control: AUTO
Port Auth Status: UNAUTHORIZED
Re-Authentication: Disable
Untagged VLAN id: None
Guest VLAN: Enable
Guest VLAN id: 10
Auth-Fail VLAN: Enable
Auth-Fail VLAN id: 11
Auth-Fail Max-Attempts: 3
Tx Period: 30 seconds
Quiet Period: 60 seconds
ReAuth Max: 2
Supplicant Timeout: 30 seconds
Server Timeout: 30 seconds
Re-Auth Interval: 3600 seconds
Max-EAP-Req: 2
Auth Type: SINGLE_HOST
Auth PAE State: Initialize
Backend State: Initialize 

FTOS#

SSH Server and SCP Commands

FTOS supports SSH Protocol versions 1.5 and 2.0. Secure Shell (SSH) is a protocol for secure remote login over an insecure network. SSH sessions are encrypted and use authentication.

• crypto key generate
• debug ip ssh
• ip scp topdir
• ip ssh authentication-retries
• ip ssh connection-rate-limit
• ip ssh hostbased-authentication
• ip ssh key-size
• ip ssh password-authentication
• ip ssh pub-key-file
• ip ssh rhostsfile
• ip ssh rsa-authentication (Config)
• ip ssh rsa-authentication (EXEC)
• ip ssh server
  • show crypto
  • show ip ssh
  • show ip ssh client-pub-keys
  • show ip ssh rsa-authentication
• ssh

crypto key generate

Generate keys for the SSH server.

Syntax
crypto key generate {rsa | rsa1}

Parameters	rsa	Enter the keyword rsa followed by the key size to generate a SSHv2 RSA host keys.Range: 1024 to 2048Default: 1024
	rsa1	Enter the keyword rsa1 followed by the key size to generate a SSHv1 RSA host keys.Range: 1024 to 2048Default: 1024

Defaults

Key size 1024

Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Introduced for S-Series
	Version 7.5.1.0 Introduced for C-Series
	pre-Version 6.1.1.0 Introduced for E-Series

Example

Figure 36-6. crypto key generate rsa1 command example

FTOS#conf

FTOS(conf)#crypto key generate rsal

Enter key size <1024-2048>. Default<1024>: 1024

Host key already exists. Do you want to replace. [y/n] :y

FTOS(conf)#

Usage The host keys are required for key-exchange by the SSH server. If the keys are not found when the server is enabled (ip ssh server enable), the keys are automatically generated.

This command requires user interaction and will generate a prompt prior to overwriting any existing host keys.

Note: Only a user with superuser permissions should generate host-keys.

Related Commands	ip ssh server Enable the SSH server.
	show crypto Display SSH host public keys

debug ip ssh

Enables collecting SSH debug information.

Syntax
debug ip ssh {client | server}
To disable debugging, use the no debug ip ssh {client | server} command.
Parameters

client	Enter the keyword client to enable collecting debug information on the client.
server	Enter the keyword server to enable collecting debug information on the server.

Defaults

Disabled on both client and server

Command Modes
EXEC
Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced for S-Series

Version 7.5.1.0 Introduced for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Usage Information

Debug information includes details for key-exchange, authentication, and established session for each connection.

ip scp topdir

Identify a location for files used in secure copy transfer.

Syntax
ip scp topdir directory
To return to the default setting, enter no ip scp topdir command.
Parameters

directory

Enter a directory name.

Defaults

The internal flash (flash:) is the default directory.

Command Modes
CONFIGURATION
Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced for S-Series

Version 7.5.1.0 Introduced for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Usage Information

To configure the switch as a SCP server, use the ip ssh server command.

Related Commands

ip ssh server Enable SSH and SCP server on the switch.

ip ssh authentication-retries

Configure the maximum number of attempts that should be used to authenticate a user.

Syntax ip ssh authentication-retries 1-10

Parameters	1-10	Enter the number of maximum retries to authenticate a user. Range: 1 to 10 Default: 3
Defaults	3
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Introduced for S-Series
	Version 7.5.1.0 Introduced for C-Series
	pre-Version 6.1.1.0 Introduced for E-Series
Usage Information	This command specifies the maximum number of attempts to authenticate a user on a SSH connection with the remote host for password authentication. SSH will disconnect when the number of password failures exceeds authentication-retries.

ip ssh connection-rate-limit

Configure the maximum number of incoming SSH connections per minute.

Syntax ip ssh connection-rate-limit 1-10

Parameters	1-10	Enter the number of maximum number of incoming SSH connections allowed per minute.Range: 1 to 10 per minuteDefault: 10 per minute
Defaults	10 per minute
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Introduced for S-Series
	Version 7.5.1.0 Introduced for C-Series
	pre-Version 6.1.1.0 Introduced for E-Series

ip ssh hostbased-authentication

Syntax	Enable hostbased-authentication for the SSHv2 server.ip ssh hostbased-authentication enableTo disable hostbased-authentication for SSHv2 server, use theno ip ssh hostbased-authentication enable command.
Parameters	enable Enter the keyword enable to enable hostbased-authentication for SSHv2 server.
Defaults	Disable by default
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Introduced for S-Series
	Version 7.5.1.0 Introduced for C-Series
	pre-Version 6.1.1.0 Introduced for E-Series
Usage Information	If this command is enabled, clients can login without a password prompt. This provides two levels of authentication:• rhost-authentication is done with the file specified in the ip ssh rhostfile command• checking client host-keys is done with the file specified in the ip ssh pub-key-file commandIf no ip ssh rsa-authentication enable is executed, host-based authentication is disabled.Note: Administrators must specify the two files (rhosts and pub-key-file) to configure host-based authentication.
Related Commands	ip ssh pub-key-file Public keys of trusted hosts from a file.ip ssh rhostsfile Trusted hosts and users for rhost authentication.

ip ssh key-size

Syntax	ip ssh key-size 512-869
Parameters	512-869	Enter the key-size number for the server-generated RSA SSHv1 key.Range: 512 to 869Default: 768
Defaults	Key size 768
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Introduced for S-Series

Usage Information

Version 7.5.1.0 Introduced for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

The server-generated key is used for SSHv1 key-exchange.

ip ssh password-authentication

Enable password authentication for the SSH server.

Syntax

ip ssh password-authentication enable

To disable password-authentication, use the no ip ssh password-authentication enable.

Parameters

enable Enter the keyword enable to enable password-authentication for the SSH server.

Defaults

enabled

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced for S-Series

Version 7.5.1.0 Introduced for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Usage Information

With password authentication enabled, users can authenticate using local, RADIUS, or TACACS+ password fallback order as configured.

ip ssh pub-key-file

Specify the file to be used for host-based authentication.

Syntax

ip ssh pub-key-file {WORD}

Parameters

WORD Enter the file name for the host-based authentication.

Defaults

No default behavior or values

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced for S-Series

Version 7.5.1.0 Introduced for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Example

Figure 36-7. ip ssh pub-key-file Command Example

FTOS#conf

FTOS (conf)# ip ssh pub-key-file flash://knownhosts

FTOS (conf)#

Usage Information

This command specifies the file to be used for the host-based authentication. The file creates/overwrites the file flash://ADMIN_DIR/ssh/knownhosts and deletes the user specified file. Even though this is a global configuration command, it will not appear in the running configuration since this command needs to be run just once.

The file contains the OpenSSH compatible public keys of the host for which host-based authentication is allowed. An example known host file format:

poclab4,123.12.1.123 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIAEAox/ QQp8xYhzOxn07yh4VGPAoUfgKoicTHO9G4sNV+ui+DWEc3cgYAcU5Lai1MU2ODrzhCwyDNp05tKBU3t ReGlo8AxLi6+S4hyEMqHzkzBFNVqHzpQc+Rs4p2urzV0F4pRKnaXdHf3Lk4D460HZRhhVrxqeNxPDpEn WIMPJi0ds=ashwani@poclab4

Note: For rhostfile and pub-key-file, the administrator must FTP the file to the chassis.

Related Commands

show ip ssh client-pub-keys Display the client-public keys used for the host-based authentication.

ip ssh rhostsfile

Specify the rhost file to be used for host-based authorization.

Syntax

ip ssh rhostsfile {WORD}
Parameters

WORD	Enter the rhost file name for the host-based authentication.

Defaults

No default behavior or values

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced for S-Series

Version 7.5.1.0 Introduced for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Example

Figure 36-8. ip ssh rhostsfile Command Example

FTOS#conf

FTOS(conf)# ip ssh rhostsfile flash://shosts

FTOS(conf)#

Usage Information

This command specifies the rhost file to be used for host-based authentication. This file creates/overwrites the file flash:/ADMIN_DIR/ssh/shosts and deletes the user specified file. Even though this is a global configuration command, it will not appear in the running configuration since this command needs to be run just once.

This file contains hostnames and usernames, for which hosts and users, rhost-authentication can be allowed.

Note: For rhostfile and pub-key-file, the administrator must FTP the file to the switch.

ip ssh rsa-authentication (Config)

Enable RSA authentication for the SSHv2 server.

Syntax

ip ssh rsa-authentication enable

To disable RSA authentication, use the no ip ssh rsa-authentication enable command.

Parameters	enable	Enter the keyword enable to enable RSA authentication for the SSHv2 server.
Defaults	RSA authentication is disabled by default
mand Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Introduced for S-Series
	Version 7.5.1.0 Introduced for C-Series
	pre-Version 6.1.1.0 Introduced for E-Series
Usage Information	Enabling RSA authentication allows the user to login without being prompted for a password. In addition, the OpenSSH compatible SSHv2 RSA public key must be added to the list of authorized keys (ip ssh rsa-authentication my-authorized-keys device://filename command).
Related Commands	ip ssh rsa-authentication (EXEC) Add keys for RSA authentication.

ip ssh rsa-authentication (EXEC)

Add keys for the RSA authentication.

Syntax

ip ssh rsa-authentication {my-authorized-keys WORD}

To delete the authorized keys, use the no ip ssh rsa-authentication {my-authorized-keys} command.

Parameters	my-authorized-keys WORD	Enter the keyword my-authorized-keys followed by the file name of the RSA authorized-keys.
Defaults	No default behavior or values
hand Modes	EXEC
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Introduced for S-Series
	Version 7.5.1.0 Introduced for C-Series
	pre-Version 6.1.1.0 Introduced for E-Series
Usage Information	If you want to log in without being prompted for a password, log in through RSA authentication. To do that, you must first add the SSHv2 RSA public keys to the list of authorized keys. This command adds the specified RSA keys to the following file:flash://ADMIN_DIR/ssh/authorized-keys-username (where username is the user associated with this terminal).
	Note: The no form of this command deletes the file flash://ADMIN_DIR/ssh/authorized-keys-username
Related Commands	show ip ssh rsa-authentication Display RSA authorized keys.
	ip ssh rsa-authentication (Config) Enable RSA authentication.

ip ssh server

Configure an SSH server.

Syntax

ip ssh server {enable | port port-number} [version {1 | 2}]

To disable SSH server functions, enter no ip ssh server enable command.

Parameters

enable Enter the key word enable to start the SSH server.
port port-number	(OPTIONAL) Enter the keyword port followed by the port number of the listening port of the SSH server.Range: 1 to 65535Default: 22
[version {1 | 2}]	(OPTIONAL) Enter the keyword version followed by the SSH version 1 or 2 to specify only SSHv1 or SSHv2.

Defaults

Default listening port is 22

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced for S-Series

Version 7.5.1.0 Expanded to include specifying SSHv1 or SSHv2; Introduced for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Usage Information

This command enables the SSH server and begins listening on a port. If a port is not specified, listening is on SSH default port 22.

Example

Figure 36-9. ip ssh server port Command Example

FTOS# conf FTOS(conf)# ip ssh server port 45 FTOS(conf)# ip ssh server enable FTOS#

Related Commands

show ip ssh Display the ssh information

show crypto

Display the public part of the SSH host-keys.

Syntax

show crypto key mypubkey {rsa | rsa1}

Parameters

Key Enter the keyword key to display the host public key.
mypubkey	Enter the keyword mypubkey to display the host public key.
rsa	Enter the keyword rsa to display the host SSHv2 RSA public key.
rsa1	Enter the keyword rsa1 to display the host SSHv1 RSA public key.

Defaults

No default behavior or values

Command Modes

EXEC

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced for S-Series

Version 7.5.1.0 Introduced for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Example

Figure 36-10. show crypto Command Examples

FTOS#show crypto key mypubkey rsa
ssh-rsa AAAAB3NzaClyc2EAAAABIwAAAIEAtzkZME/
e8V8smnXR22EJGQhCMkEOkuisa+OILVoMYU1ZKGfj0W5BPCSvF/
x5ifqYFFwUzJNOcsJK7vjSsnmMhChF2YSvXlvTJ6h971FJAQlOsgd0ycpocsF+DNLKfJnx7SAjhakFQMwG
g/g78ZkDT3Ydr8KKjfSI4Bg/WS8B740=
FTOS#show crypto key mypubkey rsal
1024 35
1310600154808733989532575153972496578500722064442949636740809356830889610203172266
7988956754966765265006379622189779927609278523638839223055081819166009928132616408
6643457746022192295189039929663345791173742247431553750501676929660273790601494434
050000015179864425629613385774919236081771341059533760063913083
FTOS#

Usage Information

This command is useful if the remote SSH client implements Strict Host Key Checking. You can copy the host key to your list of known hosts.

Related Commands

crypto key generate Generate SSH keys.

show ip ssh

Display information about established SSH sessions.

Syntax

show ip ssh

Command Modes

EXEC

EXEC Privilege

Example

Figure 36-11. show ip ssh Command Example

FTOS#show ip ssh
SSH server : enabled.
SSH server version : v1 and v2.
Password Authentication : enabled.
Hostbased Authentication : disabled.
RSA	Authentication : disabled.
Vty	Encryption	Remote IP
0	3DES	172.16.1.162
1	3DES	172.16.1.162
2	3DES	172.16.1.162
FTOS#
FTOS

Related Commands

ip ssh server Configure an SSH server.

show ip ssh client-pub-keys Display the client-public keys.

show ip ssh client-pub-keys

Display the client public keys used in host-based authentication.

Syntax

show ip ssh client-pub-keys

Defaults

No default behavior or values

Command Modes

EXEC

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced for S-Series

Version 7.5.1.0 Introduced for C-Series

pre-Version 6.1.1.0 Introduced for E-Series

Example

Figure 36-12. show ip ssh client-pub-keys Command Example

FTOS#show ip ssh client-pub-keys

poclab4,123.12.1.123 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAox/

QQp8xYhzOxn07yh4VGPAoUfgKoieTHO9G4sNV+ui+DWEc3cgYAcU5Lai1MU2ODrhzCwyDNp05tKBU3tReG1o8AxiLi6+34hyEMqHzkzfBNVqHzpQc+Rs4p2urzV0F4pRKnaXdHf3Lk4D460HZRhhVrxqeNxPDpEnWIMPJi0ds=ashwani@poclab4

FTOS#

Usage Information

This command displays the contents of the file flash://ADMIN_DIRssh/knownhosts

Related Commands

ip ssh pub-key-file Configure the file name for the host-based authentication

show ip ssh rsa-authentication

Display the authorized-keys for the RSA authentication.

Syntax
show ip ssh rsa-authentication {my-authorized-keys}

Parameters	my-authorized-keys	Display the RSA authorized keys.
Defaults	No default behavior or values
Command Modes	EXEC
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.6.1.0 Introduced for S-Series
	Version 7.5.1.0 Introduced for C-Series
	pre-Version 6.1.1.0 Introduced for E-Series

Example

Figure 36-13. show ip ssh rsa-authentication Command Example

FTOS#show ip ssh rsa-authentication my-authorized-keys

ssh-rsa

AAAAB3NzaClyc2EAAAABIwAAAIEAyB17l4gFp4r2DRHIvMc1VZd0Sg5GQxRV1y1X1JOMeO6Nd0WuYyzrQMM

4qJAoBwtneOXfLBcHF3V2hcMIqaZN+CRCnw/

zCMlnCf0+qVTdloofsea5r09kS0xTp0CNfHXZ3NuGCq9Ov33m9+U9tMwhS8vy8AVxdH4x4km3c3t5Jvc=freedom@poclab4

FTOS#

This command displays the contents of the file flash:/ADMIN_DIR/ssh/authorized-keys.username.

Usage Information

Related Commands

ip ssh rsa-authentication (Config) Configure the RSA authorized keys.

ssh

Open an SSH connection specifying the hostname, username, port number and version of the SSH client.

Syntax
ssh {hostname | ipv4 address | ipv6 address} [-l username | -p port-number | -v {1 | 2}]

Parameters
	hostname (OPTIONAL) Enter the IP address or the hostname of the remote device.
	vrf instance (OPTIONAL) E-Series Only: Enter the keyword vrf following by the VRF Instance name to open a SSH connection to that instance.
	ipv4 address (OPTIONAL) Enter the IP address in dotted decimal format A.B.C.D.
	ipv6-address prefix-length (OPTIONAL) Enter the IPv6 address in the X:X:X:X::X format followed by the prefix length in the /X format.Range: /0 to /128Note: The :: notation specifies successive hexadecimal fields of zeros
	-l username (OPTIONAL) Enter the keyword -l followed by the user name used in this SSH session.Default: The user name of the user associated with the terminal.

	-p port-number	(OPTIONAL) Enter the keyword -p followed by the port number. Range: 1 to 65536 Default: 22
	-v {1 | 2}	(OPTIONAL) Enter the keyword -v followed by the SSH version 1 or 2. Default: The version from the protocol negotiation
Defaults	As above.
Command Modes	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.9.1.0 Introduced VRF
	Version 7.6.1.0 Introduced for S-Series
	Version 7.5.1.0 Added IPv6 support; Introduced for C-Series
	pre-Version 6.1.1.0 Introduced for E-Series
Example	Figure 36-14. ssh Command Example
	FTOS#ssh 123.12.1.123 -l ashwani -p 5005 -v 2

Secure DHCP Commands

DHCP as defined by RFC 2131 provides no authentication or security mechanisms. Secure DHCP is a suite of features that protects networks that use dynamic address allocation from spoofing and attacks.

• clear ip dhcp snooping
• ip dhcp relay
• ip dhcp snooping
• ip dhcp snooping database
• ip dhcp snooping binding
• ip dhcp snooping database renew
• ip dhcp snooping trust
• ip dhcp source-address-validation
• ip dhcp snooping vlan
  • show ip dhcp snooping

clear ip dhcp snooping

Clear the DHCP binding table.

Syntax

clear ip dhcp snooping binding

Command Modes

EXEC Privilege

Default

None

Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced on C-Series and S-Series
Related Commands	show ip dhcp snooping Display the contents of the DHCP binding table.

ip dhcp relay
C S Enable Option 82.

Syntax	ip dhcp relay information-option [trust-downstream]
Parameters	trust-downstream	Configure the system to trust Option 82 when it is received from the previous-hop router.
Command Modes	CONFIGURATION
Default	Disabled
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced on C-Series and S-Series

ip dhcp snooping
C S Enable DHCP Snooping globally.

Syntax	[no] ip dhcp snooping
Command Modes	CONFIGURATION
Default	Disabled
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced on C-Series and S-Series
Usage Information	When enabled, no learning takes place until snooping is enabled on a VLAN. Upon disabling DHCP Snooping the binding table is deleted, and Option 82, IP Source Guard, and Dynamic ARP Inspection are disabled.
Related Commands	ip dhcp snooping vlan Enable DHCP Snooping on one or more VLANs.

ip dhcp snooping database
C S Delay writing the binding table for a specified time.
Syntax ip dhcp snooping database write-delay minutes

Parameters	minutes	Range: 5-21600
Command Modes	CONFIGURATION
Default	None
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced on C-Series and S-Series

ip dhcp snooping binding

Create a static entry in the DHCP binding table.

Syntax
[no] ip dhcp snooping binding mac address vlan-id vlan-id ip ip-address interface type slot/port lease number

Parameters	mac address	Enter the keyword mac followed by the MAC address of the host to which the server is leasing the IP address.
	vlan-id vlan-id	Enter the keyword vlan-id followed by the VLAN to which the host belongs. Range: 2-4094
	ip ip-address	Enter the keyword ip followed by the IP address that the server is leasing.
	interface type	Enter the keyword interface followed by the type of interface to which the host is connected.For an 10/100 Ethernet interface, enter the keyword fastethernet.For a Gigabit Ethernet interface, enter the keyword gigabitethernet.For a SONET interface, enter the keyword sonet.For a Ten Gigabit Ethernet interface, enter the keyword tengigabitethernet.
	slot/port	Enter the slot and port number of the interface.
	lease time	Enter the keyword lease followed by the amount of time the IP address will be leased.Range: 1-4294967295
mand Modes	EXEC
	EXEC Privilege
Default	None
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced on C-Series and S-Series
Related Commands	show ip dhcp snooping Display the contents of the DHCP binding table.

ip dhcp snooping database renew

Renew the binding table.

Syntax

ip dhcp snooping database renew

Command Modes

EXEC

EXEC Privilege

Default

None

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced on C-Series and S-Series

ip dhcp snooping trust

Configure an interface as trusted.

Syntax

[no] ip dhcp snooping trust

Command Modes

INTERFACE

Default

Untrusted

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced on C-Series and S-Series

ip dhcp source-address-validation

Enable IP Source Guard.

Syntax

[no] ip dhcp source-address-validation

Command Modes

INTERFACE

Default

Disabled

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced on C-Series and S-Series

ip dhcp snooping vlan

Enable DHCP Snooping on one or more VLANs.

Syntax

[no] ip dhcp snooping vlan name

Parameters	name	Enter the name of a VLAN on which to enable DHCP Snooping.
Command Modes	CONFIGURATION
Default	Disabled
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.8.1.0 Introduced on C-Series and S-Series
Usage Information	When enabled the system begins creating entries in the binding table for the specified VLAN(s). Note that learning only happens if there is a trusted port in the VLAN.
Related Commands	ip dhcp snooping trust	Configure an interface as trusted.

show ip dhcp snooping

Display the contents of the DHCP binding table.

Syntax

show ip dhcp snooping binding

Command Modes

EXEC

EXEC Privilege

Default

None

Command History

Version 8.3.5.0 Introduced on S55

Version 7.8.1.0 Introduced on C-Series and S-Series

Related Commands

clear ip dhcp snooping Clear the contents of the DHCP binding table.

Service Provider Bridging

Overview

Service Provider Bridging is composed of VLAN Stacking, Layer 2 Protocol Tunneling, and Provider Backbone Bridging as described in the FTOS Configuration Guide Service Provider Bridging chapter.

This chapter includes CLI information for FTOS Layer 2 Protocol Tunneling (L2PT). L2PT enables protocols to tunnel through an 802.1q tunnel. L2PT is available in FTOS for the C-Series ☐, E-Series ☐, and S-Series ☐.

L2PT is supported on E-Series ExaScale with FTOS 8.2.1.0. and later.

Refer to Chapter 46, VLAN Stacking or Chapter 42, Spanning Tree Protocol (STP) and Chapter 13, GARP VLAN Registration (GVRP) for further information related to those features.

Commands

The L2PT commands are:

• debug protocol-tunnel
• protocol-tunnel
• protocol-tunnel destination-mac
• protocol-tunnel enable
• protocol-tunnel rate-limit
  • show protocol-tunnel

Important Points to Remember

• L2PT is enabled at the interface VLAN-Stack VLAN level. For details on Stackable VLAN (VLAN-Stacking) commands, see Chapter 46, VLAN Stacking.
• The default behavior is to disable protocol packet tunneling through the 802.1q tunnel.
• Rate-limiting is required to protect against BPDU attacks.
• A port channel (including through LACP) can be configured as a VLAN-Stack access or trunk port.
• ARP packets work as expected across the tunnel.
  • FEFD works the same as with Layer 2 links.
• Protocols that use Multicast MAC addresses (OSPF for example) work as expected and carry over to the other end of the VLAN-Stack VLAN.

debug protocol-tunnel

Syntax	debug protocol-tunnel interface {in | out | both} [vlan vlan-id] [count value]
	To disable debugging, use the no debug protocol-tunnel interface {in | out | both} [vlan vlan-id] [count value] command.
Parameters	interface	Enter one of the following interfaces and slot/port information:For a Fast Ethernet interface, enter the keywordFastEthernetfollowed by the slot/port information.For a 1-Gigabit Ethernet interface, enter the keywordGigabitEthernet followed by the slot/port information.For Port Channel interface types, enter the keywordport-channelfollowed by a number from 1 to 255 for TeraScale and ExaScale.For a SONET interface, enter the keywordsonetfollowed by the slot/port information.For a 10-Gigabit Ethernet interface, enter the keywordTenGigabitEthernet followed by the slot/port information.
	in | out | both	Enter the keywordin, out, or bothto debug incoming interfaces, outgoing interfaces, or both incoming and outgoing interfaces.
	vlan vlan-id	Enter the keywordvlanfollowed by the VLAN ID.Range: 1 to 4094
	count value	Enter the keywordcountfollowed by the number of debug outputs.Range: 1 to 100
Defaults	Debug Disabled
Command Modes	EXEC Privilege
Command History	Version 8.3.5.0 Introduced on S55
	Version 8.2.1.0 Introduced on the C-Series, E-Series and E-Series ExaScale.
	Version 7.4.1.0 Introduced

protocol-tunnel

Syntax	Enable protocol tunneling per VLAN-Stack VLAN.
	protocol-tunnel stp
	To disable protocol tunneling, use the no protocol-tunnel stp command.
Parameters	stp	Enter the keyword stp to enable protocol tunneling on a spanning tree, including STP, MSTP, RSTP, and PVST.
Defaults	No default values or behavior
Command Modes	CONF-IF-VLAN

Command History

Version 8.3.5.0 Introduced on S55

Version 8.2.1.0 Introduced on the C-Series, E-Series and E-Series ExaScale.

Version 7.4.1.0 Introduced

Example

Figure 37-1. Protocol-tunneling Command Example

FTOS#conf
FTOS(conf)#interface vlan 2
FTOS(conf-if-vl-2)#vlan-stack compatible
FTOS(conf-if-vl-2)#member Gi1/2-3
FTOS(conf-if-vl-2)#protocol-tunnel stp
FTOS(conf-if-vl-2)#

Usage Information

Note: When VLAN-Stacking is enabled, no protocol packets are tunneled.

Related Commands

show protocol-tunnel Display tunneling information for all VLANs

protocol-tunnel destination-mac

Overwrite the BPDU destination MAC address with a specific value.

Syntax

protocol-tunnel destination-mac xstp address

Parameters

stp Change the default destination MAC address used for L2PT to another value.

Defaults

The default destination MAC is 01:01:e8:00:00:00.

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on S55

Version 8.2.1.0 Introduced on the C-Series and S-Series.

Version 7.4.1.0 Introduced

Usage Information

When VLAN-Stacking is enabled, no protocol packets are tunneled.

Related Commands

show protocol-tunnel Display tunneling information for all VLANs

protocol-tunnel enable

Enable protocol tunneling globally on the system.

Syntax

protocol-tunnel enable

To disable protocol tunneling, use the no protocol-tunnel enable command.

Defaults

Disabled

Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on S55
	Version 7.4.1.0 Introduced
Usage Information	FTOS must have the default CAM profile with the default microcode before you enable L2PT.

protocol-tunnel rate-limit

C E S	Enable traffic rate limiting per box.
Syntax	protocol-tunnel rate-limit rateTo reset the rate limit to the default, use theno protocol-tunnel rate-limit rate command.
Parameters	rate Enter the rate in frames per second.Range: 75 to 3000Default: 75
Defaults	75 Frames per second
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on S55
	Version 8.2.1.0 Introduced on the C-Series, E-Series Terascale, and E-Series ExaScale. Maximum rate limit on E-Series reduced from 4000 to 3000.
	Version 7.4.1.0 Introduced
Example	Figure 37-2. protocol-tunnel rate-limit Command ExampleFTOS#FTOS#confFTOS (conf) #protocol-tunnel rate-limit 1000FTOS (conf) #
Related Commands	show protocol-tunnel Display tunneling information for all VLANs
	show running-config Display the current configuration.

show protocol-tunnel

C E S	Display protocol tunnel information for all or a specified VLAN-Stack VLAN.
Syntax	show protocol-tunnel [vlan vlan-id]
Parameters	vlan vlan-id	(OPTIONAL) Enter the keyword vlan followed by the VLAN ID to display information for the one VLAN.Range: 1 to 4094

Defaults

No default values or behavior

Command Modes

EXEC

Command History

Version 8.3.5.0 Introduced on S55

Version 8.2.1.0 Introduced on the C-Series, E-Series and E-Series ExaScale.

Version 7.4.1.0 Introduced

Example

Figure 37-3. show protocol-tunnel Command Example

FTOS#show protocol-tunnel
System Rate-Limit: 1000 Frames/second
Interface Vlan Protocol(s)
Gi1/2 2 STP, PVST
Gi1/3 3 STP, PVST
Po35 4 STP, PVST
FTOS#

Example

Figure 37-4. show protocol-tunnel command example for a specific VLAN

FTOS#show protocol-tunnel vlan 2
System Rate-Limit: 1000 Frames/second
Interface Vlan Protocol(s)
Gil/2 2 STP, PVST
FTOS# 

Related Commands

show running-config Display the current configuration.

sFlow

Overview

sFlow commands are supported on these platforms: C E S.

FTOS sFlow monitoring system includes an sFlow Agent and an sFlow Collector. The sFlow Agent combines the flow samples and interface counters into sFlow datagrams and forwards them to the sFlow Collector. The sFlow Collector analyses the sFlow Datagrams received from the different devices and produces a network-wide view of traffic flows.

Important Points to Remember

• Dell Networking recommends that the sFlow Collector be connected to the Dell Networking chassis through a line card port rather than the RPM Management Ethernet port.
• FTOS exports all sFlow packets to the sFlow Collector. A small sampling rate can equate to a large number of exported packets. A backoff mechanism will automatically be applied to reduce this amount. Some sampled packets may be dropped when the exported packet rate is high and the backoff mechanism is about to or is starting to take effect. The dropEvent counter, in the sFlow packet, will always be zero.
• sFlow sampling is done on a per-port basis.
• Community list and local preference fields are not filled up in the extended gateway element in the sFlow datagram.
• The 802.1P source priority field is not filled up in the extended switch element in the sFlow datagram.
• Only Destination and Destination Peer AS numbers are packed in the dst-as-path field in the extended gateway element.
• If the packet being sampled is redirected using PBR (Policy-Based Routing), the sFlow datagram may contain incorrect extended gateway/router information.
• sFlow does not support packing extended information for IPv6 packets. Only the first 128 bytes of the IPv6 packet is shipped in the datagram.
• The source VLAN field in the extended switch element will not be packed in case of a routed packet.
• The destination VLAN field in the extended switch element will not be packed in case of a multicast packet.
• The maximum number of packets that can be sampled and processed per second is:
  — 7500 packets when no extended information packing is enabled
  — 7500 packets when only extended-switch information packing is enabled (see sflow extended-switch enable)
  — 1600 packets when extended-router and/or extended-gateway information packing is enabled (see Figure and sflow extended-gateway enable)
• There is no limit on the number of interfaces where sFlow can be enabled.

Commands

The sFlow commands are:

• sflow collector
• sflow enable (Global)
• sflow enable (Interface)
• sflow extended-gateway enable
• sflow extended-router enable
• sflow extended-switch enable
  • sflow polling-interval (Global)
  • sflow polling-interval (Interface)
• sflow sample-rate (Global)
  • sflow sample-rate (Interface)
  • show sflow
  • show sflow linecard

sflow collector

Specify a collector(s) to which sFlow datagrams are forwarded.

Syntax

sflow collector ip-address agent-addr ip-address [number [max-datagram-size number]] | [max-datagram-size number]

To delete the specified collector(s), use the no sflow collector ip-address agent-addr ip-address [number [max-datagram-size number]] | [max-datagram-size number] command

Parameters

ip-address	Enter the ip address of the collector in dotted decimal format.
agent-addr ip-address	Enter the keyword agent-addr followed by the sFlow agent IP address in dotted decimal format.
number	(OPTIONAL) Enter the udp port number (User Datagram Protocol).Range: 0 to 65535Default: 6343
max-datagram-size number	(OPTIONAL) Enter the keyword max-datagram-size followed by the size number in bytes.Range: 400 to 1500Default: 1400

Defaults

Not configured

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on S55

Version 8.2.1.0 Introduces on S-Series Stacking

Version 8.1.1.0 Introduced on E-Series ExaScale

Usage Information

Version 7.7.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

Version 6.5.1.0 Expanded the no form of the command to mirror the syntax used to configure

Version 6.2.1.1 Introduced on E-Series

You can specify up to 2 sFlow collectors. If 2 collectors are specified, the samples are sent to both.

As part of the sFlow-MIB, if the SNMP request originates from a configured collector, FTOS will return the corresponding configured agent IP in MIB requests. FTOS checks to ensure that two entries are not configured for the same collector IP with a different agent IP. Should that happen, FTOS generates the following error:

%Error: Different agent-addr attempted for an existing collector

Note: When the agent-addr command is executed and a different agent-address has been previously configured, a warning message will display. The command will still be accepted.

sflow enable (Global)

Enable sFlow globally.

Syntax

sflow enable

To disable sFlow, use the no sflow enable command.

Defaults

sFlow is disabled by default

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on S55

Version 8.2.1.0 Introduces on S-Series Stacking

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.7.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

Version 6.2.1.1 Introduced on E-Series

Usage Information

sFlow is disabled by default. In addition to this command, sFlow needs to be enable on individual interfaces where sFlow sampling is desired.

Related Commands

sflow enable (Interface) Enable sFlow on Interfaces.

sflow enable (Interface)

Enable sFlow on Interfaces.

Syntax

sflow enable

To disable sFlow, use the no sflow enable command.

Defaults	sFlow is disabled by default on all interfaces
Command Modes	INTERFACE
Command History	Version 8.3.5.0 Introduced on S55
	Version 8.2.1.0 Introduces on S-Series Stacking
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.7.1.0 Introduced on S-Series
	Version 7.6.1.0 Introduced on C-Series
	Version 6.2.1.1 Introduced on E-Series
Usage Information	When sFlow is enable on an interface, flow sampling is done on any traffic going out of the interface.Note: Once a physical port is a member of a LAG, it will inherit the sFlow configuration from the LAG port.
Related Commands	sflow enable (Global) Turn sFlow on globally

sflow extended-gateway enable

E

Enable packing information on an extended gateway.

Syntax

sflow extended-gateway [extended-router] [extended-switch] enable

To disable packing information, use the no sflow extended-gateway [extended-router] [extended-switch] enable command.

Parameters

extended-router	Enter the keyword extended-router to collect extended router information.
extended-switch	Enter the keyword extended-switch to collect extended switch information.
enable	Enter the keyword enable to enable global extended information.

Defaults

Disabled

Command Modes

CONFIGURATION

Command History

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.4.1.0 Introduced on E-Series

Usage Information

The show sflow command displays the configured global extended information.

FTOS 7.8.1.0 and later enhances the sFlow implementation for real time traffic analysis on the E-Series to provide extended gateway information in cases where the destination IP addresses are learned by different routing protocols, and for cases where the destination is reachable over ECMP.

Example

Figure 38-1. show sflow Command Output

FTOS#show sflow

sFlow services are enabled

Global default sampling rate: 64

Global default counter polling interval: 1000

Global extended information enabled: gateway, router, switch

1 collectors configured

Collector IP addr: 20.20.20.2, Agent IP addr: 10.11.201.7, UDP port: 6343

1732336 UDP packets exported

0 UDP packets dropped

12510225 sFlow samples collected

0 sFlow samples dropped due to sub-sampling

FTOS#

Related Commands

show sflow Display the sFlow configuration

sflow extended-router enable

E

Enable packing information on a router and switch.

Syntax

sflow extended-router [extended-switch] enable

To disable packing information, use the no sflow extended-router [extended-switch] enable command.

Parameters

extended-switch Enter the keyword extended-switch to collect extended switch information.

enable Enter the keyword enable to enable global extended information.

Defaults

Disabled

Command Modes

CONFIGURATION

Command History

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.4.1.0 Introduced on E-Series

Usage Information

FTOS 7.8.1.0 and later enhances the sFlow implementation for real time traffic analysis on the E-Series to provide extended gateway information in cases where the destination IP addresses are learned by different routing protocols, and for cases where the destination is reachable over ECMP.

Related Commands

sflow extended-gateway enable Enable packing information on an extended gateway

sflow extended-switch enable Enable packing information on a switch.

show sflow Display the sFlow configuration

sflow extended-switch enable

C E S

Enable packing information on a switch only.

Syntax

sflow extended-switch enable

To disable packing information, use the no sflow extended-switch [enable] command.

Parameters	enable	Enter the keyword enable to enable global extended information.
Defaults	Disabled
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on S55
	Version 8.2.1.0 Introduces on S-Series Stacking
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.7.1.0 Introduced on S-Series
	Version 7.6.1.0 Introduced on C-Series
	Version 7.4.1.0 Introduced on E-Series
Usage Information	FTOS 7.8.1.0 and later enhances the sFlow implementation for real time traffic analysis on the E-Series to provide extended gateway information in cases where the destination IP addresses are learned by different routing protocols, and for cases where the destination is reachable over ECMP.
Related Commands	sflow extended-gateway enable Enable packing information on an extended gateway.
	sflow extended-router enable Enable packing information on a router.
	show sflow Display the sFlow configuration

sflow polling-interval (Global)

Set the sFlow polling interval at a global level.

Syntax sflow polling-interval interval value

To return to the default, use the no sflow polling-interval interval command.

Parameters	interval value	Enter the interval value in seconds. Range: 15 to 86400 seconds Default: 20 seconds
Defaults	20 seconds
mand Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on S55
	Version 8.2.1.0 Introduces on S-Series Stacking
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.7.1.0 Introduced on S-Series
	Version 7.6.1.0 Introduced on C-Series
	Version 6.2.1.1 Introduced on E-Series
Usage Information	The polling interval for an interface is the maximum number of seconds between successive samples of counters to be sent to the collector. This command changes the global default counter polling (20 seconds) interval. You can configure an interface to use a different polling interval.
Related Commands	sflow polling-interval (Interface) Set the polling interval for an interface

sflow polling-interval (Interface)

Set the sFlow polling interval at an interface (overrides the global-level setting.)

Syntax

sflow polling-interval interval value

To return to the default, use the no sflow polling-interval interval command.

Parameters

interval value

Enter the interval value in seconds.

Range: 15 to 86400 seconds

Default: The global counter polling interval

Defaults

The same value as the current global default counter polling interval

Command Modes

INTERFACE

Command History

Version 8.3.5.0 Introduced on S55

Version 8.2.1.0 Introduces on S-Series Stacking

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.7.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

Version 6.2.1.1 Introduced on E-Series

Usage Information

This command sets the counter polling interval for an interface.

Related Commands

sflow polling-interval (Global) Globally set the polling interval

sflow sample-rate (Global)

Change the global default sampling rate.

Syntax

sflow sample-rate value

To return to the default sampling rate, enter the no sflow sample-rate.

Parameters

value

Enter the sampling rate value.

Range: C-Series and S-Series: 256 to 8388608 packets

E-Series TeraScale and ExaScale: 2 to 8388608

Enter values in powers of 2 only, for example 4096, 8192, 16384 etc.

Default: 32768 packets

Defaults	32768
Command Modes	CONFIGURATION
Command History	Version 8.3.5.0 Introduced on S55
	Version 8.2.1.0 Introduces on S-Series Stacking
	Version 8.1.1.0 Introduced on E-Series ExaScale
	Version 7.7.1.0 Introduced on S-Series
	Version 7.6.1.0 Introduced on C-Series
	Version 6.2.1.1 Introduced on E-Series
Usage Information	Sample-rate is the average number of packets skipped before the sample is taken. This command changes the global default sampling rate. You can configure an interface to use a different sampling rate than the global sampling rate. If the value entered is not a correct power of 2, the command generates an error message with the previous and next power of 2 value. Select one of these two packet numbers and re-enter the command.
Related Commands	sflow sample-rate (Interface) Change the Interface sampling rate.

sflow sample-rate (Interface)

Change the Interface default sampling rate.

Syntax

sflow sample-rate value

To return to the default sampling rate, enter the no sflow sample-rate.

Parameters

value

Enter the sampling rate value.

Range: C-Series and S-Series: 256 to 8388608 packets

E-Series TeraScale and ExaScale: 2 to 8388608 packets

Enter values in powers of 2 only, for example 4096, 8192, 16384 etc.

Default: 32768 packets

Defaults

The Global default sampling

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on S55

Version 8.2.1.0 Introduces on S-Series Stacking

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.7.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

Version 6.2.1.1 Introduced on E-Series

Usage Information

This command changes the sampling rate for an Interface. By default, the sampling rate of an interface is set to the same value as the current global default sampling rate. If the value entered is not a correct power of 2, the command generates an error message with the previous and next power-of-2 value. Select one of these two number and re-enter the command.

Related Commands

sflow sample-rate (Global) Change the sampling rate globally.

show sflow

Display the current sFlow configuration

Syntax

show sflow [interface]

Parameters

interface

(OPTIONAL) Enter the following keywords and slot/port or number information:

- For an 100/1000 Ethernet interface, enter the keyword the slot/port information.

GigabitEthernet followed by

- For a 1-Gigabit Ethernet interface, enter the keyword the slot/port information.

GigabitEthernet followed by

- For a Loopback interface, enter the keyword to 16383.

loopback followed by a number from 0

- For a SONET interface, enter the keyword

sonet followed by the slot/port information.

- For a 10-Gigabit Ethernet interface, enter the keyword followed by the slot/port information.

TenGigabitEthernet

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 8.2.1.0 Introduces on S-Series Stacking

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.7.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

Version 6.2.1.1 Introduced on E-Series

Example

Figure 38-2. show sflow Command Example

FTOS#show sflow
sFlow services are enabled
Global default sampling rate: 32768
Global default counter polling interval: 20
1 collectors configured
Collector IP addr: 133.33.33.53, Agent IP addr: 133.33.33.116, UDP port: 6343
0 UDP packets exported
0 UDP packets dropped
165 sFlow samples collected
0 sFlow samples dropped due to sub-sampling —This count is always zero (0) 

Linecard 1 Port set 0 H/W sampling rate 8192
Gi 1/16: configured rate 8192, actual rate 8192, sub-sampling rate 1
Gi 1/17: configured rate 16384, actual rate 16384, sub-sampling rate 2
Linecard 3 Port set 1 H/W sampling rate 16384
Gi 3/40: configured rate 16384, actual rate 16384, sub-sampling rate 1
FTOS# 

Usage The dropEvent counter (sFlow samples dropped due to sub-sampling) shown in the figure above will always display a value of zero.

show sflow linecard

Display the sFlow information on a line card.

Syntax

show sflow linecard {slot number}

Parameters

slot number (OPTIONAL) Enter a slot number to view information on the line card in that slot. Range: 0 to 13 on a E1200, 0 to 6 on a E600/E600i, and 0 to 5 on a E300.

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 8.2.1.0 Introduces on S-Series Stacking

Version 8.1.1.0 Introduced on E-Series ExaScale

Version 7.7.1.0 Introduced on S-Series

Version 7.6.1.0 Introduced on C-Series

Version 6.2.1.1 Introduced on E-Series

Example

Figure 38-3. show sflow linecard Command Example

FTOS#show sflow linecard 1
Linecard 1
Samples rcvd from h/w :165
Samples dropped for sub-sampling :0
Total UDP packets exported :0
UDP packets exported via RPM :77
UDP packets dropped :
FTOS# 

SNMP and Syslog

Overview

This chapter contains commands to configure and monitor SNMP v1/v2/v3 and Syslog. Both features are supported on the C-Series, E-Series, and S-Series platforms, as indicated by the following symbols under each of the command headings: C E S

The chapter contains the following sections:

• SNMP Commands
• Syslog Commands

SNMP Commands

The SNMP commands available in FTOS are:

• show snmp
• show snmp engineID
• show snmp group
• show snmp user
- snmp ifmib ifalias long
- snmp-server community
- snmp-server contact
- snmp-server enable traps
- snmp-server engineID
- snmp-server group
- snmp-server host
- snmp-server location
- snmp-server packetsize
- snmp-server trap-source
- snmp-server user
- snmp-server view
- snmp trap link-status

The Simple Network Management Protocol (SNMP) is used to communicate management information between the network management stations and the agents in the network elements. FTOS supports SNMP versions 1, 2c, and 3, supporting both read-only and read-write modes. FTOS sends SNMP traps, which are messages informing an SNMP management system about the network. FTOS supports up to 16 SNMP trap receivers.

Important Points to Remember

• Typically, 5-second timeout and 3-second retry values on an SNMP server are sufficient for both LAN and WAN applications. If you experience a timeout with these values, the recommended best practice on Dell Networking switches (to accommodate their high port density) is to increase the timeout and retry values on your SNMP server to the following:

— SNMP Timeout—greater than 3 seconds

— SNMP Retry count—greater than 2 seconds

• If you want to query an E-Series switch using SNMP v1/v2/v3 with an IPv6 address, configure the IPv6 address on a non-management port on the switch.
• If you want to send SNMP v1/v2/v3 traps from an E-Series using an IPv6 address, use a non-management port.
• SNMP v3 informs are not currently supported with IPv6 addresses.
• If you are using ACLs in SNMP v3 configuration, group ACL overrides user ACL if the user is part of that group.
• SNMP operations are not supported on a VLAN.

show snmp

Display the status of SNMP network elements.

Syntax

show snmp

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

E-Series legacy command

Example

Figure 39-1. show snmp Command Example

FTOS#show snmp

32685 SNMP packets input
0 Bad SNMP version errors
0 Unknown community name
0 Illegal operation for community name supplied
0 Encoding errors
96988 Number of requested variables
0 Number of altered variables
31681 Get-request PDUs
968 Get-next PDUs
0 Set-request PDUs
61727 SNMP packets output
0 Too big errors (Maximum packet size 1500)
9 No such name errors
0 Bad values errors
0 General errors
32649 Response PDUs
29078 Trap PDUs 

FTOS#

Related Commands

snmp-server community Enable SNMP and set community string.

show snmp engineID

Display the identification of the local SNMP engine and all remote engines that are configured on the router.

Syntax show snmp engineID

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

E-Series legacy command

Example

Figure 39-2. show snmp engineID Command

FTOS#show snmp engineID
Local SNMP engineID: 0000178B02000001E80214A8
Remote Engine ID	IP-addr	Port
80001F88043132333435	172.31.1.3	5009
80001F88043938373635	172.31.1.3	5008

FTOS#

Related Commands

snmp-server engineID Configure local and remote SNMP engines on the router

show snmp group

Display the group name, security model, status, and storage type of each group.

Syntax show snmp group

Command Modes

EXEC

EXEC Privilege

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

E-Series legacy command

Usage Information

The following example displays a group named ngroup. The ngroup has a security model of version 3 (v3) with authentication (auth), the read and notify name is nview with no write view name specified, and finally the row status is active.

Example

Figure 39-3. show snmp group Command Example

security model: v3 auth writeview: no write view specified

Related Commands

snmp-server group Configure an SNMP server group

show snmp user

Display the information configured on each SNMP user name.

Syntax

show snmp user

Command Modes

EXEC

EXEC Privilege

Example

Figure 39-4. show snmp user Command Example

FTOS#

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

E-Series legacy command

snmp ifmib ifalias long

Display the entire description string through the Interface MIB, which would be truncated otherwise to 63 characters.

Syntax

snmp ifmib ifalias long

Defaults

Interface description truncated beyond 63 characters

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Introduced for S-Series

Version 7.5.1.0 Introduced for C-Series

unknown Introduced for E-Series

Example

Figure 39-5. snmp ifmib ifalias long Command Example

!----command run on host connected to switch: ----!
> snmpwalk -c public 10.10.10.130 .1.3.6.1.2.1.31 | grep -i alias | more
IF-MIB::ifAlias.134530304 = STRING: This is a port connected to Router2. This is a port connected to
IF-MIB::ifAlias.134792448 = STRING:

!----command run on Dell Networking switch: ----!
FTOS#snmp ifmib ifalias long

!----command run on server connected to switch: ----!
> snmpwalk -c public 10.10.10.130 .1.3.6.1.2.1.31 | grep -i alias | more
IF-MIB::ifAlias.134530304 = STRING: This is a port connected to Router2. This is a port connected to Router2. This is a port connected to Router2. This is a port connected to Router2.
IF-MIB::ifAlias.134792448 = STRING: 

snmp-server community

Configure a new community string access for SNMPv1, v2, and v3.

Syntax

snmp-server community community-name {ro | rw} [ipv6 ipv6-access-list-name [ipv6 ipv6-access-list-name | access-list-name | security-name name] | security-name name [ipv6 ipv6-access-list-name | access-list-name | security-name name] | access-list-name [ipv6 ipv6-access-list-name | access-list-name | security-name name]]]

To remove access to a community, use the no snmp-server community community-string {ro | rw} [security-name name [access-list-name | ipv6 access-list-name | access-list-name ipv6 access-list-name]] command.

Parameters

community-name	Enter a text string (up to 20 characters long) to act as a password for SNMP.
ro Enter the keyword ro to specify read-only permission.
rw Enter the keyword rw to specify read-write permission.
ipv6 access-list-name	(Optional) Enter the keyword ipv6 followed by a an IPv6 ACL name (a string up to 16 characters long).
security-name name	(Optional) Enter the keyword security-name followed by the security name as defined by the community MIB.
access-list-name	(Optional) Enter a standard IPv4 access list name (a string up to 16 characters long).

Defaults

No default behavior or values

Command Modes

CONFIGURATION

Command History

Version 8.3.5.0 Introduced on S55

Version 7.6.1.0 Support added for S-Series

Version 7.5.1.0 Support added for C-Series

pre-Ver. 6.2.1.1 Introduced on E-Series